diff --git a/po/bn_IN.po b/po/bn_IN.po index 9124f5659..ce8ea9023 100644 --- a/po/bn_IN.po +++ b/po/bn_IN.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Bengali (India)\n" @@ -18,6 +18,11617 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, c-format +msgid "Out of memory!" +msgstr "" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +msgid "hostname" +msgstr "" + +msgid "IPA Server to use" +msgstr "" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +msgid "password" +msgstr "" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match" +msgid "Passwords do not match!\n" +msgstr "পাসওয়ার্ড দুটি মিলছে না" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +msgid "Imported maps:" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added %(map)s" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +msgid "Vault password" +msgstr "" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +msgid "Change password" +msgstr "" + +msgid "Old vault password" +msgstr "" + +msgid "File containing the old vault password" +msgstr "" + +msgid "New vault password" +msgstr "" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "" + +msgid "Permission" +msgstr "" + +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "" + +msgid "User group ACI grants access to" +msgstr "" + +msgid "Permissions" +msgstr "" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "" + +msgid "Type" +msgstr "" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +msgid "Member of a group" +msgstr "" + +msgid "Filter" +msgstr "" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +msgid "Delete ACI." +msgstr "" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +msgid "New ACI name" +msgstr "" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +msgid "description" +msgstr "" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +msgid "Default users group" +msgstr "" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +msgid "Zone name" +msgstr "" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Record name" +msgstr "" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Record type" +msgstr "ভুল প্রকার" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +msgid "Service" +msgstr "" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +msgid "NS Hostname" +msgstr "" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "User Groups" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Host Groups" +msgstr "" + +msgid "Services" +msgstr "" + +msgid "Service Groups" +msgstr "" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "" + +msgid "HBAC service" +msgstr "" + +msgid "HBAC service description" +msgstr "" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "" + +msgid "Certificate" +msgstr "" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +msgid "hostgroups" +msgstr "" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "" + +msgid "Bind DN" +msgstr "" + +msgid "User container" +msgstr "" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +#, fuzzy +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "Number of plugins loaded" +msgstr "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +msgid "Netgroup description" +msgstr "" + +msgid "NIS domain name" +msgstr "" + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +msgid "Member Hostgroup" +msgstr "" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Bind rule type" +msgstr "ভুল প্রকার" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +msgid "permission" +msgstr "" + +msgid "permissions" +msgstr "" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +msgid "Server" +msgstr "" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal" +msgstr "" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "Commands" +msgstr "" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +#| msgid "%(count)d variables" +msgid "Account disabled" +msgstr "%(count)d ভেরিয়াবেল" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "minimum serial number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "maximum serial number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +msgid "Sudo Allow Commands" +msgstr "" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "ACL name" +msgstr "" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +msgid "Vault description" +msgstr "" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +msgid "Owner groups" +msgstr "" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +msgid "Transport Certificate" +msgstr "" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +msgid "owner group" +msgstr "" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d ভেরিয়াবেল" + #, python-format msgid "%(count)d plugin loaded" msgid_plural "%(count)d plugins loaded" @@ -25,28 +11636,11884 @@ msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" #, python-format -msgid "%(count)d variables" -msgstr "%(count)d ভেরিয়াবেল" +msgid "Enter %(label)s again to verify: " +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords do not match!" +msgstr "পাসওয়ার্ড দুটি মিলছে না" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +msgid "Topic commands:" +msgstr "" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "পাসওয়ার্ড দুটি মিলছে না" + +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +#, fuzzy +#| msgid "This is already a posix group" +msgid "This entry is already a member" +msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(info)s" +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" + +msgid "limits exceeded for this query" +msgstr "" #, python-format msgid "%(info)s" msgstr "%(info)s" -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" +msgid "modifying primary key is not allowed" +msgstr "" -msgid "Only one value is allowed" +#, fuzzy, python-format +#| msgid "Only one value is allowed" +msgid "%(attr)s: Only one value allowed." msgstr "কেবলমাত্র একটি মান অনুমদিত" -msgid "Passwords do not match" -msgstr "পাসওয়ার্ড দুটি মিলছে না" +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" -msgid "This is already a posix group" -msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" msgid "incorrect type" msgstr "ভুল প্রকার" +msgid "Only one value is allowed" +msgstr "কেবলমাত্র একটি মান অনুমদিত" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be an integer" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, fuzzy, python-format +#| msgid "must be a decimal number" +msgid "must be at least %(minvalue)d" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + msgid "must be a decimal number" msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, fuzzy, python-format +#| msgid "must be a decimal number" +msgid "must be at least %(minvalue)s" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be a certificate" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "must be '%(value)s'" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be datetime value" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be DNS name" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be absolute" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "must be relative" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be dictionary" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified automount map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified automount key \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "কেবলমাত্র একটি মান অনুমদিত" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Removed system permission \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted record \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Changed password for \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be at least 10" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "privileged group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified permission \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Created CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +#| msgid "Added user \"%(value)s\"" +msgid "Add custom value" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +msgid "Common Name" +msgstr "" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Maximum serial number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Minimum serial number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Group Options" +msgstr "" + +msgid "Search Options" +msgstr "" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +msgid "Service Options" +msgstr "" + +msgid "User Options" +msgstr "" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +msgid "Permission settings" +msgstr "" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +msgid "Server Roles" +msgstr "" + +msgid "Server Role" +msgstr "" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "" + +msgid "Service Settings" +msgstr "" + +msgid "Provisioning" +msgstr "" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +msgid "Any Command" +msgstr "" + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +msgid "Service Vaults" +msgstr "" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "পাসওয়ার্ড দুটি মিলছে না" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a decimal number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "Format error" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be an integer" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a positive number" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +msgid "IPA Servers" +msgstr "" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d ভেরিয়াবেল" +msgstr[1] "%(count)d ভেরিয়াবেল" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled service \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "%(count)d plugin loaded" +#| msgid_plural "%(count)d plugins loaded" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" +msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "must be at least 1" +msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/ca.po b/po/ca.po index 648852884..d90d54101 100644 --- a/po/ca.po +++ b/po/ca.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Catalan\n" @@ -14,224 +14,19409 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid "Access Denied" -msgstr "S'ha denegat l'accés" +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "Out of memory!\n" +msgstr "Sense memòria\n" -msgid "Access Granted" -msgstr "Accés permès" +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" -msgid "Access time" -msgstr "Temps d'accés" +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" -msgid "Account" -msgstr "Compte" +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" -msgid "Account Settings" -msgstr "Paràmetres dels comptes" +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "Out of memory!" +msgstr "Sense memòria\n" -msgid "Actions" -msgstr "Accions" +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" -msgid "Active Directory domain" -msgstr "Domini d'Active Directory" +msgid "SASL Bind failed\n" +msgstr "" -msgid "Add" -msgstr "Afegeix-ho" +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" -msgid "Affiliation Changed" -msgstr "L'afiliació ha canviat" +#, c-format +msgid "No values for %s" +msgstr "" -msgid "Algorithm" -msgstr "Algorisme" +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" -msgid "Allow" -msgstr "Permet" +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" -msgid "Anyone" -msgstr "Qualsevol" +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" -msgid "Apply" -msgstr "Aplica" +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" -msgid "Attribute" -msgstr "Atribut" +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" -msgid "Attributes" -msgstr "Atributs" +#, c-format +msgid "Host is already joined.\n" +msgstr "" -msgid "Available" -msgstr "Disponible" +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" -msgid "Back" -msgstr "Enrere" +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" -msgid "CA Compromise" -msgstr "CA en compromís" +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" -msgid "Cancel" -msgstr "Cancel·la" +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" -msgid "Certificate" -msgstr "Certificat" +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" -msgid "Certificate Hold" -msgstr "Retenció del certificat" +#, c-format +msgid "json_dumps() failed\n" +msgstr "" -msgid "Certificates" -msgstr "Certificats" +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" -msgid "Cessation of Operation" -msgstr "Cessació de l'operació" +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" -msgid "City" -msgstr "Ciutat" +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" -msgid "Class" -msgstr "Classe" +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" -msgid "Close" -msgstr "Tanca" +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" -msgid "Command not implemented" -msgstr "No s'ha implementat l'ordre" +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" -msgid "Commands" -msgstr "Ordres" +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" -msgid "Common Name" -msgstr "Nom comú" +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" -msgid "Configuration" -msgstr "Configuració" +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" -msgid "Confirmation" -msgstr "Confirmació" +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" -msgid "Continue" -msgstr "Continua" +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" -msgid "DNS" -msgstr "DNS" +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" -msgid "Data" -msgstr "Dades" +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "hostname" +msgstr "Nom de l'ordinador" + +msgid "IPA Server to use" +msgstr "" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "nomdelfitxer" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +msgid "password" +msgstr "contrasenya" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" msgid "Debugging output" msgstr "Sortida de depuració" -msgid "Delete" +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Realm name" +msgstr "Canvia el nom" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "out of memory\n" +msgstr "Sense memòria\n" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "Out of memory \n" +msgstr "Sense memòria\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "Out of Memory!\n" +msgstr "Sense memòria\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match" +msgid "Passwords do not match!\n" +msgstr "Les contrasenyes no coincideixen" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "Nom del servidor" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "LDAP password" +msgstr "contrasenya" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "IPA CA certificate" +msgstr "Certificat" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "Enter LDAP password" +msgstr "Contrasenya nova" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New Principal Password" +msgstr "Contrasenya nova" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +#, fuzzy +#| msgid "Show details" +msgid "Servers details:" +msgstr "Mostra els detalls" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete a user" msgstr "Suprimeix" -msgid "Description" -msgstr "Descripció" +msgid "preserve and no-preserve cannot be both set" +msgstr "" -msgid "Disable" -msgstr "Inhabilita" +msgid "Write certificate (chain if --chain used) to file" +msgstr "" -msgid "Disabled" -msgstr "Inhabilitat" +msgid "Split DNS record to parts" +msgstr "" -msgid "Domain" -msgstr "Domini" +msgid "Please choose a type of DNS resource record to be added" +msgstr "" -msgid "Edit" -msgstr "Edita" +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" -msgid "Email address" -msgstr "Adreça de correu electrònic" +msgid "DNS resource record type" +msgstr "" -msgid "Enable" -msgstr "Habilita" +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" -msgid "Enabled" -msgstr "S'ha habilitat" +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete all?" +msgstr "Suprimeix" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +#| msgid "User" +msgid "User ID" +msgstr "Usuari" + +msgid "Password" +msgstr "Contrasenya" + +#, fuzzy +#| msgid "First name" +msgid "First Code" +msgstr "Nom" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "Credencials no vàlides" + +msgid "Create a new vault." +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Vault password" +msgstr "contrasenya" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Change password" +msgstr "contrasenya" + +#, fuzzy +#| msgid "password" +msgid "Old vault password" +msgstr "contrasenya" + +msgid "File containing the old vault password" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New vault password" +msgstr "Contrasenya nova" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "Dades" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +#, fuzzy +#| msgid "Revoked" +msgid "Unrevoked" +msgstr "Revocat" msgid "Error" msgstr "Error" -msgid "Exclusive" -msgstr "Exclusiu" +#, fuzzy +#| msgid "filename" +msgid "Input filename" +msgstr "nomdelfitxer" -msgid "Expires On" -msgstr "Data de venciment" +msgid "File to load the certificate from." +msgstr "" -msgid "Expression" -msgstr "Expressió" +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" -msgid "External" -msgstr "Extern" +msgid "ACI name" +msgstr "" -msgid "False" -msgstr "Fals" +msgid "Permission" +msgstr "Permís" -msgid "Fax Number" -msgstr "Número de fax" +msgid "Permission ACI grants access to" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "User group" +msgstr "grup" + +msgid "User group ACI grants access to" +msgstr "" + +msgid "Permissions" +msgstr "Permisos" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "Atributs" + +msgid "Type" +msgstr "Tipus" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +msgid "Member of a group" +msgstr "" msgid "Filter" msgstr "Filtre" -msgid "Find" -msgstr "Cerca" +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" -msgid "Fingerprint" -msgstr "Empremta" +msgid "Subtree" +msgstr "Subarbre" -msgid "Fingerprints" -msgstr "Empremtes digitals" +msgid "Subtree to apply ACI to" +msgstr "" -msgid "First name" -msgstr "Nom" +#, fuzzy +#| msgid "Target" +msgid "Target group" +msgstr "Objectiu" -msgid "Flags" -msgstr "Indicadors" +msgid "Group to apply ACI to" +msgstr "" -msgid "Force" -msgstr "Força" +msgid "Target your own entry (self)" +msgstr "" -msgid "Full name" -msgstr "Nom complet" +msgid "Apply ACI to your own entry (self)" +msgstr "" -msgid "General" -msgstr "General" +msgid "Create new ACI." +msgstr "" -msgid "Group" -msgstr "Grup" +msgid "ACI prefix" +msgstr "" -msgid "Group name" -msgstr "Nom del grup" +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" -msgid "Groups" -msgstr "Grups" +msgid "Test the ACI syntax but don't write anything" +msgstr "" -msgid "Home directory" +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete ACI." +msgstr "Suprimeix" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Rename an ACI." +msgstr "Canvia el nom" + +msgid "New ACI name" +msgstr "" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "Tecla" + +msgid "Automount key name." +msgstr "" + +#, fuzzy +#| msgid "Confirmation" +msgid "Mount information" +msgstr "Confirmació" + +msgid "description" +msgstr "descripció" + +msgid "Location" +msgstr "Ubicació" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "Mapa" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "Descripció" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "Drets" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +#, fuzzy +#| msgid "Confirmation" +msgid "New mount information" +msgstr "Confirmació" + +msgid "Rename" +msgstr "Canvia el nom" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "Punt de muntatge" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "Home directory base" msgstr "Directori de l'usuari" -msgid "Host" -msgstr "Ordinador central" +msgid "Default location of home directories" +msgstr "" -msgid "Host Name" -msgstr "Nom de l'ordinador" +msgid "Default shell" +msgstr "" -msgid "Host name" +msgid "Default shell for new users" +msgstr "" + +msgid "Default users group" +msgstr "" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Subject base" +msgstr "Certificats" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Host name" +msgid "Zone name" msgstr "Nom de l'amfitrió" -msgid "Hostname" -msgstr "Nom de l'ordinador" +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +#, fuzzy +#| msgid "Actions" +msgid "Active zone" +msgstr "Accions" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Record Type" +msgid "Record name" +msgstr "Tipus de registre" + +#, fuzzy +#| msgid "Time now" +msgid "Time to live" +msgstr "L'hora actual" + +#, fuzzy +#| msgid "Record Type" +msgid "Records" +msgstr "Tipus de registre" + +#, fuzzy +#| msgid "Record Type" +msgid "Record type" +msgstr "Tipus de registre" + +#, fuzzy +#| msgid "Record Type" +msgid "Record data" +msgstr "Tipus de registre" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +#, fuzzy +#| msgid "IP Address" +msgid "A IP Address" +msgstr "Adreça IP" msgid "IP Address" msgstr "Adreça IP" -msgid "Identity" -msgstr "Identitat" +msgid "A Create reverse" +msgstr "" -msgid "Identity Settings" -msgstr "Paràmetres de la identitat" +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +#, fuzzy +#| msgid "IP Address" +msgid "AAAA IP Address" +msgstr "Adreça IP" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +#, fuzzy +#| msgid "Subtype" +msgid "AFSDB Subtype" +msgstr "Subtipus" + +msgid "Subtype" +msgstr "Subtipus" + +#, fuzzy +#| msgid "Hostname" +msgid "AFSDB Hostname" +msgstr "Nom de l'ordinador" + +msgid "Hostname" +msgstr "Nom de l'ordinador" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate Type" +msgstr "Certificat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Type" +msgstr "Certificat" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "CERT Algorithm" +msgstr "Algorisme" + +msgid "Algorithm" +msgstr "Algorisme" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate/CRL" +msgstr "Certificat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate/CRL" +msgstr "Certificat" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "CNAME Hostname" +msgstr "Nom de l'ordinador" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "DLV Algorithm" +msgstr "Algorisme" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "DNAME Target" +msgstr "Objectiu" + +msgid "Target" +msgstr "Objectiu" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "DS Algorithm" +msgstr "Algorisme" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +#, fuzzy +#| msgid "Size" +msgid "LOC Size" +msgstr "Mida" + +msgid "Size" +msgstr "Mida" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +#, fuzzy +#| msgid "Flags" +msgid "NAPTR Flags" +msgstr "Indicadors" + +msgid "Flags" +msgstr "Indicadors" + +#, fuzzy +#| msgid "Services" +msgid "NAPTR Service" +msgstr "Serveis" + +#, fuzzy +#| msgid "Services" +msgid "Service" +msgstr "Serveis" + +#, fuzzy +#| msgid "Regular Expression" +msgid "NAPTR Regular Expression" +msgstr "Expressió regular" + +msgid "Regular Expression" +msgstr "Expressió regular" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "NS Hostname" +msgstr "Nom de l'ordinador" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "PTR Hostname" +msgstr "Nom de l'ordinador" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +#, fuzzy +#| msgid "Record Type" +msgid "RP record" +msgstr "Tipus de registre" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +#, fuzzy +#| msgid "Priority" +msgid "SRV Priority" +msgstr "Prioritat" + +msgid "Priority" +msgstr "Prioritat" + +#, fuzzy +#| msgid "Weight" +msgid "SRV Weight" +msgstr "Pes" + +msgid "Weight" +msgstr "Pes" + +#, fuzzy +#| msgid "Port" +msgid "SRV Port" +msgstr "Port" + +msgid "Port" +msgstr "Port" + +#, fuzzy +#| msgid "Target" +msgid "SRV Target" +msgstr "Objectiu" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "SSHFP Algorithm" +msgstr "Algorisme" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSHFP Fingerprint Type" +msgstr "Empremta digital SHA1" + +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint Type" +msgstr "Empremta" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSHFP Fingerprint" +msgstr "Empremta digital SHA1" + +msgid "Fingerprint" +msgstr "Empremta" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "TLSA Certificate Usage" +msgstr "Certificats" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Usage" +msgstr "Certificats" + +msgid "TLSA Selector" +msgstr "" + +#, fuzzy +#| msgid "Select All" +msgid "Selector" +msgstr "Selecciona-ho tot" + +msgid "TLSA Matching Type" +msgstr "" + +#, fuzzy +#| msgid "Matched" +msgid "Matching Type" +msgstr "Coincideix" + +msgid "TLSA Certificate Association Data" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Association Data" +msgstr "Certificats" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +#, fuzzy +#| msgid "Data" +msgid "Text Data" +msgstr "Dades" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "SOA record serial number" +msgstr "Número de sèrie" + +#, fuzzy +#| msgid "Refresh" +msgid "SOA refresh" +msgstr "Refresca" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +#, fuzzy +#| msgid "Allow" +msgid "Allow query" +msgstr "Permet" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission value" +msgstr "Permís" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "Força" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Rule name" +msgstr "Canvia el nom" + +#, fuzzy +#| msgid "Subtype" +msgid "Rule type" +msgstr "Subtipus" + +msgid "Rule type (allow)" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User category" +msgstr "Nom d'usuari" + +msgid "User category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Host category" +msgstr "Nom de l'ordinador" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "S'ha habilitat" + +msgid "Users" +msgstr "Usuaris" + +#, fuzzy +#| msgid "Groups" +msgid "User Groups" +msgstr "Grups" + +#, fuzzy +#| msgid "Host" +msgid "Hosts" +msgstr "Ordinador central" + +#, fuzzy +#| msgid "Groups" +msgid "Host Groups" +msgstr "Grups" + +msgid "Services" +msgstr "Serveis" + +#, fuzzy +#| msgid "Services" +msgid "Service Groups" +msgstr "Serveis" + +#, fuzzy +#| msgid "External" +msgid "External host" +msgstr "Extern" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Service name" +msgstr "Nom del servidor" + +#, fuzzy +#| msgid "services" +msgid "HBAC service" +msgstr "serveis" + +#, fuzzy +#| msgid "description" +msgid "HBAC service description" +msgstr "descripció" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Service group name" +msgstr "Nom de grup de xarxa" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "Nom de l'amfitrió" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "Localitat" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "Plataforma" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "Sistema operatiu" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "User password" +msgstr "contrasenya" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Random password" +msgstr "contrasenya" + +msgid "Certificate" +msgstr "Certificat" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "MAC address" +msgstr "Adreça de correu electrònic" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "Classe" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +#, fuzzy +#| msgid "Role" +msgid "Roles" +msgstr "Rol" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +#, fuzzy +#| msgid "Manager" +msgid "Managed by" +msgstr "Gestor" + +#, fuzzy +#| msgid "Manager" +msgid "Managing" +msgstr "Gestor" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete a host." +msgstr "Suprimeix" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "host group" +msgstr "grup" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "netgroup" +msgstr "grup" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "usuari" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "Host-group" +msgstr "grup" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "Nom del grup" + +#, fuzzy +#| msgid "UID" +msgid "GID" +msgstr "UID" + +#, fuzzy +#| msgid "Group name" +msgid "Group ID Number" +msgstr "Nom del grup" + +msgid "User login" +msgstr "Entrada" + +msgid "UID" +msgstr "UID" + +#, fuzzy +#| msgid "Pager Number" +msgid "User ID Number" +msgstr "Número de buscapersones" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "Directori de l'usuari" + +msgid "Login shell" +msgstr "Shell d'inici de sessió" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "hostgroups" +msgstr "grup" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "Nom d'usuari" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "bind password" +msgstr "contrasenya" + +msgid "Bind DN" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User container" +msgstr "Nom d'usuari" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Group container" +msgstr "Nom del grup" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "Continua" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CA certificate" +msgstr "Certificat" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "Nom de grup de xarxa" + +#, fuzzy +#| msgid "description" +msgid "Netgroup description" +msgstr "descripció" + +msgid "NIS domain name" +msgstr "" + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +msgid "Member Hostgroup" +msgstr "" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "netgroups to add" +msgstr "Nom de grup de xarxa" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "grup" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "netgroups to remove" +msgstr "Nom de grup de xarxa" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "Set a user's password." +msgstr "Reinicia la contrasenya" + +msgid "New Password" +msgstr "Contrasenya nova" + +#, fuzzy +#| msgid "Reset Password" +msgid "Current Password" +msgstr "Reinicia la contrasenya" + +msgid "OTP" +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "One Time Password" +msgstr "Reinicia la contrasenya" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission name" +msgstr "Permís" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Effective attributes" +msgstr "Atributs" + +msgid "All attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Included attributes" +msgstr "Atributs" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Excluded attributes" +msgstr "Atributs" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Default attributes" +msgstr "Atributs" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +msgid "Bind rule type" +msgstr "" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Target DN" +msgstr "Objectiu" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "Add a new permission." +msgstr "permisos" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission flags" +msgstr "Permisos" + +#, fuzzy +#| msgid "permissions" +msgid "Delete a permission." +msgstr "permisos" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "Search for permissions." +msgstr "permisos" + +#, fuzzy +#| msgid "permissions" +msgid "Modify a permission." +msgstr "permisos" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Privilege name" +msgstr "nomdelfitxer" + +#, fuzzy +#| msgid "description" +msgid "Privilege description" +msgstr "descripció" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "permission" +msgstr "permisos" + +msgid "permissions" +msgstr "permisos" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "Grup" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Lockout duration" +msgstr "Ubicació" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "Usuari" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +msgid "Server" +msgstr "Servidor" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +#, fuzzy +#| msgid "Time now" +msgid "Timeout" +msgstr "L'hora actual" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +#, fuzzy +#| msgid "Retry" +msgid "Retries" +msgstr "Reintent" + +msgid "The number of times to retry authentication" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "User attribute" +msgstr "Atribut" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "Domini" + +#, fuzzy +#| msgid "Domain" +msgid "Add domain" +msgstr "Domini" + +#, fuzzy +#| msgid "Delete" +msgid "Delete domain" +msgstr "Suprimeix" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Role name" +msgstr "Canvia el nom" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Privileges" +msgstr "" + +#, fuzzy +#| msgid "services" +msgid "Member services" +msgstr "serveis" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +#, fuzzy +#| msgid "services" +msgid "member service" +msgstr "serveis" + +#, fuzzy +#| msgid "services" +msgid "services to add" +msgstr "serveis" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete a role." +msgstr "Suprimeix" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +#, fuzzy +#| msgid "services" +msgid "services to remove" +msgstr "serveis" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "Self-service name" +msgstr "Nom d'usuari" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal" +msgstr "" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Sudo Command" +msgstr "Ordres" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Group description" +msgstr "descripció" + +msgid "Commands" +msgstr "Ordres" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Nom" + +msgid "Last name" +msgstr "Cognom" + +msgid "Full name" +msgstr "Nom complet" + +#, fuzzy +#| msgid "First name" +msgid "Display name" +msgstr "Nom" msgid "Initials" msgstr "Inicials" -msgid "Invalid credentials" -msgstr "Credencials no vàlides" +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "Adreça de correu electrònic" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "Ciutat" + +msgid "State/Province" +msgstr "Estat/província" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "Número de telèfon" + +#, fuzzy +#| msgid "Telephone Number" +msgid "Mobile Telephone Number" +msgstr "Número de telèfon" + +msgid "Pager Number" +msgstr "Número de buscapersones" + +msgid "Fax Number" +msgstr "Número de fax" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "Càrrec" + +msgid "Manager" +msgstr "Gestor" + +msgid "Car License" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Account disabled" +msgstr "Paràmetres dels comptes" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "RADIUS proxy configuration" +msgstr "Configuració" + +msgid "RADIUS proxy username" +msgstr "" + +#, fuzzy +#| msgid "Pager Number" +msgid "Department Number" +msgstr "Número de buscapersones" + +#, fuzzy +#| msgid "Telephone Number" +msgid "Employee Number" +msgstr "Número de telèfon" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete a user." +msgstr "Suprimeix" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "Ell mateix" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Grouping Type" +msgstr "Nom del grup" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +#, fuzzy +#| msgid "Exclusive" +msgid "Exclusive Regex" +msgstr "Exclusiu" + +#, fuzzy +#| msgid "Attribute" +msgid "Attribute Key" +msgstr "Atribut" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Raó" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "minimum serial number" +msgstr "Número de sèrie" + +#, fuzzy +#| msgid "Serial number" +msgid "maximum serial number" +msgstr "Número de sèrie" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "Número de sèrie" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Revoke a certificate." +msgstr "Certificat" + +msgid "Retrieve an existing certificate." +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Output filename" +msgstr "nomdelfitxer" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +#, fuzzy +#| msgid "External" +msgid "External member" +msgstr "Extern" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete group." +msgstr "Suprimeix" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Target host" +msgstr "Objectiu" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "Avís" + +#, fuzzy +#| msgid "Matched" +msgid "Matched rules" +msgstr "Coincideix" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "NetBIOS name" +msgstr "Nom de grup de xarxa" + +#, fuzzy +#| msgid "Domain" +msgid "Domain GUID" +msgstr "Domini" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "Domain name" +msgstr "Domini" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain administrator" +msgstr "Domini d'Active Directory" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain administrator's password" +msgstr "Domini d'Active Directory" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Range name" +msgstr "Canvia el nom" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "Inhabilitat" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +#, fuzzy +#| msgid "Validity" +msgid "Validity start" +msgstr "Validesa" + +msgid "First date/time the token can be used" +msgstr "" + +#, fuzzy +#| msgid "Validity" +msgid "Validity end" +msgstr "Validesa" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +#| msgid "Serial Number" +msgid "Serial" +msgstr "Número de sèrie" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +#, fuzzy +#| msgid "External" +msgid "External User" +msgstr "Extern" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Host Masks" +msgstr "Nom de l'ordinador" + +msgid "Sudo Allow Commands" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Sudo Deny Commands" +msgstr "Ordres" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "RunAs Users" +msgstr "Usuaris" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "RunAs Groups" +msgstr "Grups" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Options" +msgid "Sudo Option" +msgstr "Opcions" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "ACL name" +msgstr "Cognom" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "member Certificate Profile" +msgstr "Retenció del certificat" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Profiles to add" +msgstr "Retenció del certificat" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Profiles to remove" +msgstr "Retenció del certificat" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "Domain Level" +msgstr "Domini" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +#, fuzzy +#| msgid "Search" +msgid "Search scope" +msgstr "Cerca" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server name" +msgstr "Nom del servidor" + +#, fuzzy +#| msgid "Server Name" +msgid "IPA server hostname" +msgstr "Nom del servidor" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Allowed Target" +msgstr "Objectiu" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +#, fuzzy +#| msgid "Rights" +msgid "Right node" +msgstr "Drets" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to strip" +msgstr "Atributs" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to replicate" +msgstr "Atributs" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Session timeout" +msgstr "Temps d'accés" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Suffix name" +msgstr "nomdelfitxer" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Vault name" +msgstr "Cognom" + +#, fuzzy +#| msgid "description" +msgid "Vault description" +msgstr "descripció" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "Owner users" +msgstr "usuaris" + +msgid "Owner groups" +msgstr "" + +#, fuzzy +#| msgid "services" +msgid "Owner services" +msgstr "serveis" + +#, fuzzy +#| msgid "services" +msgid "Vault service" +msgstr "serveis" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Transport Certificate" +msgstr "Certificat" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "owner group" +msgstr "grup" + +#, fuzzy +#| msgid "services" +msgid "owner service" +msgstr "serveis" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Show vault configuration." +msgstr "Configuració" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Profile to use" +msgstr "Retenció del certificat" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Profile description" +msgstr "descripció" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Delete a Certificate Profile." +msgstr "Retenció del certificat" + +msgid "Search for Certificate Profiles." +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Import a Certificate Profile." +msgstr "Retenció del certificat" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "Hostname (FQDN)" +msgstr "Nom de l'ordinador" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Remote server name" +msgstr "Nom del servidor" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +#, fuzzy +#| msgid "Flags" +msgid "KEY Flags" +msgstr "Indicadors" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "KEY Algorithm" +msgstr "Algorisme" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "Tipus" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "RRSIG Algorithm" +msgstr "Algorisme" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Signer's Name" +msgstr "Nom del servidor" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "SIG Algorithm" +msgstr "Algorisme" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "No s'ha implementat l'ordre" + +#, fuzzy +#| msgid "Identity" +msgid "Quantity" +msgstr "Identitat" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "Nom d'usuari" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "No s'ha implementat l'ordre" + +#, fuzzy +#| msgid "Reset Password" +msgid "Registration password" +msgstr "Reinicia la contrasenya" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission type" +msgstr "Permís" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active directory domain administrator's password" +msgstr "Domini d'Active Directory" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords do not match!" +msgstr "Les contrasenyes no coincideixen" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Topic commands:" +msgstr "Ordres" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +#, fuzzy +#| msgid "Common Name" +msgid "Command name" +msgstr "Nom comú" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "Les contrasenyes no coincideixen" + +msgid "Command not implemented" +msgstr "No s'ha implementat l'ordre" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Reason" +msgid "%(reason)s" +msgstr "Raó" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +#| msgid "Options" +msgid "%(exception)s" +msgstr "Opcions" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "must be a certificate" +msgstr "Certificat" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "must be dictionary" +msgstr "Directori de l'usuari" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Automount Location" +msgstr "Ubicació" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Profile" +msgstr "Retenció del certificat" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Profiles" +msgstr "Retenció del certificat" + +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Configuració" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, fuzzy, python-format +#| msgid "services" +msgid "%i services added." +msgstr "serveis" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, fuzzy, python-format +#| msgid "Record Type" +msgid "%s Record" +msgstr "Tipus de registre" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +#, fuzzy +#| msgid "Priority" +msgid "Priority (order)" +msgstr "Prioritat" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "Managedby permission" +msgstr "permisos" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "DNS configuration options" +msgstr "Configuració" + +#, fuzzy +#| msgid "Configuration" +msgid "DNS Global Configuration" +msgstr "Configuració" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Configuració" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "DNS server" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server" +msgid "DNS servers" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server" +msgid "DNS Servers" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server" +msgid "DNS Server" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server Name" +msgid "DNS Server name" +msgstr "Nom del servidor" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "services" +msgid "HBAC services" +msgstr "serveis" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "Serveis" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Service" +msgstr "Serveis" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "Stage Users" +msgstr "Usuaris" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "stage users" +msgstr "usuaris" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "host groups" +msgstr "grup" + +#, fuzzy +#| msgid "Group" +msgid "Host Group" +msgstr "Grup" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "hostgroup" +msgstr "grup" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +#, fuzzy +#| msgid "Continue" +msgid "Vault Container" +msgstr "Continua" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Configuració" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "netgroups" +msgstr "grup" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Netgroups" +msgstr "Nom de grup de xarxa" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "grup" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Configuració" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Configuració" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Número de sèrie" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "RADIUS Servers" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server" +msgid "RADIUS Server" +msgstr "Servidor" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Configuració" + +msgid "Configuration" +msgstr "Configuració" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "groups" +msgstr "grup" + +#, fuzzy +#| msgid "Group" +msgid "User Group" +msgstr "Grup" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Permissions\n" +msgstr "Permisos" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "" +"\n" +"Managed permissions\n" +msgstr "permisos" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Rules" +msgid "Sudo Rules" +msgstr "Regles" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "usuaris" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Ordres" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Ordres" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "runAs users" +msgstr "usuaris" + +#, fuzzy +#| msgid "group" +msgid "group runAs" +msgstr "grup" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "sudo command" +msgstr "Ordres" + +#, fuzzy +#| msgid "Commands" +msgid "sudo commands" +msgstr "Ordres" + +#, fuzzy +#| msgid "Commands" +msgid "Sudo Commands" +msgstr "Ordres" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "Realm Domains" +msgstr "Domini" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Actions" +msgid "" +"\n" +"IPA locations\n" +msgstr "Accions" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Ubicació" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Ubicació" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Ubicació" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Ubicació" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Ubicació" + +msgid "IPA location name" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "IPA Location description" +msgstr "descripció" + +#, fuzzy +#| msgid "Server" +msgid "Servers" +msgstr "Servidor" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "IPA Server" +msgstr "Servidor" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Nom de l'ordinador" + +#, fuzzy +#| msgid "Location" +msgid "Documentation" +msgstr "Ubicació" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Permís" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Method name" +msgstr "Nom de grup de xarxa" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "CLI name" +msgstr "Cognom" + +#, fuzzy +#| msgid "password" +msgid "Confirm (password)" +msgstr "contrasenya" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +#, fuzzy +#| msgid "Options" +msgid "Option group" +msgstr "Opcions" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain range" +msgstr "Domini d'Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "self service permissions" +msgstr "permisos" + +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Permisos" + +#, fuzzy +#| msgid "Permission" +msgid "Self Service Permission" +msgstr "Permís" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "server role" +msgstr "Nom del servidor" + +#, fuzzy +#| msgid "Server Name" +msgid "server roles" +msgstr "Nom del servidor" + +msgid "IPA Server Roles" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "IPA Server Role" +msgstr "Nom del servidor" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "IPA role name" +msgstr "Nom del grup" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Sense especificar" + +#, fuzzy +#| msgid "Key Compromise" +msgid " * 1 - keyCompromise\n" +msgstr "Clau en compromís" + +#, fuzzy +#| msgid "CA Compromise" +msgid " * 2 - cACompromise\n" +msgstr "CA en compromís" + +#, fuzzy +#| msgid "Affiliation Changed" +msgid " * 3 - affiliationChanged\n" +msgstr "L'afiliació ha canviat" + +msgid " * 4 - superseded\n" +msgstr "" + +#, fuzzy +#| msgid "Cessation of Operation" +msgid " * 5 - cessationOfOperation\n" +msgstr "Cessació de l'operació" + +#, fuzzy +#| msgid "Certificate Hold" +msgid " * 6 - certificateHold\n" +msgstr "Retenció del certificat" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Certificat" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "Assumpte" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Adreça de correu electrònic" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Assumpte" + +msgid "Subject X.400 address" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "Subject directory name" +msgstr "Directori de l'usuari" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Assumpte" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "Adreça IP" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Assumpte" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Assumpte" + +msgid "Subject Kerberos principal name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Subject Other Name" +msgstr "Nom del servidor" + +msgid "Issuer" +msgstr "Emissor" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Emissor" + +msgid "Not Before" +msgstr "No abans" + +msgid "Not After" +msgstr "No després" + +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint (SHA1)" +msgstr "Empremta" + +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint (SHA256)" +msgstr "Empremta" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Número de sèrie" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Estat" + +msgid "Revoked" +msgstr "Revocat" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +#, fuzzy +#| msgid "View" +msgid "ID View" +msgstr "Visualització" + +msgid "system ID View" +msgstr "" + +#, fuzzy +#| msgid "View" +msgid "ID Views" +msgstr "Visualització" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Authority" +msgstr "Retenció del certificat" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Authorities" +msgstr "Certificats" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DN" +msgstr "Assumpte" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Modify CA configuration." +msgstr "Configuració" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +#, fuzzy +#| msgid "Disable" +msgid "Disable a CA." +msgstr "Inhabilita" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +#, fuzzy +#| msgid "Enable" +msgid "Enable a CA." +msgstr "Habilita" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "Aplica" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "Accions" + +msgid "Add" +msgstr "Afegeix-ho" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +#, fuzzy +#| msgid "Show details" +msgid "Show Results" +msgstr "Mostra els detalls" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "Enrere" + +msgid "Cancel" +msgstr "Cancel·la" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "Tanca" + +msgid "Disable" +msgstr "Inhabilita" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "Edita" + +msgid "Enable" +msgstr "Habilita" + +msgid "Find" +msgstr "Cerca" + +#, fuzzy +#| msgid "Set" +msgid "Get" +msgstr "Aplica" + +msgid "Hide" +msgstr "" + +#, fuzzy +#| msgid "Issuer" +msgid "Issue" +msgstr "Emissor" + +#, fuzzy +#| msgid "Matched" +msgid "Match" +msgstr "Coincideix" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "D'acord" + +msgid "Refresh" +msgstr "Refresca" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "Suprimeix" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "Reinicia" + +msgid "Reset Password" +msgstr "Reinicia la contrasenya" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset Password and Log in" +msgstr "Reinicia la contrasenya" + +msgid "Restore" +msgstr "Restaura" + +msgid "Retry" +msgstr "Reintent" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "Revoca" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "Aplica" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "Actualització" + +msgid "View" +msgstr "Visualització" + +#, fuzzy +#| msgid "Confirmation" +msgid "Customization" +msgstr "Confirmació" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "General" + +msgid "Identity Settings" +msgstr "Paràmetres de la identitat" + +#, fuzzy +#| msgid "Account Settings" +msgid "Record Settings" +msgstr "Paràmetres dels comptes" + +#, fuzzy, python-brace-format +#| msgid "Identity Settings" +msgid "${entity} ${primary_key} Settings" +msgstr "Paràmetres de la identitat" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "Disponible" + +msgid "Some operations failed." +msgstr "" + +#, fuzzy +#| msgid "Options" +msgid "Operations Error" +msgstr "Opcions" + +msgid "Confirmation" +msgstr "Confirmació" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "Canvis sense desar" + +#, fuzzy, python-brace-format +#| msgid "Identity" +msgid "Edit ${entity}" +msgstr "Identitat" + +#, fuzzy +#| msgid "Show details" +msgid "Hide details" +msgstr "Mostra els detalls" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "Redirection" +msgstr "Directori de l'usuari" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "Mostra els detalls" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +#, fuzzy +#| msgid "Error" +msgid "HTTP Error" +msgstr "Error" + +msgid "Internal Error" +msgstr "" + +#, fuzzy +#| msgid "Error" +msgid "IPA Error" +msgstr "Error" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "Error desconegut" + +msgid "URL" +msgstr "URL" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "Paràmetres" + +msgid "Search" +msgstr "Cerca" + +msgid "False" +msgstr "Fals" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Authenticating" +msgstr "Paràmetres dels comptes" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Log In Using Certificate" +msgstr "Certificat" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "segons" + +#, fuzzy +#| msgid "Configuration" +msgid "Migrating" +msgstr "Configuració" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "Atribut" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "Add permission" +msgstr "permisos" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "Remove permissions" +msgstr "permisos" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Role Settings" +msgstr "Paràmetres" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "Exclusiu" + +msgid "Expression" +msgstr "Expressió" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +#, fuzzy +#| msgid "Exclusive" +msgid "Inclusive" +msgstr "Exclusiu" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Automount Location Settings" +msgstr "Paràmetres dels comptes" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Map Type" +msgstr "Tipus" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Allow" +msgid "All" +msgstr "Permet" + +msgid "Any CA" +msgstr "" + +#, fuzzy +#| msgid "Host" +msgid "Any Host" +msgstr "Ordinador central" + +#, fuzzy +#| msgid "Services" +msgid "Any Service" +msgstr "Serveis" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "Qualsevol" + +#, fuzzy +#| msgid "Rules" +msgid "Rule status" +msgstr "Regles" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid "Specified CAs" +msgstr "Sense especificar" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Remove certificate profiles" +msgstr "Retenció del certificat" + +#, fuzzy +#| msgid "CA Compromise" +msgid "AA Compromise" +msgstr "CA en compromís" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "L'afiliació ha canviat" + +msgid "CA Compromise" +msgstr "CA en compromís" + +msgid "Certificates" +msgstr "Certificats" + +msgid "Certificate Hold" +msgstr "Retenció del certificat" + +msgid "Cessation of Operation" +msgstr "Cessació de l'operació" + +msgid "Common Name" +msgstr "Nom comú" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "Data de venciment" + +#, fuzzy +#| msgid "Issued On" +msgid "Issued on from" +msgstr "Data d'emissió" + +#, fuzzy +#| msgid "Issued On" +msgid "Issued on to" +msgstr "Data d'emissió" + +#, fuzzy +#| msgid "Serial number" +msgid "Maximum serial number" +msgstr "Número de sèrie" + +#, fuzzy +#| msgid "Serial number" +msgid "Minimum serial number" +msgstr "Número de sèrie" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on from" +msgstr "Revocat" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on to" +msgstr "Revocat" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "Empremtes digitals" + +#, fuzzy +#| msgid "Certificate" +msgid "Get Certificate" +msgstr "Certificat" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Hold Removed" +msgstr "Retenció del certificat" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Issue new certificate" +msgstr "Certificat" msgid "Issued By" msgstr "Emès per" @@ -242,317 +19427,4824 @@ msgstr "Data d'emissió" msgid "Issued To" msgstr "Emès a nom de" -msgid "Issuer" -msgstr "Emissor" - -msgid "Job Title" -msgstr "Càrrec" - -msgid "Key" -msgstr "Tecla" - msgid "Key Compromise" msgstr "Clau en compromís" -msgid "Last name" -msgstr "Cognom" +#, fuzzy +#| msgid "Certificate" +msgid "No Valid Certificate" +msgstr "Certificat" -msgid "Locality" -msgstr "Localitat" +#, fuzzy +#| msgid "Certificate" +msgid "New Certificate" +msgstr "Certificat" -msgid "Location" -msgstr "Ubicació" - -msgid "Login shell" -msgstr "Shell d'inici de sessió" - -msgid "Mailing Address" -msgstr "Adreça postal" - -msgid "Manager" -msgstr "Gestor" - -msgid "Map" -msgstr "Mapa" - -msgid "Matched" -msgstr "Coincideix" - -msgid "Modified" -msgstr "Modificat" - -msgid "Mount point" -msgstr "Punt de muntatge" - -msgid "Netgroup name" -msgstr "Nom de grup de xarxa" - -msgid "New Password" -msgstr "Contrasenya nova" - -msgid "Next" -msgstr "Següent" - -msgid "Not After" -msgstr "No després" - -msgid "Not Before" -msgstr "No abans" +msgid "Certificate in base64 or PEM format" +msgstr "" msgid "Note" msgstr "Nota" -msgid "OK" -msgstr "D'acord" - -msgid "Operating system" -msgstr "Sistema operatiu" - -msgid "Options" -msgstr "Opcions" - msgid "Organization" msgstr "Organització" msgid "Organizational Unit" msgstr "Unitat organitzativa" -msgid "Out of memory\n" -msgstr "Sense memòria\n" +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" -msgid "Page" -msgstr "Pàgina" +msgid "Privilege Withdrawn" +msgstr "" -msgid "Pager Number" -msgstr "Número de buscapersones" +#, fuzzy +#| msgid "Cessation of Operation" +msgid "Reason for Revocation" +msgstr "Cessació de l'operació" -msgid "Password" -msgstr "Contrasenya" +#, fuzzy +#| msgid "Certificate Hold" +msgid "Remove certificate hold" +msgstr "Retenció del certificat" -msgid "Passwords do not match" -msgstr "Les contrasenyes no coincideixen" +msgid "Do you want to remove the certificate hold?" +msgstr "" -msgid "Permission" -msgstr "Permís" +msgid "Remove from CRL" +msgstr "" -msgid "Permissions" -msgstr "Permisos" +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" -msgid "Platform" -msgstr "Plataforma" +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" -msgid "Policy" -msgstr "Política" +#, fuzzy +#| msgid "Certificates" +msgid "Certificate requested" +msgstr "Certificats" -msgid "Port" -msgstr "Port" +#, fuzzy +#| msgid "Certificate" +msgid "Revoke certificate" +msgstr "Certificat" -msgid "Prev" -msgstr "Anterior" +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" -msgid "Priority" -msgstr "Prioritat" +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Revoked" +msgstr "Retenció del certificat" -msgid "Reason" -msgstr "Raó" - -msgid "Record Type" -msgstr "Tipus de registre" - -msgid "Refresh" -msgstr "Refresca" - -msgid "Regular Expression" -msgstr "Expressió regular" - -msgid "Rename" -msgstr "Canvia el nom" - -msgid "Reset" -msgstr "Reinicia" - -msgid "Reset Password" -msgstr "Reinicia la contrasenya" - -msgid "Restore" -msgstr "Restaura" - -msgid "Retry" -msgstr "Reintent" - -msgid "Revoke" -msgstr "Revoca" - -msgid "Revoked" -msgstr "Revocat" - -msgid "Rights" -msgstr "Drets" - -msgid "Role" -msgstr "Rol" - -msgid "Rules" -msgstr "Regles" - -msgid "SHA1 Fingerprint" -msgstr "Empremta digital SHA1" - -msgid "Search" -msgstr "Cerca" - -msgid "Select All" -msgstr "Selecciona-ho tot" - -msgid "Self" -msgstr "Ell mateix" +msgid "REVOKED" +msgstr "" msgid "Serial Number" msgstr "Número de sèrie" -msgid "Serial number" +#, fuzzy +#| msgid "Serial Number" +msgid "Serial Number (hex)" msgstr "Número de sèrie" -msgid "Server" -msgstr "Servidor" +msgid "SHA1 Fingerprint" +msgstr "Empremta digital SHA1" -msgid "Server Name" -msgstr "Nom del servidor" - -msgid "Services" -msgstr "Serveis" - -msgid "Set" -msgstr "Aplica" - -msgid "Settings" -msgstr "Paràmetres" - -msgid "Show details" -msgstr "Mostra els detalls" - -msgid "Size" -msgstr "Mida" - -msgid "State/Province" -msgstr "Estat/província" - -msgid "Status" -msgstr "Estat" - -msgid "Subject" -msgstr "Assumpte" - -msgid "Subtree" -msgstr "Subarbre" - -msgid "Subtype" -msgstr "Subtipus" +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SHA256 Fingerprint" +msgstr "Empremta digital SHA1" msgid "Superseded" msgstr "Substituït" -msgid "Target" -msgstr "Objectiu" - -msgid "Telephone Number" -msgstr "Número de telèfon" - -msgid "Time now" -msgstr "L'hora actual" - -msgid "True" -msgstr "Cert" - -msgid "Trust" -msgstr "Confiança" - -msgid "Type" -msgstr "Tipus" - -msgid "UID" -msgstr "UID" - -msgid "URL" -msgstr "URL" - -msgid "Unknown" -msgstr "Desconegut" - -msgid "Unknown Error" -msgstr "Error desconegut" - -msgid "Unmatched" -msgstr "No coincideix" - -msgid "Unsaved Changes" -msgstr "Canvis sense desar" - -msgid "Unselect All" -msgstr "No seleccionis res" - msgid "Unspecified" msgstr "Sense especificar" -msgid "Update" -msgstr "Actualització" +#, fuzzy +#| msgid "Certificates" +msgid "Valid Certificate Present" +msgstr "Certificats" -msgid "User" -msgstr "Usuari" +msgid "Valid from" +msgstr "" -msgid "User login" -msgstr "Entrada" - -msgid "User name" -msgstr "Nom d'usuari" - -msgid "Username" -msgstr "Nom d'usuari" - -msgid "Users" -msgstr "Usuaris" +#, fuzzy +#| msgid "Validity" +msgid "Valid to" +msgstr "Validesa" msgid "Validity" msgstr "Validesa" -msgid "View" -msgstr "Visualització" +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" -msgid "Warning" -msgstr "Avís" +#, fuzzy +#| msgid "Certificate" +msgid "View Certificate" +msgstr "Certificat" -msgid "Weight" -msgstr "Pes" +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "Certificat" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate For Match" +msgstr "Retenció del certificat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Mapping Match" +msgstr "Certificat" + +#, fuzzy +#| msgid "Matched" +msgid "Matched Users" +msgstr "Coincideix" + +#, fuzzy +#| msgid "User login" +msgid "User Login" +msgstr "Entrada" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate mapping data" +msgstr "Retenció del certificat" + +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "Configuració" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +#, fuzzy +#| msgid "Options" +msgid "Group Options" +msgstr "Opcions" + +#, fuzzy +#| msgid "Options" +msgid "Search Options" +msgstr "Opcions" + +#, fuzzy +#| msgid "Options" +msgid "SELinux Options" +msgstr "Opcions" + +#, fuzzy +#| msgid "Options" +msgid "Server Options" +msgstr "Opcions" + +#, fuzzy +#| msgid "Services" +msgid "Service Options" +msgstr "Serveis" + +#, fuzzy +#| msgid "Options" +msgid "User Options" +msgstr "Opcions" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "Opcions" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +#, fuzzy +#| msgid "Record Type" +msgid "Other Record Types" +msgstr "Tipus de registre" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +#, fuzzy +#| msgid "Record Type" +msgid "Standard Record Types" +msgstr "Tipus de registre" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "Tipus de registre" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "DNS Zone Settings" +msgstr "Paràmetres dels comptes" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Remove Permission" +msgstr "Permís" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Group Settings" +msgstr "Paràmetres dels comptes" + +msgid "External" +msgstr "Extern" + +msgid "Groups" +msgstr "Grups" + +#, fuzzy +#| msgid "Group name" +msgid "Group categories" +msgstr "Nom del grup" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Group Type" +msgstr "Nom del grup" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Accessing" +msgstr "Temps d'accés" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Via Service" +msgstr "Serveis" msgid "Who" msgstr "Qui" -msgid "description" -msgstr "descripció" +msgid "Add HBAC service" +msgstr "" -msgid "entry" -msgstr "entrada" +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" -msgid "filename" -msgstr "nomdelfitxer" +msgid "Remove HBAC services" +msgstr "" -msgid "group" -msgstr "grup" +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" -msgid "password" -msgstr "contrasenya" +msgid "Add HBAC service group" +msgstr "" -msgid "permissions" +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "S'ha denegat l'accés" + +msgid "Access Granted" +msgstr "Accés permès" + +#, fuzzy +#| msgid "Disabled" +msgid "Include Disabled" +msgstr "Inhabilitat" + +#, fuzzy +#| msgid "Enabled" +msgid "Include Enabled" +msgstr "S'ha habilitat" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "Coincideix" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "Regles" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "No coincideix" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Host Certificate" +msgstr "Certificat" + +msgid "Host Name" +msgstr "Nom de l'ordinador" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Host Settings" +msgstr "Paràmetres" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +#| msgid "General" +msgid "Generate OTP" +msgstr "General" + +#, fuzzy +#| msgid "General" +msgid "Generated OTP" +msgstr "General" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "One-Time Password" +msgstr "Reinicia la contrasenya" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +#, fuzzy +#| msgid "Reset" +msgid "Reset OTP" +msgstr "Reinicia" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset One-Time Password" +msgstr "Reinicia la contrasenya" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "Set One-Time Password" +msgstr "Reinicia la contrasenya" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "Unprovision" msgstr "permisos" -msgid "seconds" -msgstr "segons" +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Host Group Settings" +msgstr "Paràmetres dels comptes" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Enter trusted group name." +msgstr "Nom de grup de xarxa" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Apply" +msgid "Un-apply" +msgstr "Aplica" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "Ordinador central" + +#, fuzzy +#| msgid "Account Settings" +msgid "Netgroup Settings" +msgstr "Paràmetres dels comptes" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Configure your token" +msgstr "Configuració" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "OTP Token Settings" +msgstr "Paràmetres dels comptes" + +#, fuzzy +#| msgid "Disable" +msgid "Disable token" +msgstr "Inhabilita" + +#, fuzzy +#| msgid "Enable" +msgid "Enable token" +msgstr "Habilita" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Show configuration uri" +msgstr "Configuració" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "Add Custom Attribute" +msgstr "Atribut" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission settings" +msgstr "Permisos" + +#, fuzzy +#| msgid "Attribute" +msgid "Attribute breakdown" +msgstr "Atribut" + +#, fuzzy +#| msgid "Settings" +msgid "Privilege Settings" +msgstr "Paràmetres" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "Modificat" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "Contrasenya" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Range Settings" +msgstr "Paràmetres" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "Domain SID" +msgstr "Domini" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "Domini d'Active Directory" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain with POSIX attributes" +msgstr "Domini d'Active Directory" + +msgid "Detect" +msgstr "" + +#, fuzzy +#| msgid "Locality" +msgid "Local domain" +msgstr "Localitat" + +msgid "IPA trust" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory winsync" +msgstr "Domini d'Active Directory" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +#, fuzzy +#| msgid "Update" +msgid "Force Update" +msgstr "Actualització" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Roles" +msgstr "Nom del servidor" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Role" +msgstr "Nom del servidor" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete Server" +msgstr "Suprimeix" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "services" +msgid "Add service" +msgstr "serveis" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Service Certificate" +msgstr "Certificat" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Service Settings" +msgstr "Paràmetres de la identitat" + +#, fuzzy +#| msgid "Permission" +msgid "Provisioning" +msgstr "Permís" + +#, fuzzy +#| msgid "services" +msgid "Remove services" +msgstr "serveis" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "Stage users" +msgstr "usuaris" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Permet" + +#, fuzzy +#| msgid "Commands" +msgid "Any Command" +msgstr "Ordres" + +#, fuzzy +#| msgid "Group" +msgid "Any Group" +msgstr "Grup" + +#, fuzzy +#| msgid "Commands" +msgid "Run Commands" +msgstr "Ordres" + +msgid "Deny" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Access this host" +msgstr "Temps d'accés" + +#, fuzzy +#| msgid "Options" +msgid "Option added" +msgstr "Opcions" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +#, fuzzy +#| msgid "Show details" +msgid "Segment details" +msgstr "Mostra els detalls" + +#, fuzzy +#| msgid "Cessation of Operation" +msgid "Replication configuration" +msgstr "Cessació de l'operació" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "Compte" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Trust Settings" +msgstr "Paràmetres dels comptes" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "Pre-shared password" +msgstr "Reinicia la contrasenya" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +#, fuzzy +#| msgid "Trust" +msgid "Trust type" +msgstr "Confiança" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "Paràmetres dels comptes" + +#, fuzzy +#| msgid "Account Settings" +msgid "Account Status" +msgstr "Paràmetres dels comptes" + +msgid "Active users" +msgstr "" + +#, fuzzy +#| msgid "user" +msgid "Add user" +msgstr "usuari" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Contact Settings" +msgstr "Paràmetres dels comptes" + +#, fuzzy +#| msgid "Delete" +msgid "Delete mode" +msgstr "Suprimeix" + +#, fuzzy +#| msgid "Confirmation" +msgid "Employee Information" +msgstr "Confirmació" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "Adreça postal" + +#, fuzzy +#| msgid "Confirmation" +msgid "Misc. Information" +msgstr "Confirmació" + +#, fuzzy +#| msgid "Delete" +msgid "delete" +msgstr "Suprimeix" + +#, fuzzy +#| msgid "services" +msgid "preserve" +msgstr "serveis" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "Serveis" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "User Vaults" +msgstr "Usuaris" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#, fuzzy +#| msgid "First name" +msgid "First OTP" +msgstr "Nom" + +#, fuzzy +#| msgid "New Password" +msgid "New password is required" +msgstr "Contrasenya nova" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "Les contrasenyes no coincideixen" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset your password." +msgstr "Reinicia la contrasenya" + +msgid "Second OTP" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "Verify Password" +msgstr "Contrasenya nova" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "Selecciona-ho tot" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "No seleccionis res" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +#, fuzzy +#| msgid "Account" +msgid "Automount" +msgstr "Compte" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "Identitat" + +#, fuzzy +#| msgid "Services" +msgid "Network Services" +msgstr "Serveis" + +msgid "Policy" +msgstr "Política" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +#, fuzzy +#| msgid "Trust" +msgid "Trusts" +msgstr "Confiança" + +msgid "True" +msgstr "Cert" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +#| msgid "First name" +msgid "First" +msgstr "Nom" + +#, fuzzy +#| msgid "Last name" +msgid "Last" +msgstr "Cognom" + +msgid "Next" +msgstr "Següent" + +msgid "Page" +msgstr "Pàgina" + +msgid "Prev" +msgstr "Anterior" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +#, fuzzy +#| msgid "Unselect All" +msgid "Undo All" +msgstr "No seleccionis res" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "Rol" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "server" +msgstr "Servidor" + +#, fuzzy +#| msgid "services" +msgid "servers" +msgstr "serveis" + +#, fuzzy +#| msgid "Server" +msgid "IPA Servers" +msgstr "Servidor" + +#, fuzzy +#| msgid "Server Name" +msgid "Server location" +msgstr "Nom del servidor" + +#, fuzzy +#| msgid "Services" +msgid "Service weight" +msgstr "Serveis" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "Estat" + +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "Nom del servidor" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSH public key fingerprint" +msgstr "Empremta digital SHA1" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "password policy" +msgstr "contrasenya" + +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "contrasenya" + +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "Contrasenya" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Nom d'usuari" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "Trust" +msgid "trust" +msgstr "Confiança" + +#, fuzzy +#| msgid "Trust" +msgid "trusts" +msgstr "Confiança" + +msgid "Trust" +msgstr "Confiança" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "External" +msgid "External trust" +msgstr "Extern" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "domain" +msgstr "Domini" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Configuració" + +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Configuració" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +#, fuzzy +#| msgid "UID" +msgid "SID" +msgstr "UID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Disabled" +msgid "Domain enabled" +msgstr "Inhabilitat" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +#, fuzzy +#| msgid "Matched" +msgid "Matching rule" +msgstr "Coincideix" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Entrada" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +#| msgid "services" +msgid "service" +msgstr "serveis" msgid "services" msgstr "serveis" -msgid "user" -msgstr "usuari" +msgid "Service principal alias" +msgstr "" -msgid "users" -msgstr "usuaris" +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delegation" +msgstr "Suprimeix" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +#, fuzzy +#| msgid "Rules" +msgid "HBAC Rules" +msgstr "Regles" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "Temps d'accés" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Access Granted" +msgid "Access granted: %s" +msgstr "Accés permès" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "entrada" + +#, fuzzy +#| msgid "entry" +msgid "entries" +msgstr "entrada" + +#, fuzzy +#| msgid "entry" +msgid "Entry" +msgstr "entrada" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Directori de l'usuari" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory Drive" +msgstr "Directori de l'usuari" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "Failed logins" +msgstr "Entrada" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "L'hora actual" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Trust" +msgid "Trust setup" +msgstr "Confiança" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +#, fuzzy +#| msgid "Invalid credentials" +msgid "CIFS credentials object" +msgstr "Credencials no vàlides" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +#, fuzzy +#| msgid "Invalid credentials" +msgid "Credentials" +msgstr "Credencials no vàlides" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "Desconegut" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Non-Active Directory domain" +msgstr "Domini d'Active Directory" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "Sense memòria\n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +#, fuzzy +#| msgid "Out of memory\n" +msgid "Out of memory!?\n" +msgstr "Sense memòria\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/cs.po b/po/cs.po index 1bf237d9e..30bfac479 100644 --- a/po/cs.po +++ b/po/cs.po @@ -5,7 +5,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Czech\n" @@ -16,62 +16,19078 @@ msgstr "" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n" "X-Generator: Zanata 4.6.2\n" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, c-format +msgid "Out of memory!\n" +msgstr "Nedostatek paměti\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy, c-format +#| msgid "Out of memory!\n" +msgid "Out of memory!" +msgstr "Nedostatek paměti\n" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "Neplatný požadavek JSON-RPC: %(error)s" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "did not receive Kerberos credentials" +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "neobdrženy ověřovací údaje Kerberos" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "hostname" +msgstr "Název počítače" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "IPA Server to use" +msgstr "Serverové role" + +msgid "Specifies where to store keytab information." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Username" +msgid "filename" +msgstr "Jméno uživatele" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +msgid "password" +msgstr "heslo" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +#, fuzzy +#| msgid "LDAP password" +msgid "LDAP basedn" +msgstr "LDAP heslo" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "Realm name" +msgstr "Uživatelské jméno" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy, c-format +#| msgid "Out of memory!\n" +msgid "out of memory\n" +msgstr "Nedostatek paměti\n" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy, c-format +#| msgid "Out of memory!\n" +msgid "Out of memory \n" +msgstr "Nedostatek paměti\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy, c-format +#| msgid "Out of memory!\n" +msgid "Out of Memory!\n" +msgstr "Nedostatek paměti\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Hesla se neshodují!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +#| msgid "Server" +msgid "Server Name" +msgstr "Server" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "LDAP password" +msgstr "LDAP heslo" + +msgid "password to use if not using kerberos" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +#, fuzzy +#| msgid "LDAP password" +msgid "Prompt for LDAP password" +msgstr "LDAP heslo" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "url" +msgstr "url" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +#, fuzzy +#| msgid "LDAP password" +msgid "Enter LDAP password" +msgstr "LDAP heslo" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +#| msgid "Profiles" +msgid "Failed profiles" +msgstr "Profily" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +#, fuzzy +#| msgid "No file to read" +msgid "Failed to add" +msgstr "Žádný soubor k přečtení" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "Servers details:" +msgstr "Serverové role" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete a user" +msgstr "Smazat" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete all?" +msgstr "Smazat" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "User ID" +msgstr "ID uživatele" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +msgid "Password" +msgstr "Heslo" + +# auto translated by TM merge from project: Fedora Websites, version: +# fedoraproject.org, DocId: po/fedora-web +#, fuzzy +#| msgid "First" +msgid "First Code" +msgstr "Prvenství " + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "cannot connect to '%(uri)s': %(error)s" +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "nelze se připojit k '%(uri)s': %(error)s" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "password" +msgid "Vault password" +msgstr "heslo" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Change password" +msgstr "Uživatelské heslo" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "password" +msgid "Old vault password" +msgstr "heslo" + +msgid "File containing the old vault password" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "New vault password" +msgstr "Uživatelské heslo" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +msgid "Error" +msgstr "Chyba" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "ACI name" +msgstr "Název příkazu" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Version" +msgid "Permission" +msgstr "Verze" + +msgid "Permission ACI grants access to" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "User group" +msgstr "skupinu" + +msgid "User group ACI grants access to" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Version" +msgid "Permissions" +msgstr "Verze" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Type" +msgstr "Typ" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member of" +msgstr "Členové" + +msgid "Member of a group" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Filter" +msgstr "Filtr" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Target" +msgid "Target group" +msgstr "Cíl" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete ACI." +msgstr "Smazat" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "Řetězec vyhledávaný ve všech odpovídajících atributech objektu" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +msgid "New ACI name" +msgstr "" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Key" +msgstr "Klíč" + +msgid "Automount key name." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Mount point" +msgid "Mount information" +msgstr "Místo připojení" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +msgid "description" +msgstr "popis" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Location" +msgstr "Umístění" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Description" +msgstr "Popis" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +msgid "Rights" +msgstr "Práva" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Username" +msgid "Rename" +msgstr "Jméno uživatele" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Mount point" +msgstr "Místo připojení" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "Default shell" +msgstr "Výchozí" + +msgid "Default shell for new users" +msgstr "" + +msgid "Default users group" +msgstr "" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux user map order" +msgstr "Uživatel SELinuxu" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "Default SELinux user" +msgstr "Uživatel SELinuxu" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Zone name" +msgstr "Název příkazu" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Record Type" +msgid "Record name" +msgstr "Typ záznamu" + +msgid "Time to live" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Record Type" +msgid "Records" +msgstr "Typ záznamu" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Record Type" +msgid "Record type" +msgstr "Typ záznamu" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Record Type" +msgid "Record data" +msgstr "Typ záznamu" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "IP Address" +msgid "A IP Address" +msgstr "IP adresa" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "IP Address" +msgstr "IP adresa" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "IP Address" +msgid "AAAA IP Address" +msgstr "IP adresa" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "AFSDB Hostname" +msgstr "Název počítače" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "Hostname" +msgstr "Název počítače" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "CNAME Hostname" +msgstr "Název počítače" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Target" +msgid "DNAME Target" +msgstr "Cíl" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Target" +msgstr "Cíl" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +# auto translated by TM merge from project: blivet-gui, version: f23-branch, +# DocId: blivet-gui +#, fuzzy +#| msgid "Size" +msgid "LOC Size" +msgstr "Velikost" + +# auto translated by TM merge from project: blivet-gui, version: f23-branch, +# DocId: blivet-gui +msgid "Size" +msgstr "Velikost" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Order" +msgid "NAPTR Order" +msgstr "Další" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Order" +msgstr "Další" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 +#, fuzzy +#| msgid "Flags" +msgid "NAPTR Flags" +msgstr "Vlajky" + +# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 +msgid "Flags" +msgstr "Vlajky" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Service" +msgid "NAPTR Service" +msgstr "Služba" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Service" +msgstr "Služba" + +msgid "NAPTR Regular Expression" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Expression" +msgid "Regular Expression" +msgstr "Výraz" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "NS Hostname" +msgstr "Název počítače" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "PTR Hostname" +msgstr "Název počítače" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Record Type" +msgid "RP record" +msgstr "Typ záznamu" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Priority" +msgid "SRV Priority" +msgstr "Priorita" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Priority" +msgstr "Priorita" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "Rights" +msgid "SRV Weight" +msgstr "Práva" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "Rights" +msgid "Weight" +msgstr "Práva" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Port" +msgid "SRV Port" +msgstr "Port" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Port" +msgstr "Port" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Target" +msgid "SRV Target" +msgstr "Cíl" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "SSHFP Fingerprint Type" +msgstr "Otisk" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint Type" +msgstr "Otisk" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "SSHFP Fingerprint" +msgstr "Otisk" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +msgid "Fingerprint" +msgstr "Otisk" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Serial" +msgid "SOA serial" +msgstr "Sériový" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "SOA record serial number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: virt-viewer, version: master, +# DocId: virt-viewer +#, fuzzy +#| msgid "Refresh" +msgid "SOA refresh" +msgstr "Obnovit" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "Rule name" +msgstr "Uživatelské jméno" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "User category" +msgstr "Uživatelské jméno" + +msgid "User category the rule applies to" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Host Name" +msgid "Host category" +msgstr "Název počítače" + +msgid "Host category the rule applies to" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service category" +msgstr "Nastavení služeb" + +msgid "Service category the rule applies to" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Enabled" +msgstr "Povoleno" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Users" +msgstr "Uživatelé" + +# auto translated by TM merge from project: libreport, version: rhel6, DocId: +# libreport +#, fuzzy +#| msgid "Groups" +msgid "User Groups" +msgstr "Skupiny" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Host" +msgid "Hosts" +msgstr "Počítač" + +# auto translated by TM merge from project: libreport, version: rhel6, DocId: +# libreport +#, fuzzy +#| msgid "Groups" +msgid "Host Groups" +msgstr "Skupiny" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "Services" +msgstr "Služby" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Services" +msgid "Service Groups" +msgstr "Služby" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "member host" +msgstr "Členové" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "member user" +msgstr "Členové" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Service" +msgid "Service name" +msgstr "Služba" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "HBAC service" +msgstr "službu" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +#| msgid "description" +msgid "HBAC service description" +msgstr "popis" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +msgid "Host name" +msgstr "Název počítače" + +msgid "A description of this host" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "Locality" +msgstr "Umístění" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Platform" +msgstr "Platforma" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "Operační systém" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "Uživatelské heslo" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "password" +msgid "Random password" +msgstr "heslo" + +msgid "Certificate" +msgstr "" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +msgid "MAC address" +msgstr "MAC adresa" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Class" +msgstr "Třída" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Requires pre-authentication" +msgstr "Autentizace" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Role" +msgid "Roles" +msgstr "Role" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete a host." +msgstr "Smazat" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "host group" +msgstr "skupinu" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "netgroup" +msgstr "skupinu" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "user" +msgstr "uživatel" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "Host-group" +msgstr "skupinu" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member hosts" +msgstr "Členové" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "Group" +msgid "Group name" +msgstr "Skupina" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "User login" +msgstr "Uživatelské jméno" + +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +#, fuzzy +#| msgid "UUID" +msgid "UID" +msgstr "UUID:" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "User ID Number" +msgstr "Sériové číslo" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "hostgroups" +msgstr "skupinu" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +msgid "User name" +msgstr "Uživatelské jméno" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +#, fuzzy +#| msgid "Invalid LDAP URI." +msgid "LDAP URI" +msgstr "Neplatné URI pro LDAP." + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "password" +msgid "bind password" +msgstr "heslo" + +msgid "Bind DN" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "User container" +msgstr "Uživatelské jméno" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Continue" +msgstr "Pokračovat" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "Netgroup name" +msgstr "Uživatelské jméno" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +#| msgid "description" +msgid "Netgroup description" +msgstr "popis" + +#, fuzzy +#| msgid "Command name" +msgid "NIS domain name" +msgstr "Název příkazu" + +msgid "IPA unique ID" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member netgroups" +msgstr "Členové" + +msgid "Indirect Member netgroups" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member User" +msgstr "Členové" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member Group" +msgstr "Členové" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member Host" +msgstr "Členové" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member Hostgroup" +msgstr "Členové" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "group" +msgstr "skupinu" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "TOTP authentication Window" +msgstr "Autentizace" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "HOTP Authentication Window" +msgstr "Autentizace" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Set a user's password." +msgstr "Uživatelské heslo" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Password" +msgid "New Password" +msgstr "Heslo" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Password" +msgid "Current Password" +msgstr "Heslo" + +msgid "OTP" +msgstr "" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Password" +msgid "One Time Password" +msgstr "Heslo" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Bind rule type" +msgstr "nesprávný typ" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Target" +msgid "Target DN" +msgstr "Cíl" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Deprecated; use ipapermlocation" +msgstr "Zastaralé volby" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +#| msgid "description" +msgid "Privilege description" +msgstr "popis" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +#, fuzzy +#| msgid "No file to read" +msgid "roles to add" +msgstr "Žádný soubor k přečtení" + +msgid "Add permissions to a privilege." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Version" +msgid "permission" +msgstr "Verze" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Expression" +msgid "permissions" +msgstr "Výraz" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +#, fuzzy +#| msgid "No file to read" +msgid "roles to remove" +msgstr "Žádný soubor k přečtení" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +msgid "Group" +msgstr "Skupina" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "Lockout duration" +msgstr "Umístění" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "User" +msgstr "Uživatel" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +msgid "Server" +msgstr "Server" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Secret" +msgstr "Tajné" + +msgid "The secret used to encrypt data" +msgstr "" + +# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: +# pulseaudio.pot +msgid "Timeout" +msgstr "Časový limit" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Retry" +msgid "Retries" +msgstr "Opakovat" + +msgid "The number of times to retry authentication" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "User attribute" +msgstr "Uživatelské jméno" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete domain" +msgstr "Smazat" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "Role name" +msgstr "Název počítače" + +msgid "A description of this role-group" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member users" +msgstr "Členové" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member groups" +msgstr "Členové" + +msgid "Privileges" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "Member services" +msgstr "službu" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "member service" +msgstr "službu" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "services to add" +msgstr "službu" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete a role." +msgstr "Smazat" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "Search for roles." +msgstr "Serverové role" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "Self-service name" +msgstr "Uživatelské jméno" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "SELinux User" +msgstr "Uživatel SELinuxu" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "Delete a SELinux User Map." +msgstr "Uživatel SELinuxu" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "Modify a SELinux User Map." +msgstr "Uživatel SELinuxu" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service principal" +msgstr "Nastavení služeb" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Sudo Command" +msgstr "Téma nebo příkaz" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Modify Sudo Command." +msgstr "Téma nebo příkaz" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +#| msgid "description" +msgid "Group description" +msgstr "popis" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "commands" +msgid "Commands" +msgstr "příkazy" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "First name" +msgstr "Název počítače" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "Last name" +msgstr "Název počítače" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +#| msgid "Mailing Address" +msgid "Email address" +msgstr "Poštovní adresa" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +#, fuzzy +#| msgid "MAC address" +msgid "Street address" +msgstr "MAC adresa" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "City" +msgstr "Město" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Telephone Number" +msgstr "Sériové číslo" + +msgid "Mobile Telephone Number" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Pager Number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Fax Number" +msgstr "Sériové číslo" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +#| msgid "Account" +msgid "Account disabled" +msgstr "Účet" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "User authentication types" +msgstr "Autentizace" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "RADIUS proxy configuration" +msgstr "Nastavení" + +msgid "RADIUS proxy username" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Department Number" +msgstr "Sériové číslo" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Members" +msgid "Member of groups" +msgstr "Členové" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete a user." +msgstr "Smazat" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +#, fuzzy +#| msgid "%(reason)s" +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "minimum serial number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "maximum serial number" +msgstr "Sériové číslo" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Serial number" +msgstr "Sériové číslo" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "External member" +msgstr "Sériové číslo" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete group." +msgstr "Smazat" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Target" +msgid "Target host" +msgstr "Cíl" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "Warning" +msgstr "Varování" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Domain name" +msgstr "Název příkazu" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Range name" +msgstr "Název příkazu" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +# auto translated by TM merge from project: Cockpit, version: master, DocId: +# cockpit +msgid "Disabled" +msgstr "Zakázáno" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Vendor" +msgstr "Výrobce" + +msgid "Token vendor name (informational only)" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Model" +msgstr "Model" + +msgid "Token model (informational only)" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Serial" +msgstr "Sériový" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "(deprecated)" +msgstr "Zastaralé volby" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Command category" +msgstr "Název příkazu" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Host Name" +msgid "Host Masks" +msgstr "Název počítače" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Sudo Allow Commands" +msgstr "Téma nebo příkaz" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Users" +msgid "RunAs Users" +msgstr "Uživatelé" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +# auto translated by TM merge from project: Fedora Elections Guide, version: +# master, DocId: Casting +#, fuzzy +#| msgid "Any Group" +msgid "RunAs Groups" +msgstr "Jakákoli skupina" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Options" +msgid "Sudo Option" +msgstr "Přepínače" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "ACL name" +msgstr "Název příkazu" + +# auto translated by TM merge from project: OSCAP Anaconda Addon, version: +# master, DocId: oscap-anaconda-addon +#, fuzzy +#| msgid "Profile" +msgid "Profile category" +msgstr "Profil" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "Profiles" +msgstr "Profily" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +# auto translated by TM merge from project: libreport, version: rhel6, DocId: +# libreport +#, fuzzy +#| msgid "Search" +msgid "Search scope" +msgstr "Hledat" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +#| msgid "Server" +msgid "Server name" +msgstr "Server" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Target" +msgid "Allowed Target" +msgstr "Cíl" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "Rights" +msgid "Right node" +msgstr "Práva" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "Vault name" +msgstr "Název počítače" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +#| msgid "description" +msgid "Vault description" +msgstr "popis" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +msgid "Owner groups" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "Owner services" +msgstr "službu" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "Vault service" +msgstr "službu" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Shared" +msgid "Shared vault" +msgstr "Sdílená" + +msgid "Vault user" +msgstr "" + +msgid "Transport Certificate" +msgstr "" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "owner group" +msgstr "skupinu" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "owner service" +msgstr "službu" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Show vault configuration." +msgstr "Nastavení" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +# auto translated by TM merge from project: OSCAP Anaconda Addon, version: +# master, DocId: oscap-anaconda-addon +#, fuzzy +#| msgid "Profile" +msgid "Profile ID" +msgstr "Profil" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +#| msgid "description" +msgid "Profile description" +msgstr "popis" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Host name" +msgid "Hostname (FQDN)" +msgstr "Název počítače" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 +#, fuzzy +#| msgid "Flags" +msgid "KEY Flags" +msgstr "Vlajky" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Protocol" +msgid "KEY Protocol" +msgstr "Protokol" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Protocol" +msgstr "Protokol" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "Typ" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Label" +msgid "Labels" +msgstr "Název" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Label" +msgid "SIG Labels" +msgstr "Název" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +msgid "UUID" +msgstr "UUID:" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Username" +msgstr "Jméno uživatele" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Registration password" +msgstr "Uživatelské heslo" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "chyba na serveru '%(server)s': %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Vložte znovu své %(label)s, aby se ověřila jeho správnost." + +msgid "Passwords do not match!" +msgstr "Hesla se neshodují!" + +msgid "No matching entries found" +msgstr "Nenalezeny žádné shodné položky" + +msgid "Topic or Command" +msgstr "Téma nebo příkaz" + +msgid "The topic or command name." +msgstr "Název tématu nebo příkazu." + +msgid "Topic commands:" +msgstr "Příkazy tématu:" + +msgid "To get command help, use:" +msgstr "Chceteli získat nápovědu k příkazu, použijte:" + msgid " ipa --help" msgstr " ipa --help" +msgid "Command name" +msgstr "Název příkazu" + +msgid "Positional arguments" +msgstr "Poziční argumenty" + +#, python-format +msgid "Same as --%s" +msgstr "Stejné jako --%s" + +msgid "Deprecated options" +msgstr "Zastaralé volby" + +msgid "No file to read" +msgstr "Žádný soubor k přečtení" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" "Verze %(cver)s klienta není kompatibilní s verzí %(sver)s serveru " "'%(server)s'" +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "neznámý kód %(code)d chyby ze serveru %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "Vyskytla se vnitřní chyba" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "na serveru '%(server)s' se vyskytla interní chyba" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "neznámý příkaz '%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "chyba na serveru '%(server)s': %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "nelze se připojit k '%(uri)s': %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Neplatný požadavek JSON-RPC: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "chyba marshallingu dat pro přenos XML-RPC: %(error)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Chybějící nebo neplatný HTTP Referer, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Chyba Kerberos: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "neobdrženy ověřovací údaje Kerberos" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Služba '%(service)s' nenalezena v databázi Kerberosu" + +msgid "No credentials cache found" +msgstr "Nenalezena mezipamět ověřovacích údajů" + +msgid "Ticket expired" +msgstr "Platnost lístku skončila" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +#, fuzzy +#| msgid "No credentials cache found" +msgid "Bad format in credentials cache" +msgstr "Nenalezena mezipamět ověřovacích údajů" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "invalid '%(name)s': %(error)s" +msgstr "Neplatný požadavek JSON-RPC: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Passwords do not match" +msgstr "Hesla nejsou stejná." + +#, fuzzy +#| msgid "Command name" +msgid "Command not implemented" +msgstr "Název příkazu" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + #, python-format msgid "%(reason)s" msgstr "%(reason)s" -# auto translated by TM merge from project: libguestfs, version: master, -# DocId: po/libguestfs +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + #, python-format -msgid "%s" -msgstr "%s" +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" -msgid "A string searched in all relevant object attributes" -msgstr "Řetězec vyhledávaný ve všech odpovídajících atributech objektu" +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "Account" -msgstr "Účet" +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: +# pulseaudio.pot +#, fuzzy +#| msgid "Timeout" +msgid "LDAP timeout" +msgstr "Časový limit" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(reason)s" +msgid "%(exception)s" +msgstr "%(reason)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "nesprávný typ" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "chyba na serveru '%(server)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "automount location" +msgstr "Autentizace" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "automount locations" +msgstr "Autentizace" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Automount Locations" +msgstr "Autentizace" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Automount Location" +msgstr "Autentizace" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Nastavení" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy, python-format +#| msgid "Record Type" +msgid "%s Record" +msgstr "Typ záznamu" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils -msgid "Add" -msgstr "Přidat" +#, fuzzy +#| msgid "Priority" +msgid "Priority (order)" +msgstr "Priorita" -# auto translated by TM merge from project: Fedora Elections Guide, version: -# master, DocId: Casting -msgid "Any Group" -msgstr "Jakákoli skupina" +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "DNS configuration options" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "DNS Global Configuration" +msgstr "Nastavení" + +msgid "IPA DNS version" +msgstr "" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "IPA DNS servers" +msgstr "Servery" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Nastavení" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +#| msgid "Server" +msgid "DNS server" +msgstr "Server" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "DNS servers" +msgstr "Servery" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "DNS Servers" +msgstr "Servery" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +#| msgid "Server" +msgid "DNS Server" +msgstr "Server" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "HBAC services" +msgstr "službu" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "Služby" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Service" +msgid "HBAC Service" +msgstr "Služba" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +#, fuzzy +#| msgid "Stage" +msgid "Stage Users" +msgstr "Stage" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +#, fuzzy +#| msgid "Stage" +msgid "Stage User" +msgstr "Stage" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "host groups" +msgstr "skupinu" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "Group" +msgid "Host Group" +msgstr "Skupina" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "hostgroup" +msgstr "skupinu" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Continue" +msgid "Vault Container" +msgstr "Pokračovat" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "vault" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "vaults" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "Vaults" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "Vault" +msgstr "Výchozí" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Nastavení" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "netgroups" +msgstr "skupinu" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "Netgroups" +msgstr "skupinu" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "skupinu" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "One time password commands" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Nastavení" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "RADIUS Servers" +msgstr "Servery" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "RADIUS" +msgid "RADIUS Server" +msgstr "RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Configuration" +msgstr "Nastavení" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "chyba na serveru '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "groups" +msgstr "skupinu" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "Group" +msgid "User Group" +msgstr "Skupina" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Version" +msgid "" +"\n" +"Permissions\n" +msgstr "Verze" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deprecated options" +msgid "Deprecated; use %s" +msgstr "Zastaralé volby" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "URL" +msgid "URI" +msgstr "URL" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Rules" +msgid "Sudo Rules" +msgstr "Pravidla" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "user" +msgid "users" +msgstr "uživatel" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "command" +msgstr "příkaz" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "commands" +msgstr "příkazy" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "group" +msgid "group runAs" +msgstr "skupinu" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "command" +msgid "sudo command" +msgstr "příkaz" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "commands" +msgid "sudo commands" +msgstr "příkazy" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "commands" +msgid "Sudo Commands" +msgstr "příkazy" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "" +"\n" +"IPA locations\n" +msgstr "Umístění" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Umístění" + +msgid "IPA location name" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +#, fuzzy +#| msgid "description" +msgid "IPA Location description" +msgstr "popis" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +msgid "Servers" +msgstr "Servery" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +#| msgid "Server" +msgid "IPA Server" +msgstr "Server" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Name" +msgstr "Název" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +msgid "Documentation" +msgstr "Dokumentace" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Version" +msgstr "Verze" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Method name" +msgstr "Název příkazu" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Search for commands." +msgstr "Téma nebo příkaz" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "CLI name" +msgstr "Název příkazu" + +#, fuzzy +#| msgid "User password" +msgid "Confirm (password)" +msgstr "Uživatelské heslo" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +msgid "Default" +msgstr "Výchozí" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +#, fuzzy +#| msgid "Default" +msgid "Default from" +msgstr "Výchozí" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Label" +msgstr "Název" + +msgid "Convert on server" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Options" +msgid "Option group" +msgstr "Přepínače" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Poziční argumenty" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Self Service Permissions" +msgstr "Nastavení služeb" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Serverové role" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "server role" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "server roles" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "IPA Server Roles" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "IPA Server Role" +msgstr "Serverové role" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux User Map rule" +msgstr "Uživatel SELinuxu" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux User Map rules" +msgstr "Uživatel SELinuxu" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux User Maps" +msgstr "Uživatel SELinuxu" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux User Map" +msgstr "Uživatel SELinuxu" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Zastaralé volby" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Nespecifikováno" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +msgid "Subject" +msgstr "Předmět" + +msgid "Subject email address" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Předmět" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Předmět" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "IP adresa" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Předmět" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Předmět" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint (SHA1)" +msgstr "Otisk" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint (SHA256)" +msgstr "Otisk" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Serial number (hex)" +msgstr "Sériové číslo" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "Zastaralé volby" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Status" +msgstr "Stav" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about an ID override." +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "User ID" +msgid "User ID override" +msgstr "ID uživatele" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +#, fuzzy +#| msgid "Subject" +msgid "Subject DN" +msgstr "Předmět" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Modify CA configuration." +msgstr "Nastavení" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Disable" +msgid "Disable a CA." +msgstr "Zakázat" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Enable" +msgid "Enable a CA." +msgstr "Povolit" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils msgid "Apply" msgstr "Použít" -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Audit" -msgstr "Auditovat" +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Options" +msgid "Actions" +msgstr "Přepínače" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Add" +msgstr "Přidat" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" # auto translated by TM merge from project: anaconda, version: f25, DocId: # main -msgid "Authentication" +#, fuzzy +#| msgid "Authentication" +msgid "Authentication indicators" msgstr "Autentizace" -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -msgid "Available" -msgstr "Dostupný" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Authentication indicator" +msgstr "Autentizace" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +msgid "RADIUS" +msgstr "RADIUS" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" # auto translated by TM merge from project: authconfig, version: master, # DocId: po/authconfig @@ -83,82 +19099,32 @@ msgstr "Zpět" msgid "Cancel" msgstr "Zrušit" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "City" -msgstr "Město" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Class" -msgstr "Třída" - # auto translated by TM merge from project: ibus-libpinyin, version: master, # DocId: ibus-libpinyin msgid "Clear" msgstr "Vymazat" +msgid "Clear all fields on the page." +msgstr "" + # auto translated by TM merge from project: SETroubleShoot, version: stable, # DocId: framework/po/setroubleshoot msgid "Close" msgstr "Zavřít" -msgid "Command name" -msgstr "Název příkazu" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Configuration" -msgstr "Nastavení" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Continue" -msgstr "Pokračovat" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "DNS" -msgstr "DNS" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -msgid "Default" -msgstr "Výchozí" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Delete" -msgstr "Smazat" - -msgid "Deprecated options" -msgstr "Zastaralé volby" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Description" -msgstr "Popis" - # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils msgid "Disable" msgstr "Zakázat" -# auto translated by TM merge from project: Cockpit, version: master, DocId: -# cockpit -msgid "Disabled" -msgstr "Zakázáno" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -msgid "Documentation" -msgstr "Dokumentace" - # auto translated by TM merge from project: Fedora Websites, version: # alt.fedoraproject.org, DocId: po/alt.fedoraproject.org msgid "Download" msgstr "Stáhnout" +msgid "Download certificate as PEM formatted file." +msgstr "" + # auto translated by TM merge from project: ibus-libpinyin, version: master, # DocId: ibus-libpinyin msgid "Edit" @@ -169,293 +19135,68 @@ msgstr "Upravit" msgid "Enable" msgstr "Povolit" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Enabled" -msgstr "Povoleno" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Vložte znovu své %(label)s, aby se ověřila jeho správnost." - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "Entry" -msgstr "Položka" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -msgid "Error" -msgstr "Chyba" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Expression" -msgstr "Výraz" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Filter" -msgstr "Filtr" - # auto translated by TM merge from project: system-config-printer, version: # master, DocId: system-config-printer msgid "Find" msgstr "Hledat" -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -msgid "Fingerprint" -msgstr "Otisk" - -# auto translated by TM merge from project: Fedora Websites, version: -# fedoraproject.org, DocId: po/fedora-web -msgid "First" -msgstr "Prvenství " - -# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 -msgid "Flags" -msgstr "Vlajky" - -# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: -# locale/asknot-ng -msgid "General" -msgstr "Obecné" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -msgid "Group" -msgstr "Skupina" - -# auto translated by TM merge from project: libreport, version: rhel6, DocId: -# libreport -msgid "Groups" -msgstr "Skupiny" +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +#, fuzzy +#| msgid "Set" +msgid "Get" +msgstr "Sada" # auto translated by TM merge from project: abrt, version: rhel7, DocId: abrt msgid "Hide" msgstr "Skrýt" -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Host" -msgstr "Počítač" +msgid "Issue" +msgstr "" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Host Name" -msgstr "Název počítače" +msgid "Match" +msgstr "" -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -msgid "Host name" -msgstr "Název počítače" +msgid "Match users according to certificate." +msgstr "" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "IP Address" -msgstr "IP adresa" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Neplatný požadavek JSON-RPC: %(error)s" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -msgid "Invalid LDAP URI." -msgstr "Neplatné URI pro LDAP." - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Chyba Kerberos: %(major)s/%(minor)s" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Key" -msgstr "Klíč" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -msgid "LDAP password" -msgstr "LDAP heslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Label" -msgstr "Název" - -# auto translated by TM merge from project: abrt, version: master, DocId: abrt -msgid "Last" -msgstr "Poslední" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Level" -msgstr "Úroveň" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Location" -msgstr "Umístění" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -msgid "MAC address" -msgstr "MAC adresa" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "Mailing Address" -msgstr "Poštovní adresa" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Members" -msgstr "Členové" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Chybějící nebo neplatný HTTP Referer, %(referer)s" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Model" -msgstr "Model" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Mount point" -msgstr "Místo připojení" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Name" -msgstr "Název" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Next" -msgstr "Další" - -msgid "No credentials cache found" -msgstr "Nenalezena mezipamět ověřovacích údajů" - -msgid "No file to read" -msgstr "Žádný soubor k přečtení" - -msgid "No matching entries found" -msgstr "Nenalezeny žádné shodné položky" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Network_Interfaces -msgid "Note" -msgstr "Poznámka" +msgid "Migrate" +msgstr "" # auto translated by TM merge from project: Fedora Websites, version: # alt.fedoraproject.org, DocId: po/alt.fedoraproject.org msgid "OK" msgstr "Budiž" -msgid "Operating system" -msgstr "Operační systém" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Options" -msgstr "Přepínače" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Order" -msgstr "Další" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, c-format -msgid "Out of memory!\n" -msgstr "Nedostatek paměti\n" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Page" -msgstr "Strana" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -msgid "Password" -msgstr "Heslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Passwords do not match" -msgstr "Hesla nejsou stejná." - -msgid "Passwords do not match!" -msgstr "Hesla se neshodují!" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Platform" -msgstr "Platforma" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Port" -msgstr "Port" - -msgid "Positional arguments" -msgstr "Poziční argumenty" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Prev" -msgstr "Předchozí" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Priority" -msgstr "Priorita" - -# auto translated by TM merge from project: OSCAP Anaconda Addon, version: -# master, DocId: oscap-anaconda-addon -msgid "Profile" -msgstr "Profil" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "Profiles" -msgstr "Profily" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Protocol" -msgstr "Protokol" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -msgid "Provisioning" -msgstr "Zajištění" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -msgid "RADIUS" -msgstr "RADIUS" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Record Type" -msgstr "Typ záznamu" - # auto translated by TM merge from project: virt-viewer, version: master, # DocId: virt-viewer msgid "Refresh" msgstr "Obnovit" +msgid "Reload current settings from the server." +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Delete" +msgstr "Smazat" + +msgid "Remove hold" +msgstr "" + # auto translated by TM merge from project: system-config-printer, version: # master, DocId: system-config-printer msgid "Reset" msgstr "Reset" +#, fuzzy +#| msgid "User password" +msgid "Reset Password" +msgstr "Uživatelské heslo" + +msgid "Reset Password and Log in" +msgstr "" + # auto translated by TM merge from project: Fedora Media Writer, version: # master, DocId: mediawriter msgid "Restore" @@ -471,320 +19212,5954 @@ msgstr "Opakovat" msgid "Revert" msgstr "Vrátit" -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -msgid "Rights" -msgstr "Práva" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Role" -msgstr "Role" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "Rules" -msgstr "Pravidla" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "SELinux User" -msgstr "Uživatel SELinuxu" - -#, python-format -msgid "Same as --%s" -msgstr "Stejné jako --%s" +msgid "Revoke" +msgstr "" # auto translated by TM merge from project: fedora-software, version: master, # DocId: template/django msgid "Save" msgstr "Uložit" -# auto translated by TM merge from project: libreport, version: rhel6, DocId: -# libreport -msgid "Search" -msgstr "Hledat" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Secret" -msgstr "Tajné" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Serial" -msgstr "Sériový" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Serial Number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -msgid "Server" -msgstr "Server" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -msgid "Server Roles" -msgstr "Serverové role" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -msgid "Servers" -msgstr "Servery" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Service" -msgstr "Služba" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Služba '%(service)s' nenalezena v databázi Kerberosu" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -msgid "Service Settings" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "Services" -msgstr "Služby" - # auto translated by TM merge from project: docbook-locales, version: master, # DocId: locale msgid "Set" msgstr "Sada" -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -msgid "Settings" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Shared" -msgstr "Sdílená" - # auto translated by TM merge from project: SETroubleShoot, version: master, # DocId: framework/po/setroubleshoot msgid "Show" msgstr "Ukázat" -# auto translated by TM merge from project: blivet-gui, version: f23-branch, -# DocId: blivet-gui -msgid "Size" -msgstr "Velikost" - # auto translated by TM merge from project: Fedora Websites, version: # labs.fedoraproject.org, DocId: po/labs.fedoraproject.org msgid "Stage" msgstr "Stage" -# auto translated by TM merge from project: ibus-libpinyin, version: master, -# DocId: ibus-libpinyin -msgid "Standard" -msgstr "Standard" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Status" -msgstr "Stav" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -msgid "Subject" -msgstr "Předmět" - -# auto translated by TM merge from project: Linux PAM, version: master, DocId: -# po/Linux-PAM -msgid "Success" -msgstr "Úspěch" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Target" -msgstr "Cíl" - -msgid "The topic or command name." -msgstr "Název tématu nebo příkazu." - -msgid "Ticket expired" -msgstr "Platnost lístku skončila" - -# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: -# pulseaudio.pot -msgid "Timeout" -msgstr "Časový limit" - -msgid "To get command help, use:" -msgstr "Chceteli získat nápovědu k příkazu, použijte:" - -msgid "Topic commands:" -msgstr "Příkazy tématu:" - -msgid "Topic or Command" -msgstr "Téma nebo příkaz" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Type" -msgstr "Typ" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -msgid "URL" -msgstr "URL" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -msgid "UUID" -msgstr "UUID:" - -# auto translated by TM merge from project: anaconda, version: master, DocId: -# main -msgid "Unknown" -msgstr "Neznámý" - -# auto translated by TM merge from project: GSS NTLMSSP, version: master, -# DocId: gssntlmssp -msgid "Unknown Error" -msgstr "Neznámá chyba" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Unspecified" -msgstr "Nespecifikováno" - # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils msgid "Update" msgstr "Aktualizovat" -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "User" -msgstr "Uživatel" +msgid "View" +msgstr "" -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "User ID" -msgstr "ID uživatele" +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Customization" +msgstr "Nastavení" -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -msgid "User name" -msgstr "Uživatelské jméno" +msgid "Pagination Size" +msgstr "" -msgid "User password" -msgstr "Uživatelské heslo" +msgid "Collapse All" +msgstr "" -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Username" -msgstr "Jméno uživatele" +msgid "Expand All" +msgstr "" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Users" -msgstr "Uživatelé" +# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: +# locale/asknot-ng +msgid "General" +msgstr "Obecné" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Vendor" -msgstr "Výrobce" +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Identity Settings" +msgstr "Nastavení služeb" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Version" -msgstr "Verze" +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Record Settings" +msgstr "Nastavení služeb" -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -msgid "Warning" -msgstr "Varování" +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Working" -msgstr "Pracuje" +msgid "Back to Top" +msgstr "" -msgid "an internal error has occurred" -msgstr "Vyskytla se vnitřní chyba" +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "na serveru '%(server)s' se vyskytla interní chyba" +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "nelze se připojit k '%(uri)s': %(error)s" +msgid "Add custom value" +msgstr "" -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "command" -msgstr "příkaz" +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +msgid "Available" +msgstr "Dostupný" -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "commands" -msgstr "příkazy" +msgid "Some operations failed." +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Options" +msgid "Operations Error" +msgstr "Přepínače" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Confirmation" +msgstr "Nastavení" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" # auto translated by TM merge from project: anaconda, version: f22-branch, # DocId: anaconda -msgid "description" +#, fuzzy +#| msgid "description" +msgid "Redirection" msgstr "popis" -msgid "did not receive Kerberos credentials" -msgstr "neobdrženy ověřovací údaje Kerberos" +msgid "Select entries to be removed." +msgstr "" -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "chyba marshallingu dat pro přenos XML-RPC: %(error)s" +msgid "Result" +msgstr "" -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "chyba na serveru '%(server)s': %(error)s" +msgid "Show details" +msgstr "" -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "group" -msgstr "skupinu" +# auto translated by TM merge from project: Linux PAM, version: master, DocId: +# po/Linux-PAM +msgid "Success" +msgstr "Úspěch" -msgid "incorrect type" -msgstr "nesprávný typ" +msgid "Validation error" +msgstr "" -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -msgid "password" -msgstr "heslo" +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "Vyskytla se vnitřní chyba" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Error" +msgid "HTTP Error" +msgstr "Chyba" + +msgid "Internal Error" +msgstr "" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Error" +msgid "IPA Error" +msgstr "Chyba" + +msgid "No response" +msgstr "" + +# auto translated by TM merge from project: GSS NTLMSSP, version: master, +# DocId: gssntlmssp +msgid "Unknown Error" +msgstr "Neznámá chyba" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +msgid "URL" +msgstr "URL" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +msgid "Settings" +msgstr "Nastavení" + +# auto translated by TM merge from project: libreport, version: rhel6, DocId: +# libreport +msgid "Search" +msgstr "Hledat" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Authenticating" +msgstr "Autentizace" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "number of passwords" +msgstr "Uživatelské heslo" # auto translated by TM merge from project: virt-manager, version: master, # DocId: virt-manager msgid "seconds" msgstr "sekund" +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Migrating" +msgstr "Nastavení" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +#| msgid "Settings" +msgid "Role Settings" +msgstr "Nastavení" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "Remove roles" +msgstr "Serverové role" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Expression" +msgstr "Výraz" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Add automount location" +msgstr "Autentizace" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Type" +msgid "Map Type" +msgstr "Typ" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Host" +msgid "Any Host" +msgstr "Počítač" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Service" +msgid "Any Service" +msgstr "Služba" + +# auto translated by TM merge from project: OSCAP Anaconda Addon, version: +# master, DocId: oscap-anaconda-addon +#, fuzzy +#| msgid "Profile" +msgid "Any Profile" +msgstr "Profil" + +msgid "Anyone" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Rules" +msgid "Rule status" +msgstr "Pravidla" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Unspecified" +msgid "Specified CAs" +msgstr "Nespecifikováno" + +msgid "Specified Hosts and Groups" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +#| msgid "Profiles" +msgid "Specified Profiles" +msgstr "Profily" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Common Name" +msgstr "Název příkazu" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Maximum serial number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Minimum serial number" +msgstr "Sériové číslo" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprints" +msgstr "Otisk" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Network_Interfaces +msgid "Note" +msgstr "Poznámka" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Serial Number" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Serial Number" +msgid "Serial Number (hex)" +msgstr "Sériové číslo" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "SHA1 Fingerprint" +msgstr "Otisk" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Fingerprint" +msgid "SHA256 Fingerprint" +msgstr "Otisk" + +msgid "Superseded" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Unspecified" +msgstr "Nespecifikováno" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "User Login" +msgstr "Uživatelské jméno" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "Nastavení" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Options" +msgid "Group Options" +msgstr "Přepínače" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Options" +msgid "Search Options" +msgstr "Přepínače" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux Options" +msgstr "Uživatel SELinuxu" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "Server Options" +msgstr "Serverové role" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service Options" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Options" +msgid "User Options" +msgstr "Přepínače" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Options" +msgstr "Přepínače" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Record Type" +msgid "Other Record Types" +msgstr "Typ záznamu" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Record Type" +msgid "Standard Record Types" +msgstr "Typ záznamu" + +msgid "Records for DNS Zone" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Record Type" +msgstr "Typ záznamu" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "DNS Zone Settings" +msgstr "Nastavení služeb" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Level" +msgstr "Úroveň" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +#| msgid "Settings" +msgid "Group Settings" +msgstr "Nastavení" + +msgid "External" +msgstr "" + +# auto translated by TM merge from project: libreport, version: rhel6, DocId: +# libreport +msgid "Groups" +msgstr "Skupiny" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +#, fuzzy +#| msgid "Group" +msgid "Group Type" +msgstr "Skupina" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: Linux PAM, version: master, DocId: +# po/Linux-PAM +#, fuzzy +#| msgid "Success" +msgid "Accessing" +msgstr "Úspěch" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Service" +msgid "Via Service" +msgstr "Služba" + +msgid "Who" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "Add HBAC service" +msgstr "službu" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +# auto translated by TM merge from project: Cockpit, version: master, DocId: +# cockpit +#, fuzzy +#| msgid "Disabled" +msgid "Include Disabled" +msgstr "Zakázáno" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Enabled" +msgid "Include Enabled" +msgstr "Povoleno" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "Rules" +msgstr "Pravidla" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Host Name" +msgstr "Název počítače" + +msgid "Delete Key, Unprovision" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +#| msgid "Settings" +msgid "Host Settings" +msgstr "Nastavení" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: +# locale/asknot-ng +#, fuzzy +#| msgid "General" +msgid "Generate OTP" +msgstr "Obecné" + +# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: +# locale/asknot-ng +#, fuzzy +#| msgid "General" +msgid "Generated OTP" +msgstr "Obecné" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Password" +msgid "One-Time Password" +msgstr "Heslo" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Reset" +msgid "Reset OTP" +msgstr "Reset" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +#, fuzzy +#| msgid "Provisioning" +msgid "Unprovision" +msgstr "Zajištění" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +#, fuzzy +#| msgid "Provisioning" +msgid "Unprovisioning host" +msgstr "Zajištění" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +# auto translated by TM merge from project: OSCAP Anaconda Addon, version: +# master, DocId: oscap-anaconda-addon +msgid "Profile" +msgstr "Profil" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Apply" +msgid "Un-apply" +msgstr "Použít" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Host" +msgstr "Počítač" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Netgroup Settings" +msgstr "Nastavení služeb" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Configure your token" +msgstr "Nastavení" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +#| msgid "Settings" +msgid "OTP Token Settings" +msgstr "Nastavení" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Disable" +msgid "Disable token" +msgstr "Zakázat" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Enable" +msgid "Enable token" +msgstr "Povolit" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Show configuration uri" +msgstr "Nastavení" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +#, fuzzy +#| msgid "Provisioning" +msgid "Permission settings" +msgstr "Zajištění" + +msgid "Attribute breakdown" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Privilege Settings" +msgstr "Nastavení služeb" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +#, fuzzy +#| msgid "LDAP password" +msgid "Add password policy" +msgstr "LDAP heslo" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "Heslo" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +#| msgid "Settings" +msgid "Range Settings" +msgstr "Nastavení" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "Local domain" +msgstr "Umístění" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "RADIUS Proxy Server Settings" +msgstr "Nastavení služeb" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Update" +msgid "Force Update" +msgstr "Aktualizovat" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "SELinux User" +msgid "Add SELinux user map" +msgstr "Uživatel SELinuxu" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +msgid "Server Roles" +msgstr "Serverové role" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "Server Role" +msgstr "Serverové role" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete Server" +msgstr "Smazat" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "Add service" +msgstr "službu" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service Certificate" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +msgid "Service Settings" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +msgid "Provisioning" +msgstr "Zajištění" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "Remove services" +msgstr "službu" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +#, fuzzy +#| msgid "Provisioning" +msgid "Unprovisioning service" +msgstr "Zajištění" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +#, fuzzy +#| msgid "Stage" +msgid "Stage users" +msgstr "Stage" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "command" +msgid "Add sudo command" +msgstr "příkaz" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "command" +msgid "Any Command" +msgstr "příkaz" + +# auto translated by TM merge from project: Fedora Elections Guide, version: +# master, DocId: Casting +msgid "Any Group" +msgstr "Jakákoli skupina" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "commands" +msgid "Run Commands" +msgstr "příkazy" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +#, fuzzy +#| msgid "Options" +msgid "Option added" +msgstr "Přepínače" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Replication configuration" +msgstr "Nastavení" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "Account" +msgstr "Účet" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +#| msgid "Settings" +msgid "Trust Settings" +msgstr "Nastavení" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Pre-shared password" +msgstr "Uživatelské heslo" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +#| msgid "Settings" +msgid "Account Settings" +msgstr "Nastavení" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +#| msgid "Account" +msgid "Account Status" +msgstr "Účet" + +msgid "Active users" +msgstr "" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "user" +msgid "Add user" +msgstr "uživatel" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +#, fuzzy +#| msgid "Settings" +msgid "Contact Settings" +msgstr "Nastavení" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delete mode" +msgstr "Smazat" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "Mailing Address" +msgstr "Poštovní adresa" + +msgid "Misc. Information" +msgstr "" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "delete" +msgstr "Smazat" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +#, fuzzy +#| msgid "service" +msgid "preserve" +msgstr "službu" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Members" +msgstr "Členové" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "Služby" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Shared" +msgstr "Sdílená" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Shared" +msgid "Shared Vaults" +msgstr "Sdílená" + +# auto translated by TM merge from project: ibus-libpinyin, version: master, +# DocId: ibus-libpinyin +msgid "Standard" +msgstr "Standard" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Users" +msgid "User Vaults" +msgstr "Uživatelé" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# fedoraproject.org, DocId: po/fedora-web +#, fuzzy +#| msgid "First" +msgid "First OTP" +msgstr "Prvenství " + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "Hesla nejsou stejná." + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Reset your password." +msgstr "Uživatelské heslo" + +msgid "Second OTP" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Verify Password" +msgstr "Uživatelské heslo" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Working" +msgstr "Pracuje" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Audit" +msgstr "Auditovat" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Authentication" +msgstr "Autentizace" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +#, fuzzy +#| msgid "Account" +msgid "Automount" +msgstr "Účet" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Services" +msgid "Network Services" +msgstr "Služby" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# fedoraproject.org, DocId: po/fedora-web +msgid "First" +msgstr "Prvenství " + +# auto translated by TM merge from project: abrt, version: master, DocId: abrt +msgid "Last" +msgstr "Poslední" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Next" +msgstr "Další" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Page" +msgstr "Strana" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Prev" +msgstr "Předchozí" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Role" +msgstr "Role" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "" +"\n" +"IPA servers\n" +msgstr "Servery" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +#, fuzzy +#| msgid "Server" +msgid "server" +msgstr "Server" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "servers" +msgstr "Servery" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "IPA Servers" +msgstr "Servery" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy +#| msgid "Location" +msgid "Server location" +msgstr "Umístění" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service weight" +msgstr "Nastavení služeb" + +msgid "Weight for server services" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service relative weight" +msgstr "Nastavení služeb" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +#, fuzzy +#| msgid "Server Roles" +msgid "Enabled server roles" +msgstr "Serverové role" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "chyba na serveru '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "Stav" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +#, fuzzy +#| msgid "Servers" +msgid "Server state" +msgstr "Servery" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +#, fuzzy, python-format +#| msgid "Members" +msgid "member %s" +msgstr "Členové" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "service delegation rules" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation rules" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation rule" +msgstr "Nastavení služeb" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "service delegation target" +msgstr "" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "service delegation targets" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation targets" +msgstr "Nastavení služeb" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation target" +msgstr "Nastavení služeb" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "Invalid LDAP URI." +msgstr "Neplatné URI pro LDAP." + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Authentication Indicators" +msgstr "Autentizace" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "password" +msgid "password policy" +msgstr "heslo" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "heslo" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "Heslo" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Uživatelské jméno" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Nastavení" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Nastavení" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +# auto translated by TM merge from project: Cockpit, version: master, DocId: +# cockpit +#, fuzzy +#| msgid "Disabled" +msgid "Domain enabled" +msgstr "Zakázáno" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Users" +msgid "User logins" +msgstr "Uživatelé" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + # auto translated by TM merge from project: Fedora Cheat Cubes, version: # master, DocId: Fedora_Cheat_Cube_Users msgid "service" msgstr "službu" -#, python-format -msgid "unknown command '%(name)s'" -msgstr "neznámý příkaz '%(name)s'" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "neznámý kód %(code)d chyby ze serveru %(server)s: %(error)s" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "url" -msgstr "url" - # auto translated by TM merge from project: Fedora Cheat Cubes, version: # master, DocId: Fedora_Cheat_Cube_Users -msgid "user" -msgstr "uživatel" +#, fuzzy +#| msgid "service" +msgid "services" +msgstr "službu" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Delegations" +msgstr "Zastaralé volby" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +#, fuzzy +#| msgid "Delete" +msgid "Delegation" +msgstr "Smazat" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Rules" +msgid "HBAC Rules" +msgstr "Pravidla" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +#, fuzzy +#| msgid "Entry" +msgid "entry" +msgstr "Položka" + +msgid "entries" +msgstr "" + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "Entry" +msgstr "Položka" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +# auto translated by TM merge from project: libguestfs, version: master, +# DocId: po/libguestfs +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "User password expiration" +msgstr "Uživatelské heslo" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +#, fuzzy +#| msgid "Authentication" +msgid "Last failed authentication" +msgstr "Autentizace" + +# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: +# pulseaudio.pot +#, fuzzy +#| msgid "Timeout" +msgid "Time now" +msgstr "Časový limit" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +# auto translated by TM merge from project: anaconda, version: master, DocId: +# main +msgid "Unknown" +msgstr "Neznámý" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Out of memory!\n" +msgid "Out of memory\n" +msgstr "Nedostatek paměti\n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, fuzzy +#| msgid "Out of memory!\n" +msgid "Out of memory!?\n" +msgstr "Nedostatek paměti\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Password is too long!\n" +msgstr "Hesla se neshodují!" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/de.po b/po/de.po index ac7031213..805049de1 100644 --- a/po/de.po +++ b/po/de.po @@ -21,94 +21,887 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.4.2\n" +#, fuzzy, c-format +#| msgid "Out of memory!?\n" +msgid "Out of memory!\n" +msgstr "Nicht genügend Speicher!?\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, c-format +msgid "Out of memory!" +msgstr "Nicht genügend Speicher!" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "Keine Werte für %s" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "ipa-getkeytab not found\n" +msgid "IPA namingContext not found\n" +msgstr "ipa-getkeytab nicht gefunden\n" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "principal not found\n" +msgid "principal not found in XML-RPC response\n" +msgstr "Principal nicht gefunden\n" + +#, fuzzy, c-format +#| msgid "This entry is already enabled" +msgid "Host is already joined.\n" +msgstr "Dieser Eintrag ist bereits aktiviert" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_dumps() failed\n" +msgstr "fork() fehlgeschlagen\n" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" msgid "" -"\n" -" Add an automember rule.\n" -" " +"JSON-RPC request:\n" +"%s\n" +msgstr "Ungültige JSON-RPC-Anfrage: %(error)s" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "No response" +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "Keine Antwort" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_pack_ex() failed: %s\n" +msgstr "fork() fehlgeschlagen\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Kerberos context initialization failed\n" +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" + +#, fuzzy, c-format +#| msgid "Unable to generate Kerberos Credential Cache\n" +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "fork() fehlgeschlagen\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytab nicht gefunden\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytab hat falsche Zugriffsrechte?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "Ausführen von ipa-getkeytab fehgeschlagen, errno %d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Error obtaining initial credentials: %s.\n" +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Fehler beim Holen der initialen Anmeldedaten: %s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Fehler beim Holen der initialen Anmeldedaten: %s.\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" +"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Fehler beim Speichern der Anmeldedaten im Anmeldedaten-Zwischenspeicher: " +"%s.\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Die rohe XML-RPC-Ausgabe im GSSAPI-Modus anzeigen" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Stiller Modus. Nur Fehler werden ausgegeben." + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "Hostname dieses Servers" + +msgid "hostname" +msgstr "Hostname" + +msgid "IPA Server to use" +msgstr "Zu verwendender IPA-Server" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "Dateiname" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" + +msgid "password" +msgstr "Passwort" + +#, fuzzy +#| msgid "LDAP password" +msgid "LDAP basedn" +msgstr "LDAP-Passwort" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Unable to generate Kerberos Credential Cache\n" +msgid "Unable to parse principal name\n" +msgstr "" +"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Principal %s wird entfernt\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to open keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "principal not found\n" +msgstr "Principal nicht gefunden\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to remove" +msgid "Unable to remove entry\n" +msgstr "Entfernen fehlgeschlagen" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Kerberos principal" +msgid "Unable to parse principal\n" +msgstr "Kerberos-Principal" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "Realm nicht gefunden\n" + +msgid "Print debugging information" +msgstr "Ausgabe von Debug-Informationen" + +msgid "Debugging output" +msgstr "Debugging-Ausgabe" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Kerberos Service Principal Name" +msgstr "Kerberos-Principal" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "Alle Principals in diesem Realm entfernen" + +msgid "Realm name" +msgstr "Realm-Name" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "Aufruf von »stat« für Konfigurationsdatei %s nicht möglich\n" + +#, c-format +msgid "out of memory\n" +msgstr "Nicht genügend Speicher\n" + +#, c-format +msgid "read error\n" +msgstr "Lesefehler\n" + +#, fuzzy, c-format +#| msgid "Kerberos context initialization failed\n" +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "KDC akzeptiert keine Schlüssel\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Nicht genügend Speicher\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" + +msgid "Simple bind failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "cannot open configuration file %s\n" +msgid "Operation failed: %s\n" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to get result: %s\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to parse result: %s\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Nicht genügend Speicher!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to create control!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to bind to server!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to get keytab!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create random key!\n" +msgid "Failed to retrieve any keys" +msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed to decode control reply!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Passwörter stimmen nicht überein!" + +#, fuzzy, c-format +#| msgid "cannot open configuration file %s\n" +msgid "Failed to open config file %s\n" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +#, fuzzy, c-format +#| msgid "cannot open configuration file %s\n" +msgid "Failed to parse config file %s\n" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +#, fuzzy +#| msgid "Failed to create random key!\n" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "Ausgabe nur bei Fehlern" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "Servername" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +#, fuzzy +#| msgid "Supported encryption types:\n" +msgid "Comma separated encryption types list" +msgstr "Unterstützte Verschlüsselungstypen:\n" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +#, fuzzy +#| msgid "Supported encryption types:\n" +msgid "Permitted Encryption Types" +msgstr "Unterstützte Verschlüsselungstypen:\n" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "LDAP DN" +msgstr "LDAP-URI" + +#, fuzzy +#| msgid "LDAP password (if not using Kerberos)" +msgid "DN to bind as if not using kerberos" +msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" + +msgid "LDAP password" +msgstr "LDAP-Passwort" + +#, fuzzy +#| msgid "LDAP password (if not using Kerberos)" +msgid "password to use if not using kerberos" +msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" + +#, fuzzy +#| msgid "LDAP password" +msgid "Prompt for LDAP password" +msgstr "LDAP-Passwort" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Path to the IPA CA certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +#| msgid "Certificate" +msgid "IPA CA certificate" +msgstr "Zertifikat" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Unterstützte Verschlüsselungstypen:\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Warnung: Typ konnte nicht umgewandelt werden (#%d)\n" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Enter LDAP password" +msgstr "LDAP-Passwort" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "Neues Principal-Passwort" + +msgid "Verify Principal Password" +msgstr "Principal-Passwort bestätigen" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Service principal" +msgid "Invalid Service Principal Name\n" +msgstr "Dienst-Principal" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to open Keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to create key material\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to get keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to add key to the keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to close the keytab\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "Fehler bei Mitgliedern" + +#, fuzzy +#| msgid "Failed hosts/hostgroups" +msgid "Failed source hosts/hostgroups" +msgstr "Fehler bei Hosts/Hostgruppen" + +msgid "Failed hosts/hostgroups" +msgstr "Fehler bei Hosts/Hostgruppen" + +msgid "Failed users/groups" +msgstr "Fehlerhafte Benutzer/Gruppen" + +msgid "Failed service/service groups" +msgstr "Fehler bei Diensten/Dienstgruppen" + +msgid "Failed to remove" +msgstr "Entfernen fehlgeschlagen" + +msgid "Failed RunAs" +msgstr "RunAs fehlgeschlagen" + +msgid "Failed RunAsGroup" +msgstr "RunAsGroup fehlgeschlagen" + +#, fuzzy +#| msgid "Failed logins" +msgid "Failed profiles" +msgstr "Fehlgeschlagene Logins" + +#, fuzzy +#| msgid "Failed RunAs" +msgid "Failed CAs" +msgstr "RunAs fehlgeschlagen" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed member manager" +msgstr "Fehler bei Mitgliedern" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed managedby" +msgstr "Fehler bei Mitgliedern" + +#, fuzzy +#| msgid "Users allowed to retrieve keytab" +msgid "Failed allowed to retrieve keytab" +msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" + +#, fuzzy +#| msgid "Users allowed to create keytab" +msgid "Failed allowed to create keytab" +msgstr "Benutzer die Schlüsseltabelle erstellen dürfen" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed targets" +msgstr "Hinzufügen fehlgeschlagen" + +#, fuzzy +#| msgid "Failed logins" +msgid "Failed owners" +msgstr "Fehlgeschlagene Logins" + +msgid "Failed to add" +msgstr "Hinzufügen fehlgeschlagen" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "Masterdatei" + +msgid "Automount master file." +msgstr "Automount-Masterdatei" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "Datei %(file)s nicht gefunden" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key %(key)s already exists" +msgstr "Dieser Eintrag existiert bereits" + +#, fuzzy, python-format +#| msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgid "map %(map)s already exists" +msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" + +msgid "Imported maps:" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added %(map)s" +msgstr "Host \"%(value)s\" hinzugefügt" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +#, fuzzy +#| msgid "Output filename" +msgid "Input file" +msgstr "Name der Ausgabedatei" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "File to load the certificate from" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +#, fuzzy +#| msgid "Segment details" +msgid "Servers details:" +msgstr "Segment Details" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." msgstr "" -"\n" -" Auto-Mitgliedschaftsregel hinzufügen.\n" -" " msgid "" "\n" -" Add conditions to an automember rule.\n" -" " +"YubiKey Tokens\n" msgstr "" "\n" -" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel löschen.\n" -" " - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel bearbeiten. " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Regel für Auto-Mitgliedschaft\n" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"Domain Name System (DNS)\n" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"OTP-Tokens bearbeiten.\n" +"YubiKey Tokens\n" msgid "" "\n" @@ -119,10 +912,8417 @@ msgstr "" msgid "" "\n" -"OTP Tokens\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +#, fuzzy +#| msgid "Add a new OTP token." +msgid "Add a new YubiKey OTP token." +msgstr "Neuen OTP-Token hinzufügen" + +#, fuzzy +#| msgid "" +#| "\n" +#| "YubiKey Tokens\n" +msgid "YubiKey slot" msgstr "" "\n" +"YubiKey Tokens\n" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Sudo-Regel »%s« wurde aktiviert." + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Sudo-Regel »%s« wurde deaktiviert." + +#, fuzzy, python-format +#| msgid "Added condition(s) to \"%(value)s\"" +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of agreements per replica" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "Einen Benutzer löschen, Eintrag für zukünfigte Verwendung aufbewahren" + +msgid "Delete a user" +msgstr "Einen Benutzer löschen" + +msgid "preserve and no-preserve cannot be both set" +msgstr "preserve und no-preserve kann nicht gleichzeitig gesetzt sein" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "Keine Option zum Ändern des spezifischen Datensatzes angegeben." + +msgid "Current DNS record contents:\n" +msgstr "Derzeitiger Inhalt des DNS-Datensatzes:\n" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Wert von %(name)s auf »%(value)s« ändern?" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "Keine Option zum Löschen des spezifischen Datensatzes angegeben." + +msgid "Delete all?" +msgstr "Alles löschen?" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Wert von %(name)s auf »%(value)s« löschen?" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "OTP Token synchronisieren." + +msgid "User ID" +msgstr "Benutzer-ID" + +msgid "Password" +msgstr "Passwort" + +msgid "First Code" +msgstr "Erster Code" + +msgid "Second Code" +msgstr "Zweiter Code" + +msgid "Token ID" +msgstr "Token ID" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Ungültig '%(name)s': %(error)s" + +#, fuzzy, python-format +#| msgid "cannot connect to '%(uri)s': %(error)s" +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Kann nicht zu '%(uri)s' verbinden: %(error)s" + +msgid "Invalid credentials" +msgstr "Ungültige Zugangsdaten" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new vault." +msgstr "Eine neue Gruppe erstellen." + +#, fuzzy +#| msgid "password" +msgid "Vault password" +msgstr "Passwort" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +#, fuzzy +#| msgid "Password change complete" +msgid "Password specified multiple times" +msgstr "Passwortänderung abgeschlossen" + +msgid "Public key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Missing vault public key" +msgstr "Ungültiger öffentlicher SSH-Schlüssel" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a vault." +msgstr "Rolle ändern." + +msgid "Change password" +msgstr "Passwort ändern" + +#, fuzzy +#| msgid "bind password" +msgid "Old vault password" +msgstr "Bind-Passwort" + +msgid "File containing the old vault password" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New vault password" +msgstr "Neues Passwort" + +msgid "File containing the new vault password" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Old vault private key" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Missing new vault public key" +msgstr "Ungültiger öffentlicher SSH-Schlüssel" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +#, fuzzy +#| msgid "Override inherited settings" +msgid "Override existing password" +msgstr "Vererbte Einstellungen überschreiben" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "File to store retrieved data" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Vault private key" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "Daten" + +msgid "Private key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "Missing values: " +msgid "Missing vault private key" +msgstr "Fehlende Werte:" + +msgid "Unrevoked" +msgstr "Nicht widerrufen" + +msgid "Error" +msgstr "Fehler" + +#, fuzzy +#| msgid "Output filename" +msgid "Input filename" +msgstr "Name der Ausgabedatei" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "File to load the certificate from." +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "ACI-Name" + +msgid "Permission" +msgstr "Berechtigung" + +msgid "Permission ACI grants access to" +msgstr "Berechtigungs-ACI erlaubt Zugriff auf" + +msgid "User group" +msgstr "Benutzer-Gruppe" + +msgid "User group ACI grants access to" +msgstr "Benutzergruppen-ACI erlaubt Zugriff auf" + +msgid "Permissions" +msgstr "Berechtigungen" + +#, fuzzy +#| msgid "Permissions to grant (read, write). Default is write." +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "Berechtigungen (read, write). Standard ist write" + +msgid "Attributes to which the permission applies" +msgstr "Attribute auf die die Berechtigung angewendet wird" + +msgid "Attributes" +msgstr "Attribute" + +msgid "Type" +msgstr "Typ" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "Typ des IPA-Objekts (user, group, host, hostgroup, service, netgroup)" + +msgid "Member of" +msgstr "Mitglied von" + +msgid "Member of a group" +msgstr "Mitglied einer Gruppe" + +msgid "Filter" +msgstr "Filter" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Gültiger LDAP filter (z.B. ou=Engineering)" + +msgid "Subtree" +msgstr "Subtree" + +msgid "Subtree to apply ACI to" +msgstr "Subtree auf den ACI angewendet wird" + +msgid "Target group" +msgstr "Ziel-Gruppe" + +#, fuzzy +#| msgid "Subtree to apply ACI to" +msgid "Group to apply ACI to" +msgstr "Subtree auf den ACI angewendet wird" + +msgid "Target your own entry (self)" +msgstr "Auf eigenen Eintrag anwenden (self)" + +#, fuzzy +#| msgid "Target your own entry (self)" +msgid "Apply ACI to your own entry (self)" +msgstr "Auf eigenen Eintrag anwenden (self)" + +#, fuzzy +#| msgid "Create a new CA ACL." +msgid "Create new ACI." +msgstr "Erstelle eine neue CA ACL." + +msgid "ACI prefix" +msgstr "ACI-Präfix" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" +"Präfix zur Unterscheidung der ACI-Typen (permission, delegation, " +"selfservice, none)" + +msgid "Test the ACI syntax but don't write anything" +msgstr "ACI-Syntax testen, aber nicht schreiben" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " +"die Befehlsausgabe aus." + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Gibt die Einträge so aus, wie sie auf dem Server gespeichert sind. Dies " +"wirkt sich nur auf das Ausgabeformat aus." + +msgid "User-friendly description of action performed" +msgstr "Benutzerfreundliche Beschreibung der ausgeführten Aktion" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" +"Der Wert von »primary_key« des Eintrags, z.B. »jdoe« für einen Benutzer" + +#, fuzzy +#| msgid "Delete a CA ACL." +msgid "Delete ACI." +msgstr "CA ACL löschen." + +msgid "True means the operation was successful" +msgstr "»True« bedeutet, dass die Operation erfolgreich abgeschlossen wurde." + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" +"Eine Zeichenkette, nach der in allen relevanten Objektattributen gesucht wird" + +msgid "Primary key only" +msgstr "Nur primärer Schlüssel" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "Anzahl der zurückgegebenen Einträge" + +msgid "True if not all results were returned" +msgstr "»True«, falls nicht alle Ergebnisse ausgegeben wurden" + +#, fuzzy +#| msgid "Modify a CA ACL." +msgid "Modify ACI." +msgstr "CA ACL ändern" + +#, fuzzy +#| msgid "Rename" +msgid "Rename an ACI." +msgstr "Umbenennen" + +msgid "New ACI name" +msgstr "Neuer ACI-Name" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "Ort der ACI" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "Schlüssel" + +#, fuzzy +#| msgid "Automount map name." +msgid "Automount key name." +msgstr "Automount-Map Name." + +msgid "Mount information" +msgstr "Einhänge-Informationen" + +msgid "description" +msgstr "Beschreibung" + +msgid "Location" +msgstr "Ort" + +msgid "Automount location name." +msgstr "Automount-Ort" + +msgid "Map" +msgstr "Karte" + +msgid "Automount map name." +msgstr "Automount-Map Name." + +msgid "Description" +msgstr "Beschreibung" + +#, fuzzy +#| msgid "Create a new automount location." +msgid "Create a new automount key." +msgstr "Neuen Automount-Ort erstellen." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Ein Attribut für ein Attribut-Wert-Paar setzen. Das Format ist " +"Attribut=Wert.\n" +"Bei Attributen mit mehreren Werten ersetzt der Befehl die bereits " +"vorhandenen Werte." + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Ein Attribut-Wert-Paar hinzufügen. Das Format ist Attribut=Wert.\n" +"Das Attribut muss Teil des Schemas sein." + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Delete an automount key." +msgstr "Automount-Ort löschen." + +msgid "Continuous mode: Don't stop on errors." +msgstr "Fortlaufender Modus: Kein Abbruch bei Fehlern." + +msgid "List of deletions that failed" +msgstr "Liste der fehlgeschlagenen Löschvorgänge" + +#, fuzzy +#| msgid "Search for an automount location." +msgid "Search for an automount key." +msgstr "Automount-Ort suchen." + +msgid "Time Limit" +msgstr "Zeitbegrenzung" + +msgid "Time limit of search in seconds" +msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" + +msgid "Size Limit" +msgstr "Größenbeschränkung" + +msgid "Maximum number of entries returned" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + +#, fuzzy +#| msgid "Modify a OTP token." +msgid "Modify an automount key." +msgstr "OTP Token bearbeiten" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Ein Attribut-Wert-Paar löschen. Diese Option wird zuletzt angewendet,\n" +"nach allen Optionen, die etwas festlegen oder hinzufügen." + +msgid "Rights" +msgstr "Rechte" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Zugriffsrechte dieses Eintrags anzeigen (erfordert --all). In der " +"Handbuchseite zu ipa finden Sie weitere Details." + +#, fuzzy +#| msgid "Mount information" +msgid "New mount information" +msgstr "Einhänge-Informationen" + +msgid "Rename" +msgstr "Umbenennen" + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the automount key object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +#, fuzzy +#| msgid "Display an automount location." +msgid "Display an automount key." +msgstr "Automount-Ort anzeigen." + +msgid "Create a new automount location." +msgstr "Neuen Automount-Ort erstellen." + +msgid "Delete an automount location." +msgstr "Automount-Ort löschen." + +msgid "Search for an automount location." +msgstr "Automount-Ort suchen." + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "Automount-Ort anzeigen." + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Generate automount files for a specific location." +msgstr "Automount-Ort löschen." + +#, fuzzy +#| msgid "Create a new automount location." +msgid "Create a new automount map." +msgstr "Neuen Automount-Ort erstellen." + +#, fuzzy +#| msgid "Create a new automount location." +msgid "Create a new indirect mount point." +msgstr "Neuen Automount-Ort erstellen." + +msgid "Mount point" +msgstr "Einhängepunkt" + +#, fuzzy +#| msgid "automount map" +msgid "Parent map" +msgstr "Automount-Map" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Delete an automount map." +msgstr "Automount-Ort löschen." + +#, fuzzy +#| msgid "Search for an automount location." +msgid "Search for an automount map." +msgstr "Automount-Ort suchen." + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +#, fuzzy +#| msgid "automount map" +msgid "Modify an automount map." +msgstr "Automount-Map" + +#, fuzzy +#| msgid "Display an automount location." +msgid "Display an automount map." +msgstr "Automount-Ort anzeigen." + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +#, fuzzy +#| msgid "Name of method to export" +msgid "Nested Methods to execute" +msgstr "Name des zu exportierenden Methode" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "Maximale Länge des Benutzernamens" + +msgid "Home directory base" +msgstr "Basis für Home-Verzeichnisse" + +msgid "Default location of home directories" +msgstr "Vorgegebener Ort für Home-Verzeichnisse" + +msgid "Default shell" +msgstr "Vorgabe-Shell" + +msgid "Default shell for new users" +msgstr "Vorgegebene Shell für neue Benutzer" + +msgid "Default users group" +msgstr "Vorgegebene Gruppe des Benutzers" + +msgid "Default group for new users" +msgstr "Vorgegebene Gruppe für neue Benutzer" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "Zeitlimit für Suche" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" + +msgid "Search size limit" +msgstr "Größenlimit für Suche" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" + +msgid "User search fields" +msgstr "Benutzer Suchfelder" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +#, fuzzy +#| msgid "User search fields" +msgid "Group search fields" +msgstr "Benutzer Suchfelder" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +msgid "Enable migration mode" +msgstr "Migrationsmodus aktivieren" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Subject base" +msgstr "Benutze Zertifikatsprofil" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "Standard objectclass für Gruppen" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Standard objectclass für Gruppen (komma-separierte Liste)" + +msgid "Default user objectclasses" +msgstr "Standard objectclass für Benutzer" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "Standard objectclass für Benutzer (komma-separierte Liste)" + +msgid "Password Expiration Notification (days)" +msgstr "Benachrichtigung über den Passwortablauf (Tage)" + +msgid "Number of days's notice of impending password expiration" +msgstr "Anzahl der Tage die vor einem Passwortablauf gewarnt wird" + +msgid "Password plugin features" +msgstr "Passwort-Plugin-Funktionen" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Im Passwort-Plugin zusätzlich zu erzeugende Prüfsummen" + +msgid "SELinux user map order" +msgstr "" + +#, fuzzy +#| msgid "A list of SELinux users delimited by $ expected" +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "$-getrennte Liste von SELinux Benutzern erwartet" + +msgid "Default SELinux user" +msgstr "Vorgegebener SELinux-Benutzer" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" +"Vorgegebener SELinux-Benutzer, sofern in den Zuweisungsregeln von SELinux " +"nichts anderes bestimmt ist" + +msgid "Default PAC types" +msgstr "Standard PAC-Typen" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "Standard Authentifizierungsmethoden" + +#, fuzzy +#| msgid "Types of supported user authentication" +msgid "Default types of supported user authentication" +msgstr "Unterstützte Authentifizierungsmethoden" + +msgid "Modify configuration options." +msgstr "Konfigurationsoptionen bearbeiten." + +msgid "Show the current configuration." +msgstr "Die aktuelle Konfiguration anzeigen." + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "Delegationsname" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "Berechtigungen (read, write). Standard ist write" + +#, fuzzy +#| msgid "Attributes to which the permission applies" +msgid "Attributes to which the delegation applies" +msgstr "Attribute auf die die Berechtigung angewendet wird" + +#, fuzzy +#| msgid "Member service groups" +msgid "Member user group" +msgstr "Mitglieds-Dienstgruppen" + +msgid "User group to apply delegation to" +msgstr "" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new delegation." +msgstr "Neue Rolle hinzufügen." + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete a delegation." +msgstr "Rolle löschen." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for delegations." +msgstr "Nach Rollen suchen." + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a delegation." +msgstr "Rolle ändern." + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a delegation." +msgstr "Informationen über eine Rolle anzeigen." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +#, fuzzy +#| msgid "password policy" +msgid "Forward policy" +msgstr "Passwortregel" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +#, fuzzy +#| msgid "Failure reset interval" +msgid "Zone refresh interval" +msgstr "Fehler Resetintervall" + +msgid "Zone name" +msgstr "Zonenname" + +msgid "Zone name (FQDN)" +msgstr "Zonenname (FQDN)" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "Aktive Zone" + +msgid "Is zone active?" +msgstr "Ist die Zone aktiv?" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Record name" +msgstr "Datensatzname" + +msgid "Time to live" +msgstr "Lebensdauer" + +msgid "Records" +msgstr "Datensätze" + +msgid "Record type" +msgstr "Datensatztyp" + +#, fuzzy +#| msgid "Record name" +msgid "Record data" +msgstr "Datensatzname" + +#, fuzzy +#| msgid "Records" +msgid "A record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw A records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "IP Address" +msgid "A IP Address" +msgstr "IP-Adresse" + +msgid "IP Address" +msgstr "IP-Adresse" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw AAAA records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "IP Address" +msgid "AAAA IP Address" +msgstr "IP-Adresse" + +msgid "AAAA Create reverse" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "A6 record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw A6 records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Record name" +msgid "A6 Record data" +msgstr "Datensatzname" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +#, fuzzy +#| msgid "Subtype" +msgid "AFSDB Subtype" +msgstr "Untertyp" + +msgid "Subtype" +msgstr "Untertyp" + +#, fuzzy +#| msgid "Hostname" +msgid "AFSDB Hostname" +msgstr "Hostname" + +msgid "Hostname" +msgstr "Hostname" + +msgid "APL record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw APL records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "CERT record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw CERT records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Certificate Type" +msgid "CERT Certificate Type" +msgstr "Zertifikattyp" + +msgid "Certificate Type" +msgstr "Zertifikattyp" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "CERT Algorithm" +msgstr "Algorithmus" + +msgid "Algorithm" +msgstr "Algorithmus" + +#, fuzzy +#| msgid "Certificate/CRL" +msgid "CERT Certificate/CRL" +msgstr "Zertifikat/CRL" + +msgid "Certificate/CRL" +msgstr "Zertifikat/CRL" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "CNAME Hostname" +msgstr "Hostname" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw DLV records" +msgstr "Datensätze" + +msgid "DLV Key Tag" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "DLV Algorithm" +msgstr "Algorithmus" + +#, fuzzy +#| msgid "Digest Type" +msgid "DLV Digest Type" +msgstr "Prüfsummentyp" + +msgid "Digest Type" +msgstr "Prüfsummentyp" + +#, fuzzy +#| msgid "Digest" +msgid "DLV Digest" +msgstr "Prüfsumme" + +msgid "Digest" +msgstr "Prüfsumme" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "DNAME Target" +msgstr "Ziel" + +msgid "Target" +msgstr "Ziel" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "DS record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw DS records" +msgstr "Datensätze" + +msgid "DS Key Tag" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "DS Algorithm" +msgstr "Algorithmus" + +#, fuzzy +#| msgid "Digest Type" +msgid "DS Digest Type" +msgstr "Prüfsummentyp" + +#, fuzzy +#| msgid "Digest" +msgid "DS Digest" +msgstr "Prüfsumme" + +msgid "HIP record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw HIP records" +msgstr "Datensätze" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw KEY records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "KX record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw KX records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Preference" +msgid "KX Preference" +msgstr "Bevorzugung" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw LOC records" +msgstr "Datensätze" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +#, fuzzy +#| msgid "Second Code" +msgid "Seconds Latitude" +msgstr "Zweiter Code" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +#, fuzzy +#| msgid "Second Code" +msgid "LOC Seconds Longitude" +msgstr "Zweiter Code" + +#, fuzzy +#| msgid "Second Code" +msgid "Seconds Longitude" +msgstr "Zweiter Code" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +#, fuzzy +#| msgid "Altitude" +msgid "LOC Altitude" +msgstr "Höhe" + +msgid "Altitude" +msgstr "Höhe" + +#, fuzzy +#| msgid "Size" +msgid "LOC Size" +msgstr "Größe" + +msgid "Size" +msgstr "Größe" + +#, fuzzy +#| msgid "Horizontal Precision" +msgid "LOC Horizontal Precision" +msgstr "Horizontale Genauigkeit" + +msgid "Horizontal Precision" +msgstr "Horizontale Genauigkeit" + +#, fuzzy +#| msgid "Vertical Precision" +msgid "LOC Vertical Precision" +msgstr "Vertikale Genauigkeit" + +msgid "Vertical Precision" +msgstr "Vertikale Genauigkeit" + +#, fuzzy +#| msgid "Records" +msgid "MX record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw MX records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Preference" +msgid "MX Preference" +msgstr "Bevorzugung" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "NAPTR record" +msgstr "Datensätze" + +msgid "Raw NAPTR records" +msgstr "" + +#, fuzzy +#| msgid "Order" +msgid "NAPTR Order" +msgstr "Reihenfolge" + +msgid "Order" +msgstr "Reihenfolge" + +#, fuzzy +#| msgid "Preference" +msgid "NAPTR Preference" +msgstr "Bevorzugung" + +msgid "Preference" +msgstr "Bevorzugung" + +#, fuzzy +#| msgid "Flags" +msgid "NAPTR Flags" +msgstr "Flags" + +msgid "Flags" +msgstr "Flags" + +#, fuzzy +#| msgid "Any Service" +msgid "NAPTR Service" +msgstr "Jeder Dienst" + +msgid "Service" +msgstr "Dienst" + +#, fuzzy +#| msgid "Regular Expression" +msgid "NAPTR Regular Expression" +msgstr "Regulärer Ausdruck" + +msgid "Regular Expression" +msgstr "Regulärer Ausdruck" + +#, fuzzy +#| msgid "Replacement" +msgid "NAPTR Replacement" +msgstr "Ersetzung" + +msgid "Replacement" +msgstr "Ersetzung" + +#, fuzzy +#| msgid "Records" +msgid "NS record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw NS records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Hostname" +msgid "NS Hostname" +msgstr "Hostname" + +msgid "NSEC record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw NSEC records" +msgstr "Datensätze" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "PTR record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw PTR records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Hostname" +msgid "PTR Hostname" +msgstr "Hostname" + +msgid "The hostname this reverse record points to" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "RRSIG record" +msgstr "Datensätze" + +msgid "Raw RRSIG records" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "RP record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw RP records" +msgstr "Datensätze" + +msgid "SIG record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw SIG records" +msgstr "Datensätze" + +msgid "SPF record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw SPF records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "SRV record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw SRV records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Priority" +msgid "SRV Priority" +msgstr "Priorität" + +msgid "Priority" +msgstr "Priorität" + +#, fuzzy +#| msgid "Weight" +msgid "SRV Weight" +msgstr "Gewicht" + +msgid "Weight" +msgstr "Gewicht" + +#, fuzzy +#| msgid "Port" +msgid "SRV Port" +msgstr "Port" + +msgid "Port" +msgstr "Port" + +#, fuzzy +#| msgid "Target" +msgid "SRV Target" +msgstr "Ziel" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "SSHFP Algorithm" +msgstr "Algorithmus" + +#, fuzzy +#| msgid "Fingerprint Type" +msgid "SSHFP Fingerprint Type" +msgstr "Fingerabdruck-Typ" + +msgid "Fingerprint Type" +msgstr "Fingerabdruck-Typ" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSHFP Fingerprint" +msgstr "SHA1-Fingerabdruck" + +msgid "Fingerprint" +msgstr "Fingerabdruck" + +#, fuzzy +#| msgid "Records" +msgid "TA record" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Records" +msgid "Raw TA records" +msgstr "Datensätze" + +msgid "TLSA record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw TLSA records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Certificates" +msgid "TLSA Certificate Usage" +msgstr "Zertifikate" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Usage" +msgstr "Zertifikate" + +msgid "TLSA Selector" +msgstr "" + +#, fuzzy +#| msgid "Select All" +msgid "Selector" +msgstr "Alle auswählen" + +msgid "TLSA Matching Type" +msgstr "" + +#, fuzzy +#| msgid "Grouping Type" +msgid "Matching Type" +msgstr "Gruppierungstyp" + +msgid "TLSA Certificate Association Data" +msgstr "" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Association Data" +msgstr "Benutze Zertifikatsprofil" + +msgid "TKEY record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw TKEY records" +msgstr "Datensätze" + +msgid "TSIG record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw TSIG records" +msgstr "Datensätze" + +msgid "TXT record" +msgstr "" + +#, fuzzy +#| msgid "Records" +msgid "Raw TXT records" +msgstr "Datensätze" + +#, fuzzy +#| msgid "Text Data" +msgid "TXT Text Data" +msgstr "Textdaten" + +msgid "Text Data" +msgstr "Textdaten" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "E-Mail-Adresse des Administrators" + +#, fuzzy +#| msgid "Serial" +msgid "SOA serial" +msgstr "Seriennummer" + +#, fuzzy +#| msgid "Serial number" +msgid "SOA record serial number" +msgstr "Seriennummer" + +#, fuzzy +#| msgid "Refresh" +msgid "SOA refresh" +msgstr "Neu laden" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "Dynamische Aktualisierung" + +msgid "Allow dynamic updates." +msgstr "Dynamische Aktualisierungen erlauben." + +#, fuzzy +#| msgid "Allow" +msgid "Allow query" +msgstr "Erlauben" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +#, fuzzy +#| msgid "force host name even if not in DNS" +msgid "Resolve a host name in DNS." +msgstr "Hostname erzwingen auch wenn nicht im DNS" + +#, fuzzy +#| msgid "Modify configuration options." +msgid "Modify global DNS configuration." +msgstr "Konfigurationsoptionen bearbeiten." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current global DNS configuration." +msgstr "Die aktuelle Konfiguration anzeigen." + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create new DNS forward zone." +msgstr "Neuen Sudo-Befehl erzeugen." + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "Berechtigungswert" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete DNS forward zone." +msgstr "Rolle löschen." + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +#, fuzzy +#| msgid "Search for DNS resources." +msgid "Search for DNS forward zones." +msgstr "Nach DNS-Ressourcen suchen." + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify DNS forward zone." +msgstr "Rolle ändern." + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a DNS forward zone." +msgstr "Informationen über eine Rolle anzeigen." + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +#, fuzzy +#| msgid "force host name even if not in DNS" +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "Hostname erzwingen auch wenn nicht im DNS" + +msgid "Structured" +msgstr "Strukturiert" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +#, fuzzy +#| msgid "Delete all associated records" +msgid "Delete DNS resource record." +msgstr "Alle zugehörigen Datensätze löschen" + +msgid "Delete all associated records" +msgstr "Alle zugehörigen Datensätze löschen" + +#, fuzzy +#| msgid "Current DNS record contents:\n" +msgid "Delete DNS record entry." +msgstr "Derzeitiger Inhalt des DNS-Datensatzes:\n" + +msgid "Search for DNS resources." +msgstr "Nach DNS-Ressourcen suchen." + +#, fuzzy +#| msgid "Display DNS resource." +msgid "Modify a DNS resource record." +msgstr "DNS-Ressource anzeigen." + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "DNS-Ressource anzeigen." + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +#, fuzzy +#| msgid "Disable token" +msgid "Disable DNS Zone." +msgstr "Token deaktivieren" + +#, fuzzy +#| msgid "DNS Zone" +msgid "Enable DNS Zone." +msgstr "DNS-Zone" + +#, fuzzy +#| msgid "Search for DNS resources." +msgid "Search for DNS zones (SOA records)." +msgstr "Nach DNS-Ressourcen suchen." + +msgid "Forward zones only" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for forward zones only" +msgstr "Nach Rollen suchen." + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +#, fuzzy +#| msgid "force host name even if not in DNS" +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "Hostname erzwingen auch wenn nicht im DNS" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a DNS zone (SOA record)." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "Regelname" + +msgid "Rule type" +msgstr "Regeltyp" + +msgid "Rule type (allow)" +msgstr "Regeltyp (erlauben)" + +msgid "User category" +msgstr "Benutzerkategorie" + +msgid "User category the rule applies to" +msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" + +msgid "Host category" +msgstr "Host-Kategorie" + +msgid "Host category the rule applies to" +msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" + +msgid "Service category" +msgstr "Dienstkategorie" + +#, fuzzy +#| msgid "Service category the ACL applies to" +msgid "Service category the rule applies to" +msgstr "Dienstkategorie auf die ACL angewendet wird" + +msgid "Enabled" +msgstr "Aktiviert" + +msgid "Users" +msgstr "Benutzer" + +msgid "User Groups" +msgstr "Benutzergruppen" + +msgid "Hosts" +msgstr "Hosts" + +msgid "Host Groups" +msgstr "Host-Gruppen" + +msgid "Services" +msgstr "Dienste" + +msgid "Service Groups" +msgstr "Dienstgruppen" + +msgid "External host" +msgstr "Externer Host" + +msgid "Create a new HBAC rule." +msgstr "Neue HBAC-Regel erstellen." + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +#| msgid "Member hosts" +msgid "member host" +msgstr "Mitglieds-Hosts" + +#, fuzzy +#| msgid "%s to add" +msgid "hosts to add" +msgstr "%s zum hinzufügen" + +#, fuzzy +#| msgid "Member host-groups" +msgid "member host group" +msgstr "Mitglieds-Hostgruppen" + +#, fuzzy +#| msgid "host groups" +msgid "host groups to add" +msgstr "Hostgruppen" + +msgid "Members that could not be added" +msgstr "Mitglieder, die nicht hinzugefügt werden konnten" + +msgid "Number of members added" +msgstr "Zahl der hinzugefügten Mitglieder" + +msgid "Add services to an HBAC rule." +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, fuzzy +#| msgid "Member HBAC service" +msgid "member HBAC service" +msgstr "Mitglieds-HBAC-Dienst" + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC services to add" +msgstr "HBAC-Dienste" + +#, fuzzy +#| msgid "Member HBAC service groups" +msgid "member HBAC service group" +msgstr "Mitglieds-HBAC-Servicegruppen" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "HBAC service groups to add" +msgstr "HBAC-Dienstgruppen" + +msgid "Add users and groups to an HBAC rule." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +#| msgid "Member users" +msgid "member user" +msgstr "Mitglieds-Benutzer" + +#, fuzzy +#| msgid "%s to add" +msgid "users to add" +msgstr "%s zum hinzufügen" + +#, fuzzy +#| msgid "Member groups" +msgid "member group" +msgstr "Mitglieds-Gruppen" + +#, fuzzy +#| msgid "%s to add" +msgid "groups to add" +msgstr "%s zum hinzufügen" + +msgid "Delete an HBAC rule." +msgstr "HBAC-Regel löschen" + +#, fuzzy +#| msgid "Enable an HBAC rule." +msgid "Disable an HBAC rule." +msgstr "HBAC-Regel aktivieren." + +msgid "Enable an HBAC rule." +msgstr "HBAC-Regel aktivieren." + +msgid "Search for HBAC rules." +msgstr "Nach HBAC-Regeln suchen." + +msgid "Modify an HBAC rule." +msgstr "HBAC-Regel ändern" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." + +#, fuzzy +#| msgid "%s to remove" +msgid "hosts to remove" +msgstr "%s zum entfernen" + +#, fuzzy +#| msgid "host groups" +msgid "host groups to remove" +msgstr "Hostgruppen" + +msgid "Members that could not be removed" +msgstr "Mitglieder, die nicht entfernt werden konnten" + +msgid "Number of members removed" +msgstr "Anzahl der entfernten Mitglieder" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Dienste von einer HBAC-Gruppe entfernen." + +#, fuzzy +#| msgid "HBAC service group" +msgid "HBAC services to remove" +msgstr "HBAC-Dienstgruppe" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "HBAC service groups to remove" +msgstr "HBAC-Dienstgruppen" + +msgid "Remove users and groups from an HBAC rule." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy +#| msgid "%s to remove" +msgid "users to remove" +msgstr "%s zum entfernen" + +#, fuzzy +#| msgid "%s to remove" +msgid "groups to remove" +msgstr "%s zum entfernen" + +msgid "Display the properties of an HBAC rule." +msgstr "Einstellungen der HBAC-Regel anzeigen." + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "Dienstname" + +msgid "HBAC service" +msgstr "HBAC-Dienst" + +msgid "HBAC service description" +msgstr "Beschreibung des HBAC-Dienstes" + +#, fuzzy +#| msgid "Member HBAC service groups" +msgid "Member of HBAC service groups" +msgstr "Mitglieds-HBAC-Servicegruppen" + +msgid "Add a new HBAC service." +msgstr "Einen neuen HBAC-Dienst hinzufügen." + +msgid "Delete an existing HBAC service." +msgstr "Einen existierenden HBAC Dienst löschen." + +msgid "Search for HBAC services." +msgstr "Nach HBAC-Diensten suchen." + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "HBAC Dienst ändern" + +msgid "Display information about an HBAC service." +msgstr "Informationen zu einem HBAC-Dienst anzeigen." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "Dienstgruppenname" + +msgid "HBAC service group description" +msgstr "Beschreibung der HBAC-Dienstgruppe" + +msgid "Member HBAC service" +msgstr "Mitglieds-HBAC-Dienst" + +msgid "Add a new HBAC service group." +msgstr "Eine neue HBAC-Dienstgruppe hinzufügen." + +msgid "Add members to an HBAC service group." +msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." + +msgid "Delete an HBAC service group." +msgstr "HBAC-Dienstgruppe löschen" + +msgid "Search for an HBAC service group." +msgstr "Suche nach HBAC Dienstgruppe" + +msgid "Modify an HBAC service group." +msgstr "HBAC-Dienstgruppe bearbeiten" + +msgid "Remove members from an HBAC service group." +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +msgid "Display information about an HBAC service group." +msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "Hostname" + +msgid "A description of this host" +msgstr "Beschreibung des Hosts" + +msgid "Locality" +msgstr "Ort" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Ort des Hosts (z.B. \"Baltimore, MD\")" + +#, fuzzy +#| msgid "Host locality (e.g. \"Baltimore, MD\")" +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Ort des Hosts (z.B. \"Baltimore, MD\")" + +msgid "Platform" +msgstr "Plattform" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Hardwareplattform (z.B. \"Lenovo T61\")" + +msgid "Operating system" +msgstr "Betriebssystem" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Betriebssystem und Version (z.B. \"Fedora 9\")" + +msgid "User password" +msgstr "Benutzerpasswort" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "Zufälliges Passwort" + +msgid "Certificate" +msgstr "Zertifikat" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64-kodiertes Serverzertifikat" + +msgid "Principal name" +msgstr "Principal-Name" + +msgid "MAC address" +msgstr "MAC-Adresse" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "Öffentlicher SSH Schlüssel" + +msgid "Class" +msgstr "Klasse" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +#, fuzzy +#| msgid "User authentication types" +msgid "Requires pre-authentication" +msgstr "Authentifizierungsmethoden" + +msgid "Pre-authentication is required for the service" +msgstr "" + +#, fuzzy +#| msgid "delegation" +msgid "Trusted for delegation" +msgstr "Delegation" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "Mitglied von Host-Gruppen" + +msgid "Roles" +msgstr "Rollen" + +#, fuzzy +#| msgid "Member of groups" +msgid "Member of netgroups" +msgstr "Mitglied der Gruppen" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of Sudo rule" +msgstr "Mitglied einer Gruppe" + +#, fuzzy +#| msgid "Member HBAC service" +msgid "Member of HBAC rule" +msgstr "Mitglieds-HBAC-Dienst" + +#, fuzzy +#| msgid "Indirect Member groups" +msgid "Indirect Member of netgroup" +msgstr "Indirekte Mitglieds-Gruppen" + +#, fuzzy +#| msgid "Indirect Member host-groups" +msgid "Indirect Member of host-group" +msgstr "Indirekte Mitglieds-Hostgruppen" + +#, fuzzy +#| msgid "Indirect Member of roles" +msgid "Indirect Member of role" +msgstr "Indirektes Mitglied von Rollen" + +#, fuzzy +#| msgid "Indirect Member of roles" +msgid "Indirect Member of Sudo rule" +msgstr "Indirektes Mitglied von Rollen" + +#, fuzzy +#| msgid "Indirect Member of roles" +msgid "Indirect Member of HBAC rule" +msgstr "Indirektes Mitglied von Rollen" + +msgid "Keytab" +msgstr "Schlüsseltabelle" + +#, fuzzy +#| msgid "Manager" +msgid "Managed by" +msgstr "Manager" + +#, fuzzy +#| msgid "Manager" +msgid "Managing" +msgstr "Manager" + +msgid "Users allowed to retrieve keytab" +msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" + +msgid "Groups allowed to retrieve keytab" +msgstr "Gruppen die Schlüsseltabelle abrufen dürfen" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Hosts die Schlüsseltabelle abrufen dürfen" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Hostgruppen die Schlüsseltabelle abrufen dürfen" + +msgid "Users allowed to create keytab" +msgstr "Benutzer die Schlüsseltabelle erstellen dürfen" + +msgid "Groups allowed to create keytab" +msgstr "Gruppen die Schlüsseltabelle erstellen dürfen" + +msgid "Hosts allowed to create keytab" +msgstr "Hosts die Schlüsseltabelle erstellen dürfen" + +msgid "Host Groups allowed to create keytab" +msgstr "Hostgruppen die Schlüsseltabelle erstellen dürfen" + +msgid "Add a new host." +msgstr "Neuen Host hinzufügen." + +msgid "force host name even if not in DNS" +msgstr "Hostname erzwingen auch wenn nicht im DNS" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "Host mit dieser IP zum DNS hinzufügen" + +msgid "Add hosts that can manage this host." +msgstr "Hosts hinzufügen die diesen Host verwalten dürfen." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erstellen." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erhalten." + +msgid "Delete a host." +msgstr "Host löschen." + +msgid "Remove entries from DNS" +msgstr "DNS Einträge löschen" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" +"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erstellen." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erhalten." + +msgid "Search for hosts." +msgstr "Nach Hosts suchen." + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "Hostgruppe" + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for hosts with these member of host groups." +msgstr "Nach Hostgruppen suchen." + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "netgroup" +msgstr "Gruppe" + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for hosts with these member of netgroups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for hosts without these member of netgroups." +msgstr "Nach Hostgruppen suchen." + +msgid "role" +msgstr "Rolle" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "HBAC-Regel" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for hosts with these member of HBAC rules." +msgstr "Nach HBAC-Regeln suchen." + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "Sudo-Regel" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "Benutzer" + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search for hosts with these enrolled by users." +msgstr "Nach vorbereiteten Benutzern suchen." + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "host" + +#, fuzzy +#| msgid "Remove hosts that can manage this host." +msgid "Search for hosts with these managed by hosts." +msgstr "Hosts entfernen die diesen Host verwalten dürfen." + +#, fuzzy +#| msgid "Remove hosts that can manage this host." +msgid "Search for hosts without these managed by hosts." +msgstr "Hosts entfernen die diesen Host verwalten dürfen." + +#, fuzzy +#| msgid "Remove hosts that can manage this host." +msgid "Search for hosts with these managing hosts." +msgstr "Hosts entfernen die diesen Host verwalten dürfen." + +#, fuzzy +#| msgid "Remove hosts that can manage this host." +msgid "Search for hosts without these managing hosts." +msgstr "Hosts entfernen die diesen Host verwalten dürfen." + +msgid "Modify information about a host." +msgstr "Hostinformationen ändern." + +msgid "Kerberos principal name for this host" +msgstr "Kerberos-Principal für diesen Host" + +msgid "Update DNS entries" +msgstr "DNS Einträge aktualisieren" + +msgid "Remove hosts that can manage this host." +msgstr "Hosts entfernen die diesen Host verwalten dürfen." + +msgid "Display information about a host." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "file to store certificate in" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "Hostgruppen" + +msgid "Name of host-group" +msgstr "Name der Hostgruppe" + +msgid "A description of this host-group" +msgstr "Beschreibung der Hostgruppe" + +msgid "Member hosts" +msgstr "Mitglieds-Hosts" + +msgid "Member host-groups" +msgstr "Mitglieds-Hostgruppen" + +msgid "Indirect Member hosts" +msgstr "Indirekte Mitglieds-Hosts" + +msgid "Indirect Member host-groups" +msgstr "Indirekte Mitglieds-Hostgruppen" + +msgid "Add a new hostgroup." +msgstr "Hostgruppe hinzufügen." + +msgid "Add members to a hostgroup." +msgstr "Mitglieder zur Hostgruppe hinzufügen." + +msgid "Delete a hostgroup." +msgstr "Hostgruppe löschen." + +msgid "Search for hostgroups." +msgstr "Nach Hostgruppen suchen." + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for host groups with these member hosts." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for host groups without these member hosts." +msgstr "Nach Hostgruppen suchen." + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "Hostgruppe ändern." + +msgid "Remove members from a hostgroup." +msgstr "Mitglieder von Hostgruppe entfernen." + +msgid "Display information about a hostgroup." +msgstr "Informationen über die Hostgruppe anzeigen." + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +#, fuzzy +#| msgid "User to override" +msgid "Anchor to override" +msgstr "Benutzer zum Überschreiben" + +msgid "Group name" +msgstr "Gruppenname" + +msgid "GID" +msgstr "Gruppen-ID" + +msgid "Group ID Number" +msgstr "Gruppen-ID" + +msgid "User login" +msgstr "Anmeldename" + +msgid "UID" +msgstr "UID" + +#, fuzzy +#| msgid "Group ID Number" +msgid "User ID Number" +msgstr "Gruppen-ID" + +msgid "GECOS" +msgstr "GECOS" + +msgid "Home directory" +msgstr "Home-Verzeichnis" + +msgid "Login shell" +msgstr "Anmeldeshell" + +msgid "ID View Name" +msgstr "" + +#, fuzzy +#| msgid "Group to override" +msgid "Add a new Group ID override." +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete an Group ID override." +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for an Group ID override." +msgstr "Nach IPA-Diensten suchen." + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +#, fuzzy +#| msgid "Group to override" +msgid "Modify an Group ID override." +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the Group ID override object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an Group ID override." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new User ID override." +msgstr "Einen neuen HBAC-Dienst hinzufügen." + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete an User ID override." +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for an User ID override." +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an User ID override." +msgstr "HBAC Dienst ändern" + +msgid "Rename the User ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an User ID override." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new ID View." +msgstr "Neue Rolle hinzufügen." + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "hosts" + +#, fuzzy +#| msgid "Host category the ACL applies to" +msgid "Hosts to apply the ID View to" +msgstr "Hostkategorie auf die ACL angewendet wird" + +#, fuzzy +#| msgid "host groups" +msgid "hostgroups" +msgstr "Hostgruppen" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +#, fuzzy +#| msgid "Host category the ACL applies to" +msgid "Hosts that this ID View was applied to." +msgstr "Hostkategorie auf die ACL angewendet wird" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete an ID View." +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for an ID View." +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify an ID View." +msgstr "Rolle ändern." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the ID View object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an ID View." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Enumerate all the hosts the view applies to." +msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "Name des zu exportierenden Objekts" + +msgid "Name of method to export" +msgstr "Name des zu exportierenden Methode" + +msgid "Name of command to export" +msgstr "Name des zu exportierenden Befehls" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "Der IPA-Realm" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Hardwareplattform des Hosts (z.B. Lenovo T400)" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Betriebssystem und Version des Hosts (z.B. Fedora 20)" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "Benutzername" + +#, fuzzy +#| msgid "Manage password policy for specific group" +msgid "Manage ticket policy for specific user" +msgstr "Passwortregel für eine bestimmte Gruppe bearbeiten" + +#, fuzzy +#| msgid "Max failures" +msgid "Max life" +msgstr "Maximale Fehler" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Ticket Policy" +msgid "Modify Kerberos ticket policy." +msgstr "Kerberos-Ticket Richtlinien" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +#, fuzzy +#| msgid "Display user record for current Kerberos principal" +msgid "Display the current Kerberos ticket policy." +msgstr "Benutzer-Datensatz für den aktuellen Kerberos-Principal anzeigen" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Migrate users and groups from DS to IPA." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +msgid "LDAP URI" +msgstr "LDAP-URI" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "Bind-Passwort" + +msgid "Bind DN" +msgstr "Bind-DN" + +#, fuzzy +#| msgid "User name" +msgid "User container" +msgstr "Benutzername" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Group container" +msgstr "Gruppenname" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +#, fuzzy +#| msgid "Default user objectclasses" +msgid "User object class" +msgstr "Standard objectclass für Benutzer" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +#, fuzzy +#| msgid "Default group objectclasses" +msgid "Group object class" +msgstr "Standard objectclass für Gruppen" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +#, fuzzy +#| msgid "Default user objectclasses" +msgid "Ignore user object class" +msgstr "Standard objectclass für Benutzer" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +#, fuzzy +#| msgid "Default group objectclasses" +msgid "Ignore group object class" +msgstr "Standard objectclass für Gruppen" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "LDAP-Schema" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"Das auf dem LDAP-Server verwendete Schema. Zulässige Werte sind RFC2307 und " +"RFC2307bis. Der Vorgabewert ist RFC2307bis." + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CA certificate" +msgstr "Zertifikat" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "Liste der migrierten Objekte, nach Typ geordnet." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" +"Liste der Objekte, die nicht migriert werden konnten, nach Typ geordnet." + +#, fuzzy +#| msgid "Enable migration mode" +msgid "False if migration mode was disabled." +msgstr "Migrationsmodus aktivieren" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "Umgebungsvariablen anzeigen." + +msgid "Forward to server instead of running locally" +msgstr "Zum Server weiterleiten, anstatt lokal auszuführen" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " +"die Befehlsausgabe aus." + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of variables returned (<= total)" +msgstr "Anzahl der zurückgegebenen Einträge" + +msgid "Show all loaded plugins." +msgstr "Alle geladenen Plugins anzeigen." + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "Anzahl der geladenen Plugins" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Netgroup name" +msgstr "Gruppenname" + +#, fuzzy +#| msgid "Group description" +msgid "Netgroup description" +msgstr "Gruppenbeschreibung" + +#, fuzzy +#| msgid "Command name" +msgid "NIS domain name" +msgstr "Befehlsname" + +#, fuzzy +#| msgid "Unique ID" +msgid "IPA unique ID" +msgstr "Eindeutige ID" + +#, fuzzy +#| msgid "Member groups" +msgid "Member netgroups" +msgstr "Mitglieds-Gruppen" + +#, fuzzy +#| msgid "Indirect Member groups" +msgid "Indirect Member netgroups" +msgstr "Indirekte Mitglieds-Gruppen" + +#, fuzzy +#| msgid "Member users" +msgid "Member User" +msgstr "Mitglieds-Benutzer" + +#, fuzzy +#| msgid "Member groups" +msgid "Member Group" +msgstr "Mitglieds-Gruppen" + +msgid "Member Host" +msgstr "Mitglieds-Host" + +#, fuzzy +#| msgid "Member host-groups" +msgid "Member Hostgroup" +msgstr "Mitglieds-Hostgruppen" + +#, fuzzy +#| msgid "Add a new hostgroup." +msgid "Add a new netgroup." +msgstr "Hostgruppe hinzufügen." + +#, fuzzy +#| msgid "Add members to a group." +msgid "Add members to a netgroup." +msgstr "Mitglieder zu einer Gruppe hinzufügen." + +#, fuzzy +#| msgid "Member groups" +msgid "member netgroup" +msgstr "Mitglieds-Gruppen" + +#, fuzzy +#| msgid "%s to add" +msgid "netgroups to add" +msgstr "%s zum hinzufügen" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a netgroup." +msgstr "Hostgruppe löschen." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for a netgroup." +msgstr "Nach Gruppen suchen." + +#, fuzzy +#| msgid "search for private groups" +msgid "search for managed groups" +msgstr "nach privaten Gruppen suchen" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search for netgroups with these member users." +msgstr "Nach vorbereiteten Benutzern suchen." + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "Gruppe" + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for netgroups with these member groups." +msgstr "Nach Hostgruppen suchen." + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for netgroups with these member host groups." +msgstr "Nach Hostgruppen suchen." + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a netgroup." +msgstr "Eine Gruppe ändern." + +#, fuzzy +#| msgid "Remove members from a group." +msgid "Remove members from a netgroup." +msgstr "Mitglieder aus einer Gruppe entfernen." + +#, fuzzy +#| msgid "%s to remove" +msgid "netgroups to remove" +msgstr "%s zum entfernen" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a netgroup." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "TOTP Authentifizierungsfenster" + +#, fuzzy +#| msgid "TOTP authentication Window" +msgid "TOTP authentication time variance (seconds)" +msgstr "TOTP Authentifizierungsfenster" + +msgid "TOTP Synchronization Window" +msgstr "TOTP Sychnronisierungsfenster" + +#, fuzzy +#| msgid "TOTP Synchronization Window" +msgid "TOTP synchronization time variance (seconds)" +msgstr "TOTP Sychnronisierungsfenster" + +msgid "HOTP Authentication Window" +msgstr "HOTP Authentifizierungsfenster" + +#, fuzzy +#| msgid "TOTP authentication Window" +msgid "HOTP authentication skip-ahead" +msgstr "TOTP Authentifizierungsfenster" + +msgid "HOTP Synchronization Window" +msgstr "HOTP Sychnronisierungsfenster" + +#, fuzzy +#| msgid "HOTP Synchronization Window" +msgid "HOTP synchronization skip-ahead" +msgstr "HOTP Sychnronisierungsfenster" + +msgid "Modify OTP configuration options." +msgstr "OTP Konfigurationsoptionen bearbeiten." + +msgid "Show the current OTP configuration." +msgstr "Aktuelle OTP Konfiguration anzeigen" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "Passwort für einen Benutzer setzen." + +msgid "New Password" +msgstr "Neues Passwort" + +msgid "Current Password" +msgstr "Aktuelles Passwort" + +msgid "OTP" +msgstr "OTP" + +msgid "One Time Password" +msgstr "Einmalpasswort" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "Berechtigungsname" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Effective attributes" +msgstr "Attribute" + +#, fuzzy +#| msgid "Attributes to which the permission applies" +msgid "All attributes to which the permission applies" +msgstr "Attribute auf die die Berechtigung angewendet wird" + +#, fuzzy +#| msgid "Include Enabled" +msgid "Included attributes" +msgstr "Aktivierte einschließen" + +#, fuzzy +#| msgid "Attributes to which the permission applies" +msgid "User-specified attributes to which the permission applies" +msgstr "Attribute auf die die Berechtigung angewendet wird" + +#, fuzzy +#| msgid "Attributes" +msgid "Excluded attributes" +msgstr "Attribute" + +#, fuzzy +#| msgid "Attributes to which the permission applies" +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "Attribute auf die die Berechtigung angewendet wird" + +#, fuzzy +#| msgid "Attributes" +msgid "Default attributes" +msgstr "Attribute" + +#, fuzzy +#| msgid "Attributes to which the permission applies" +msgid "Attributes to which the permission applies by default" +msgstr "Attribute auf die die Berechtigung angewendet wird" + +#, fuzzy +#| msgid "Rule type" +msgid "Bind rule type" +msgstr "Regeltyp" + +#, fuzzy +#| msgid "Subtree to apply ACI to" +msgid "Subtree to apply permissions to" +msgstr "Subtree auf den ACI angewendet wird" + +msgid "Extra target filter" +msgstr "" + +#, fuzzy +#| msgid "empty filter" +msgid "Raw target filter" +msgstr "Filter ist leer" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Target DN" +msgstr "Ziel" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +#, fuzzy +#| msgid "Member of groups" +msgid "Member of group" +msgstr "Mitglied der Gruppen" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Deprecated; use ipapermlocation" +msgstr "Veraltete Optionen" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "Indirektes Mitglied von Rollen" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new permission." +msgstr "Neue Rolle hinzufügen." + +#, fuzzy +#| msgid "Add members to a role." +msgid "Add members to a permission." +msgstr "Mitglieder zur Rolle hinzufügen." + +#, fuzzy +#| msgid "Number of privileges added" +msgid "member privilege" +msgstr "Anzahl der hinzugefügten Berechtigungen" + +#, fuzzy +#| msgid "Add privileges to a role." +msgid "privileges to add" +msgstr "Berechtigungen zur Rolle hinzufügen." + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission flags" +msgstr "Berechtigungen" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete a permission." +msgstr "Rolle löschen." + +msgid "force delete of SYSTEM permissions" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for permissions." +msgstr "Nach Rollen suchen." + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a permission." +msgstr "Rolle ändern." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the permission object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove members from a permission." +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy +#| msgid "Add privileges to a role." +msgid "privileges to remove" +msgstr "Berechtigungen zur Rolle hinzufügen." + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a permission." +msgstr "Informationen über eine Rolle anzeigen." + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "Principal name" +msgid "Privilege name" +msgstr "Principal-Name" + +#, fuzzy +#| msgid "HBAC service description" +msgid "Privilege description" +msgstr "Beschreibung des HBAC-Dienstes" + +msgid "Granting privilege to roles" +msgstr "Gebe Berechtigung den Rollen" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new privilege." +msgstr "Neue Rolle hinzufügen." + +#, fuzzy +#| msgid "Add members to a role." +msgid "Add members to a privilege." +msgstr "Mitglieder zur Rolle hinzufügen." + +#, fuzzy +#| msgid "member %s" +msgid "member role" +msgstr "Mitglied %s" + +#, fuzzy +#| msgid "%s to add" +msgid "roles to add" +msgstr "%s zum hinzufügen" + +#, fuzzy +#| msgid "Add privileges to a role." +msgid "Add permissions to a privilege." +msgstr "Berechtigungen zur Rolle hinzufügen." + +msgid "permission" +msgstr "Berechtigung" + +msgid "permissions" +msgstr "Berechtigungen" + +#, fuzzy +#| msgid "Number of conditions added" +msgid "Number of permissions added" +msgstr "Anzahl der hinzugefügten Bedingungen" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete a privilege." +msgstr "Rolle löschen." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for privileges." +msgstr "Nach Rollen suchen." + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a privilege." +msgstr "Rolle ändern." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the privilege object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove members from a privilege" +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy +#| msgid "%s to remove" +msgid "roles to remove" +msgstr "%s zum entfernen" + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove permissions from a privilege." +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy +#| msgid "Number of conditions removed" +msgid "Number of permissions removed" +msgstr "Anzahl der entfernten Bedingungen" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a privilege." +msgstr "Informationen über eine Rolle anzeigen." + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "Gruppe" + +msgid "Manage password policy for specific group" +msgstr "Passwortregel für eine bestimmte Gruppe bearbeiten" + +msgid "Max lifetime (days)" +msgstr "Max Dauer (Tage)" + +msgid "Maximum password lifetime (in days)" +msgstr "Maximale Passwortlebensdauer (in Tagen)" + +msgid "Min lifetime (hours)" +msgstr "Min Dauer (Stunden)" + +msgid "Minimum password lifetime (in hours)" +msgstr "Minimale Passwortlebensdauer (in Stunden)" + +msgid "History size" +msgstr "Historie" + +msgid "Password history size" +msgstr "Größe der Passworthistorie" + +msgid "Character classes" +msgstr "Zeichenklassen" + +msgid "Minimum number of character classes" +msgstr "Minimale Anzahl an Zeichenklassen" + +msgid "Min length" +msgstr "Min Länge" + +msgid "Minimum length of password" +msgstr "Minimale Passwortlänge" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" + +msgid "Max failures" +msgstr "Maximale Fehler" + +msgid "Consecutive failures before lockout" +msgstr "Aufeinanderfolgende Falscheingaben bevor gesperrt wird" + +msgid "Failure reset interval" +msgstr "Fehler Resetintervall" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "Nach dieser Zeit wird der Fehlerzähler zurückgesetzt" + +msgid "Lockout duration" +msgstr "Sperrdauer" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Während dieser Zeit wird der Login gesperrt (Sekunden)" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "Neue Gruppen-Passwortregel hinzufügen." + +msgid "Delete a group password policy." +msgstr "Gruppen-Passwortregel löschen." + +msgid "Search for group password policies." +msgstr "Suche nach Gruppen-Passwortregeln" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "Gruppen-Passwortregel bearbeiten." + +msgid "Display information about password policy." +msgstr "Informationen über Passwortregel anzeigen." + +msgid "User" +msgstr "Benutzer" + +msgid "Display effective policy for a specific user" +msgstr "Aktive Passwortregel für einen bestimmten Benutzer anzeigen" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy server name" +msgstr "RADIUS-Proxy Benutzername" + +#, fuzzy +#| msgid "A description of this host" +msgid "A description of this RADIUS proxy server" +msgstr "Beschreibung des Hosts" + +msgid "Server" +msgstr "Server" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +#, fuzzy +#| msgid "Time now" +msgid "Timeout" +msgstr "Aktuelle Zeit" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +#, fuzzy +#| msgid "entries" +msgid "Retries" +msgstr "Einträge" + +#, fuzzy +#| msgid "Types of supported user authentication" +msgid "The number of times to retry authentication" +msgstr "Unterstützte Authentifizierungsmethoden" + +#, fuzzy +#| msgid "Attribute" +msgid "User attribute" +msgstr "Attribut" + +msgid "The username attribute on the user object" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new RADIUS proxy server." +msgstr "Einen neuen HBAC-Dienst hinzufügen." + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "Delete a RADIUS proxy server." +msgstr "RADIUS-Proxy Benutzername" + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for RADIUS proxy servers." +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "Modify a RADIUS proxy server." +msgstr "RADIUS-Proxy Benutzername" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about a RADIUS proxy server." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "Domain" + +#, fuzzy +#| msgid "Add Many" +msgid "Add domain" +msgstr "Mehrere hinzufügen" + +#, fuzzy +#| msgid "Delete Sudo Command." +msgid "Delete domain" +msgstr "Sudo-Befehl löschen." + +#, fuzzy +#| msgid "Modify Sudo Command." +msgid "Modify realm domains." +msgstr "Sudo-Befehl ändern." + +#, fuzzy +#| msgid "force host name even if not in DNS" +msgid "Force adding domain even if not in DNS" +msgstr "Hostname erzwingen auch wenn nicht im DNS" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "Rollenname" + +msgid "A description of this role-group" +msgstr "Beschreibung der Rollengruppe" + +msgid "Member users" +msgstr "Mitglieds-Benutzer" + +msgid "Member groups" +msgstr "Mitglieds-Gruppen" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "Mitglieds-Dienste" + +msgid "Add a new role." +msgstr "Neue Rolle hinzufügen." + +msgid "Add members to a role." +msgstr "Mitglieder zur Rolle hinzufügen." + +#, fuzzy +#| msgid "Member services" +msgid "member service" +msgstr "Mitglieds-Dienste" + +#, fuzzy +#| msgid "services" +msgid "services to add" +msgstr "Dienste" + +msgid "Add privileges to a role." +msgstr "Berechtigungen zur Rolle hinzufügen." + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "Anzahl der hinzugefügten Berechtigungen" + +msgid "Delete a role." +msgstr "Rolle löschen." + +msgid "Search for roles." +msgstr "Nach Rollen suchen." + +msgid "Modify a role." +msgstr "Rolle ändern." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the role object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +msgid "Remove members from a role." +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy +#| msgid "%s to remove" +msgid "services to remove" +msgstr "%s zum entfernen" + +msgid "Remove privileges from a role." +msgstr "Berechtigungen von Rolle entfernen." + +msgid "Number of privileges removed" +msgstr "Anzahl der entfernten Berechtigungen" + +msgid "Display information about a role." +msgstr "Informationen über eine Rolle anzeigen." + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Self-service name" +msgstr "Dienstname" + +#, fuzzy +#| msgid "Attributes to which the permission applies" +msgid "Attributes to which the permission applies." +msgstr "Attribute auf die die Berechtigung angewendet wird" + +#, fuzzy +#| msgid "Add a new HBAC service group." +msgid "Add a new self-service permission." +msgstr "Eine neue HBAC-Dienstgruppe hinzufügen." + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete a self-service permission." +msgstr "HBAC-Dienstgruppe löschen" + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for a self-service permission." +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify a self-service permission." +msgstr "HBAC-Dienstgruppe bearbeiten" + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "Display information about a self-service permission." +msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +#, fuzzy +#| msgid "Default SELinux user" +msgid "SELinux User" +msgstr "Vorgegebener SELinux-Benutzer" + +msgid "HBAC Rule" +msgstr "HBAC-Regel" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "HBAC Regel die Benutzer, Gruppen und Hostgruppen definiert" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new SELinux User Map." +msgstr "Eine neue Gruppe erstellen." + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add users and groups to an SELinux User Map rule." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +#| msgid "Delete a user." +msgid "Delete a SELinux User Map." +msgstr "Einen Benutzer löschen." + +#, fuzzy +#| msgid "Disable a user account." +msgid "Disable an SELinux User Map rule." +msgstr "Ein Benutzerkonto deaktivieren." + +#, fuzzy +#| msgid "Enable a user account." +msgid "Enable an SELinux User Map rule." +msgstr "Ein Benutzerkonto aktivieren." + +#, fuzzy +#| msgid "Search for users." +msgid "Search for SELinux User Maps." +msgstr "Nach Benutzern suchen." + +#, fuzzy +#| msgid "Modify a user." +msgid "Modify a SELinux User Map." +msgstr "Einen Benutzer bearbeiten." + +#, fuzzy +#| msgid "Remove target hosts and hostgroups from an HBAC rule." +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Display the properties of a SELinux User Map rule." +msgstr "Einstellungen der HBAC-Regel anzeigen." + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "Principal" + +msgid "Service principal" +msgstr "Dienst-Principal" + +#, fuzzy +#| msgid "Default PAC types" +msgid "PAC type" +msgstr "Standard PAC-Typen" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "Einen neuen IPA-Dienst hinzufügen." + +#, fuzzy +#| msgid "force host name even if not in DNS" +msgid "force principal name even if not in DNS" +msgstr "Hostname erzwingen auch wenn nicht im DNS" + +msgid "Add hosts that can manage this service." +msgstr "Hosts hinzufügen, die diesen Dienst verwalten können." + +#, fuzzy +#| msgid "" +#| "Allow users, groups, hosts or host groups to create a keytab of this host." +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy +#| msgid "" +#| "Allow users, groups, hosts or host groups to retrieve a keytab of this " +#| "host." +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erhalten." + +msgid "Delete an IPA service." +msgstr "Einen IPA-Dienst entfernen." + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" +"Den Kerberos-Schlüssel und das SSL-Zertifikat eines Dienstes deaktivieren." + +#, fuzzy +#| msgid "" +#| "Disallow users, groups, hosts or host groups to create a keytab of this " +#| "host." +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy +#| msgid "" +#| "Disallow users, groups, hosts or host groups to retrieve a keytab of this " +#| "host." +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erhalten." + +msgid "Search for IPA services." +msgstr "Nach IPA-Diensten suchen." + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "Einen existierenden IPA-Dienst bearbeiten." + +msgid "Remove hosts that can manage this service." +msgstr "Hosts entfernen, die diesen Dienst verwalten können." + +msgid "Display information about an IPA service." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "Sudo-Befehl" + +msgid "A description of this command" +msgstr "Eine Beschreibung dieses Befehls" + +msgid "Sudo Command Groups" +msgstr "Sudo-Befehlsgruppen" + +msgid "Create new Sudo Command." +msgstr "Neuen Sudo-Befehl erzeugen." + +msgid "Delete Sudo Command." +msgstr "Sudo-Befehl löschen." + +msgid "Search for Sudo Commands." +msgstr "Nach Sudo-Befehlen suchen." + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "Sudo-Befehl ändern." + +msgid "Display Sudo Command." +msgstr "Sudo-Befehl anzeigen." + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "Sudo-Befehlsgruppe" + +msgid "Group description" +msgstr "Gruppenbeschreibung" + +msgid "Commands" +msgstr "Befehle" + +#, fuzzy +#| msgid "sudo commands" +msgid "Member Sudo commands" +msgstr "Sudo-Befehle" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create new Sudo Command Group." +msgstr "Neuen Sudo-Befehl erzeugen." + +#, fuzzy +#| msgid "Add members to a group." +msgid "Add members to Sudo Command Group." +msgstr "Mitglieder zu einer Gruppe hinzufügen." + +#, fuzzy +#| msgid "sudo command" +msgid "member sudo command" +msgstr "Sudo-Befehl" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo commands to add" +msgstr "Sudo-Befehle" + +#, fuzzy +#| msgid "Delete Sudo Command." +msgid "Delete Sudo Command Group." +msgstr "Sudo-Befehl löschen." + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for Sudo Command Groups." +msgstr "Nach Sudo-Befehlen suchen." + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify Sudo Command." +msgid "Modify Sudo Command Group." +msgstr "Sudo-Befehl ändern." + +#, fuzzy +#| msgid "Remove members from a group." +msgid "Remove members from Sudo Command Group." +msgstr "Mitglieder aus einer Gruppe entfernen." + +#, fuzzy +#| msgid "sudo command group" +msgid "sudo commands to remove" +msgstr "Sudo-Befehlsgruppe" + +#, fuzzy +#| msgid "Display Sudo Command." +msgid "Display Sudo Command Group." +msgstr "Sudo-Befehl anzeigen." + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Vorname" + +msgid "Last name" +msgstr "Nachname" + +msgid "Full name" +msgstr "Vollständiger Name" + +msgid "Display name" +msgstr "Angezeigter Name" + +msgid "Initials" +msgstr "Initialen" + +msgid "Kerberos principal" +msgstr "Kerberos-Principal" + +msgid "Kerberos principal expiration" +msgstr "Kerberos-Principal Ablauf" + +msgid "Email address" +msgstr "Email-Adresse" + +msgid "Prompt to set the user password" +msgstr "Zum Setzen des Passworts auffordern" + +msgid "Generate a random user password" +msgstr "Ein zufälliges Benutzerpasswort erzeugen" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Benutzer-ID (wird durch das System zugewiesen, falls diese nicht angegeben " +"wird)" + +msgid "Street address" +msgstr "Straße" + +msgid "City" +msgstr "Ort" + +msgid "State/Province" +msgstr "Staat/Bundesland" + +msgid "ZIP" +msgstr "Postleitzahl" + +msgid "Telephone Number" +msgstr "Telefonnummer" + +msgid "Mobile Telephone Number" +msgstr "Mobiltelefonnummer" + +msgid "Pager Number" +msgstr "Pagernummer" + +msgid "Fax Number" +msgstr "Faxnummer" + +msgid "Org. Unit" +msgstr "Org. Einheit" + +msgid "Job Title" +msgstr "Tätigkeit" + +msgid "Manager" +msgstr "Manager" + +msgid "Car License" +msgstr "Kfz-Kennzeichen" + +msgid "Account disabled" +msgstr "Konto ist deaktiviert" + +msgid "User authentication types" +msgstr "Authentifizierungsmethoden" + +msgid "Types of supported user authentication" +msgstr "Unterstützte Authentifizierungsmethoden" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "RADIUS-Proxy Konfiguration" + +msgid "RADIUS proxy username" +msgstr "RADIUS-Proxy Benutzername" + +msgid "Department Number" +msgstr "Abteilungsnummer" + +msgid "Employee Number" +msgstr "Personalnummer" + +msgid "Employee Type" +msgstr "Personaltyp" + +msgid "Preferred Language" +msgstr "Bevorzugte Sprache" + +msgid "Member of groups" +msgstr "Mitglied der Gruppen" + +#, fuzzy +#| msgid "Indirect Member groups" +msgid "Indirect Member of group" +msgstr "Indirekte Mitglieds-Gruppen" + +msgid "Kerberos keys available" +msgstr "Kerberos-Schlüssel verfügbar" + +msgid "Add a new user." +msgstr "Einen neuen Benutzer hinzufügen." + +#, fuzzy +#| msgid "search for private groups" +msgid "Don't create user private group" +msgstr "nach privaten Gruppen suchen" + +msgid "Delete a user." +msgstr "Einen Benutzer löschen." + +msgid "Disable a user account." +msgstr "Ein Benutzerkonto deaktivieren." + +msgid "Enable a user account." +msgstr "Ein Benutzerkonto aktivieren." + +msgid "Search for users." +msgstr "Nach Benutzern suchen." + +msgid "Self" +msgstr "Selbst" + +msgid "Display user record for current Kerberos principal" +msgstr "Benutzer-Datensatz für den aktuellen Kerberos-Principal anzeigen" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +#, fuzzy +#| msgid "search for private groups" +msgid "Search for users with these member of groups." +msgstr "nach privaten Gruppen suchen" + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for users without these member of groups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for users with these member of netgroups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for users without these member of netgroups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for automember rules.\n" +#| " " +msgid "Search for users with these member of roles." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for automember rules.\n" +#| " " +msgid "Search for users without these member of roles." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for users with these member of HBAC rules." +msgstr "Nach HBAC-Regeln suchen." + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for automember rules.\n" +#| " " +msgid "Search for users without these member of HBAC rules." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +msgid "Search for users with these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for automember rules.\n" +#| " " +msgid "Search for users without these member of sudo rules." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +msgid "Modify a user." +msgstr "Einen Benutzer bearbeiten." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the user object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +msgid "Display information about a user." +msgstr "Informationen zu einem Benutzer anzeigen." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "Beschreibung der Auto-Mitgliedschaftsregel" + +msgid "Default (fallback) Group" +msgstr "Standard (Rückfall) Gruppe" + +msgid "Default group for entries to land" +msgstr "Vorgegebene Gruppe für Einträge" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add an automember rule.\n" +#| " " +msgid "Add an automember rule." +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +msgid "Automember Rule" +msgstr "Auto-Mitgliedschaftsregel" + +msgid "Grouping Type" +msgstr "Gruppierungstyp" + +msgid "Grouping to which the rule applies" +msgstr "Gruppierung, auf die die Regel angewendet wird" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add conditions to an automember rule.\n" +#| " " +msgid "Add conditions to an automember rule." +msgstr "" +"\n" +" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +msgid "Inclusive Regex" +msgstr "Einschließende Regex" + +msgid "Exclusive Regex" +msgstr "Ausschließende Regex" + +msgid "Attribute Key" +msgstr "Attribut Schlüssel" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Dieses Attribut wird per Regex gefiltert. Zum Beispiel FQDN für einen Host, " +"oder Manager für einen Benutzer" + +msgid "Conditions that could not be added" +msgstr "Bedingungen, die nicht hinzugefügt werden konnten" + +msgid "Number of conditions added" +msgstr "Anzahl der hinzugefügten Bedingungen" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +#, fuzzy +#| msgid "Default group for entries to land" +msgid "Default (fallback) group for entries to land" +msgstr "Vorgegebene Gruppe für Einträge" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about the default (fallback) automember groups." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete an automember rule.\n" +#| " " +msgid "Delete an automember rule." +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel löschen.\n" +" " + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for automember rules.\n" +#| " " +msgid "Search for automember rules." +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +#, fuzzy +#| msgid "" +#| "\n" +#| " Modify an automember rule.\n" +#| " " +msgid "Modify an automember rule." +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel bearbeiten. " + +msgid "Rebuild auto membership." +msgstr "Auto-Mitgliedschaft neu erstellen" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" +"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" + +msgid "Rebuild membership for specified users" +msgstr "Auto-Mitgliedschaft für ausgewählte Benutzer neu erstellen" + +msgid "Rebuild membership for specified hosts" +msgstr "Auto-Mitgliedschaft für ausgewählte Hosts neu erstellen" + +msgid "No wait" +msgstr "Keine Wartezeit" + +#, fuzzy +#| msgid "Are you sure you want to rebuild auto membership?" +msgid "Don't wait for rebuilding membership" +msgstr "" +"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Remove conditions from an automember rule.\n" +#| " " +msgid "Remove conditions from an automember rule." +msgstr "" +"\n" +" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " + +msgid "Conditions that could not be removed" +msgstr "Bedingungen, die nicht entfernt werden konnten" + +msgid "Number of conditions removed" +msgstr "Anzahl der entfernten Bedingungen" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "Display information about an automember rule." +msgstr "" +"\n" +" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" +" " + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "Search for existing certificates." +msgstr "Ein existierendes Zertifikat holen." + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Grund" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Grund für den Widerruf des Zertifikats (0-10)" + +#, fuzzy +#| msgid "Serial number" +msgid "minimum serial number" +msgstr "Seriennummer" + +#, fuzzy +#| msgid "Serial number" +msgid "maximum serial number" +msgstr "Seriennummer" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of certs returned" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Take a revoked certificate off hold." +msgstr "Ein Zertifikat widerrufen." + +msgid "Serial number" +msgstr "Seriennummer" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" +"Seriennummer in Dezimalschreibweise oder (bei Präfix 0x) in " +"Hexadezimalschreibweise" + +msgid "Submit a certificate signing request." +msgstr "Eine Signaturanfrage (CSR) senden." + +msgid "CSR" +msgstr "CSR" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Dienst-Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" + +msgid "Revoke a certificate." +msgstr "Ein Zertifikat widerrufen." + +msgid "Retrieve an existing certificate." +msgstr "Ein existierendes Zertifikat holen." + +msgid "Output filename" +msgstr "Name der Ausgabedatei" + +msgid "File to store the certificate in." +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "Check the status of a certificate signing request." +msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." + +msgid "Request id" +msgstr "Anfrage-ID" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "Gruppen-ID (verwenden Sie diese Option, um die ID manuell anzugeben)" + +msgid "Indirect Member users" +msgstr "Indirekte Mitglieds-Benutzer" + +msgid "Indirect Member groups" +msgstr "Indirekte Mitglieds-Gruppen" + +msgid "Create a new group." +msgstr "Eine neue Gruppe erstellen." + +msgid "Create as a non-POSIX group" +msgstr "Als Nicht-POSIX-Gruppe erstellen" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "Mitglieder zu einer Gruppe hinzufügen." + +msgid "External member" +msgstr "Externes Mitglied" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "Gruppe löschen." + +#, fuzzy +#| msgid "Not a managed group" +msgid "Detach a managed group from a user." +msgstr "Keine verwaltete Gruppe" + +msgid "Search for groups." +msgstr "Nach Gruppen suchen." + +msgid "search for private groups" +msgstr "nach privaten Gruppen suchen" + +#, fuzzy +#| msgid "Search for groups." +msgid "search for POSIX groups" +msgstr "Nach Gruppen suchen." + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "search for non-POSIX groups" +msgstr "Nach Gruppen suchen." + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search for groups with these member users." +msgstr "Nach vorbereiteten Benutzern suchen." + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search for groups without these member users." +msgstr "Nach vorbereiteten Benutzern suchen." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for groups with these member groups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for groups without these member groups." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for groups with these member of groups." +msgstr "Nach Hostgruppen suchen." + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +#, fuzzy +#| msgid "Search for group password policies." +msgid "Search for groups with these member of roles." +msgstr "Suche nach Gruppen-Passwortregeln" + +#, fuzzy +#| msgid "Search for group password policies." +msgid "Search for groups without these member of roles." +msgstr "Suche nach Gruppen-Passwortregeln" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for groups with these member of HBAC rules." +msgstr "Nach HBAC-Regeln suchen." + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "Eine Gruppe ändern." + +msgid "change to a POSIX group" +msgstr "in eine POSIC-Gruppe ändern" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the group object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +msgid "Remove members from a group." +msgstr "Mitglieder aus einer Gruppe entfernen." + +msgid "Display information about a named group." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "HBAC Nutzung simulieren" + +msgid "Target host" +msgstr "Ziel-Host" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of records to search (-1 is unlimited)" +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" + +msgid "Warning" +msgstr "Warnung" + +msgid "Matched rules" +msgstr "Zutreffende Regeln" + +msgid "Not matched rules" +msgstr "Nicht zutreffende Regeln" + +msgid "Non-existent or invalid rules" +msgstr "Nicht-existente oder ungültige Regeln" + +msgid "Result of simulation" +msgstr "Ergebnis der Simulation" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, fuzzy +#| msgid "Domain enabled" +msgid "Domain NetBIOS name" +msgstr "Domäne aktiviert" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +#| msgid "New ACI name" +msgid "NetBIOS name" +msgstr "Neuer ACI-Name" + +#, fuzzy +#| msgid "Domain" +msgid "Domain GUID" +msgstr "Domain" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Domain enabled" +msgid "Domain name" +msgstr "Domäne aktiviert" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Range type" +msgstr "Regeltyp" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a trust." +msgstr "Host löschen." + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for trusts." +msgstr "Nach Hosts suchen." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a trust." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +#| msgid "Modify configuration options." +msgid "Modify global trust configuration." +msgstr "Konfigurationsoptionen bearbeiten." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show global trust configuration." +msgstr "Die aktuelle Konfiguration anzeigen." + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Range name" +msgstr "Umbenennen" + +msgid "First Posix ID of the range" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of IDs in the range" +msgstr "Anzahl der zurückgegebenen Einträge" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +#, fuzzy +#| msgid "DN of the started task" +msgid "Name of the trusted domain" +msgstr "DN der gestarteten Aufgabe" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete an ID range." +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for ranges." +msgstr "Nach Rollen suchen." + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify ID range." +msgstr "Rolle ändern." + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a range." +msgstr "Informationen über eine Rolle anzeigen." + +msgid "" +"\n" "OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "Eindeutige ID" + +msgid "Type of the token" +msgstr "Token-Typ" + +msgid "Token description (informational only)" +msgstr "Token Beschriebung (nur informativ)" + +msgid "Owner" +msgstr "Eigentümer" + +msgid "Assigned user of the token (default: self)" +msgstr "Zugewiesener Token-Benutzer (Standard: selbst)" + +msgid "Assigned manager of the token (default: self)" +msgstr "Zugewiesener Token-Verwalter (Standard: selbst)" + +msgid "Disabled" +msgstr "Deaktiviert" + +msgid "Mark the token as disabled (default: false)" +msgstr "Token als deaktiviert markieren (Standard: false)" + +msgid "Validity start" +msgstr "Gültig ab" + +msgid "First date/time the token can be used" +msgstr "Ab diesem Datum kann der Token benutzt werden" + +msgid "Validity end" +msgstr "Gültig bis" + +msgid "Last date/time the token can be used" +msgstr "Bis zu diesem Datum kann der Token benutzt werden" + +msgid "Vendor" +msgstr "Hersteller" + +msgid "Token vendor name (informational only)" +msgstr "Token-Hersteller (nur informativ)" + +msgid "Model" +msgstr "Modell" + +msgid "Token model (informational only)" +msgstr "Token-Modell (nur informativ)" + +msgid "Serial" +msgstr "Seriennummer" + +msgid "Token serial (informational only)" +msgstr "Token-Seriennummer (nur informativ)" + +msgid "Token secret (Base32; default: random)" +msgstr "Token-Geheimis (Base32; Standard: zufällig)" + +msgid "Token hash algorithm" +msgstr "Token Hash-Algorithmus" + +msgid "Digits" +msgstr "Zeichen" + +msgid "Number of digits each token code will have" +msgstr "Zeichenanzahl die jeder Token-Code haben wird" + +msgid "Clock offset" +msgstr "Zeit-Offset" + +msgid "TOTP token / IPA server time difference" +msgstr "Differenz zwischen Token und Serverzeit" + +msgid "Clock interval" +msgstr "Zeitintervall" + +msgid "Length of TOTP token code validity" +msgstr "Dauer die ein TOTP Code gültig ist " + +msgid "Counter" +msgstr "Zähler" + +msgid "Initial counter for the HOTP token" +msgstr "Startwert des HOTP-Zählers" + +msgid "Add a new OTP token." +msgstr "Neuen OTP-Token hinzufügen" + +msgid "(deprecated)" +msgstr "(veraltet)" + +msgid "Do not display QR code" +msgstr "Keinen QR Code zeigen" + +msgid "Add users that can manage this token." +msgstr "Nutzer hinzufügen die diesen Token verwalten können" + +msgid "Delete an OTP token." +msgstr "OTP Token löschen" + +msgid "Search for OTP token." +msgstr "OTP Token suchen." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "OTP Token bearbeiten" + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the OTP token object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +msgid "Display information about an OTP token." +msgstr "Informationen über OTP Token anzeigen." + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "Befehlskategorie" + +msgid "Command category the rule applies to" +msgstr "Befehlskategorie, auf die die Regel angewendet werden soll" + +#, fuzzy +#| msgid "User category" +msgid "RunAs User category" +msgstr "Benutzerkategorie" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "RunAs User category the rule applies to" +msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" + +#, fuzzy +#| msgid "User category" +msgid "RunAs Group category" +msgstr "Benutzerkategorie" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "RunAs Group category the rule applies to" +msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Sudo order" +msgstr "Sudo-Befehl" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "Externer Benutzer" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host Masks" +msgstr "Hosts" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Allow Commands" +msgstr "Sudo-Befehle" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Deny Commands" +msgstr "Sudo-Befehle" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Sudo Allow Command Groups" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Sudo Deny Command Groups" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy +#| msgid "Users" +msgid "RunAs Users" +msgstr "Benutzer" + +#, fuzzy +#| msgid "stage user" +msgid "Run as a user" +msgstr "Vorbereiteter Benutzer" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +#, fuzzy +#| msgid "External User" +msgid "RunAs External User" +msgstr "Externer Benutzer" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "External User" +msgid "External Groups of RunAs Users" +msgstr "Externer Benutzer" + +msgid "External Groups of users that the command can run as" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "RunAs Groups" +msgstr "Host-Gruppen" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +#, fuzzy +#| msgid "External trust" +msgid "RunAs External Group" +msgstr "Externe Vertrauensstellung" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "Sudo-Option" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create new Sudo Rule." +msgstr "Neuen Sudo-Befehl erzeugen." + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "sudo command group" +msgid "member sudo command group" +msgstr "Sudo-Befehlsgruppe" + +#, fuzzy +#| msgid "sudo command groups" +msgid "sudo command groups to add" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add users and groups for Sudo to execute as." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add users and groups affected by Sudo Rule." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +#| msgid "Disable a Sudo Rule." +msgid "Delete Sudo Rule." +msgstr "Eine Sudo-Regel deaktivieren." + +msgid "Disable a Sudo Rule." +msgstr "Eine Sudo-Regel deaktivieren." + +msgid "Enable a Sudo Rule." +msgstr "Eine Sudo-Regel aktivieren." + +msgid "Search for Sudo Rule." +msgstr "Nach Sudo-Regel suchen." + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +#, fuzzy +#| msgid "Display Sudo Rule." +msgid "Modify Sudo Rule." +msgstr "Sudo-Regel anzeigen." + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "sudo command groups" +msgid "sudo command groups to remove" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy +#| msgid "Remove target hosts and hostgroups from an HBAC rule." +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove an option from Sudo Rule." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +msgid "Remove group for Sudo to execute as." +msgstr "" + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users and groups for Sudo to execute as." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +msgid "Display Sudo Rule." +msgstr "Sudo-Regel anzeigen." + +#, fuzzy +#| msgid "Time limit of search in seconds" +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "ACL name" +msgstr "ACL Name" + +msgid "Profile category" +msgstr "Profilkategorie" + +msgid "Profile category the ACL applies to" +msgstr "Profilkategorie auf die ACL angewendet wird" + +msgid "User category the ACL applies to" +msgstr "Benutzerkategorie auf die ACL angewendet wird" + +msgid "Host category the ACL applies to" +msgstr "Hostkategorie auf die ACL angewendet wird" + +msgid "Service category the ACL applies to" +msgstr "Dienstkategorie auf die ACL angewendet wird" + +msgid "Profiles" +msgstr "Profile" + +msgid "Create a new CA ACL." +msgstr "Erstelle eine neue CA ACL." + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +#| msgid "Add privileges to a role." +msgid "Add profiles to a CA ACL." +msgstr "Berechtigungen zur Rolle hinzufügen." + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "member Certificate Profile" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Profiles to add" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add services to a CA ACL." +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add users and groups to a CA ACL." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +msgid "Delete a CA ACL." +msgstr "CA ACL löschen." + +#, fuzzy +#| msgid "Delete a CA ACL." +msgid "Disable a CA ACL." +msgstr "CA ACL löschen." + +#, fuzzy +#| msgid "Delete a CA ACL." +msgid "Enable a CA ACL." +msgstr "CA ACL löschen." + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for CA ACLs." +msgstr "Nach HBAC-Regeln suchen." + +msgid "Modify a CA ACL." +msgstr "CA ACL ändern" + +#, fuzzy +#| msgid "Remove target hosts and hostgroups from an HBAC rule." +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove profiles from a CA ACL." +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Profiles to remove" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove services from a CA ACL." +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users and groups from a CA ACL." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Display the properties of a CA ACL." +msgstr "Einstellungen der HBAC-Regel anzeigen." + +#, fuzzy +#| msgid "" +#| "Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" + +#, fuzzy +#| msgid "Maximum number of records to search (-1 is unlimited)" +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" msgid "" "\n" @@ -131,149 +9331,3858 @@ msgstr "" "\n" "IPA Domain Level erhöhen.\n" +msgid "Query current Domain Level." +msgstr "Aktuelles Domain Level abfragen." + +msgid "Current domain level:" +msgstr "Aktuelles Domain Level:" + +msgid "Change current Domain Level." +msgstr "Aktuelles Domain Level ändern." + +msgid "Domain Level" +msgstr "Domain Level" + +msgid "Add certificates to host entry" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a hostgroup." +msgid "Remove certificates from host entry" +msgstr "Mitglieder von Hostgruppe entfernen." + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +#, fuzzy +#| msgid "Add members to a group." +msgid "Add to default group" +msgstr "Mitglieder zu einer Gruppe hinzufügen." + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +#, fuzzy +#| msgid "Search" +msgid "Search scope" +msgstr "Suchen" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +#, fuzzy +#| msgid "Target host" +msgid "Target DN subtree" +msgstr "Ziel-Host" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + msgid "" "\n" -"YubiKey Tokens\n" -msgstr "" +"IPA servers\n" "\n" -"YubiKey Tokens\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" -msgid " ipa --help" -msgstr " ipa --help" +msgid "Server name" +msgstr "Servername" + +msgid "IPA server hostname" +msgstr "IPA-Server Hostname" + +msgid "Managed suffix" +msgstr "" + +#, fuzzy +#| msgid "Current domain level:" +msgid "Min domain level" +msgstr "Aktuelles Domain Level:" + +#, fuzzy +#| msgid "Current domain level:" +msgid "Minimum domain level" +msgstr "Aktuelles Domain Level:" + +#, fuzzy +#| msgid "Domain Level" +msgid "Max domain level" +msgstr "Domain Level" + +#, fuzzy +#| msgid "Current domain level:" +msgid "Maximum domain level" +msgstr "Aktuelles Domain Level:" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete IPA server." +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for IPA servers." +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Show IPA server." +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy +#| msgid "%(name)s certificate is not valid" +msgid "Add new certificates to a service" +msgstr "%(name)s Zertifikat ist ungültig" + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove certificates from a service" +msgstr "Berechtigungen von Rolle entfernen." + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Allowed Target" +msgstr "Ziel" + +#, fuzzy +#| msgid "Create a new HBAC rule." +msgid "Create a new service delegation rule." +msgstr "Neue HBAC-Regel erstellen." + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add member to a named service delegation rule." +msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." + +#, fuzzy +#| msgid "Kerberos principal" +msgid "member principal" +msgstr "Kerberos-Principal" + +#, fuzzy +#| msgid "principal not found\n" +msgid "principal to add" +msgstr "Principal nicht gefunden\n" + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add target to a named service delegation rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +#| msgid "Member service groups" +msgid "member service delegation target" +msgstr "Mitglieds-Dienstgruppen" + +msgid "service delegation targets to add" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete service delegation." +msgstr "HBAC-Dienstgruppe löschen" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for service delegations rule." +msgstr "Suche nach HBAC Dienstgruppe" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation rule." +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +#, fuzzy +#| msgid "Failed to remove" +msgid "principal to remove" +msgstr "Entfernen fehlgeschlagen" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove target from a named service delegation rule." +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +msgid "service delegation targets to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a named service delegation rule." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +msgid "Create a new service delegation target." +msgstr "" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add member to a named service delegation target." +msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." + +msgid "Delete service delegation target." +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for service delegation target." +msgstr "Suche nach HBAC Dienstgruppe" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation target." +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "Display information about a named service delegation target." +msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "Vorbereiteten Benutzer aktivieren." + +msgid "Add a new stage user." +msgstr "Einen neuen vorbereiteten Benutzer hinzufügen." + +msgid "Create Stage user in from a delete user" +msgstr "Erstelle vorbereiteten Benutzer aus einem gelöschten Benutzer" + +msgid "Delete a stage user." +msgstr "Einen vorbereiteten Benutzer löschen." + +msgid "Search for stage users." +msgstr "Nach vorbereiteten Benutzern suchen." + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search for stage users with these member of groups." +msgstr "Nach vorbereiteten Benutzern suchen." + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search for stage users with these member of roles." +msgstr "Nach vorbereiteten Benutzern suchen." + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search for stage users without these member of roles." +msgstr "Nach vorbereiteten Benutzern suchen." + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "Einen vorbereiteten Benutzer ändern." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the stage user object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +msgid "Display information about a stage user." +msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Segment name" +msgstr "Servername" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +#, fuzzy +#| msgid "Rights" +msgid "Right node" +msgstr "Rechte" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Right replication node - an IPA server" +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to strip" +msgstr "Attribute" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +#, fuzzy +#| msgid "Attribute Key" +msgid "Attributes to replicate" +msgstr "Attribut Schlüssel" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Session timeout" +msgstr "Sitzungsfehler" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Suffix name" +msgstr "Dateiname" + +msgid "LDAP suffix to be managed" +msgstr "" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add a new segment." +msgstr "Neuen Host hinzufügen." + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a segment." +msgstr "Host löschen." + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for topology segments." +msgstr "Nach Hosts suchen." + +#, fuzzy +#| msgid "Modify a user." +msgid "Modify a segment." +msgstr "Einen Benutzer bearbeiten." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Display a segment." +msgstr "Angezeigter Name" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +#, fuzzy +#| msgid "Delete a stage user." +msgid "Delete a topology suffix." +msgstr "Einen vorbereiteten Benutzer löschen." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for topology suffices." +msgstr "Nach Rollen suchen." + +#, fuzzy +#| msgid "Modify a stage user." +msgid "Modify a topology suffix." +msgstr "Einen vorbereiteten Benutzer ändern." + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "Aufbewahrter Benutzer" + +#, fuzzy +#| msgid "Add a manager to the user entry" +msgid "Add one or more certificates to the user entry" +msgstr "Manager zum Benutzer hinzufügen" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove one or more certificates to the user entry" +msgstr "Manager vom Benutzer entfernen" + +msgid "Move deleted user into staged area" +msgstr "Gelöschten Benutzer in vorbereitete Benutzer verschieben" + +msgid "Undelete a delete user account." +msgstr "Gelöschten Benutzer wiederherstellen" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Vault name" +msgstr "Nachname" + +#, fuzzy +#| msgid "description" +msgid "Vault description" +msgstr "Beschreibung" + +#, fuzzy +#| msgid "Rule type" +msgid "Vault type" +msgstr "Regeltyp" + +msgid "Salt" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Vault salt" +msgstr "Vorgabe-Shell" + +#, fuzzy +#| msgid "SSH public key" +msgid "Public key" +msgstr "Öffentlicher SSH Schlüssel" + +#, fuzzy +#| msgid "SSH public key" +msgid "Vault public key" +msgstr "Öffentlicher SSH Schlüssel" + +#, fuzzy +#| msgid "Member users" +msgid "Owner users" +msgstr "Mitglieds-Benutzer" + +#, fuzzy +#| msgid "User group" +msgid "Owner groups" +msgstr "Benutzer-Gruppe" + +#, fuzzy +#| msgid "Member services" +msgid "Owner services" +msgstr "Mitglieds-Dienste" + +#, fuzzy +#| msgid "Via Service" +msgid "Vault service" +msgstr "Mit Dienst" + +msgid "Shared vault" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Vault user" +msgstr "Standard Benutzergruppe" + +#, fuzzy +#| msgid "Host Certificate" +msgid "Transport Certificate" +msgstr "Host-Zertifikat" + +msgid "Service name of the service vault" +msgstr "" + +#, fuzzy +#| msgid "Hostname of this server" +msgid "Username of the user vault" +msgstr "Hostname dieses Servers" + +#, fuzzy +#| msgid "Add members to a role." +msgid "Add members to a vault." +msgstr "Mitglieder zur Rolle hinzufügen." + +#, fuzzy +#| msgid "Add members to a role." +msgid "Add owners to a vault." +msgstr "Mitglieder zur Rolle hinzufügen." + +#, fuzzy +#| msgid "Member users" +msgid "owner user" +msgstr "Mitglieds-Benutzer" + +#, fuzzy +#| msgid "User group" +msgid "owner group" +msgstr "Benutzer-Gruppe" + +#, fuzzy +#| msgid "Member services" +msgid "owner service" +msgstr "Mitglieds-Dienste" + +#, fuzzy +#| msgid "Members that could not be added" +msgid "Owners that could not be added" +msgstr "Mitglieder, die nicht hinzugefügt werden konnten" + +#, fuzzy +#| msgid "Number of members added" +msgid "Number of owners added" +msgstr "Zahl der hinzugefügten Mitglieder" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a vault." +msgstr "Host löschen." + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for vaults." +msgstr "Nach Hosts suchen." + +#, fuzzy +#| msgid "Disabled service \"%(value)s\"" +msgid "List all service vaults" +msgstr "Dienst »%(value)s« deaktiviert" + +#, fuzzy +#| msgid "Disable a user account." +msgid "List all user vaults" +msgstr "Ein Benutzerkonto deaktivieren." + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove members from a vault." +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove owners from a vault." +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy +#| msgid "Members that could not be removed" +msgid "Owners that could not be removed" +msgstr "Mitglieder, die nicht entfernt werden konnten" + +#, fuzzy +#| msgid "Number of members removed" +msgid "Number of owners removed" +msgstr "Anzahl der entfernten Mitglieder" + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a vault." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show vault configuration." +msgstr "Die aktuelle Konfiguration anzeigen." + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Output file to store the transport certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "Add owners to a vault container." +msgstr "" + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Delete a vault container." +msgstr "Automount-Ort löschen." + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove owners from a vault container." +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a vault container." +msgstr "Informationen zu einem Benutzer anzeigen." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" + +msgid "Profile ID" +msgstr "Profil-ID" + +msgid "Certificate Profile to use" +msgstr "Benutze Zertifikatsprofil" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Profile description" +msgstr "Gruppenbeschreibung" + +#, fuzzy +#| msgid "A description of this role-group" +msgid "Brief description of this profile" +msgstr "Beschreibung der Rollengruppe" + +#, fuzzy +#| msgid "No Valid Certificate" +msgid "Store issued certificates" +msgstr "Kein gültiges Zertifikat" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Delete a Certificate Profile." +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for Certificate Profiles." +msgstr "Nach Rollen suchen." + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Import a Certificate Profile." +msgstr "Benutze Zertifikatsprofil" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Modify Certificate Profile configuration." +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +#| msgid "Replication configuration" +msgid "File containing profile configuration" +msgstr "Replikationseinstellungen" + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Display the properties of a Certificate Profile." +msgstr "Einstellungen der HBAC-Regel anzeigen." + +#, fuzzy +#| msgid "cannot open configuration file %s\n" +msgid "Write profile configuration to file" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +msgid "Remove users that can manage this token." +msgstr "Nutzer entfernen die diesen Token verwalten können" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +#, fuzzy +#| msgid "Zone name (FQDN)" +msgid "Hostname (FQDN)" +msgstr "Zonenname (FQDN)" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "Managed suffixes" +msgstr "UPN Suffixe" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Remote server name" +msgstr "Servername" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "Remote IPA server hostname" +msgstr "IPA-Server Hostname" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "suffix" +msgstr "UPN Suffixe" + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search for servers with these managed suffixes." +msgstr "Nach vorbereiteten Benutzern suchen." + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove a manager to the stage user entry" +msgstr "Manager vom Benutzer entfernen" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for topology suffixes." +msgstr "Nach Rollen suchen." + +msgid "Add a manager to the user entry" +msgstr "Manager zum Benutzer hinzufügen" + +msgid "Remove a manager to the user entry" +msgstr "Manager vom Benutzer entfernen" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions to grant (read, write). Default is write." +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "Berechtigungen (read, write). Standard ist write" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "DNS-Klasse" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +#, fuzzy +#| msgid "Flags" +msgid "KEY Flags" +msgstr "Flags" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "KEY Algorithm" +msgstr "Algorithmus" + +#, fuzzy +#| msgid "SSH public key" +msgid "KEY Public Key" +msgstr "Öffentlicher SSH Schlüssel" + +#, fuzzy +#| msgid "SSH public key" +msgid "Public Key" +msgstr "Öffentlicher SSH Schlüssel" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +#, fuzzy +#| msgid "Domain enabled" +msgid "Next Domain Name" +msgstr "Domäne aktiviert" + +msgid "NSEC Type Map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "Typ" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "RRSIG Algorithm" +msgstr "Algorithmus" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "Signature Expiration" +msgstr "Passwortablauf" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Signer's Name" +msgstr "Servername" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "SIG Algorithm" +msgstr "Algorithmus" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +#, fuzzy +#| msgid "Time to live" +msgid "SOA time to live" +msgstr "Lebensdauer" + +#, fuzzy +#| msgid "Time to live" +msgid "SOA record time to live" +msgstr "Lebensdauer" + +#, fuzzy +#| msgid "DNS class" +msgid "SOA class" +msgstr "DNS-Klasse" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "Befehl nicht implementiert" + +#, fuzzy +#| msgid "Identity" +msgid "Quantity" +msgstr "Identität" + +#, fuzzy +#| msgid "Search for an automount location." +msgid "Search for entitlement accounts." +msgstr "Automount-Ort suchen." + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "Retrieve the entitlement certs." +msgstr "Ein existierendes Zertifikat holen." + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "Import an entitlement certificate." +msgstr "Ein existierendes Zertifikat holen." + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "Benutzername" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "Befehl nicht implementiert" + +#, fuzzy +#| msgid "Reset Password" +msgid "Registration password" +msgstr "Passwort zurücksetzen" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "comma-separated list of users to remove" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "comma-separated list of groups to remove" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "Source host category" +msgstr "Host-Kategorie" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Source host category the rule applies to" +msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" + +msgid "Source Hosts" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "Source Host Groups" +msgstr "Host-Gruppen" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for groups" +msgid "comma-separated list of HBAC service groups to add" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "comma-separated list of hosts to remove" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for groups" +msgid "comma-separated list of HBAC services to remove" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +#, fuzzy +#| msgid "Remove target hosts and hostgroups from an HBAC rule." +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +#, fuzzy +#| msgid "Target host" +msgid "Source host" +msgstr "Ziel-Host" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for groups" +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for groups" +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for groups" +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for groups" +msgid "comma-separated list of groups to exclude from migration" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for groups" +msgid "comma-separated list of users to exclude from migration" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "comma-separated list of netgroups to remove" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +#, fuzzy +#| msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "Typ des IPA-Objekts (user, group, host, hostgroup, service, netgroup)" + +#, fuzzy +#| msgid "Member of a group" +msgid "Target members of a group" +msgstr "Mitglied einer Gruppe" + +#, fuzzy +#| msgid "User group ACI grants access to" +msgid "User group to apply permissions to" +msgstr "Benutzergruppen-ACI erlaubt Zugriff auf" + +#, fuzzy +#| msgid "Number of privileges added" +msgid "comma-separated list of privileges to add" +msgstr "Anzahl der hinzugefügten Berechtigungen" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permission name" +msgid "Permission type" +msgstr "Berechtigungsname" + +#, fuzzy +#| msgid "Number of privileges removed" +msgid "comma-separated list of privileges to remove" +msgstr "Anzahl der entfernten Berechtigungen" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "comma-separated list of roles to remove" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +#, fuzzy +#| msgid "GECOS" +msgid "GECOS field" +msgstr "GECOS" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for groups" +msgid "comma-separated list of sudo command groups to add" +msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "Zusätzliche Anweisungen:" #, python-format msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" msgstr "" -"Alternativ sind folgende Server in der Lage den Befehl auszuführen: " -"%(masters)s" +"API Versionsnummer wurde nicht gesendet, Vorwärtskompatibiltät nicht " +"garantiert. Nehme API Version %(server_version)s für Server an." -#, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} Einträge hinzugefügt" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} Einträge gelöscht" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} Einträge deaktiviert" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "${count} Einträge aktiviert" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} Einträge gelöscht" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} Option(en) entfernt" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} Benutzer aktiviert" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} user(s) wiederhergestellt" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "${entity} ${primary_key} Einstellungen" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "${entity} ${primary_key} aktualisiert" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity} erfolgreich hinzugefügt" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} ist Mitglied von:" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} wird verwaltet von:" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "${primary_key} Mitglieder:" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, Version: ${version}" +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"Die DNS-Forwarder Semantiken haben sich seit IPA 4.0 geändert.\n" +"Nutzen Sie stattdessen Forward Zones (dnsforwardzone-*).\n" +"Für weitere Details schlagen Sie bitte in der Dokumentation nach." #, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s enthält nicht »%(value)s«" +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"DNSSEC Unterstützung ist experimentell.\n" +"%(additional_info)s" #, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Ungültige Syntax." +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s' Option ist veraltet. %(additional_info)s" #, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Nur ein Wert erlaubt." +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Semantik von %(label)s wurde geändert. %(current_behavior)s\n" +"%(hint)s" #, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS Server %(server)s: %(error)s." #, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d HBAC-Regel gefunden" -msgstr[1] "%(count)d HBAC-Regeln gefunden" +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS Server %(server)s unterstützt kein DNSSEC: %(error)s.\n" +"Wenn DNSSEC-Überprüfung auf den IPA Servern aktiviert ist bitte deaktivieren." #, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" -msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"Die Forward Zone \"%(fwzone)s\" ist nicht aktiv, da eine ordnungsgemäße NS " +"Delegation in der autoritativen Zone \"%(authzone)s\" nicht vorhanden ist. " +"Bitte fügen Sie den NS Record \"%(ns_rec)s\" zur übergeordneten Zone " +"\"%(authzone)s\" hinzu." #, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d HBAC-Dienst gefunden" -msgstr[1] "%(count)d HBAC-Dienste gefunden" +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Der DNS server %(server)s unterstützt EDNS0 (RFC 6891) nicht: %(error)s.\n" +"Falls DNSSEC auf IPA Server(n) aktiviert ist, deaktivieren Sie diese." #, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d OTP Token gefunden" -msgstr[1] "%(count)d OTP Tokens gefunden" +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"DNSSEC Überprüfung fehlgeschlagen: %(error)s.\n" +"Bitte überprüfen Sie die DNSSEC Konfigurationen oder deaktivieren die DNSSEC " +"Überprüfung auf allen IPA Servern." #, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" #, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" #, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" #, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d Hostgruppe gefunden" -msgstr[1] "%(count)d Hostgruppen gefunden" +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' ist veraltet. %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Das Suchergebnis wurde gekürzt: %(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Die Vertrauensstellung zu %(domain)s ist beschädigt. Bitte erneuern Sie sie " +"durch erneuten Aufruf von 'ipa trust-add'." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" +"DNS Record(s) von Host %(host)s konnten nicht entfernt werden. (%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"Keine DNS Server in der IPA Lokation %(location)s. Ohne DNS Servers arbeitet " +"die Lokation nicht wie erwartet." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d Variablen" #, python-format msgid "%(count)d plugin loaded" @@ -282,47 +13191,401 @@ msgstr[0] "%(count)d Plugin geladen" msgstr[1] "%(count)d Plugins geladen" #, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" +msgid "Enter %(label)s again to verify: " +msgstr "Geben Sie %(label)s zur Bestätigung nochmals ein: " + +msgid "Passwords do not match!" +msgstr "Passwörter stimmen nicht überein!" + +msgid "No matching entries found" +msgstr "Keine passenden Einträge gefunden" + +msgid "Topic or Command" +msgstr "Thema oder Befehl" + +msgid "The topic or command name." +msgstr "Das Thema oder der Befehlsname" + +msgid "Topic commands:" +msgstr "Thema-Befehle:" + +msgid "To get command help, use:" +msgstr "Um Hilfe zu Befehlen zu bekommen benutzen sie:" + +msgid " ipa --help" +msgstr " ipa --help" + +msgid "Command name" +msgstr "Befehlsname" + +msgid "Positional arguments" +msgstr "Positionale Argumente" #, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" +msgid "Same as --%s" +msgstr "Das gleiche wie --%s" + +msgid "Deprecated options" +msgstr "Veraltete Optionen" + +msgid "No file to read" +msgstr "Keine Datei zum Lesen" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "Eine Liste von LDAP-Einträgen" + +msgid "All commands should at least have a result" +msgstr "Alle Befehle sollten mindestens ein Ergebnis haben." + +msgid "Results are truncated, try a more specific search" +msgstr "" +"Ergebnisse wurden abgeschnitten, versuchen Sie eine spezifischere Suche." #, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d passender Benutzer" -msgstr[1] "%(count)d passende Benutzer" +msgid "Unknown option: %(option)s" +msgstr "Unbekannte Option: %(option)s" -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d Variablen" +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Client-Version. Dadurch wird bestimmt, ob der Server die Anfrage akzeptiert." #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "%(cver)s Client ist inkompatibel mit %(sver)s Server auf '%(server)s'" +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "Unbekannter Fehler %(code)d von %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "Ein interner Fehler ist aufgetreten" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "In interner Fehler ist auf dem Server '%(server)s' aufgetreten." + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "Unbekannter Befehl '%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "Fehler auf Server '%(server)s': %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "Kann nicht zu '%(uri)s' verbinden: %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Ungültige JSON-RPC-Anfrage: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" +"Fehler beim Zusammenstellen der Daten für den XML-RPC-Transport: %(error)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Fehlende oder ungültige HTTP-Referenz, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos-Fehler: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos-Anmeldedaten wurden nicht empfangen" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Service '%(service)s' in Kerberos-Datenbank nicht gefunden" + +msgid "No credentials cache found" +msgstr "Keine Anmeldeinformationen-Cache gefunden" + +msgid "Ticket expired" +msgstr "Ticket abgelaufen" + +msgid "Credentials cache permissions incorrect" +msgstr "Zugriffsrechte des Anmeldedaten-Zwischenspeichers sind inkorrekt." + +msgid "Bad format in credentials cache" +msgstr "Falsches Format im Anmeldedaten-Zwischenspeicher" + +msgid "Cannot resolve KDC for requested realm" +msgstr "KDC für angeforderten Realm konnte nicht aufgelöst werden." + +msgid "Session error" +msgstr "Sitzungsfehler" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" +"Der Principal %(principal)s kann nicht authentifiziert werden: %(message)s" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Unzureichender Zugriff: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "Befehl '%(name)s' nimmt keine Argumente" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "Befehl '%(name)s' nimmt maximal %(count)d Argument" +msgstr[1] "Befehl '%(name)s' nimmt maximal %(count)d Argumente" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "Überlappende Argumente und Optionen: %(names)s" + +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' wird benötigt" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "Ungültig '%(name)s': %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "Der Namensraum '%(name)s' existiert in der API nicht" + +msgid "Passwords do not match" +msgstr "Passwörter stimmen nicht überein" + +msgid "Command not implemented" +msgstr "Befehl nicht implementiert" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "Client ist nicht konfiguriert. Rufen Sie ipa-client-install auf." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "%(name)s konnte nicht interaktiv ermittelt werden" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "Befehl '%(name)s' ist veraltet" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" +"Die Domäne '%(domain)s' ist keine Root Domäne für den Forest '%(forest)s'" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Dieser Eintrag existiert bereits" + +msgid "You must enroll a host in order to create a host service" +msgstr "" +"Sie müssen einen Host registrieren, bevor Sie einen Dienst für diesen Host " +"anlegen können." + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Principal des Dienstes folgt nicht der Form »Dienst/voll ausgeschriebener " +"Hostname«: %(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Der Realm des Principals passt nicht zum Realm dieses IPA-Servers." + +msgid "This command requires root access" +msgstr "Dieser Befehl erfordert Root-Zugriff" + +msgid "This is already a posix group" +msgstr "Dies ist bereits eine POSIX-Gruppe" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "Principal ist nicht in der Form user@REALM: '%(principal)s'" + +msgid "This entry is already enabled" +msgstr "Dieser Eintrag ist bereits aktiviert" + +msgid "This entry is already disabled" +msgstr "Dieser Eintrag ist bereits deaktiviert" + +msgid "This entry cannot be enabled or disabled" +msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" + +msgid "This entry is not a member" +msgstr "Dieser Eintrag ist kein Mitglied" + +msgid "A group may not be a member of itself" +msgstr "Eine Gruppe kann kein Mitglied von sich selbst sein" + +msgid "This entry is already a member" +msgstr "Dieser Eintrag ist bereits ein Mitglied" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64-Dekodierung fehlgeschlagen: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Eine Gruppe kann nicht als Mitglied von sich selbst hinzugefügt werden" + +msgid "The default users group cannot be removed" +msgstr "Die vorgegebene Benutzergruppe kann nicht entfernt werden" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"Das Löschen einer verwalteten Gruppe ist unzulässig. Sie muss zuerst aus der " +"Verwaltung entfernt werden." + +msgid "A managed group cannot have a password policy." +msgstr "Eine verwaltete Gruppe kann keine Passwort-Policy haben." + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "»%(entry)s« verfügt nicht über ein Zertifikat." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" +"Die private Gruppe konnte nicht erstellt werden. Eine Gruppe »%(group)s« " +"existiert bereits." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Ein Problem trat bei der Überprüfung auf, ob alle Mitglieder %(verb)s waren: " +"%(exc)s" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s enthält nicht »%(value)s«" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"Die Suchkriterien waren nicht spezifisch genug. 1 wurde erwartet, aber " +"%(found)d gefunden." + +msgid "This group already allows external members" +msgstr "Diese Gruppe erlaubt bereits externe Mitglieder" + +msgid "This group cannot be posix because it is external" +msgstr "Diese Gruppe kann nicht POSIX sein, weil sie extern ist" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" +"Dies ist bereits eine POSIX-Gruppe, sie kann nicht zu einer externen " +"konvertiert werden" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Entfernen des Servers abgebrochen: %(reason)s." + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s wird für %(principal_type)s Principals nicht unterstützt" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "Anfrage mit Status %(status)s fehlgeschlagen: %(reason)s" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(attr)s does not contain '%(value)s'" +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s enthält nicht »%(value)s«" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "kein Befehl oder Hilfethema '%(topic)s'" + +msgid "change collided with another change" +msgstr "Änderung kollidiert mit einer anderen Änderung" + +msgid "no modifications to be performed" +msgstr "Keine anzuwendenden Änderungen" + #, python-format msgid "%(desc)s: %(info)s" msgstr "%(desc)s: %(info)s" -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: Datei nicht gefunden" +msgid "limits exceeded for this query" +msgstr "Begrenzung wurde für diese Abfrage überschritten." #, python-format msgid "%(info)s" msgstr "%(info)s" +msgid "modifying primary key is not allowed" +msgstr "Ändern des primären Schlüssels ist nicht erlaubt." + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Nur ein Wert erlaubt." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Ungültige Syntax." + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Falscher Suchfilter %(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "Bei einem Nicht-Blatt-Eintrag nicht erlaubt" + +msgid "LDAP timeout" +msgstr "LDAP Timeout" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "LDAP Zeitüberschreitung für %(task)s , Task DN: '%(task_dn)s'" + +msgid "Configured time limit exceeded" +msgstr "Vorgegebenes Zeitlimit überschritten" + +msgid "Configured size limit exceeded" +msgstr "Vorgegebene Größenbeschränkung überschritten" + +msgid "Configured administrative server limit exceeded" +msgstr "Vorgegebene administrative Serverbeschränkung überschritten" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Zertifikat-Operation kann nicht abgeschlossen werden: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Formatfehler im Zertifikat: %(error)s" + +msgid "Already registered" +msgstr "Bereits registriert" + +msgid "Not registered yet" +msgstr "Noch nicht registriert" + #, python-format msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" msgstr "" @@ -341,290 +13604,6688 @@ msgstr "" msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" msgstr "%(label)s %(key)s kann nicht gelöscht/bearbeitet werden: %(reason)s" -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - #, python-format msgid "%(name)s certificate is not valid" msgstr "%(name)s Zertifikat ist ungültig" #, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "Schema ist aktuell (FP '%(fingerprint)s', TTL %(ttl)s s)" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "DNS Check fehlerhaft: Erwartet {%(expected)s} bekommen {%(got)s}" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"Der Forest '%(forest)s' besitzt bereits eine Vertrauensstellung zu Forest(s) " +"%(domains)s und kann daher keine Vertrauensstellung zu '%(conflict)s' " +"aufbauen" + +msgid "incorrect type" +msgstr "inkorrekter Typ" + +msgid "Only one value is allowed" +msgstr "Nur ein Wert ist erlaubt" + +msgid "this option is deprecated" +msgstr "diese Option ist veraltet" + +msgid "must be True or False" +msgstr "muss »True« oder »False« sein" + +msgid "must be an integer" +msgstr "muss eine Ganzzahl sein" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "muss mindestens %(minvalue)d sein" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "darf höchstens %(maxvalue)d sein" + +msgid "must be a decimal number" +msgstr "muss eine Dezimalzahl sein" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "muss mindestens %(minvalue)s sein" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "darf höchstens %(maxvalue)s sein" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "muss dem Muster »%(pattern)s« entsprechen" + +msgid "must be binary data" +msgstr "muss im Binärformat sein" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "muss mindestens %(minlength)d Bytes groß sein" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "darf höchstens %(maxlength)d Bytes groß sein" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "muss genau %(length)d Bytes groß sein" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "must be a certificate" +msgstr "Ein Zertifikat widerrufen." + +#, fuzzy +#| msgid "Submit a certificate signing request." +msgid "must be a certificate signing request" +msgstr "Eine Signaturanfrage (CSR) senden." + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Fehler beim Dekodieren der Signaturanfrage für das Zertifikat: %s" + +msgid "must be Unicode text" +msgstr "muss Unicode-Text sein" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Führende und angehängte Leerzeichen sind nicht erlaubt." + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "muss mindestens %(minlength)d Zeichen lang sein" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "darf höchstens %(maxlength)d Zeichen lang sein" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "muss genau %(length)d Zeichen lang sein" + +#, fuzzy, python-format +#| msgid "attribute \"%(attribute)s\" not allowed" +msgid "The character %(char)r is not allowed." +msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" + +#, python-format +msgid "must be '%(value)s'" +msgstr "muss '%(value)s' sein" + +#, python-format +msgid "must be one of %(values)s" +msgstr "muss eines von %(values)s sein" + +msgid "must be datetime value" +msgstr "muss ein datetime-Wert sein" + +msgid "does not match any of accepted formats: " +msgstr "" + +#, fuzzy +#| msgid "must be datetime value" +msgid "incomplete time value" +msgstr "muss ein datetime-Wert sein" + +msgid "must be DNS name" +msgstr "muss ein DNS-Name sein" + +msgid "must be absolute" +msgstr "muss absolut sein" + +msgid "must be relative" +msgstr "muss relativ sein" + +#, fuzzy +#| msgid "must be binary data" +msgid "must be dictionary" +msgstr "muss im Binärformat sein" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "must be Kerberos principal" +msgstr "Kerberos-Principal" + +#, fuzzy, python-format +#| msgid "Modify %(name)s '%(value)s'?" +msgid "Malformed principal: '%(value)s'" +msgstr "Wert von %(name)s auf »%(value)s« ändern?" + +#, fuzzy +#| msgid "Service principal" +msgid "Service principal is required" +msgstr "Dienst-Principal" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: Datei nicht gefunden" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "einer der konfigurierten Server" + +msgid "Exceeded number of tries to forward a request." +msgstr "Anzahl der Versuche zur Weiterleitung der Anfrage überschritten" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "Zugriff verweigert: %(file)s" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "Zu viele »@«-Zeichen" + +#, fuzzy +#| msgid "can be at most %(maxlength)d characters" +msgid "cannot be longer that {} characters" +msgstr "darf höchstens %(maxlength)d Zeichen lang sein" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "nicht voll ausgeschrieben" + +msgid "invalid SSH public key" +msgstr "Ungültiger öffentlicher SSH-Schlüssel" + +#, fuzzy +#| msgid "Empty domain is not allowed" +msgid "options are not allowed" +msgstr "Eine leere Domäne ist nicht zulässig" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid hostmask" +msgstr "Ungültiger Domainname: %s" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "Fehler auf Server '%(server)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid escape code in domain name" +msgstr "Ungültiger Domainname: %s" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid domain name" +msgstr "Ungültiger Domainname: %s" + +#, fuzzy, python-format +#| msgid "Invalid domain name '%(domain)s': %(e)s" +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "Ungültiger Domainname: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"Ungültige IP-Adressversion (ist %(value)d, muss %(required_value)d) sein!" + +msgid "invalid IP address format" +msgstr "Ungültiges IP-Adressformat" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s kein gültiger Port" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Abruf der Zertifikatkette fehlgeschlagen: %s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "Anfrage fehlgeschlagen, HTTP-Status: %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Abfrage des CA-Status fehlgeschlagen: %s" + +#, fuzzy, python-format +#| msgid "Retrieving CA status failed: %s" +msgid "Retrieving CA status failed with status %d" +msgstr "Abfrage des CA-Status fehlgeschlagen: %s" + +#, python-format +msgid "objectclass %s not found" +msgstr "Objektklasse %s nicht gefunden" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "Replication agreement for %(hostname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "Automount-Ort" + +msgid "automount locations" +msgstr "Automount-Orte" + +msgid "Automount Locations" +msgstr "Automount-Orte" + +msgid "Automount Location" +msgstr "Automount-Ort" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" + +msgid "automount map" +msgstr "Automount-Map" + +msgid "automount maps" +msgstr "Automount-Maps" + +msgid "Automount Maps" +msgstr "Automount-Maps" + +msgid "Automount Map" +msgstr "Automount-Map" + +#, fuzzy, python-format +#| msgid "Added automount location \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted automount location \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified automount map \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d automount location matched" +#| msgid_plural "%(count)d automount locations matched" +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" + +#, fuzzy +#| msgid "Automount Location" +msgid "Automount key object." +msgstr "Automount-Ort" + +#, fuzzy +#| msgid "automount map" +msgid "automount key" +msgstr "Automount-Map" + +#, fuzzy +#| msgid "automount maps" +msgid "automount keys" +msgstr "Automount-Maps" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount Keys" +msgstr "Automount-Maps" + +#, fuzzy +#| msgid "Automount" +msgid "Automount Key" +msgstr "Automount" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgid "key named %(key)s already exists" msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" #, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s wird für %(principal_type)s Principals nicht unterstützt" +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added automount location \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Added automount location \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted automount location \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified automember rule \"%(value)s\"" +msgid "Modified automount key \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" + +#, fuzzy, python-format +#| msgid "%(count)d automount location matched" +#| msgid_plural "%(count)d automount locations matched" +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "CA ist nicht konfiguriert" + +#, fuzzy +#| msgid "Profile ID" +msgid "invalid Profile ID" +msgstr "Profil-ID" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Profile" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Profiles" +msgstr "Benutze Zertifikatsprofil" + +#, fuzzy +#| msgid "OTP Configuration" +msgid "Profile configuration" +msgstr "OTP Konfiguration" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Zone record '%s' cannot be deleted" +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate profiles cannot be renamed" +msgstr "Benutze Zertifikatsprofil" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "CA ACL" + +msgid "CA ACLs" +msgstr "CA ACLs" + +#, fuzzy +#| msgid "Host category" +msgid "CA category" +msgstr "Host-Kategorie" + +#, fuzzy +#| msgid "Host category the ACL applies to" +msgid "CA category the ACL applies to" +msgstr "Hostkategorie auf die ACL angewendet wird" + +#, fuzzy +#| msgid "CA ACLs" +msgid "CAs" +msgstr "CA ACLs" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" gelöscht" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" geändert" + +#, fuzzy +#| msgid "user category cannot be set to 'all' while there are allowed users" +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" +"Profilkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Profile gibt" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" + +#, fuzzy +#| msgid "user category cannot be set to 'all' while there are allowed users" +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" + +#, fuzzy +#| msgid "user category cannot be set to 'all' while there are allowed users" +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +#, fuzzy, python-format +#| msgid "Deleted CA ACL \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Deleted CA ACL \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" gelöscht" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, fuzzy, python-format +#| msgid "Search for groups." +msgid "%i users or groups added." +msgstr "Nach Gruppen suchen." + +#, fuzzy +#| msgid "users cannot be set when type is 'hostgroup'" +msgid "users cannot be added when user category='all'" +msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" + +#, fuzzy, python-format +#| msgid "Number of members removed" +msgid "%i user or group removed." +msgstr "Anzahl der entfernten Mitglieder" + +#, fuzzy, python-format +#| msgid "Number of members removed" +msgid "%i users or groups removed." +msgstr "Anzahl der entfernten Mitglieder" + +#, fuzzy, python-format +#| msgid "%(count)d hostgroup matched" +#| msgid_plural "%(count)d hostgroups matched" +msgid "%i host or hostgroup added." +msgstr "%(count)d Hostgruppe gefunden" + +#, fuzzy, python-format +#| msgid "Failed hosts/hostgroups" +msgid "%i hosts or hostgroups added." +msgstr "Fehler bei Hosts/Hostgruppen" + +#, fuzzy +#| msgid "hosts cannot be set when type is 'group'" +msgid "hosts cannot be added when host category='all'" +msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" + +#, fuzzy, python-format +#| msgid "%(count)d hostgroup matched" +#| msgid_plural "%(count)d hostgroups matched" +msgid "%i host or hostgroup removed." +msgstr "%(count)d Hostgruppe gefunden" + +#, fuzzy, python-format +#| msgid "Failed hosts/hostgroups" +msgid "%i hosts or hostgroups removed." +msgstr "Fehler bei Hosts/Hostgruppen" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i service added." +msgstr "Dienstname" + +#, fuzzy, python-format +#| msgid "services" +msgid "%i services added." +msgstr "Dienste" + +#, fuzzy +#| msgid "users cannot be set when type is 'hostgroup'" +msgid "services cannot be added when service category='all'" +msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Select entries to be removed." +msgid "%i services removed." +msgstr "Einträge zum löschen auswählen." + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%s to remove" +msgid "%i profile removed." +msgstr "%s zum entfernen" + +#, fuzzy, python-format +#| msgid "Number of privileges removed" +msgid "%i profiles removed." +msgstr "Anzahl der entfernten Berechtigungen" + +#, fuzzy +#| msgid "Delete a CA ACL." +msgid "Add CAs to a CA ACL." +msgstr "CA ACL löschen." + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove CAs from a CA ACL." +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy, python-format +#| msgid "%s to remove" +msgid "%i CA removed." +msgstr "%s zum entfernen" + +#, fuzzy, python-format +#| msgid "%s to remove" +msgid "%i CAs removed." +msgstr "%s zum entfernen" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" +"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " +"nicht." + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "Domain Level kann nicht gesenkt werden." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " +"nicht." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"Domain Name System (DNS)\n" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "Ungültiges IP-Netzwerkformat" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "Jedes ACL-Element muss mit einem Semikolon enden" + +msgid "invalid address format" +msgstr "Ungültiges Adressformat" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid domain-name: not fully qualified" +msgstr "Ungültiger Domainname: %s" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "DNS Zone %(zone)s nicht gefunden" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "IP-Adresse %(ip)s ist bereits Domain %(domain)s zugewiesen." + +#, fuzzy, python-format +#| msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "IP-Adresse %(ip)s ist bereits Domain %(domain)s zugewiesen." + +#, fuzzy, python-format +#| msgid "Records" +msgid "%s record" +msgstr "Datensätze" + +#, fuzzy, python-format +#| msgid "Records" +msgid "Raw %s records" +msgstr "Datensätze" + +#, fuzzy, python-format +#| msgid "Records" +msgid "%s Record" +msgstr "Datensätze" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(siehe RFC %s für Details)" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "»%s« ist ein erforderlicher Teil des DNS-Datensatzes" + +#, fuzzy +#| msgid "number of passwords" +msgid "Invalid number of parts!" +msgstr "Anzahl der Passwörter" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "Format muss als »%(format)s« %(rfcs)s angegeben werden" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "»%(required)s« darf nicht leer sein, wenn »%(name)s« gesetzt ist." + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +#, fuzzy +#| msgid "Priority" +msgid "Priority (order)" +msgstr "Priorität" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" + +#, fuzzy +#| msgid "permission" +msgid "Managedby permission" +msgstr "Berechtigung" + +msgid "DNS is not configured" +msgstr "DNS ist nicht konfiguriert" + +#, fuzzy +#| msgid "hosts cannot be set when type is 'group'" +msgid "cannot be used when a zone is specified" +msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "Nur ein Wert ist erlaubt" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "active user with name \"%(user)s\" already exists" +msgid "permission \"%(value)s\" already exists" +msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" + +#, fuzzy, python-format +#| msgid "Deleted stage user \"%(value)s\"" +msgid "Removed system permission \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" + +msgid "DNS zone" +msgstr "DNS-Zone" + +msgid "DNS zones" +msgstr "DNS-Zonen" + +msgid "DNS Zones" +msgstr "DNS-Zonen" + +msgid "DNS Zone" +msgstr "DNS-Zone" + +#, fuzzy +#| msgid "Time to live" +msgid "Default time to live" +msgstr "Lebensdauer" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +#, fuzzy +#| msgid "DNS records can be only updated one at a time" +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "Es können nicht mehrere DNS-Datensätze aktualisiert werden." + +#, fuzzy +#| msgid "IPA Servers" +msgid "" +msgstr "IPA-Server" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy +#| msgid "sn is required" +msgid "is required" +msgstr "sn wird benötigt" + +#, fuzzy, python-format +#| msgid "Disabled host \"%(value)s\"" +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" + +#, fuzzy, python-format +#| msgid "Enabled HBAC rule \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + +#, fuzzy +#| msgid "Display DNS resource." +msgid "DNS resource record" +msgstr "DNS-Ressource anzeigen." + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +#, fuzzy +#| msgid "Zone record '%s' cannot be deleted" +msgid "DNS zone root record cannot be renamed" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +msgid "DNS records can be only updated one at a time" +msgstr "Es können nicht mehrere DNS-Datensätze aktualisiert werden." + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Datensatz »%(value)s« gelöscht" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, python-format +msgid "Found '%(value)s'" +msgstr "»%(value)s« gefunden" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Host »%(host)s« nicht gefunden" + +#, fuzzy +#| msgid "configuration options" +msgid "DNS configuration options" +msgstr "Konfigurationsoptionen" + +#, fuzzy +#| msgid "Configuration" +msgid "DNS Global Configuration" +msgstr "Konfiguration" + +#, fuzzy +#| msgid "IPA Servers" +msgid "IPA DNS version" +msgstr "IPA-Server" + +#, fuzzy +#| msgid "IPA Servers" +msgid "IPA DNS servers" +msgstr "IPA-Server" + +#, fuzzy +#| msgid "any of the configured servers" +msgid "List of IPA masters configured as DNS servers" +msgstr "einer der konfigurierten Server" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +#, fuzzy +#| msgid "Show configuration uri" +msgid "Global DNS configuration is empty" +msgstr "Konfigurations-URL zeigen" + +#, fuzzy +#| msgid "DNS zone" +msgid "DNS forward zone" +msgstr "DNS-Zone" + +#, fuzzy +#| msgid "DNS zones" +msgid "DNS forward zones" +msgstr "DNS-Zonen" + +#, fuzzy +#| msgid "DNS Zones" +msgid "DNS Forward Zones" +msgstr "DNS-Zonen" + +#, fuzzy +#| msgid "DNS Zone" +msgid "DNS Forward Zone" +msgstr "DNS-Zone" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Disabled HBAC rule \"%(value)s\"" +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" deaktiviert" + +#, fuzzy, python-format +#| msgid "Enabled HBAC rule \"%(value)s\"" +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + +#, fuzzy +#| msgid "IPA Servers" +msgid "IPA DNS records" +msgstr "IPA-Server" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "Result of the command" +msgstr "Eine Beschreibung dieses Befehls" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "RADIUS-Proxy Konfiguration" + +#, fuzzy +#| msgid "Inherited from server configuration" +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "Vererbt von Serverkonfiguration" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "server" +msgid "DNS server" +msgstr "Server" + +#, fuzzy +#| msgid "servers" +msgid "DNS servers" +msgstr "Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "DNS Servers" +msgstr "Radius Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "DNS Server" +msgstr "Radius Server" + +#, fuzzy +#| msgid "Server name" +msgid "DNS Server name" +msgstr "Servername" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Inherited from server configuration" +msgid "Modify DNS server configuration" +msgstr "Vererbt von Serverkonfiguration" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy +#| msgid "Search for DNS resources." +msgid "Search for DNS servers." +msgstr "Nach DNS-Ressourcen suchen." + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Zu verwendender IPA-Server" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display configuration of a DNS server." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy +#| msgid "Add a new user." +msgid "Add a new DNS server." +msgstr "Einen neuen Benutzer hinzufügen." + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a DNS server" +msgstr "Einen Benutzer löschen" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +#, fuzzy +#| msgid "Simulate use of Host-based access controls" +msgid "Host-based access control commands" +msgstr "HBAC Nutzung simulieren" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC-Dienste" + +msgid "HBAC Services" +msgstr "HBAC-Dienste" + +msgid "HBAC Service" +msgstr "HBAC-Dienst" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d HBAC-Dienst gefunden" +msgstr[1] "%(count)d HBAC-Dienste gefunden" + +msgid "HBAC service group" +msgstr "HBAC-Dienstgruppe" + +msgid "HBAC service groups" +msgstr "HBAC-Dienstgruppen" + +msgid "HBAC Service Groups" +msgstr "HBAC-Dienstgruppen" + +msgid "HBAC Service Group" +msgstr "HBAC-Dienstgruppe" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« geändert" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" +msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "Vorbereitete Benutzer" + +msgid "Stage User" +msgstr "Vorbereiteter Benutzer" + +msgid "stage user" +msgstr "Vorbereiteter Benutzer" + +msgid "stage users" +msgstr "Vorbereitete Benutzer" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +msgid "givenname is required" +msgstr "givenname wird benötigt" + +msgid "sn is required" +msgstr "sn wird benötigt" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "darf höchstens %(len)d Zeichen lang sein" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« geändert" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d passender Benutzer" +msgstr[1] "%(count)d passende Benutzer" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" + +#, python-format +msgid "Stage user %s activated" +msgstr "Vorbereiteten Benutzer %s aktiviert" + +#, fuzzy +#| msgid "Add a manager to the stage user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy, python-format +#| msgid "Activate a stage user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Activate a stage user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +#, fuzzy +#| msgid "Add a manager to the stage user entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Modified stage user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« geändert" + +#, fuzzy +#| msgid "Add a manager to the stage user entry" +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Manager vom Benutzer entfernen" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +#, fuzzy +#| msgid "Segment details" +msgid "segments" +msgstr "Segment Details" + +#, fuzzy +#| msgid "Topology" +msgid "Topology Segments" +msgstr "Topologie" + +#, fuzzy +#| msgid "Topology" +msgid "Topology Segment" +msgstr "Topologie" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "%(value)s" +msgstr "»%(value)s« gefunden" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "suffixes" +msgstr "UPN Suffixe" + +#, fuzzy +#| msgid "Topology" +msgid "Topology suffixes" +msgstr "Topologie" + +#, fuzzy +#| msgid "Topology" +msgid "Topology suffix" +msgstr "Topologie" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "Hostgruppen" + +msgid "Host Group" +msgstr "Hostgruppe" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" hinzugefügt" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" gelöscht" + +#, fuzzy +#| msgid "host group" +msgid "hostgroup" +msgstr "Hostgruppe" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "privileged hostgroup" +msgstr "Hostgruppe löschen." + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d Hostgruppe gefunden" +msgstr[1] "%(count)d Hostgruppen gefunden" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Nutzer hinzufügen die diesen Token verwalten können" + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Nutzer entfernen die diesen Token verwalten können" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage OTP tokens.\n" +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"OTP-Tokens bearbeiten.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "only \"ad\" is supported" +msgid "Host is not supported" +msgstr "nur \"ad\" ist unterstützt" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Deleted vault container" +msgstr "Automount-Ort löschen." + +#, fuzzy, python-format +#| msgid "Owner" +msgid "owner %s" +msgstr "Eigentümer" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add an automember rule.\n" +#| " " +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Konfiguration" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "IPA KRA servers" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Activate a stage user \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "netgroups" +msgstr "Gruppen" + +#, fuzzy +#| msgid "groups" +msgid "Netgroups" +msgstr "Gruppen" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "Gruppe" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +msgid "One time password commands" +msgstr "Einmalpasswort Befehle" + +msgid "OTP configuration options" +msgstr "OTP-Konfigurationsoptionen" + +msgid "OTP Configuration" +msgstr "OTP Konfiguration" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Passwort für \"%(value)s\" geändert" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "PKINIT" + +#, fuzzy +#| msgid "PKINIT" +msgid "PKINIT status" +msgstr "PKINIT" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "Radius Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "Radius Server" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +#| msgid "%s is not a valid attribute." +msgid "invalid attribute name" +msgstr "%s ist kein gültiges Attribut" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Seriennummer" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy server" +msgstr "RADIUS-Proxy Benutzername" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy servers" +msgstr "RADIUS-Proxy Benutzername" + +msgid "RADIUS Servers" +msgstr "Radius Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "RADIUS Server" +msgstr "Radius Server" + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" geändert" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC service matched" +#| msgid_plural "%(count)d HBAC services matched" +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d HBAC-Dienst gefunden" +msgstr[1] "%(count)d HBAC-Dienste gefunden" + +msgid "A list of ACI values" +msgstr "Liste von ACI-Werten" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." + +msgid "ACI prefix is required" +msgstr "ACI-Präfix ist erforderlich" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"mindestens eines von »type«, »filter«, »subtree«, »targetgroup«, »attrs« " +"oder »memberof« wird benötigt" + +msgid "filter and memberof are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +msgid "group, permission and self are mutually exclusive" +msgstr "»group«, »permission« und »self« schließen sich gegenseitig aus" + +msgid "One of group, permission or self is required" +msgstr "Eines von »group«, »permission« oder »self« wird benötigt" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Gruppe »%s« existiert nicht" + +msgid "empty filter" +msgstr "Filter ist leer" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Syntaxfehler: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "ungültiger DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI mit dem Namen »%s« nicht gefunden" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACIs" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI erstellt \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI umbenannt zu \"%(value)s\"" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "muss mindestens %(minvalue)d sein" + +msgid "configuration options" +msgstr "Konfigurationsoptionen" + +msgid "Configuration" +msgstr "Konfiguration" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "Maximale Länge des Benutzernamens" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "IPA masters" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "IPA Master mit Fähigkeit für PKINIT " + +msgid "IPA master which can process PKINIT requests" +msgstr "IPA Master, der PKINIT Anfragen bearbeiten kann" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "IPA CA servers" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "Hidden IPA CA servers" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "Hidden IPA KRA servers" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "IPA Servers" +msgid "Hidden IPA DNS servers" +msgstr "IPA-Server" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "New: key set" +msgid "DNSec key master" +msgstr "Neu: Schlüssel gesetzt" + +msgid "Empty domain is not allowed" +msgstr "Eine leere Domäne ist nicht zulässig" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Deaktivierte Domäne '%(domain)s' ist nicht zulässig" + +msgid "The group doesn't exist" +msgstr "Die Gruppe existiert nicht" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "Attribut \"%s\" ist nicht erlaubt" + +msgid "May not be empty" +msgstr "Darf nicht leer sein" + +#, fuzzy, python-format +#| msgid "attribute \"%(attribute)s\" not allowed" +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "$-getrennte Liste von SELinux Benutzern erwartet" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "SELinux Benutzer '%(user)s' ist ungültig: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "Gruppen" + +msgid "User Group" +msgstr "Benutzergruppe" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Change to external group" +msgid "gid cannot be set for external group" +msgstr "In externe Gruppe umwandeln" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy +#| msgid "No private group" +msgid "privileged group" +msgstr "Keine private Gruppe" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 support installed. " +#| "Make sure you have installed server-trust-ad sub-package of IPA." +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 instance configured " +#| "on this machine. Make sure you have run ipa-adtrust-install on this " +#| "server." +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +#, fuzzy, python-format +#| msgid "Deleted stage user \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" + +msgid "not allowed to modify user entries" +msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." + +msgid "not allowed to modify group entries" +msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." + +msgid "Not a managed group" +msgstr "Keine verwaltete Gruppe" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Nutzer hinzufügen die diesen Token verwalten können" + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Nutzer entfernen die diesen Token verwalten können" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Permissions\n" +msgstr "Berechtigungen" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "" +"\n" +"Managed permissions\n" +msgstr "Berechtigungen" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be enclosed in parentheses" +msgstr "muss eine Ganzzahl sein" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, fuzzy, python-format +#| msgid "%s is not a valid attribute." +msgid "\"%s\" is not a valid permission type" +msgstr "%s ist kein gültiges Attribut" + +#, fuzzy, python-format +#| msgid "Deprecated options" +msgid "Deprecated; use %s" +msgstr "Veraltete Optionen" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "Entry %s not found" +msgstr "Objektklasse %s nicht gefunden" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "realm not found\n" +msgid "%s: group not found" +msgstr "Realm nicht gefunden\n" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "target and targetgroup are mutually exclusive" +msgstr "" +"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." + +#, fuzzy +#| msgid "filter and memberof are mutually exclusive" +msgid "subtree and type are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +#, fuzzy +#| msgid "Bad search filter %(info)s" +msgid "Bad search filter" +msgstr "Falscher Suchfilter %(info)s" + +#, fuzzy, python-format +#| msgid "Group '%s' does not exist" +msgid "Entry %s does not exist" +msgstr "Gruppe »%s« existiert nicht" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy +#| msgid "filter and memberof are mutually exclusive" +msgid "attrs and included attributes are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy +#| msgid "Indirect Member permissions" +msgid "cannot delete managed permissions" +msgstr "Indirekte Mitglieds-Berechtigungen" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "ACI of permission %s was not found" +msgstr "ACI mit dem Namen »%s« nicht gefunden" + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified permission \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy +#| msgid "Indirect Member permissions" +msgid "cannot rename managed permissions" +msgstr "Indirekte Mitglieds-Berechtigungen" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +#, fuzzy +#| msgid "filter and memberof are mutually exclusive" +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP Tokens\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"OTP-Tokens bearbeiten.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "OTP Token" + +msgid "OTP tokens" +msgstr "OTP Tokens" + +msgid "OTP Tokens" +msgstr "OTP Token" + +msgid "OTP Token" +msgstr "OTP Token" + +msgid "URI" +msgstr "URI" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "OTP token \"%(value)s\" hinzugefügt" + +#, fuzzy +#| msgid "May not be empty" +msgid "cannot be empty" +msgstr "Darf nicht leer sein" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "OTP token \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "OTP Token \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d OTP Token gefunden" +msgstr[1] "%(count)d OTP Tokens gefunden" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "" +"\n" +"Sudo Rules\n" +msgstr "Sudo-Regeln" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "Diese Option ist veraltet." + +msgid "sudo rules" +msgstr "Sudo-Regeln" + +msgid "Sudo Rules" +msgstr "Sudo-Regeln" + +msgid "Sudo Rule" +msgstr "Sudo-Regel" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy, python-format +#| msgid "user category cannot be set to 'all' while there are allowed users" +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Benutzer gibt" + +msgid "users" +msgstr "Benutzer" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Befehle" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Befehle" + +#, fuzzy +#| msgid "stage user" +msgid "runAs user" +msgstr "Vorbereiteter Benutzer" + +#, fuzzy +#| msgid "stage users" +msgid "runAs users" +msgstr "Vorbereitete Benutzer" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "Gruppen" + +#, fuzzy +#| msgid "host groups" +msgid "runAs groups" +msgstr "Hostgruppen" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +#, fuzzy +#| msgid "users cannot be set when type is 'hostgroup'" +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "Befehle zum Steuern der sudo-Konfiguration" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "Sudo-Befehl" + +msgid "sudo commands" +msgstr "Sudo-Befehle" + +msgid "Sudo Commands" +msgstr "Sudo-Befehle" + +#, fuzzy, python-format +#| msgid "Added CA ACL \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "Sudo-Befehlsgruppe" + +msgid "sudo command groups" +msgstr "Sudo-Befehlsgruppen" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Realm domains" +msgstr "Realm-Name" + +#, fuzzy +#| msgid "Domain" +msgid "Realm Domains" +msgstr "Domain" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +#, fuzzy +#| msgid "Zone record '%s' cannot be deleted" +msgid "IPA server domain cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Ticket Policy" +msgid "kerberos ticket policy settings" +msgstr "Kerberos-Ticket Richtlinien" + +msgid "Kerberos Ticket Policy" +msgstr "Kerberos-Ticket Richtlinien" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS max renew" +msgstr "RADIUS-Proxy Benutzername" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Actions" +msgid "" +"\n" +"IPA locations\n" +msgstr "Aktionen" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Ort" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Ort" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Ort" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Ort" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Ort" + +#, fuzzy +#| msgid "Automount location name." +msgid "IPA location name" +msgstr "Automount-Ort" + +#, fuzzy +#| msgid "Group description" +msgid "IPA Location description" +msgstr "Gruppenbeschreibung" + +#, fuzzy +#| msgid "Server" +msgid "Servers" +msgstr "Server" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +#, fuzzy +#| msgid "Add a new OTP token." +msgid "Add a new IPA location." +msgstr "Neuen OTP-Token hinzufügen" + +#, fuzzy, python-format +#| msgid "Added automount location \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Delete an IPA location." +msgstr "Automount-Ort löschen." + +#, fuzzy, python-format +#| msgid "Deleted automount location \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +msgid "IPA Server" +msgstr "IPA-Server" + +#, fuzzy +#| msgid "Modify information about a host." +msgid "Modify information about an IPA location." +msgstr "Hostinformationen ändern." + +#, fuzzy, python-format +#| msgid "Modified OTP token \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "OTP Token \"%(value)s\" geändert" + +#, fuzzy +#| msgid "Search for OTP token." +msgid "Search for IPA locations." +msgstr "OTP Token suchen." + +#, fuzzy, python-format +#| msgid "%(count)d automount location matched" +#| msgid_plural "%(count)d automount locations matched" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" + +#, fuzzy +#| msgid "Display information about an OTP token." +msgid "Display information about an IPA location." +msgstr "Informationen über OTP Token anzeigen." + +#, fuzzy +#| msgid "Server name" +msgid "Servers in location" +msgstr "Servername" + +#, fuzzy +#| msgid "LDAP schema" +msgid "" +"\n" +"API Schema\n" +msgstr "LDAP-Schema" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Host-Name" + +#, fuzzy +#| msgid "Authentication" +msgid "Documentation" +msgstr "Authentifizierung" + +msgid "Exclude from" +msgstr "" + +#, fuzzy +#| msgid "Include Enabled" +msgid "Include in" +msgstr "Aktivierte einschließen" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Berechtigung" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Record name" +msgid "Method name" +msgstr "Datensatzname" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s nicht gefunden" + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a command." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for commands." +msgstr "Nach Sudo-Befehlen suchen." + +#, fuzzy +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "Befehle ausführen" + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a class." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for classes." +msgstr "Nach Rollen suchen." + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a help topic." +msgstr "Informationen über Host anzeigen." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for help topics." +msgstr "Nach Hostgruppen suchen." + +#, fuzzy +#| msgid "Request id" +msgid "Required" +msgstr "Anfrage-ID" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI-Name" + +#, fuzzy +#| msgid "Change password" +msgid "Confirm (password)" +msgstr "Passwort ändern" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Vorgabe-Shell" + +#, fuzzy +#| msgid "Default host group" +msgid "Default from" +msgstr "Standard Hostgruppe" + +msgid "Label" +msgstr "" + +#, fuzzy +#| msgid "Hostname of this server" +msgid "Convert on server" +msgstr "Hostname dieses Servers" + +#, fuzzy +#| msgid "host group" +msgid "Option group" +msgstr "Hostgruppe" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Positionale Argumente" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a command parameter." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +#, fuzzy +#| msgid "Search for stage users." +msgid "Search command parameters." +msgstr "Nach vorbereiteten Benutzern suchen." + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a command output." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for command outputs." +msgstr "Nach Sudo-Befehlen suchen." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 support installed. " +#| "Make sure you have installed server-trust-ad sub-package of IPA." +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 instance configured " +#| "on this machine. Make sure you have run ipa-adtrust-install on this " +#| "server." +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, fuzzy +#| msgid "Modify a role." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Rolle ändern." + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +#| msgid "HBAC service description" +msgid "self service permission" +msgstr "Beschreibung des HBAC-Dienstes" + +#, fuzzy +#| msgid "permissions" +msgid "self service permissions" +msgstr "Berechtigungen" + +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Berechtigungen" + +#, fuzzy +#| msgid "Permission" +msgid "Self Service Permission" +msgstr "Berechtigung" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "server" +msgid "server role" +msgstr "Server" + +#, fuzzy +#| msgid "servers" +msgid "server roles" +msgstr "Server" + +#, fuzzy +#| msgid "IPA Servers" +msgid "IPA Server Roles" +msgstr "IPA-Server" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Role" +msgstr "Zu verwendender IPA-Server" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA server role name" +msgstr "IPA-Server Hostname" + +#, fuzzy +#| msgid "Rule status" +msgid "Role status" +msgstr "Regelstatus" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "Rollen" + +#, fuzzy +#| msgid "Role name" +msgid "IPA role name" +msgstr "Rollenname" + +#, fuzzy +#| msgid "users and hosts cannot both be set" +msgid "HBAC rule and local members cannot both be set" +msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +#, fuzzy +#| msgid "SELinux Options" +msgid "SELinux User Maps" +msgstr "SELinux-Optionen" + +#, fuzzy +#| msgid "Default SELinux user" +msgid "SELinux User Map" +msgstr "Vorgegebener SELinux-Benutzer" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "HBAC-Regel %(rule)s nicht gefunden" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Benutzer »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Benutzer »%(value)s« gelöscht" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Benutzer »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d passender Benutzer" +msgstr[1] "%(count)d passende Benutzer" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde aktiviert" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" + +#, fuzzy, python-brace-format +#| msgid "realm not found\n" +msgid "{role}: role not found" +msgstr "Realm nicht gefunden\n" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +#, fuzzy +#| msgid "Empty domain is not allowed" +msgid "pyhbac is not installed." +msgstr "Eine leere Domäne ist nicht zulässig" + +#, fuzzy +#| msgid "Deprecated options" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Veraltete Optionen" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "Ein existierendes Zertifikat holen." + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +#, fuzzy +#| msgid "Check the status of a certificate signing request." +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Nicht angegeben" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Host »%(host)s« nicht gefunden" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded certificate." +msgstr "Base-64-kodiertes Serverzertifikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Zertifikat" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "Betreff" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Email-Adresse" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Subject DNS name" +msgstr "muss ein DNS-Name sein" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Straße" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Basis für Home-Verzeichnisse" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Betreff" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "IP-Adresse" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Betreff" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Betreff" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Kerberos-Principal" + +#, fuzzy +#| msgid "Server Name" +msgid "Subject Other Name" +msgstr "Servername" + +msgid "Issuer" +msgstr "Ausgabestelle" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Ausgabestelle" + +msgid "Not Before" +msgstr "Nicht vor" + +msgid "Not After" +msgstr "Nicht nach" + +msgid "Fingerprint (SHA1)" +msgstr "Fingerabdruck (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Fingerabdruck (SHA1)" + +msgid "Serial number (hex)" +msgstr "Seriennummer (hex)" + +msgid "Request status" +msgstr "Anfragestatus" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, fuzzy, python-format +#| msgid "The principal for this request doesn't exist." +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "Der Principal für diese Anfrage existiert nicht" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Sudo Option" +msgid "'add' option" +msgstr "Sudo-Option" + +msgid "The principal for this request doesn't exist." +msgstr "Der Principal für diese Anfrage existiert nicht" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Status" + +msgid "Revoked" +msgstr "Widerrufen" + +msgid "Revocation reason" +msgstr "Grund des Widerrufs" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "Grund für den Widerruf des Zertifikats (0-10)" + +#, fuzzy, python-format +#| msgid "Owner" +msgid "Owner %s" +msgstr "Eigentümer" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "7 ist kein gültiger Grund für einen Widerruf." + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, fuzzy, python-format +#| msgid "Search for stage users." +msgid "Search for certificates without these owner %s." +msgstr "Nach vorbereiteten Benutzern suchen." + +#, fuzzy +#| msgid "View" +msgid "ID View" +msgstr "Ansicht" + +msgid "system ID View" +msgstr "" + +#, fuzzy +#| msgid "View" +msgid "ID Views" +msgstr "Ansicht" + +#, fuzzy +#| msgid "User to override" +msgid "User object overrides" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +#| msgid "Group to override" +msgid "Group object overrides" +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" + +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#, fuzzy +#| msgid "realm not found\n" +msgid "not found" +msgstr "Realm nicht gefunden\n" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, fuzzy, python-format +#| msgid "Conditions that could not be removed" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Bedingungen, die nicht entfernt werden konnten" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new ID override." +msgstr "Einen neuen HBAC-Dienst hinzufügen." + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete an ID override." +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an ID override." +msgstr "HBAC Dienst ändern" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy +#| msgid "User to override" +msgid "ID override" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +#| msgid "Zone record '%s' cannot be deleted" +msgid "ID overrides cannot be renamed" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for an ID override." +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an ID override." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy +#| msgid "User to override" +msgid "User ID override" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +#| msgid "User to override" +msgid "User ID overrides" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded user certificate" +msgstr "Base-64-kodiertes Serverzertifikat" + +#, fuzzy +#| msgid "Group to override" +msgid "Group ID override" +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +#| msgid "Group to override" +msgid "Group ID overrides" +msgstr "Gruppe zum Überschreiben" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Regel für Auto-Mitgliedschaft\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Modify an automember rule.\n" +#| " " +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel bearbeiten. " + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +#, fuzzy +#| msgid "Rebuild membership for all members of a grouping" +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" + +#, fuzzy +#| msgid "Rebuild membership for all members of a grouping" +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "Regel für Auto-Mitgliedschaft" #, python-format msgid "%(otype)s \"%(oname)s\" not found" msgstr "%(otype)s \"%(oname)s\" nicht gefunden" -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s nicht gefunden" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s kein gültiger Port" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "LDAP Zeitüberschreitung für %(task)s , Task DN: '%(task_dn)s'" - -#, python-format -msgid "%s" -msgstr "%s" - #, python-format msgid "%s is not a valid attribute." msgstr "%s ist kein gültiges Attribut" -#, python-format -msgid "%s to add" -msgstr "%s zum hinzufügen" - -#, python-format -msgid "%s to remove" -msgstr "%s zum entfernen" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: Benutzer ist bereits aufbewahrt" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' ist veraltet. %(additional_info)s" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "»%(entry)s« verfügt nicht über ein Zertifikat." - -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' wird benötigt" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s' Option ist veraltet. %(additional_info)s" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "»%(required)s« darf nicht leer sein, wenn »%(name)s« gesetzt ist." - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "»%s« ist ein erforderlicher Teil des DNS-Datensatzes" - -msgid "(deprecated)" -msgstr "(veraltet)" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(siehe RFC %s für Details)" - -msgid "7 is not a valid revocation reason" -msgstr "7 ist kein gültiger Grund für einen Widerruf." - -msgid "A comma-separated list of fields to search in when searching for groups" +msgid "" +"\n" +" Add an automember rule.\n" +" " msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" +"\n" +" Auto-Mitgliedschaftsregel hinzufügen.\n" +" " -msgid "A comma-separated list of fields to search in when searching for users" +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" + +msgid "Auto Membership is not configured" +msgstr "Auto-Mitgliedschaft ist nicht konfiguriert" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" +"\n" +" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" +" " -msgid "A description of this auto member rule" -msgstr "Beschreibung der Auto-Mitgliedschaftsregel" +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" -msgid "A description of this command" -msgstr "Eine Beschreibung dieses Befehls" +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Auto-Mitgliedschaftsregel: %s nicht gefunden!" -msgid "A description of this host" +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel bearbeiten. " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel löschen.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" gelöscht" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, fuzzy +#| msgid "Default (fallback) Group" +msgid "No default (fallback) group set" +msgstr "Standard (Rückfall) Gruppe" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" +" " + +msgid "Task DN" +msgstr "Aufgaben DN" + +msgid "DN of the started task" +msgstr "DN der gestarteten Aufgabe" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "Mindestens eine der Optionen: type, users, hosts muss gesetzt sein" + +msgid "users and hosts cannot both be set" +msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." + +msgid "hosts cannot be set when type is 'group'" +msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" + +msgid "Automember rebuild membership task started" +msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft gestartet" + +msgid "Automember rebuild membership task completed" +msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft abgeschlossen" + +#, python-format +msgid "Task DN = '%s'" +msgstr "Aufgaben DN = '%s'" + +msgid "Automember" +msgstr "Auto-Mitgliedschaft" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Remove conditions from an automember rule.\n" +#| " " +msgid "Remove orphan automember rules" +msgstr "" +"\n" +" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Authority" +msgstr "Zertifikattyp" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Authorities" +msgstr "Zertifikate" + +msgid "Name for referencing the CA" +msgstr "" + +#, fuzzy +#| msgid "A description of this host" +msgid "Description of the purpose of the CA" msgstr "Beschreibung des Hosts" -msgid "A description of this host-group" -msgstr "Beschreibung der Hostgruppe" - -msgid "A description of this role-group" -msgstr "Beschreibung der Rollengruppe" - -msgid "A group may not be a member of itself" -msgstr "Eine Gruppe kann kein Mitglied von sich selbst sein" - -msgid "A group may not be added as a member of itself" -msgstr "Eine Gruppe kann nicht als Mitglied von sich selbst hinzugefügt werden" - -msgid "A list of ACI values" -msgstr "Liste von ACI-Werten" - -msgid "A list of LDAP entries" -msgstr "Eine Liste von LDAP-Einträgen" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "$-getrennte Liste von SELinux Benutzern erwartet" - -msgid "A managed group cannot have a password policy." -msgstr "Eine verwaltete Gruppe kann keine Passwort-Policy haben." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" +msgid "Authority ID" msgstr "" -"Ein Problem trat bei der Überprüfung auf, ob alle Mitglieder %(verb)s waren: " -"%(exc)s" -msgid "A string searched in all relevant object attributes" +msgid "Dogtag Authority ID" msgstr "" -"Eine Zeichenkette, nach der in allen relevanten Objektattributen gesucht wird" -msgid "ACI" -msgstr "ACI" +#, fuzzy +#| msgid "Subject" +msgid "Subject DN" +msgstr "Betreff" -msgid "ACI name" -msgstr "ACI-Name" - -msgid "ACI prefix" -msgstr "ACI-Präfix" - -msgid "ACI prefix is required" -msgstr "ACI-Präfix ist erforderlich" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI mit dem Namen »%s« nicht gefunden" - -msgid "ACIs" -msgstr "ACIs" - -msgid "ACL name" -msgstr "ACL Name" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "Subject Distinguished Name" msgstr "" -"API Versionsnummer wurde nicht gesendet, Vorwärtskompatibiltät nicht " -"garantiert. Nehme API Version %(server_version)s für Server an." -msgid "About" -msgstr "Über" +msgid "Issuer Distinguished Name" +msgstr "" -msgid "Access Denied" -msgstr "Zugriff verweigert" +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for CAs." +msgstr "Nach Hosts suchen." -msgid "Access Granted" -msgstr "Zugriff gewährt" +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Display the properties of a CA." +msgstr "Einstellungen der HBAC-Regel anzeigen." + +#, fuzzy +#| msgid "Create a new CA ACL." +msgid "Create a CA." +msgstr "Erstelle eine neue CA ACL." + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Created CA \"%(value)s\"" +msgstr "ACI erstellt \"%(value)s\"" #, python-format -msgid "Access granted: %s" -msgstr "Zugriff gewährt: %s" +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" -msgid "Access this host" -msgstr "Zugriff auf diesen Host" +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" -msgid "Access time" -msgstr "Zugriffszeit" +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" -msgid "Accessing" -msgstr "Greift zu" +msgid "Delete a CA (must be disabled first)." +msgstr "" -msgid "Account" -msgstr "Konto" +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" -msgid "Account Settings" -msgstr "Kontoeinstellungen" +msgid "Insufficient privilege to delete a CA." +msgstr "" -msgid "Account Status" -msgstr "Kontostatus" +msgid "CA" +msgstr "" -msgid "Account disabled" +#, fuzzy +#| msgid "Zone record '%s' cannot be deleted" +msgid "IPA CA cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, fuzzy +#| msgid "Must be an integer" +msgid "Must be disabled first" +msgstr "Muss eine Ganzzahl sein" + +#, fuzzy +#| msgid "Modify configuration options." +msgid "Modify CA configuration." +msgstr "Konfigurationsoptionen bearbeiten." + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +#, fuzzy +#| msgid "Disable" +msgid "Disable a CA." +msgstr "Deaktivieren" + +#, fuzzy, python-format +#| msgid "Disabled host \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" + +#, fuzzy +#| msgid "Account disabled" +msgid "IPA CA cannot be disabled" msgstr "Konto ist deaktiviert" -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Konto deaktiviert: %(disabled)s" +#, fuzzy +#| msgid "Enable an HBAC rule." +msgid "Enable a CA." +msgstr "HBAC-Regel aktivieren." + +#, fuzzy, python-format +#| msgid "Enabled HBAC rule \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "Anwenden" + +msgid "Rebuild auto membership" +msgstr "Auto-Mitgliedschaft neu erstellen" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" +"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} aktivieren wollen?" msgid "Actions" msgstr "Aktionen" -msgid "Activate" -msgstr "Aktivieren" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -msgid "Activate a stage user." -msgstr "Vorbereiteten Benutzer aktivieren." - -msgid "Active users" -msgstr "Aktive Benutzer" - -msgid "Active zone" -msgstr "Aktive Zone" - msgid "Add" msgstr "Hinzufügen" -msgid "Add Many" -msgstr "Mehrere hinzufügen" +#, python-brace-format +msgid "${count} item(s) added" +msgstr "${count} Einträge hinzugefügt" -msgid "Add a manager to the stage user entry" -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" +msgid "Direct Membership" +msgstr "Direkte Migliedschaft" -msgid "Add a manager to the user entry" -msgstr "Manager zum Benutzer hinzufügen" +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" -msgid "Add a new HBAC service group." -msgstr "Eine neue HBAC-Dienstgruppe hinzufügen." +msgid "Indirect Membership" +msgstr "Indirekte Mitgliedschaft" -msgid "Add a new HBAC service." -msgstr "Einen neuen HBAC-Dienst hinzufügen." +msgid "No entries." +msgstr "Keine Einträge." -msgid "Add a new IPA new service." -msgstr "Einen neuen IPA-Dienst hinzufügen." +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Zeige ${start} bis ${end} von ${total} Einträgen." -msgid "Add a new OTP token." -msgstr "Neuen OTP-Token hinzufügen" +msgid "Remove" +msgstr "" -msgid "Add a new group password policy." -msgstr "Neue Gruppen-Passwortregel hinzufügen." +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} Einträge gelöscht" -msgid "Add a new host." -msgstr "Neuen Host hinzufügen." +msgid "Show Results" +msgstr "Ergebnisse anzeigen" -msgid "Add a new hostgroup." -msgstr "Hostgruppe hinzufügen." +#, fuzzy +#| msgid "HOTP Authentication Window" +msgid "Authentication indicators" +msgstr "HOTP Authentifizierungsfenster" -msgid "Add a new role." -msgstr "Neue Rolle hinzufügen." - -msgid "Add a new stage user." -msgstr "Einen neuen vorbereiteten Benutzer hinzufügen." - -msgid "Add a new user." -msgstr "Einen neuen Benutzer hinzufügen." +#, fuzzy +#| msgid "HOTP Authentication Window" +msgid "Authentication indicator" +msgstr "HOTP Authentifizierungsfenster" msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" msgstr "" -"Ein Attribut-Wert-Paar hinzufügen. Das Format ist Attribut=Wert.\n" -"Das Attribut muss Teil des Schemas sein." + +#, fuzzy +#| msgid "HOTP Authentication Window" +msgid "Add Custom Authentication Indicator" +msgstr "HOTP Authentifizierungsfenster" + +msgid "Two factor authentication (password + OTP)" +msgstr "Zwei-Faktor-Authentifizierung (Passwort + OTP)" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "RADIUS" +msgstr "Radius Server" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "Über" + +msgid "Activate" +msgstr "Aktivieren" msgid "Add and Add Another" msgstr "Hinzufügen und weitere hinzufügen" @@ -635,153 +20296,852 @@ msgstr "Hinzufügen und schließen" msgid "Add and Edit" msgstr "Hinzufügen und bearbeiten" -msgid "Add hosts that can manage this host." -msgstr "Hosts hinzufügen die diesen Host verwalten dürfen." +msgid "Add Many" +msgstr "Mehrere hinzufügen" -msgid "Add hosts that can manage this service." -msgstr "Hosts hinzufügen, die diesen Dienst verwalten können." +msgid "Back" +msgstr "Zurück" -msgid "Add members to a group." -msgstr "Mitglieder zu einer Gruppe hinzufügen." +msgid "Cancel" +msgstr "Abbrechen" -msgid "Add members to a hostgroup." -msgstr "Mitglieder zur Hostgruppe hinzufügen." +msgid "Clear" +msgstr "" -msgid "Add members to a role." -msgstr "Mitglieder zur Rolle hinzufügen." +#, fuzzy +#| msgid "Refresh the page." +msgid "Clear all fields on the page." +msgstr "Seite neu laden." -msgid "Add members to an HBAC service group." -msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." +msgid "Close" +msgstr "Schließen" -msgid "Add privileges to a role." -msgstr "Berechtigungen zur Rolle hinzufügen." +msgid "Disable" +msgstr "Deaktivieren" -msgid "Add services to an HBAC rule." -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." +msgid "Download" +msgstr "" -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." +msgid "Download certificate as PEM formatted file." +msgstr "" -msgid "Add the host to DNS with this IP address" -msgstr "Host mit dieser IP zum DNS hinzufügen" +msgid "Edit" +msgstr "Bearbeiten" -msgid "Add users and groups to an HBAC rule." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." +msgid "Enable" +msgstr "Aktivieren" -msgid "Add users that can manage this token." -msgstr "Nutzer hinzufügen die diesen Token verwalten können" +msgid "Find" +msgstr "Suchen" -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" hinzugefügt" +msgid "Get" +msgstr "Abrufen" -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" hinzugefügt" +msgid "Hide" +msgstr "" -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" +msgid "Issue" +msgstr "Ausgeben" -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" +#, fuzzy +#| msgid "Matched" +msgid "Match" +msgstr "Gefunden" -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "OTP token \"%(value)s\" hinzugefügt" +msgid "Match users according to certificate." +msgstr "" -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" +msgid "Migrate" +msgstr "" -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" +msgid "OK" +msgstr "OK" -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" +msgid "Refresh" +msgstr "Neu laden" -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" +msgid "Reload current settings from the server." +msgstr "" -#, python-format -msgid "Added host \"%(value)s\"" +msgid "Delete" +msgstr "Löschen" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "Zurücksetzen" + +msgid "Reset Password" +msgstr "Passwort zurücksetzen" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset Password and Log in" +msgstr "Passwort zurücksetzen" + +msgid "Restore" +msgstr "Wiederherstellen" + +msgid "Retry" +msgstr "Erneut versuchen" + +msgid "Revert" +msgstr "Rückgängig" + +msgid "Revoke" +msgstr "Widerrufen" + +msgid "Save" +msgstr "Speichern" + +msgid "Set" +msgstr "Setzen" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "Vorbereiten" + +msgid "Update" +msgstr "Speichern" + +msgid "View" +msgstr "Ansicht" + +#, fuzzy +#| msgid "Confirmation" +msgid "Customization" +msgstr "Bestätigung" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "Alle einklappen" + +msgid "Expand All" +msgstr "Alle aufklappen" + +msgid "General" +msgstr "Allgemein" + +msgid "Identity Settings" +msgstr "Identitätseinstellungen" + +#, fuzzy +#| msgid "Host Settings" +msgid "Record Settings" +msgstr "Host Einstellungen" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "${entity} ${primary_key} Einstellungen" + +msgid "Back to Top" +msgstr "Zurück nach oben" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "${entity} ${primary_key} aktualisiert" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity} erfolgreich hinzugefügt" + +#, fuzzy +#| msgid "Added host \"%(value)s\"" +msgid "Add custom value" msgstr "Host \"%(value)s\" hinzugefügt" -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" hinzugefügt" +msgid "Available" +msgstr "Verfügbar" -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" +#, fuzzy +#| msgid "Token synchronization failed" +msgid "Some operations failed." +msgstr "Token-Synchronisierung fehlgeschlagen" -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" +#, fuzzy +#| msgid "Validation error" +msgid "Operations Error" +msgstr "Überprüfungsfehler" -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" +msgid "Confirmation" +msgstr "Bestätigung" -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Benutzer »%(value)s« hinzugefügt" - -msgid "Additional instructions:" -msgstr "Zusätzliche Anweisungen:" - -msgid "Administrative account" -msgstr "Administratives Konto" - -msgid "Administrator e-mail address" -msgstr "E-Mail-Adresse des Administrators" - -msgid "Algorithm" -msgstr "Algorithmus" - -msgid "All commands should at least have a result" -msgstr "Alle Befehle sollten mindestens ein Ergebnis haben." - -msgid "Allow" -msgstr "Erlauben" - -msgid "Allow dynamic updates." -msgstr "Dynamische Aktualisierungen erlauben." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." +msgid "Custom value" msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erstellen." -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgid "This page has unsaved changes. Please save or revert." msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erhalten." +"Diese Seite hat nicht gespeicherte Änderungen. Bitte Speichern oder " +"Rückgängig machen" -msgid "Already registered" -msgstr "Bereits registriert" +msgid "Unsaved Changes" +msgstr "Ungespeicherte Änderungen" -msgid "Altitude" -msgstr "Höhe" +#, python-brace-format +msgid "Edit ${entity}" +msgstr "${entity} bearbeiten" -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Ein IPA Masterhost kann nicht deaktiviert oder gelöscht werden" +msgid "Hide details" +msgstr "Details verbergen" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, Version: ${version}" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "Umleitung" + +msgid "Select entries to be removed." +msgstr "Einträge zum löschen auswählen." + +#, fuzzy +#| msgid "Show Results" +msgid "Result" +msgstr "Ergebnisse anzeigen" + +msgid "Show details" +msgstr "Details anzeigen" + +msgid "Success" +msgstr "Erfolgreich" + +msgid "Validation error" +msgstr "Überprüfungsfehler" + +msgid "Input form contains invalid or missing values." +msgstr "Eingabeformular enthält ungültige oder fehlende Werte." + +msgid "Please try the following options:" +msgstr "Bitte versuchen Sie die folgenden Optionen:" + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"Bei dauerhaftem Problem wenden Sie sich bitte an den Systemadministrator." + +msgid "Refresh the page." +msgstr "Seite neu laden." + +msgid "Reload the browser." +msgstr "Browser neu laden." + +msgid "Return to the main page and retry the operation" +msgstr "Zur Hauptseite zurückkehren und Vorgang wiederholen" #, python-brace-format msgid "An error has occurred (${error})" msgstr "Ein Fehler ist aufgetreten (${error})" -msgid "Any Command" -msgstr "Jeder Befehl" +msgid "HTTP Error" +msgstr "HTTP-Fehler" -msgid "Any Group" -msgstr "Jede Gruppe" +msgid "Internal Error" +msgstr "Interner Fehler" + +msgid "IPA Error" +msgstr "IPA-Fehler" + +msgid "No response" +msgstr "Keine Antwort" + +msgid "Unknown Error" +msgstr "Unbekannter Fehler" + +msgid "URL" +msgstr "URL" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} wird verwaltet von:" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "${primary_key} Mitglieder:" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} ist Mitglied von:" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} members:" +msgid "${primary_key} member managers:" +msgstr "${primary_key} Mitglieder:" + +msgid "Settings" +msgstr "Einstellungen" + +msgid "Search" +msgstr "Suchen" + +msgid "False" +msgstr "Falsch" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to create a keytab of this host." +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to retrieve a keytab of this " +#| "host." +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erhalten." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to create a keytab of this host." +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to retrieve a keytab of this " +#| "host." +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erhalten." + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Hosts allowed to create keytab" +msgid "Allowed to create keytab" +msgstr "Hosts die Schlüsseltabelle erstellen dürfen" + +#, fuzzy +#| msgid "Hosts allowed to retrieve keytab" +msgid "Allowed to retrieve keytab" +msgstr "Hosts die Schlüsseltabelle abrufen dürfen" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to create a keytab of this " +#| "host." +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to retrieve a keytab of this " +#| "host." +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erhalten." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to create a keytab of this " +#| "host." +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erstellen." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to retrieve a keytab of this " +#| "host." +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erhalten." + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Users allowed to retrieve keytab" +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Add Kerberos Principal Alias" +msgstr "Kerberos-Principal" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "New kerberos principal alias" +msgstr "Kerberos-Principal" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "Vererbt von Serverkonfiguration" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Override inherited settings" +msgstr "Vererbte Einstellungen überschreiben" + +msgid "PAD" +msgstr "PAD" + +#, fuzzy +#| msgid "Authentication" +msgid "Authenticating" +msgstr "Authentifizierung" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "Angemeldet als" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal expiration" +msgid "Kerberos Principal you entered is expired" +msgstr "Kerberos-Principal Ablauf" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "Host Certificate" +msgid "Log In Using Certificate" +msgstr "Host-Zertifikat" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "OTP Token synchronisieren" + +#, fuzzy +#| msgid "HOTP Synchronization Window" +msgid "Synchronizing" +msgstr "HOTP Sychnronisierungsfenster" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "Anzahl der Passwörter" + +msgid "seconds" +msgstr "Sekunden" + +#, fuzzy +#| msgid "Configuration" +msgid "Migrating" +msgstr "Konfiguration" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#, fuzzy +#| msgid "Password reset was not successful." +msgid "Password migration was not successful" +msgstr "Passwort konnte nicht zurückgesetzt werden" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +#, fuzzy +#| msgid "The username, password or token codes are not correct" +msgid "The password or username you entered is incorrect" +msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." + +#, fuzzy +#| msgid "Password reset was not successful." +msgid "Password migration was successful" +msgstr "Passwort konnte nicht zurückgesetzt werden" + +msgid "Attribute" +msgstr "Attribut" + +#, fuzzy +#| msgid "delegation" +msgid "Add delegation" +msgstr "Delegation" + +#, fuzzy +#| msgid "delegations" +msgid "Remove delegations" +msgstr "Delegationen" + +#, fuzzy +#| msgid "permission" +msgid "Add permission" +msgstr "Berechtigung" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "Remove permissions" +msgstr "Berechtigungen" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove privileges from permission '${primary_key}'" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy +#| msgid "Add privileges to a role." +msgid "Add privilege" +msgstr "Berechtigungen zur Rolle hinzufügen." + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove privileges" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "Berechtigungen von Rolle entfernen." + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Host Settings" +msgid "Role Settings" +msgstr "Host Einstellungen" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add role" +msgstr "Neue Rolle hinzufügen." + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from role '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove services from role '${primary_key}'" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a role." +msgid "Remove users from role '${primary_key}'" +msgstr "Mitglieder von Rolle entfernen." + +#, fuzzy +#| msgid "HBAC service description" +msgid "Add self service permission" +msgstr "Beschreibung des HBAC-Dienstes" + +msgid "Remove self service permissions" +msgstr "" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Add rule" +msgstr "HBAC-Regel" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to activate selected users?" +msgid "Are you sure you want to change default group?" +msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" + +msgid "Default host group" +msgstr "Standard Hostgruppe" + +msgid "Default user group" +msgstr "Standard Benutzergruppe" + +msgid "Exclusive" +msgstr "Exklusiv" + +msgid "Expression" +msgstr "Ausdruck" + +#, fuzzy +#| msgid "host group" +msgid "Host group rule" +msgstr "Hostgruppe" + +#, fuzzy +#| msgid "host groups" +msgid "Host group rules" +msgstr "Hostgruppen" + +#, fuzzy +#| msgid "Exclusive" +msgid "Inclusive" +msgstr "Exklusiv" + +#, fuzzy +#| msgid "Auto Membership Rule" +msgid "Remove auto membership rules" +msgstr "Regel für Auto-Mitgliedschaft" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User group rule" +msgstr "Benutzer-Gruppe" + +#, fuzzy +#| msgid "User group" +msgid "User group rules" +msgstr "Benutzer-Gruppe" + +#, fuzzy +#| msgid "Automount" +msgid "Add automount key" +msgstr "Automount" + +#, fuzzy +#| msgid "automount maps" +msgid "Remove automount keys" +msgstr "Automount-Maps" + +#, fuzzy +#| msgid "automount location" +msgid "Add automount location" +msgstr "Automount-Ort" + +#, fuzzy +#| msgid "Automount Locations" +msgid "Automount Location Settings" +msgstr "Automount-Orte" + +#, fuzzy +#| msgid "automount locations" +msgid "Remove automount locations" +msgstr "Automount-Orte" + +#, fuzzy +#| msgid "automount map" +msgid "Add automount map" +msgstr "Automount-Map" + +#, fuzzy +#| msgid "Group Type" +msgid "Map Type" +msgstr "Gruppentyp" + +msgid "Direct" +msgstr "Direkt" + +msgid "Indirect" +msgstr "Indirekt" + +#, fuzzy +#| msgid "automount maps" +msgid "Remove automount maps" +msgstr "Automount-Maps" + +msgid "Add certificate authority" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate authorities" +msgstr "Ein Zertifikat widerrufen." + +#, fuzzy +#| msgid "CA ACL" +msgid "Add CA ACL" +msgstr "CA ACL" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Allow" +msgid "All" +msgstr "Erlauben" + +msgid "Any CA" +msgstr "" msgid "Any Host" msgstr "Jeder Host" @@ -789,303 +21149,1296 @@ msgstr "Jeder Host" msgid "Any Service" msgstr "Jeder Dienst" +#, fuzzy +#| msgid "Profiles" +msgid "Any Profile" +msgstr "Profile" + msgid "Anyone" msgstr "Jeder" -msgid "Apply" -msgstr "Anwenden" +msgid "Rule status" +msgstr "Regelstatus" -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." +msgid "If no CAs are specified, requests to the default CA are allowed." msgstr "" -"Sind sie sicher, dass sie den Nutzer ${action} möchten?
Die Änderung " -"wird sofort aktiv." -msgid "Are you sure you want to activate selected users?" -msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge löschen wollen?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" -"Sind Sie sicher, dass Sie die ausgewählten Einträge deaktivieren wollen?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} aktivieren wollen?" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" -"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" - -msgid "Are you sure you want to restore selected users?" -msgstr "" -"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "SInd Sie sicher, dass Sie den Benutzer ${object} entsperren möchten?" - -msgid "As Whom" -msgstr "Als Wer" - -msgid "Assigned manager of the token (default: self)" -msgstr "Zugewiesener Token-Verwalter (Standard: selbst)" - -msgid "Assigned user of the token (default: self)" -msgstr "Zugewiesener Token-Benutzer (Standard: selbst)" - -msgid "Attribute" -msgstr "Attribut" - -msgid "Attribute Key" -msgstr "Attribut Schlüssel" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Dieses Attribut wird per Regex gefiltert. Zum Beispiel FQDN für einen Host, " -"oder Manager für einen Benutzer" - -msgid "Attributes" -msgstr "Attribute" - -msgid "Attributes to which the permission applies" -msgstr "Attribute auf die die Berechtigung angewendet wird" - -msgid "Audit" -msgstr "Audit" - -msgid "Authentication" -msgstr "Authentifizierung" - -msgid "Auto Membership Rule" -msgstr "Regel für Auto-Mitgliedschaft" - -msgid "Auto Membership is not configured" -msgstr "Auto-Mitgliedschaft ist nicht konfiguriert" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Auto-Mitgliedschaftsregel: %s nicht gefunden!" - -msgid "Automember" -msgstr "Auto-Mitgliedschaft" - -msgid "Automember Rule" -msgstr "Auto-Mitgliedschaftsregel" - -msgid "Automember rebuild membership task completed" -msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft abgeschlossen" - -msgid "Automember rebuild membership task started" -msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft gestartet" - -msgid "Automount" -msgstr "Automount" - -msgid "Automount Location" -msgstr "Automount-Ort" - -msgid "Automount Locations" -msgstr "Automount-Orte" - -msgid "Automount Map" -msgstr "Automount-Map" - -msgid "Automount Maps" -msgstr "Automount-Maps" - -msgid "Automount location name." -msgstr "Automount-Ort" - -msgid "Automount map name." -msgstr "Automount-Map Name." - -msgid "Automount master file." -msgstr "Automount-Masterdatei" - -msgid "Available" -msgstr "Verfügbar" - -msgid "Back" -msgstr "Zurück" - -msgid "Back to Top" -msgstr "Zurück nach oben" - -msgid "Bad format in credentials cache" -msgstr "Falsches Format im Anmeldedaten-Zwischenspeicher" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Falscher Suchfilter %(info)s" - -msgid "Base-64 encoded server certificate" -msgstr "Base-64-kodiertes Serverzertifikat" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64-Dekodierung fehlgeschlagen: %(reason)s" - -msgid "Bind DN" -msgstr "Bind-DN" - -msgid "CA ACL" -msgstr "CA ACL" - -msgid "CA ACLs" +#, fuzzy +#| msgid "CA ACLs" +msgid "Remove CA ACLs" msgstr "CA ACLs" -msgid "CA is not configured" -msgstr "CA ist nicht konfiguriert" - -msgid "CSR" -msgstr "CSR" - -msgid "Cancel" -msgstr "Abbrechen" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." -msgid "Cannot resolve KDC for requested realm" -msgstr "KDC für angeforderten Realm konnte nicht aufgelöst werden." +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" -msgid "Car License" -msgstr "Kfz-Kennzeichen" +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" -msgid "Certificate" -msgstr "Zertifikat" +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" -msgid "Certificate Profile to use" +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified CAs" +msgstr "Spezifische Gruppe" + +msgid "Specified Hosts and Groups" +msgstr "Spezifische Hosts und Gruppen" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified Profiles" +msgstr "Spezifische Gruppe" + +msgid "Specified Services and Groups" +msgstr "Spezifische Dienste und Gruppen" + +msgid "Specified Users and Groups" +msgstr "Spezifische Benutzer und Gruppen" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Permitted to have certificates issued" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Remove certificate profiles" msgstr "Benutze Zertifikatsprofil" -msgid "Certificate Type" -msgstr "Zertifikattyp" +msgid "AA Compromise" +msgstr "" -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Formatfehler im Zertifikat: %(error)s" +#, fuzzy +#| msgid "Principal" +msgid "Add principal" +msgstr "Principal" -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Zertifikat-Operation kann nicht abgeschlossen werden: %(error)s" +msgid "Affiliation Changed" +msgstr "" -msgid "Certificate/CRL" -msgstr "Zertifikat/CRL" +msgid "CA Compromise" +msgstr "" msgid "Certificates" msgstr "Zertifikate" -msgid "Change current Domain Level." -msgstr "Aktuelles Domain Level ändern." +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Hold" +msgstr "Zertifikat" -msgid "Change password" -msgstr "Passwort ändern" +#, fuzzy +#| msgid "Replication configuration" +msgid "Cessation of Operation" +msgstr "Replikationseinstellungen" -msgid "Change to POSIX group" -msgstr "In POSIX-Gruppe umwandeln" +#, fuzzy +#| msgid "Command name" +msgid "Common Name" +msgstr "Befehlsname" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "Läuft ab am" + +#, fuzzy +#| msgid "Issued On" +msgid "Issued on from" +msgstr "Ausgegeben am" + +#, fuzzy +#| msgid "Issued On" +msgid "Issued on to" +msgstr "Ausgegeben am" + +#, fuzzy +#| msgid "Serial number" +msgid "Maximum serial number" +msgstr "Seriennummer" + +#, fuzzy +#| msgid "Serial number" +msgid "Minimum serial number" +msgstr "Seriennummer" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on from" +msgstr "Widerrufen" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on to" +msgstr "Widerrufen" + +#, fuzzy +#| msgid "Validation error" +msgid "Valid not after from" +msgstr "Überprüfungsfehler" + +#, fuzzy +#| msgid "Validity start" +msgid "Valid not after to" +msgstr "Gültig ab" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprints" +msgstr "Fingerabdruck" + +#, fuzzy +#| msgid "New Certificate" +msgid "Get Certificate" +msgstr "Neues Zertifikat" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Hold Removed" +msgstr "Benutze Zertifikatsprofil" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Issue new certificate" +msgstr "Neues Zertifikat" + +msgid "Issued By" +msgstr "Ausgegeben von" + +msgid "Issued On" +msgstr "Ausgegeben am" + +msgid "Issued To" +msgstr "Ausgegeben an" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "Kein gültiges Zertifikat" + +msgid "New Certificate" +msgstr "Neues Zertifikat" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "Organisation" + +msgid "Organizational Unit" +msgstr "Organisationseinheit" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) deleted" +msgid "${count} certificate(s) present" +msgstr "${count} Einträge gelöscht" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate hold" +msgstr "Ein Zertifikat widerrufen." + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Do you want to remove the certificate hold?" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +#| msgid "Remove entries from DNS" +msgid "Remove from CRL" +msgstr "DNS Einträge löschen" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate requested" +msgstr "Zertifikate" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Revoke certificate" +msgstr "Ein Zertifikat widerrufen." + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Revoked" +msgstr "Zertifikattyp" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "Seriennummer" + +msgid "Serial Number (hex)" +msgstr "Seriennummer (hex)" + +msgid "SHA1 Fingerprint" +msgstr "SHA1-Fingerabdruck" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SHA256 Fingerprint" +msgstr "SHA1-Fingerabdruck" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "Nicht angegeben" + +#, fuzzy +#| msgid "No Valid Certificate" +msgid "Valid Certificate Present" +msgstr "Kein gültiges Zertifikat" + +#, fuzzy +#| msgid "Validation error" +msgid "Valid from" +msgstr "Überprüfungsfehler" + +#, fuzzy +#| msgid "Validity" +msgid "Valid to" +msgstr "Gültigkeit" + +msgid "Validity" +msgstr "Gültigkeit" + +#, fuzzy, python-brace-format +#| msgid "${entity} ${primary_key} updated" +msgid "Certificate for ${entity} ${primary_key}" +msgstr "${entity} ${primary_key} aktualisiert" + +#, fuzzy +#| msgid "New Certificate" +msgid "View Certificate" +msgstr "Neues Zertifikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "Zertifikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate For Match" +msgstr "Zertifikat" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Mapping Match" +msgstr "Zertifikattyp" + +#, fuzzy +#| msgid "Matched rules" +msgid "Matched Users" +msgstr "Zutreffende Regeln" + +#, fuzzy +#| msgid "User login" +msgid "User Login" +msgstr "Anmeldename" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate mapping data" +msgstr "Zertifikattyp" + +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "Konfiguration" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate mapping data" +msgstr "Ein Zertifikat widerrufen." + +msgid "Issuer and subject" +msgstr "" + +#, fuzzy +#| msgid "Submit a certificate signing request." +msgid "Remove certificate identity mapping rules" +msgstr "Eine Signaturanfrage (CSR) senden." + +msgid "Group Options" +msgstr "Gruppenoptionen" + +msgid "Search Options" +msgstr "Suchoptionen" + +msgid "SELinux Options" +msgstr "SELinux-Optionen" + +#, fuzzy +#| msgid "Search Options" +msgid "Server Options" +msgstr "Suchoptionen" + +#, fuzzy +#| msgid "Search Options" +msgid "Service Options" +msgstr "Suchoptionen" + +msgid "User Options" +msgstr "Benutzeroptionen" + +msgid "Forward first" +msgstr "" + +#, fuzzy +#| msgid "Account disabled" +msgid "Forwarding disabled" +msgstr "Konto ist deaktiviert" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "Optionen" + +#, fuzzy +#| msgid "Update DNS entries" +msgid "Update System DNS Records" +msgstr "DNS Einträge aktualisieren" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "Andere Datensatztypen" + +msgid "Address not valid, can't redirect" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create dns record" +msgstr "Eine neue Gruppe erstellen." + +msgid "Creating record." +msgstr "" + +#, fuzzy +#| msgid "Token synchronization failed" +msgid "Record creation failed." +msgstr "Token-Synchronisierung fehlgeschlagen" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "Datensatz nicht gefunden." + +#, fuzzy +#| msgid "Redirection" +msgid "Redirection to PTR record" +msgstr "Umleitung" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +#, fuzzy +#| msgid "%(parent)s: %(oname)s not found" +msgid "Target reverse zone not found." +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, fuzzy +#| msgid "DNS zones" +msgid "Fetching DNS zones." +msgstr "DNS-Zonen" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +#, fuzzy +#| msgid "Search for DNS resources." +msgid "Remove DNS resource records" +msgstr "Nach DNS-Ressourcen suchen." + +#, fuzzy +#| msgid "Other Record Types" +msgid "Standard Record Types" +msgstr "Andere Datensatztypen" + +msgid "Records for DNS Zone" +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "Record Type" +msgstr "Datensatztyp" + +#, fuzzy +#| msgid "DNS zone" +msgid "Add DNS zone" +msgstr "DNS-Zone" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to disable ${object}?" +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" + +#, fuzzy +#| msgid "DNS Zones" +msgid "DNS Zone Settings" +msgstr "DNS-Zonen" + +#, fuzzy +#| msgid "DNS zones" +msgid "Remove DNS zones" +msgstr "DNS-Zonen" + +#, fuzzy +#| msgid "Permission" +msgid "Remove Permission" +msgstr "Berechtigung" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete ${object}?" +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "Level" + +#, fuzzy +#| msgid "Domain Level" +msgid "Set Domain Level" +msgstr "Domain Level" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "Benutzer-Gruppe" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "Gruppeneinstellungen" + +msgid "External" +msgstr "Extern" + +msgid "Groups" +msgstr "Gruppen" + +#, fuzzy +#| msgid "User categories" +msgid "Group categories" +msgstr "Benutzerkategorien" msgid "Change to external group" msgstr "In externe Gruppe umwandeln" -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Passwort für \"%(value)s\" geändert" +msgid "Change to POSIX group" +msgstr "In POSIX-Gruppe umwandeln" -msgid "Character classes" -msgstr "Zeichenklassen" +#, fuzzy +#| msgid "POSIX" +msgid "Non-POSIX" +msgstr "POSIX" -msgid "Check the status of a certificate signing request." -msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." +msgid "POSIX" +msgstr "POSIX" -msgid "City" -msgstr "Ort" - -msgid "Class" -msgstr "Klasse" +#, fuzzy +#| msgid "Member service groups" +msgid "Remove user groups" +msgstr "Mitglieds-Dienstgruppen" #, python-brace-format -msgid "Click to ${action}" -msgstr "Klicken um zu ${action}" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Client ist nicht konfiguriert. Rufen Sie ipa-client-install auf." - -msgid "Client version. Used to determine if server will accept request." +msgid "Remove user group '${primary_key}' from user groups" msgstr "" -"Client-Version. Dadurch wird bestimmt, ob der Server die Anfrage akzeptiert." -msgid "Clock interval" -msgstr "Zeitintervall" +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" -msgid "Clock offset" -msgstr "Zeit-Offset" +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" -msgid "Close" -msgstr "Schließen" +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." -msgid "Collapse All" -msgstr "Alle einklappen" +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "Befehl '%(name)s' ist veraltet" +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from user group '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." -msgid "Command category" -msgstr "Befehlskategorie" +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove services from user group '${primary_key}'" +msgstr "Dienste von einer HBAC-Gruppe entfernen." -msgid "Command category the rule applies to" -msgstr "Befehlskategorie, auf die die Regel angewendet werden soll" +#, fuzzy, python-brace-format +#| msgid "Remove members from a group." +msgid "Remove users from user group '${primary_key}'" +msgstr "Mitglieder aus einer Gruppe entfernen." -msgid "Command name" -msgstr "Befehlsname" +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" -msgid "Command not implemented" -msgstr "Befehl nicht implementiert" +msgid "Group Type" +msgstr "Gruppentyp" -msgid "Commands" -msgstr "Befehle" +#, fuzzy +#| msgid "HBAC rule" +msgid "Add HBAC rule" +msgstr "HBAC-Regel" -msgid "Conditions that could not be added" -msgstr "Bedingungen, die nicht hinzugefügt werden konnten" +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." -msgid "Conditions that could not be removed" -msgstr "Bedingungen, die nicht entfernt werden konnten" +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" -msgid "Configuration" -msgstr "Konfiguration" +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +msgid "Accessing" +msgstr "Greift zu" + +#, fuzzy +#| msgid "HBAC rules" +msgid "Remove HBAC rules" +msgstr "HBAC-Regeln" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Dienste von einer HBAC-Gruppe entfernen." + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +msgid "Via Service" +msgstr "Mit Dienst" + +msgid "Who" +msgstr "Wer" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add HBAC service" +msgstr "HBAC-Dienst" + +#, fuzzy, python-brace-format +#| msgid "Add members to an HBAC service group." +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." + +#, fuzzy +#| msgid "Member HBAC service" +msgid "Remove HBAC services" +msgstr "Mitglieds-HBAC-Dienst" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +#, fuzzy +#| msgid "HBAC service group" +msgid "Add HBAC service group" +msgstr "HBAC-Dienstgruppe" + +#, fuzzy, python-brace-format +#| msgid "Add members to an HBAC service group." +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." + +#, fuzzy +#| msgid "Member HBAC service groups" +msgid "Remove HBAC service groups" +msgstr "Mitglieds-HBAC-Servicegruppen" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +msgid "Access Denied" +msgstr "Zugriff verweigert" + +msgid "Access Granted" +msgstr "Zugriff gewährt" + +msgid "Include Disabled" +msgstr "Deaktivierte einschließen" + +msgid "Include Enabled" +msgstr "Aktivierte einschließen" + +msgid "HBAC Test" +msgstr "HBAC Test" + +msgid "Matched" +msgstr "Gefunden" + +msgid "Missing values: " +msgstr "Fehlende Werte:" + +msgid "New Test" +msgstr "Neuer Test" + +msgid "Rules" +msgstr "Regeln" + +msgid "Run Test" +msgstr "Test Starten" + +#, fuzzy, python-brace-format +#| msgid "Edit ${entity}" +msgid "Specify external ${entity}" +msgstr "${entity} bearbeiten" + +#, fuzzy +#| msgid "Matched" +msgid "Unmatched" +msgstr "Gefunden" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add host" +msgstr "Neuen Host hinzufügen." + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "Host-Zertifikat" + +msgid "Host Name" +msgstr "Host-Name" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "Host Einstellungen" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Generate OTP" +msgstr "OTP zurücksetzen" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Generated OTP" +msgstr "OTP zurücksetzen" + +msgid "Kerberos Key" +msgstr "Kerberos-Schlüssel" + +msgid "Kerberos Key Not Present" +msgstr "Kerberos-Schlüssel nicht vorhanden" + +#, fuzzy +#| msgid "Kerberos Key Not Present" +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Kerberos-Schlüssel nicht vorhanden" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password" +msgstr "Einmalpasswort" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Not Present" +msgstr "Einmalpasswort" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Present" +msgstr "Einmalpasswort" + +msgid "Reset OTP" +msgstr "OTP zurücksetzen" + +#, fuzzy +#| msgid "One Time Password" +msgid "Reset One-Time Password" +msgstr "Einmalpasswort" + +msgid "Set OTP" +msgstr "OTP setzen" + +msgid "OTP set" +msgstr "OTP gesetzt" + +#, fuzzy +#| msgid "One Time Password" +msgid "Set One-Time Password" +msgstr "Einmalpasswort" + +#, fuzzy +#| msgid "Member hosts" +msgid "Remove hosts" +msgstr "Mitglieds-Hosts" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a hostgroup." +msgid "Remove host '${primary_key}' from host groups" +msgstr "Mitglieder von Hostgruppe entfernen." + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove host '${primary_key}' from roles" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Provisioning" +msgid "Unprovision" +msgstr "Provisioning" + +#, fuzzy +#| msgid "Are you sure you want to proceed with the action?" +msgid "Are you sure you want to unprovision this host?" +msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" + +#, fuzzy +#| msgid "Provisioning" +msgid "Unprovisioning host" +msgstr "Provisioning" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +#| msgid "host group" +msgid "Add host group" +msgstr "Hostgruppe" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "Hostgruppen-Einstellungen" + +#, fuzzy +#| msgid "Member host-groups" +msgid "Remove host groups" +msgstr "Mitglieds-Hostgruppen" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "Benutzer zum Überschreiben" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +#, fuzzy +#| msgid "Profiles" +msgid "Profile" +msgstr "Profile" + +msgid "Group to override" +msgstr "Gruppe zum Überschreiben" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Enter trusted group name." +msgstr "Dienstgruppenname" + +msgid "Add ID view" +msgstr "" + +#, fuzzy +#| msgid "Group to override" +msgid "Add group ID override" +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +#| msgid "User to override" +msgid "Add user ID override" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} members:" +msgid "${primary_key} applies to:" +msgstr "${primary_key} Mitglieder:" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +#| msgid "host groups" +msgid "Apply to host groups" +msgstr "Hostgruppen" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} members:" +msgid "${primary_key} overrides:" +msgstr "${primary_key} Mitglieder:" + +msgid "Remove ID views" +msgstr "" + +#, fuzzy +#| msgid "User to override" +msgid "Remove user ID overrides" +msgstr "Benutzer zum Überschreiben" + +#, fuzzy +#| msgid "Group to override" +msgid "Remove group ID overrides" +msgstr "Gruppe zum Überschreiben" + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Un-apply from host groups" +msgstr "Nach Hostgruppen suchen." + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Apply" +msgid "Un-apply" +msgstr "Anwenden" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to enable selected entries?" +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#, fuzzy +#| msgid "Add a new hostgroup." +msgid "Add netgroup" +msgstr "Hostgruppe hinzufügen." + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "Host" + +#, fuzzy +#| msgid "Group Settings" +msgid "Netgroup Settings" +msgstr "Gruppeneinstellungen" + +#, fuzzy +#| msgid "Member groups" +msgid "Remove netgroups" +msgstr "Mitglieds-Gruppen" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "OTP token" +msgid "Add OTP token" +msgstr "OTP Token" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"Sie können FreeOTP als " +"Softwaretoken einsetzen." msgid "Configure your token" msgstr "Token konfigurieren" @@ -1098,1530 +22451,74 @@ msgstr "" "Sie auf den QR Code wenn Sie dies auf dem Gerät sehen welches Sie " "konfigurieren möchten." -msgid "Configured administrative server limit exceeded" -msgstr "Vorgegebene administrative Serverbeschränkung überschritten" - -msgid "Configured size limit exceeded" -msgstr "Vorgegebene Größenbeschränkung überschritten" - -msgid "Configured time limit exceeded" -msgstr "Vorgegebenes Zeitlimit überschritten" - -msgid "Confirmation" -msgstr "Bestätigung" - -msgid "Consecutive failures before lockout" -msgstr "Aufeinanderfolgende Falscheingaben bevor gesperrt wird" - -msgid "Contact Settings" -msgstr "Kontakteinstellungen" - -msgid "Continuous mode: Don't stop on errors." -msgstr "Fortlaufender Modus: Kein Abbruch bei Fehlern." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "%(name)s konnte nicht interaktiv ermittelt werden" - -msgid "Counter" -msgstr "Zähler" - -msgid "Counter-based (HOTP)" -msgstr "Zählerbasiert (HOTP)" - -msgid "Create Stage user in from a delete user" -msgstr "Erstelle vorbereiteten Benutzer aus einem gelöschten Benutzer" - -msgid "Create a new CA ACL." -msgstr "Erstelle eine neue CA ACL." - -msgid "Create a new HBAC rule." -msgstr "Neue HBAC-Regel erstellen." - -msgid "Create a new automount location." -msgstr "Neuen Automount-Ort erstellen." - -msgid "Create a new group." -msgstr "Eine neue Gruppe erstellen." - -msgid "Create as a non-POSIX group" -msgstr "Als Nicht-POSIX-Gruppe erstellen" - -msgid "Create new Sudo Command." -msgstr "Neuen Sudo-Befehl erzeugen." - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI erstellt \"%(value)s\"" - -msgid "Credentials cache permissions incorrect" -msgstr "Zugriffsrechte des Anmeldedaten-Zwischenspeichers sind inkorrekt." - -msgid "Current DNS record contents:\n" -msgstr "Derzeitiger Inhalt des DNS-Datensatzes:\n" - -msgid "Current Password" -msgstr "Aktuelles Passwort" - -msgid "Current domain level:" -msgstr "Aktuelles Domain Level:" - -msgid "Current password is required" -msgstr "Aktuelles Passwort ist erforderlich" - -msgid "DN of the started task" -msgstr "DN der gestarteten Aufgabe" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS Zone" -msgstr "DNS-Zone" - -msgid "DNS Zones" -msgstr "DNS-Zonen" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "DNS Check fehlerhaft: Erwartet {%(expected)s} bekommen {%(got)s}" - -msgid "DNS class" -msgstr "DNS-Klasse" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"Die DNS-Forwarder Semantiken haben sich seit IPA 4.0 geändert.\n" -"Nutzen Sie stattdessen Forward Zones (dnsforwardzone-*).\n" -"Für weitere Details schlagen Sie bitte in der Dokumentation nach." - -msgid "DNS is not configured" -msgstr "DNS ist nicht konfiguriert" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" -"DNS Record(s) von Host %(host)s konnten nicht entfernt werden. (%(reason)s)" - -msgid "DNS records can be only updated one at a time" -msgstr "Es können nicht mehrere DNS-Datensätze aktualisiert werden." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS Server %(server)s unterstützt kein DNSSEC: %(error)s.\n" -"Wenn DNSSEC-Überprüfung auf den IPA Servern aktiviert ist bitte deaktivieren." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Der DNS server %(server)s unterstützt EDNS0 (RFC 6891) nicht: %(error)s.\n" -"Falls DNSSEC auf IPA Server(n) aktiviert ist, deaktivieren Sie diese." - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS Server %(server)s: %(error)s." - -msgid "DNS zone" -msgstr "DNS-Zone" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "DNS Zone %(zone)s nicht gefunden" - -msgid "DNS zones" -msgstr "DNS-Zonen" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"DNSSEC Unterstützung ist experimentell.\n" -"%(additional_info)s" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"DNSSEC Überprüfung fehlgeschlagen: %(error)s.\n" -"Bitte überprüfen Sie die DNSSEC Konfigurationen oder deaktivieren die DNSSEC " -"Überprüfung auf allen IPA Servern." - -msgid "Data" -msgstr "Daten" - -msgid "Debugging output" -msgstr "Debugging-Ausgabe" - -msgid "Default (fallback) Group" -msgstr "Standard (Rückfall) Gruppe" - -msgid "Default PAC types" -msgstr "Standard PAC-Typen" - -msgid "Default SELinux user" -msgstr "Vorgegebener SELinux-Benutzer" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" -"Vorgegebener SELinux-Benutzer, sofern in den Zuweisungsregeln von SELinux " -"nichts anderes bestimmt ist" - -msgid "Default group for entries to land" -msgstr "Vorgegebene Gruppe für Einträge" - -msgid "Default group for new users" -msgstr "Vorgegebene Gruppe für neue Benutzer" - -msgid "Default group objectclasses" -msgstr "Standard objectclass für Gruppen" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Standard objectclass für Gruppen (komma-separierte Liste)" - -msgid "Default host group" -msgstr "Standard Hostgruppe" - -msgid "Default location of home directories" -msgstr "Vorgegebener Ort für Home-Verzeichnisse" - -msgid "Default shell" -msgstr "Vorgabe-Shell" - -msgid "Default shell for new users" -msgstr "Vorgegebene Shell für neue Benutzer" - -msgid "Default user authentication types" -msgstr "Standard Authentifizierungsmethoden" - -msgid "Default user group" -msgstr "Standard Benutzergruppe" - -msgid "Default user objectclasses" -msgstr "Standard objectclass für Benutzer" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "Standard objectclass für Benutzer (komma-separierte Liste)" - -msgid "Default users group" -msgstr "Vorgegebene Gruppe des Benutzers" - -msgid "Delegation" -msgstr "Delegation" - -msgid "Delegation name" -msgstr "Delegationsname" - -msgid "Delegations" -msgstr "Delegationen" - -msgid "Delete" -msgstr "Löschen" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Wert von %(name)s auf »%(value)s« löschen?" - -msgid "Delete Sudo Command." -msgstr "Sudo-Befehl löschen." - -msgid "Delete a CA ACL." -msgstr "CA ACL löschen." - -msgid "Delete a group password policy." -msgstr "Gruppen-Passwortregel löschen." - -msgid "Delete a host." -msgstr "Host löschen." - -msgid "Delete a hostgroup." -msgstr "Hostgruppe löschen." - -msgid "Delete a role." -msgstr "Rolle löschen." - -msgid "Delete a stage user." -msgstr "Einen vorbereiteten Benutzer löschen." - -msgid "Delete a user" -msgstr "Einen Benutzer löschen" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "Einen Benutzer löschen, Eintrag für zukünfigte Verwendung aufbewahren" - -msgid "Delete a user." -msgstr "Einen Benutzer löschen." - -msgid "Delete all associated records" -msgstr "Alle zugehörigen Datensätze löschen" - -msgid "Delete all?" -msgstr "Alles löschen?" - -msgid "Delete an HBAC rule." -msgstr "HBAC-Regel löschen" - -msgid "Delete an HBAC service group." -msgstr "HBAC-Dienstgruppe löschen" - -msgid "Delete an IPA service." -msgstr "Einen IPA-Dienst entfernen." - -msgid "Delete an OTP token." -msgstr "OTP Token löschen" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" -"Ein Attribut-Wert-Paar löschen. Diese Option wird zuletzt angewendet,\n" -"nach allen Optionen, die etwas festlegen oder hinzufügen." - -msgid "Delete an automount location." -msgstr "Automount-Ort löschen." - -msgid "Delete an existing HBAC service." -msgstr "Einen existierenden HBAC Dienst löschen." - -msgid "Delete group." -msgstr "Gruppe löschen." - -msgid "Delete mode" -msgstr "Lösch-Modus" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "OTP token \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Datensatz »%(value)s« gelöscht" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Benutzer »%(value)s« gelöscht" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"Das Löschen einer verwalteten Gruppe ist unzulässig. Sie muss zuerst aus der " -"Verwaltung entfernt werden." - -msgid "Deny" -msgstr "Verweigern" - -msgid "Department Number" -msgstr "Abteilungsnummer" - -msgid "Deprecated options" -msgstr "Veraltete Optionen" - -msgid "Description" -msgstr "Beschreibung" - -msgid "Digest" -msgstr "Prüfsumme" - -msgid "Digest Type" -msgstr "Prüfsummentyp" - -msgid "Digits" -msgstr "Zeichen" - -msgid "Direct" -msgstr "Direkt" - -msgid "Direct Membership" -msgstr "Direkte Migliedschaft" - -msgid "Disable" -msgstr "Deaktivieren" - -msgid "Disable a Sudo Rule." -msgstr "Eine Sudo-Regel deaktivieren." - -msgid "Disable a user account." -msgstr "Ein Benutzerkonto deaktivieren." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" -"Den Kerberos-Schlüssel und das SSL-Zertifikat eines Dienstes deaktivieren." - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" -"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." +msgid "OTP Token Settings" +msgstr "OTP Token Einstellungen" msgid "Disable token" msgstr "Token deaktivieren" -msgid "Disabled" -msgstr "Deaktiviert" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" deaktiviert" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Sudo-Regel »%s« wurde deaktiviert." - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Deaktivierte Domäne '%(domain)s' ist nicht zulässig" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Dienst »%(value)s« deaktiviert" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erstellen." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erhalten." - -msgid "Display DNS resource." -msgstr "DNS-Ressource anzeigen." - -msgid "Display Sudo Command." -msgstr "Sudo-Befehl anzeigen." - -msgid "Display Sudo Rule." -msgstr "Sudo-Regel anzeigen." - -msgid "Display an automount location." -msgstr "Automount-Ort anzeigen." - -msgid "Display effective policy for a specific user" -msgstr "Aktive Passwortregel für einen bestimmten Benutzer anzeigen" - -msgid "Display information about a host." -msgstr "Informationen über Host anzeigen." - -msgid "Display information about a hostgroup." -msgstr "Informationen über die Hostgruppe anzeigen." - -msgid "Display information about a named group." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -msgid "Display information about a role." -msgstr "Informationen über eine Rolle anzeigen." - -msgid "Display information about a stage user." -msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." - -msgid "Display information about a user." -msgstr "Informationen zu einem Benutzer anzeigen." - -msgid "Display information about an HBAC service group." -msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" - -msgid "Display information about an HBAC service." -msgstr "Informationen zu einem HBAC-Dienst anzeigen." - -msgid "Display information about an IPA service." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -msgid "Display information about an OTP token." -msgstr "Informationen über OTP Token anzeigen." - -msgid "Display information about password policy." -msgstr "Informationen über Passwortregel anzeigen." - -msgid "Display name" -msgstr "Angezeigter Name" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Zugriffsrechte dieses Eintrags anzeigen (erfordert --all). In der " -"Handbuchseite zu ipa finden Sie weitere Details." - -msgid "Display the properties of an HBAC rule." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -msgid "Display user record for current Kerberos principal" -msgstr "Benutzer-Datensatz für den aktuellen Kerberos-Principal anzeigen" - -msgid "Do not display QR code" -msgstr "Keinen QR Code zeigen" - -msgid "Domain" -msgstr "Domain" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" -"Die Domäne '%(domain)s' ist keine Root Domäne für den Forest '%(forest)s'" - -msgid "Domain Level" -msgstr "Domain Level" - -msgid "Domain Level cannot be lowered." -msgstr "Domain Level kann nicht gesenkt werden." - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" -"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " -"nicht." - -msgid "Domain enabled" -msgstr "Domäne aktiviert" - -msgid "Dynamic update" -msgstr "Dynamische Aktualisierung" - -msgid "Edit" -msgstr "Bearbeiten" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "${entity} bearbeiten" - -msgid "Email address" -msgstr "Email-Adresse" - -msgid "Employee Information" -msgstr "Mitarbeiterinformationen" - -msgid "Employee Number" -msgstr "Personalnummer" - -msgid "Employee Type" -msgstr "Personaltyp" - -msgid "Empty domain is not allowed" -msgstr "Eine leere Domäne ist nicht zulässig" - -msgid "Enable" -msgstr "Aktivieren" - -msgid "Enable a Sudo Rule." -msgstr "Eine Sudo-Regel aktivieren." - -msgid "Enable a user account." -msgstr "Ein Benutzerkonto aktivieren." - -msgid "Enable an HBAC rule." -msgstr "HBAC-Regel aktivieren." - -msgid "Enable migration mode" -msgstr "Migrationsmodus aktivieren" - msgid "Enable token" msgstr "Token aktivieren" -msgid "Enabled" -msgstr "Aktiviert" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Sudo-Regel »%s« wurde aktiviert." - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde aktiviert" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Geben Sie %(label)s zur Bestätigung nochmals ein: " - -msgid "Entry" -msgstr "Eintrag" - -msgid "Error" -msgstr "Fehler" - -msgid "Error changing account status" -msgstr "Fehler beim Ändern des Kontostatus" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Fehler beim Holen der initialen Anmeldedaten: %s.\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" -"Fehler beim Speichern der Anmeldedaten im Anmeldedaten-Zwischenspeicher: " -"%s.\n" - -msgid "Exceeded number of tries to forward a request." -msgstr "Anzahl der Versuche zur Weiterleitung der Anfrage überschritten" - -msgid "Exclusive" -msgstr "Exklusiv" - -msgid "Exclusive Regex" -msgstr "Ausschließende Regex" - -msgid "Expand All" -msgstr "Alle aufklappen" - -msgid "Expires On" -msgstr "Läuft ab am" - -msgid "Expression" -msgstr "Ausdruck" - -msgid "External" -msgstr "Extern" - -msgid "External User" -msgstr "Externer Benutzer" - -msgid "External host" -msgstr "Externer Host" - -msgid "External member" -msgstr "Externes Mitglied" - -msgid "External trust" -msgstr "Externe Vertrauensstellung" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Im Passwort-Plugin zusätzlich zu erzeugende Prüfsummen" - -msgid "Failed RunAs" -msgstr "RunAs fehlgeschlagen" - -msgid "Failed RunAsGroup" -msgstr "RunAsGroup fehlgeschlagen" - -msgid "Failed hosts/hostgroups" -msgstr "Fehler bei Hosts/Hostgruppen" - -msgid "Failed logins" -msgstr "Fehlgeschlagene Logins" - -msgid "Failed members" -msgstr "Fehler bei Mitgliedern" - -msgid "Failed service/service groups" -msgstr "Fehler bei Diensten/Dienstgruppen" - -msgid "Failed to add" -msgstr "Hinzufügen fehlgeschlagen" - -msgid "Failed to create key!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -msgid "Failed to create random key!\n" -msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" - -msgid "Failed to remove" -msgstr "Entfernen fehlgeschlagen" - -msgid "Failed users/groups" -msgstr "Fehlerhafte Benutzer/Gruppen" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Fehler beim Dekodieren der Signaturanfrage für das Zertifikat: %s" - -msgid "Failure reset interval" -msgstr "Fehler Resetintervall" - -msgid "False" -msgstr "Falsch" - -msgid "Fax Number" -msgstr "Faxnummer" - -#, python-format -msgid "File %(file)s not found" -msgstr "Datei %(file)s nicht gefunden" - -msgid "File to store the certificate in." -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "Filter" -msgstr "Filter" - -msgid "Find" -msgstr "Suchen" - -msgid "Fingerprint" -msgstr "Fingerabdruck" - -msgid "Fingerprint (SHA1)" -msgstr "Fingerabdruck (SHA1)" - -msgid "Fingerprint Type" -msgstr "Fingerabdruck-Typ" - -msgid "First" -msgstr "Erste" - -msgid "First Code" -msgstr "Erster Code" - -msgid "First OTP" -msgstr "Erstes OTP" - -msgid "First date/time the token can be used" -msgstr "Ab diesem Datum kann der Token benutzt werden" - -msgid "First name" -msgstr "Vorname" - -msgid "Flags" -msgstr "Flags" - -msgid "Force Update" -msgstr "Update erzwingen" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"Der Forest '%(forest)s' besitzt bereits eine Vertrauensstellung zu Forest(s) " -"%(domains)s und kann daher keine Vertrauensstellung zu '%(conflict)s' " -"aufbauen" - -msgid "Forward to server instead of running locally" -msgstr "Zum Server weiterleiten, anstatt lokal auszuführen" - -#, python-format -msgid "Found '%(value)s'" -msgstr "»%(value)s« gefunden" - -msgid "Full name" -msgstr "Vollständiger Name" - -msgid "GECOS" -msgstr "GECOS" - -msgid "GID" -msgstr "Gruppen-ID" - -msgid "GID (use this option to set it manually)" -msgstr "Gruppen-ID (verwenden Sie diese Option, um die ID manuell anzugeben)" - -msgid "General" -msgstr "Allgemein" - -msgid "Generate a random user password" -msgstr "Ein zufälliges Benutzerpasswort erzeugen" - -msgid "Get" -msgstr "Abrufen" - -msgid "Granting privilege to roles" -msgstr "Gebe Berechtigung den Rollen" - -msgid "Group" -msgstr "Gruppe" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Gruppe »%s« existiert nicht" - -msgid "Group ID Number" -msgstr "Gruppen-ID" - -msgid "Group Options" -msgstr "Gruppenoptionen" - -msgid "Group Settings" -msgstr "Gruppeneinstellungen" - -msgid "Group Type" -msgstr "Gruppentyp" - -msgid "Group description" -msgstr "Gruppenbeschreibung" - -msgid "Group name" -msgstr "Gruppenname" - -msgid "Group to override" -msgstr "Gruppe zum Überschreiben" - -msgid "Grouping Type" -msgstr "Gruppierungstyp" - -msgid "Grouping to which the rule applies" -msgstr "Gruppierung, auf die die Regel angewendet wird" - -msgid "Groups" -msgstr "Gruppen" - -msgid "Groups allowed to create keytab" -msgstr "Gruppen die Schlüsseltabelle erstellen dürfen" - -msgid "Groups allowed to retrieve keytab" -msgstr "Gruppen die Schlüsseltabelle abrufen dürfen" - -msgid "HBAC Rule" -msgstr "HBAC-Regel" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "HBAC Regel die Benutzer, Gruppen und Hostgruppen definiert" - -msgid "HBAC Rules" -msgstr "HBAC-Regeln" - -msgid "HBAC Service" -msgstr "HBAC-Dienst" - -msgid "HBAC Service Group" -msgstr "HBAC-Dienstgruppe" - -msgid "HBAC Service Groups" -msgstr "HBAC-Dienstgruppen" - -msgid "HBAC Services" -msgstr "HBAC-Dienste" - -msgid "HBAC Test" -msgstr "HBAC Test" - -msgid "HBAC rule" -msgstr "HBAC-Regel" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "HBAC-Regel %(rule)s nicht gefunden" - -msgid "HBAC rules" -msgstr "HBAC-Regeln" - -msgid "HBAC service" -msgstr "HBAC-Dienst" - -msgid "HBAC service description" -msgstr "Beschreibung des HBAC-Dienstes" - -msgid "HBAC service group" -msgstr "HBAC-Dienstgruppe" - -msgid "HBAC service group description" -msgstr "Beschreibung der HBAC-Dienstgruppe" - -msgid "HBAC service groups" -msgstr "HBAC-Dienstgruppen" - -msgid "HBAC services" -msgstr "HBAC-Dienste" - -msgid "HOTP Authentication Window" -msgstr "HOTP Authentifizierungsfenster" - -msgid "HOTP Synchronization Window" -msgstr "HOTP Sychnronisierungsfenster" - -msgid "HTTP Error" -msgstr "HTTP-Fehler" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Hardwareplattform des Hosts (z.B. Lenovo T400)" - -msgid "Hide details" -msgstr "Details verbergen" - -msgid "History size" -msgstr "Historie" - -msgid "Home directory" -msgstr "Home-Verzeichnis" - -msgid "Home directory base" -msgstr "Basis für Home-Verzeichnisse" - -msgid "Horizontal Precision" -msgstr "Horizontale Genauigkeit" - -msgid "Host" -msgstr "Host" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Host »%(host)s« nicht gefunden" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" - -msgid "Host Certificate" -msgstr "Host-Zertifikat" - -msgid "Host Group" -msgstr "Hostgruppe" - -msgid "Host Group Settings" -msgstr "Hostgruppen-Einstellungen" - -msgid "Host Groups" -msgstr "Host-Gruppen" - -msgid "Host Groups allowed to create keytab" -msgstr "Hostgruppen die Schlüsseltabelle erstellen dürfen" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Hostgruppen die Schlüsseltabelle abrufen dürfen" - -msgid "Host Name" -msgstr "Host-Name" - -msgid "Host Settings" -msgstr "Host Einstellungen" - -msgid "Host category" -msgstr "Host-Kategorie" - -msgid "Host category the ACL applies to" -msgstr "Hostkategorie auf die ACL angewendet wird" - -msgid "Host category the rule applies to" -msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Hardwareplattform (z.B. \"Lenovo T61\")" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Ort des Hosts (z.B. \"Baltimore, MD\")" - -msgid "Host name" -msgstr "Hostname" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Betriebssystem und Version (z.B. \"Fedora 9\")" - -msgid "Host-group" -msgstr "Hostgruppen" - -msgid "Hostname" -msgstr "Hostname" - -msgid "Hostname of this server" -msgstr "Hostname dieses Servers" - -msgid "Hosts" -msgstr "Hosts" - -msgid "Hosts allowed to create keytab" -msgstr "Hosts die Schlüsseltabelle erstellen dürfen" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Hosts die Schlüsseltabelle abrufen dürfen" - -msgid "IP Address" -msgstr "IP-Adresse" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "IP-Adresse %(ip)s ist bereits Domain %(domain)s zugewiesen." - -msgid "IPA Error" -msgstr "IPA-Fehler" - -msgid "IPA Server" -msgstr "IPA-Server" - -msgid "IPA Server to use" -msgstr "Zu verwendender IPA-Server" - -msgid "IPA Servers" -msgstr "IPA-Server" - -msgid "IPA master capable of PKINIT" -msgstr "IPA Master mit Fähigkeit für PKINIT " - -msgid "IPA master which can process PKINIT requests" -msgstr "IPA Master, der PKINIT Anfragen bearbeiten kann" - -msgid "IPA server hostname" -msgstr "IPA-Server Hostname" - -msgid "Identity" -msgstr "Identität" - -msgid "Identity Settings" -msgstr "Identitätseinstellungen" - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"Bei dauerhaftem Problem wenden Sie sich bitte an den Systemadministrator." - -msgid "Include Disabled" -msgstr "Deaktivierte einschließen" - -msgid "Include Enabled" -msgstr "Aktivierte einschließen" - -msgid "Inclusive Regex" -msgstr "Einschließende Regex" - -msgid "Indirect" -msgstr "Indirekt" - -msgid "Indirect Member HBAC service" -msgstr "Indirekte Mitgli" - -msgid "Indirect Member HBAC service group" -msgstr "Indirekte Mitglieds-HBAC-Servicegruppe" - -msgid "Indirect Member groups" -msgstr "Indirekte Mitglieds-Gruppen" - -msgid "Indirect Member host-groups" -msgstr "Indirekte Mitglieds-Hostgruppen" - -msgid "Indirect Member hosts" -msgstr "Indirekte Mitglieds-Hosts" - -msgid "Indirect Member of roles" -msgstr "Indirektes Mitglied von Rollen" - -msgid "Indirect Member permissions" -msgstr "Indirekte Mitglieds-Berechtigungen" - -msgid "Indirect Member users" -msgstr "Indirekte Mitglieds-Benutzer" - -msgid "Indirect Membership" -msgstr "Indirekte Mitgliedschaft" - -msgid "Inherited from server configuration" -msgstr "Vererbt von Serverkonfiguration" - -msgid "Initial counter for the HOTP token" -msgstr "Startwert des HOTP-Zählers" - -msgid "Initials" -msgstr "Initialen" - -msgid "Input form contains invalid or missing values." -msgstr "Eingabeformular enthält ungültige oder fehlende Werte." - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Unzureichender Zugriff: %(info)s" - -msgid "Internal Error" -msgstr "Interner Fehler" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Ungültige JSON-RPC-Anfrage: %(error)s" - -msgid "Invalid credentials" -msgstr "Ungültige Zugangsdaten" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" - -msgid "Invalid format. Should be name=value" -msgstr "Ungültiges Format. Sollte name=wert sein." - -msgid "Is zone active?" -msgstr "Ist die Zone aktiv?" - -msgid "Issue" -msgstr "Ausgeben" - -msgid "Issued By" -msgstr "Ausgegeben von" - -msgid "Issued On" -msgstr "Ausgegeben am" - -msgid "Issued To" -msgstr "Ausgegeben an" - -msgid "Issuer" -msgstr "Ausgabestelle" - -msgid "Job Title" -msgstr "Tätigkeit" - -msgid "Kerberos Key" -msgstr "Kerberos-Schlüssel" - -msgid "Kerberos Key Not Present" -msgstr "Kerberos-Schlüssel nicht vorhanden" - -msgid "Kerberos Ticket Policy" -msgstr "Kerberos-Ticket Richtlinien" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos-Fehler: %(major)s/%(minor)s" - -msgid "Kerberos keys available" -msgstr "Kerberos-Schlüssel verfügbar" - -msgid "Kerberos principal" -msgstr "Kerberos-Principal" - -msgid "Kerberos principal expiration" -msgstr "Kerberos-Principal Ablauf" - -msgid "Kerberos principal name for this host" -msgstr "Kerberos-Principal für diesen Host" - -msgid "Key" -msgstr "Schlüssel" - -msgid "Keytab" -msgstr "Schlüsseltabelle" - -msgid "LDAP URI" -msgstr "LDAP-URI" - -msgid "LDAP password" -msgstr "LDAP-Passwort" - -msgid "LDAP password (if not using Kerberos)" -msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" - -msgid "LDAP schema" -msgstr "LDAP-Schema" - -msgid "LDAP timeout" -msgstr "LDAP Timeout" - -msgid "Last" -msgstr "Letzte" - -msgid "Last date/time the token can be used" -msgstr "Bis zu diesem Datum kann der Token benutzt werden" - -msgid "Last failed authentication" -msgstr "Letzte fehlgeschlagene Authentifizierung" - -msgid "Last name" -msgstr "Nachname" - -msgid "Last successful authentication" -msgstr "Letzte erfolgreiche Authentifizierung" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Führende und angehängte Leerzeichen sind nicht erlaubt." - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Gültiger LDAP filter (z.B. ou=Engineering)" - -msgid "Length of TOTP token code validity" -msgstr "Dauer die ein TOTP Code gültig ist " - -msgid "Level" -msgstr "Level" - -msgid "List of deletions that failed" -msgstr "Liste der fehlgeschlagenen Löschvorgänge" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Liste der migrierten Objekte, nach Typ geordnet." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" -"Liste der Objekte, die nicht migriert werden konnten, nach Typ geordnet." - -msgid "Locality" -msgstr "Ort" - -msgid "Location" -msgstr "Ort" - -msgid "Location of the ACI" -msgstr "Ort der ACI" - -msgid "Lockout duration" -msgstr "Sperrdauer" - -msgid "Logged In As" -msgstr "Angemeldet als" - -msgid "Login shell" -msgstr "Anmeldeshell" - -msgid "MAC address" -msgstr "MAC-Adresse" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Mailing Address" -msgstr "Anschrift" - -msgid "Manage password policy for specific group" -msgstr "Passwortregel für eine bestimmte Gruppe bearbeiten" - -msgid "Manager" -msgstr "Manager" - -msgid "Map" -msgstr "Karte" - -msgid "Mark the token as disabled (default: false)" -msgstr "Token als deaktiviert markieren (Standard: false)" - -msgid "Master file" -msgstr "Masterdatei" - -msgid "Matched" -msgstr "Gefunden" - -msgid "Matched rules" -msgstr "Zutreffende Regeln" - -msgid "Max failures" -msgstr "Maximale Fehler" - -msgid "Max lifetime (days)" -msgstr "Max Dauer (Tage)" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" - -msgid "Maximum number of entries returned" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" - -msgid "Maximum password life must be greater than minimum." -msgstr "Maximale Lebensdauer muss größer als das Minimum sein." - -msgid "Maximum password lifetime (in days)" -msgstr "Maximale Passwortlebensdauer (in Tagen)" - -msgid "Maximum username length" -msgstr "Maximale Länge des Benutzernamens" +#, fuzzy +#| msgid "OTP tokens" +msgid "Remove OTP tokens" +msgstr "OTP Tokens" #, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Maximaler Wert ist ${value}" +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" -msgid "May not be empty" -msgstr "Darf nicht leer sein" +msgid "Show QR code" +msgstr "QR Code zeigen" -msgid "Member HBAC service" -msgstr "Mitglieds-HBAC-Dienst" +msgid "Show configuration uri" +msgstr "Konfigurations-URL zeigen" -msgid "Member HBAC service groups" -msgstr "Mitglieds-HBAC-Servicegruppen" +msgid "Counter-based (HOTP)" +msgstr "Zählerbasiert (HOTP)" -msgid "Member Host" -msgstr "Mitglieds-Host" +msgid "Time-based (TOTP)" +msgstr "Zeitbasiert (TOTP)" -msgid "Member groups" -msgstr "Mitglieds-Gruppen" +#, fuzzy +#| msgid "Attribute" +msgid "Add Custom Attribute" +msgstr "Attribut" -msgid "Member host-groups" -msgstr "Mitglieds-Hostgruppen" +#, fuzzy +#| msgid "Permissions" +msgid "Permission settings" +msgstr "Berechtigungen" -msgid "Member hosts" -msgstr "Mitglieds-Hosts" +#, fuzzy +#| msgid "Attribute Key" +msgid "Attribute breakdown" +msgstr "Attribut Schlüssel" -msgid "Member of" -msgstr "Mitglied von" +#, fuzzy +#| msgid "Service Settings" +msgid "Privilege Settings" +msgstr "Diensteinstellungen" -msgid "Member of a group" -msgstr "Mitglied einer Gruppe" +#, fuzzy +#| msgid "SSH public key:" +msgid "Public key:" +msgstr "Öffentliche SSH Schlüssel" -msgid "Member of groups" -msgstr "Mitglied der Gruppen" +#, fuzzy +#| msgid "SSH public key" +msgid "Set public key" +msgstr "Öffentlicher SSH Schlüssel" -msgid "Member of host-groups" -msgstr "Mitglied von Host-Gruppen" - -msgid "Member service groups" -msgstr "Mitglieds-Dienstgruppen" - -msgid "Member services" -msgstr "Mitglieds-Dienste" - -msgid "Member users" -msgstr "Mitglieds-Benutzer" - -msgid "Members that could not be added" -msgstr "Mitglieder, die nicht hinzugefügt werden konnten" - -msgid "Members that could not be removed" -msgstr "Mitglieder, die nicht entfernt werden konnten" - -msgid "Min length" -msgstr "Min Länge" - -msgid "Min lifetime (hours)" -msgstr "Min Dauer (Stunden)" - -msgid "Minimum length of password" -msgstr "Minimale Passwortlänge" - -msgid "Minimum number of character classes" -msgstr "Minimale Anzahl an Zeichenklassen" - -msgid "Minimum password lifetime (in hours)" -msgstr "Minimale Passwortlebensdauer (in Stunden)" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Minimaler Wert ist ${value}" - -msgid "Misc. Information" -msgstr "Weitere Informationen" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Fehlende oder ungültige HTTP-Referenz, %(referer)s" - -msgid "Missing values: " -msgstr "Fehlende Werte:" - -msgid "Mobile Telephone Number" -msgstr "Mobiltelefonnummer" - -msgid "Model" -msgstr "Modell" - -msgid "Modified" -msgstr "Geändert" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" geändert" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" geändert" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" geändert" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« geändert" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "OTP Token \"%(value)s\" geändert" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" geändert" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« geändert" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Benutzer »%(value)s« geändert" +msgid "Show/Set key" +msgstr "Zeige/Setze Schlüssel" msgid "Modified: key not set" msgstr "Geändert: Schlüssel nicht gesetzt" -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Wert von %(name)s auf »%(value)s« ändern?" - -msgid "Modify OTP configuration options." -msgstr "OTP Konfigurationsoptionen bearbeiten." - -msgid "Modify Sudo Command." -msgstr "Sudo-Befehl ändern." - -msgid "Modify a CA ACL." -msgstr "CA ACL ändern" - -msgid "Modify a OTP token." -msgstr "OTP Token bearbeiten" - -msgid "Modify a group password policy." -msgstr "Gruppen-Passwortregel bearbeiten." - -msgid "Modify a group." -msgstr "Eine Gruppe ändern." - -msgid "Modify a hostgroup." -msgstr "Hostgruppe ändern." - -msgid "Modify a role." -msgstr "Rolle ändern." - -msgid "Modify a stage user." -msgstr "Einen vorbereiteten Benutzer ändern." - -msgid "Modify a user." -msgstr "Einen Benutzer bearbeiten." - -msgid "Modify an HBAC rule." -msgstr "HBAC-Regel ändern" - -msgid "Modify an HBAC service group." -msgstr "HBAC-Dienstgruppe bearbeiten" - -msgid "Modify an HBAC service." -msgstr "HBAC Dienst ändern" - -msgid "Modify an existing IPA service." -msgstr "Einen existierenden IPA-Dienst bearbeiten." - -msgid "Modify configuration options." -msgstr "Konfigurationsoptionen bearbeiten." - -msgid "Modify information about a host." -msgstr "Hostinformationen ändern." - -msgid "Mount information" -msgstr "Einhänge-Informationen" - -msgid "Mount point" -msgstr "Einhängepunkt" - -msgid "Move deleted user into staged area" -msgstr "Gelöschten Benutzer in vorbereitete Benutzer verschieben" - -msgid "Must be an integer" -msgstr "Muss eine Ganzzahl sein" - -msgid "Name of command to export" -msgstr "Name des zu exportierenden Befehls" - -msgid "Name of host-group" -msgstr "Name der Hostgruppe" - -msgid "Name of method to export" -msgstr "Name des zu exportierenden Methode" - -msgid "Name of object to export" -msgstr "Name des zu exportierenden Objekts" - -msgid "Network Services" -msgstr "Netzwerkdienste" - -msgid "New ACI name" -msgstr "Neuer ACI-Name" - -msgid "New Certificate" -msgstr "Neues Zertifikat" - -msgid "New Password" -msgstr "Neues Passwort" - -msgid "New Principal Password" -msgstr "Neues Principal-Passwort" - -msgid "New Test" -msgstr "Neuer Test" - -msgid "New password is required" -msgstr "Neues Passwort wird benötigt" +msgid "Modified" +msgstr "Geändert" msgid "New: key not set" msgstr "Neu: Schlüssel nicht gesetzt" @@ -2629,66 +22526,1204 @@ msgstr "Neu: Schlüssel nicht gesetzt" msgid "New: key set" msgstr "Neu: Schlüssel gesetzt" -msgid "Next" -msgstr "Nächste" +#, fuzzy +#| msgid "password policy" +msgid "Add password policy" +msgstr "Passwortregel" -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." +msgid "Password Policy" +msgstr "Passwort-Regeln" + +#, fuzzy +#| msgid "password policies" +msgid "Remove password policies" +msgstr "Passwortregeln" + +#, fuzzy +#| msgid "Add Many" +msgid "Add ID range" +msgstr "Mehrere hinzufügen" + +#, fuzzy +#| msgid "Settings" +msgid "Range Settings" +msgstr "Einstellungen" + +msgid "Base ID" msgstr "" -"Keine DNS Server in der IPA Lokation %(location)s. Ohne DNS Servers arbeitet " -"die Lokation nicht wie erwartet." -msgid "No Valid Certificate" -msgstr "Kein gültiges Zertifikat" +msgid "Primary RID base" +msgstr "" -msgid "No credentials cache found" -msgstr "Keine Anmeldeinformationen-Cache gefunden" +msgid "Range size" +msgstr "" -msgid "No entries." -msgstr "Keine Einträge." +#, fuzzy +#| msgid "Domain" +msgid "Domain SID" +msgstr "Domain" -msgid "No file to read" -msgstr "Keine Datei zum Lesen" +msgid "Secondary RID base" +msgstr "" -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "KDC akzeptiert keine Schlüssel\n" +msgid "Remove ID ranges" +msgstr "" -msgid "No matching entries found" -msgstr "Keine passenden Einträge gefunden" +msgid "Active Directory domain" +msgstr "" -msgid "No option to delete specific record provided." -msgstr "Keine Option zum Löschen des spezifischen Datensatzes angegeben." +msgid "Active Directory domain with POSIX attributes" +msgstr "" -msgid "No option to modify specific record provided." -msgstr "Keine Option zum Ändern des spezifischen Datensatzes angegeben." +msgid "Detect" +msgstr "" + +#, fuzzy +#| msgid "Locality" +msgid "Local domain" +msgstr "Ort" + +#, fuzzy +#| msgid "trust" +msgid "IPA trust" +msgstr "Vertrauensstellung" + +msgid "Active Directory winsync" +msgstr "" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "Add RADIUS server" +msgstr "Radius Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "RADIUS Proxy Server Settings" +msgstr "Radius Server" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "Remove RADIUS servers" +msgstr "Radius Server" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "Update erzwingen" + +#, fuzzy +#| msgid "Default SELinux user" +msgid "Add SELinux user map" +msgstr "Vorgegebener SELinux-Benutzer" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Roles" +msgstr "Servername" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Role" +msgstr "Servername" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete Server" +msgstr "Einen Benutzer löschen" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add service" +msgstr "HBAC-Dienst" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Service Certificate" +msgstr "Neues Zertifikat" + +msgid "Service Settings" +msgstr "Diensteinstellungen" + +msgid "Provisioning" +msgstr "Provisioning" + +#, fuzzy +#| msgid "Member services" +msgid "Remove services" +msgstr "Mitglieds-Dienste" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove service '${primary_key}' from roles" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-brace-format +#| msgid "Remove hosts that can manage this service." +msgid "Remove hosts managing service '${primary_key}'" +msgstr "Hosts entfernen, die diesen Dienst verwalten können." + +#, fuzzy +#| msgid "Are you sure you want to restore selected users?" +msgid "Are you sure you want to unprovision this service?" +msgstr "" +"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" + +#, fuzzy +#| msgid "Provisioning" +msgid "Unprovisioning service" +msgstr "Provisioning" + +#, fuzzy +#| msgid "Service principal" +msgid "Service unprovisioned" +msgstr "Dienst-Principal" + +#, fuzzy +#| msgid "Kerberos Key Not Present" +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Kerberos-Schlüssel nicht vorhanden" + +msgid "SSH public keys" +msgstr "Öffentlicher SSH Schlüssel" + +msgid "SSH public key:" +msgstr "Öffentliche SSH Schlüssel" + +msgid "Set SSH key" +msgstr "SSH Schlüssel speichern" + +msgid "Are you sure you want to activate selected users?" +msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to disable ${object}?" +msgid "Are you sure you want to activate ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "${count} Benutzer aktiviert" + +#, fuzzy +#| msgid "stage user" +msgid "Add stage user" +msgstr "Vorbereiteter Benutzer" + +msgid "Stage users" +msgstr "Vorbereitete Benutzer" + +msgid "Preserved users" +msgstr "Aufbewahrte Benutzer" + +#, fuzzy +#| msgid "Preserved users" +msgid "Remove preserved users" +msgstr "Aufbewahrte Benutzer" + +#, fuzzy +#| msgid "stage users" +msgid "Remove stage users" +msgstr "Vorbereitete Benutzer" + +#, fuzzy +#| msgid "Are you sure you want to restore selected users?" +msgid "Are you sure you want to stage selected users?" +msgstr "" +"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" + +#, fuzzy, python-brace-format +#| msgid "${count} user(s) restored" +msgid "${count} users(s) staged" +msgstr "${count} user(s) wiederhergestellt" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to disable ${object}?" +msgid "Are you sure you want to stage ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" + +msgid "Are you sure you want to restore selected users?" +msgstr "" +"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete ${object}?" +msgid "Are you sure you want to restore ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "${count} user(s) wiederhergestellt" + +msgid "User categories" +msgstr "Benutzerkategorien" + +#, fuzzy +#| msgid "sudo command" +msgid "Add sudo command" +msgstr "Sudo-Befehl" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Remove sudo commands" +msgstr "Sudo-Befehle" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "sudo command group" +msgid "Add sudo command group" +msgstr "Sudo-Befehlsgruppe" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "sudo command groups" +msgid "Remove sudo command groups" +msgstr "Sudo-Befehlsgruppen" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "sudo rule" +msgid "Add sudo rule" +msgstr "Sudo-Regel" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Add sudo option" +msgstr "Sudo-Option" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Erlauben" + +msgid "Any Command" +msgstr "Jeder Befehl" + +msgid "Any Group" +msgstr "Jede Gruppe" + +msgid "Run Commands" +msgstr "Befehle ausführen" + +msgid "Deny" +msgstr "Verweigern" + +msgid "Access this host" +msgstr "Zugriff auf diesen Host" + +msgid "Option added" +msgstr "Optionen hinzugefügt" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "${count} Option(en) entfernt" + +#, fuzzy +#| msgid "sudo rules" +msgid "Remove sudo rules" +msgstr "Sudo-Regeln" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "Als Wer" + +msgid "Specified Commands and Groups" +msgstr "Spezifische Befehle und Gruppen" + +msgid "Specified Groups" +msgstr "Spezifische Gruppe" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Remove sudo options" +msgstr "Sudo-Option" + +#, fuzzy +#| msgid "Automember" +msgid "Autogenerated" +msgstr "Auto-Mitgliedschaft" + +msgid "Segment details" +msgstr "Segment Details" + +msgid "Replication configuration" +msgstr "Replikationseinstellungen" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "automount locations" +msgid "Remove IPA locations" +msgstr "Automount-Orte" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "Konto" + +#, fuzzy +#| msgid "trust" +msgid "Add trust" +msgstr "Vertrauensstellung" + +msgid "Administrative account" +msgstr "Administratives Konto" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "Vertrauenseinstellungen" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +#| msgid "Change password" +msgid "Pre-shared password" +msgstr "Passwort ändern" + +#, fuzzy +#| msgid "trusts" +msgid "Remove trusts" +msgstr "Vertrauensstellungen" + +msgid "Remove domains" +msgstr "" + +#, fuzzy +#| msgid "Redirection" +msgid "Trust direction" +msgstr "Umleitung" + +#, fuzzy +#| msgid "Request status" +msgid "Trust status" +msgstr "Anfragestatus" + +#, fuzzy +#| msgid "trust type" +msgid "Trust type" +msgstr "Vertrauensstellungstyp" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "Alternative UPN suffixes" +msgstr "UPN Suffixe" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "User attributes for SMB services" +msgstr "Nach HBAC-Diensten suchen." + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +#, fuzzy +#| msgid "Default location of home directories" +msgid "Drive to mount a home directory" +msgstr "Vorgegebener Ort für Home-Verzeichnisse" + +msgid "Account Settings" +msgstr "Kontoeinstellungen" + +msgid "Account Status" +msgstr "Kontostatus" + +msgid "Active users" +msgstr "Aktive Benutzer" + +#, fuzzy +#| msgid "Add a new user." +msgid "Add user" +msgstr "Einen neuen Benutzer hinzufügen." + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "Kontakteinstellungen" + +msgid "Delete mode" +msgstr "Lösch-Modus" + +msgid "Employee Information" +msgstr "Mitarbeiterinformationen" + +msgid "Error changing account status" +msgstr "Fehler beim Ändern des Kontostatus" + +msgid "Password expiration" +msgstr "Passwortablauf" + +msgid "Mailing Address" +msgstr "Anschrift" + +msgid "Misc. Information" +msgstr "Weitere Informationen" + +msgid "delete" +msgstr "löschen" + +msgid "preserve" +msgstr "aufbewahren" msgid "No private group" msgstr "Keine private Gruppe" -msgid "No response" -msgstr "Keine Antwort" +#, fuzzy +#| msgid "Member users" +msgid "Remove users" +msgstr "Mitglieds-Benutzer" -#, c-format -msgid "No values for %s" -msgstr "Keine Werte für %s" +#, fuzzy, python-brace-format +#| msgid "Remove members from a group." +msgid "Remove user '${primary_key}' from user groups" +msgstr "Mitglieder aus einer Gruppe entfernen." -msgid "No wait" -msgstr "Keine Wartezeit" +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" -msgid "Non-existent or invalid rules" -msgstr "Nicht-existente oder ungültige Regeln" +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove user '${primary_key}' from roles" +msgstr "Berechtigungen von Rolle entfernen." -msgid "Not After" -msgstr "Nicht nach" +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." -msgid "Not Before" -msgstr "Nicht vor" +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" -msgid "Not a managed group" -msgstr "Keine verwaltete Gruppe" +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"Sind sie sicher, dass sie den Nutzer ${action} möchten?
Die Änderung " +"wird sofort aktiv." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Klicken um zu ${action}" + +msgid "Unlock" +msgstr "Entsperren" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "SInd Sie sicher, dass Sie den Benutzer ${object} entsperren möchten?" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +#, fuzzy +#| msgid "Member Host" +msgid "Members" +msgstr "Mitglieds-Host" + +msgid "My User Vaults" +msgstr "" + +#, fuzzy +#| msgid "Owner" +msgid "Owners" +msgstr "Eigentümer" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "Dienste" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +#, fuzzy +#| msgid "Group Type" +msgid "Vault Type" +msgstr "Gruppentyp" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "User Groups" +msgid "User Vaults" +msgstr "Benutzergruppen" + +msgid "Current password is required" +msgstr "Aktuelles Passwort ist erforderlich" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Ihr Passwort läuft in ${days} Tagen ab." + +msgid "First OTP" +msgstr "Erstes OTP" + +msgid "New password is required" +msgstr "Neues Passwort wird benötigt" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "Token-Synchronisierung fehlgeschlagen" + +msgid "The username, password or token codes are not correct" +msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." + +msgid "Token was synchronized" +msgstr "Token wurde synchronisiert" + +msgid "Password change complete" +msgstr "Passwortänderung abgeschlossen" + +#, fuzzy +#| msgid "Your password expires in ${days} days." +msgid "Your password has expired. Please enter a new password." +msgstr "Ihr Passwort läuft in ${days} Tagen ab." + +msgid "Passwords must match" +msgstr "Passwörter müssen übereinstimmen" + +msgid "Password reset was not successful." +msgstr "Passwort konnte nicht zurückgesetzt werden" + +msgid "Reset your password." +msgstr "Passwort zurücksetzen." + +msgid "Second OTP" +msgstr "Zweites OTP" + +msgid "Verify Password" +msgstr "Passwort verifizieren" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge löschen wollen?" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "${count} Einträge gelöscht" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" +"Sind Sie sicher, dass Sie die ausgewählten Einträge deaktivieren wollen?" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "${count} Einträge deaktiviert" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "${count} Einträge aktiviert" + +msgid "Some entries were not deleted" +msgstr "Einige Einträge wurden nicht gelöscht" + +msgid "Quick Links" +msgstr "Schnell Links" + +msgid "Select All" +msgstr "Alle auswählen" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"Abfrage hat mehr Ergebnisse erzeugt als das konfigurierte Maximum. Zeige die " +"ersten ${counter} Ergebnisse." + +msgid "Unselect All" +msgstr "Alle abwählen" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "Arbeite" + +msgid "Audit" +msgstr "Audit" + +msgid "Authentication" +msgstr "Authentifizierung" + +msgid "Automount" +msgstr "Automount" + +msgid "DNS" +msgstr "DNS" + +#, fuzzy +#| msgid "Simulate use of Host-based access controls" +msgid "Host-Based Access Control" +msgstr "HBAC Nutzung simulieren" + +msgid "Identity" +msgstr "Identität" + +msgid "Network Services" +msgstr "Netzwerkdienste" + +msgid "Policy" +msgstr "Regeln" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "Topologie" + +#, fuzzy +#| msgid "Trust" +msgid "Trusts" +msgstr "Vertrauensstellung" + +msgid "True" +msgstr "Wahr" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "Erste" + +msgid "Last" +msgstr "Letzte" + +msgid "Next" +msgstr "Nächste" + +msgid "Page" +msgstr "Seite" + +msgid "Prev" +msgstr "Vorherige" + +msgid "Undo" +msgstr "Rückgängig" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "Alle Rückgängig" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Undo all changes in this field." +msgstr "Alle Principals in diesem Realm entfernen" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a decimal number" +msgstr "muss eine Dezimalzahl sein" + +#, fuzzy +#| msgid "read error\n" +msgid "Format error" +msgstr "Lesefehler\n" + +msgid "Must be an integer" +msgstr "Muss eine Ganzzahl sein" msgid "Not a valid IP address" msgstr "Keine gültige IP-Adresse" @@ -2699,1086 +23734,1111 @@ msgstr "Keine gültige IPv4-Adresse" msgid "Not a valid IPv6 address" msgstr "Keine gültige IPv6-Adresse" -msgid "Not allowed on non-leaf entry" -msgstr "Bei einem Nicht-Blatt-Eintrag nicht erlaubt" - -msgid "Not matched rules" -msgstr "Nicht zutreffende Regeln" - -msgid "Not registered yet" -msgstr "Noch nicht registriert" - -msgid "Number of conditions added" -msgstr "Anzahl der hinzugefügten Bedingungen" - -msgid "Number of conditions removed" -msgstr "Anzahl der entfernten Bedingungen" - -msgid "Number of days's notice of impending password expiration" -msgstr "Anzahl der Tage die vor einem Passwortablauf gewarnt wird" - -msgid "Number of digits each token code will have" -msgstr "Zeichenanzahl die jeder Token-Code haben wird" - -msgid "Number of entries returned" -msgstr "Anzahl der zurückgegebenen Einträge" - -msgid "Number of members added" -msgstr "Zahl der hinzugefügten Mitglieder" - -msgid "Number of members removed" -msgstr "Anzahl der entfernten Mitglieder" - -msgid "Number of plugins loaded" -msgstr "Anzahl der geladenen Plugins" - -msgid "Number of privileges added" -msgstr "Anzahl der hinzugefügten Berechtigungen" - -msgid "Number of privileges removed" -msgstr "Anzahl der entfernten Berechtigungen" - -msgid "OK" -msgstr "OK" - -msgid "OTP" -msgstr "OTP" - -msgid "OTP Configuration" -msgstr "OTP Konfiguration" - -msgid "OTP Token" -msgstr "OTP Token" - -msgid "OTP Token Settings" -msgstr "OTP Token Einstellungen" - -msgid "OTP Tokens" -msgstr "OTP Token" - -msgid "OTP configuration options" -msgstr "OTP-Konfigurationsoptionen" - -msgid "OTP set" -msgstr "OTP gesetzt" - -msgid "OTP token" -msgstr "OTP Token" - -msgid "OTP tokens" -msgstr "OTP Tokens" - -msgid "One Time Password" -msgstr "Einmalpasswort" - -msgid "One of group, permission or self is required" -msgstr "Eines von »group«, »permission« oder »self« wird benötigt" - -msgid "One time password commands" -msgstr "Einmalpasswort Befehle" - -msgid "Only one value is allowed" -msgstr "Nur ein Wert ist erlaubt" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Betriebssystem und Version des Hosts (z.B. Fedora 20)" - -msgid "Operating system" -msgstr "Betriebssystem" - -msgid "Option added" -msgstr "Optionen hinzugefügt" - -msgid "Options" -msgstr "Optionen" - -msgid "Order" -msgstr "Reihenfolge" - -msgid "Org. Unit" -msgstr "Org. Einheit" - -msgid "Organization" -msgstr "Organisation" - -msgid "Organizational Unit" -msgstr "Organisationseinheit" - -msgid "Other Record Types" -msgstr "Andere Datensatztypen" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Nicht genügend Speicher!\n" - -msgid "Out of memory\n" -msgstr "Nicht genügend Speicher\n" - -#, c-format -msgid "Out of memory \n" -msgstr "Nicht genügend Speicher\n" - -#, c-format -msgid "Out of memory!" -msgstr "Nicht genügend Speicher!" - -msgid "Out of memory!?\n" -msgstr "Nicht genügend Speicher!?\n" - -msgid "Output filename" -msgstr "Name der Ausgabedatei" - -msgid "Output only on errors" -msgstr "Ausgabe nur bei Fehlern" - -msgid "Override inherited settings" -msgstr "Vererbte Einstellungen überschreiben" - -msgid "Owner" -msgstr "Eigentümer" - -msgid "PAD" -msgstr "PAD" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "POSIX" -msgstr "POSIX" - -msgid "Page" -msgstr "Seite" - -msgid "Pager Number" -msgstr "Pagernummer" - -msgid "Password" -msgstr "Passwort" - -msgid "Password Expiration Notification (days)" -msgstr "Benachrichtigung über den Passwortablauf (Tage)" - -msgid "Password Policies" -msgstr "Passwortregeln" - -msgid "Password Policy" -msgstr "Passwort-Regeln" - -msgid "Password change complete" -msgstr "Passwortänderung abgeschlossen" - -msgid "Password expiration" -msgstr "Passwortablauf" - -msgid "Password history size" -msgstr "Größe der Passworthistorie" - -msgid "Password plugin features" -msgstr "Passwort-Plugin-Funktionen" - -msgid "Password reset was not successful." -msgstr "Passwort konnte nicht zurückgesetzt werden" - -msgid "Passwords do not match" -msgstr "Passwörter stimmen nicht überein" - -msgid "Passwords do not match!" -msgstr "Passwörter stimmen nicht überein!" - -msgid "Passwords must match" -msgstr "Passwörter müssen übereinstimmen" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "Nach dieser Zeit wird der Fehlerzähler zurückgesetzt" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Während dieser Zeit wird der Login gesperrt (Sekunden)" - -msgid "Permission" -msgstr "Berechtigung" - -msgid "Permission ACI grants access to" -msgstr "Berechtigungs-ACI erlaubt Zugriff auf" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "Zugriff verweigert: %(file)s" - -msgid "Permission name" -msgstr "Berechtigungsname" - -msgid "Permission value" -msgstr "Berechtigungswert" - -msgid "Permissions" -msgstr "Berechtigungen" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "Berechtigungen (read, write). Standard ist write" - -msgid "Platform" -msgstr "Plattform" - -msgid "Please try the following options:" -msgstr "Bitte versuchen Sie die folgenden Optionen:" - -msgid "Policy" -msgstr "Regeln" - -msgid "Port" -msgstr "Port" - -msgid "Positional arguments" -msgstr "Positionale Argumente" - -msgid "Preference" -msgstr "Bevorzugung" - -msgid "Preferred Language" -msgstr "Bevorzugte Sprache" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Präfix zur Unterscheidung der ACI-Typen (permission, delegation, " -"selfservice, none)" - -msgid "Preserved user" -msgstr "Aufbewahrter Benutzer" - -msgid "Preserved users" -msgstr "Aufbewahrte Benutzer" - -msgid "Prev" -msgstr "Vorherige" - -msgid "Primary key only" -msgstr "Nur primärer Schlüssel" - -msgid "Principal" -msgstr "Principal" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" -"Der Principal %(principal)s kann nicht authentifiziert werden: %(message)s" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "Principal ist nicht in der Form user@REALM: '%(principal)s'" - -msgid "Principal name" -msgstr "Principal-Name" - -msgid "Print debugging information" -msgstr "Ausgabe von Debug-Informationen" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Gibt die Einträge so aus, wie sie auf dem Server gespeichert sind. Dies " -"wirkt sich nur auf das Ausgabeformat aus." - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Die rohe XML-RPC-Ausgabe im GSSAPI-Modus anzeigen" - -msgid "Priority" -msgstr "Priorität" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" - -msgid "Profile ID" -msgstr "Profil-ID" - -msgid "Profile category" -msgstr "Profilkategorie" - -msgid "Profile category the ACL applies to" -msgstr "Profilkategorie auf die ACL angewendet wird" - -msgid "Profiles" -msgstr "Profile" - -msgid "Prompt to set the user password" -msgstr "Zum Setzen des Passworts auffordern" - -msgid "Provisioning" -msgstr "Provisioning" - -msgid "Query current Domain Level." -msgstr "Aktuelles Domain Level abfragen." +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Maximaler Wert ist ${value}" #, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." +msgid "Minimum value is ${value}" +msgstr "Minimaler Wert ist ${value}" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" msgstr "" -"Abfrage hat mehr Ergebnisse erzeugt als das konfigurierte Maximum. Zeige die " -"ersten ${counter} Ergebnisse." -msgid "Quick Links" -msgstr "Schnell Links" +#, fuzzy +#| msgid "read error\n" +msgid "Parse error" +msgstr "Lesefehler\n" -msgid "Quiet mode. Only errors are displayed." -msgstr "Stiller Modus. Nur Fehler werden ausgegeben." +#, fuzzy +#| msgid "Must be an integer" +msgid "Must be a positive number" +msgstr "Muss eine Ganzzahl sein" -msgid "RADIUS Servers" -msgstr "Radius Server" +#, fuzzy, python-brace-format +#| msgid "%(port)s is not a valid port" +msgid "'${port}' is not a valid port" +msgstr "%(port)s kein gültiger Port" -msgid "RADIUS proxy configuration" -msgstr "RADIUS-Proxy Konfiguration" - -msgid "RADIUS proxy username" -msgstr "RADIUS-Proxy Benutzername" - -msgid "Random password" -msgstr "Zufälliges Passwort" - -msgid "Realm name" -msgstr "Realm-Name" - -msgid "Reason" -msgstr "Grund" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Grund für den Widerruf des Zertifikats (0-10)" - -msgid "Rebuild auto membership" -msgstr "Auto-Mitgliedschaft neu erstellen" - -msgid "Rebuild auto membership." -msgstr "Auto-Mitgliedschaft neu erstellen" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" -"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" - -msgid "Rebuild membership for specified hosts" -msgstr "Auto-Mitgliedschaft für ausgewählte Hosts neu erstellen" - -msgid "Rebuild membership for specified users" -msgstr "Auto-Mitgliedschaft für ausgewählte Benutzer neu erstellen" - -msgid "Record name" -msgstr "Datensatzname" - -msgid "Record not found." -msgstr "Datensatz nicht gefunden." - -msgid "Record type" -msgstr "Datensatztyp" - -msgid "Records" -msgstr "Datensätze" - -msgid "Redirection" -msgstr "Umleitung" - -msgid "Refresh" -msgstr "Neu laden" - -msgid "Refresh the page." -msgstr "Seite neu laden." - -msgid "Regular Expression" -msgstr "Regulärer Ausdruck" - -msgid "Reload the browser." -msgstr "Browser neu laden." - -msgid "Remove a manager to the user entry" -msgstr "Manager vom Benutzer entfernen" - -msgid "Remove all principals in this realm" -msgstr "Alle Principals in diesem Realm entfernen" - -msgid "Remove entries from DNS" -msgstr "DNS Einträge löschen" - -msgid "Remove hosts that can manage this host." -msgstr "Hosts entfernen die diesen Host verwalten dürfen." - -msgid "Remove hosts that can manage this service." -msgstr "Hosts entfernen, die diesen Dienst verwalten können." - -msgid "Remove members from a group." -msgstr "Mitglieder aus einer Gruppe entfernen." - -msgid "Remove members from a hostgroup." -msgstr "Mitglieder von Hostgruppe entfernen." - -msgid "Remove members from a role." -msgstr "Mitglieder von Rolle entfernen." - -msgid "Remove members from an HBAC service group." -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -msgid "Remove privileges from a role." -msgstr "Berechtigungen von Rolle entfernen." - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Dienste von einer HBAC-Gruppe entfernen." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." - -msgid "Remove users and groups from an HBAC rule." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -msgid "Remove users that can manage this token." -msgstr "Nutzer entfernen die diesen Token verwalten können" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Principal %s wird entfernt\n" - -msgid "Rename" -msgstr "Umbenennen" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI umbenannt zu \"%(value)s\"" - -msgid "Replacement" -msgstr "Ersetzung" - -msgid "Replication configuration" -msgstr "Replikationseinstellungen" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "Anfrage mit Status %(status)s fehlgeschlagen: %(reason)s" - -msgid "Request id" +#, fuzzy +#| msgid "Request id" +msgid "Required field" msgstr "Anfrage-ID" -msgid "Request status" -msgstr "Anfragestatus" - -msgid "Reset" -msgstr "Zurücksetzen" - -msgid "Reset OTP" -msgstr "OTP zurücksetzen" - -msgid "Reset Password" -msgstr "Passwort zurücksetzen" - -msgid "Reset your password." -msgstr "Passwort zurücksetzen." - -msgid "Restore" -msgstr "Wiederherstellen" - -msgid "Result of simulation" -msgstr "Ergebnis der Simulation" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Ergebnisse wurden abgeschnitten, versuchen Sie eine spezifischere Suche." - -msgid "Retrieve an existing certificate." -msgstr "Ein existierendes Zertifikat holen." - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " -"die Befehlsausgabe aus." - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Abruf der Zertifikatkette fehlgeschlagen: %s" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Abfrage des CA-Status fehlgeschlagen: %s" - -msgid "Retry" -msgstr "Erneut versuchen" - -msgid "Return to the main page and retry the operation" -msgstr "Zur Hauptseite zurückkehren und Vorgang wiederholen" - -msgid "Revert" -msgstr "Rückgängig" - -msgid "Revocation reason" -msgstr "Grund des Widerrufs" - -msgid "Revoke" -msgstr "Widerrufen" - -msgid "Revoke a certificate." -msgstr "Ein Zertifikat widerrufen." - -msgid "Revoked" -msgstr "Widerrufen" - -msgid "Rights" -msgstr "Rechte" +#, fuzzy +#| msgid "unsupported trust type" +msgid "Unsupported value" +msgstr "nicht unterstützte Vetrauensstellung" msgid "Role" msgstr "Rolle" -msgid "Role name" -msgstr "Rollenname" - -msgid "Roles" -msgstr "Rollen" - -msgid "Rule name" -msgstr "Regelname" - -msgid "Rule status" -msgstr "Regelstatus" - -msgid "Rule type" -msgstr "Regeltyp" - -msgid "Rule type (allow)" -msgstr "Regeltyp (erlauben)" - -msgid "Rules" -msgstr "Regeln" - -msgid "Run Commands" -msgstr "Befehle ausführen" - -msgid "Run Test" -msgstr "Test Starten" - -msgid "SELinux Options" -msgstr "SELinux-Optionen" +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" #, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "SELinux Benutzer '%(user)s' ist ungültig: %(error)s" +msgid "Deleted role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" -msgid "SHA1 Fingerprint" -msgstr "SHA1-Fingerabdruck" +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" -msgid "SID" -msgstr "SID" +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" -msgid "SSH public key" -msgstr "Öffentlicher SSH Schlüssel" +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"IPA-Server\n" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "Server" + +msgid "servers" +msgstr "Server" + +msgid "IPA Servers" +msgstr "IPA-Server" + +#, fuzzy +#| msgid "Service category" +msgid "Server location" +msgstr "Dienstkategorie" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service weight" +msgstr "Diensteinstellungen" + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Weight for server services" +msgstr "Nach IPA-Diensten suchen." + +#, fuzzy +#| msgid "Service Settings" +msgid "Service relative weight" +msgstr "Diensteinstellungen" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#, fuzzy +#| msgid "Disabled service \"%(value)s\"" +msgid "Enabled server roles" +msgstr "Dienst »%(value)s« deaktiviert" + +msgid "List of enabled roles" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Modify information about an IPA server." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "Fehler auf Server '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, fuzzy +#| msgid "This entry is already enabled" +msgid "Server has already been deleted" +msgstr "Dieser Eintrag ist bereits aktiviert" + +msgid "Agreements deleted" +msgstr "" + +#, fuzzy +#| msgid "Some entries were not deleted" +msgid "Following segments were not deleted:" +msgstr "Einige Einträge wurden nicht gelöscht" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "must be \"%s\"" +msgstr "muss '%(value)s' sein" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to perform server connection check" +msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "Status" + +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "Servername" + +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Passwort für \"%(value)s\" geändert" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Member principals" +msgstr "Kerberos-Principal" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "Mitglied %s" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation." +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "service delegation rule" +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." + +#, fuzzy +#| msgid "delegations" +msgid "service delegation rules" +msgstr "Delegationen" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation rules" +msgstr "Diensteinstellungen" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation rule" +msgstr "Diensteinstellungen" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, fuzzy +#| msgid "Delegation name" +msgid "service delegation target" +msgstr "Delegationsname" + +#, fuzzy +#| msgid "Service Settings" +msgid "service delegation targets" +msgstr "Diensteinstellungen" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation targets" +msgstr "Diensteinstellungen" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation target" +msgstr "Diensteinstellungen" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(port)s is not a valid port" +msgid "%(user)s is not a POSIX user" +msgstr "%(port)s kein gültiger Port" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "LDAP-URI" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users not found" +msgstr "Vorgegebene Gruppe für neue Benutzer" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Disable the Kerberos key, SSL certificate and all services of a host." +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded host certificate" +msgstr "Base-64-kodiertes Serverzertifikat" + +#, fuzzy +#| msgid "Principal name" +msgid "Principal alias" +msgstr "Principal-Name" msgid "SSH public key fingerprint" msgstr "Fingerabdruck des öffentlichen SSH-Schlüssels" -msgid "SSH public key:" -msgstr "Öffentliche SSH Schlüssel" +#, fuzzy +#| msgid "Authentication" +msgid "Authentication Indicators" +msgstr "Authentifizierung" -msgid "SSH public keys" -msgstr "Öffentlicher SSH Schlüssel" +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" #, python-format -msgid "Same as --%s" -msgstr "Das gleiche wie --%s" - -msgid "Save" -msgstr "Speichern" +msgid "Added host \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" #, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "Schema ist aktuell (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgid "Deleted host \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" -msgid "Search" -msgstr "Suchen" +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" -msgid "Search Options" -msgstr "Suchoptionen" +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" -msgid "Search for DNS resources." -msgstr "Nach DNS-Ressourcen suchen." +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" -msgid "Search for HBAC rules." -msgstr "Nach HBAC-Regeln suchen." +#, fuzzy +#| msgid "priority cannot be set on global policy" +msgid "Password cannot be set on enrolled host." +msgstr "Priorität der globalen Regel kann nicht gesetzt werden" -msgid "Search for HBAC services." -msgstr "Nach HBAC-Diensten suchen." +msgid "cn is immutable" +msgstr "" -msgid "Search for IPA services." -msgstr "Nach IPA-Diensten suchen." +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" -msgid "Search for OTP token." -msgstr "OTP Token suchen." +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" -msgid "Search for Sudo Commands." -msgstr "Nach Sudo-Befehlen suchen." +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" -msgid "Search for Sudo Rule." -msgstr "Nach Sudo-Regel suchen." +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" -msgid "Search for an HBAC service group." +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Host \"%(value)s\" hinzugefügt" + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove principal alias from a host entry" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete Class of Service entry" +msgstr "Einen IPA-Dienst entfernen." + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify Class of Service entry" +msgstr "HBAC-Dienstgruppe bearbeiten" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for Class of Service entry" msgstr "Suche nach HBAC Dienstgruppe" -msgid "Search for an automount location." -msgstr "Automount-Ort suchen." +msgid "password policy" +msgstr "Passwortregel" -msgid "Search for group password policies." -msgstr "Suche nach Gruppen-Passwortregeln" +msgid "password policies" +msgstr "Passwortregeln" -msgid "Search for groups." -msgstr "Nach Gruppen suchen." +msgid "Password Policies" +msgstr "Passwortregeln" -msgid "Search for hostgroups." -msgstr "Nach Hostgruppen suchen." +msgid "Max repeat" +msgstr "" -msgid "Search for hosts." -msgstr "Nach Hosts suchen." +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" -msgid "Search for roles." -msgstr "Nach Rollen suchen." +msgid "Max sequence" +msgstr "" -msgid "Search for stage users." -msgstr "Nach vorbereiteten Benutzern suchen." +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" -msgid "Search for users." -msgstr "Nach Benutzern suchen." +msgid "Dictionary check" +msgstr "" -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Das Suchergebnis wurde gekürzt: %(reason)s" +msgid "Check if the password is a dictionary word" +msgstr "" -msgid "Search size limit" -msgstr "Größenlimit für Suche" +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Benutzername" -msgid "Search time limit" -msgstr "Zeitlimit für Suche" +msgid "Check if the password contains the username" +msgstr "" -msgid "Second Code" -msgstr "Zweiter Code" +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" -msgid "Second OTP" -msgstr "Zweites OTP" +msgid "Maximum password life must be greater than minimum." +msgstr "Maximale Lebensdauer muss größer als das Minimum sein." -msgid "Segment details" -msgstr "Segment Details" +msgid "cannot delete global password policy" +msgstr "Die Globale Passwortregel kann nicht gelöscht werden" -msgid "Select All" -msgstr "Alle auswählen" +msgid "priority cannot be set on global policy" +msgstr "Priorität der globalen Regel kann nicht gesetzt werden" -msgid "Select entries to be removed." -msgstr "Einträge zum löschen auswählen." - -msgid "Self" -msgstr "Selbst" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" #, python-format msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" msgstr "" -"Semantik von %(label)s wurde geändert. %(current_behavior)s\n" -"%(hint)s" +"Alternativ sind folgende Server in der Lage den Befehl auszuführen: " +"%(masters)s" -msgid "Serial" -msgstr "Seriennummer" - -msgid "Serial Number" -msgstr "Seriennummer" - -msgid "Serial Number (hex)" -msgstr "Seriennummer (hex)" - -msgid "Serial number" -msgstr "Seriennummer" - -msgid "Serial number (hex)" -msgstr "Seriennummer (hex)" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgid "AD Trust setup" msgstr "" -"Seriennummer in Dezimalschreibweise oder (bei Präfix 0x) in " -"Hexadezimalschreibweise" - -msgid "Server" -msgstr "Server" - -msgid "Server Name" -msgstr "Servername" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" - -msgid "Server name" -msgstr "Servername" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Entfernen des Servers abgebrochen: %(reason)s." - -msgid "Service" -msgstr "Dienst" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Service '%(service)s' in Kerberos-Datenbank nicht gefunden" - -msgid "Service Groups" -msgstr "Dienstgruppen" - -msgid "Service Settings" -msgstr "Diensteinstellungen" - -msgid "Service category" -msgstr "Dienstkategorie" - -msgid "Service category the ACL applies to" -msgstr "Dienstkategorie auf die ACL angewendet wird" - -msgid "Service group name" -msgstr "Dienstgruppenname" - -msgid "Service name" -msgstr "Dienstname" - -msgid "Service principal" -msgstr "Dienst-Principal" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Dienst-Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Principal des Dienstes folgt nicht der Form »Dienst/voll ausgeschriebener " -"Hostname«: %(reason)s" - -msgid "Services" -msgstr "Dienste" - -msgid "Session error" -msgstr "Sitzungsfehler" - -msgid "Set" -msgstr "Setzen" - -msgid "Set OTP" -msgstr "OTP setzen" - -msgid "Set SSH key" -msgstr "SSH Schlüssel speichern" - -msgid "Set a user's password." -msgstr "Passwort für einen Benutzer setzen." msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." msgstr "" -"Ein Attribut für ein Attribut-Wert-Paar setzen. Das Format ist " -"Attribut=Wert.\n" -"Bei Attributen mit mehreren Werten ersetzt der Befehl die bereits " -"vorhandenen Werte." - -msgid "Settings" -msgstr "Einstellungen" - -msgid "Show QR code" -msgstr "QR Code zeigen" - -msgid "Show Results" -msgstr "Ergebnisse anzeigen" - -msgid "Show all loaded plugins." -msgstr "Alle geladenen Plugins anzeigen." - -msgid "Show configuration uri" -msgstr "Konfigurations-URL zeigen" - -msgid "Show details" -msgstr "Details anzeigen" - -msgid "Show environment variables." -msgstr "Umgebungsvariablen anzeigen." - -msgid "Show the current OTP configuration." -msgstr "Aktuelle OTP Konfiguration anzeigen" - -msgid "Show the current configuration." -msgstr "Die aktuelle Konfiguration anzeigen." - -msgid "Show/Set key" -msgstr "Zeige/Setze Schlüssel" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Zeige ${start} bis ${end} von ${total} Einträgen." - -msgid "Simulate use of Host-based access controls" -msgstr "HBAC Nutzung simulieren" - -msgid "Size" -msgstr "Größe" - -msgid "Size Limit" -msgstr "Größenbeschränkung" - -msgid "Some entries were not deleted" -msgstr "Einige Einträge wurden nicht gelöscht" - -msgid "Specified Commands and Groups" -msgstr "Spezifische Befehle und Gruppen" - -msgid "Specified Groups" -msgstr "Spezifische Gruppe" - -msgid "Specified Hosts and Groups" -msgstr "Spezifische Hosts und Gruppen" - -msgid "Specified Services and Groups" -msgstr "Spezifische Dienste und Gruppen" - -msgid "Specified Users and Groups" -msgstr "Spezifische Benutzer und Gruppen" - -msgid "Stage" -msgstr "Vorbereiten" - -msgid "Stage User" -msgstr "Vorbereiteter Benutzer" - -msgid "Stage Users" -msgstr "Vorbereitete Benutzer" - -#, python-format -msgid "Stage user %s activated" -msgstr "Vorbereiteten Benutzer %s aktiviert" - -msgid "Stage users" -msgstr "Vorbereitete Benutzer" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Vorbereitetes Benutzerkonto \"%(value)s\"" - -msgid "State/Province" -msgstr "Staat/Bundesland" - -msgid "Status" -msgstr "Status" - -msgid "Street address" -msgstr "Straße" - -msgid "Structured" -msgstr "Strukturiert" - -msgid "Subject" -msgstr "Betreff" - -msgid "Submit a certificate signing request." -msgstr "Eine Signaturanfrage (CSR) senden." - -msgid "Subtree" -msgstr "Subtree" - -msgid "Subtree to apply ACI to" -msgstr "Subtree auf den ACI angewendet wird" - -msgid "Subtype" -msgstr "Untertyp" - -msgid "Success" -msgstr "Erfolgreich" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Sudo Command" -msgstr "Sudo-Befehl" - -msgid "Sudo Command Group" -msgstr "Sudo-Befehlsgruppe" - -msgid "Sudo Command Groups" -msgstr "Sudo-Befehlsgruppen" - -msgid "Sudo Commands" -msgstr "Sudo-Befehle" - -msgid "Sudo Option" -msgstr "Sudo-Option" - -msgid "Sudo Rule" -msgstr "Sudo-Regel" - -msgid "Sudo Rules" -msgstr "Sudo-Regeln" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Unterstützte Verschlüsselungstypen:\n" - -msgid "Sync OTP Token" -msgstr "OTP Token synchronisieren" - -msgid "Synchronize an OTP token." -msgstr "OTP Token synchronisieren." - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Syntaxfehler: %(error)s" - -msgid "TOTP Synchronization Window" -msgstr "TOTP Sychnronisierungsfenster" - -msgid "TOTP authentication Window" -msgstr "TOTP Authentifizierungsfenster" - -msgid "TOTP token / IPA server time difference" -msgstr "Differenz zwischen Token und Serverzeit" - -msgid "Target" -msgstr "Ziel" - -msgid "Target group" -msgstr "Ziel-Gruppe" - -msgid "Target host" -msgstr "Ziel-Host" - -msgid "Target your own entry (self)" -msgstr "Auf eigenen Eintrag anwenden (self)" - -msgid "Task DN" -msgstr "Aufgaben DN" - -#, python-format -msgid "Task DN = '%s'" -msgstr "Aufgaben DN = '%s'" - -msgid "Telephone Number" -msgstr "Telefonnummer" - -msgid "Test the ACI syntax but don't write anything" -msgstr "ACI-Syntax testen, aber nicht schreiben" - -msgid "Text Data" -msgstr "Textdaten" - -msgid "The IPA realm" -msgstr "Der IPA-Realm" - -msgid "The default users group cannot be removed" -msgstr "Die vorgegebene Benutzergruppe kann nicht entfernt werden" - -msgid "The group doesn't exist" -msgstr "Die Gruppe existiert nicht" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"Der Wert von »primary_key« des Eintrags, z.B. »jdoe« für einen Benutzer" - -msgid "The principal for this request doesn't exist." -msgstr "Der Principal für diese Anfrage existiert nicht" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Der Realm des Principals passt nicht zum Realm dieses IPA-Servers." +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." + +#, fuzzy +#| msgid "" +#| "Cannot perform the selected command without Samba 4 instance configured " +#| "on this machine. Make sure you have run ipa-adtrust-install on this " +#| "server." +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" +"Fetching domains from trusted forest failed. See details in the error_log" msgstr "" -"Das auf dem LDAP-Server verwendete Schema. Zulässige Werte sind RFC2307 und " -"RFC2307bis. Der Vorgabewert ist RFC2307bis." -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgid "trust" +msgstr "Vertrauensstellung" + +msgid "trusts" +msgstr "Vertrauensstellungen" + +msgid "Trust" +msgstr "Vertrauensstellung" + +msgid "SID blocklist incoming" msgstr "" -"Die Suchkriterien waren nicht spezifisch genug. 1 wurde erwartet, aber " -"%(found)d gefunden." -msgid "The topic or command name." -msgstr "Das Thema oder der Befehlsname" +msgid "SID blocklist outgoing" +msgstr "" -msgid "The username, password or token codes are not correct" -msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." +msgid "UPN suffixes" +msgstr "UPN Suffixe" + +#, fuzzy, python-brace-format +#| msgid "invalid DN (%s)" +msgid "invalid SID: {SID}" +msgstr "ungültiger DN (%s)" msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " msgstr "" -"Dieser Befehl erfordert die Existenz der \"editors\" Gruppe, diese wurde " -"jedoch nicht gefunden." -msgid "This command requires root access" -msgstr "Dieser Befehl erfordert Root-Zugriff" - -msgid "This entry already exists" -msgstr "Dieser Eintrag existiert bereits" - -msgid "This entry cannot be enabled or disabled" -msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" - -msgid "This entry is already a member" -msgstr "Dieser Eintrag ist bereits ein Mitglied" - -msgid "This entry is already disabled" -msgstr "Dieser Eintrag ist bereits deaktiviert" - -msgid "This entry is already enabled" -msgstr "Dieser Eintrag ist bereits aktiviert" - -msgid "This entry is not a member" -msgstr "Dieser Eintrag ist kein Mitglied" - -msgid "This group already allows external members" -msgstr "Diese Gruppe erlaubt bereits externe Mitglieder" - -msgid "This group cannot be posix because it is external" -msgstr "Diese Gruppe kann nicht POSIX sein, weil sie extern ist" - -msgid "This is already a posix group" -msgstr "Dies ist bereits eine POSIX-Gruppe" - -msgid "This is already a posix group and cannot be converted to external one" +msgid "Type of trusted domain ID range, one of allowed values" msgstr "" -"Dies ist bereits eine POSIX-Gruppe, sie kann nicht zu einer externen " -"konvertiert werden" -msgid "This page has unsaved changes. Please save or revert." +msgid "External trust" +msgstr "Externe Vertrauensstellung" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." msgstr "" -"Diese Seite hat nicht gespeicherte Änderungen. Bitte Speichern oder " -"Rückgängig machen" -msgid "Ticket expired" -msgstr "Ticket abgelaufen" +#, fuzzy, python-format +#| msgid "Added automember rule \"%(value)s\"" +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" -msgid "Time Limit" -msgstr "Zeitbegrenzung" +#, fuzzy, python-format +#| msgid "Deleted automount location \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" -msgid "Time limit of search in seconds" -msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" +msgid "missing base_id" +msgstr "fehlende base_id" -msgid "Time now" -msgstr "Aktuelle Zeit" +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" -msgid "Time to live" -msgstr "Lebensdauer" +msgid "trust type" +msgstr "Vertrauensstellungstyp" -msgid "Time-based (TOTP)" -msgstr "Zeitbasiert (TOTP)" +msgid "only \"ad\" is supported" +msgstr "nur \"ad\" ist unterstützt" + +#, fuzzy +#| msgid "Domain" +msgid "domain" +msgstr "Domain" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" msgid "" "To establish trust with Active Directory, the domain name and the realm name " @@ -3787,751 +24847,575 @@ msgstr "" "Zum Aufbau einer Vertrauensstellung mit einem Active Directory müssen " "Domänenname und Realm des IPA Servers übereinstimmen" -msgid "To get command help, use:" -msgstr "Um Hilfe zu Befehlen zu bekommen benutzen sie:" +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" -msgid "Token ID" -msgstr "Token ID" +msgid "Trusted domain and administrator account use different realms" +msgstr "" -msgid "Token description (informational only)" -msgstr "Token Beschriebung (nur informativ)" +msgid "Realm administrator password should be specified" +msgstr "" -msgid "Token hash algorithm" -msgstr "Token Hash-Algorithmus" +msgid "id range type" +msgstr "" -msgid "Token model (informational only)" -msgstr "Token-Modell (nur informativ)" +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" -msgid "Token secret (Base32; default: random)" -msgstr "Token-Geheimis (Base32; Standard: zufällig)" +msgid "id range" +msgstr "" -msgid "Token serial (informational only)" -msgstr "Token-Seriennummer (nur informativ)" +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" -msgid "Token synchronization failed" -msgstr "Token-Synchronisierung fehlgeschlagen" +msgid "range exists" +msgstr "" -msgid "Token vendor name (informational only)" -msgstr "Token-Hersteller (nur informativ)" +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" -msgid "Token was synchronized" -msgstr "Token wurde synchronisiert" +msgid "range type change" +msgstr "" -msgid "Topic commands:" -msgstr "Thema-Befehle:" +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" -msgid "Topic or Command" -msgstr "Thema oder Befehl" +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" -msgid "Topology" -msgstr "Topologie" +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" -msgid "True" -msgstr "Wahr" +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" -msgid "True if not all results were returned" -msgstr "»True«, falls nicht alle Ergebnisse ausgegeben wurden" +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" -msgid "True means the operation was successful" -msgstr "»True« bedeutet, dass die Operation erfolgreich abgeschlossen wurde." +msgid "Unable to verify write permissions to the AD" +msgstr "" -msgid "Trust" -msgstr "Vertrauensstellung" +msgid "Not enough arguments specified to perform trust setup" +msgstr "" -msgid "Trust Settings" +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Konfiguration" + +#, fuzzy +#| msgid "OTP Configuration" +msgid "Global Trust Configuration" +msgstr "OTP Konfiguration" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "nicht unterstützte Vetrauensstellung" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "ACI geändert \"%(value)s\"" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Dieser Befehl erfordert die Existenz der \"editors\" Gruppe, diese wurde " +"jedoch nicht gefunden." + +msgid "trust domain" +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "trust domains" +msgstr "Vertrauensstellungen" + +#, fuzzy +#| msgid "Trust Settings" +msgid "Trusted domains" msgstr "Vertrauenseinstellungen" -msgid "Two factor authentication (password + OTP)" -msgstr "Zwei-Faktor-Authentifizierung (Passwort + OTP)" - -msgid "Type" -msgstr "Typ" - -msgid "Type of the token" -msgstr "Token-Typ" - -msgid "Types of supported user authentication" -msgstr "Unterstützte Authentifizierungsmethoden" - -msgid "UID" -msgstr "UID" - -msgid "UPN suffixes" -msgstr "UPN Suffixe" - -msgid "URI" -msgstr "URI" - -msgid "URL" -msgstr "URL" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." +msgid "Trusted domain" msgstr "" -"Die private Gruppe konnte nicht erstellt werden. Eine Gruppe »%(group)s« " -"existiert bereits." -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" -"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" +msgid "Domain enabled" +msgstr "Domäne aktiviert" -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" - -msgid "Undelete a delete user account." -msgstr "Gelöschten Benutzer wiederherstellen" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Benutzerkonto \"%(value)s\" wiederhergestellt" - -msgid "Undo" -msgstr "Rückgängig" - -msgid "Undo All" -msgstr "Alle Rückgängig" - -msgid "Unique ID" -msgstr "Eindeutige ID" - -msgid "Unknown" -msgstr "Unbekannt" - -msgid "Unknown Error" -msgstr "Unbekannter Fehler" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Unbekannte Option: %(option)s" - -msgid "Unlock" -msgstr "Entsperren" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Konto »%(value)s« wurde entsperrt" - -msgid "Unrevoked" -msgstr "Nicht widerrufen" - -msgid "Unsaved Changes" -msgstr "Ungespeicherte Änderungen" - -msgid "Unselect All" -msgstr "Alle abwählen" - -msgid "Unspecified" -msgstr "Nicht angegeben" - -msgid "Update" -msgstr "Speichern" - -msgid "Update DNS entries" -msgstr "DNS Einträge aktualisieren" - -msgid "User" -msgstr "Benutzer" - -msgid "User Group" -msgstr "Benutzergruppe" - -msgid "User Groups" -msgstr "Benutzergruppen" - -msgid "User ID" -msgstr "Benutzer-ID" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Benutzer-ID (wird durch das System zugewiesen, falls diese nicht angegeben " -"wird)" - -msgid "User Options" -msgstr "Benutzeroptionen" - -msgid "User authentication types" -msgstr "Authentifizierungsmethoden" - -msgid "User categories" -msgstr "Benutzerkategorien" - -msgid "User category" -msgstr "Benutzerkategorie" - -msgid "User category the ACL applies to" -msgstr "Benutzerkategorie auf die ACL angewendet wird" - -msgid "User category the rule applies to" -msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" - -msgid "User group" -msgstr "Benutzer-Gruppe" - -msgid "User group ACI grants access to" -msgstr "Benutzergruppen-ACI erlaubt Zugriff auf" - -msgid "User login" -msgstr "Anmeldename" - -msgid "User name" -msgstr "Benutzername" - -msgid "User password" -msgstr "Benutzerpasswort" - -msgid "User search fields" -msgstr "Benutzer Suchfelder" - -msgid "User to override" -msgstr "Benutzer zum Überschreiben" - -msgid "User-friendly description of action performed" -msgstr "Benutzerfreundliche Beschreibung der ausgeführten Aktion" - -msgid "Username" -msgstr "Benutzername" - -msgid "Users" -msgstr "Benutzer" - -msgid "Users allowed to create keytab" -msgstr "Benutzer die Schlüsseltabelle erstellen dürfen" - -msgid "Users allowed to retrieve keytab" -msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" - -msgid "Validation error" -msgstr "Überprüfungsfehler" - -msgid "Validity" -msgstr "Gültigkeit" - -msgid "Validity end" -msgstr "Gültig bis" - -msgid "Validity start" -msgstr "Gültig ab" - -msgid "Vendor" -msgstr "Hersteller" - -msgid "Verify Password" -msgstr "Passwort verifizieren" - -msgid "Verify Principal Password" -msgstr "Principal-Passwort bestätigen" - -msgid "Vertical Precision" -msgstr "Vertikale Genauigkeit" - -msgid "Via Service" -msgstr "Mit Dienst" - -msgid "View" -msgstr "Ansicht" - -msgid "Warning" -msgstr "Warnung" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Warnung: Typ konnte nicht umgewandelt werden (#%d)\n" - -msgid "Weight" -msgstr "Gewicht" - -msgid "Who" -msgstr "Wer" - -msgid "Working" -msgstr "Arbeite" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" -"Sie können FreeOTP als " -"Softwaretoken einsetzen." - -msgid "You must enroll a host in order to create a host service" -msgstr "" -"Sie müssen einen Host registrieren, bevor Sie einen Dienst für diesen Host " -"anlegen können." - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Ihr Passwort läuft in ${days} Tagen ab." - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Die Vertrauensstellung zu %(domain)s ist beschädigt. Bitte erneuern Sie sie " -"durch erneuten Aufruf von 'ipa trust-add'." - -msgid "ZIP" -msgstr "Postleitzahl" - -msgid "Zone name" -msgstr "Zonenname" - -msgid "Zone name (FQDN)" -msgstr "Zonenname (FQDN)" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" - -msgid "an internal error has occurred" -msgstr "Ein interner Fehler ist aufgetreten" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "In interner Fehler ist auf dem Server '%(server)s' aufgetreten." - -msgid "any of the configured servers" -msgstr "einer der konfigurierten Server" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "Der Namensraum '%(name)s' existiert in der API nicht" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "Mindestens eine der Optionen: type, users, hosts muss gesetzt sein" +#, fuzzy, python-format +#| msgid "Server has no information about domain '%(domain)s'" +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" msgstr "" -"mindestens eines von »type«, »filter«, »subtree«, »targetgroup«, »attrs« " -"oder »memberof« wird benötigt" -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "Attribut \"%s\" ist nicht erlaubt" - -msgid "attribute is not configurable" -msgstr "Attribut ist nicht konfigurierbar" - -msgid "automatically add the principal if it doesn't exist" -msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" - -msgid "automount location" -msgstr "Automount-Ort" - -msgid "automount locations" -msgstr "Automount-Orte" - -msgid "automount map" -msgstr "Automount-Map" - -msgid "automount maps" -msgstr "Automount-Maps" - -msgid "bind password" -msgstr "Bind-Passwort" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "darf höchstens %(len)d Zeichen lang sein" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "darf höchstens %(maxlength)d Bytes groß sein" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "darf höchstens %(maxlength)d Zeichen lang sein" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "darf höchstens %(maxvalue)d sein" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "darf höchstens %(maxvalue)s sein" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "Kann nicht zu '%(uri)s' verbinden: %(error)s" - -msgid "cannot delete global password policy" -msgstr "Die Globale Passwortregel kann nicht gelöscht werden" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "Aufruf von »stat« für Konfigurationsdatei %s nicht möglich\n" - -msgid "change collided with another change" -msgstr "Änderung kollidiert mit einer anderen Änderung" - -msgid "change to a POSIX group" -msgstr "in eine POSIC-Gruppe ändern" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "Befehl '%(name)s' nimmt maximal %(count)d Argument" -msgstr[1] "Befehl '%(name)s' nimmt maximal %(count)d Argumente" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "Befehl '%(name)s' nimmt keine Argumente" - -msgid "commands for controlling sudo configuration" -msgstr "Befehle zum Steuern der sudo-Konfiguration" - -msgid "configuration options" -msgstr "Konfigurationsoptionen" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "Container-Eintrag (%(container)s) nicht gefunden" - -msgid "delegation" -msgstr "Delegation" - -msgid "delegations" -msgstr "Delegationen" - -msgid "delete" -msgstr "löschen" - -msgid "description" -msgstr "Beschreibung" - -msgid "did not receive Kerberos credentials" -msgstr "Kerberos-Anmeldedaten wurden nicht empfangen" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "Jedes ACL-Element muss mit einem Semikolon enden" - -msgid "empty filter" -msgstr "Filter ist leer" - -msgid "entries" -msgstr "Einträge" - -msgid "entry" -msgstr "Eintrag" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" -"Fehler beim Zusammenstellen der Daten für den XML-RPC-Transport: %(error)s" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "Fehler auf Server '%(server)s': %(error)s" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "Ausführen von ipa-getkeytab fehgeschlagen, errno %d\n" - -msgid "filename" -msgstr "Dateiname" - -msgid "filter and memberof are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -msgid "force host name even if not in DNS" -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -#, c-format -msgid "fork() failed\n" -msgstr "fork() fehlgeschlagen\n" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "Format muss als »%(format)s« %(rfcs)s angegeben werden" - -#, python-format msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." msgstr "" -"Die Forward Zone \"%(fwzone)s\" ist nicht aktiv, da eine ordnungsgemäße NS " -"Delegation in der autoritativen Zone \"%(authzone)s\" nicht vorhanden ist. " -"Bitte fügen Sie den NS Record \"%(ns_rec)s\" zur übergeordneten Zone " -"\"%(authzone)s\" hinzu." -msgid "givenname is required" -msgstr "givenname wird benötigt" - -msgid "group" -msgstr "Gruppe" - -msgid "group, permission and self are mutually exclusive" -msgstr "»group«, »permission« und »self« schließen sich gegenseitig aus" - -msgid "groups" -msgstr "Gruppen" - -msgid "host" -msgstr "host" - -msgid "host group" -msgstr "Hostgruppe" - -msgid "host groups" -msgstr "Hostgruppen" - -msgid "hostname" -msgstr "Hostname" - -msgid "hosts" -msgstr "hosts" - -msgid "hosts cannot be set when type is 'group'" -msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" - -msgid "incorrect type" -msgstr "inkorrekter Typ" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Ungültig '%(name)s': %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "ungültiger DN (%s)" - -msgid "invalid IP address format" -msgstr "Ungültiges IP-Adressformat" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgid "Configure this server as a trust agent." msgstr "" -"Ungültige IP-Adressversion (ist %(value)d, muss %(required_value)d) sein!" -msgid "invalid IP network format" -msgstr "Ungültiges IP-Netzwerkformat" +msgid "Enable support for trusted domains for old clients" +msgstr "" -msgid "invalid SSH public key" -msgstr "Ungültiger öffentlicher SSH-Schlüssel" - -msgid "invalid address format" -msgstr "Ungültiges Adressformat" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "Ungültiger Domainname: %s" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "Ungültiges E-Mail-Format: %(email)s" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab hat falsche Zugriffsrechte?\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytab nicht gefunden\n" - -msgid "limits exceeded for this query" -msgstr "Begrenzung wurde für diese Abfrage überschritten." - -#, python-format -msgid "manager %(manager)s not found" -msgstr "Manager %(manager)s nicht gefunden" - -#, python-format -msgid "member %s" -msgstr "Mitglied %s" - -msgid "missing base_id" -msgstr "fehlende base_id" - -msgid "modifying primary key is not allowed" -msgstr "Ändern des primären Schlüssels ist nicht erlaubt." - -#, python-format -msgid "must be '%(value)s'" -msgstr "muss '%(value)s' sein" - -msgid "must be DNS name" -msgstr "muss ein DNS-Name sein" - -msgid "must be TRUE or FALSE" -msgstr "muss TRUE oder FALSE sein" - -msgid "must be True or False" -msgstr "muss »True« oder »False« sein" - -msgid "must be Unicode text" -msgstr "muss Unicode-Text sein" - -msgid "must be a decimal number" -msgstr "muss eine Dezimalzahl sein" - -msgid "must be absolute" -msgstr "muss absolut sein" - -msgid "must be an integer" -msgstr "muss eine Ganzzahl sein" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "muss mindestens %(minlength)d Bytes groß sein" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "muss mindestens %(minlength)d Zeichen lang sein" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "muss mindestens %(minvalue)d sein" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "muss mindestens %(minvalue)s sein" - -msgid "must be binary data" -msgstr "muss im Binärformat sein" - -msgid "must be datetime value" -msgstr "muss ein datetime-Wert sein" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "muss genau %(length)d Bytes groß sein" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "muss genau %(length)d Zeichen lang sein" - -#, python-format -msgid "must be one of %(values)s" -msgstr "muss eines von %(values)s sein" - -msgid "must be relative" -msgstr "muss relativ sein" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "muss dem Muster »%(pattern)s« entsprechen" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "kein Befehl oder Hilfethema '%(topic)s'" - -msgid "no modifications to be performed" -msgstr "Keine anzuwendenden Änderungen" - -msgid "not allowed to modify group entries" -msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." - -msgid "not allowed to modify user entries" +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." -msgid "not fully qualified" -msgstr "nicht voll ausgeschrieben" +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde aktiviert" -msgid "number of passwords" -msgstr "Anzahl der Passwörter" +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" -#, python-format -msgid "objectclass %s not found" -msgstr "Objektklasse %s nicht gefunden" - -msgid "only \"ad\" is supported" -msgstr "nur \"ad\" ist unterstützt" - -#, c-format -msgid "out of memory\n" -msgstr "Nicht genügend Speicher\n" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "Überlappende Argumente und Optionen: %(names)s" - -msgid "password" -msgstr "Passwort" - -msgid "password policies" -msgstr "Passwortregeln" - -msgid "password policy" -msgstr "Passwortregel" - -msgid "permission" -msgstr "Berechtigung" - -msgid "permissions" -msgstr "Berechtigungen" - -msgid "preserve" -msgstr "aufbewahren" - -msgid "preserve and no-preserve cannot be both set" -msgstr "preserve und no-preserve kann nicht gleichzeitig gesetzt sein" - -#, c-format -msgid "principal not found\n" -msgstr "Principal nicht gefunden\n" - -msgid "priority cannot be set on global policy" -msgstr "Priorität der globalen Regel kann nicht gesetzt werden" +#, fuzzy, python-format +#| msgid "Disabled host \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" msgstr "" -"Profilkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Profile gibt" -#, c-format -msgid "read error\n" -msgstr "Lesefehler\n" - -#, c-format -msgid "realm not found\n" -msgstr "Realm nicht gefunden\n" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "Anfrage fehlgeschlagen, HTTP-Status: %d" +#, fuzzy +#| msgid "Certificate Type" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "Zertifikattyp" msgid "" -"retrieve and print all attributes from the server. Affects command output." +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" msgstr "" -"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " -"die Befehlsausgabe aus." -msgid "role" -msgstr "Rolle" +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" -msgid "roles" -msgstr "Rollen" +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" -msgid "search for private groups" -msgstr "nach privaten Gruppen suchen" +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" -msgid "seconds" -msgstr "Sekunden" +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" -msgid "server" -msgstr "Server" +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" -msgid "servers" -msgstr "Server" +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +#, fuzzy +#| msgid "Modify configuration options." +msgid "Certificate Identity Mapping configuration options" +msgstr "Konfigurationsoptionen bearbeiten." + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +#, fuzzy +#| msgid "Prompt to set the user password" +msgid "Prompt for the username" +msgstr "Zum Setzen des Passworts auffordern" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Die aktuelle Konfiguration anzeigen." + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rules" +msgstr "Zertifikattyp" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rule" +msgstr "Zertifikattyp" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Rule used to map the certificate with a user entry" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +#| msgid "Matched rules" +msgid "Matching rule" +msgstr "Zutreffende Regeln" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +#, fuzzy +#| msgid "Priority of the policy (higher number means lower priority" +msgid "Priority of the rule (higher number means lower priority" +msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added HBAC service group \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified HBAC service group \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« geändert" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC service group matched" +#| msgid_plural "%(count)d HBAC service groups matched" +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" +msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" + +#, fuzzy +#| msgid "Display information about a stage user." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service group \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Enabled HBAC rule \"%(value)s\"" +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled service \"%(value)s\"" +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Dienst »%(value)s« deaktiviert" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Anmeldename" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)d passender Benutzer" +msgstr[1] "%(count)d passende Benutzer" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy +#| msgid "Service principal" +msgid "Malformed principal" +msgstr "Dienst-Principal" + +msgid "{} is required by the IPA master" +msgstr "" msgid "service" msgstr "Dienst" @@ -4539,89 +25423,1092 @@ msgstr "Dienst" msgid "services" msgstr "Dienste" -msgid "sn is required" -msgstr "sn wird benötigt" +#, fuzzy +#| msgid "Service principal" +msgid "Service principal alias" +msgstr "Dienst-Principal" -msgid "stage user" -msgstr "Vorbereiteter Benutzer" +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded service certificate" +msgstr "Base-64-kodiertes Serverzertifikat" -msgid "stage users" -msgstr "Vorbereitete Benutzer" +msgid "NONE value cannot be combined with other PAC types" +msgstr "" -msgid "sudo command" -msgstr "Sudo-Befehl" +#, fuzzy +#| msgid "Add a new IPA new service." +msgid "Add a new IPA service." +msgstr "Einen neuen IPA-Dienst hinzufügen." -msgid "sudo command group" -msgstr "Sudo-Befehlsgruppe" +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" -msgid "sudo command groups" -msgstr "Sudo-Befehlsgruppen" +#, fuzzy +#| msgid "force host name even if not in DNS" +msgid "force principal name even if host not in DNS" +msgstr "Hostname erzwingen auch wenn nicht im DNS" -msgid "sudo commands" -msgstr "Sudo-Befehle" +msgid "Skip host check" +msgstr "" -msgid "sudo rule" -msgstr "Sudo-Regel" +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" -msgid "sudo rules" -msgstr "Sudo-Regeln" +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new SMB service." +msgstr "Einen neuen HBAC-Dienst hinzufügen." + +#, fuzzy +#| msgid "Service name" +msgid "SMB service NetBIOS name" +msgstr "Dienstname" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Dienst »%(value)s« deaktiviert" + +#, fuzzy, python-format +#| msgid "Added HBAC service group \"%(value)s\"" +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Modified HBAC service group \"%(value)s\"" +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« geändert" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added HBAC service group \"%(value)s\"" +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove principal alias from a service" +msgstr "Berechtigungen von Rolle entfernen." + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +msgid "delegation" +msgstr "Delegation" + +msgid "delegations" +msgstr "Delegationen" + +msgid "Delegations" +msgstr "Delegationen" + +msgid "Delegation" +msgstr "Delegation" + +#, fuzzy, python-format +#| msgid "Added role \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Deleted role \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, fuzzy, python-format +#| msgid "Modified role \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, fuzzy, python-format +#| msgid "%(count)d role matched" +#| msgid_plural "%(count)d roles matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, fuzzy +#| msgid "this option has been deprecated." +msgid "The deny type has been deprecated." +msgstr "Diese Option ist veraltet." + +msgid "HBAC rules" +msgstr "HBAC-Regeln" + +msgid "HBAC Rules" +msgstr "HBAC-Regeln" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" hinzugefügt" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" gelöscht" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" geändert" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d HBAC-Regel gefunden" +msgstr[1] "%(count)d HBAC-Regeln gefunden" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" deaktiviert" + +msgid "Access time" +msgstr "Zugriffszeit" + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "Zugriff gewährt: %s" + +msgid "operation not defined" +msgstr "" + +#, fuzzy, python-format +#| msgid "not allowed to modify group entries" +msgid "not allowed to perform operation: %s" +msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "Mitglieds-Dienstgruppen" + +msgid "Member HBAC service groups" +msgstr "Mitglieds-HBAC-Servicegruppen" + +#, fuzzy +#| msgid "Member services" +msgid "Member ID user overrides" +msgstr "Mitglieds-Dienste" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "Indirekte Mitglieds-Benutzer" + +msgid "Indirect Member permissions" +msgstr "Indirekte Mitglieds-Berechtigungen" + +msgid "Indirect Member HBAC service" +msgstr "Indirekte Mitgli" + +msgid "Indirect Member HBAC service group" +msgstr "Indirekte Mitglieds-HBAC-Servicegruppe" + +msgid "Invalid format. Should be name=value" +msgstr "Ungültiges Format. Sollte name=wert sein." + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Ein IPA Masterhost kann nicht deaktiviert oder gelöscht werden" + +msgid "entry" +msgstr "Eintrag" + +msgid "entries" +msgstr "Einträge" + +msgid "Entry" +msgstr "Eintrag" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "Container-Eintrag (%(container)s) nicht gefunden" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nicht gefunden" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" + +#, fuzzy, python-format +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "Attribut \"%s\" ist nicht erlaubt" + +msgid "attribute is not configurable" +msgstr "Attribut ist nicht konfigurierbar" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" msgid "the entry was deleted while being modified" msgstr "Der Eintrag wurde während der Änderung entfernt." -msgid "this option has been deprecated." -msgstr "Diese Option ist veraltet." +#, python-format +msgid "%s" +msgstr "%s" -msgid "this option is deprecated" -msgstr "diese Option ist veraltet" +#, python-format +msgid "%s to add" +msgstr "%s zum hinzufügen" -msgid "too many '@' characters" -msgstr "Zu viele »@«-Zeichen" +#, python-format +msgid "%s to remove" +msgstr "%s zum entfernen" -msgid "trust" -msgstr "Vertrauensstellung" - -msgid "trust type" -msgstr "Vertrauensstellungstyp" - -msgid "trusts" -msgstr "Vertrauensstellungen" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "Typ des IPA-Objekts (user, group, host, hostgroup, service, netgroup)" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" -"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." #, python-format -msgid "unknown command '%(name)s'" -msgstr "Unbekannter Befehl '%(name)s'" +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added automount location \"%(value)s\"" +msgid "added attribute value to entry %(value)s" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "muss TRUE oder FALSE sein" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "Passwortablauf" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Home-Verzeichnis" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Basis für Home-Verzeichnisse" #, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "Unbekannter Fehler %(code)d von %(server)s: %(error)s" +msgid "invalid e-mail format: %(email)s" +msgstr "Ungültiges E-Mail-Format: %(email)s" -msgid "unsupported trust type" -msgstr "nicht unterstützte Vetrauensstellung" +#, python-format +msgid "manager %(manager)s not found" +msgstr "Manager %(manager)s nicht gefunden" -msgid "user" -msgstr "Benutzer" +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Issuer of the certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Subject of the certificate" +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Add one or more certificate mappings to the user entry." +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Activate a stage user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users is not POSIX" +msgstr "Vorgegebene Gruppe für neue Benutzer" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Benutzer »%(value)s« gelöscht" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: Benutzer ist bereits aufbewahrt" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Benutzer »%(value)s« geändert" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Benutzerkonto \"%(value)s\" wiederhergestellt" #, python-format msgid "user \"%s\" is already active" msgstr "Benutzer \"%s\" ist bereits aktiv" -msgid "user category cannot be set to 'all' while there are allowed users" +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Vorbereitetes Benutzerkonto \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde aktiviert" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" -msgid "users" -msgstr "Benutzer" +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Konto »%(value)s« wurde entsperrt" -msgid "users and hosts cannot both be set" -msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." +msgid "Failed logins" +msgstr "Fehlgeschlagene Logins" -msgid "users cannot be set when type is 'hostgroup'" -msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" +msgid "Last successful authentication" +msgstr "Letzte erfolgreiche Authentifizierung" + +msgid "Last failed authentication" +msgstr "Letzte fehlgeschlagene Authentifizierung" + +msgid "Time now" +msgstr "Aktuelle Zeit" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "fork() failed\n" +msgid "%(host)s failed" +msgstr "fork() fehlgeschlagen\n" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Konto deaktiviert: %(disabled)s" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, fuzzy +#| msgid "Add a manager to the user entry" +msgid "Add new principal alias to the user entry" +msgstr "Manager zum Benutzer hinzufügen" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove principal alias from the user entry" +msgstr "Manager vom Benutzer entfernen" + +#, fuzzy, python-format +#| msgid "Removed condition(s) from \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +#, fuzzy +#| msgid "unsupported trust type" +msgid "unsupported functional level" +msgstr "nicht unterstützte Vetrauensstellung" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +#, fuzzy +#| msgid "attribute is not configurable" +msgid "no trusted domain is configured" +msgstr "Attribut ist nicht konfigurierbar" + +#, fuzzy +#| msgid "CA is not configured" +msgid "domain is not configured" +msgstr "CA ist nicht konfiguriert" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +#, fuzzy +#| msgid "trust type" +msgid "Trust setup" +msgstr "Vertrauensstellungstyp" + +#, fuzzy +#| msgid "CA is not configured" +msgid "Our domain is not configured" +msgstr "CA ist nicht konfiguriert" + +#, fuzzy +#| msgid "attribute is not configurable" +msgid "No trusted domain is not configured" +msgstr "Attribut ist nicht konfigurierbar" + +msgid "trusted domain object" +msgstr "" + +#, fuzzy +#| msgid "Empty domain is not allowed" +msgid "domain is not trusted" +msgstr "Eine leere Domäne ist nicht zulässig" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +#, fuzzy +#| msgid "Empty domain is not allowed" +msgid "trusted domain user not found" +msgstr "Eine leere Domäne ist nicht zulässig" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +#, fuzzy +#| msgid "Invalid credentials" +msgid "CIFS credentials object" +msgstr "Ungültige Zugangsdaten" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +#, fuzzy +#| msgid "Invalid credentials" +msgid "Credentials" +msgstr "Ungültige Zugangsdaten" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +#, fuzzy +#| msgid "Trust Settings" +msgid "Trusting forest" +msgstr "Vertrauenseinstellungen" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "Unbekannt" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Request must be a dict" +msgstr "Anfragestatus" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "params must be a list" +msgstr "muss eine Ganzzahl sein" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, fuzzy, python-format +#| msgid "RADIUS proxy username" +msgid "%s: RADIUS proxy server not found" +msgstr "RADIUS-Proxy Benutzername" + +#, fuzzy, python-format +#| msgid "active user with name \"%(user)s\" already exists" +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 1" +msgstr "muss mindestens %(minvalue)d sein" + +msgid "Out of memory\n" +msgstr "Nicht genügend Speicher\n" + +#, fuzzy +#| msgid "Supported encryption types:\n" +msgid "Warning unrecognized encryption type.\n" +msgstr "Unterstützte Verschlüsselungstypen:\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "Nicht genügend Speicher!?\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Password history size" +msgid "Password is too long!\n" +msgstr "Größe der Passworthistorie" + +msgid "Failed to create random key!\n" +msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" + +msgid "Failed to create key!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +#, fuzzy +#| msgid "unsupported trust type" +msgid "Bad or unsupported salt type.\n" +msgstr "nicht unterstützte Vetrauensstellung" + +#, fuzzy, c-format +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +#, fuzzy +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize STARTTLS session\n" +msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" diff --git a/po/en_GB.po b/po/en_GB.po index 745e64f4e..0df72fea3 100644 --- a/po/en_GB.po +++ b/po/en_GB.po @@ -4,7 +4,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: English (United Kingdom)\n" @@ -15,38 +15,23276 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, c-format +msgid "Out of memory!" +msgstr "" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +msgid "hostname" +msgstr "" + +msgid "IPA Server to use" +msgstr "" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +msgid "password" +msgstr "" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "objectclass %s not found" +msgid "realm not found\n" +msgstr "objectclass %s not found" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "File %(file)s not found" +msgstr "%(filename)s: file not found" + +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +msgid "Vault password" +msgstr "" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +msgid "Change password" +msgstr "" + +msgid "Old vault password" +msgstr "" + +msgid "File containing the old vault password" +msgstr "" + +msgid "New vault password" +msgstr "" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "" + +msgid "Permission" +msgstr "" + +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "" + +msgid "User group ACI grants access to" +msgstr "" + +msgid "Permissions" +msgstr "" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "" + +msgid "Type" +msgstr "" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +msgid "Member of a group" +msgstr "" + +msgid "Filter" +msgstr "" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +#, fuzzy +#| msgid "" +#| "retrieve and print all attributes from the server. Affects command output." +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"retrieve and print all attributes from the server. Affects command output." + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +msgid "Delete ACI." +msgstr "" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +msgid "New ACI name" +msgstr "" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +msgid "description" +msgstr "" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +msgid "Default users group" +msgstr "" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +msgid "Zone name" +msgstr "" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Record name" +msgstr "" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +msgid "Record type" +msgstr "" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +msgid "Service" +msgstr "" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +msgid "NS Hostname" +msgstr "" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "User Groups" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Host Groups" +msgstr "" + +msgid "Services" +msgstr "" + +msgid "Service Groups" +msgstr "" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "" + +msgid "HBAC service" +msgstr "" + +msgid "HBAC service description" +msgstr "" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "" + +msgid "Certificate" +msgstr "" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +msgid "hostgroups" +msgstr "" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "" + +msgid "Bind DN" +msgstr "" + +msgid "User container" +msgstr "" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "Show environment variables." + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" +"retrieve and print all attributes from the server. Affects command output." + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +msgid "Netgroup description" +msgstr "" + +msgid "NIS domain name" +msgstr "" + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +msgid "Member Hostgroup" +msgstr "" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +msgid "Bind rule type" +msgstr "" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +msgid "permission" +msgstr "" + +msgid "permissions" +msgstr "" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +msgid "Server" +msgstr "" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal" +msgstr "" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "Commands" +msgstr "" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +#| msgid "%(count)d variables" +msgid "Account disabled" +msgstr "%(count)d variables" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +msgid "Sudo Allow Commands" +msgstr "" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "ACL name" +msgstr "" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +msgid "Vault description" +msgstr "" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +msgid "Owner groups" +msgstr "" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +msgid "Transport Certificate" +msgstr "" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +msgid "owner group" +msgstr "" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + #, python-format msgid "%(count)d variables" msgstr "%(count)d variables" +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +msgid "Passwords do not match!" +msgstr "" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +msgid "Topic commands:" +msgstr "" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "" + +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, fuzzy, python-format +#| msgid "request failed with HTTP status %d" +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "request failed with HTTP status %d" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + #, python-format msgid "%(filename)s: file not found" msgstr "%(filename)s: file not found" +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "Retrieving CA cert chain failed: %s" #, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Retrieving CA status failed with status %d" +msgid "request failed with HTTP status %d" +msgstr "request failed with HTTP status %d" #, python-format msgid "Retrieving CA status failed: %s" msgstr "Retrieving CA status failed: %s" -msgid "Show environment variables." -msgstr "Show environment variables." +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Retrieving CA status failed with status %d" #, python-format msgid "objectclass %s not found" msgstr "objectclass %s not found" #, python-format -msgid "request failed with HTTP status %d" -msgstr "request failed with HTTP status %d" +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" msgid "" -"retrieve and print all attributes from the server. Affects command output." +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "Host '%(host)s' not found" +msgstr "objectclass %s not found" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "Entry %s not found" +msgstr "objectclass %s not found" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(filename)s: file not found" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "objectclass %s not found" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(filename)s: file not found" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "%(filename)s: file not found" +msgid "{role}: role not found" +msgstr "%(filename)s: file not found" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(filename)s: file not found" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "Auto member rule: %s not found!" +msgstr "objectclass %s not found" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +msgid "Common Name" +msgstr "" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "" + +msgid "Minimum serial number" +msgstr "" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Group Options" +msgstr "" + +msgid "Search Options" +msgstr "" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +msgid "Service Options" +msgstr "" + +msgid "User Options" +msgstr "" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +msgid "Permission settings" +msgstr "" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +msgid "Server Roles" +msgstr "" + +msgid "Server Role" +msgstr "" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "" + +msgid "Service Settings" +msgstr "" + +msgid "Provisioning" +msgstr "" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +msgid "Any Command" +msgstr "" + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +msgid "Service Vaults" +msgstr "" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +msgid "IPA Servers" +msgstr "" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d variables" +msgstr[1] "%(count)d variables" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(filename)s: file not found" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" msgstr "" -"retrieve and print all attributes from the server. Affects command output." diff --git a/po/es.po b/po/es.po index e2ba3cfc1..2a628514b 100644 --- a/po/es.po +++ b/po/es.po @@ -20,501 +20,860 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.2.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "¡Memoria insuficiente!\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "No tiene permiso para vincular este equipo al dominio de la API.\n" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "No escribir permisos en archivo de tabla de claves'%s\n" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "access() sobre %1$s falló: errno = %2$d\n" + +#, c-format +msgid "Out of memory!" +msgstr "¡Memoria insuficiente!" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "No se puede habilitar SSL en LDAP\n" + +msgid "SASL Bind failed\n" +msgstr "Falló SASL Bind\n" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "Búsqueda de %1$s en rootdse falló con error %2$d\n" + +#, c-format +msgid "No values for %s" +msgstr "No hay valores para %s" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "Búsqueda de IPA namingContext fallada con error %d \n" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "IPA namingContext no encontrado \n" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "No se puede determinar DN de root de%s\n" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Inscripción fallada. %s\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "principales no se encuentran en respuesta XML-RPC\n" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Host ya está vinculado\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "curl_slist_append() falló para valor: '%s'\n" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_dumps() failed\n" +msgstr "bifurcación () falló\n" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "Petición JSON-RPC no válida: %(error)s" + +#, fuzzy, c-format +#| msgid "Operation failed: %s\n" +msgid "JSON-RPC call failed: %s\n" +msgstr "Falló operación: %s\n" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "No response" +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "Sin respuesta" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_pack_ex() failed: %s\n" +msgstr "bifurcación () falló\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Cancelación de registro exitoso.\n" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Cancelación falló.\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "resultado no se encuentra en respuesta XML-RPC\n" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "No se puede determinar servidor de la IPA de%s\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"No se puede unir host: la inicialización de contexto de Kerberos falló\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"No se puede unir host: cache de credenciales de Kerberos no se encuentra\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"No se puede unir host: principal de usuario no se encuentra y contraseña de " +"host no se proporciona.\n" + +#, c-format +msgid "fork() failed\n" +msgstr "bifurcación () falló\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytab no se encuentra\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "¿Tiene ipa-getkeytab permisos errados?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "la ejecución de ipa-getkeytab falló, errno %d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "hijo terminó con %d\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Error al resolver tabla de claves:%s.\n" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Error al obtener el dominio predeterminado Kerberos:%s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Error de análisis \"%1$s\": %2$s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Error al obtener credenciales de iniciales:%s.\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "No se puede generar la cache de credenciales de Kerberos\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "Error de almacenamiento de credenciales en cache de credenciales:%s.\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Imprimir la salida cruda de XML-RPC en modo de GSSAPI" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Modo silencioso. Sólo se muestran los errores." + +msgid "Unenroll this host from IPA server" +msgstr "Cancelar registro de host de servidor IPA" + +msgid "Hostname of this server" +msgstr "Nombre de host de este servidor" + +msgid "hostname" +msgstr "nombre de host" + +msgid "IPA Server to use" +msgstr "Servidor de IPA a utilizar" + +msgid "Specifies where to store keytab information." +msgstr "Especifica dónde almacenar la información de tabla de claves." + +msgid "filename" +msgstr "nombre de archivo" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "Forzar la unión del host. Reunirlo aunque ya este unido." + +msgid "LDAP password (if not using Kerberos)" +msgstr "contraseña de LDAP (si no usa Kerberos)" + +msgid "password" +msgstr "contraseña" + +msgid "LDAP basedn" +msgstr "LDAP basedn" + +msgid "basedn" +msgstr "basedn" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "El nombre de host debe ser totalmente calificado:%s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "El nombre del equipo no debe ser: %s\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "No se puede analizar nombre principal\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Eliminando %s principales\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "No pudo abrir la tabla de claves\n" + +#, c-format +msgid "principal not found\n" +msgstr "principal no se encuentra\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "No se puede eliminar la entrada\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, fuzzy, c-format +#| msgid "Failed to get result: %s\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "Falló al obtener resultados: %s\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "No es posible analizar los principales\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, c-format +msgid "realm not found\n" +msgstr "reino no encontrado\n" + +msgid "Print debugging information" +msgstr "Imprimir la información de depuración" + +msgid "Debugging output" +msgstr "Salida de depuración" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"El principal para borrar desde keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" + +msgid "Kerberos Service Principal Name" +msgstr "Nombre principal del servicio de kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "El fichero keytab fpara borrar el principal(s) desde" + +msgid "Keytab File Name" +msgstr "Nombre de archivo de tabla de claves" + +msgid "Remove all principals in this realm" +msgstr "Quite todos los principales en este ámbito" + +msgid "Realm name" +msgstr "Nombre de reino " + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Inicio de contexto de kerberos falló\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Fallo al abrir keytab '%1$s': %2$s\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Cierre de tabla de claves falló\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "no se puede abrir archivo de configuración %s\\n\n" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "no puede stat () del archivo de configuración%s\n" + +#, c-format +msgid "out of memory\n" +msgstr "sin Memoria\n" + +#, c-format +msgid "read error\n" +msgstr "Error de lectura\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Inicialización del contexto Kerberos falló: %1$s (%2$d)\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Incapaz de analizar el principal: %1$s (%2$d)\n" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "No hay claves aceptadas por KDC\n" + +#, c-format +msgid "Out of memory \n" +msgstr "¡Memoria insuficiente!\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "¡No puede iniciar biblioteca IDAP!\n" + +msgid "Simple bind failed\n" +msgstr "¡Falló vinculación sencilla!\n" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Falló operación: %s\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "Falló al obtener resultados: %s\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "Tiempo de espera superado." + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "Falló al analizar el resultado extendido: %s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "Falló al analizar el resultado: %s\n" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Pérdida la contestación de la lista de control!\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "¡Falta control de respuesta!\n" + +#, c-format +msgid "Out of Memory!\n" +msgstr "¡Memoria insuficiente!\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "¡Falló crear control!\n" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "Falló al enlazar al servidor!\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Falló para obtener keytab!\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "Falló ber_init(), ¿control inválido?\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "ber_scanf() falló, incapaz de encontrar kvno ?!\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Falló al recuperar el tipo de encriptación tipo #%d\n" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "Falló al recuperar la encriptación tipo %1$s (#%2$d)\n" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "Falló al recuperar algunas teclas" + +msgid "Failed to decode control reply!\n" +msgstr "Falló al decodificar la respuesta de control!\n" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Las contraseñas no coinciden." + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "Falló al abrir el fichero de configuración %s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Falló al analizar el fichero de configuración %s\n" + +#, fuzzy +#| msgid "Failed to open keytab\n" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "No pudo abrir la tabla de claves\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "Imprimir lo mínimo posible" + +msgid "Output only on errors" +msgstr "Solamente salida sobre errores" + +msgid "Contact this specific KDC Server" +msgstr "Contactar este servidor KDC específico" + +msgid "Server Name" +msgstr "Nombre de servidor" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"La principal para obtener una tabla de claves para (ex: ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" +"El archivo keytab para añadir a la nueva clave (será creado si no existe)." + +msgid "Encryption types to request" +msgstr "Solicitud de tipos de cifrado" + +msgid "Comma separated encryption types list" +msgstr "Lista de tipos de cifrado separados por coma" + +msgid "Show the list of permitted encryption types and exit" +msgstr "Mostrar la lista de los tipos cifrados permitidos y salir" + +msgid "Permitted Encryption Types" +msgstr "Tipos de cifrado permitidos" + +msgid "Asks for a non-random password to use for the principal" +msgstr "Pregunta por una contraseña no aleatoria para la principal" + +msgid "LDAP DN" +msgstr "LDAP DN" + +msgid "DN to bind as if not using kerberos" +msgstr "DN a vincular como si no usara kerberos" + +msgid "LDAP password" +msgstr "Contraseña LDAP" + +msgid "password to use if not using kerberos" +msgstr "Contraseña a usar si no usa kerberos" + +#, fuzzy +#| msgid "LDAP password" +msgid "Prompt for LDAP password" +msgstr "Contraseña LDAP" + +msgid "Path to the IPA CA certificate" +msgstr "Ruta al certificado IPA CA" + +msgid "IPA CA certificate" +msgstr "Certificado IPA CA" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "LDAP uri para conectar a. Mutuamente exclusiva con --server" + +msgid "url" +msgstr "url" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "LDAP SASL enlaza mecanismo si no bindd/bindpw" + +msgid "GSSAPI|EXTERNAL" +msgstr "GSSAPI|EXTERNAL" + +msgid "Retrieve current keys without changing them" +msgstr "Recupera las claves actuales sin cambiarlas" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "¿Ningún sistema enctypes preferido?\n" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Tipos de cifrado suportado\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Advertencia: Tipo para convertir falló (#%d)⏎\n" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Enter LDAP password" +msgstr "Contraseña LDAP" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" +"No pudde especificar el mecanismo SASL y el enlace DN simultáneamente.\n" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "Mecanismo de enlace SASL no válido\n" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "No se puede especificar servidor y LDAP uri simultáneamente.\n" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "El nombre del servidor no se ha suministrado y es indisponible\n" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "Opciones suministradas incompatibles (-r y -P)\n" + +msgid "New Principal Password" +msgstr "Nueva contraseña principal" + +msgid "Verify Principal Password" +msgstr "Verificar contraseña principal" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Advertencia: tipos salt no se aceptan con contraseñas aleatorias (ver opt.\n" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Nombre de servicio principal inválido\n" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" +"No se encontró la cache de credencial kerberos. ¿Tiene un tiquete de " +"kerberos?\n" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" +"No se encontró usuario principal de kerberos. ¿Tiene una cache de credencial " +"válida?\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Fallo abrir clave de tablas.\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "Reintentando con el método de recuperacióm pre-4.0 keytab...\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Error al crear el material de clave\n" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "Falló al obtener keytab\n" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "No se pudo agregar clave de la tabla de claves\n" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "No se pudo cerrar la tabla de claves\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Tabla de claves recuperada y almacenada correctamente en:%s\n" + +msgid "Failed members" +msgstr "Miembros fallidos" + +msgid "Failed source hosts/hostgroups" +msgstr "Host o grupo de hosts origenes fallidos" + +msgid "Failed hosts/hostgroups" +msgstr "Host o grupo de Host fallidos" + +msgid "Failed users/groups" +msgstr "Usuario o grupos de usuario incorrectos" + +msgid "Failed service/service groups" +msgstr "Error en el/los servicio(s)" + +msgid "Failed to remove" +msgstr "Error al remover " + +msgid "Failed RunAs" +msgstr "Error al ejecutar como" + +msgid "Failed RunAsGroup" +msgstr "Erro al ejecutar grupo como" + +msgid "Failed profiles" +msgstr "Errores en los perfiles" + +msgid "Failed CAs" +msgstr "Error en CAs" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed member manager" +msgstr "Miembros fallidos" + +msgid "Failed managedby" +msgstr "Falló managedby" + +msgid "Failed allowed to retrieve keytab" +msgstr "Falló permitir recuperar una KeyTab" + +msgid "Failed allowed to create keytab" +msgstr "Falló permitir crear una KeyTab" + +msgid "Failed targets" +msgstr "Error en Objetivos" + +msgid "Failed owners" +msgstr "Error en Propietarios" + +msgid "Failed to add" +msgstr "Fallo al añadir" + +msgid "maps not connected to /etc/auto.master:" +msgstr "mapa no conectado a /etc/auto.master" + +msgid "Import automount files for a specific location." +msgstr "Importar ficheros de automontaje para una localización específica." + +msgid "Master file" +msgstr " Archivo maestro" + +msgid "Automount master file." +msgstr " Archivo maestro automount." + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" +" Modo de funcionamiento continuo. Reporta los errores, pero el proceso " +"continúa." + +#, python-format +msgid "File %(file)s not found" +msgstr "No se encontró el archivo %(file)s " + +#, python-format +msgid "key %(key)s already exists" +msgstr "key %(key)s ya existe" + +#, python-format +msgid "map %(map)s already exists" +msgstr "map %(map)s ya existe" + +msgid "Imported maps:" +msgstr "Mapas importados" + +#, python-format +msgid "Added %(map)s" +msgstr "%(map)s agregados" + +msgid "Imported keys:" +msgstr "Llaves (keys) importadas" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Agregado %(src)s a %(dst)s" + +msgid "Ignored keys:" +msgstr "Llaves ignoradas: " + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "%(src)s a %(dst)s ignorados" + +msgid "Duplicate maps skipped:" +msgstr "Mapa duplicado omitido" + +#, python-format +msgid "Skipped %(map)s" +msgstr "%(map)s omitido" + +msgid "Duplicate keys skipped:" +msgstr "Llaves duplicadas omitidas" + +#, python-format +msgid "Skipped %(key)s" +msgstr "%(key)s omitida" + +msgid "Input file" +msgstr "Archivo de entrada" + +msgid "File to load the certificate from" +msgstr "Archivo desde el que cargar el certificado" + +msgid "cannot specify both raw certificate and file" +msgstr "no puede especificar un certificado RAW y un archivo" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Perfil de configuración guardado en el archivo '%(file)s'" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Certificados(s) almacenados en el archivo '%(file)s'" + +msgid "Servers details:" +msgstr "Detalles de los servidores:" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"El modo migración esta desactivado.\n" +"Use 'ip confi-mod --enable-migration=TRUE' para activarlo." + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Las contraseñas han sido migradas en formato pre-hashed.\n" +"IPA es incapaz de generar claves de Kerberos a menos que le sean\n" +"provistas contraseñas de texto claras. Todos los usuarios migrados\n" +"necesitan registrarse en https://your.domain/ipa/migration/ antes de\n" +"poder utilizar sus respectivas cuentas Kerberos." + +msgid "python-yubico is not installed." +msgstr "python-yubico no está instalado." + msgid "" "\n" +"YubiKey Tokens\n" +msgstr "" +"\n" +"Fichas YubiKey\n" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"Gestionar fichas YubiKey.\n" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" +"\n" +"Este código es una extensión del plugin otptoken y suministra el soporte " +"para\n" +" leer/escribir directamente en las fichasYubiKey.\n" + +msgid "" "\n" "EXAMPLES:\n" msgstr "" "\n" -"\n" "EJEMPLOS:\n" -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" -"\n" -"\n" -"CONFIGURACIÓN GLOBAL DNS\n" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Anula esto de modo que podamos añadir completados y fallados al " -"resultado devuelto.\n" -" " - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Anula esto de modo que podamos fijar completados y fallados.\n" -" " - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Añadir una regla automiembro.\n" -" " - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Añadir condiciones a una regla automiembro.\n" -" " - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" -"\n" -" Añadir un nuevo rango ID.\n" -"\n" -" Para añadir un nuevo rango ID usted debe especificar siempre\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Adicionalmente\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" puede ser dado para un nuevo rangi ID para el dominio local mientras\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" debe ser dado para añadir un nuevo rango para un dominio AD de " -"confianza.\n" -"\n" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Borra una regla automiembro.\n" -" " - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Muestra información sobre una regla automiembro.\n" -" " - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -" Estado de bloqueo de una cuenta de usuario\n" -"\n" -" Una cuenta de usuario puede resultar bloqueada si la contraseña se " -"introduce\n" -" incorrectamente muchas veces dentro de un período especifico de tiempo\n" -" controlado por la política de contraseña. Un bloqueo de cuenta es una " -"condición\n" -" temporal y debe ser desbloqueada por un administrador.\n" -"\n" -" Esto conecta con el máster IPA y muestra el estado de bloqueo de cada " -"uno.\n" -"\n" -" Para determinar si una cuenta está bloqueada en un servidor dado usted\n" -" necesita comparar el número de accesos fallido y la hora del último " -"fallo. Para\n" -" que una cuenta se bloquee debe exceder maxfail dentro de la duración\n" -" failinterval según se especifique en la política de contraseña asociada " -"con el\n" -" usuario.\n" -"\n" -" El contador de acceso fallado se modifica solo cuando un usuario intenta " -"acceder\n" -" por lo que es posible que una cuenta puede aparecer bloqueada pero el " -"último\n" -" acceso fallado sea más antiguo que el lockouttime de la política de " -"contraseña.\n" -" Esto significa que el usuario puede intentar acceder otra vez." - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Modificar una confianza (para uso futuro).\n" -"\n" -" Actualmente solo está disponible la opción predeterminada para modificar " -"los\n" -" atributos LDAP. Opciones más especificas serán añadidas en futuras " -"versiones.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Modificar una regla automiembro.\n" -" " - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" -"\n" -" Modificar dominios reino\n" -"\n" -" Comprobación DNS: Cuando añade manualmente un dominio a la lista, por\n" -" defecto se lleva a cabo una comprobación DNS. Asegura que el dominio " -"está\n" -" asociado con el reino IPA, comprobando si el dominio tiene un registro " -"_kerberos\n" -" TXT que contenga el nombre del reino IPA realm name. Esta comprobación " -"se\n" -" puede saltar especificando la opción --force.\n" -"\n" -" Eliminación: cuando un dominio reino que tiene una zona DNS coincidente\n" -" gestionada por IPA se borra, el registro _kerberos TXT correspondiente " -"en la\n" -" es borrado automáticamente también. Los demás registros en la zona o la " -"zona\n" -" no son afectados.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Borrar condiciones de una regla automiembro.\n" -" " - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Búsqueda reglas automiembro.\n" -" " - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" -"\n" -" Buscar usuarios que coincidan con el certificado suministrado.\n" -"\n" -" Este comando se basa en SSSD para recuperar la lista de los usuarios\n" -" coincidentes y puede devolver los datos en cache. Para más información " -"sobre \n" -" la purga del cache SSSD, vea por favor la documentación sss_cache.\n" -" " - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -"Desbloquear una cuenta de usuario\n" -"\n" -" Una cuenta de usuario puede llegar a bloquearse si la contraseña se ha " -"introducido incorrectamente demasiadas\n" -"veces dentro de un período de tiempo controlado por la política de\n" -"contraseña. Una cuenta bloqueada es una condición temporal y puede ser " -"desbloqueada por\n" -"un administrador." - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" -"\n" -" Este es el equivalente:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Añadir localización:\n" -" ipa location-add location --description 'My location'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Borrar localización:\n" -" ipa location-del location\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Encontrar todas las localizaciones:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -" Mostar la configuración de un servidor DNS especifico:\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" -"\n" -" Muestra el rol maestro IPA implícito:\n" -" ipa server-role-find --include-master\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Mostrar localización específica:\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Mostrar un servidor específico:\n" -" ipa server-show ipa.example.com\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Muestra el estado del rol 'DNS server' sobre un servidor:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Muestra el estado de todos los roles configurados en un servidor:\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Muestra el estado de todos los roles que contienen 'AD' sobre un " -"servidor:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Actualizar la configuración de un servidor DNS especifico:\n" -" ipa dnsserver-mod\n" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" -"\n" -" Añadir registro LOC para example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -" Añadir un host que pueda manejar la tabla de teclas y certificado del " -"host:\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" -"\n" -" Añadir un servidor de correo para example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Añadir un nuevo host con una contraseña de un uso:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -" Añadir un nuevo host con una contraseña aleatoria de un uso:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -" Añadir un nuevo host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Añadir un nuevo servidor:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Añadir una nueva ficha:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - msgid "" "\n" " Add a new token:\n" @@ -524,1641 +883,323 @@ msgstr "" " Añadir una nueva ficha:\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -" Añadir un permiso que conceda la capacidad de gestionar la membresía de un " -"grupo:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Gestiona Miembros de Grupo\"\n" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" -"\n" -" Añadir un permiso que concede la creación de usuarios:\n" -" ipa permission-add --type=user --permissions=add \"Añadir Usuarios\"\n" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" -"\n" -" Añadir otro registro usando las opciones específicas de registro MX:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" -"\n" -" Añadir otro registro usando el modo interactivo (iniciado cuando dnsrecord-" -"add, dnsrecord-mod,\n" -" o dnsrecord-del son ejecutados sin opciones:\n" -" ipa dnsrecord-add example.com @\n" -" Por favor elija un tipo de recurso de registro DNS a añadir\n" -" Los tipos más comunes para este tipo de zona son: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" -"\n" -" Añadir un nuevo registro A para www.example.com. Crear un registro inverso " -"en la zona\n" -" inversa apropiada también. En esta caso un registro PTR \"2\" apuntando a " -"www.example.com\n" -" será creado en la zona 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" -"\n" -" Añadir nuevo registro PTR para www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" -"\n" -" Añadir nuevos registros SRV para servidores LDAP. Tres cuartos de las " -"peticiones\n" -"debería ir a fast.example.com, un cuarto a slow.example.com. Si ninguno " -"está\n" -"disponible conmutar a backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" -"\n" -" Añadir nueva zona reversa especificada por la dirección IP de red:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" -"\n" -" Añadir nueva zona:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" -"\n" -" Añadir segundo servidor de nombres para example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" -"\n" -" Añadir permiso de sistema que puede ser usado para delegación de privilegio " -"por zona:\n" -" ipa dnszone-add-permission example.com\n" +msgid "Add a new YubiKey OTP token." +msgstr "Añadir una nueva ficha YubiKey OTP." -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" -"\n" -" Después de esta modificación tres quintos de las peticiones deberían ir a \n" -" fast.example.com y dos quintos a slow.example.com.\n" +msgid "YubiKey slot" +msgstr "Espacio YubiKey" -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Permitir al usuario crear una tabla de teclas:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgid "No free YubiKey slot!" +msgstr "¡No hay espacio YubiKey libre!" -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" -"\n" -" Permitir al usuario crear una tabla de claves:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "Quitando %(servers)s desde la copia de topología, por favor espere..." -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" -"\n" -" Un ejemplo del modom interactivo para el comando dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Regla Sudo Habilitada “%s”" -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" -"\n" -" Cambia la política de reenvío para external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Regla Sudo Deshabilitada “%s”" -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Cambiar el secreto:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "Añadiendo la opción \"%(option)s\" a Sudo Rule \"%(rule)s\"" -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Cambiar el vendedor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Quitada opción \"%(option)s\" de Sudo Rule \"%(rule)s\"" -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" -"\n" -" Comprueba el estado de una petición de firma:\n" -" ipa cert-status 10\n" +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "La repica de la topologia de sufijo \"%(suffix)s\" está en orden." -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" -"\n" -" Crea una nueva Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "La replica de la topología con sufijo \"%(suffix)s\" contiene errores." -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" -"\n" -" Delegar zona sub.example a otro servidor de nombres:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgid "Topology is disconnected" +msgstr "La topología está desconectada" -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" msgstr "" -"\n" -" Borra una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-del rule1\n" +"El servidor %(srv)s no puede contactar con los servidores: %(replicas)s" -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Borrar una configuración:\n" -" ipa radiusproxy-del MyRADIUS\n" +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "Número máximo de acuerdo recomendados por replica sobrepasado" -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Borrar un host:\n" -" ipa host-del test.example.com\n" +msgid "Maximum number of agreements per replica" +msgstr "Número máximo de acuerdos por replica" -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Borrar una ficha:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "El servidor \"%(srv)s\" tiene %(n)d acuerdos con servidores:" -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" -"\n" -" Borra la zona de reenvío external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" +msgid "Delete a user, keeping the entry available for future use" +msgstr "Borrar un usuario manteniendo la entrada disponible para un uso futuro" -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" -"\n" -" Borrar ujn servidor de nombres previamente añadido desde example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgid "Delete a user" +msgstr "Borrar un usuario" -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" -"\n" -" Borrar zona example.com con todos los registros de recursos:\n" -" ipa dnszone-del example.com\n" +msgid "preserve and no-preserve cannot be both set" +msgstr "preserve y no-preserve no pueden estar ambos ajustados" -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" -"\n" -" Deshabilitar una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-disable rule1\n" +msgid "Write certificate (chain if --chain used) to file" +msgstr "Escribir certificado (chain if --chain used) a archivo" -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" -"\n" -" Deshabilita el reenvío global para el sub-árbol dado:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" +msgid "Split DNS record to parts" +msgstr "Divide registro DNS en partes" -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -" Deshabilitar la clave Kerberos de host, el certificado SSL y todos sus " -"servicios:\n" -" ipa host-disable test.example.com\n" +msgid "Please choose a type of DNS resource record to be added" +msgstr "Por favor seleccione un tipo de origen de DNS para ser agregado" -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"\n" -" Muestra información sobre una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-show rule1\n" +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Los tipos mas comunes para este tipo de zona son: %s\n" -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -" Mostrar la configuración global del Mapeo de Identidad de Certificado:\n" -" ipa certmapconfig-show\n" +msgid "DNS resource record type" +msgstr "Registro de tipo de recurso DNS " -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" -"\n" -" Habilitar una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-enable rule1\n" +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Invalido o tipo no soportado. Valores permitidos son: %s" -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Examinar la configuración:\n" -" ipa radiusproxy-show MyRADIUS\n" +msgid "No option to modify specific record provided." +msgstr "No hay opción para modificar registro específico proporcionado." -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Examinar la ficha:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "Current DNS record contents:\n" +msgstr "Contenidos actuales del registro DNS:\n" -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" -"\n" -" Encontrar registros A con el valor 192.0.2.2 en zona example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Modificar %(name)s '%(value)s'?" +#, python-format msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" -"\n" -" Encuentra todas las Reglas de Mapeo de Identidad de Certificado con el " -"dominio especificado:\n" -" ipa certmaprule-find --domain example.com\n" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +"%(count)d %(type)s registro omitido. Sólo un valor por DNS tipo de registro " +"puede ser modificado a la vez." +msgstr[1] "" +"%(count)d %(type)s registros omitidos. Sólo un valor por DNS tipo de " +"registro puede ser modificado a la vez." msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." msgstr "" -"\n" -" Encontrar todos los servidores cuyas entradas incluyan la cadena \"example." -"com\":\n" -" ipa radiusproxy-find example.com\n" +"Ni --del-all ni opciones para borrar un registro en concreto ha sido " +"especificado.\n" +"El comando de ayuda puede ser consultado para ver los tipos de registros " +"soportados." -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" -"\n" -" Encontrar registros para recursos con \"www\" en su nombre en la zona " -"example.com:\n" -" ipa dnsrecord-find example.com www\n" +msgid "No option to delete specific record provided." +msgstr "Ninguna opción para borrar un registro en concreto especificado." -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" -"\n" -" Encontrar una zona con \"example\" en su nombre de dominio:\n" -" ipa dnszone-find example\n" +msgid "Delete all?" +msgstr "¿Borrar todos?" -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" -"\n" -" Reenvía todas las peticiones para la zona external.example.com a otro " -"reenviador\n" -" usando una política \"first\" (enviará las peticiones al reenviador " -"seleccionado y si\n" -" no hay respuesta usará los servidores raíz globales):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Borrar %(name)s '%(value)s'?" -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" -"\n" -" Generar y recuperar un tabla de clave para un servicio IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" +msgid "Server will check DNS forwarder(s)." +msgstr "El servidor revisará los \"DNS forwarder(s)\"." -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" -"\n" -" Si se configura un reenviador global, todas las peticiones para las que " -"este\n" -" servidor no está autorizado (e.g. sub.example.com) serán enrutados al " -"reenviador global.\n" -" La configuración de reenvío global se puede anular por zona.\n" +msgid "This may take some time, please wait ..." +msgstr "Esto puede tomar un poco mas de tiempo. Por favor espere ..." -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" -"\n" -" Lista todas las zonas de reenvío:\n" -" ipa dnsforwardzone-find\n" +msgid "DNS forwarder" +msgstr "Reenviador DNS" -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" +msgid "file to store DNS records in nsupdate format" +msgstr "archivo para almacenar los registros DNS en formato nsupdate" msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" msgstr "" -"\n" -" Modificar la configuración global del Mapeo de Identidad de Certificado:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" +"Incapaz de mostrar el código QR usando la codificación de salida " +"configurada. Por favor use la ficha URI para configurar su dispositivo OTP" msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." msgstr "" -"\n" -" Modificar una Regla de Identidad de Certificado:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" +"El código QR es más grande que el de la salida tty. Por favor modifique el " +"tamaño de su terminal." -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" -"\n" -" Modifica la configuración DNS global y establece una lista de reenviadores " -"globales:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgid "Synchronize an OTP token." +msgstr "Sincronice una ficha OTP" -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Modificar información sobre un host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" +msgid "User ID" +msgstr "ID de usuario" -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" -"\n" -" Modificar la zona para permitir actualizaciones dinámicas desde los propios " -"registros del host en el reino EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgid "Password" +msgstr "Contraseña" -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" -"\n" -" Modificar la zona para permitir transferencias de zona solo para la red " -"local:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgid "First Code" +msgstr "Primer Código" -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -" Quitar las claves públicas SSH de un host y actualizar DNS para reflejar " -"este cambio:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgid "Second Code" +msgstr "Segundo Código" -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" -"\n" -" Quita un certificado del estado de cogido para revocación:\n" -" ipa cert-remove-hold 1032\n" +msgid "Token ID" +msgstr "ID de ficha" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" -"\n" -" Pide un nuevo certificado y añade el principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "No puede leer el fichero '%(filename)s': %(exc)s" -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" -"\n" -" Resuelve un nombre de host para ver si existe (añadirá el dominio IPA\n" -" predeterminado si no se ha incluido ninguno):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "No puede decodificar fichero '%(filename)s': %(exc)s" -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" -"\n" -" Recupera un certificado existente:\n" -" ipa cert-show 1032\n" +msgid "Invalid credentials" +msgstr "Credenciales no válidas" -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" -"\n" -" Revocar un certificado (vea RFC 5280 para detalles de la razón):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" +msgid "Create a new vault." +msgstr "Crear una nueva bóveda." -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" +msgid "Vault password" +msgstr "Contraseña de la bóveda" -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" -"\n" -" La semántica de reenvío en IPA coincide con la semántica en BIND y depende " -"del\n" -" tipo de zona:\n" -" * Zona Maestra: BIND local responde con autoridad a las consultas de " -"datos en la\n" -" zona dada (incluyendo las respuestas de autoridad NXDOMAIN) y el reenvío\n" -" afecta solo a las peticiones para nombres debajo de los cortes de zona " -"(registros \n" -" NS) de las zonas servidas localmente.\n" -"\n" -" * Zona de Reenvío:la zona de reenvío no contiene datos autorizados. las\n" -" las consultas de reenvío BIND, que no pueden ser contestadas desde su " -"cache\n" -" local, para configurar reenviadores.\n" +msgid "File containing the vault password" +msgstr "Fichero que contiene la contraseña de bóveda" -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" -"\n" -" Semánticas de la opción --forward-policy:\n" -" * none - deshabilita el reenvío para una zona dada.\n" -" * first - reenvía todas las peticiones a los reenviadores configurados. " -"Si fallan,\n" -" resuelven usando los servidores raíz DNS.\n" -" * only - reenvía todas las peticiones a los reenviadores configurados y " -"si fallan,\n" -" devuelve un fallo.\n" +msgid "File containing the vault public key" +msgstr "Fichero que contiene la clave pública de la bóveda" -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" -"\n" -" Muestra la zona de reenvío external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" +msgid "Password can be specified only for symmetric vault" +msgstr "La contraseña solo se debe especificar para bóveda simétrica" -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" -"\n" -" Muestra la configuración DNS global:\n" -" ipa dnsconfig-show\n" +msgid "Public key can be specified only for asymmetric vault" +msgstr "La clave pública puede ser especificada solo para la bóveda asimétrica" -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" -"\n" -" Mostrar registros para el recurso www en zona example.com\n" -" ipa dnsrecord-show example.com www\n" +msgid "Password specified multiple times" +msgstr "Contraseña especificada múltiples veces" -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" -"\n" -" Mostrar zona example.com:\n" -" ipa dnszone-show example.com\n" +msgid "Public key specified multiple times" +msgstr "Clave pública especificada múltiples veces" -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" -"\n" -" El modo interactivo puede ser usado para modificación fácil:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No se suministra opción para modificar registro específico.\n" -" El registro actual DNS contiene:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modificar registro SRV '0 3 389 fast.example.com'? Si/No (predeterminado " -"No):\n" -" Modificar registro SRV '0 1 389 slow.example.com'? Si/No (predeterminado " -"No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" +msgid "Missing vault public key" +msgstr "Clave pública de la bóveda desaparecida" -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" -"\n" -" Esta configuración reenvia todas las peticiones para nombres fuera del sub " -"árbol example.com\n" -" a reenviadores globales. Se utiliza el proceso de resolución recursiva " -"normal para \n" -" los nombres dentro del sub-árbol example.com (i.e. registros NS son " -"seguidos etc.).\n" +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "Clave pública de bóveda no válida o no soportada: %s" -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* Un permiso concede acceso a leer, escribir, añadir, borrar, buscar o " -"comparar.\n" -"* Un privilegio combina permisos similares (por ejemplo todos los permisos\n" -" necesarios para añadir un usuario).\n" -"* Un rol concede un conjunto de privilegios a usuarios, grupos, hosts o " -"grupos de host.\n" +msgid "Modify a vault." +msgstr "Modificar una bóveda" -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" -"\n" -"* El host debe existir\n" -"* El servicio debe existir (o debe usar la opción --add para añadirlo " -"automáticamente)\n" +msgid "Change password" +msgstr "Cambiar contraseña" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" -"\n" -"Se ha almacenado un certificado con un servicio principal y un servicio " -"principal\n" -"necesita un host.\n" +msgid "Old vault password" +msgstr "Contraseña de bóveda antigua" -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Una condición es una expresión regular usada por 389-ds para coincidir una " -"nueva\n" -"entrada entrtante con una regla de auto miembro. Si la coincidencia es una " -"regla\n" -"inclusiva la entrada se añade al grupo o grupo de host apopiado.\n" +msgid "File containing the old vault password" +msgstr "Fichero conteniendo la contraseña de bóveda antigua" -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Se podría especificar un grupo o grupo de host predeterminado para las " -"entradas\n" -"que no coincidan con ninguna regla. En caso de entradas de usuario, este " -"grupo\n" -"será un grupo de reserva puesto que todos los usuarios son por defecto " -"miembros del grupo especificado en la configuración IPA.\n" +msgid "New vault password" +msgstr "Nueva contraseña de bóveda" -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" -"\n" -"Un permiso habilita una delegación de derechos de grano fino. Un permiso es " -"una\n" -"vuelta alrededor legible por humanos de una Regla de Control de Acceso (ACI) " -"o\n" -"instrucción 389-ds.\n" -"Un permiso concede el derecho de llevar a cabo una tarea especifica como " -"añadir\n" -"un usuario, modificar un grupo, etc.\n" +msgid "File containing the new vault password" +msgstr "Fichero que contiene la nueva contraseña de bóveda" -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"Un permiso está constituido por diversas partes:\n" -"\n" -"1. El nombre del permiso.\n" -"2. El objetivo del permiso.\n" -"3. Los derechos concedidos por el permiso.\n" +msgid "Old vault private key" +msgstr "Clave privada de bóveda antigua" -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"Un permiso puede contener otros permisos.\n" +msgid "File containing the old vault private key" +msgstr "Fichero que contiene la clave privada de bóveda antigua" -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Un regla está directamente asociada con un grupo por nombre, de modo que " -"usted\n" -"no puede crear un regla sin un grupo o grupo de host que lo acompañen.\n" +msgid "File containing the new vault public key" +msgstr "Fichero que contiene la nueva clave pública de bóveda" -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -"Añadir un nuevo rango de ID.\n" -"\n" -" Para añadir un nuevo rango de ID siempre debe especificar\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Adicionalmente\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" puede ser dado para un nuevo rango de ID para el dominio local mientras\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" deben ser dados para añadir un nuevo rango para un AD de dominio de " -"confianza.\n" -"\n" -" PRECAUCIÓN:\n" -"\n" -" El plugin DNA en 389-ds ubicará IDs en base a los rangos configurados " -"para el dominio\n" -" local. Actualmente el plugin DNA \"no puede\" ser reconfigurado por si " -"mismo en base a\n" -" los rangos locales ajustados por medio de esta familia de comandos.\n" -"\n" -" El cambio manual de configuración ha sido hecho en la configuración del " -"plugin DNA\n" -" para el nuevo rango local. Específicamente, el atributo dnaNextRange de " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' ha " -"sido\n" -" modificado para coincidir con el nuevo rango.\n" -" " +msgid "New public key specified multiple times" +msgstr "Nueva clave pública especificada múltiples veces" -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Añadir nueva confianza a usar.\n" -"\n" -"Este comando establece la relación de confianza con otro dominio que llegar " -"a ser \n" -"trusted'. Como resultado, los usuarios del dominio de confianza puede " -"acceder a\n" -"los recursos de este dominio.\n" -"\n" -"Solo están soportados ahora la confianza con dominios Active Directory.\n" -"\n" -"El comando se puede ejecutar seguramente múltiples veces contra el mismo\n" -"dominio, esto causará cambios en las credenciales de relaciones de confianza " -"en\n" -"ambos lados.\n" -"\n" -"Advierta que si el comando se ejecuta previamente con un tipo de rango " -"específico\n" -"o con detección automática del tipo de rango y usted desea configurar un " -"tipo de\n" -"rango diferente, usted puede necesitar borrar primero la ID del rango " -"usando \n" -"ipa idrange-del antes de reintentar el comando con el rango deseado.\n" -" " +msgid "Missing new vault public key" +msgstr "Nueva clave pública de bóveda desaparecida" -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"Adicionalmente, existen las siguientes opciones de conveniencia.\n" -"Fijando una de estas opcines ajustará el correspondiente atributo(s).\n" -"1. type: un tipo de objeto (usuario, grupo, etc); fija sub-árbol y filtro " -"objetivo.\n" -"2. memberof: se aplica a los miembros de un grupo; fija filtro objetivo\n" -"3. targetgroup: concede acceso para modificar un grupo específico (como\n" -" concediendo los derechos para gestiona la membresía de grupo); fija " -"objetivo.\n" +msgid "Archive data into a vault." +msgstr "Datos archivados en una bóveda" -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" -"\n" -"Todas las CAs excepto la CA 'IPA' pueden ser deshabilitadas y vueltas a " -"habilitar.\n" -"Deshabilitar una CA evita que envíe certificados pero no afecta a la validez " -"de sus \n" -"certificados.\n" +msgid "Binary data to archive" +msgstr "Datos binarios para archivar" -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"La bóveda asymmetric es similar a la bóveda standard, pero\n" -"encripta el secreto usando una clave pública antes del transporte.\n" -"El secreto sólo se puede recuperar usando la clave privada.\n" +msgid "File containing data to archive" +msgstr "Fichero conteniendo datos para archivar" -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Regla de Membresía Automática.\n" +msgid "Override existing password" +msgstr "Anular contraseña existente" -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" -"\n" -"Automontaje\n" -"\n" -"Almacena configuración automount(8) para autofs(8) en IPA.\n" -"\n" -"La base de una configuración de automontaje es el fichero de configuración\n" -"auto.master. Este es también la base de la localización en IPA. Diversas\n" -"configuraciones auto.master se pueden almacenar en localizaciones " -"separadas.\n" -"Una localización es específica de la implementación con la predeterminada \n" -"llamada 'default'. Por ejemplo, usted puede tener localizaciones por región " -"geográfica, por piso, por tipo, etc.\n" -"\n" -"Automontaje tiene tres tipos de objeto básicos: localizaciones, mapas y " -"claves.\n" -"\n" -"Una localización define un conjunto de mapas anclados en auto.master. Esto " -"le\n" -"permite almacenar múltiples configuraciones de automontaje. Una localización " -"en\n" -"si misma no es muy interesante, es solo un punto donde iniciar un nuevo mapa " -"de automontaje.\n" -"\n" -"Un mapa es aproximadamente equivalente a un archivo automount discreto y \n" -"suministra almacenamiento para las claves.\n" -"\n" -"Una clave es un punto de montaje asociado con un mapa.\n" -"\n" -"Cuando se crea una nueva localización, se crean automáticamente dos mapas\n" -"para ella: auto.master y auto.direct. auto.master es el mapa raíz para todos " -"los\n" -"mapas de automontaje para la localización. auto.direct es el mapa " -"predeterminado\n" -"para montajes directos y se monta sobre /-.\n" -"\n" -"Un mapa de automontaje puede contener una clave de submontaje. Esta clave\n" -"define una localización dentro del mapa que referencia a otro mapa. Esto " -"puede ser\n" -"hecho bien usando utomountmap-add-indirect –parentmap o manualmente con\n" -"automountkey-add estableciendo la información a \"-type=autofs :" -"\".\n" -"\n" -"EJEMPLOS:\n" -"\n" -"Localizaciones:\n" -"\n" -" Crear una localización llamada, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Mostrar la nueva localización:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Encontrar localizaciones disponibles:\n" -" ipa automountlocation-find\n" -"\n" -" Borrar una localización automontaje llamada:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Mostrar cual de los mapas de automontaje parecería como si estuviera en el " -"sistema de archivos:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Importar una configuración existente a una localización:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" La importación fallará si se encuentra cualquier entrada duplicada. Para " -"operaciones continuas donde los errores son ignorados, use la opción --" -"continue.\n" -"\n" -"Mapas:\n" -"\n" -" Crear un nuevo mapa, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Mostrar el nuevo mapa:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Encontrar mapas en la localización baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Crear un mapa indirecto con auto.share como submontaje:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" Esto es equivalente a:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Borrar el mapa auto.share:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Claves:\n" -"\n" -" Crear una nueva clave para el mapa auto.share en la localización " -"baltimore. Esto\n" -" ata el mapa que henos creado previamente a auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Crear una nueva clave para nuestro mapa auto.share, un montaje NFS para " -"páginas de manual:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Encontrar todas las claves para el mapa auto.share:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Encontrar todas las claves directas de automontaje:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Borrar la clave man desde el mapa auto.share:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" +#, fuzzy +#| msgid "Public key specified multiple times" +msgid "Input data specified multiple times" +msgstr "Clave pública especificada múltiples veces" +#, python-format msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" msgstr "" -"\n" -"En base al propietario hay tres categorías de bóveda:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"En base al mecanismos de seguridad hay tres tipos de\n" -"bóvedas:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" +#, fuzzy +#| msgid "Bind rule type" +msgid "Invalid vault type" +msgstr "Tipo de regla de enlace" -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Brinde claridad a la membresía de hosts y usuarios configurando patrones\n" -"inclusivos o exclusivos de expresiones regulares, usted puede " -"automáticamente\n" -"asignar una nuevas entradas a un grupo o grupo de host en base a la " -"información del atributo.\n" +#, fuzzy +#| msgid "Archive data into a vault." +msgid "Retrieve a data from a vault." +msgstr "Datos archivados en una bóveda" -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" -"\n" -"Las CAs (todas excepto la CA 'IPA') pueden ser borradas. El borrado de una " -"CA\n" -"origina que la su firma sea revocada y su clave privada borrada.\n" +#, fuzzy +#| msgid "Failed allowed to retrieve keytab" +msgid "File to store retrieved data" +msgstr "Falló permitir recuperar una KeyTab" -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" -"\n" -"Las CAs están habilitadas en la creación, pero su uso está sujeto a las ACLs " -"de CA\n" -"a no ser que el operador haya permitido saltarse las ACLs de CA.\n" +#, fuzzy +#| msgid "Old vault private key" +msgid "Vault private key" +msgstr "Clave privada de bóveda antigua" -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" -"\n" -"Mapeando la Identidad del Certificado\n" +#, fuzzy +#| msgid "File containing the old vault private key" +msgid "File containing the vault private key" +msgstr "Fichero que contiene la clave privada de bóveda antigua" -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"Las peticiones de certificado existen en la forma de una Petición de Firma " -"de\n" -"Certificado (CSR) en formato PEM.\n" +msgid "Data" +msgstr "Datos" -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" -"\n" -"Los certificados pueden ser buscados por sujeto del certificado, número de " -"serie,\n" -"razón de la revocación, fechas de validez y fecha de envío.\n" +#, fuzzy +#| msgid "Public key specified multiple times" +msgid "Private key specified multiple times" +msgstr "Clave pública especificada múltiples veces" -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Confianza de reino cruzado\n" -"\n" -"Gestionar relaciones de confianza entre los dominios IPA y Active " -"Directory.\n" -"\n" -"Con el objetivo de permitir a los usuarios de un dominio remoto acceder a " -"los\n" -"recursos en el dominio IPA, se necesita establecer relaciones de confianza.\n" -"Actualmente IPA soporta solo confianza entre dominios IPA y Active Directory " -"bajo \n" -"el control de Windows Server 2008 o posterior, con nivel funcional 2008 o " -"posterior.\n" -"\n" -"Por favor advierta que el DNS en ambos lados de los dominios IPA y Active\n" -"Directory deberían ser configurados apropiadamente para descubrir a cada " -"uno.\n" -"Las relaciones de confianza se apoyan en la capacidad de descubrir recursos " -"especiales en el otro dominio por medio de los registros DNS.\n" -"\n" -"Ejemplos:\n" -"\n" -"1. Establecer confianza de reino cruzado con Active Directory usando el \n" -" dministrador de credenciales AD:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. Listar todas las relaciones de confianza existentes:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Mostrar detalles de la relación de confianza específica:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Borrar relaciones de confianza existentes:\n" -"\n" -" ipa trust-del \n" -"\n" -"Una vez que la relación de confianza está establecida, los usuarios remotos\n" -"necesitarán ser mapeados a grupos POSIX locales con el objetivo de usar " -"recursos\n" -"IPA. El mapeado debería ser hecho por medio del uso de la membresía externa " -"de\n" -"grupo no-POSIX y después este grupo debería ser incluido en uno de los " -"grupos locales POSIX.\n" -"\n" -"Ejemplo:\n" -"\n" -"1. Crear un grupo para el mapeo de administrador de dominio de confianza y " -"su\n" -"grupo POSIX local:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Añadir identificador de seguridad de Domain Admins del al " -"grupo\n" -" ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Permitir a los miembros del grupo admins_external ser asociados con el " -"grupo\n" -" POSIX ad-admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lista de miembros de miembros externos del grupo ad_admins_external para " -"ver\n" -" sus SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"CONFIGURACIÓN GLOBAL DE CONFIANZA\n" -"\n" -"Cuando se instale un subpaquete de confianza IPA AD y está corriendo ipa-" -"adtrust-\n" -"install, se genera una configuración de dominio local (SID, GUID, nombre\n" -"NetBIOS). Estos identificadores se usan entonces cuando se comunica con un\n" -"dominio de confianza de un tipo concreto.\n" -"\n" -"1. Mostrar la configuración de confianza global para el tipo de confianza " -"Active Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modificar la configuración global de todos los confiados de tipo Active " -"Directory y\n" -" establecer un grupo primario de retroceso (el GID del grupo primario de " -"retroceso\n" -" se usa como GID de usuario primario y el usuario autenticando al dominio " -"IPA no\n" -" tiene ningún otro GID primario establecido ya):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Cambiar el grupo primario de retroceso al grupo escondido predeterminado\n" -" (cualquier grupo con un objeto clae posixGroup está permitido):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" +#, fuzzy +#| msgid "Missing vault public key" +msgid "Missing vault private key" +msgstr "Clave pública de la bóveda desaparecida" -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" -"\n" -"La configuración de DNS que se pasa al script de instalación de la línea de\n" -"comandos está almacenado en un fichero de configuración local en cada " -"servidor\n" -"IPA donde el servicio DNS está configurado. Estos ajustes locales pueden ser " -"anulados con una configuración común almacenada en el servidor LDAP:\n" +msgid "Unrevoked" +msgstr "No revocado" -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" -"\n" -"Configuración del servidor DNS\n" +msgid "Error" +msgstr "Error" -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" -"\n" -"Las fechas se tratan como GMT para coincidir con las fechas de los " -"certificados.\n" +msgid "Input filename" +msgstr "Entrada nombre de archivo" -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"El borrado o renombrado de un permiso gestionado, así como el cambio de su\n" -"objetivo, no está permitido.\n" +msgid "File to load the certificate from." +msgstr "Archivo desde donde cargar el certificado" msgid "" "\n" @@ -2419,14 +1460,2590 @@ msgstr "" "targetattr\n" "REEMPLAZA los atributos actuales, no los añade.\n" +msgid "ACI name" +msgstr "Nombre de ACI" + +msgid "Permission" +msgstr "Permiso" + +msgid "Permission ACI grants access to" +msgstr "El permiso ACI permite el acceso a" + +msgid "User group" +msgstr "Grupo de usuarios" + +msgid "User group ACI grants access to" +msgstr "El grupo de usuarios ACI permite el acceso a" + +msgid "Permissions" +msgstr "Permisos" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "Permisos a obtener(lectura, escritura, añadir, borrar, todos)" + +msgid "Attributes to which the permission applies" +msgstr "Atributos a los que aplican los permisos" + +msgid "Attributes" +msgstr "Atributos" + +msgid "Type" +msgstr "Tipo" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" +"Objeto de tipo IPA (usuario, grupo, grupo de host, servicio, grupo de red)" + +msgid "Member of" +msgstr "Miembro de" + +msgid "Member of a group" +msgstr "Miembro de un grupo" + +msgid "Filter" +msgstr "Filtro" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Filtro legal LDAP (p.ej. ou=Ingeniería)" + +msgid "Subtree" +msgstr "Subárbol" + +msgid "Subtree to apply ACI to" +msgstr "Subárbol al que aplicar ACI" + +msgid "Target group" +msgstr "Grupo elegido" + +msgid "Group to apply ACI to" +msgstr "Grupo al que aplicar API" + +msgid "Target your own entry (self)" +msgstr "Dirija su propia entrada (usted)" + +msgid "Apply ACI to your own entry (self)" +msgstr "Aplique ACI a su propia entrada (usted)" + +msgid "Create new ACI." +msgstr "Crear nuevo ACI." + +msgid "ACI prefix" +msgstr "Prefijo ACI" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" +"Prefijo utilizado para distinguir los tipos de ACI (permiso,delegación, " +"autoservicio, ninguno)" + +msgid "Test the ACI syntax but don't write anything" +msgstr "Probar la sintaxis pero no escribir nada" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Recuperar e imprimir todos los atributos del servidor. Afecta a la salida " +"del comando." + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Imprimir entradas como almacenadas en el servidor. Solamente afecta formato " +"de salida." + +msgid "User-friendly description of action performed" +msgstr "Descripción sencilla de la acción realizada" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "El valor de primary_key de la entrada, p.ej., «jperez» para un usuario" + +msgid "Delete ACI." +msgstr "Borrar ACI." + +msgid "True means the operation was successful" +msgstr "«Verdadero» significa que la operación fue exitosa" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" +"\n" +"Buscar ACIs.\n" +"\n" +" Devolver una lista de ACIs\n" +"\n" +" EJEMPLOS:\n" +"\n" +" Para encontrar todos los ACIs que se aplican directamente a miembros " +"del grupo ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" Para encontrar todos los ACIs que obtienen acceso añadir:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Advierta que el comando find solo busca el texto dado en el conjunto de " +"ACIs, no\n" +" evalúa los ACIs a ver si aplicaría alguno.\n" +" Por ejemplo, la búsqueda sobre memberof=ipausers encontrará todos los " +"ACIs\n" +" que tengan ipausers como memberof. Allí puede haber otros ACIs que se\n" +" apliquen a miembros de ese grupo indirectamente.\n" +" " + +msgid "A string searched in all relevant object attributes" +msgstr "Buscada una cadena en todos los atributos de objeto relevantes" + +msgid "Primary key only" +msgstr "Sólo clave primaria" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +msgid "Number of entries returned" +msgstr "Cantidad de entradas devueltas" + +msgid "True if not all results were returned" +msgstr "Verdadero si no todos los resultados se devolvieron" + +msgid "Modify ACI." +msgstr "Modificar ACI." + +msgid "Rename an ACI." +msgstr "Renombrar un ACI." + +msgid "New ACI name" +msgstr " Nuevo nombre de ACI" + +msgid "Display a single ACI given an ACI name." +msgstr "Muestra un único ACI dando un nombre de ACI." + +msgid "Location of the ACI" +msgstr "Localización del ACI" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" +"\n" +"Automontaje\n" +"\n" +"Almacena configuración automount(8) para autofs(8) en IPA.\n" +"\n" +"La base de una configuración de automontaje es el fichero de configuración\n" +"auto.master. Este es también la base de la localización en IPA. Diversas\n" +"configuraciones auto.master se pueden almacenar en localizaciones " +"separadas.\n" +"Una localización es específica de la implementación con la predeterminada \n" +"llamada 'default'. Por ejemplo, usted puede tener localizaciones por región " +"geográfica, por piso, por tipo, etc.\n" +"\n" +"Automontaje tiene tres tipos de objeto básicos: localizaciones, mapas y " +"claves.\n" +"\n" +"Una localización define un conjunto de mapas anclados en auto.master. Esto " +"le\n" +"permite almacenar múltiples configuraciones de automontaje. Una localización " +"en\n" +"si misma no es muy interesante, es solo un punto donde iniciar un nuevo mapa " +"de automontaje.\n" +"\n" +"Un mapa es aproximadamente equivalente a un archivo automount discreto y \n" +"suministra almacenamiento para las claves.\n" +"\n" +"Una clave es un punto de montaje asociado con un mapa.\n" +"\n" +"Cuando se crea una nueva localización, se crean automáticamente dos mapas\n" +"para ella: auto.master y auto.direct. auto.master es el mapa raíz para todos " +"los\n" +"mapas de automontaje para la localización. auto.direct es el mapa " +"predeterminado\n" +"para montajes directos y se monta sobre /-.\n" +"\n" +"Un mapa de automontaje puede contener una clave de submontaje. Esta clave\n" +"define una localización dentro del mapa que referencia a otro mapa. Esto " +"puede ser\n" +"hecho bien usando utomountmap-add-indirect –parentmap o manualmente con\n" +"automountkey-add estableciendo la información a \"-type=autofs :" +"\".\n" +"\n" +"EJEMPLOS:\n" +"\n" +"Localizaciones:\n" +"\n" +" Crear una localización llamada, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Mostrar la nueva localización:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Encontrar localizaciones disponibles:\n" +" ipa automountlocation-find\n" +"\n" +" Borrar una localización automontaje llamada:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Mostrar cual de los mapas de automontaje parecería como si estuviera en el " +"sistema de archivos:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Importar una configuración existente a una localización:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" La importación fallará si se encuentra cualquier entrada duplicada. Para " +"operaciones continuas donde los errores son ignorados, use la opción --" +"continue.\n" +"\n" +"Mapas:\n" +"\n" +" Crear un nuevo mapa, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Mostrar el nuevo mapa:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Encontrar mapas en la localización baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Crear un mapa indirecto con auto.share como submontaje:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" Esto es equivalente a:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Borrar el mapa auto.share:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Claves:\n" +"\n" +" Crear una nueva clave para el mapa auto.share en la localización " +"baltimore. Esto\n" +" ata el mapa que henos creado previamente a auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Crear una nueva clave para nuestro mapa auto.share, un montaje NFS para " +"páginas de manual:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Encontrar todas las claves para el mapa auto.share:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Encontrar todas las claves directas de automontaje:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Borrar la clave man desde el mapa auto.share:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" + +msgid "Key" +msgstr "Llave" + +msgid "Automount key name." +msgstr " Nombre de clave de montaje automático" + +msgid "Mount information" +msgstr "Información de montaje" + +msgid "description" +msgstr "descripción" + +msgid "Location" +msgstr "Ubicación" + +msgid "Automount location name." +msgstr "Nombre de la ubicación de montaje automático." + +msgid "Map" +msgstr "Mapa" + +msgid "Automount map name." +msgstr " Nombre del mapa automount." + +msgid "Description" +msgstr "Descripción" + +msgid "Create a new automount key." +msgstr "Crear una nueva clave de automontaje." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Establecer un atributo a un par nombre y valor. El formato es attr=value. \n" +"Para los atributos de valor múltiple, el comando sustituye los valores ya " +"presentes." + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Añadir un par atributo/valor. El formato es attr=value. El atributo debe ser " +"parte del esquema." + +msgid "Delete an automount key." +msgstr "Borrar una clave de automontaje." + +msgid "Continuous mode: Don't stop on errors." +msgstr "Modo continuo: No se detenga en los errores." + +msgid "List of deletions that failed" +msgstr "Lista de eliminaciones fallidas" + +msgid "Search for an automount key." +msgstr "Buscar una clave de automontaje." + +msgid "Time Limit" +msgstr "Tiempo límite" + +msgid "Time limit of search in seconds" +msgstr "Tiempo máximo de búsqueda en segundos" + +msgid "Size Limit" +msgstr "Tamaño límite" + +msgid "Maximum number of entries returned" +msgstr "Cantidad máxima de entradas obtenidas" + +msgid "Modify an automount key." +msgstr "Modificar una clave de automontaje." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Borrar un par atributo/valor. La opción será evaluada al final, después de " +"todos los ajustes y añadidos." + +msgid "Rights" +msgstr "Derechos" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Mostrar los derechos de acceso de esta entrada (requiere --all). Consulte la " +"página man de IPA para más detalles." + +msgid "New mount information" +msgstr "Nueva información de montaje" + +msgid "Rename" +msgstr "Cambiar el nombre de" + +#, fuzzy +#| msgid "Automount key object." +msgid "Rename the automount key object" +msgstr "Objeto clave de automontaje" + +msgid "Display an automount key." +msgstr "Mostrar una clave de automontaje." + +msgid "Create a new automount location." +msgstr "Crear una nueva localización de automontaje." + +msgid "Delete an automount location." +msgstr "Borrar una localización de automontaje." + +msgid "Search for an automount location." +msgstr "Buscar una localización de automontaje." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +msgid "Display an automount location." +msgstr "Mostrar una localización de automontaje" + +msgid "Generate automount files for a specific location." +msgstr "Generar ficheros de automontaje para una localización específica." + +msgid "Create a new automount map." +msgstr "Crear un nuevo mapa de automontaje" + +msgid "Create a new indirect mount point." +msgstr "Crear un nuevo punto de montaje indirecto." + +msgid "Mount point" +msgstr "Punto de montaje" + +msgid "Parent map" +msgstr "Mapa del padre" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" +"Nombre del mapa de montaje automático de padre (por defecto: auto.master)." + +msgid "Delete an automount map." +msgstr "Borrar un mapa de automontaje." + +msgid "Search for an automount map." +msgstr "Buscar un mapa de automontaje." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +msgid "Modify an automount map." +msgstr "Modificar un mapa de automontaje" + +msgid "Display an automount map." +msgstr "Mostrar un mapa de automontaje" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "Métodos anidados para ejecutar" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "Largo máximo para nombre de usuario" + +msgid "Home directory base" +msgstr "Base del directorio principal" + +msgid "Default location of home directories" +msgstr "Localización por defecto de los directorios home" + +msgid "Default shell" +msgstr "Shell predeterminada" + +msgid "Default shell for new users" +msgstr "Shell predeterminada para usuarios nuevos" + +msgid "Default users group" +msgstr "Grupo de usuarios predeterminado" + +msgid "Default group for new users" +msgstr "Grupo predeterminado para usuarios nuevos" + +msgid "Default e-mail domain" +msgstr "Dominio de correo electrónico por defecto" + +msgid "Search time limit" +msgstr "Buscar límite de tiempo" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" +"Máxima cantidad de tiempo (segundos) parab una búsqueda (> 0, o -1 para " +"ilimitado)" + +msgid "Search size limit" +msgstr "Límite del tamaño de la búsqueda" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Máximo número de registros a buscar (-1 es ilimitado)" + +msgid "User search fields" +msgstr "Campos de búsqueda de usuario" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" +"Una lista separada por comas de los campos a buscar cuando se está buscando " +"usuarios" + +#, fuzzy +#| msgid "User search fields" +msgid "Group search fields" +msgstr "Campos de búsqueda de usuario" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Una lista separada por comas de los campos a buscar cuando se está buscando " +"grupos" + +msgid "Enable migration mode" +msgstr "Habilitar modo migración" + +msgid "Certificate Subject base" +msgstr "Base de certificado de asunto" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "Base para sujetos certificados (OU=Prueba,O=Ejemplo)" + +msgid "Default group objectclasses" +msgstr "Grupo predeterminado objectclass" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Clases de objeto grupo por defecto (lista separada por comas)" + +msgid "Default user objectclasses" +msgstr "Usuario predeterminado objectclasses" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "Clases de objeto usuario por defecto (lista separada por comas)" + +msgid "Password Expiration Notification (days)" +msgstr "Notificación de Expiración de Contraseña (días)" + +msgid "Number of days's notice of impending password expiration" +msgstr "Aviso de número de días de expiración inminente de contraseña" + +msgid "Password plugin features" +msgstr "Funciones del complemento de contraseña" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Hashes extra para generar en el plugin de contraseña" + +#, fuzzy +#| msgid "SELinux User Map rule" +msgid "SELinux user map order" +msgstr "Regla Mapa de Usuario SELinux" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +#, fuzzy +#| msgid "Delete a SELinux User Map." +msgid "Default SELinux user" +msgstr "Borrar un Mapa de Usuario SELinux." + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +#, fuzzy +#| msgid "PAC type" +msgid "Default PAC types" +msgstr "Tipo PAC" + +msgid "Default types of PAC supported for services" +msgstr "" + +#, fuzzy +#| msgid "Last failed authentication" +msgid "Default user authentication types" +msgstr "Última autenticación fallada" + +#, fuzzy +#| msgid "The number of times to retry authentication" +msgid "Default types of supported user authentication" +msgstr "El número de veces para reintentar la autenticación" + +msgid "Modify configuration options." +msgstr "Modificar opciones de configuración." + +msgid "Show the current configuration." +msgstr "Muestra la configuración actual" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" +"\n" +"Grupo a Delegación de Grupo\n" +"\n" +"Un permiso habilita una delegación de grano fino de permisos. Reglas de " +"Control\n" +"de Acceso o instrucciones (ACIs), otorgan permisos a los permisos para " +"llevar a\n" +"cabo tareas dadas como añadir un usuario, modificar un grupo, etc.\n" +"\n" +"Grupo a Delegaciones de Grupo concede a los miembros de un grupo para\n" +"actualizar un conjunto de atributos de miembros de otro grupo.\n" +"\n" +"EJEMPLOS:\n" +"\n" +"Añadir una regla de delegación para permitir a los gestores editar las " +"direcciones de los empleados:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Cuando gestiona una lista de atributos usted necesita incluir todos los " +"atributos en \n" +" la lista, incluyendo los existentes. Añadir postalCode a la lista:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Mostrar nuestra regla actualizada:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Borrar una regla:\n" +" ipa delegation-del \"managers edit employees' street\"\n" + +msgid "Delegation name" +msgstr "Nombre de delegación" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "Permisos a conceder (read, write). Predeterminado es write." + +msgid "Attributes to which the delegation applies" +msgstr "Atributos a los que aplica la delegación" + +msgid "Member user group" +msgstr "Miembro del grupo de usuarios" + +msgid "User group to apply delegation to" +msgstr "Grupo de usuarios para solicitar a la delegación" + +msgid "Add a new delegation." +msgstr "Añadir una nueva delegación." + +msgid "Delete a delegation." +msgstr "Borrar una delegación." + +msgid "Search for delegations." +msgstr "Buscar delegaciones." + +msgid "Modify a delegation." +msgstr "Modificar una delegación." + +msgid "Display information about a delegation." +msgstr "Mostrar información sobre una delegación." + msgid "" "\n" "Domain Name System (DNS)\n" -msgstr "" "\n" -"Sistema de Nombre de Dominio (DNS)\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "Promotores globales" msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Promotores globales. Se puede especificar un pueeto personalizado por cada " +"promotor usando el formato estándar \"IP_ADDRESS port PORT\"" + +msgid "Forward policy" +msgstr "Política de envío" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" +"Política de reenvío global. Establecer a \"none\" para deshabilitar " +"cualquier promotor global." + +msgid "Allow PTR sync" +msgstr "Permitir sincronización PTR" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" +"Permite la sincronización de registros de reenvío (A, AAAA) y reversa (PTR)" + +msgid "Zone refresh interval" +msgstr "Intervalo de refresco de zona" + +msgid "Zone name" +msgstr "Nombre de la zona" + +msgid "Zone name (FQDN)" +msgstr "Nombre de la zona (FQDN)" + +msgid "Reverse zone IP network" +msgstr "Zona reversa de red IP" + +msgid "IP network to create reverse zone name from" +msgstr "Red IP para crear un nombre de zona reversa desde" + +msgid "Active zone" +msgstr "Activar zona" + +msgid "Is zone active?" +msgstr "¿Está la zona activa?" + +msgid "Zone forwarders" +msgstr "Zona de expedidores" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Expedidores por zona. Se puede especificar un puerto personalizado para cada " +"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Política de envío condicional por zona. Se establece a \"none\" para " +"deshabilitar el envío a expedidores globales para esta zona. En este caso, " +"la zona condicional de expedidores es ignorada." + +msgid "Record name" +msgstr "Nombre de registro" + +msgid "Time to live" +msgstr "Tiempo para abandonar" + +msgid "Records" +msgstr "Registros" + +msgid "Record type" +msgstr "Tipo de registro" + +msgid "Record data" +msgstr "Registrar datos" + +#, fuzzy +#| msgid "%s record" +msgid "A record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw A records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "IP Address" +msgid "A IP Address" +msgstr "Dirección IP" + +msgid "IP Address" +msgstr "Dirección IP" + +#, fuzzy +#| msgid "Create reverse" +msgid "A Create reverse" +msgstr "Crear reversa" + +msgid "Create reverse record for this IP Address" +msgstr "Crear registro reverso para esta Dirección IP" + +#, fuzzy +#| msgid "%s record" +msgid "AAAA record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw AAAA records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "IP Address" +msgid "AAAA IP Address" +msgstr "Dirección IP" + +#, fuzzy +#| msgid "Create reverse" +msgid "AAAA Create reverse" +msgstr "Crear reversa" + +#, fuzzy +#| msgid "%s record" +msgid "A6 record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw A6 records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Record data" +msgid "A6 Record data" +msgstr "Registrar datos" + +#, fuzzy +#| msgid "%s record" +msgid "AFSDB record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw AFSDB records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Subtype" +msgid "AFSDB Subtype" +msgstr "Subtipo" + +msgid "Subtype" +msgstr "Subtipo" + +#, fuzzy +#| msgid "Hostname" +msgid "AFSDB Hostname" +msgstr "Nombre del equipo anfitrión" + +msgid "Hostname" +msgstr "Nombre del equipo anfitrión" + +#, fuzzy +#| msgid "%s record" +msgid "APL record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw APL records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "CERT record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw CERT records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Certificate Type" +msgid "CERT Certificate Type" +msgstr "Tipo de certificado" + +msgid "Certificate Type" +msgstr "Tipo de certificado" + +#, fuzzy +#| msgid "Key Tag" +msgid "CERT Key Tag" +msgstr "Etiqueta de clave" + +msgid "Key Tag" +msgstr "Etiqueta de clave" + +#, fuzzy +#| msgid "Algorithm" +msgid "CERT Algorithm" +msgstr "Algoritmo" + +msgid "Algorithm" +msgstr "Algoritmo" + +#, fuzzy +#| msgid "Certificate/CRL" +msgid "CERT Certificate/CRL" +msgstr "Certificado/CRL" + +msgid "Certificate/CRL" +msgstr "Certificado/CRL" + +#, fuzzy +#| msgid "NSEC3PARAM record" +msgid "CNAME record" +msgstr "Registro NSEC3PARAM" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw CNAME records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Hostname" +msgid "CNAME Hostname" +msgstr "Nombre del equipo anfitrión" + +msgid "A hostname which this alias hostname points to" +msgstr "Un nombre de host al que este nombre de host alias apunta" + +#, fuzzy +#| msgid "%s record" +msgid "DHCID record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw DHCID records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "DLV record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw DLV records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Key Tag" +msgid "DLV Key Tag" +msgstr "Etiqueta de clave" + +#, fuzzy +#| msgid "Algorithm" +msgid "DLV Algorithm" +msgstr "Algoritmo" + +#, fuzzy +#| msgid "Digest Type" +msgid "DLV Digest Type" +msgstr "Tipo de Resumen" + +msgid "Digest Type" +msgstr "Tipo de Resumen" + +#, fuzzy +#| msgid "Digest" +msgid "DLV Digest" +msgstr "Resumen" + +msgid "Digest" +msgstr "Resumen" + +#, fuzzy +#| msgid "NSEC3PARAM record" +msgid "DNAME record" +msgstr "Registro NSEC3PARAM" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw DNAME records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Target" +msgid "DNAME Target" +msgstr "Meta" + +msgid "Target" +msgstr "Meta" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "DNSKEY record" +msgstr "Registros IPA DNS" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw DNSKEY records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "DS record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw DS records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Key Tag" +msgid "DS Key Tag" +msgstr "Etiqueta de clave" + +#, fuzzy +#| msgid "Algorithm" +msgid "DS Algorithm" +msgstr "Algoritmo" + +#, fuzzy +#| msgid "Digest Type" +msgid "DS Digest Type" +msgstr "Tipo de Resumen" + +#, fuzzy +#| msgid "Digest" +msgid "DS Digest" +msgstr "Resumen" + +#, fuzzy +#| msgid "%s record" +msgid "HIP record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw HIP records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "IPSECKEY record" +msgstr "Registros IPA DNS" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw IPSECKEY records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "KEY record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw KEY records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "KX record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw KX records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Preference" +msgid "KX Preference" +msgstr "Preferencia" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" +"Se ha dado preferencia a este intercambiador. Se prefieren más los valores " +"más bajos" + +#, fuzzy +#| msgid "Exchanger" +msgid "KX Exchanger" +msgstr "Intercambiador" + +msgid "A host willing to act as a key exchanger" +msgstr "Un host dispuesto a actuar como un intercambiador clave" + +#, fuzzy +#| msgid "%s record" +msgid "LOC record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw LOC records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Degrees Latitude" +msgid "LOC Degrees Latitude" +msgstr "Latitud en grados" + +msgid "Degrees Latitude" +msgstr "Latitud en grados" + +#, fuzzy +#| msgid "Minutes Latitude" +msgid "LOC Minutes Latitude" +msgstr "Latitud en minutos" + +msgid "Minutes Latitude" +msgstr "Latitud en minutos" + +#, fuzzy +#| msgid "Seconds Latitude" +msgid "LOC Seconds Latitude" +msgstr "Latitud en segundos" + +msgid "Seconds Latitude" +msgstr "Latitud en segundos" + +#, fuzzy +#| msgid "Direction Latitude" +msgid "LOC Direction Latitude" +msgstr "Latitud de dirección" + +msgid "Direction Latitude" +msgstr "Latitud de dirección" + +#, fuzzy +#| msgid "Degrees Longitude" +msgid "LOC Degrees Longitude" +msgstr "Grados de Longitud" + +msgid "Degrees Longitude" +msgstr "Grados de Longitud" + +#, fuzzy +#| msgid "Minutes Longitude" +msgid "LOC Minutes Longitude" +msgstr "Minutos de Longitud" + +msgid "Minutes Longitude" +msgstr "Minutos de Longitud" + +#, fuzzy +#| msgid "Seconds Longitude" +msgid "LOC Seconds Longitude" +msgstr "Segundos de Longitud" + +msgid "Seconds Longitude" +msgstr "Segundos de Longitud" + +#, fuzzy +#| msgid "Direction Longitude" +msgid "LOC Direction Longitude" +msgstr "Dirección de la Longitud" + +msgid "Direction Longitude" +msgstr "Dirección de la Longitud" + +#, fuzzy +#| msgid "Altitude" +msgid "LOC Altitude" +msgstr "Altitud" + +msgid "Altitude" +msgstr "Altitud" + +#, fuzzy +#| msgid "Size" +msgid "LOC Size" +msgstr "Tamaño" + +msgid "Size" +msgstr "Tamaño" + +#, fuzzy +#| msgid "Horizontal Precision" +msgid "LOC Horizontal Precision" +msgstr "Precisión horizontal" + +msgid "Horizontal Precision" +msgstr "Precisión horizontal" + +#, fuzzy +#| msgid "Vertical Precision" +msgid "LOC Vertical Precision" +msgstr "Precisión vertical" + +msgid "Vertical Precision" +msgstr "Precisión vertical" + +#, fuzzy +#| msgid "%s record" +msgid "MX record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw MX records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Preference" +msgid "MX Preference" +msgstr "Preferencia" + +#, fuzzy +#| msgid "Exchanger" +msgid "MX Exchanger" +msgstr "Intercambiador" + +msgid "A host willing to act as a mail exchanger" +msgstr "Un host dispuesto a actuar como un intercambiador de correo" + +#, fuzzy +#| msgid "NSEC3PARAM record" +msgid "NAPTR record" +msgstr "Registro NSEC3PARAM" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw NAPTR records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Order" +msgid "NAPTR Order" +msgstr "Orden" + +msgid "Order" +msgstr "Orden" + +#, fuzzy +#| msgid "Preference" +msgid "NAPTR Preference" +msgstr "Preferencia" + +msgid "Preference" +msgstr "Preferencia" + +#, fuzzy +#| msgid "Flags" +msgid "NAPTR Flags" +msgstr "Banderas" + +msgid "Flags" +msgstr "Banderas" + +#, fuzzy +#| msgid "Any Service" +msgid "NAPTR Service" +msgstr "Cualquier servicio" + +msgid "Service" +msgstr "Servicio" + +#, fuzzy +#| msgid "Regular Expression" +msgid "NAPTR Regular Expression" +msgstr "Expresión regular" + +msgid "Regular Expression" +msgstr "Expresión regular" + +#, fuzzy +#| msgid "Replacement" +msgid "NAPTR Replacement" +msgstr "Reemplazo" + +msgid "Replacement" +msgstr "Reemplazo" + +#, fuzzy +#| msgid "%s record" +msgid "NS record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw NS records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Hostname" +msgid "NS Hostname" +msgstr "Nombre del equipo anfitrión" + +#, fuzzy +#| msgid "NSEC3PARAM record" +msgid "NSEC record" +msgstr "Registro NSEC3PARAM" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw NSEC records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "NSEC3PARAM record" +msgid "NSEC3 record" +msgstr "Registro NSEC3PARAM" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw NSEC3 records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "PTR record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw PTR records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Hostname" +msgid "PTR Hostname" +msgstr "Nombre del equipo anfitrión" + +msgid "The hostname this reverse record points to" +msgstr "El nombre de host al que apunta este registro inverso" + +#, fuzzy +#| msgid "%s record" +msgid "RRSIG record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw RRSIG records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "RP record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw RP records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "SIG record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw SIG records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "SPF record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw SPF records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "SRV record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw SRV records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Priority" +msgid "SRV Priority" +msgstr "Prioridad" + +msgid "Priority" +msgstr "Prioridad" + +#, fuzzy +#| msgid "Weight" +msgid "SRV Weight" +msgstr "Peso" + +msgid "Weight" +msgstr "Peso" + +#, fuzzy +#| msgid "Port" +msgid "SRV Port" +msgstr "Puerto" + +msgid "Port" +msgstr "Puerto" + +#, fuzzy +#| msgid "Target" +msgid "SRV Target" +msgstr "Meta" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" +"El nombre de dominio del host objetivo o '.' si el servicio es decididamente " +"no disponible en este dominio" + +#, fuzzy +#| msgid "%s record" +msgid "SSHFP record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw SSHFP records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Algorithm" +msgid "SSHFP Algorithm" +msgstr "Algoritmo" + +#, fuzzy +#| msgid "Fingerprint Type" +msgid "SSHFP Fingerprint Type" +msgstr "Tipo de huella digital" + +msgid "Fingerprint Type" +msgstr "Tipo de huella digital" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSHFP Fingerprint" +msgstr "Huella digital SHA1" + +msgid "Fingerprint" +msgstr "Huella digital" + +#, fuzzy +#| msgid "%s record" +msgid "TA record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw TA records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "TLSA record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw TLSA records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Certificate Usage" +msgid "TLSA Certificate Usage" +msgstr "Utilización del Certificado" + +msgid "Certificate Usage" +msgstr "Utilización del Certificado" + +#, fuzzy +#| msgid "Selector" +msgid "TLSA Selector" +msgstr "Selector" + +msgid "Selector" +msgstr "Selector" + +#, fuzzy +#| msgid "Matching Type" +msgid "TLSA Matching Type" +msgstr "Tipo de Coincidencia" + +msgid "Matching Type" +msgstr "Tipo de Coincidencia" + +#, fuzzy +#| msgid "Certificate Association Data" +msgid "TLSA Certificate Association Data" +msgstr "Datos de Asociación del Certificado" + +msgid "Certificate Association Data" +msgstr "Datos de Asociación del Certificado" + +#, fuzzy +#| msgid "%s record" +msgid "TKEY record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw TKEY records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "TSIG record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw TSIG records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "%s record" +msgid "TXT record" +msgstr "%s registro" + +#, fuzzy +#| msgid "Raw %s records" +msgid "Raw TXT records" +msgstr "Registros brutos %s" + +#, fuzzy +#| msgid "Text Data" +msgid "TXT Text Data" +msgstr "Datos de texto" + +msgid "Text Data" +msgstr "Datos de texto" + +msgid "Authoritative nameserver" +msgstr "Nombre de servidor autoritativo" + +msgid "Authoritative nameserver domain name" +msgstr "Nombre de dominio servidor de nombre autorizado" + +msgid "Administrator e-mail address" +msgstr "Correo-e de administrador" + +msgid "SOA serial" +msgstr "Serie SOA" + +msgid "SOA record serial number" +msgstr "Número de serie de registro SOA" + +msgid "SOA refresh" +msgstr "Actualizar SOA" + +msgid "SOA record refresh time" +msgstr "registro SOA tiempo de actualización" + +msgid "SOA retry" +msgstr "Reintentar SOA" + +msgid "SOA record retry time" +msgstr "tiempo de reintento de " + +msgid "SOA expire" +msgstr "Expirar SOA" + +msgid "SOA record expire time" +msgstr "tiempo de expiración de registro SOA" + +msgid "SOA minimum" +msgstr "Mínimo SOA" + +msgid "How long should negative responses be cached" +msgstr "¿Por cuánto tiempo las respuestas negativas deben guardarse en cache?" + +msgid "Time to live for records at zone apex" +msgstr "Tiempo de vida de los registros en zona apéndice" + +msgid "BIND update policy" +msgstr "Política de actualización de BIND" + +msgid "Dynamic update" +msgstr "Actualización dinámica" + +msgid "Allow dynamic updates." +msgstr "Permitir actualizaciones dinámicas." + +msgid "Allow query" +msgstr "Permitir consulta" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" +"Lista separada por punto y coma de direcciones IP o redes que tiene " +"permitido enviar peticiones" + +msgid "Allow transfer" +msgstr "Permitir transferencia" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" +"Lista separada por punto y coma de direcciones IP o redes que tiene " +"permitido transferir la zona" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" +"Permitir la sincronización de registros adelante (A, AAAA) y atrás (PTR) en " +"la zona" + +msgid "Allow in-line DNSSEC signing" +msgstr "Permitida la firma DNSSEC en línea" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "Permitida la firma DNSSEC de registros en la zona" + +msgid "NSEC3PARAM record" +msgstr "Registro NSEC3PARAM" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" +"Registro NSEC3PARAM rpara la zona en formato: hash_algorithm flags " +"iterations salt" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" +"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." + +msgid "Resolve a host name in DNS." +msgstr "Resolver un nombre de host en DNS." + +msgid "Modify global DNS configuration." +msgstr "Modificar la configuración global DNS." + +msgid "Show the current global DNS configuration." +msgstr "Mostrar la configuración global DNS actual." + +msgid "Create new DNS forward zone." +msgstr "Crear una zona de envío DNS." + +msgid "Add a permission for per-forward zone access delegation." +msgstr "Añadir un permiso para una delegación de acceso a zona por reenvío." + +msgid "Permission value" +msgstr "Valor de permiso" + +msgid "Delete DNS forward zone." +msgstr "Borrar forma de reenvío DNS." + +msgid "Disable DNS Forward Zone." +msgstr "Deshabilitar la Zona de Reenvío DNS." + +msgid "Enable DNS Forward Zone." +msgstr "Habilitar Zona de Reenvío DNS." + +msgid "Search for DNS forward zones." +msgstr "Buscar zonas de reenvío DNS." + +msgid "Modify DNS forward zone." +msgstr "Modificar zona de reenvío DNS." + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "Quitar un permiso para una delegación de acceso a zona por reenvío." + +msgid "Display information about a DNS forward zone." +msgstr "Mostrar información sobre una zona de reenvío DNS." + +msgid "Add new DNS resource record." +msgstr "Añadir nuevo registro de recurso DNS." + +msgid "Force" +msgstr "Forzar" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "Forzar la creación del registro DNS, aunque su nombre no sea absoluto" + +msgid "Structured" +msgstr "Estructurado" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" +"Analiza todos los registros DNS crudos y los devuelve de modo estructurado" + +msgid "Delete DNS resource record." +msgstr "Borrar un registro de recurso DNS." + +msgid "Delete all associated records" +msgstr "Eliminar todos los registros asociados" + +msgid "Delete DNS record entry." +msgstr "Borrar entrada de registro DNS." + +msgid "Search for DNS resources." +msgstr "Buscar recursos DNS." + +msgid "Modify a DNS resource record." +msgstr "Modificar un registro de recurso DNS." + +#, fuzzy +#| msgid "Delete DNS resource record." +msgid "Rename the DNS resource record object" +msgstr "Borrar un registro de recurso DNS." + +msgid "Display DNS resource." +msgstr "Mostrar un recurso DNS." + +msgid "Create new DNS zone (SOA record)." +msgstr "Crear nueva zona DNS (registro SOA)." + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" +"Fuerza la creación de zona DNS aunque el servidor de nombre no se pueda " +"resolver." + +msgid "Add a permission for per-zone access delegation." +msgstr "Añade un permiso para una delegación de acceso por zona." + +msgid "Delete DNS zone (SOA record)." +msgstr "Borrar zona DNS (registro SOA)." + +msgid "Disable DNS Zone." +msgstr "Deshabilitar Zona DNS." + +msgid "Enable DNS Zone." +msgstr "Habilitar Zona DNS." + +msgid "Search for DNS zones (SOA records)." +msgstr "Buscar zonas DNS (registros SOA)." + +msgid "Forward zones only" +msgstr "Zonas de reenvío sólo" + +msgid "Search for forward zones only" +msgstr "Buscar zonas de reenvío sólo" + +msgid "Modify DNS zone (SOA record)." +msgstr "Modificar zona DNS (registro SOA)." + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" +"Fuerza el cambio del servidor de nombre aunque el servidor de nombre no en " +"DNS" + +msgid "Remove a permission for per-zone access delegation." +msgstr "Quita un permiso para una delegación de acceso por zona." + +msgid "Display information about a DNS zone (SOA record)." +msgstr "Mostrar información sobre una zona DNS (registro SOA)." + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "Nombre de la regla" + +msgid "Rule type" +msgstr "Tipo de regla" + +msgid "Rule type (allow)" +msgstr "Tipo de regla (permitir)" + +msgid "User category" +msgstr "Categoría de usuario" + +msgid "User category the rule applies to" +msgstr "Categoría de usuario al que se aplica la regla" + +msgid "Host category" +msgstr "Categoría del equipo" + +msgid "Host category the rule applies to" +msgstr "Categoría del equipo al que se aplica la regla" + +msgid "Service category" +msgstr " Añadir servicios a una regla de HBAC" + +msgid "Service category the rule applies to" +msgstr "Categoría de servicio a la que se aplica la regla" + +msgid "Enabled" +msgstr "Habilitado" + +msgid "Users" +msgstr "Usuarios" + +msgid "User Groups" +msgstr "Grupos de usuarios" + +msgid "Hosts" +msgstr "Equipos" + +msgid "Host Groups" +msgstr "Grupos de equipo" + +msgid "Services" +msgstr "Sevicios HBAC" + +msgid "Service Groups" +msgstr " Búsqueda de servicios HBAC." + +msgid "External host" +msgstr "Equipo externo" + +msgid "Create a new HBAC rule." +msgstr "Crear una nueva regla HBAC." + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." + +msgid "member host" +msgstr "host miembro" + +#, fuzzy +#| msgid "%s to add" +msgid "hosts to add" +msgstr "%s a añadir" + +msgid "member host group" +msgstr "miembro del grupo de host" + +#, fuzzy +#| msgid "host groups" +msgid "host groups to add" +msgstr "grupos de host" + +msgid "Members that could not be added" +msgstr "Miembros que no han podido ser añadidos" + +msgid "Number of members added" +msgstr "Cantidad de miembros añadidos" + +msgid "Add services to an HBAC rule." +msgstr "Añadir servicios a una regla HBAC." + +#, fuzzy +#| msgid "Member HBAC service" +msgid "member HBAC service" +msgstr "Miembro del servicio HBAC" + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC services to add" +msgstr "Servicios HBAC" + +#, fuzzy +#| msgid "Member HBAC service groups" +msgid "member HBAC service group" +msgstr "Grupos de servicio de Miembros HBAC" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "HBAC service groups to add" +msgstr "Grupos de servicio HBAC" + +msgid "Add users and groups to an HBAC rule." +msgstr "Añadir usuarios y grupos a una regla HBAC." + +msgid "member user" +msgstr "usuario miembro" + +#, fuzzy +#| msgid "%s to add" +msgid "users to add" +msgstr "%s a añadir" + +msgid "member group" +msgstr "miembro de grupo" + +#, fuzzy +#| msgid "%s to add" +msgid "groups to add" +msgstr "%s a añadir" + +msgid "Delete an HBAC rule." +msgstr "Borrar una regla HBAC." + +msgid "Disable an HBAC rule." +msgstr "Deshabilitar una regla HBAC." + +msgid "Enable an HBAC rule." +msgstr "Habilitar una regla HBAC." + +msgid "Search for HBAC rules." +msgstr "Buscar reglas HBAC." + +msgid "Modify an HBAC rule." +msgstr "Modificar una regla HBAC." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Borrar hosts objetivos y grupos de host de una regla HBAC." + +#, fuzzy +#| msgid "%s to remove" +msgid "hosts to remove" +msgstr "%s a eliminar" + +#, fuzzy +#| msgid "host groups" +msgid "host groups to remove" +msgstr "grupos de host" + +msgid "Members that could not be removed" +msgstr "Miembros que no han podido ser eliminados" + +msgid "Number of members removed" +msgstr "Cantidad de miembros eliminados" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Borrar servicio y grupos de servicio de una regla HBAC." + +#, fuzzy +#| msgid "HBAC service group" +msgid "HBAC services to remove" +msgstr "Grupo de servicio HBAC" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "HBAC service groups to remove" +msgstr "Grupos de servicio HBAC" + +msgid "Remove users and groups from an HBAC rule." +msgstr "Borrar usuarios y grupos de una regla HBAC." + +#, fuzzy +#| msgid "%s to remove" +msgid "users to remove" +msgstr "%s a eliminar" + +#, fuzzy +#| msgid "%s to remove" +msgid "groups to remove" +msgstr "%s a eliminar" + +msgid "Display the properties of an HBAC rule." +msgstr "Mostrar las propiedades de una regla HBAC." + +#, fuzzy +#| msgid "" +#| "\n" +#| "HBAC Services\n" +#| "\n" +#| "The PAM services that HBAC can control access to. The name used here\n" +#| "must match the service name that PAM is evaluating.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new HBAC service:\n" +#| " ipa hbacsvc-add tftp\n" +#| "\n" +#| " Modify an existing HBAC service:\n" +#| " ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +#| "\n" +#| " Search for HBAC services. This example will return two results, the FTP\n" +#| " service and the newly-added tftp service:\n" +#| " ipa hbacsvc-find ftp\n" +#| "\n" +#| " Delete an HBAC service:\n" +#| " ipa hbacsvc-del tftp\n" +#| "\n" +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" +"\n" +"Servicios de HBAC\n" +"\n" +"Los servicios PAM a los que HBAC puede controlar el acceso. El nombre " +"utilizado aquí debe coincidir\n" +"con el nombre del servicio que PAM está evaluando.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo servicio:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modificar un servicio de HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Buscar servicios para HBAC. Este ejemplo retornará dos resultados, el " +"servicio FTP\n" +" y el servicio recién añadido tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Borrar un servicio de HBAC:\n" +" ipa hbacsvc-del tftp\n" +"\n" + +msgid "Service name" +msgstr "% (Count) d HBAC servicios encontrados" + +msgid "HBAC service" +msgstr "Servicio HBAC" + +msgid "HBAC service description" +msgstr "Descripción de servicio HBAC" + +#, fuzzy +#| msgid "Member HBAC service groups" +msgid "Member of HBAC service groups" +msgstr "Grupos de servicio de Miembros HBAC" + +msgid "Add a new HBAC service." +msgstr "Añadir un nuevo servicio HBAC." + +msgid "Delete an existing HBAC service." +msgstr "Borrar un servicio HBAC existente." + +msgid "Search for HBAC services." +msgstr "Buscar un servicio HBAC." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"%s\")" +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" +"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" + +msgid "Modify an HBAC service." +msgstr "Modificar un servicio HBAC." + +msgid "Display information about an HBAC service." +msgstr "Mostrar información sobre un servicio HBAC." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" +" Desactivar la tecla de Kerberos, certificado SSL y todos los servicios " +"de un host." + +msgid "HBAC service group description" +msgstr "Servicios y grupos especificados" + +msgid "Member HBAC service" +msgstr "Miembro del servicio HBAC" + +msgid "Add a new HBAC service group." +msgstr "Añadir un nuevo grupo de servicio HBAC." + +msgid "Add members to an HBAC service group." +msgstr "Añadir miembros a un grupo de servicio HBAC." + +msgid "Delete an HBAC service group." +msgstr "Borrar un grupo de servicio HBAC." + +msgid "Search for an HBAC service group." +msgstr "Buscar un grupo de servicio HBAC." + +msgid "Modify an HBAC service group." +msgstr "Modificar un grupo de servicio HBAC." + +msgid "Remove members from an HBAC service group." +msgstr "Borrar miembros de un grupo de servicio HBAC." + +msgid "Display information about an HBAC service group." +msgstr "Mostrar información sobre un grupo de servicio HBAC." + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" "\n" "ENROLLMENT:\n" "\n" @@ -2439,28 +4056,10151 @@ msgid "" " exist. A limited administrator is a member a role with the\n" " Host Enrollment privilege.\n" "3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" -"\n" -"INSCRIPCIÓN:\n" -"\n" -"Hay tres escenarios de inscripción cuando se inscribe un nuevo cliente:\n" -"\n" -"1. Se está inscribiendo como administrador total. La entrada de host puede " -"existir o\n" -" no. Un administrador total es miembro del rol hostadmin role o del grupo " -"admins.\n" -"2. Se está inscribiendo como administrador limitado. El host debe existir " -"ya. Un\n" -" administrador limitado es miembro de un rol con el privilegio Host " -"Enrollment.\n" -"3. El host ha sido creado con una contraseña de una vez.\n" + +msgid "Host name" +msgstr "Nombre del equipo" + +msgid "A description of this host" +msgstr "Una descripción de este equipo" + +msgid "Locality" +msgstr "Localidad" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Localidad del equipo (p.ej. \"Barrio latino, París\") " + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Ubicación del equipo (p. ej. \"Laboratorio\")" + +msgid "Platform" +msgstr "Plataforma" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Plataforma de hardware del equipo (p. ej. \"Lenovo T61\")" + +msgid "Operating system" +msgstr "Sistema operativo" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" +"Sistema operativo que utiliza el equipo y versión (p.ej. \"Fedora 11\")" + +msgid "User password" +msgstr "Contraseña de usuario" + +msgid "Password used in bulk enrollment" +msgstr "Contraseña utilizada en el registro bruto" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "Generar una contraseña aleatoria que se utilizará en la inscripción " + +msgid "Random password" +msgstr "Contraseña aleatoria" + +msgid "Certificate" +msgstr "Certificado" + +msgid "Base-64 encoded server certificate" +msgstr "Certificado del servidor codificado con base-64" + +msgid "Principal name" +msgstr "Nombre principal" + +msgid "MAC address" +msgstr "Dirección MAC" + +msgid "Hardware MAC address(es) on this host" +msgstr "Dirección(es) Hardware MAC en este host" + +msgid "SSH public key" +msgstr "Clave pública SSH" + +msgid "Class" +msgstr "Clase" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Categoría de host (las semánticas situadas en este atributo son para " +"interpretación local)" + +msgid "Assigned ID View" +msgstr "Vista ID asignada" + +msgid "Requires pre-authentication" +msgstr "Requiere autenticación previa" + +msgid "Pre-authentication is required for the service" +msgstr "Se requiere autenticación previa para el servicio" + +msgid "Trusted for delegation" +msgstr "Confiable para la delegación" + +msgid "Client credentials may be delegated to the service" +msgstr "Las credenciales del cliente pueden delegarse al servicio" + +msgid "Member of host-groups" +msgstr "Miembro de los grupos de equipo" + +msgid "Roles" +msgstr " Roles" + +msgid "Member of netgroups" +msgstr "Miembros de netgroups" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of Sudo rule" +msgstr "Miembro de un grupo" + +#, fuzzy +#| msgid "Member HBAC service" +msgid "Member of HBAC rule" +msgstr "Miembro del servicio HBAC" + +#, fuzzy +#| msgid "Indirect Member netgroups" +msgid "Indirect Member of netgroup" +msgstr "Miembros indirectos netgroups" + +#, fuzzy +#| msgid "Indirect Member host-groups" +msgid "Indirect Member of host-group" +msgstr "Miembros indirectos de host-groups" + +#, fuzzy +#| msgid "Indirect Member of roles" +msgid "Indirect Member of role" +msgstr "Roles de miembros indirectos" + +#, fuzzy +#| msgid "Indirect Member of roles" +msgid "Indirect Member of Sudo rule" +msgstr "Roles de miembros indirectos" + +#, fuzzy +#| msgid "Indirect Member of roles" +msgid "Indirect Member of HBAC rule" +msgstr "Roles de miembros indirectos" + +msgid "Keytab" +msgstr "Keytab" + +msgid "Managed by" +msgstr "Gestionado por" + +#, fuzzy +#| msgid "Manager" +msgid "Managing" +msgstr "Manager" + +msgid "Users allowed to retrieve keytab" +msgstr "Los usuarios pueden recuperar keytab" + +msgid "Groups allowed to retrieve keytab" +msgstr "Los grupos pueden recuperar keytab" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Los hosts pueden recuperar keytab" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Los Grupos de Host pueden recuperar keytab" + +msgid "Users allowed to create keytab" +msgstr "Los usuarios pueden crear keytab" + +msgid "Groups allowed to create keytab" +msgstr "Los grupos pueden crear keytab" + +msgid "Hosts allowed to create keytab" +msgstr "Los hosts pueden crear keytab" + +msgid "Host Groups allowed to create keytab" +msgstr "Los Grupos de Host pueden crear keytab" + +msgid "Add a new host." +msgstr "Añadir un n uevo host." + +msgid "force host name even if not in DNS" +msgstr "" +"fuerza el nombre del equipo anfitrión, incluso si no se encuentra en DNS" + +msgid "skip reverse DNS detection" +msgstr "Ignorar la detección inversa de DNS" + +msgid "Add the host to DNS with this IP address" +msgstr "Agregar el host de DNS con esta dirección IP" + +msgid "Add hosts that can manage this host." +msgstr "Añadir hosts que pueda manejar este host." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Permite a usuarios, grupos, hosts o grupos de host crear una keytab de este " +"host." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Permite a usuarios, grupos, hosts o grupos de host recuperar una keytab de " +"este host." + +msgid "Delete a host." +msgstr "Borrar un host." + +msgid "Remove entries from DNS" +msgstr "Eliminar entradas de DNS" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" +"Deshabilitar la clave Kerberos, el certificado SSL y todos los servicios de " +"un host." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"No permite a usuarios, grupos, hosts o grupos de host crear una keytab de " +"este host." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"No permite a usuarios, grupos, hosts o grupos de host recuperar una keytab " +"de este host." + +msgid "Search for hosts." +msgstr "Buscar hosts." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +msgid "host group" +msgstr "grupo de host" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for hosts with these member of host groups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for hosts without these member of host groups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "netgroup" +msgstr "grupo de red" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for hosts with these member of netgroups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for hosts without these member of netgroups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "role" +msgstr "rol" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for hosts with these member of roles." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for hosts without these member of roles." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "HBAC rule" +msgstr "Regla HBAC" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for hosts with these member of HBAC rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for hosts without these member of HBAC rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "sudo rule" +msgstr "regla sudo" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for hosts with these member of sudo rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for hosts without these member of sudo rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "user" +msgstr "usuario" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for hosts with these enrolled by users." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for hosts without these enrolled by users." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "host" +msgstr "host" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for hosts with these managed by hosts." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for hosts without these managed by hosts." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for hosts with these managing hosts." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for hosts without these managing hosts." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "Modify information about a host." +msgstr "Modificar información sobre un host." + +msgid "Kerberos principal name for this host" +msgstr "Nombre del prinicpal de Kerberos para este equipo" + +msgid "Update DNS entries" +msgstr "Actualizar las entradas DNS" + +msgid "Remove hosts that can manage this host." +msgstr "Borrar hosts que puede manejar este host." + +msgid "Display information about a host." +msgstr "Mostrar información sobre un host." + +msgid "file to store certificate in" +msgstr "archivo para almacenar" msgid "" "\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" "EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "Grupo de equipo" + +msgid "Name of host-group" +msgstr "Nombre del grupo de equipo" + +msgid "A description of this host-group" +msgstr "Una descripción de este grupo de equipo" + +msgid "Member hosts" +msgstr "Equipos miembro" + +msgid "Member host-groups" +msgstr "Grupos de equipo miembro" + +msgid "Indirect Member hosts" +msgstr "Hosts de miembros indirectos" + +msgid "Indirect Member host-groups" +msgstr "Miembros indirectos de host-groups" + +msgid "Add a new hostgroup." +msgstr "Añadir un nuevo grupo de host." + +msgid "Add members to a hostgroup." +msgstr "Añadir miembros a un grupo de host." + +msgid "Delete a hostgroup." +msgstr "Borrar un grupo de host." + +msgid "Search for hostgroups." +msgstr "Buscar grupos de host." + +#, fuzzy +#| msgid "" +#| "Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" +"Los resultados deberían contener solo atributo de clave primaria " +"(\"sudocmdgroup-name\")" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for host groups with these member hosts." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for host groups without these member hosts." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for host groups with these member host groups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for host groups without these member host groups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for host groups with these member of host groups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for host groups without these member of host groups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for host groups with these member of netgroups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for host groups without these member of netgroups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for host groups with these member of HBAC rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for host groups without these member of HBAC rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for host groups with these member of sudo rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for host groups without these member of sudo rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "Modify a hostgroup." +msgstr "Modificar un grupo de host." + +msgid "Remove members from a hostgroup." +msgstr "Borrar miembros de un grupo de host." + +msgid "Display information about a hostgroup." +msgstr "Mostrar información sobre un grupo de host." + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "Nombre del grupo" + +msgid "GID" +msgstr "GID" + +msgid "Group ID Number" +msgstr "Número de Identificación de Grupo" + +msgid "User login" +msgstr "Ingreso de usuario" + +msgid "UID" +msgstr "UID" + +#, fuzzy +#| msgid "Group ID Number" +msgid "User ID Number" +msgstr "Número de Identificación de Grupo" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "Directorio principal" + +msgid "Login shell" +msgstr "Shell de ingreso" + +msgid "ID View Name" +msgstr "" + +#, fuzzy +#| msgid "Add a new IPA service." +msgid "Add a new Group ID override." +msgstr "Añadir un nuevo servicio IPA." + +#, fuzzy +#| msgid "Delete an ID range." +msgid "Delete an Group ID override." +msgstr "Eliminar un intervalo de ID." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an Group ID override." +msgstr "Buscar un grupo de red." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an Group ID override." +msgstr "Modificar un grupo." + +#, fuzzy +#| msgid "Rename the permission object" +msgid "Rename the Group ID override object" +msgstr "Renombrar el permiso del objeto" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an Group ID override." +msgstr "Mostrar información sobre un servicio IPA." + +#, fuzzy +#| msgid "Add a new IPA service." +msgid "Add a new User ID override." +msgstr "Añadir un nuevo servicio IPA." + +#, fuzzy +#| msgid "Delete an ID range." +msgid "Delete an User ID override." +msgstr "Eliminar un intervalo de ID." + +#, fuzzy +#| msgid "Search for IPA servers." +msgid "Search for an User ID override." +msgstr "Buscar servidores IPA." + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an User ID override." +msgstr "Modificar un servicio HBAC." + +#, fuzzy +#| msgid "Rename the permission object" +msgid "Rename the User ID override object" +msgstr "Renombrar el permiso del objeto" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an User ID override." +msgstr "Mostrar información sobre un servicio IPA." + +#, fuzzy +#| msgid "Add a new IPA service." +msgid "Add a new ID View." +msgstr "Añadir un nuevo servicio IPA." + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "hosts" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts to apply the ID View to" +msgstr "Categoría del equipo al que se aplica la regla" + +#, fuzzy +#| msgid "host groups" +msgid "hostgroups" +msgstr "grupos de host" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts that this ID View was applied to." +msgstr "Categoría del equipo al que se aplica la regla" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +#, fuzzy +#| msgid "Delete an ID range." +msgid "Delete an ID View." +msgstr "Eliminar un intervalo de ID." + +#, fuzzy +#| msgid "Search for ranges." +msgid "Search for an ID View." +msgstr "Buscar intervalos." + +#, fuzzy +#| msgid "Modify ID range." +msgid "Modify an ID View." +msgstr "Modificar rango de ID." + +#, fuzzy +#| msgid "Rename the permission object" +msgid "Rename the ID View object" +msgstr "Renombrar el permiso del objeto" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an ID View." +msgstr "Mostrar información sobre un servicio IPA." + +#, fuzzy +#| msgid "Service category the rule applies to" +msgid "Enumerate all the hosts the view applies to." +msgstr "Categoría de servicio a la que se aplica la regla" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" msgstr "" "\n" +"Los plugins no son accesibles a través d CLI, comandos usados internamente\n" + +msgid "Dict of I18N messages" +msgstr "Dictado de los mensajes regionales" + +msgid "Export plugin meta-data for the webUI." +msgstr "Exportar los metadatos del plugin para webUI." + +msgid "Name of object to export" +msgstr "Nombre del objeto a exportar" + +msgid "Name of method to export" +msgstr "Nombre del método para exportación" + +msgid "Name of command to export" +msgstr "Nombre de comando a exportar" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "El dict de JSON ha codificado objetos IPA" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "Métodos IPA codificados de Dict de JSON " + +msgid "Dict of JSON encoded IPA Commands" +msgstr "Dict de JSON comandos codificados IPA" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" +"\n" +"Uniendo un dominio IPA\n" + +msgid "Join an IPA domain" +msgstr "Unir un dominio IPA" + +msgid "The hostname to register as" +msgstr "El nombre del equipo a ser registrado como" + +msgid "The IPA realm" +msgstr "El reinado IPA" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Plataforma de hardware del equipo (p. ej. Lenovo T61)" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Sistema operativo que utiliza el equipo y versión (p.ej. Fedora 9)" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" +"\n" +"Funciones \n" +"\n" +"Un rol se utiliza para la delegación de grano fino. Un permiso otorga la " +"capacidad de realizar tareas de bajo nivel (añadir un usuario, modificar un " +"grupo, etc.) Un privilegio combina uno o más permisos en una abstracción \n" +"de nivel superior tales como useradmin. Un useradmin sería capaz de añadir, " +"eliminar y modificar usuarios. \n" +"\n" +"Los privilegios son asignados a roles.\n" +"\n" +"Los usuarios, grupos, hosts y hostgroups pueden ser miembros de un Rol. \n" +"\n" +"Los Roles no pueden contener otros roles.\n" +"\n" "EJEMPLOS:\n" +"\n" +"Añadir un nuevo rol: \n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege=add_user_to_default_group\n" +"junioradmin\n" +"\n" +"Agregar un grupo de usuarios a este rol:\n" +" ipa group-add --desc=\"User admins\" useradmins \n" +" ipa role-add-member --groups=useradmins junioradmin \n" +"\n" +"Mostrar información sobre el rol:\n" +" ipa role-show junioradmin\n" +"\n" +"El resultado de esto es que cualquier usuario en el grupo 'useradmins' puede " +"agregar usuarios, restablecer contraseñas o añadir un usuario al grupo de " +"usuarios predeterminado de la IPA.\n" + +msgid "User name" +msgstr "Nombre de usuario" + +msgid "Manage ticket policy for specific user" +msgstr "Administra política de ticket para un usuario específico" + +msgid "Max life" +msgstr "Vida máxima" + +msgid "Maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +msgid "Max renew" +msgstr "Renovación máxima" + +msgid "Maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +msgid "Modify Kerberos ticket policy." +msgstr "Modificar entrada de política Kerberos." + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "Reajustar la entrada de política Kerberos a los valores por defecto." + +msgid "Display the current Kerberos ticket policy." +msgstr "Mostrar la actual entrada de política Kerberos." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Migration to IPA\n" +#| "\n" +#| "Migrate users and groups from an LDAP server to IPA.\n" +#| "\n" +#| "This performs an LDAP query against the remote server searching for\n" +#| "users and groups in a container. In order to migrate passwords you need\n" +#| "to bind as a user that can read the userPassword attribute on the remote\n" +#| "server. This is generally restricted to high-level admins such as\n" +#| "cn=Directory Manager in 389-ds (this is the default bind user).\n" +#| "\n" +#| "The default user container is ou=People.\n" +#| "\n" +#| "The default group container is ou=Groups.\n" +#| "\n" +#| "Users and groups that already exist on the IPA server are skipped.\n" +#| "\n" +#| "Two LDAP schemas define how group members are stored: RFC2307 and\n" +#| "RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +#| "members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +#| "\n" +#| "The schema compat feature allows IPA to reformat data for systems that\n" +#| "do not support RFC2307bis. It is recommended that this feature is " +#| "disabled\n" +#| "during migration to reduce system overhead. It can be re-enabled after\n" +#| "migration. To migrate with it enabled use the \"--with-compat\" option.\n" +#| "\n" +#| "Migrated users do not have Kerberos credentials, they have only their\n" +#| "LDAP password. To complete the migration process, users need to go\n" +#| "to http://ipa.example.com/ipa/migration and authenticate using their\n" +#| "LDAP password in order to generate their Kerberos credentials.\n" +#| "\n" +#| "Migration is disabled by default. Use the command ipa config-mod to\n" +#| "enable it:\n" +#| "\n" +#| " ipa config-mod --enable-migration=TRUE\n" +#| "\n" +#| "If a base DN is not provided with --basedn then IPA will use either\n" +#| "the value of defaultNamingContext if it is set or the first value\n" +#| "in namingContexts set in the root of the remote LDAP server.\n" +#| "\n" +#| "Users are added as members to the default user group. This can be a\n" +#| "time-intensive task so during migration this is done in a batch\n" +#| "mode for every 100 users. As a result there will be a window in which\n" +#| "users will be added to IPA but will not be members of the default\n" +#| "user group.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " The simplest migration, accepting all defaults:\n" +#| " ipa migrate-ds ldap://ds.example.com:389\n" +#| "\n" +#| " Specify the user and group container. This can be used to migrate user\n" +#| " and group data from an IPA v1 server:\n" +#| " ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +#| " --group-container='cn=groups,cn=accounts' \\\n" +#| " ldap://ds.example.com:389\n" +#| "\n" +#| " Since IPA v2 server already contain predefined groups that may collide " +#| "with\n" +#| " groups in migrated (IPA v1) server (for example admins, ipausers), " +#| "users\n" +#| " having colliding group as their primary group may happen to belong to\n" +#| " an unknown group on new IPA v2 server.\n" +#| " Use --group-overwrite-gid option to overwrite GID of already existing " +#| "groups\n" +#| " to prevent this issue:\n" +#| " ipa migrate-ds --group-overwrite-gid \\\n" +#| " --user-container='cn=users,cn=accounts' \\\n" +#| " --group-container='cn=groups,cn=accounts' \\\n" +#| " ldap://ds.example.com:389\n" +#| "\n" +#| " Migrated users or groups may have object class and accompanied " +#| "attributes\n" +#| " unknown to the IPA v2 server. These object classes and attributes may " +#| "be\n" +#| " left out of the migration process:\n" +#| " ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +#| " --group-container='cn=groups,cn=accounts' \\\n" +#| " --user-ignore-objectclass=radiusprofile \\\n" +#| " --user-ignore-attribute=radiusgroupname \\\n" +#| " ldap://ds.example.com:389\n" +#| "\n" +#| "LOGGING\n" +#| "\n" +#| "Migration will log warnings and errors to the Apache error log. This\n" +#| "file should be evaluated post-migration to correct or investigate any\n" +#| "issues that were discovered.\n" +#| "\n" +#| "For every 100 users migrated an info-level message will be displayed to\n" +#| "give the current progress and duration to make it possible to track\n" +#| "the progress of migration.\n" +#| "\n" +#| "If the log level is debug, either by setting debug = True in\n" +#| "/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +#| "printed\n" +#| "for each user added plus a summary when the default user group is\n" +#| "updated.\n" +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" +"\n" +"Migración a IPA\n" +"\n" +"Migrar usuarios y grupos desde un servidor LDAP a IPA.\n" +"\n" +"Esto lleva a cabo una consulta LDAP contra el servidor remoto buscando \n" +"usuarios y grupos en un contenedor. Con el objetivo de migrar las " +"contraseñas\n" +"usted necesita enlazar como un usuario que pueda leer el atributo " +"userPassword\n" +"sobre el servidor remoto. Esto normalmente está restringido a " +"administradores de\n" +"alto nivel como cn=Directory Manager en 389-ds (este es el usuario de enlace " +"por defecto).\n" +"\n" +"El contenedor de usuario por defecto es ou=People.\n" +"\n" +"El contenedor de grupo por defecto es ou=Groups.\n" +"\n" +"Los usuarios y grupos que ya existen en el servidor IPA son saltados.\n" +"\n" +"Dos esquemas LDAP definen como se almacenan los miembros del grupo:\n" +"RFC2307 y RFC2307bis. RFC2307bis usa miembro y miembro único para\n" +"especificar los miembros del grupo. RFC2307 usa memberUid. El esquema por " +"defecto es RFC2307bis.\n" +"\n" +"La característica de compatibilidad de esquema permite a IPA reformatear " +"datos\n" +"para sistemas que no soportan RFC2307bis. Se recomienda deshabilitar esta\n" +"característica durante la migración para reducir la sobrecarga del sistema. " +"Puede\n" +"ser rehabilitado después de la migración. Para migrar con esto habilitado " +"use la opción \"--with-compat\".\n" +"\n" +"Los usuarios migrados no tienen credenciales Kerberos, solo tienen su " +"contraseña\n" +"LDAP. Para completar el proceso de migración los usuarios necesitan ir a\n" +"to http://ipa.example.com/ipa/migration y autenticar usando su contraseña " +"LDAP\n" +" con el objetivo de generar sus credenciales Kerberos.\n" +"\n" +"La migración está deshabilitada por defecto. Use el comando ips config-mod " +"para\n" +" habilitarla:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Si no se ha suministrado una base DN con –basedn IPA usará en su lugar el " +"valor\n" +"de defaultNamingContext si se ha establecido o el primer valor establecido " +"en\n" +"namingContexts en la raíz el servidor LDAP remoto.\n" +"\n" +"Los usuarios son añadidos como miembros del grupo de usuarios " +"predeterminado.\n" +"Esta puede ser una tarea que consuma mucho tiempo de modo que durante la\n" +"migración se hace por lotes para cada 100 usuarios. Como resultado habrá una " +"ventana en la que los usuarios se añadirán a IPA pero no serán miembros del\n" +"grupo de usuario predeterminado.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" La migración más sencilla, aceptando todo lo predeterminado:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Especificar el contenedor de usuario y grupo. Esto se puede usar para " +"migrar datos\n" +" de usuario y grupo desde un servidor IPA v1:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +"Puesto que el servidor IPA v2 ya contiene grupos predefinidos que pueden " +"chocar\n" +"con los grupos en servidor migrado (IPA v1) (por ejemplo admins, ipausers), " +"los\n" +"usuarios que tengan un grupo que choque con su grupo primario puede suceder\n" +"que pertenezcan a un grupo desconocido sobre el nuevo servidor IPA v2\n" +"Use la opción --group-overwrite-gid para sobreescribir la GID de los grupos " +"ya\n" +"existentes y evitar esta cuestión:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +"Los usuarios o grupos migrados pueden tener objetos clase y atributos\n" +"acompañantes desconocidos por el servidor IPS v2. Estos objetos clase y " +"atributos\n" +"pueden ser dejados fuera durante el proceso de migración:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"REGISTRO\n" +"\n" +"La migración registrará alarmas y errores en el registro de error Apache. " +"Este\n" +"fichero debería ser evaluado después de la migración para corregir o " +"investigar\n" +"cualquier cuestión que se descubra.\n" +"\n" +"Por cada 100 usuarios migrados y mensaje de nivel informativo será mostrado\n" +"dando el progreso actual y l duración para hacer posible rastrear el " +"progreso de la\n" +"migración.\n" +"\n" +"Si el nivel de registro es depuración, bien porque se haya fijado debug = " +"True en\n" +"etcipa/default.conf o etcipa/server.conf, se añadirá una entrada por cada " +"usuario\n" +"añadido más un resumen cuando el grupo de usuario predeterminado se haya\n" +"actualizado.\n" + +msgid "Migrate users and groups from DS to IPA." +msgstr "Migrar usuarios y grupos de DS a IPA." + +msgid "LDAP URI" +msgstr "LDAP URI" + +msgid "LDAP URI of DS server to migrate from" +msgstr "LDAP URI del servidor DS desde donde realizar la migración" + +msgid "bind password" +msgstr "asociar contraseña" + +msgid "Bind DN" +msgstr "Asociar DN" + +msgid "User container" +msgstr "Contenedor de usuario" + +msgid "DN of container for users in DS relative to base DN" +msgstr "DN de contendor para usuarios es DS relativo a base DN" + +msgid "Group container" +msgstr "Contenedor de grupoi" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "DN de contenedor para grupos es DS relativo a DN" + +msgid "User object class" +msgstr "Clase de objeto de usuario" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "Objectclasses usado para buscar entradas de usuario en DS" + +msgid "Group object class" +msgstr "Clase de objeto de grupo" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "Objectclasses usado para buscar entradas de grupo en DS" + +msgid "Ignore user object class" +msgstr "Ignorar clase de objeto usuario" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "Objectclasses a se ignorado para entradas de usuario en DS" + +msgid "Ignore user attribute" +msgstr "Ignorar atributo de usuario" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "Atributos a ignorar para las entradas de usuario en DS" + +msgid "Ignore group object class" +msgstr "Ignorar clase de objeto grupo" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "Objectclasses a ignorar para las entradas de grupo en DS" + +msgid "Ignore group attribute" +msgstr "Ignorar atributo de grupo" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "Atributos a ignorar para las entradas de grupo en DS" + +msgid "Overwrite GID" +msgstr "Sobrescribir GID" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" +"Cuando se migra un grupo que ya existe en el dominio IPA se sobrescribe el " +"GID de grupo e informa como conseguido" + +msgid "LDAP schema" +msgstr "Esquema LDAP" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"El esquema utilizado en el servidor LDAP. Los valores admitidos son RFC2307 " +"y RFC2307bis. El valor predeterminado es RFC2307bis" + +msgid "Continue" +msgstr "Continuar" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" +"Modo de funcionamiento continuo. Se reportan errores, pero el proceso " +"continúa" + +msgid "Base DN" +msgstr "Base DN" + +msgid "Base DN on remote LDAP server" +msgstr "Base DN sobre servidor LDAP remoto" + +msgid "Ignore compat plugin" +msgstr "Ignorar plugin de compatibilidad" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" +"Permitir la migración a pesar de la utilización del plugin de compatibilidad" + +msgid "CA certificate" +msgstr "Certificado CA" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Cargar certificado CA del servidor LDAP desde FILE" + +#, fuzzy +#| msgid "%s to exclude from migration" +msgid "groups to exclude from migration" +msgstr "%s a excluir desde la migración" + +#, fuzzy +#| msgid "%s to exclude from migration" +msgid "users to exclude from migration" +msgstr "%s a excluir desde la migración" + +msgid "Lists of objects migrated; categorized by type." +msgstr "Lista de objetos migrados; clasificados por tipo." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "Lista de objetos que no pueden ser migrados; categorizados por tipo." + +msgid "False if migration mode was disabled." +msgstr "\"False\", si el modo de migración fue inhabilitado." + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" +"False si la migración falla porque el plug-in de compatibilidad está " +"habilitado." + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" +"\n" +"Misc plug-ins\n" + +msgid "Show environment variables." +msgstr "Mostrar variables de entorno." + +msgid "Forward to server instead of running locally" +msgstr "Reenvía al servidor en lugar de ejecutarse localmente" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" +" Determinar si la ACI es un autoservicio de ACI y hacer una excepción " +"si\n" +" no lo es.\n" +" Devolver el resultado si se trata de un autoservicio de ACI." + +msgid "Dictionary mapping variable name to value" +msgstr "Nombre de la variable de mapeo de dicionario a valorizar " + +msgid "Total number of variables env (>= count)" +msgstr "Cantidad total de variables env (>= count)" + +msgid "Number of variables returned (<= total)" +msgstr "Cantidad de variables devueltas (<= total)" + +msgid "Show all loaded plugins." +msgstr "Mostrar todos los plugins cargados." + +#, fuzzy +#| msgid "Dictionary mapping variable name to value" +msgid "Dictionary mapping plugin names to bases" +msgstr "Nombre de la variable de mapeo de dicionario a valorizar " + +msgid "Number of plugins loaded" +msgstr "Cantidad de complementos cargados" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" +"\n" +"Netgroups\n" +"\n" +"Un netgroup es un grupo usado para comprobación de permisos. Puede contener\n" +"valores tanto de usuario como de host.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Añadir miembros al netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Quitar un miembro del netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Mostrar información sobre un netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Borrar un netgroup:\n" +" ipa netgroup-del admins\n" + +msgid "Netgroup name" +msgstr "Nombre de grupo de red" + +msgid "Netgroup description" +msgstr "Descripción del grupo de red" + +msgid "NIS domain name" +msgstr "Nombre del dominio NIS" + +msgid "IPA unique ID" +msgstr "ID unico de IPA" + +msgid "Member netgroups" +msgstr " Miembros de netgroups" + +msgid "Indirect Member netgroups" +msgstr "Miembros indirectos netgroups" + +#, fuzzy +#| msgid "Member users" +msgid "Member User" +msgstr "Usuarios miembros" + +#, fuzzy +#| msgid "Member groups" +msgid "Member Group" +msgstr "Grupos de miembros" + +msgid "Member Host" +msgstr "Miembro del equipo anfitrión" + +#, fuzzy +#| msgid "Member host-groups" +msgid "Member Hostgroup" +msgstr "Grupos de equipo miembro" + +msgid "Add a new netgroup." +msgstr "Añadir un nuevo grupo de red." + +msgid "Add members to a netgroup." +msgstr "Añadir miembros a un grupo de red." + +#, fuzzy +#| msgid "Member netgroups" +msgid "member netgroup" +msgstr " Miembros de netgroups" + +#, fuzzy +#| msgid "netgroups" +msgid "netgroups to add" +msgstr "grupos de red" + +msgid "Delete a netgroup." +msgstr "Borrar un grupo de red." + +msgid "Search for a netgroup." +msgstr "Buscar un grupo de red." + +msgid "search for managed groups" +msgstr "buscar grupos gestionados" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for netgroups with these member netgroups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for netgroups without these member netgroups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for netgroups with these member users." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for netgroups without these member users." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "group" +msgstr "grupo" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for netgroups with these member groups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for netgroups without these member groups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for netgroups with these member hosts." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for netgroups without these member hosts." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for netgroups with these member host groups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for netgroups without these member host groups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for netgroups with these member of netgroups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for netgroups without these member of netgroups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "Modify a netgroup." +msgstr "Modificar un grupo de red." + +msgid "Remove members from a netgroup." +msgstr "Borrar miembros de un grupo de red." + +#, fuzzy +#| msgid "%s to remove" +msgid "netgroups to remove" +msgstr "%s a eliminar" + +msgid "Display information about a netgroup." +msgstr "Mostrar información sobre un grupo de red." + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" +"\n" +"Configuración OTP\n" +"\n" +"Gestiona los valores por defecto que IPA usa para las fichas OTP.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Muestra a configuración OTP básica:\n" +" ipa otpconfig-show\n" +"\n" +" Muestra todas las opciones de configuración OTP:\n" +" ipa otpconfig-show --all\n" +"\n" +" Cambia la ventana máxima de autenticación TOTP a 10 minutos:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Cambia la ventana máxima de sincronización TOTP a 12 horas:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Cambia la ventana máxima de autenticación HOTP a 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Cambia la ventana máxima de sincronización a 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" + +msgid "TOTP authentication Window" +msgstr "Ventana de autenticación TOTP" + +msgid "TOTP authentication time variance (seconds)" +msgstr "Variación del tiempo de autenticación TOTP (segundos)" + +msgid "TOTP Synchronization Window" +msgstr "Ventana de Sincronización TOTP" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "Variación del tiempo de sincronización TOTP (segundos)" + +msgid "HOTP Authentication Window" +msgstr "Ventana de Autenticación HOTP" + +msgid "HOTP authentication skip-ahead" +msgstr "Vaya directamente a la autenticación HOTP" + +msgid "HOTP Synchronization Window" +msgstr "Ventana de Sincronización HOTP" + +msgid "HOTP synchronization skip-ahead" +msgstr "Vaya directamente a la sincronización HOTP" + +msgid "Modify OTP configuration options." +msgstr "Modificar opciones de configuración OTP." + +msgid "Show the current OTP configuration." +msgstr "Mostrar la configuración OTP actual." + +#, fuzzy +#| msgid "" +#| "\n" +#| "This code is an extension to the otptoken plugin and provides support " +#| "for\n" +#| "reading/writing YubiKey tokens directly.\n" +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" +"\n" +"Este código es una extensión del plugin otptoken y suministra el soporte " +"para\n" +" leer/escribir directamente en las fichasYubiKey.\n" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" +"\n" +"Establecer contraseña de un usuario\n" +"\n" +"Si alguien que no sea un usuario cambia la contraseña del usuario (por " +"ejemplo, Servicio de Ayuda la restablece), entonces la contraseña tendrá que " +"ser cambiada la primera vez que se utiliza. Esto es para que el usuario " +"final sea el único que conoce la contraseña.\n" +"La directiva de contraseñas IPA controla la frecuencia de cambio de una " +"contraseña, los requisitos de fortaleza y longitud del historial de " +"contraseñas. EJEMPLOS:\n" +"Para restablecer su contraseña:\n" +" ipa passwd tuser1\n" +"\n" +" Para cambiar la contraseña de otro usuario:\n" +" ipa passwd tuser1\n" + +msgid "Set a user's password." +msgstr "Fijar una contraseña de usuario." + +msgid "New Password" +msgstr "Nueva Contraseña" + +msgid "Current Password" +msgstr "Contraseña Actual" + +msgid "OTP" +msgstr "OTP" + +#, fuzzy +#| msgid "Reset Password" +msgid "One Time Password" +msgstr "Restablecer contraseña" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Permissions\n" +#| "\n" +#| "A permission enables fine-grained delegation of rights. A permission is\n" +#| "a human-readable form of a 389-ds Access Control Rule, or instruction " +#| "(ACI).\n" +#| "A permission grants the right to perform a specific task such as adding " +#| "a\n" +#| "user, modifying a group, etc.\n" +#| "\n" +#| "A permission may not contain other permissions.\n" +#| "\n" +#| "* A permission grants access to read, write, add or delete.\n" +#| "* A privilege combines similar permissions (for example all the " +#| "permissions\n" +#| " needed to add a user).\n" +#| "* A role grants a set of privileges to users, groups, hosts or " +#| "hostgroups.\n" +#| "\n" +#| "A permission is made up of a number of different parts:\n" +#| "\n" +#| "1. The name of the permission.\n" +#| "2. The target of the permission.\n" +#| "3. The rights granted by the permission.\n" +#| "\n" +#| "Rights define what operations are allowed, and may be one or more\n" +#| "of the following:\n" +#| "1. write - write one or more attributes\n" +#| "2. read - read one or more attributes\n" +#| "3. add - add a new entry to the tree\n" +#| "4. delete - delete an existing entry\n" +#| "5. all - all permissions are granted\n" +#| "\n" +#| "Read permission is granted for most attributes by default so the read\n" +#| "permission is not expected to be used very often.\n" +#| "\n" +#| "Note the distinction between attributes and entries. The permissions are\n" +#| "independent, so being able to add a user does not mean that the user " +#| "will\n" +#| "be editable.\n" +#| "\n" +#| "There are a number of allowed targets:\n" +#| "1. type: a type of object (user, group, etc).\n" +#| "2. memberof: a member of a group or hostgroup\n" +#| "3. filter: an LDAP filter\n" +#| "4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +#| " super-set of the \"type\" target.\n" +#| "5. targetgroup: grant access to modify a specific group (such as " +#| "granting\n" +#| " the rights to manage group membership)\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a permission that grants the creation of users:\n" +#| " ipa permission-add --type=user --permissions=add \"Add Users\"\n" +#| "\n" +#| " Add a permission that grants the ability to manage group membership:\n" +#| " ipa permission-add --attrs=member --permissions=write --type=group " +#| "\"Manage Group Members\"\n" +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +"Permisos\n" +"\n" +"Un permiso habilita una delegación de grano fino de derechos. Un permiso es " +"un formato\n" +"legible por el hombre de una Regla de Control de Acceso (ACL) 389-ds o una " +"instrucción (ACI).\n" +"Un permiso otorga el derecho de llevar a cabo una tarea específica como " +"añadir un\n" +"usuario, modificar un grupo, etc.\n" +"\n" +"Un permiso puede contener otros permisos.\n" +"\n" +"* Un permiso otorga acceso de escritura, lectura, añadir o borrar.\n" +"* Un privilegio combina permisos similares (por ejemplo los permisos " +"necesarios para \n" +" añadir un usuario).\n" +"* Un rol otorga un conjunto de privilegios a usuarios, grupos, hosts o " +"grupos de hosts.\n" +"\n" +"Un permiso consta de diversas partes:\n" +"\n" +"1. El nombre del permiso.\n" +"2. El objetivo del permiso.\n" +"3. Los derechos otorgados por el permiso.\n" +"\n" +"Los derechos definen que operaciones están permitidas y pueden ser una o más " +"de las\n" +"siguientes:\n" +"1. write - escribir uno o más atributos\n" +"2. read - leer uno o más atributos\n" +"3. add - añadir una nueva entrada al árbol\n" +"4. delete - borrar una entrada existente\n" +"5. all - se otorgan todos los permisos\n" +"\n" +"El permiso de lectura se otorga para la mayoría de los atributos por " +"defectos de modo que\n" +"el permiso de lectura no se espera que use con frecuencia.\n" +"\n" +"Advierta la distinción entre atributos y entradas. Los permisos son " +"independientes, de\n" +"modo que ser capaz de añadir un usuario no siginifica que el usuario será " +"editable.\n" +"\n" +"Hay diversos objetivos permitidos:\n" +"1. type: un tipo de objeto (usuario, grupo, etc).\n" +"2. memberof: un miembro de un grupo o grupo de host\n" +"3. filter: un filtro LDAP\n" +"4. subtree: un filtro LDAP especificando parte del LDAP DIT. Esto es un " +"superconjunto del\n" +" objetivo \"type\".\n" +"5. targetgroup: otorga acceso a modificar un grupo específico (como " +"obteniendo\n" +" derechos para manejar la pertenencia al grupo)\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un permiso que otorga la creación de usuarios:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Añadir un permiso que otorga la capacidad de manejar la pertenencia al " +"grupo:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" + +msgid "Permission name" +msgstr "Nombre de permiso" + +msgid "Granted rights" +msgstr "Derechos concedidos" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "Derechos a conceder (read, search, compare, write, add, delete, all)" + +msgid "Effective attributes" +msgstr "Atributos efectivos" + +msgid "All attributes to which the permission applies" +msgstr "Todos los atributos a los que aplica el permiso" + +msgid "Included attributes" +msgstr "Atributos incluidos" + +msgid "User-specified attributes to which the permission applies" +msgstr "Atributos especificados por el usuario a los que aplica el permiso" + +msgid "Excluded attributes" +msgstr "Atributos excluidos" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" +"Atributos especificados por el usuario a los cuales no se les aplica " +"explícitamente el permiso" + +msgid "Default attributes" +msgstr "Atributos predeterminados" + +msgid "Attributes to which the permission applies by default" +msgstr "Atributos a los que el permiso se aplica por defecto" + +msgid "Bind rule type" +msgstr "Tipo de regla de enlace" + +msgid "Subtree to apply permissions to" +msgstr "Subárbol para aplicar permisos" + +msgid "Extra target filter" +msgstr "Filtro de objetivo adicional" + +msgid "Raw target filter" +msgstr "Filtro objetivo en bruto" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" +"Todos los filtros objetivo, incluyendo aquellos implicados por el tipo y " +"menbresia" + +msgid "Target DN" +msgstr "DN objetivo" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" +"DN opcional a aplicar al permiso (debe estar en el sub-árbol, pero puede no " +"existir todavía)" + +msgid "Member of group" +msgstr "Miembro del grupo" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "Miembros objetivos de un grupo (establece memberOf targetfilter)" + +msgid "User group to apply permissions to (sets target)" +msgstr "Usuario de grupo a aplicar permisos (establece target)" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "Tipo de objeto IPA (establece subtree y objectClass targetfilter)" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use extratargetfilter" +msgstr "Obsoleto; use %s" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use ipapermlocation" +msgstr "Obsoleto; use %s" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use ipapermright" +msgstr "Obsoleto; use %s" + +msgid "Granted to Privilege" +msgstr "Concedido al Privilegio" + +msgid "Indirect Member of roles" +msgstr "Roles de miembros indirectos" + +msgid "Add a new permission." +msgstr "Añadir un nuevo permiso." + +msgid "Add members to a permission." +msgstr "Añadir miembros a un permiso." + +msgid "member privilege" +msgstr "miembro privilegio" + +#, fuzzy +#| msgid "privileges" +msgid "privileges to add" +msgstr "privilegios" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "Añadir un permiso de sistema sin un ACI (comando interno)" + +msgid "Permission flags" +msgstr "Banderas de permiso" + +msgid "Delete a permission." +msgstr "Borrar un permiso." + +msgid "force delete of SYSTEM permissions" +msgstr "fuerza el borrado de permisos SYSTEM" + +msgid "Search for permissions." +msgstr "Buscar permisos." + +msgid "Modify a permission." +msgstr "Modificar un permiso." + +msgid "Rename the permission object" +msgstr "Renombrar el permiso del objeto" + +msgid "Remove members from a permission." +msgstr "Borrar miembros desde un permiso." + +#, fuzzy +#| msgid "Add privileges to a role." +msgid "privileges to remove" +msgstr "Añadir privilegios a un rol." + +msgid "Display information about a permission." +msgstr "Mostrar información sobre un permiso." + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" +"\n" +"Haga ping al servidor IPA remoto para asegurarse que está corriendo.\n" +"\n" +"El comando ping envía una petición de eco al servidor IPA. El servidor " +"devuelve\n" +"su información de versión. Esto se usa por un cliente IPA para confirmar que " +"el\n" +"servidor está disponible y acepta peticiones.\n" +"\n" +"El servidor de xmlrpc_uri en /etc/ipa/default.conf es el primero en " +"contactarse. Si no\n" +"responde el clinte contactará con cualquier de los servidores definidos por " +"los\n" +"registros ldap SRV en DNS.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Hacer ping a un servidor IPA:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Hacer ping a un servidor IPA verbosamente:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" + +msgid "Ping a remote server." +msgstr "Hacer ping a un servidor remoto." + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" +"\n" +"Opciones de kerberos pkinit\n" +"Activan o desactivan pkinit anónimo mediante el principal\n" +"WELLKNOWN/ANONYMOUS@REALM. El servidor debe haber sido instalado con soporte " +"pkinit.\n" +"EJEMPLOS:\n" +"Activar pkinit anónimo\n" +" ipa pkinit-anonymous enable\n" +"Desactivar pkinit anónimo:\n" +" ipa pkinit-anonymous disable\n" +"Para obtener mayor información sobre pkinit anónimo, por favor consulte: \n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +"\n" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "Habilitar o Deshabilitar PKINIT Anónimo." + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" +"\n" +"Privilegios\n" +"Un privilegio combina permisos dentro de una tarea lógica. Un permiso " +"proporciona\n" +"los derechos para realizar una tarea específica.\n" +"Por ejemplo, añadir un usuario requiere los siguientes permisos:\n" +"Crear una nueva entradasd de usuario\n" +"Restablecer una contraseña de usuario\n" +"Añadir el nuevo usuario al grupo de usuario predeterminado de IPA\n" +"Combinar estos tres niveles inferiores dentro de una tarea de nivel superior " +"en forma de un privilegio \n" +"denominado \"Add User\" facilita el manejo de roles.\n" +"\n" +"Un privilegio no puede contener otros privilegios.\n" +"\n" +"Ver el rol y el permiso para información adicional. \n" +"\n" +" \n" +"\n" +"\n" + +msgid "Privilege name" +msgstr " Añadir un nuevo servicio de la nueva IPA." + +msgid "Privilege description" +msgstr "" +" \n" +" Eliminar un servicio de la IPA." + +msgid "Granting privilege to roles" +msgstr "Concesión de privilegios a los roles" + +msgid "Add a new privilege." +msgstr "Añadir un nuevo privilegio." + +msgid "Add members to a privilege." +msgstr "Añadir miembros a un privilegio." + +#, fuzzy +#| msgid "member group" +msgid "member role" +msgstr "miembro de grupo" + +#, fuzzy +#| msgid "%s to add" +msgid "roles to add" +msgstr "%s a añadir" + +msgid "Add permissions to a privilege." +msgstr "Añadir permisos a un privilegio." + +msgid "permission" +msgstr "permiso" + +msgid "permissions" +msgstr "permisos" + +msgid "Number of permissions added" +msgstr "Número de permisos añadidos" + +msgid "Delete a privilege." +msgstr "Borrar un privilegio." + +msgid "Search for privileges." +msgstr "Buscar privilegios." + +msgid "Modify a privilege." +msgstr "Modificar un privilegio." + +#, fuzzy +#| msgid "Rename the permission object" +msgid "Rename the privilege object" +msgstr "Renombrar el permiso del objeto" + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove members from a privilege" +msgstr "Borrar miembros de un rol." + +#, fuzzy +#| msgid "%s to remove" +msgid "roles to remove" +msgstr "%s a eliminar" + +msgid "Remove permissions from a privilege." +msgstr "Borrar permisos de un privilegio." + +msgid "Number of permissions removed" +msgstr "Número de permisos eliminados" + +msgid "Display information about a privilege." +msgstr "Mostrar información sobre un privilegio." + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" +"\n" +"Política de contraseñas\n" +"\n" +"Una contraseña establece límites en contraseñas de IPA, incluyendo máxima y " +"mínima duración, el número de contraseñas a guardar en historial, el número " +"de clases de caracteresrequeridos (para contraseñas ás fuertes)\n" +"y el mínimo de longitud de una contraseña.\n" +"\n" +"Por defecto es una única política global para todos los usuarios. También " +"puede crear una política de contraseña para aplicar a un grupo. Cada usuario " +"está sujeto solamente a una política de contraseña, ya sea de grupo o " +"global. Una política de grupo es autónoma; no es uper-set de la política " +"global mas los parámetros personalizados.\n" +"Cada política de contraseña requiere una configuración única . Si un usuario " +"está en varios grupos que tienen políticas de contraseñas, esta prioridad " +"determina qué política de contraseña aplica. Un valor inferior indica una " +"política de prioridad superior.\n" +"\n" +"Las políticas de contraseña de grupo se eliminan automáticamente cuando se " +"eliminan los grupos a los cuales están asociados.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Modificar la política global:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Agregar una política de contraseña de nuevo grupo:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Mostrar una política de contraseña global:\n" +" ipa pwpolicy-show\n" +"\n" +" Mostrar una política de contraseña de grupo:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Mostrar la política que sería aplicada al usuario dado:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modificar una polítca de contraseña de grupo:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" + +msgid "Group" +msgstr "Grupo" + +msgid "Manage password policy for specific group" +msgstr "Administra la política de contraseña de un grupo específico" + +msgid "Max lifetime (days)" +msgstr "Vida máxima (días)" + +msgid "Maximum password lifetime (in days)" +msgstr "Vida máxima de la contraseña (días)" + +msgid "Min lifetime (hours)" +msgstr "Vida mínima (horas)" + +msgid "Minimum password lifetime (in hours)" +msgstr "Vida mínima de la contraseña (en horas)" + +msgid "History size" +msgstr "Tamaño del historial" + +msgid "Password history size" +msgstr "Tamaño del historial de la contraseña" + +msgid "Character classes" +msgstr "Clases de caracteres" + +msgid "Minimum number of character classes" +msgstr "Cantidad mínima de clases de caracteres" + +msgid "Min length" +msgstr "Longitud mínima" + +msgid "Minimum length of password" +msgstr "Longitud mínima de la contraseña" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" +"Prioridad de la política (a mayor número corresponde una política menor)" + +msgid "Max failures" +msgstr "Número máximo de fallas" + +msgid "Consecutive failures before lockout" +msgstr "Fallos consecutivos antes del bloqueo" + +msgid "Failure reset interval" +msgstr "Falló reajuste de intervalo" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "Período tras el cual se restablecerá (segundos) el conteo de errores" + +msgid "Lockout duration" +msgstr "Duración de bloqueo" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Período durante el cual se fuerza el bloqueo (segundos)" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +msgid "Add a new group password policy." +msgstr "Añadir un nuevo grupo de política de contraseña." + +msgid "Delete a group password policy." +msgstr "Borrar un grupo de política de contraseña." + +msgid "Search for group password policies." +msgstr "Buscar grupo de políticas de contraseña." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"%s\")" +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" +"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" + +msgid "Modify a group password policy." +msgstr "Modificar un grupo de política de contraseña." + +msgid "Display information about password policy." +msgstr "Mostrar información sobre la política de contraseña." + +msgid "User" +msgstr "Usuario" + +msgid "Display effective policy for a specific user" +msgstr "Ofrece la política efectiva para un determinado usuario" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "Nombre del servidor proxy RADIUS" + +msgid "A description of this RADIUS proxy server" +msgstr "Una descripción de este servidor proxy RADIUS" + +msgid "Server" +msgstr "Servidor" + +msgid "The hostname or IP (with or without port)" +msgstr "El nombre de host o IP (con o sin puerto)" + +msgid "Secret" +msgstr "Secreto" + +msgid "The secret used to encrypt data" +msgstr "El secreto usado para encriptar datos" + +msgid "Timeout" +msgstr "Tiempo de espera" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" +"El tiempo de espera total después de todos los reintentos (en segundos)" + +msgid "Retries" +msgstr "Reintentos" + +msgid "The number of times to retry authentication" +msgstr "El número de veces para reintentar la autenticación" + +msgid "User attribute" +msgstr "Atributo de usuario" + +msgid "The username attribute on the user object" +msgstr "El atributo username sobre el objeto usuario" + +msgid "Add a new RADIUS proxy server." +msgstr "Añadir un nuevo servidor proxy RADIUS." + +msgid "Delete a RADIUS proxy server." +msgstr "Borrar un servidor proxy RADIUS." + +msgid "Search for RADIUS proxy servers." +msgstr "Búsqueda de servidores proxy RADIUS." + +msgid "Modify a RADIUS proxy server." +msgstr "Modificar un servidor proxy RADIUS." + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Rename the RADIUS proxy server object" +msgstr "Borrar un servidor proxy RADIUS." + +msgid "Display information about a RADIUS proxy server." +msgstr "Muestra información sobre un servidor proxy RADIUS." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Realm domains\n" +#| "\n" +#| "Manage the list of domains associated with IPA realm.\n" +#| "\n" +#| "This list is useful for Domain Controllers from other realms which have\n" +#| "established trust with this IPA realm. They need the information to know\n" +#| "which request should be forwarded to KDC of this IPA realm.\n" +#| "\n" +#| "Automatic management: a domain is automatically added to the realm " +#| "domains\n" +#| "list when a new DNS Zone managed by IPA is created. Same applies for " +#| "deletion.\n" +#| "\n" +#| "Externally managed DNS: domains which are not managed in IPA server DNS\n" +#| "need to be manually added to the list using ipa realmdomains-mod " +#| "command.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Display the current list of realm domains:\n" +#| " ipa realmdomains-show\n" +#| "\n" +#| " Replace the list of realm domains:\n" +#| " ipa realmdomains-mod --domain=example.com\n" +#| " ipa realmdomains-mod --domain={example1.com,example2.com,example3." +#| "com}\n" +#| "\n" +#| " Add a domain to the list of realm domains:\n" +#| " ipa realmdomains-mod --add-domain=newdomain.com\n" +#| "\n" +#| " Delete a domain from the list of realm domains:\n" +#| " ipa realmdomains-mod --del-domain=olddomain.com\n" +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Dominios de reino\n" +"\n" +"Gestiona la lista de dominios asociados con el reino IPA.\n" +"\n" +"Esta lista es útil para los Controladores de Dominio de otros reinos que " +"tienen\n" +"establecida confianza con este reino IPA. Necesitan la información para " +"saber que \n" +"peticiones deberían ser reenviadas a KDC de este reino IPA.\n" +"\n" +"Gestión automática: se añade un dominio automáticamente a la lista de " +"dominios\n" +"cuando se crea una nueva Zona DNS gestionada por IPA. Lo mismo se aplica " +"para el borrado.\n" +"\n" +"DNS extermanete gestionado: los dominios que no son gestionados en el " +"servidor\n" +"IPA DNA necesitan ser añadidos manualmente a la lista usando el comando ipa " +"realmdomains-mod command.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Muestra la lista actual de dominios reino:\n" +" ipa realmdomains-show\n" +"\n" +" Reemplaza la lista de dominios reino:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Añade un dominio a la lista de dominios reino:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Borra un dominio de la lista de dominios reino:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" + +msgid "Domain" +msgstr "Dominio" + +msgid "Add domain" +msgstr "Añadir dominio" + +msgid "Delete domain" +msgstr "Borrar dominio" + +#, fuzzy +#| msgid "Realm domains" +msgid "Modify realm domains." +msgstr "Dominios reino" + +msgid "Force adding domain even if not in DNS" +msgstr "Forzar el añadir un dominio aunque no esté en DNS" + +msgid "Display the list of realm domains." +msgstr "Muestra la lista de dominios reino." + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "Nombre de rol" + +msgid "A description of this role-group" +msgstr "Una descripción de este grupo de roles" + +msgid "Member users" +msgstr "Usuarios miembros" + +msgid "Member groups" +msgstr "Grupos de miembros" + +msgid "Privileges" +msgstr " Objeto de servicio." + +msgid "Member services" +msgstr "Servicios de miembros" + +msgid "Add a new role." +msgstr "Añadir un nuevo rol." + +msgid "Add members to a role." +msgstr "Añadir miembros a un rol." + +#, fuzzy +#| msgid "Member services" +msgid "member service" +msgstr "Servicios de miembros" + +#, fuzzy +#| msgid "services" +msgid "services to add" +msgstr "servicios" + +msgid "Add privileges to a role." +msgstr "Añadir privilegios a un rol." + +msgid "privilege" +msgstr "privilegio" + +msgid "privileges" +msgstr "privilegios" + +msgid "Number of privileges added" +msgstr "Número de privilegios agregados" + +msgid "Delete a role." +msgstr "Borrar un rol." + +msgid "Search for roles." +msgstr "Buscar roles." + +msgid "Modify a role." +msgstr "Modificar un rol." + +#, fuzzy +#| msgid "Rename the permission object" +msgid "Rename the role object" +msgstr "Renombrar el permiso del objeto" + +msgid "Remove members from a role." +msgstr "Borrar miembros de un rol." + +#, fuzzy +#| msgid "%s to remove" +msgid "services to remove" +msgstr "%s a eliminar" + +msgid "Remove privileges from a role." +msgstr "Borrar privilegios de un rol." + +msgid "Number of privileges removed" +msgstr "Número de privilegios eliminados" + +msgid "Display information about a role." +msgstr "Mostrar información sobre un rol." + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Permisos de Auto-Servicio\n" +"\n" +"Un permiso habilita una delegación de permisos de. Las Reglas de Control " +"Acceso, o instrucciones (ACIs), conceden permiso a los permisos para llevar " +"a cabo tareas\n" +"dadas como añadir un usuario, modificar un grupo, etc.\n" +"\n" +"Un permiso de Auto-Servicio define que un objeto puede cambiar en su propia " +"entrada.\n" +"\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir una regla de auto-servicio para permitir a los usuarios gestionar " +"su\n" +" dirección (usando una expresión Bash brace):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Los usuarios gestionan sus propias direcciones\"\n" +"\n" +" Cuando está gestionando la lista de atributos usted necesita incluir todos " +"los\n" +" atributos en la lista, incluyendo los existentes.\n" +" Añadir telephoneNumber a la lista (usando expansión Bash brace):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Los usuarios gestionan sus propias direcciones\"\n" +"\n" +" Mostrar nuestra regla actualizada:\n" +" ipa selfservice-show \"Los usuarios gestionan sus propias direcciones\"\n" +"\n" +" Borrar una regla:\n" +" ipa selfservice-del \"Los usuarios gestionan sus propias direcciones\"\n" + +msgid "Self-service name" +msgstr "Auto-servicio de nombres" + +msgid "Attributes to which the permission applies." +msgstr "Atributos a los que aplican los permisos." + +msgid "Add a new self-service permission." +msgstr "Añadir un nuevo auto servicio de permiso." + +msgid "Delete a self-service permission." +msgstr "Borrar un auto servicio de permiso." + +msgid "Search for a self-service permission." +msgstr "Buscar un auto servicio de permiso." + +msgid "Modify a self-service permission." +msgstr "Modificar un auto servicio de permiso." + +msgid "Display information about a self-service permission." +msgstr "Mostrar información sobre un auto servicio de permiso." + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" +"\n" +"Mapeo de Usuario SELinux\n" +"\n" +"Mapeo de usuarios IPA a usuarios SELinux por host.\n" +"\n" +"Hosts, grupos de hosts, usuarios y grupos pueden ser definidos bien dentro " +"de\n" +"una regla o pueden apuntar a una regla HBAC existente. Cuando se utiliza la\n" +"opción –hbacrule para selinuxusermap-find se hace una coincidencia exacta " +"con\n" +"el nombre de regla HBAC, de modo que solo se devolverán entradas uno o " +"cero.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Crear una regla, \"test1\", que ajuste a todos los usuarios a xguest_u:s0 " +"en el \"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Crear una regla, \"test2\", que fije todos los usuarios a guest_u:s0 y un " +"regla HBAC existente para los usuarios y hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Mostrar las propiedades de una regla:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Crear una regla para un usuario especifico. Esto ajusta el contexto SELinux " +"para el \n" +" usuario john a unconfined_u:s0-s0:c0.c1023 sobre cualquier máquina:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Deshabilita una regla:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Habilita una regla:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Encontrar una regla con referencia a un regla HBAC específica:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Borrar una regla:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"VEA TAMBIÉN:\n" +"\n" +" La lista controlando el orden en el cual se aplica el mapeo de usuario " +"SELinux\n" +" y el usuario SELinux predeterminado está disponible en el comando config-" +"show.\n" + +msgid "SELinux User" +msgstr "Usuario SELinux" + +msgid "HBAC Rule" +msgstr "REgla HBAC" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "Regla HBAC que define los usuarios, grupos y grupos de host" + +msgid "Create a new SELinux User Map." +msgstr "Crear un nuevo Mapa de Usuario SELinux." + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" +"Añadir hosts y grupos de host objetivo a una regla de Mapa de Usuario " +"SELinux." + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "Añadir usuarios y grupos a una regla de Mapa de Usuario SELinux." + +msgid "Delete a SELinux User Map." +msgstr "Borrar un Mapa de Usuario SELinux." + +msgid "Disable an SELinux User Map rule." +msgstr "Deshabilitar una regla de Mapa de Usuario SELinux." + +msgid "Enable an SELinux User Map rule." +msgstr "Habilitar una regla de Mapa de Usuario SELinux." + +msgid "Search for SELinux User Maps." +msgstr "Búsqueda de Mapas de Usuario SELinux." + +msgid "Modify a SELinux User Map." +msgstr "Modificar un Mapa de Usuario SELinux." + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" +"Borrar hosts y grupos de host objetivo de una regla de Mapa de Usuario " +"SELinux." + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." + +msgid "Display the properties of a SELinux User Map rule." +msgstr "Mostrar las propiedades de una regla de Mapa de Usuario SELinux." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Services\n" +#| "\n" +#| "A IPA service represents a service that runs on a host. The IPA service\n" +#| "record can store a Kerberos principal, an SSL certificate, or both.\n" +#| "\n" +#| "An IPA service can be managed directly from a machine, provided that\n" +#| "machine has been given the correct permission. This is true even for\n" +#| "machines other than the one the service is associated with. For example,\n" +#| "requesting an SSL certificate using the host service principal " +#| "credentials\n" +#| "of the host. To manage a service using host credentials you need to\n" +#| "kinit as the host:\n" +#| "\n" +#| " # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +#| "\n" +#| "Adding an IPA service allows the associated service to request an SSL\n" +#| "certificate or keytab, but this is performed as a separate step; they\n" +#| "are not produced as a result of adding the service.\n" +#| "\n" +#| "Only the public aspect of a certificate is stored in a service record;\n" +#| "the private key is not stored.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new IPA service:\n" +#| " ipa service-add HTTP/web.example.com\n" +#| "\n" +#| " Allow a host to manage an IPA service certificate:\n" +#| " ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +#| " ipa role-add-member --hosts=web.example.com certadmin\n" +#| "\n" +#| " Override a default list of supported PAC types for the service:\n" +#| " ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +#| "\n" +#| " A typical use case where overriding the PAC type is needed is NFS.\n" +#| " Currently the related code in the Linux kernel can only handle " +#| "Kerberos\n" +#| " tickets up to a maximal size. Since the PAC data can become quite " +#| "large it\n" +#| " is recommended to set --pac-type=NONE for NFS services.\n" +#| "\n" +#| " Delete an IPA service:\n" +#| " ipa service-del HTTP/web.example.com\n" +#| "\n" +#| " Find all IPA services associated with a host:\n" +#| " ipa service-find web.example.com\n" +#| "\n" +#| " Find all HTTP services:\n" +#| " ipa service-find HTTP\n" +#| "\n" +#| " Disable the service Kerberos key and SSL certificate:\n" +#| " ipa service-disable HTTP/web.example.com\n" +#| "\n" +#| " Request a certificate for an IPA service:\n" +#| " ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" +"\n" +"Servicios\n" +"\n" +"Un servicio IPA representa un servicio que corre en un host. El registro del " +"servicio \n" +"IPA puede almacenar un principal Kerberos, un certificado SSL o ambos.\n" +"\n" +"Un servicio IPA puede ser manejado directamente desde la maquina, siempre " +"que\n" +"la maquina haya recibido el permiso correcto. Esto es cierto aún en " +"maquinas\n" +"distintas a las que el servicio está asociado. Por ejemplo, solicitar un " +"certificado\n" +"SSL utilizando las credenciales principales del servicio de host del " +"anfitrión. Para\n" +"administrar un servicio utilizando las credenciales de host usted debe kinit " +"como\n" +"host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"Agregar un servicio IPA permite que el servicio asociado solicite un " +"certificado SSL\n" +"o tabla de claves, pero esto se realiza como un paso separado; no se " +"produce\n" +"como resultado de agregar el servicio.\n" +"\n" +"Solo se almacena en el registro del servicio el aspecto público del " +"certificado; la\n" +"clave privada no se almacena.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo servicio IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Permitir a un host gestionar un certificado de servicio IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Anular la lista predeterminada de tipos de PAC soportados para el " +"servicio:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +"Un caso de uso típico donde es necesario anular el tipo PAC es Nfs. " +"Actualmente\n" +"el código relacionado en el kernel Linux puede solo manejar tickets Kerberos " +"hasta\n" +"un tamaño máximo. Como los datos PAC pueden ser bastante largos se\n" +"recomienda establecer –pac-type=NONE para servicios NFS.\n" +"\n" +" Borrar un servicio IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Encontrar todos los servicios IPA asociados con un host:\n" +" ipa service-find web.example.com\n" +"\n" +" Encontrar todos los servicios HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Deshabilitar la clave de servicio Kerberos y el certificado SSL:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Pedir un certificado para un servicio IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" + +msgid "Principal" +msgstr "Principal" + +msgid "Service principal" +msgstr " Búsqueda de servicios IPA" + +msgid "PAC type" +msgstr "Tipo PAC" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" +"Anular la lista predeterminada de tipos de PAC soportados. Use 'NONE' para " +"deshabilitar el soporte PAC para este servicio, e.g. esto podría ser " +"necesario para servicios NFS." + +msgid "Add a new IPA new service." +msgstr "Añadir un nuevo servicio nuevo IPA." + +msgid "force principal name even if not in DNS" +msgstr "fuerza el nombre del prinicpal, aún si no se encuentra en DNS" + +msgid "Add hosts that can manage this service." +msgstr "Añadir hosts que pueden gestionar este servicio." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" +"Permitir a los usuarios, grupos, hosts o grupos de host crear una tabla de " +"claves de este servicio." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Permitir a los usuarios, grupos, hosts o grupos de host recuperar una tabla " +"de claves de este servicio." + +msgid "Delete an IPA service." +msgstr "Borrar un servicio IPA." + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Deshabilitar la clave Kerberos y el certificado SSL de un servicio." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" +"Dejar de permitir a los usuarios, grupos, hosts o grupos de host crear una " +"tabla de claves de este servicio." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Dejar de permitir a los usuarios, grupos, hosts o grupos de host recuperar " +"una tabla de claves de este servicio." + +msgid "Search for IPA services." +msgstr "Buscar servicios IPA." + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" +"Los resultados deberían contener solo atributos de clave primaria " +"(\"principal\")" + +msgid "Search for services with these managed by hosts." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +msgid "Search for services without these managed by hosts." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "Modify an existing IPA service." +msgstr "Modificar un servicio IPA existente." + +msgid "Remove hosts that can manage this service." +msgstr "Borrar hosts que puedan gestionar este servicio." + +msgid "Display information about an IPA service." +msgstr "Mostrar información sobre un servicio IPA." + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Sudo Commands\n" +#| "\n" +#| "Commands used as building blocks for sudo\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Create a new command\n" +#| " ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +#| "\n" +#| " Remove a command\n" +#| " ipa sudocmd-del /usr/bin/less\n" +#| "\n" +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" +"\n" +"Comandos de Sudo\n" +"\n" +"Comandos usados como partes integrantes de sudo\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Crear un comando nuevo\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Eliminar un comando\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" + +msgid "Sudo Command" +msgstr "Comando sudo " + +msgid "A description of this command" +msgstr "Una descripción de este comando " + +msgid "Sudo Command Groups" +msgstr "Grupos de comando sudo" + +msgid "Create new Sudo Command." +msgstr "Crear un nuevo Comando Sudo." + +msgid "Delete Sudo Command." +msgstr "Borrar Comando Sudo." + +msgid "Search for Sudo Commands." +msgstr "Buscar Comandos Sudo." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +msgid "Modify Sudo Command." +msgstr "Modificar Comando Sudo." + +msgid "Display Sudo Command." +msgstr "Mostrar Comando Sudo." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of Sudo Commands\n" +#| "\n" +#| "Manage groups of Sudo Commands.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new Sudo Command Group:\n" +#| " ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +#| "\n" +#| " Remove a Sudo Command Group:\n" +#| " ipa sudocmdgroup-del admincmds\n" +#| "\n" +#| " Manage Sudo Command Group membership, commands:\n" +#| " ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +#| "admincmds\n" +#| "\n" +#| " Manage Sudo Command Group membership, commands:\n" +#| " ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +#| "\n" +#| " Show a Sudo Command Group:\n" +#| " ipa group-show localadmins\n" +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" +"\n" +"Grupos de Comandos Sudo\n" +"\n" +"Gestionar grupos de Comandos Sudo.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo Grupo de Comandos Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Borrar un Grupo de Comando Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Mostrat un Grupo de Comando Sudo:\n" +" ipa group-show localadmins\n" + +msgid "Sudo Command Group" +msgstr "Grupo de comando sudo" + +msgid "Group description" +msgstr "Descripción del grupo" + +msgid "Commands" +msgstr "Comandos" + +msgid "Member Sudo commands" +msgstr "Comandos Miembro Sudo" + +msgid "Create new Sudo Command Group." +msgstr "Crear un nuevo Grupo de Comando Sudo." + +msgid "Add members to Sudo Command Group." +msgstr "Añadir miembros a Grupo de Comando Sudo." + +msgid "member sudo command" +msgstr "miembro de comando sudo" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo commands to add" +msgstr "comandos sudo" + +msgid "Delete Sudo Command Group." +msgstr "Borrado Grupo de Comando Sudo." + +msgid "Search for Sudo Command Groups." +msgstr "Buscar Grupos de Comando Sudo." + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" +"Los resultados deberían contener solo atributo de clave primaria " +"(\"sudocmdgroup-name\")" + +msgid "Modify Sudo Command Group." +msgstr "Modificar Grupo de Comando Sudo." + +msgid "Remove members from Sudo Command Group." +msgstr "Quitar miembros de un Grupo de Comando Sudo." + +#, fuzzy +#| msgid "sudo command group" +msgid "sudo commands to remove" +msgstr "grupo de comando sudo" + +msgid "Display Sudo Command Group." +msgstr "Mostrar Grupo de Comando Sudo." + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" +"\n" +"Usuarios\n" +"\n" +"Gestiona entradas de usuario. Todos los usuarios son usuarios POXIS.\n" +"\n" +"IPA soporta un amplio rango de formatos de nombre de usuario, pero usted " +"debe estar atento a cualquier restricción que se pueda aplicar a su entorno " +"concreto. Por ejemplo, nombres de usuario que empiezan con un dígito o " +"nombres de usuario que superan cierta longitud pueden causar problemas en " +"algunos sistemas UNIX.\n" +"Use 'ipa config-mod' para cambiar el nombre de usuario permitido por las " +"herramientas IPA.\n" +"\n" +"Deshabilitando una cuenta de usuario evita que el usuario obtenga nuevas\n" +"credenciales Kerberos. Esto no invalida cualquier credencial que ya hay " +"sido\n" +"enviada.\n" +"\n" +"La gestión de contraseña no es parte de este módulo. Para más información " +"sobre \n" +"este punto vea por favor: ipa help passwd\n" +"\n" +"El cierre de una cuenta ante un fallo de contraseña sucede por el master " +"IPA. El\n" +"comando user-status se puede usar para identificar en que master está " +"bloqueado\n" +"el usuario. Y sobre ese master debe el administrador desbloquear al " +"usuario.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo usuario:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Encontrar todos los usuarios cuyas entradas incluyen la cadena \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Encontrar todos los usuarios con “Tim” como primer nombre:\n" +" ipa user-find --first=Tim\n" +"\n" +" Deshabilitar una cuenta de usuario:\n" +" ipa user-disable tuser1\n" +"\n" +" Habilitar una cuenta de usuario\n" +" ipa user-enable tuser1\n" +"\n" +" Borrar un usuario:\n" +" ipa user-del tuser1\n" + +msgid "First name" +msgstr "Nombre" + +msgid "Last name" +msgstr "Apellido" + +msgid "Full name" +msgstr "Nombre y apellidos" + +msgid "Display name" +msgstr "Mostrar nombre" + +msgid "Initials" +msgstr "Iniciales" + +msgid "Kerberos principal" +msgstr "Principal kerberos" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Kerberos principal expiration" +msgstr "Principal kerberos" + +msgid "Email address" +msgstr "Dirección de correo electrónico" + +msgid "Prompt to set the user password" +msgstr "Solicita establecer la contraseña de usuario" + +#, fuzzy +#| msgid "Set a user's password." +msgid "Generate a random user password" +msgstr "Fijar una contraseña de usuario." + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Número de ID de usuario (el sistema le asignará uno si no se indica ninguno)" + +msgid "Street address" +msgstr "Dirección postal" + +msgid "City" +msgstr "Ciudad" + +msgid "State/Province" +msgstr "Estado / Provincia" + +msgid "ZIP" +msgstr "Zona " + +msgid "Telephone Number" +msgstr "Número de teléfono" + +msgid "Mobile Telephone Number" +msgstr "Número de teléfono celular" + +msgid "Pager Number" +msgstr "Número de página" + +msgid "Fax Number" +msgstr "Número de fx" + +msgid "Org. Unit" +msgstr "Unidad. org" + +msgid "Job Title" +msgstr "Cargo" + +msgid "Manager" +msgstr "Manager" + +msgid "Car License" +msgstr "Licencia de conducción" + +msgid "Account disabled" +msgstr "Cuenta inhabilitada " + +#, fuzzy +#| msgid "Last failed authentication" +msgid "User authentication types" +msgstr "Última autenticación fallada" + +#, fuzzy +#| msgid "The number of times to retry authentication" +msgid "Types of supported user authentication" +msgstr "El número de veces para reintentar la autenticación" + +#, fuzzy +#| msgid "" +#| "Host category (semantics placed on this attribute are for local " +#| "interpretation)" +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Categoría de host (las semánticas situadas en este atributo son para " +"interpretación local)" + +#, fuzzy +#| msgid "" +#| "\n" +#| "DNS server configuration\n" +msgid "RADIUS proxy configuration" +msgstr "" +"\n" +"Configuración del servidor DNS\n" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS proxy username" +msgstr "Nombre del servidor proxy RADIUS" + +#, fuzzy +#| msgid "Pager Number" +msgid "Department Number" +msgstr "Número de página" + +#, fuzzy +#| msgid "Telephone Number" +msgid "Employee Number" +msgstr "Número de teléfono" + +msgid "Employee Type" +msgstr "" + +#, fuzzy +#| msgid "Preference" +msgid "Preferred Language" +msgstr "Preferencia" + +msgid "Member of groups" +msgstr "Miembros de los grupos" + +#, fuzzy +#| msgid "Indirect Member groups" +msgid "Indirect Member of group" +msgstr "Grupos de miembros indirectos" + +msgid "Kerberos keys available" +msgstr "Claves Kerberos disponibles" + +msgid "Add a new user." +msgstr "Añadir un nuevo usuario." + +msgid "Don't create user private group" +msgstr "No crear grupo privado de usuario" + +msgid "Delete a user." +msgstr "Borrar un usuario." + +msgid "Disable a user account." +msgstr "Deshabilitar una cuenta de usuario." + +msgid "Enable a user account." +msgstr "Habilitar una cuenta de usuario." + +msgid "Search for users." +msgstr "Buscar usuarios." + +msgid "Self" +msgstr "Self" + +msgid "Display user record for current Kerberos principal" +msgstr "Muestra el registro del usuario para el principal de Kerberos actual" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for users with these member of groups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for users without these member of groups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for users with these member of netgroups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for users without these member of netgroups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for users with these member of roles." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for users without these member of roles." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for users with these member of HBAC rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for users without these member of HBAC rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for users with these member of sudo rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for users without these member of sudo rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "Modify a user." +msgstr "Modificar un usuario." + +#, fuzzy +#| msgid "Rename the permission object" +msgid "Rename the user object" +msgstr "Renombrar el permiso del objeto" + +msgid "Display information about a user." +msgstr "Mostrar información sobre un usuario." + +#, fuzzy +#| msgid "" +#| "\n" +#| " Lockout status of a user account\n" +#| "\n" +#| " An account may become locked if the password is entered incorrectly " +#| "too\n" +#| " many times within a specific time period as controlled by password\n" +#| " policy. A locked account is a temporary condition and may be unlocked " +#| "by\n" +#| " an administrator.\n" +#| "\n" +#| " This connects to each IPA master and displays the lockout status on\n" +#| " each one.\n" +#| "\n" +#| " To determine whether an account is locked on a given server you need\n" +#| " to compare the number of failed logins and the time of the last " +#| "failure.\n" +#| " For an account to be locked it must exceed the maxfail failures " +#| "within\n" +#| " the failinterval duration as specified in the password policy " +#| "associated\n" +#| " with the user.\n" +#| "\n" +#| " The failed login counter is modified only when a user attempts a log " +#| "in\n" +#| " so it is possible that an account may appear locked but the last " +#| "failed\n" +#| " login attempt is older than the lockouttime of the password policy. " +#| "This\n" +#| " means that the user may attempt a login again. " +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" +"\n" +" Estado de bloqueo de una cuenta de usuario\n" +"\n" +" Una cuenta de usuario puede resultar bloqueada si la contraseña se " +"introduce\n" +" incorrectamente muchas veces dentro de un período especifico de tiempo\n" +" controlado por la política de contraseña. Un bloqueo de cuenta es una " +"condición\n" +" temporal y debe ser desbloqueada por un administrador.\n" +"\n" +" Esto conecta con el máster IPA y muestra el estado de bloqueo de cada " +"uno.\n" +"\n" +" Para determinar si una cuenta está bloqueada en un servidor dado usted\n" +" necesita comparar el número de accesos fallido y la hora del último " +"fallo. Para\n" +" que una cuenta se bloquee debe exceder maxfail dentro de la duración\n" +" failinterval según se especifique en la política de contraseña asociada " +"con el\n" +" usuario.\n" +"\n" +" El contador de acceso fallado se modifica solo cuando un usuario intenta " +"acceder\n" +" por lo que es posible que una cuenta puede aparecer bloqueada pero el " +"último\n" +" acceso fallado sea más antiguo que el lockouttime de la política de " +"contraseña.\n" +" Esto significa que el usuario puede intentar acceder otra vez." + +#, fuzzy +#| msgid "" +#| "\n" +#| " Unlock a user account\n" +#| "\n" +#| " An account may become locked if the password is entered incorrectly " +#| "too\n" +#| " many times within a specific time period as controlled by password\n" +#| " policy. A locked account is a temporary condition and may be unlocked " +#| "by\n" +#| " an administrator." +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" +"\n" +"Desbloquear una cuenta de usuario\n" +"\n" +" Una cuenta de usuario puede llegar a bloquearse si la contraseña se ha " +"introducido incorrectamente demasiadas\n" +"veces dentro de un período de tiempo controlado por la política de\n" +"contraseña. Una cuenta bloqueada es una condición temporal y puede ser " +"desbloqueada por\n" +"un administrador." + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "Una descripción de esta regla auto miembro" + +#, fuzzy +#| msgid "Default users group" +msgid "Default (fallback) Group" +msgstr "Grupo de usuarios predeterminado" + +#, fuzzy +#| msgid "Default group for new users not found" +msgid "Default group for entries to land" +msgstr "Grupo predeterminado para nuevos usuarios no encontrado" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add an automember rule.\n" +#| " " +msgid "Add an automember rule." +msgstr "" +"\n" +" Añadir una regla automiembro.\n" +" " + +msgid "Automember Rule" +msgstr "Regla Automiembro" + +msgid "Grouping Type" +msgstr "Tipo de Agrupamiento" + +msgid "Grouping to which the rule applies" +msgstr "Agrupamiento al cual se aplican las reglas" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add conditions to an automember rule.\n" +#| " " +msgid "Add conditions to an automember rule." +msgstr "" +"\n" +" Añadir condiciones a una regla automiembro.\n" +" " + +msgid "Inclusive Regex" +msgstr "Regex inclusivo" + +msgid "Exclusive Regex" +msgstr "Regex exclusivo" + +msgid "Attribute Key" +msgstr "Atributo Clave" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Atributo a filtrar por medio de regex. Por ejemplo fqdn para un host o " +"gestor para un usuario" + +msgid "Conditions that could not be added" +msgstr "Condiciones que no pueden ser agregadas" + +msgid "Number of conditions added" +msgstr "Número de condiciones agregadas" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +#, fuzzy +#| msgid "Default group for new users not found" +msgid "Default (fallback) group for entries to land" +msgstr "Grupo predeterminado para nuevos usuarios no encontrado" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about the default (fallback) automember groups." +msgstr "Mostrar información sobre un grupo denominado." + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete an automember rule.\n" +#| " " +msgid "Delete an automember rule." +msgstr "" +"\n" +" Borra una regla automiembro.\n" +" " + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for automember rules.\n" +#| " " +msgid "Search for automember rules." +msgstr "" +"\n" +" Búsqueda reglas automiembro.\n" +" " + +#, fuzzy +#| msgid "" +#| "\n" +#| " Modify an automember rule.\n" +#| " " +msgid "Modify an automember rule." +msgstr "" +"\n" +" Modificar una regla automiembro.\n" +" " + +#, fuzzy +#| msgid "Rebuild auto membership" +msgid "Rebuild auto membership." +msgstr "Reconstruir auto membresía" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to rebuild auto membership?" +msgid "Don't wait for rebuilding membership" +msgstr "¿Está seguro de que quiere reconstruir la auto membresía?" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Remove conditions from an automember rule.\n" +#| " " +msgid "Remove conditions from an automember rule." +msgstr "" +"\n" +" Borrar condiciones de una regla automiembro.\n" +" " + +msgid "Conditions that could not be removed" +msgstr "Condiciones que no pueden ser eliminadas" + +msgid "Number of conditions removed" +msgstr "Número de condiciones eliminadas" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "Display information about an automember rule." +msgstr "" +"\n" +" Muestra información sobre una regla automiembro.\n" +" " + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +#, fuzzy +#| msgid "Checks if any of the servers has the DNS service enabled." +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" +"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "Search for existing certificates." +msgstr "Recuperar un certificado existente." + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "Match cn attribute in subject" +msgstr "El atributo username sobre el objeto usuario" + +msgid "Reason" +msgstr "Motivo" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Motivo por el cual el certificado ha sido revocado (0-10)" + +#, fuzzy +#| msgid "Serial number" +msgid "minimum serial number" +msgstr "Número de serie" + +#, fuzzy +#| msgid "Serial number" +msgid "maximum serial number" +msgstr "Número de serie" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of certs returned" +msgstr "Cantidad máxima de entradas obtenidas" + +msgid "Take a revoked certificate off hold." +msgstr "Tomar un certificado revocado de espera." + +msgid "Serial number" +msgstr "Número de serie" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "Número de serie en decimales, o hexadecimales, si tiene un prefijo 0x" + +msgid "Submit a certificate signing request." +msgstr "Enviar una petición de firma de certificado." + +msgid "CSR" +msgstr "CSR" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Principal del servicio para este certificado (p.ej. HTTP/prueba.ejemplo.com)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "si no existe, agregar automáticamente el principal" + +msgid "Revoke a certificate." +msgstr "Revocar un certificado." + +msgid "Retrieve an existing certificate." +msgstr "Recuperar un certificado existente." + +msgid "Output filename" +msgstr "Nombre de archivo de salida" + +msgid "File to store the certificate in." +msgstr "Archivo para almacenar el certificado" + +msgid "Check the status of a certificate signing request." +msgstr "Verificar el estado de una solicitud de firma de certificado." + +msgid "Request id" +msgstr "Id de la petición" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "GID (utilice esta opción para definirlo manualmente)" + +msgid "Indirect Member users" +msgstr "Usuarios indirectos miembros" + +msgid "Indirect Member groups" +msgstr "Grupos de miembros indirectos" + +msgid "Create a new group." +msgstr "Crear un grupo nuevo." + +msgid "Create as a non-POSIX group" +msgstr " Crear como un grupo no POSIX" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" +"Permitir el añadido de miembros externos no IPA desde dominios de confianza" + +msgid "Add members to a group." +msgstr "Agregar miembro a un grupo." + +msgid "External member" +msgstr "Miembro externo" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "Miembros de un dominio de confianza en formato DOM\\name o name@domain" + +msgid "Delete group." +msgstr "Eliminar grupo." + +msgid "Detach a managed group from a user." +msgstr "Desenganchar un grupo gestionado desde un usuario." + +msgid "Search for groups." +msgstr "Buscar grupos." + +msgid "search for private groups" +msgstr "Búsqueda de grupos privados" + +msgid "search for POSIX groups" +msgstr "buscar por grupos POXIS" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" +"búsqueda de grupos con soporte de miembros externos no IPA desde dominios de " +"confianza" + +msgid "search for non-POSIX groups" +msgstr "búsqueda de grupos no POSIX" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for groups with these member users." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for groups without these member users." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for groups with these member groups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for groups without these member groups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for groups with these member of groups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for groups without these member of groups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for groups with these member of netgroups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for groups without these member of netgroups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for groups with these member of roles." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for groups without these member of roles." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for groups with these member of HBAC rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for groups without these member of HBAC rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for groups with these member of sudo rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for groups without these member of sudo rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "Modify a group." +msgstr "Modificar un grupo." + +msgid "change to a POSIX group" +msgstr "Cambiar a un grupo POSIX" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" +"cambio para soportar miembros externos no IPA desde dominios de confianza" + +#, fuzzy +#| msgid "Rename the permission object" +msgid "Rename the group object" +msgstr "Renombrar el permiso del objeto" + +msgid "Remove members from a group." +msgstr "Eliminar miembro desde un grupo." + +msgid "Display information about a named group." +msgstr "Mostrar información sobre un grupo denominado." + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "Simular el uso de controles de acceso basados en Host" + +msgid "Target host" +msgstr "Host objetivo" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "Reglas para probar. Si no se especifica, - se asume que habilitado" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" +"Esconder detalles de que reglas coinciden, no coinciden o son no válidas" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "Incluir todas las reglas IPA habilitadas en la prueba [por defecto]" + +msgid "Include all disabled IPA rules into test" +msgstr "Incluir todas las reglas IPA deshabilitadas en la prueba" + +#, fuzzy +#| msgid "Maximum number of records to search (-1 is unlimited)" +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "Máximo número de registros a buscar (-1 es ilimitado)" + +msgid "Warning" +msgstr "Aviso" + +msgid "Matched rules" +msgstr "Reglas coincidentes" + +msgid "Not matched rules" +msgstr "Reglas no coincidentes" + +msgid "Non-existent or invalid rules" +msgstr "Reglas no existentes o no válidas" + +msgid "Result of simulation" +msgstr "Resultado de la simulación" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Cross-realm trusts\n" +#| "\n" +#| "Manage trust relationship between IPA and Active Directory domains.\n" +#| "\n" +#| "In order to allow users from a remote domain to access resources in IPA " +#| "domain,\n" +#| "trust relationship needs to be established. Currently IPA supports only " +#| "trusts\n" +#| "between IPA and Active Directory domains under control of Windows Server " +#| "2008\n" +#| "or later, with functional level 2008 or later.\n" +#| "\n" +#| "Please note that DNS on both IPA and Active Directory domain sides should " +#| "be\n" +#| "configured properly to discover each other. Trust relationship relies on\n" +#| "ability to discover special resources in the other domain via DNS " +#| "records.\n" +#| "\n" +#| "Examples:\n" +#| "\n" +#| "1. Establish cross-realm trust with Active Directory using AD " +#| "administrator\n" +#| " credentials:\n" +#| "\n" +#| " ipa trust-add --type=ad --admin --password\n" +#| "\n" +#| "2. List all existing trust relationships:\n" +#| "\n" +#| " ipa trust-find\n" +#| "\n" +#| "3. Show details of the specific trust relationship:\n" +#| "\n" +#| " ipa trust-show \n" +#| "\n" +#| "4. Delete existing trust relationship:\n" +#| "\n" +#| " ipa trust-del \n" +#| "\n" +#| "Once trust relationship is established, remote users will need to be " +#| "mapped\n" +#| "to local POSIX groups in order to actually use IPA resources. The " +#| "mapping\n" +#| "should be done via use of external membership of non-POSIX group and " +#| "then\n" +#| "this group should be included into one of local POSIX groups.\n" +#| "\n" +#| "Example:\n" +#| "\n" +#| "1. Create group for the trusted domain admins' mapping and their local " +#| "POSIX\n" +#| "group:\n" +#| "\n" +#| " ipa group-add --desc=' admins external map' " +#| "ad_admins_external --external\n" +#| " ipa group-add --desc=' admins' ad_admins\n" +#| "\n" +#| "2. Add security identifier of Domain Admins of the to the\n" +#| " ad_admins_external group:\n" +#| "\n" +#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#| "Admins'\n" +#| "\n" +#| "3. Allow members of ad_admins_external group to be associated with\n" +#| " ad_admins POSIX group:\n" +#| "\n" +#| " ipa group-add-member ad_admins --groups ad_admins_external\n" +#| "\n" +#| "4. List members of external members of ad_admins_external group to see\n" +#| " their SIDs:\n" +#| "\n" +#| " ipa group-show ad_admins_external\n" +#| "\n" +#| "\n" +#| "GLOBAL TRUST CONFIGURATION\n" +#| "\n" +#| "When IPA AD trust subpackage is installed and ipa-adtrust-install is run, " +#| "a\n" +#| "local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +#| "identifiers are then used when communicating with a trusted domain of " +#| "the\n" +#| "particular type.\n" +#| "\n" +#| "1. Show global trust configuration for Active Directory type of trusts:\n" +#| "\n" +#| " ipa trustconfig-show --type ad\n" +#| "\n" +#| "2. Modify global configuration for all trusts of Active Directory type " +#| "and set\n" +#| " a different fallback primary group (fallback primary group GID is used " +#| "as a\n" +#| " primary user GID if user authenticating to IPA domain does not have " +#| "any\n" +#| " other primary GID already set):\n" +#| "\n" +#| " ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " +#| "group\"\n" +#| "\n" +#| "3. Change primary fallback group back to default hidden group (any group " +#| "with\n" +#| " posixGroup object class is allowed):\n" +#| "\n" +#| " ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +#| "Group\"\n" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Confianza de reino cruzado\n" +"\n" +"Gestionar relaciones de confianza entre los dominios IPA y Active " +"Directory.\n" +"\n" +"Con el objetivo de permitir a los usuarios de un dominio remoto acceder a " +"los\n" +"recursos en el dominio IPA, se necesita establecer relaciones de confianza.\n" +"Actualmente IPA soporta solo confianza entre dominios IPA y Active Directory " +"bajo \n" +"el control de Windows Server 2008 o posterior, con nivel funcional 2008 o " +"posterior.\n" +"\n" +"Por favor advierta que el DNS en ambos lados de los dominios IPA y Active\n" +"Directory deberían ser configurados apropiadamente para descubrir a cada " +"uno.\n" +"Las relaciones de confianza se apoyan en la capacidad de descubrir recursos " +"especiales en el otro dominio por medio de los registros DNS.\n" +"\n" +"Ejemplos:\n" +"\n" +"1. Establecer confianza de reino cruzado con Active Directory usando el \n" +" dministrador de credenciales AD:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. Listar todas las relaciones de confianza existentes:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Mostrar detalles de la relación de confianza específica:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Borrar relaciones de confianza existentes:\n" +"\n" +" ipa trust-del \n" +"\n" +"Una vez que la relación de confianza está establecida, los usuarios remotos\n" +"necesitarán ser mapeados a grupos POSIX locales con el objetivo de usar " +"recursos\n" +"IPA. El mapeado debería ser hecho por medio del uso de la membresía externa " +"de\n" +"grupo no-POSIX y después este grupo debería ser incluido en uno de los " +"grupos locales POSIX.\n" +"\n" +"Ejemplo:\n" +"\n" +"1. Crear un grupo para el mapeo de administrador de dominio de confianza y " +"su\n" +"grupo POSIX local:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Añadir identificador de seguridad de Domain Admins del al " +"grupo\n" +" ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Permitir a los miembros del grupo admins_external ser asociados con el " +"grupo\n" +" POSIX ad-admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lista de miembros de miembros externos del grupo ad_admins_external para " +"ver\n" +" sus SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"CONFIGURACIÓN GLOBAL DE CONFIANZA\n" +"\n" +"Cuando se instale un subpaquete de confianza IPA AD y está corriendo ipa-" +"adtrust-\n" +"install, se genera una configuración de dominio local (SID, GUID, nombre\n" +"NetBIOS). Estos identificadores se usan entonces cuando se comunica con un\n" +"dominio de confianza de un tipo concreto.\n" +"\n" +"1. Mostrar la configuración de confianza global para el tipo de confianza " +"Active Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modificar la configuración global de todos los confiados de tipo Active " +"Directory y\n" +" establecer un grupo primario de retroceso (el GID del grupo primario de " +"retroceso\n" +" se usa como GID de usuario primario y el usuario autenticando al dominio " +"IPA no\n" +" tiene ningún otro GID primario establecido ya):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Cambiar el grupo primario de retroceso al grupo escondido predeterminado\n" +" (cualquier grupo con un objeto clae posixGroup está permitido):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +msgid "Domain NetBIOS name" +msgstr "Nombre de dominio NetBIOS" + +msgid "Domain Security Identifier" +msgstr "Identificador de Seguridad de Dominio" + +msgid "SID blacklist incoming" +msgstr "Lista negra de SID entrante" + +msgid "SID blacklist outgoing" +msgstr "Lista negra de SID saliente" + +msgid "Security Identifier" +msgstr "Identificador de Seguridad" + +msgid "NetBIOS name" +msgstr "Nombre de NetBIOS" + +msgid "Domain GUID" +msgstr "GUID de Dominio" + +msgid "Fallback primary group" +msgstr "Grupo primario de respaldo" + +msgid "Domain name" +msgstr "Nombre de dominio" + +#, fuzzy +#| msgid "Trusted domain" +msgid "Trusted domain partner" +msgstr "Dominio de confianza" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" +"Determina si ipa-adtrust-install ha estado corriendo sobre este sistema" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" +"Determina si el plugin Schema Compatibility está configurado para servir a " +"los usuarios y grupos de los dominios de confianza" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "Determina si ipa-adtrust-install ha estado corriendo con tarea sidgen" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Add new trust to use.\n" +#| "\n" +#| "This command establishes trust relationship to another domain\n" +#| "which becomes 'trusted'. As result, users of the trusted domain\n" +#| "may access resources of this domain.\n" +#| "\n" +#| "Only trusts to Active Directory domains are supported right now.\n" +#| "\n" +#| "The command can be safely run multiple times against the same domain,\n" +#| "this will cause change to trust relationship credentials on both\n" +#| "sides.\n" +#| "\n" +#| "Note that if the command was previously run with a specific range type,\n" +#| "or with automatic detection of the range type, and you want to configure " +#| "a\n" +#| "different range type, you may need to delete first the ID range using\n" +#| "ipa idrange-del before retrying the command with the desired range type.\n" +#| " " +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" +"\n" +"Añadir nueva confianza a usar.\n" +"\n" +"Este comando establece la relación de confianza con otro dominio que llegar " +"a ser \n" +"trusted'. Como resultado, los usuarios del dominio de confianza puede " +"acceder a\n" +"los recursos de este dominio.\n" +"\n" +"Solo están soportados ahora la confianza con dominios Active Directory.\n" +"\n" +"El comando se puede ejecutar seguramente múltiples veces contra el mismo\n" +"dominio, esto causará cambios en las credenciales de relaciones de confianza " +"en\n" +"ambos lados.\n" +"\n" +"Advierta que si el comando se ejecuta previamente con un tipo de rango " +"específico\n" +"o con detección automática del tipo de rango y usted desea configurar un " +"tipo de\n" +"rango diferente, usted puede necesitar borrar primero la ID del rango " +"usando \n" +"ipa idrange-del antes de reintentar el comando con el rango deseado.\n" +" " + +msgid "Trust type (ad for Active Directory, default)" +msgstr "Tipo de confianza (ad para Active Directory, predeterminado)" + +msgid "Active Directory domain administrator" +msgstr "Administrador de dominio Active Directory" + +msgid "Active Directory domain administrator's password" +msgstr "Contraseña del administrador de dominio Active Directory" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "Controlador de dominio para el dominio Active Directory opcional)" + +msgid "Shared secret for the trust" +msgstr "Secreto compartido para la confianza" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "Primera ID Posix ID del rango reservado para los dominios de confianza" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "Tamaña del rango de ID reservado para los dominios de confianza" + +msgid "Range type" +msgstr "Tipo de intervalo" + +#, fuzzy +#| msgid "Type of trusted domain ID range, one of allowed values" +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" +"Tipo de rango de ID de dominios de confianza, uno de los valores permitidos" + +msgid "Delete a trust." +msgstr "Borrar una confianza." + +msgid "Refresh list of the domains associated with the trust" +msgstr "Refrescar la lista de dominios asociados con la confianza" + +msgid "Search for trusts." +msgstr "Búsqueda de confianzas." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Modify a trust (for future use).\n" +#| "\n" +#| " Currently only the default option to modify the LDAP attributes is\n" +#| " available. More specific options will be added in coming releases.\n" +#| " " +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Modificar una confianza (para uso futuro).\n" +"\n" +" Actualmente solo está disponible la opción predeterminada para modificar " +"los\n" +" atributos LDAP. Opciones más especificas serán añadidas en futuras " +"versiones.\n" +" " + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" +"Resolver los identificadores de seguridad de los usuario y grupos en los " +"dominios de confianza" + +msgid "Security Identifiers (SIDs)" +msgstr "Identificadores de Seguridad (SIDs)" + +msgid "Display information about a trust." +msgstr "Mostrar información sobre una confianza." + +msgid "Modify global trust configuration." +msgstr "Modificar la configuración global de confianza." + +msgid "Show global trust configuration." +msgstr "Mostrar la configuración de confianza global." + +msgid "Allow access from the trusted domain" +msgstr "Permitir acceso desde el dominio de confianza" + +msgid "Remove information about the domain associated with the trust." +msgstr "Borrar información sobre el dominio asociado con la confianza." + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "Deshabilitar el uso de recursos IPA por el dominio de la confianza" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "Permitir el uso de recursos IPA por el dominio de la confianza" + +msgid "Search domains of the trust" +msgstr "Buscar dominios de confianza" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +msgid "Modify trustdomain of the trust" +msgstr "Modificar trustdomain de la confianza" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "Nombre del intervalo" + +msgid "First Posix ID of the range" +msgstr "Primer Posix ID del rango" + +msgid "Number of IDs in the range" +msgstr "Número de IDs en el rango" + +msgid "First RID of the corresponding RID range" +msgstr "Primer RID del correspondiente rango RID" + +msgid "First RID of the secondary RID range" +msgstr "Primer RID del rango RID secundario" + +msgid "Domain SID of the trusted domain" +msgstr "SID de dominio del dominio de confianza" + +msgid "Name of the trusted domain" +msgstr "Nombre del dominio de confianza" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Add new ID range.\n" +#| "\n" +#| " To add a new ID range you always have to specify\n" +#| "\n" +#| " --base-id\n" +#| " --range-size\n" +#| "\n" +#| " Additionally\n" +#| "\n" +#| " --rid-base\n" +#| " --secondary-rid-base\n" +#| "\n" +#| " may be given for a new ID range for the local domain while\n" +#| "\n" +#| " --rid-bas\n" +#| " --dom-sid\n" +#| "\n" +#| " must be given to add a new range for a trusted AD domain.\n" +#| "\n" +#| " WARNING:\n" +#| "\n" +#| " DNA plugin in 389-ds will allocate IDs based on the ranges configured " +#| "for the\n" +#| " local domain. Currently the DNA plugin *cannot* be reconfigured " +#| "itself based\n" +#| " on the local ranges set via this family of commands.\n" +#| "\n" +#| " Manual configuration change has to be done in the DNA plugin " +#| "configuration for\n" +#| " the new local range. Specifically, The dnaNextRange attribute of " +#| "'cn=Posix\n" +#| " IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +#| "has to be\n" +#| " modified to match the new range.\n" +#| " " +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +"Añadir un nuevo rango de ID.\n" +"\n" +" Para añadir un nuevo rango de ID siempre debe especificar\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Adicionalmente\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" puede ser dado para un nuevo rango de ID para el dominio local mientras\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" deben ser dados para añadir un nuevo rango para un AD de dominio de " +"confianza.\n" +"\n" +" PRECAUCIÓN:\n" +"\n" +" El plugin DNA en 389-ds ubicará IDs en base a los rangos configurados " +"para el dominio\n" +" local. Actualmente el plugin DNA \"no puede\" ser reconfigurado por si " +"mismo en base a\n" +" los rangos locales ajustados por medio de esta familia de comandos.\n" +"\n" +" El cambio manual de configuración ha sido hecho en la configuración del " +"plugin DNA\n" +" para el nuevo rango local. Específicamente, el atributo dnaNextRange de " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' ha " +"sido\n" +" modificado para coincidir con el nuevo rango.\n" +" " + +msgid "Delete an ID range." +msgstr "Eliminar un intervalo de ID." + +msgid "Search for ranges." +msgstr "Buscar intervalos." + +msgid "Modify ID range." +msgstr "Modificar rango de ID." + +msgid "Display information about a range." +msgstr "Mostrar información sobre un rango." + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "ID única" + +msgid "Type of the token" +msgstr "Tipo de ficha" + +msgid "Token description (informational only)" +msgstr "Descripción de la ficha (solo informativo)" + +msgid "Owner" +msgstr "Propietario" + +msgid "Assigned user of the token (default: self)" +msgstr "Usuario asignado de la ficha (predeterminado: self)" + +msgid "Assigned manager of the token (default: self)" +msgstr "Gestor asignado de la ficha (predeterminado: self)" + +msgid "Disabled" +msgstr "Desactivado" + +msgid "Mark the token as disabled (default: false)" +msgstr "Marcar la ficha como deshabilitada (predeterminado: false)" + +msgid "Validity start" +msgstr "Validar inicio" + +msgid "First date/time the token can be used" +msgstr "Primera fecha/hora en que puede usar la ficha" + +msgid "Validity end" +msgstr "Validar final" + +msgid "Last date/time the token can be used" +msgstr "Último día/hora en que puede ser usada la ficha" + +msgid "Vendor" +msgstr "Vendedor" + +msgid "Token vendor name (informational only)" +msgstr "Ficha nombre de vendedor (solo informativo)" + +msgid "Model" +msgstr "Modelo" + +msgid "Token model (informational only)" +msgstr "Ficha modelo (solo informativo)" + +msgid "Serial" +msgstr "Serie" + +msgid "Token serial (informational only)" +msgstr "Ficha serie (solo informativa)" + +msgid "Token secret (Base32; default: random)" +msgstr "Ficha secreto (Base32; predeterminado: random)" + +msgid "Token hash algorithm" +msgstr "Algoritmo de ficha picada" + +msgid "Digits" +msgstr "Dígitos" + +msgid "Number of digits each token code will have" +msgstr "Número de digitos que cada código de ficha tendrá" + +msgid "Clock offset" +msgstr "Desplazamiento del reloj" + +msgid "TOTP token / IPA server time difference" +msgstr "Ficha TOTP / Diferencia de hora del servidor IPA" + +msgid "Clock interval" +msgstr "Intervalo de reloj" + +msgid "Length of TOTP token code validity" +msgstr "Longitud de la ficha TOTP de validación de código" + +msgid "Counter" +msgstr "Contador" + +msgid "Initial counter for the HOTP token" +msgstr "Contador inicial para a ficha HOTP" + +msgid "Add a new OTP token." +msgstr "Añadir una nueva ficha OTP." + +msgid "(deprecated)" +msgstr "(obsoleto)" + +msgid "Do not display QR code" +msgstr "No visualiza código QR" + +msgid "Add users that can manage this token." +msgstr "Añadir usuarios que pueden manejar esta ficha." + +msgid "Delete an OTP token." +msgstr "Borrar una ficha OTP." + +msgid "Search for OTP token." +msgstr "Búsqueda de ficha OTP." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"%s\")" +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" +"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" + +msgid "Modify a OTP token." +msgstr "MOdificar una ficha OTP." + +#, fuzzy +#| msgid "Rename the permission object" +msgid "Rename the OTP token object" +msgstr "Renombrar el permiso del objeto" + +msgid "Display information about an OTP token." +msgstr "Mostrar información sobre una ficha OTP." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Sudo Rules\n" +#| "\n" +#| "Sudo (su \"do\") allows a system administrator to delegate authority to\n" +#| "give certain users (or groups of users) the ability to run some (or all)\n" +#| "commands as root or another user while providing an audit trail of the\n" +#| "commands and their arguments.\n" +#| "\n" +#| "IPA provides a means to configure the various aspects of Sudo:\n" +#| " Users: The user(s)/group(s) allowed to invoke Sudo.\n" +#| " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +#| "Sudo.\n" +#| " Allow Command: The specific command(s) permitted to be run via Sudo.\n" +#| " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +#| " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +#| "invoked with.\n" +#| " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +#| " Options: The various Sudoers Options that can modify Sudo's behavior.\n" +#| "\n" +#| "An order can be added to a sudorule to control the order in which they\n" +#| "are evaluated (if the client supports it). This order is an integer and\n" +#| "must be unique.\n" +#| "\n" +#| "IPA provides a designated binddn to use with Sudo located at:\n" +#| "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#| "\n" +#| "To enable the binddn run the following command to set the password:\n" +#| "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#| "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#| "dc=example,dc=com\n" +#| "\n" +#| "For more information, see the IPA Documentation to Sudo.\n" +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +"Reglas Sudo\n" +"\n" +"Sudo (su \"do\") permite a un administrador de sistema delegar autoridad a " +"ciertos\n" +"usuarios dados(o grupos de usuarios) para tener la posibilidad de ejecutar " +"algunos (o\n" +" todos) los comandos como root u otro usuario mientras suministra pistas de " +"auditoria de\n" +" los comandos y sus argumentos.\n" +"\n" +"IPA proporciona un medio para configurar diversos aspectos de Sudo:\n" +" Users: Los usuario(s)/grupos(s) que tienen permitido llamar a Sudo.\n" +" Hosts: Loshost(s)/grupo(s) de host a los que el usuario permite llamar a " +"Sudo.\n" +" Allow Command: El comando(s) específico que tiene permitido ejecutarse " +"por medio de Sudo.\n" +" Deny Command: El comando(s) específico que tiene prohibido ejecutarse por " +"medio de Sudo.\n" +" RunAsUser: El usuario(s) o grupo(s) de usuarios con cuyos derechos será " +"invocado Sudo.\n" +" RunAsGroup: El grupo(s) con cuyos derechos gid será invocado Sudo.\n" +" Options: Las diversas opciones Sudoers que pueden modificar el " +"comportamiento de Sudo.\n" +"\n" +"Su puede aadir un orden a una regla sudo para controlar el orden en el que " +"será evaluada\n" +"(si el cliente lo soporta). Este orden es un entero y debe ser único.\n" +"\n" +"IPA suministra un binddn designado para usar con Sudo situado en :\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Para habilitar el binddn ejecute el siguiente comando para fijar la " +"contraseña:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"Para más información, vea la Documentación IPA para Sudo.\n" + +msgid "Command category" +msgstr "Categoría de comandos" + +msgid "Command category the rule applies to" +msgstr "Categoría de comandos la regla se aplica a" + +msgid "RunAs User category" +msgstr "Categoría de Usuario RunAs" + +msgid "RunAs User category the rule applies to" +msgstr "RunAs Usuario categoría la regla aplica a " + +msgid "RunAs Group category" +msgstr "RunAs Grupo categoría" + +msgid "RunAs Group category the rule applies to" +msgstr "RunAs Grupo categoría la regla aplica a" + +msgid "Sudo order" +msgstr "Orden Sudo" + +msgid "integer to order the Sudo rules" +msgstr "entero para ordenar las reglas Sudo" + +msgid "External User" +msgstr "De usuarios externos" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "Usuario Externo la regla aplica a (sudorule-find sólo)" + +#, fuzzy +#| msgid "Hosts" +msgid "Host Masks" +msgstr "Equipos" + +msgid "Sudo Allow Commands" +msgstr "Comandos Allow de sudo" + +msgid "Sudo Deny Commands" +msgstr "Comandos Deny de sudo" + +msgid "Sudo Allow Command Groups" +msgstr "Sudo Permitir Grupos de Comando" + +msgid "Sudo Deny Command Groups" +msgstr "Sudo Denegar Grupos de Comandos" + +msgid "RunAs Users" +msgstr "RunAs Usuarios" + +msgid "Run as a user" +msgstr "Ejecutar como un usuario" + +msgid "Groups of RunAs Users" +msgstr "Grupos de Usuarios RunAs" + +msgid "Run as any user within a specified group" +msgstr "Ejecutar como cualquier usuario dentro de un grupo especificado" + +msgid "RunAs External User" +msgstr "RunAs de usuarios externos" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "Usuario Externo los comandos pueden correr como (sudorule-find sólo)" + +#, fuzzy +#| msgid "Groups of RunAs Users" +msgid "External Groups of RunAs Users" +msgstr "Grupos de Usuarios RunAs" + +#, fuzzy +#| msgid "External Group the commands can run as (sudorule-find only)" +msgid "External Groups of users that the command can run as" +msgstr "Grupo Externo los comandos pueden correr como (sudorule-find sólo)" + +msgid "RunAs Groups" +msgstr "Grupos RunAs" + +msgid "Run with the gid of a specified POSIX group" +msgstr "Ejecutar con la gid de un grupo POSIX especificado" + +msgid "RunAs External Group" +msgstr "Grupo externo RunAs" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "Grupo Externo los comandos pueden correr como (sudorule-find sólo)" + +msgid "Sudo Option" +msgstr "Opción de sudo" + +msgid "Create new Sudo Rule." +msgstr "Crear nueva Regla Sudo." + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "Añadir comandos y grupos de comando sudo afectados por Regla Sudo." + +msgid "member sudo command group" +msgstr "miembro de grupo de comando sudo" + +#, fuzzy +#| msgid "sudo command groups" +msgid "sudo command groups to add" +msgstr "grupos de comando sudo" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Añadir hosts y grupos de hosts afectados por Regla Sudo." + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "Añadir una opción a la Regla Sudo." + +msgid "Add group for Sudo to execute as." +msgstr "Añadir grupo para Sudo a ejecutar como." + +msgid "Add users and groups for Sudo to execute as." +msgstr "Añadir usuarios y grupos para Sudo a ejecutar como." + +msgid "Add users and groups affected by Sudo Rule." +msgstr "Añadir usuarios y grupos afectados por Regla Sudo." + +msgid "Delete Sudo Rule." +msgstr "Borrar Regla Sudo." + +msgid "Disable a Sudo Rule." +msgstr "Deshabilitar Regla Sudo." + +msgid "Enable a Sudo Rule." +msgstr "Habilitar Regla Sudo." + +msgid "Search for Sudo Rule." +msgstr "Buscar Regla Sudo." + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" +"Los resultados deberían contener solo el atributo de clave primaria " +"(\"sudorule-name\")" + +msgid "Modify Sudo Rule." +msgstr "Modificar Regla Sudo." + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." + +#, fuzzy +#| msgid "sudo command groups" +msgid "sudo command groups to remove" +msgstr "grupos de comando sudo" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Quitar hosts y grupos de hosts afectados por Regla Sudo." + +msgid "Remove an option from Sudo Rule." +msgstr "Quitar una opción de la Regla Sudo." + +msgid "Remove group for Sudo to execute as." +msgstr "Quitar grupo para Sudo a ejecutar como." + +msgid "Remove users and groups for Sudo to execute as." +msgstr "Quitar usuarios y grupos para Sudo a ejecutar como." + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Quitar usuarios y grupos afectados por Regla Sudo." + +msgid "Display Sudo Rule." +msgstr "Mostrar Regla Sudo." + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Tiempo límite de búsqueda en segundos (0 es ilimitado)" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Número máximo de entradas devueltas (0 es ilimitado)" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "ACL name" +msgstr "Nombre de ACI" + +#, fuzzy +#| msgid "Service category" +msgid "Profile category" +msgstr " Añadir servicios a una regla de HBAC" + +#, fuzzy +#| msgid "Service category the rule applies to" +msgid "Profile category the ACL applies to" +msgstr "Categoría de servicio a la que se aplica la regla" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "User category the ACL applies to" +msgstr "Categoría de usuario al que se aplica la regla" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Host category the ACL applies to" +msgstr "Categoría del equipo al que se aplica la regla" + +#, fuzzy +#| msgid "Service category the rule applies to" +msgid "Service category the ACL applies to" +msgstr "Categoría de servicio a la que se aplica la regla" + +#, fuzzy +#| msgid "Profile ID" +msgid "Profiles" +msgstr "ID del Perfil" + +#, fuzzy +#| msgid "Create new ACI." +msgid "Create a new CA ACL." +msgstr "Crear nuevo ACI." + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." + +#, fuzzy +#| msgid "Add privileges to a role." +msgid "Add profiles to a CA ACL." +msgstr "Añadir privilegios a un rol." + +#, fuzzy +#| msgid "Certificate Profile" +msgid "member Certificate Profile" +msgstr "Certificado de Perfil" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Certificate Profiles to add" +msgstr "Certificado de Perfiles" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add services to a CA ACL." +msgstr "Añadir servicios a una regla HBAC." + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add users and groups to a CA ACL." +msgstr "Añadir usuarios y grupos a una regla HBAC." + +#, fuzzy +#| msgid "Delete ACI." +msgid "Delete a CA ACL." +msgstr "Borrar ACI." + +#, fuzzy +#| msgid "Disable a CA." +msgid "Disable a CA ACL." +msgstr "Deshabilitar una CA." + +#, fuzzy +#| msgid "Enable a CA." +msgid "Enable a CA ACL." +msgstr "Habilitar una CA." + +#, fuzzy +#| msgid "Search for CAs." +msgid "Search for CA ACLs." +msgstr "Búsqueda de CAs." + +#, fuzzy +#| msgid "Modify ACI." +msgid "Modify a CA ACL." +msgstr "Modificar ACI." + +#, fuzzy +#| msgid "Remove target hosts and hostgroups from an HBAC rule." +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Borrar hosts objetivos y grupos de host de una regla HBAC." + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove profiles from a CA ACL." +msgstr "Borrar privilegios de un rol." + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Certificate Profiles to remove" +msgstr "Certificado de Perfiles" + +#, fuzzy +#| msgid "Remove privileges from a role." +msgid "Remove services from a CA ACL." +msgstr "Borrar privilegios de un rol." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users and groups from a CA ACL." +msgstr "Borrar usuarios y grupos de una regla HBAC." + +#, fuzzy +#| msgid "Display the properties of a CA." +msgid "Display the properties of a CA ACL." +msgstr "Muestra las propiedades de una CA." + +#, fuzzy +#| msgid "" +#| "Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" +"Máxima cantidad de tiempo (segundos) parab una búsqueda (> 0, o -1 para " +"ilimitado)" + +#, fuzzy +#| msgid "Maximum number of records to search (-1 is unlimited)" +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "Máximo número de registros a buscar (-1 es ilimitado)" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +#, fuzzy +#| msgid "Min domain level" +msgid "Current domain level:" +msgstr "Nivel de dominio Min" + +msgid "Change current Domain Level." +msgstr "" + +#, fuzzy +#| msgid "Max domain level" +msgid "Domain Level" +msgstr "Nivel de dominio Max" + +msgid "Add certificates to host entry" +msgstr "Añade certificados a la entrada de host" + +msgid "Remove certificates from host entry" +msgstr "Borra certificados de una entrada de host" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "Añadir a grupo predeterminado" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" +"Añadir usuarios migrados sin grupo a un grupo predeterminado (por defecto: " +"true)" + +msgid "Search scope" +msgstr "Alcance de búsqueda" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" +"Alcance de búsqueda LDAP para usuarios y grupos: base, un nivel o sub árbol. " +"Predeterminado a un nivel" + +msgid "Target DN subtree" +msgstr "Sub-árbol DN objetivo" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" +"Sub-árbol DN opcional donde una entrada puede ser movida (debe estar en el " +"sub-árbol, pero puede no existir todavía)" + +msgid "Origin DN subtree" +msgstr "Subárbol DN origen" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" +"Subárbol opcional DN desde donde se puede mover una entrada (debe estar en " +"el subárbol pero puede ser que todavía no exista)" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "Nombre del servidor" + +msgid "IPA server hostname" +msgstr "Nombre de host del servidor IPA" + +#, fuzzy +#| msgid "Managed suffixes" +msgid "Managed suffix" +msgstr "Sufijos gestionados" + +msgid "Min domain level" +msgstr "Nivel de dominio Min" + +msgid "Minimum domain level" +msgstr "Nivel mínimo de dominio" + +msgid "Max domain level" +msgstr "Nivel de dominio Max" + +msgid "Maximum domain level" +msgstr "Nivel máximo de dominio" + +msgid "Delete IPA server." +msgstr "Eliminar servidor IPA." + +msgid "Search for IPA servers." +msgstr "Buscar servidores IPA." + +msgid "Show IPA server." +msgstr "Mostrar servidor IPA." + +msgid "Add new certificates to a service" +msgstr "Añadir nuevos certificados a un servicio" + +msgid "Remove certificates from a service" +msgstr "Quitar certificados de un servicio" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#, fuzzy +#| msgid "Failed targets" +msgid "Allowed Target" +msgstr "Error en Objetivos" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Create a new service delegation rule." +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Add member to a named service delegation rule." +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "member principal" +msgstr "Principal kerberos" + +#, fuzzy +#| msgid "principal not found\n" +msgid "principal to add" +msgstr "principal no se encuentra\n" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Add target to a named service delegation rule." +msgstr "objetivo de delegación de miembro de servicio" + +msgid "member service delegation target" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation targets to add" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "Delete a delegation." +msgid "Delete service delegation." +msgstr "Borrar una delegación." + +#, fuzzy +#| msgid "Search for delegations." +msgid "Search for service delegations rule." +msgstr "Buscar delegaciones." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation rule." +msgstr "Borrar miembros de un grupo de servicio HBAC." + +#, fuzzy +#| msgid "Failed to remove" +msgid "principal to remove" +msgstr "Error al remover " + +#, fuzzy +#| msgid "member service delegation target" +msgid "Remove target from a named service delegation rule." +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation targets to remove" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "Display information about a delegation." +msgid "Display information about a named service delegation rule." +msgstr "Mostrar información sobre una delegación." + +#, fuzzy +#| msgid "member service delegation target" +msgid "Create a new service delegation target." +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Add member to a named service delegation target." +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Delete service delegation target." +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Search for service delegation target." +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Remove member from a named service delegation target." +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "Display information about a delegation." +msgid "Display information about a named service delegation target." +msgstr "Mostrar información sobre una delegación." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Stageusers\n" +#| "\n" +#| "Manage stage user entries.\n" +#| "\n" +#| "Stage user entries are directly under the container: \"cn=stage users,\n" +#| "cn=accounts, cn=provisioning, SUFFIX\".\n" +#| "Users can not authenticate with those entries (even if the entries\n" +#| "contain credentials). Those entries are only candidate to become Active " +#| "entries.\n" +#| "\n" +#| "Active user entries are Posix users directly under the container: " +#| "\"cn=accounts, SUFFIX\".\n" +#| "Users can authenticate with Active entries, at the condition they have\n" +#| "credentials.\n" +#| "\n" +#| "Deleted user entries are Posix users directly under the container: " +#| "\"cn=deleted users,\n" +#| "cn=accounts, cn=provisioning, SUFFIX\".\n" +#| "Users can not authenticate with those entries, even if the entries " +#| "contain credentials.\n" +#| "\n" +#| "The stage user container contains entries:\n" +#| " - created by 'stageuser-add' commands that are Posix users,\n" +#| " - created by external provisioning system.\n" +#| "\n" +#| "A valid stage user entry MUST have:\n" +#| " - entry RDN is 'uid',\n" +#| " - ipaUniqueID is 'autogenerate'.\n" +#| "\n" +#| "IPA supports a wide range of username formats, but you need to be aware " +#| "of any\n" +#| "restrictions that may apply to your particular environment. For example,\n" +#| "usernames that start with a digit or usernames that exceed a certain " +#| "length\n" +#| "may cause problems for some UNIX systems.\n" +#| "Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +#| "\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new stageuser:\n" +#| " ipa stageuser-add --first=Tim --last=User --password tuser1\n" +#| "\n" +#| " Add a stageuser from the deleted users container:\n" +#| " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +#| "\n" +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" +"\n" +"Escenógrafos\n" +"\n" +"Gestionar las entradas de escenario de usuario.\n" +"\n" +"Las entradas de escenario de usuario están directamente bajo el contenedor.\n" +" \"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\". Los usuarios no " +"se\n" +" pueden autenticar con estas entradas (aunque las entradas contengan\n" +" credenciales). Estas entradas son solo candidatas a llegar a ser entradas " +"Activas.\n" +"\n" +"Las entradas Activas de usuario son usuarios Posix directamente bajo el " +"contenedor. \"cn=accounts, SUFFIX\".\n" +"Los usuario se pueden autenticar con entradas Activas con la condición de " +"que \n" +"tengan credenciales.\n" +"\n" +"Las entradas borradas de usuario son usuaruios Posix directamente bajo el " +"contenedor. \"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Los usuarios no se pueden autenticas con estas entradas, aunque estas " +"entradas contengan credenciales.\n" +"\n" +"El contenedor escenario de usuario contiene entradas:\n" +" - crreadas por comandos 'stageuser-add' que son usuarios Posix,\n" +" - creadas por un sistema externa de aprovisionamiento.\n" +"\n" +"Una entrada de escenario de usuario valida DEBE tener:\n" +" - entrada RDN es 'uid',\n" +" - ipaUniqueID es 'autogenerate'.\n" +"\n" +"IPA soporta un amplia rango de formatos de nombre de usuario, pero usted " +"debe\n" +"estar atento a algunas restricciones que pueden aplicarse a su entorno " +"concreto.\n" +"Por ejemplo, los nombres de usuario que empiezan con un dígito o los nombres " +"de \n" +"usuario que exceden cierta longitud pueden causar problemas en algunos " +"sistemas UNIX.\n" +"Use 'ipa config-mod' para cambiar el formato de nombre de usuario permitido " +"por las herramientas IPA.\n" +"\n" +"\n" +"EJEMPLOS:\n" +"\n" +"Añadir un uevo escenógrafo:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Añadir un escenografo desde un contenedor de usuarios borrados:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" + +#, fuzzy +#| msgid "Delete a stage user." +msgid "Activate a stage user." +msgstr "Borrar un escenario usuario." + +msgid "Add a new stage user." +msgstr "Añadir un nuevo escenario usuario." + +msgid "Create Stage user in from a delete user" +msgstr "Crear Escenario usuario desde un usuario borrado" + +msgid "Delete a stage user." +msgstr "Borrar un escenario usuario." + +#, fuzzy +#| msgid "Search for users." +msgid "Search for stage users." +msgstr "Buscar usuarios." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for stage users with these member of groups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for stage users without these member of groups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for stage users with these member of netgroups." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for stage users without these member of netgroups." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for stage users with these member of roles." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for stage users without these member of roles." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for stage users with these member of HBAC rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for stage users without these member of HBAC rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for stage users with these member of sudo rules." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for stage users without these member of sudo rules." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "Modify a stage user." +msgstr "Modificar un escenario usuario." + +#, fuzzy +#| msgid "Rename the permission object" +msgid "Rename the stage user object" +msgstr "Renombrar el permiso del objeto" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a stage user." +msgstr "Mostrar información sobre un usuario." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Segment name" +msgstr "Nombre del servidor" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +#, fuzzy +#| msgid "Modify information about an IPA server." +msgid "Left replication node - an IPA server" +msgstr "Modificar información sobre un servidor IPA." + +#, fuzzy +#| msgid "Rights" +msgid "Right node" +msgstr "Derechos" + +#, fuzzy +#| msgid "Modify information about an IPA server." +msgid "Right replication node - an IPA server" +msgstr "Modificar información sobre un servidor IPA." + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to strip" +msgstr "Atributos" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +#, fuzzy +#| msgid "Attribute Key" +msgid "Attributes to replicate" +msgstr "Atributo Clave" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Session timeout" +msgstr "Error de sesión" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +#, fuzzy +#| msgid "Replication agreement for %(hostname)s not found" +msgid "Replication agreement enabled" +msgstr "Acuerdo de replicación para %(hostname)s no encontrado" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Suffix name" +msgstr "nombre de archivo" + +msgid "LDAP suffix to be managed" +msgstr "" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add a new segment." +msgstr "Añadir un n uevo host." + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a segment." +msgstr "Borrar un host." + +#, fuzzy +#| msgid "Search for privileges." +msgid "Search for topology segments." +msgstr "Buscar privilegios." + +#, fuzzy +#| msgid "Modify a user." +msgid "Modify a segment." +msgstr "Modificar un usuario." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Display a segment." +msgstr "Mostrar nombre" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +#, fuzzy +#| msgid "Delete a stage user." +msgid "Delete a topology suffix." +msgstr "Borrar un escenario usuario." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for topology suffices." +msgstr "Buscar roles." + +#, fuzzy +#| msgid "Modify a stage user." +msgid "Modify a topology suffix." +msgstr "Modificar un escenario usuario." + +#, fuzzy +#| msgid "Managed suffixes" +msgid "Show managed suffix." +msgstr "Sufijos gestionados" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "Usuario preservado" + +msgid "Add one or more certificates to the user entry" +msgstr "Añade uno o más certificados a la entrada del usuario" + +msgid "Remove one or more certificates to the user entry" +msgstr "Borra uno o más certificados de la entrada de usuario" + +msgid "Move deleted user into staged area" +msgstr "Mover el usuario borrado al área de escena" + +msgid "Undelete a delete user account." +msgstr "Recuperar una cuenta de usuario borrada." + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Vault name" +msgstr "Apellido" + +#, fuzzy +#| msgid "description" +msgid "Vault description" +msgstr "descripción" + +#, fuzzy +#| msgid "Rule type" +msgid "Vault type" +msgstr "Tipo de regla" + +msgid "Salt" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Vaults\n" +msgid "Vault salt" +msgstr "" +"\n" +"Bóvedas\n" + +#, fuzzy +#| msgid "SSH public key" +msgid "Public key" +msgstr "Clave pública SSH" + +#, fuzzy +#| msgid "Missing vault public key" +msgid "Vault public key" +msgstr "Clave pública de la bóveda desaparecida" + +#, fuzzy +#| msgid "Member users" +msgid "Owner users" +msgstr "Usuarios miembros" + +#, fuzzy +#| msgid "netgroups" +msgid "Owner groups" +msgstr "grupos de red" + +#, fuzzy +#| msgid "Member services" +msgid "Owner services" +msgstr "Servicios de miembros" + +#, fuzzy +#| msgid "Via Service" +msgid "Vault service" +msgstr "Vía de servicio" + +msgid "Shared vault" +msgstr "" + +#, fuzzy +#| msgid "Vault password" +msgid "Vault user" +msgstr "Contraseña de la bóveda" + +#, fuzzy +#| msgid "Host Certificate" +msgid "Transport Certificate" +msgstr "Certificado de host" + +#, fuzzy +#| msgid "Service category the rule applies to" +msgid "Service name of the service vault" +msgstr "Categoría de servicio a la que se aplica la regla" + +#, fuzzy +#| msgid "Hostname of this server" +msgid "Username of the user vault" +msgstr "Nombre de host de este servidor" + +#, fuzzy +#| msgid "Add members to a role." +msgid "Add members to a vault." +msgstr "Añadir miembros a un rol." + +#, fuzzy +#| msgid "Add members to a role." +msgid "Add owners to a vault." +msgstr "Añadir miembros a un rol." + +#, fuzzy +#| msgid "member user" +msgid "owner user" +msgstr "usuario miembro" + +#, fuzzy +#| msgid "User group" +msgid "owner group" +msgstr "Grupo de usuarios" + +#, fuzzy +#| msgid "Member services" +msgid "owner service" +msgstr "Servicios de miembros" + +#, fuzzy +#| msgid "Members that could not be added" +msgid "Owners that could not be added" +msgstr "Miembros que no han podido ser añadidos" + +#, fuzzy +#| msgid "Number of members added" +msgid "Number of owners added" +msgstr "Cantidad de miembros añadidos" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +#, fuzzy +#| msgid "Delete a trust." +msgid "Delete a vault." +msgstr "Borrar una confianza." + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for vaults." +msgstr "Búsqueda de confianzas." + +#, fuzzy +#| msgid "Disabled service \"%(value)s\"" +msgid "List all service vaults" +msgstr "Servicio inhabilitado \"%(value)s\"" + +#, fuzzy +#| msgid "Disable a user account." +msgid "List all user vaults" +msgstr "Deshabilitar una cuenta de usuario." + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove members from a vault." +msgstr "Borrar miembros de un rol." + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove owners from a vault." +msgstr "Borrar miembros de un rol." + +#, fuzzy +#| msgid "Members that could not be removed" +msgid "Owners that could not be removed" +msgstr "Miembros que no han podido ser eliminados" + +#, fuzzy +#| msgid "Number of members removed" +msgid "Number of owners removed" +msgstr "Cantidad de miembros eliminados" + +#, fuzzy +#| msgid "Display information about a trust." +msgid "Display information about a vault." +msgstr "Mostrar información sobre una confianza." + +#, fuzzy +#| msgid "Show global trust configuration." +msgid "Show vault configuration." +msgstr "Mostrar la configuración de confianza global." + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Output file to store the transport certificate" +msgstr "Archivo para almacenar el certificado" + +msgid "Add owners to a vault container." +msgstr "" + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Delete a vault container." +msgstr "Borrar una localización de automontaje." + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove owners from a vault container." +msgstr "Borrar miembros de un rol." + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a vault container." +msgstr "Mostrar información sobre un usuario." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Principal para este certificado (e.g. HTTP/test.example.com)" + +msgid "Profile ID" +msgstr "ID del Perfil" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Certificate Profile to use" +msgstr "Certificado de Perfiles" + +msgid "Two-way trust" +msgstr "Confianza de dos sentidos" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" +"Establecida confianza bidireccional. Por defecto la confianza es de un solo " +"sentido entrante." + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Add new ID range.\n" +#| "\n" +#| " To add a new ID range you always have to specify\n" +#| "\n" +#| " --base-id\n" +#| " --range-size\n" +#| "\n" +#| " Additionally\n" +#| "\n" +#| " --rid-base\n" +#| " --secondary-rid-base\n" +#| "\n" +#| " may be given for a new ID range for the local domain while\n" +#| "\n" +#| " --rid-bas\n" +#| " --dom-sid\n" +#| "\n" +#| " must be given to add a new range for a trusted AD domain.\n" +#| "\n" +#| " WARNING:\n" +#| "\n" +#| " DNA plugin in 389-ds will allocate IDs based on the ranges configured " +#| "for the\n" +#| " local domain. Currently the DNA plugin *cannot* be reconfigured " +#| "itself based\n" +#| " on the local ranges set via this family of commands.\n" +#| "\n" +#| " Manual configuration change has to be done in the DNA plugin " +#| "configuration for\n" +#| " the new local range. Specifically, The dnaNextRange attribute of " +#| "'cn=Posix\n" +#| " IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +#| "has to be\n" +#| " modified to match the new range.\n" +#| " " +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Añadir un nuevo rango de ID.\n" +"\n" +" Para añadir un nuevo rango de ID siempre debe especificar\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Adicionalmente\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" puede ser dado para un nuevo rango de ID para el dominio local mientras\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" deben ser dados para añadir un nuevo rango para un AD de dominio de " +"confianza.\n" +"\n" +" PRECAUCIÓN:\n" +"\n" +" El plugin DNA en 389-ds ubicará IDs en base a los rangos configurados " +"para el dominio\n" +" local. Actualmente el plugin DNA \"no puede\" ser reconfigurado por si " +"mismo en base a\n" +" los rangos locales ajustados por medio de esta familia de comandos.\n" +"\n" +" El cambio manual de configuración ha sido hecho en la configuración del " +"plugin DNA\n" +" para el nuevo rango local. Específicamente, el atributo dnaNextRange de " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' ha " +"sido\n" +" modificado para coincidir con el nuevo rango.\n" +" " + +#, fuzzy +#| msgid "" +#| "=======\n" +#| "WARNING:\n" +#| "\n" +#| "DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +#| "the\n" +#| "local domain. Currently the DNA plugin *cannot* be reconfigured itself " +#| "based\n" +#| "on the local ranges set via this family of commands.\n" +#| "\n" +#| "Manual configuration change has to be done in the DNA plugin " +#| "configuration for\n" +#| "the new local range. Specifically, The dnaNextRange attribute of " +#| "'cn=Posix\n" +#| "IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +#| "be\n" +#| "modified to match the new range.\n" +#| "=======\n" +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"=======\n" +"ADVERTENCIA:\n" +"\n" +"El plugin DNA en 389-ds asignará IDs basados en el rango configurado para " +"el\n" +"dominio local. Actualmente el plugin DNA *no puede* ser reconfigurado en " +"base a\n" +"los rangos locales establecidos por medio de esta familia de comandos.\n" +"\n" +"El cambio de configuración manual ha de ser hecho en la configuración del " +"plugin\n" +"DNA para e nuevo rango local. Especialmente, el atributo dnaNextRange de\n" +"'cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"ha\n" +"sido modificado para coincidir con el nuevo rango.\n" +"=======\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage Certificate Profiles\n" +#| "\n" +#| "Certificate Profiles are used by Certificate Authority (CA) in the " +#| "signing of\n" +#| "certificates to determine if a Certificate Signing Request (CSR) is " +#| "acceptable,\n" +#| "and if so what features and extensions will be present on the " +#| "certificate.\n" +#| "\n" +#| "The Certificate Profile format is the property-list format understood by " +#| "the\n" +#| "Dogtag or Red Hat Certificate System CA.\n" +#| "\n" +#| "PROFILE ID SYNTAX:\n" +#| "\n" +#| "A Profile ID is a string without spaces or punctuation starting with a " +#| "letter\n" +#| "and followed by a sequence of letters, digits or underscore (\"_\").\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Import a profile that will not store issued certificates:\n" +#| " ipa certprofile-import ShortLivedUserCert \\\n" +#| " --file UserCert.profile --desc \"User Certificates\" \\\n" +#| " --store=false\n" +#| "\n" +#| " Delete a certificate profile:\n" +#| " ipa certprofile-del ShortLivedUserCert\n" +#| "\n" +#| " Show information about a profile:\n" +#| " ipa certprofile-show ShortLivedUserCert\n" +#| "\n" +#| " Save profile configuration to a file:\n" +#| " ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +#| "\n" +#| " Search for profiles that do not store certificates:\n" +#| " ipa certprofile-find --store=false\n" +#| "\n" +#| "PROFILE CONFIGURATION FORMAT:\n" +#| "\n" +#| "The profile configuration format is the raw property-list format\n" +#| "used by Dogtag Certificate System. The XML format is not supported.\n" +#| "\n" +#| "The following restrictions apply to profiles managed by IPA:\n" +#| "\n" +#| "- When importing a profile the \"profileId\" field, if present, must\n" +#| " match the ID given on the command line.\n" +#| "\n" +#| "- The \"classId\" field must be set to \"caEnrollImpl\"\n" +#| "\n" +#| "- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +#| "\n" +#| "- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +#| " class must be used.\n" +#| "\n" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" +"\n" +"Gestión de los Certificados de Perfil\n" +"\n" +"LOs Certificados de Perfil son usados por una Autoridad de Certificación " +"(CA) en la\n" +"firma de certificados si una Petición de Firma de Certificado (CSR) es " +"aceptable y\n" +"que características y extensiones estarán presentes en el certificado.\n" +"\n" +"El formato del Cetificado de Perfil es la lista de propiedad entendida por " +"Dogtag\n" +"o Red Hat Certificate System CA.\n" +"\n" +"SINTAXIS DEL ID DE PERFIL:\n" +"\n" +"Una ID de Perfil es una cadena sin espacios o puntuación que empieza con " +"una\n" +"letra y seguida por una secuencia de letras, dígitos o guiones bajos (\"_" +"\").\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Importar un perfil que no almacenará los certificados enviados:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Borrar un certificado de perfil:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Mostrar información sobre un perfil:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Guardar la configuración del perfil en un fichero:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Búsqueda de perfiles que almacenan certificados:\n" +" ipa certprofile-find --store=false\n" +"\n" +"FORMATO DE CONFIGURACIÓN DE PERFIL:\n" +"\n" +"El formato de configuración de perfil es el formato crudo de lista de " +"propiedad\n" +"usado por Dogtag Certificate System. No está soportado el formato XML.\n" +"\n" +"A los perfiles manejados por IPA se les aplican las siguientes " +"restricciones:\n" +"\n" +"- Cuando se importa un perfil el campo \"profileId\", si está presente, debe " +"coincidir\n" +" con la ID dada en la linea de comandos.\n" +"\n" +"- El campo \"classId\" debe estar fijado a \"caEnrollImpl\"\n" +"\n" +"- El campo \"auth.instance_id\" debe estar fijado a \"raCertAuth\"\n" +"\n" +"- La clase de entrada \"certReqInputImpl\" y la de salida \"certOutputImpl\" " +"se deben\n" +" usar.\n" +"\n" + +msgid "Profile ID for referring to this profile" +msgstr "ID de Perfil para referirse a este perfil" + +msgid "Profile description" +msgstr "Descripción del perfil" + +msgid "Brief description of this profile" +msgstr "Breve descripción de este perfil" + +msgid "Store issued certificates" +msgstr "Almacén de certificados enviados" + +msgid "Whether to store certs issued using this profile" +msgstr "Si se almacenan los certificados enviados usando este perfil" + +msgid "Delete a Certificate Profile." +msgstr "Borrar un Certificado Perfil" + +msgid "Search for Certificate Profiles." +msgstr "Búsqueda de Certificados de Perfiles" + +msgid "Import a Certificate Profile." +msgstr "Importar un Certificado Perfil" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "Nombre de fichero de un perfil crudo. El formato XML no se soporta" + +msgid "Modify Certificate Profile configuration." +msgstr "Modificar la configuración del Certificado Perfil" + +msgid "File containing profile configuration" +msgstr "Fichero que contiene la configuración del perfil" + +msgid "Display the properties of a Certificate Profile." +msgstr "Muestra las propiedades de un Certificado de Perfil" + +msgid "Write profile configuration to file" +msgstr "Escribir configuración de perfil a fichero" + +msgid "Remove users that can manage this token." +msgstr "Quitar usuarios que puedan manejar esta ficha." + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "Resuelve un nombre de host en DNS. (Obsoleto)" + +msgid "Hostname (FQDN)" +msgstr "Nombre de host (FQDN)" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" +"Fuerza la creación de zona DNS aún en el caso de que se superponga con una " +"zona existente." + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" +"Fuerza la creación de zona DNS aunque el servidor de nombre no se pueda " +"resolver. (Obsoleto)" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "Sufijos gestionados" + +msgid "Check connection to remote IPA server." +msgstr "Comprobar la conexión al servidor IPA remoto." + +msgid "Remote server name" +msgstr "Nombre del servidor remoto" + +msgid "Remote IPA server hostname" +msgstr "Nombre de host del servidor IPA remoto" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "suffix" +msgstr "Sufijos UPN" + +#, fuzzy +#| msgid "Search for services with these managed by hosts." +msgid "Search for servers with these managed suffixes." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Search for services without these managed by hosts." +msgid "Search for servers without these managed suffixes." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "Add a manager to the user entry" +msgid "Add a manager to the stage user entry" +msgstr "Añade un gestor a entrada de usuario" + +#, fuzzy +#| msgid "Remove a manager to the user entry" +msgid "Remove a manager to the stage user entry" +msgstr "Borra un gestor a la entrada de usuario" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, fuzzy +#| msgid "Managed suffixes" +msgid "Managed LDAP suffix DN" +msgstr "Sufijos gestionados" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for topology suffixes." +msgstr "Buscar roles." + +msgid "Add a manager to the user entry" +msgstr "Añade un gestor a entrada de usuario" + +msgid "Remove a manager to the user entry" +msgstr "Borra un gestor a la entrada de usuario" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Directory Server Access Control Instructions (ACIs)\n" +#| "\n" +#| "ACIs are used to allow or deny access to information. This module is\n" +#| "currently designed to allow, not deny, access.\n" +#| "\n" +#| "The aci commands are designed to grant permissions that allow updating\n" +#| "existing entries or adding or deleting new ones. The goal of the ACIs\n" +#| "that ship with IPA is to provide a set of low-level permissions that\n" +#| "grant access to special groups called taskgroups. These low-level\n" +#| "permissions can be combined into roles that grant broader access. These\n" +#| "roles are another type of group, roles.\n" +#| "\n" +#| "For example, if you have taskgroups that allow adding and modifying users " +#| "you\n" +#| "could create a role, useradmin. You would assign users to the useradmin\n" +#| "role to allow them to do the operations defined by the taskgroups.\n" +#| "\n" +#| "You can create ACIs that delegate permission so users in group A can " +#| "write\n" +#| "attributes on group B.\n" +#| "\n" +#| "The type option is a map that applies to all entries in the users, groups " +#| "or\n" +#| "host location. It is primarily designed to be used when granting add\n" +#| "permissions (to write new entries).\n" +#| "\n" +#| "An ACI consists of three parts:\n" +#| "1. target\n" +#| "2. permissions\n" +#| "3. bind rules\n" +#| "\n" +#| "The target is a set of rules that define which LDAP objects are being\n" +#| "targeted. This can include a list of attributes, an area of that LDAP\n" +#| "tree or an LDAP filter.\n" +#| "\n" +#| "The targets include:\n" +#| "- attrs: list of attributes affected\n" +#| "- type: an object type (user, group, host, service, etc)\n" +#| "- memberof: members of a group\n" +#| "- targetgroup: grant access to modify a specific group. This is " +#| "primarily\n" +#| " designed to enable users to add or remove members of a specific group.\n" +#| "- filter: A legal LDAP filter used to narrow the scope of the target.\n" +#| "- subtree: Used to apply a rule across an entire set of objects. For " +#| "example,\n" +#| " to allow adding users you need to grant \"add\" permission to the " +#| "subtree\n" +#| " ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree " +#| "option\n" +#| " is a fail-safe for objects that may not be covered by the type option.\n" +#| "\n" +#| "The permissions define what the ACI is allowed to do, and are one or\n" +#| "more of:\n" +#| "1. write - write one or more attributes\n" +#| "2. read - read one or more attributes\n" +#| "3. add - add a new entry to the tree\n" +#| "4. delete - delete an existing entry\n" +#| "5. all - all permissions are granted\n" +#| "\n" +#| "Note the distinction between attributes and entries. The permissions are\n" +#| "independent, so being able to add a user does not mean that the user " +#| "will\n" +#| "be editable.\n" +#| "\n" +#| "The bind rule defines who this ACI grants permissions to. The LDAP " +#| "server\n" +#| "allows this to be any valid LDAP entry but we encourage the use of\n" +#| "taskgroups so that the rights can be easily shared through roles.\n" +#| "\n" +#| "For a more thorough description of access controls see\n" +#| "http://www.redhat.com/docs/manuals/dir-server/ag/8.0/" +#| "Managing_Access_Control.html\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| "NOTE: ACIs are now added via the permission plugin. These examples are " +#| "to\n" +#| "demonstrate how the various options work but this is done via the " +#| "permission\n" +#| "command-line now (see last example).\n" +#| "\n" +#| " Add an ACI so that the group \"secretaries\" can update the address on " +#| "any user:\n" +#| " ipa group-add --desc=\"Office secretaries\" secretaries\n" +#| " ipa aci-add --attrs=streetAddress --memberof=ipausers --" +#| "group=secretaries --permissions=write --prefix=none \"Secretaries write " +#| "addresses\"\n" +#| "\n" +#| " Show the new ACI:\n" +#| " ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +#| "\n" +#| " Add an ACI that allows members of the \"addusers\" permission to add new " +#| "users:\n" +#| " ipa aci-add --type=user --permission=addusers --permissions=add --" +#| "prefix=none \"Add new users\"\n" +#| "\n" +#| " Add an ACI that allows members of the editors manage members of the " +#| "admins group:\n" +#| " ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +#| "group=editors --prefix=none \"Editors manage admins\"\n" +#| "\n" +#| " Add an ACI that allows members of the admins group to manage the street " +#| "and zip code of those in the editors group:\n" +#| " ipa aci-add --permissions=write --memberof=editors --group=admins --" +#| "attrs=street --attrs=postalcode --prefix=none \"admins edit the address " +#| "of editors\"\n" +#| "\n" +#| " Add an ACI that allows the admins group manage the street and zipcode of " +#| "those who work for the boss:\n" +#| " ipa aci-add --permissions=write --group=admins --attrs=street --" +#| "attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +#| "dc=example,dc=com)\" --prefix=none \"Edit the address of those who work " +#| "for the boss\"\n" +#| "\n" +#| " Add an entirely new kind of record to IPA that isn't covered by any of " +#| "the --type options, creating a permission:\n" +#| " ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +#| "cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +#| "\n" +#| "\n" +#| "The show command shows the raw 389-ds ACI.\n" +#| "\n" +#| "IMPORTANT: When modifying the target attributes of an existing ACI you\n" +#| "must include all existing attributes as well. When doing an aci-mod the\n" +#| "targetattr REPLACES the current attributes, it does not add to them.\n" +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" +"\n" +"Instrucciones de Control de Acceso al Servidor de Directorio (ACIs)\n" +"\n" +"ACIs son usados para permitir o denegar acceso a la información. Este módulo " +"está\n" +" actualmente diseñado para permitir, no denegar, acceso.\n" +"\n" +"Los comandos aci están diseñados para conceder permisos que permitan la\n" +"actualización de entradas existentes o el añadido o borrado de nuevas. El " +"objetivo\n" +"de los ACIs que van con IPA es suministrar un conjunto de permisos de bajo " +"nivel\n" +"que conceden acceso a grupos espaciales llamados grupos de tareas. Estos\n" +"permisos de bajo nivel pueden ser combinados en roles que conceden un " +"acceso\n" +"más amplio. Estos roles son otro tipo de grupo, roles.\n" +"\n" +"Por ejemplo, si usted tiene un grupo de tareas que le permiten añadir y " +"modificar\n" +"usuarios usted podría crear un role, useradmin. Debería asignar usuarios al " +"role\n" +"useradmin que les permitirá hacer operaciones definidas en el grupo de " +"tareas.\n" +"\n" +"Usted puede crear ACIs que deleguen permisos así usuarios del grupo A " +"pueden\n" +"escribir atributos en el grupo B.\n" +"\n" +"La opción type es un mapa que aplica a todas las entradas en la localización " +"de\n" +"usuarios, grupos o host. Está diseñada principalmente para ser usada cuando " +"se\n" +"otorgan permisos de añadir (para escribir nuevas entradas).\n" +"\n" +"Un ACI consta de tres partes:\n" +"1. objetivo\n" +"2. permisos\n" +"3. reglas de enlace\n" +"\n" +"El objetivo es un conjunto de reglas que definen que objetos LDAP son " +"objetivos.\n" +"Esto puede incluir una lista de atributos, un área del árbol LDAP o un " +"filtro LDAP.\n" +"\n" +"Los objetivos incluyen:\n" +"- attrs: lista de atributos afectados\n" +"- type: un tipo de objeto (usuario, grupo, host, servicio, etc)\n" +"- memberof: miembros de un grupo\n" +"- targetgroup: concede acceso para modificar un grupo específico. Está " +"diseñado\n" +" principalmente para habilitar a los usuarios para añadir o borrar miembros " +"de un\n" +" grupo específico.\n" +"- filter: Un filtro LDAP legal usado para reducir el alcance del objetivo.\n" +"- subtree: Usado para aplicar una regla a lo largo de un conjunto de " +"objetos. Por\n" +" ejemplo, para añadir usuarios usted necesita conceder permisos \"add\" al " +"subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. La opción subtree es " +"a\n" +" prueba de fallos para objetos que pueden no estar cubiertos por la opción " +"type.\n" +"\n" +"Los permisos definidos que ACI tiene permitidos hacer son uno o más de:\n" +"1. write - escribir uno o mas atributos\n" +"2. read - leer uno o más atributos\n" +"3. add - añadir una nueva entrada al árbol\n" +"4. delete - borrar una entrada existente\n" +"5. all - se conceden todos los permisos\n" +"\n" +"Advierta la diferencia entre atributos y entradas. Los permisos son " +"independientes,\n" +"de esta manera ser capaz de añadir un usuario no significa que el usuario " +"será\n" +"editable.\n" +"\n" +"La regla bind define a quien concede ACI estos permisos. El servidor LDAP " +"permite\n" +"esto para cualquier entrada LDAP válida pero recomendamos el uso de grupos " +"de\n" +"tareas de modo que los derechos puedan ser fácilmente compartidos entre los\n" +"roles.\n" +"\n" +"Para una descripción más completa de los controles de acceso vea\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EJEMPLOS:\n" +"\n" +"AVISO: Los ACIs se añaden ahora por medio del plugin permisos. Estos " +"ejemplos\n" +"son para demostrar como trabajan diversas opciones pero esto está hecho por\n" +"medio de los permisos de linea de comandos ahora (vea último ejemplo).\n" +"\n" +" Añadir un ACI de modo que el grupo \"secretaries\" pueda actualizar la " +"dirección de cualquier usuario:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Mostrar el nuevo ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Añadir un ACI que permita a los miembros del permiso \"addusers\" añadir " +"nuevos usuarios:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Añadir un ACI que permita a los miembros de los editores manejar miembros " +"del grupo admins:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Añadir un ACI que permita a los miembros del grupo admins manejar la calle " +"y el código postal de los que estén en el grupo editors:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Añadir un ACI que permita a los miembros del grupo admins manejar la calle " +"y el código postal de aquellos que trabajan para el jefe:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Añadir un clase de registro totalmente nueva para IPA que no esté cubierta " +"por ninguna de las opciones –type, creando un permiso:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"El comando show muestra el ACI 389-ds en bruto.\n" +"\n" +"IMPORTANTE: Cuando modifique los atributos target de un ACI existente debe\n" +"incluir todos los atributos existentes también. Cuando haga un aci-mod " +"targetattr\n" +"REEMPLAZA los atributos actuales, no los añade.\n" + +#, fuzzy +#| msgid "" +#| "Comma-separated list of permissions to grant (read, write, add, delete, " +#| "all)" +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" +"Lista separada por comas de permisos a obtener (lectura, escritura, borrado, " +"todos)" + +msgid "Comma-separated list of attributes" +msgstr "Lista separada por comas de atributos" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Group to Group Delegation\n" +#| "\n" +#| "A permission enables fine-grained delegation of permissions. Access " +#| "Control\n" +#| "Rules, or instructions (ACIs), grant permission to permissions to " +#| "perform\n" +#| "given tasks such as adding a user, modifying a group, etc.\n" +#| "\n" +#| "Group to Group Delegations grants the members of one group to update a " +#| "set\n" +#| "of attributes of members of another group.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a delegation rule to allow managers to edit employee's addresses:\n" +#| " ipa delegation-add --attrs=street --group=managers --" +#| "membergroup=employees \"managers edit employees' street\"\n" +#| "\n" +#| " When managing the list of attributes you need to include all attributes\n" +#| " in the list, including existing ones. Add postalCode to the list:\n" +#| " ipa delegation-mod --attrs=street --attrs=postalCode --group=managers " +#| "--membergroup=employees \"managers edit employees' street\"\n" +#| "\n" +#| " Display our updated rule:\n" +#| " ipa delegation-show \"managers edit employees' street\"\n" +#| "\n" +#| " Delete a rule:\n" +#| " ipa delegation-del \"managers edit employees' street\"\n" +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" +"\n" +"Grupo a Delegación de Grupo\n" +"\n" +"Un permiso habilita una delegación de grano fino de permisos. Reglas de " +"Control\n" +"de Acceso o instrucciones (ACIs), otorgan permisos a los permisos para " +"llevar a\n" +"cabo tareas dadas como añadir un usuario, modificar un grupo, etc.\n" +"\n" +"Grupo a Delegaciones de Grupo concede a los miembros de un grupo para\n" +"actualizar un conjunto de atributos de miembros de otro grupo.\n" +"\n" +"EJEMPLOS:\n" +"\n" +"Añadir una regla de delegación para permitir a los gestores editar las " +"direcciones de los empleados:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Cuando gestiona una lista de atributos usted necesita incluir todos los " +"atributos en \n" +" la lista, incluyendo los existentes. Añadir postalCode a la lista:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Mostrar nuestra regla actualizada:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Borrar una regla:\n" +" ipa delegation-del \"managers edit employees' street\"\n" + +#, fuzzy +#| msgid "" +#| "Comma-separated list of permissions to grant (read, write, add, delete, " +#| "all)" +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" +"Lista separada por comas de permisos a obtener (lectura, escritura, borrado, " +"todos)" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Global forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Promotores globales. Se puede especificar un pueeto personalizado por cada " +"promotor usando el formato estándar \"IP_ADDRESS port PORT\"" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" +"Un intervalo entre preguntas regulares del servidor de nombre sobre nuevas " +"zonas DNS" + +msgid "DNS class" +msgstr "Clase DNS" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw A records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw AAAA records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw A6 records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw AFSDB records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw APL records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw CERT records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw CNAME records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw DHCID records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw DLV records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw DNAME records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw DNSKEY records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw DS records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw HIP records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw KEY records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Flags" +msgid "KEY Flags" +msgstr "Banderas" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "KEY Algorithm" +msgstr "Algoritmo" + +#, fuzzy +#| msgid "SSH public key" +msgid "KEY Public Key" +msgstr "Clave pública SSH" + +#, fuzzy +#| msgid "SSH public key" +msgid "Public Key" +msgstr "Clave pública SSH" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw KX records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw LOC records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw MX records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw NAPTR records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw NS records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw NSEC records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "NIS domain name" +msgid "NSEC Next Domain Name" +msgstr "Nombre del dominio NIS" + +#, fuzzy +#| msgid "Domain name" +msgid "Next Domain Name" +msgstr "Nombre de dominio" + +msgid "NSEC Type Map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "Tipo" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw NSEC3 records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw PTR records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw RRSIG records" +msgstr "Lista separada por comas de atributos" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "RRSIG Algorithm" +msgstr "Algoritmo" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "Signature Expiration" +msgstr "Caducidad de la contraseña" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +#, fuzzy +#| msgid "Key Tag" +msgid "RRSIG Key Tag" +msgstr "Etiqueta de clave" + +msgid "RRSIG Signer's Name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Signer's Name" +msgstr "Nombre de servidor" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw RP records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw SIG records" +msgstr "Lista separada por comas de atributos" + +msgid "SIG Type Covered" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "SIG Algorithm" +msgstr "Algoritmo" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +#, fuzzy +#| msgid "Key Tag" +msgid "SIG Key Tag" +msgstr "Etiqueta de clave" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw SPF records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw SRV records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw SSHFP records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw TA records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw TKEY records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw TSIG records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Comma-separated list of attributes" +msgid "Comma-separated list of raw TXT records" +msgstr "Lista separada por comas de atributos" + +#, fuzzy +#| msgid "Time to live" +msgid "SOA time to live" +msgstr "Tiempo para abandonar" + +#, fuzzy +#| msgid "SOA record expire time" +msgid "SOA record time to live" +msgstr "tiempo de expiración de registro SOA" + +msgid "SOA class" +msgstr "Clase SOA" + +msgid "SOA record class" +msgstr "Clase de registro SOA " + +#, fuzzy +#| msgid "" +#| "Per-zone forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Expedidores por zona. Se puede especificar un puerto personalizado para cada " +"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" msgid "" "\n" @@ -2538,79 +14278,1041 @@ msgstr "" "Los cambios en /etc/rhsm/rhsm.conf requieren un reinicio del servicio " "httpd.\n" -msgid "" -"\n" -"Get information about installed IPA servers.\n" +msgid "Consume an entitlement." +msgstr "Consumir un derecho." + +msgid "Quantity" +msgstr "Cantidad" + +msgid "Search for entitlement accounts." +msgstr "Búsqueda por cuentas de derechos." + +msgid "Retrieve the entitlement certs." +msgstr "Recuperar el certificado del derecho." + +msgid "Import an entitlement certificate." +msgstr "Importar un certificado de derecho." + +msgid "UUID" +msgstr "UUID" + +msgid "Enrollment UUID" +msgstr "Inscripción UUID" + +msgid "Register to the entitlement system." +msgstr "Registro al sistema de derechos." + +msgid "Username" +msgstr "Nombre de usuario" + +msgid "Enrollment UUID (not implemented)" +msgstr "Inscripción de UUID (no implementada)" + +msgid "Registration password" +msgstr "Contraseña de registro" + +msgid "Display current entitlements." +msgstr "Mostrar los derechos actuales." + +msgid "Re-sync the local entitlement cache with the entitlement server." msgstr "" -"\n" -"Obtener información sobre los servidores IPA instalados.\n" +"Volver a sincronizar el cache de derechos local con el servidor de derechos." msgid "" "\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" +"Groups of users\n" "\n" -"Obtener el estado de los roles (servidor DNS, CA, etc.) suministrado por los " -"IPA maestros.\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "Miembros de un dominio de confianza en formato DOM\\name o name@domain" + +msgid "comma-separated list of users to add" +msgstr "lista separada por comas de usuarios a añadir" + +msgid "comma-separated list of groups to add" +msgstr "listas separada por comas de grupos a añadir" + +msgid "comma-separated list of users to remove" +msgstr "lista separada por comas de usuarios a quitar" + +msgid "comma-separated list of groups to remove" +msgstr "lista separada por comas de grupos a quitar" msgid "" "\n" -"Group to Group Delegation\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "Source host category" +msgstr "Categoría del equipo" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Source host category the rule applies to" +msgstr "Categoría del equipo al que se aplica la regla" + +msgid "Source Hosts" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "Source Host Groups" +msgstr "Grupos de equipo" + +msgid "comma-separated list of hosts to add" +msgstr "lista separada por comas de hosts a añadir" + +msgid "comma-separated list of host groups to add" +msgstr "lista separada por comas de grupos de host a añadir" + +#, fuzzy +#| msgid "comma-separated list of users to add" +msgid "comma-separated list of HBAC services to add" +msgstr "lista separada por comas de usuarios a añadir" + +#, fuzzy +#| msgid "comma-separated list of groups to add" +msgid "comma-separated list of HBAC service groups to add" +msgstr "listas separada por comas de grupos a añadir" + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." + +msgid "comma-separated list of hosts to remove" +msgstr "lista separada por comas de hosts a quitar" + +msgid "comma-separated list of host groups to remove" +msgstr "lista separada por comas de grupos de host a quitar" + +#, fuzzy +#| msgid "comma-separated list of users to remove" +msgid "comma-separated list of HBAC services to remove" +msgstr "lista separada por comas de usuarios a quitar" + +#, fuzzy +#| msgid "comma-separated list of groups to remove" +msgid "comma-separated list of HBAC service groups to remove" +msgstr "lista separada por comas de grupos a quitar" + +#, fuzzy +#| msgid "Remove target hosts and hostgroups from an HBAC rule." +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "Borrar hosts objetivos y grupos de host de una regla HBAC." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +#, fuzzy +#| msgid "Target host" +msgid "Source host" +msgstr "Host objetivo" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Objectclasses used to search for user entries in DS" +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "Objectclasses usado para buscar entradas de usuario en DS" + +#, fuzzy +#| msgid "Objectclasses used to search for group entries in DS" +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "Objectclasses usado para buscar entradas de grupo en DS" + +#, fuzzy +#| msgid "Objectclasses to be ignored for user entries in DS" +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "Objectclasses a se ignorado para entradas de usuario en DS" + +#, fuzzy +#| msgid "Attributes to be ignored for user entries in DS" +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "Atributos a ignorar para las entradas de usuario en DS" + +#, fuzzy +#| msgid "Objectclasses to be ignored for group entries in DS" +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "Objectclasses a ignorar para las entradas de grupo en DS" + +#, fuzzy +#| msgid "Attributes to be ignored for group entries in DS" +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "Atributos a ignorar para las entradas de grupo en DS" + +#, fuzzy +#| msgid "comma-separated list of groups to remove" +msgid "comma-separated list of groups to exclude from migration" +msgstr "lista separada por comas de grupos a quitar" + +#, fuzzy +#| msgid "comma-separated list of users to remove" +msgid "comma-separated list of users to exclude from migration" +msgstr "lista separada por comas de usuarios a quitar" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Netgroups\n" +#| "\n" +#| "A netgroup is a group used for permission checking. It can contain both\n" +#| "user and host values.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new netgroup:\n" +#| " ipa netgroup-add --desc=\"NFS admins\" admins\n" +#| "\n" +#| " Add members to the netgroup:\n" +#| " ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +#| "\n" +#| " Remove a member from the netgroup:\n" +#| " ipa netgroup-remove-member --users=tuser2 admins\n" +#| "\n" +#| " Display information about a netgroup:\n" +#| " ipa netgroup-show admins\n" +#| "\n" +#| " Delete a netgroup:\n" +#| " ipa netgroup-del admins\n" +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" +"\n" +"Netgroups\n" +"\n" +"Un netgroup es un grupo usado para comprobación de permisos. Puede contener\n" +"valores tanto de usuario como de host.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Añadir miembros al netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Quitar un miembro del netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Mostrar información sobre un netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Borrar un netgroup:\n" +" ipa netgroup-del admins\n" + +#, fuzzy +#| msgid "comma-separated list of groups to add" +msgid "comma-separated list of netgroups to add" +msgstr "listas separada por comas de grupos a añadir" + +#, fuzzy +#| msgid "comma-separated list of groups to remove" +msgid "comma-separated list of netgroups to remove" +msgstr "lista separada por comas de grupos a quitar" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +"Permisos\n" +"\n" +"Un permiso habilita una delegación de grano fino de derechos. Un permiso es " +"un formato\n" +"legible por el hombre de una Regla de Control de Acceso (ACL) 389-ds o una " +"instrucción (ACI).\n" +"Un permiso otorga el derecho de llevar a cabo una tarea específica como " +"añadir un\n" +"usuario, modificar un grupo, etc.\n" +"\n" +"Un permiso puede contener otros permisos.\n" +"\n" +"* Un permiso otorga acceso de escritura, lectura, añadir o borrar.\n" +"* Un privilegio combina permisos similares (por ejemplo los permisos " +"necesarios para \n" +" añadir un usuario).\n" +"* Un rol otorga un conjunto de privilegios a usuarios, grupos, hosts o " +"grupos de hosts.\n" +"\n" +"Un permiso consta de diversas partes:\n" +"\n" +"1. El nombre del permiso.\n" +"2. El objetivo del permiso.\n" +"3. Los derechos otorgados por el permiso.\n" +"\n" +"Los derechos definen que operaciones están permitidas y pueden ser una o más " +"de las\n" +"siguientes:\n" +"1. write - escribir uno o más atributos\n" +"2. read - leer uno o más atributos\n" +"3. add - añadir una nueva entrada al árbol\n" +"4. delete - borrar una entrada existente\n" +"5. all - se otorgan todos los permisos\n" +"\n" +"El permiso de lectura se otorga para la mayoría de los atributos por " +"defectos de modo que\n" +"el permiso de lectura no se espera que use con frecuencia.\n" +"\n" +"Advierta la distinción entre atributos y entradas. Los permisos son " +"independientes, de\n" +"modo que ser capaz de añadir un usuario no siginifica que el usuario será " +"editable.\n" +"\n" +"Hay diversos objetivos permitidos:\n" +"1. type: un tipo de objeto (usuario, grupo, etc).\n" +"2. memberof: un miembro de un grupo o grupo de host\n" +"3. filter: un filtro LDAP\n" +"4. subtree: un filtro LDAP especificando parte del LDAP DIT. Esto es un " +"superconjunto del\n" +" objetivo \"type\".\n" +"5. targetgroup: otorga acceso a modificar un grupo específico (como " +"obteniendo\n" +" derechos para manejar la pertenencia al grupo)\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un permiso que otorga la creación de usuarios:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Añadir un permiso que otorga la capacidad de manejar la pertenencia al " +"grupo:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" +"Lista separada por comas de permisos a obtener (lectura, escritura, borrado, " +"todos)" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" +"Tipo de objeto IPA (usuario, grupo, host, grupo de host, servicio, grupo de " +"red, dns)" + +msgid "Target members of a group" +msgstr "Miembros objetivo de un grupo" + +msgid "User group to apply permissions to" +msgstr "Grupo de usuario a aplicar los permisos para" + +msgid "comma-separated list of privileges to add" +msgstr "lista separada por comas de privilegios a añadir" + +msgid "Add a system permission without an ACI" +msgstr "Añadir un permiso al sistema sin un ACI" + +msgid "Permission type" +msgstr "Tipo de permiso" + +msgid "comma-separated list of privileges to remove" +msgstr "lista separada por comas de privilegios a borrar" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" +"\n" +"Haga ping al servidor IPA remoto para asegurar que está corriendo.\n" +"\n" +"El comando ping envía una petición de eco a un servidor IPA. El servidor " +"devuelve su\n" +"información de versión. Esto se usa por un cliente IPA para confirmar que el " +"servidor está\n" +"disponible y acepta peticiones.\n" +"\n" +"El servidor desde xmlrpc_uri en /etc/ipa/default.conf es contactado primero. " +"Si no\n" +"el cliente contactará con cualquier de los servidores definidos por los " +"registros ldap SRV\n" +"en DNS.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Ping a un servidor IPA:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping a un servidor IPA verbosamente:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" + +#, fuzzy +#| msgid "comma-separated list of groups to add" +msgid "comma-separated list of roles to add" +msgstr "listas separada por comas de grupos a añadir" + +#, fuzzy +#| msgid "comma-separated list of users to add" +msgid "comma-separated list of permissions" +msgstr "lista separada por comas de usuarios a añadir" + +#, fuzzy +#| msgid "comma-separated list of groups to remove" +msgid "comma-separated list of roles to remove" +msgstr "lista separada por comas de grupos a quitar" + +#, fuzzy +#| msgid "comma-separated list of privileges to add" +msgid "comma-separated list of privileges" +msgstr "lista separada por comas de privilegios a añadir" + +msgid "" +"\n" +"Self-service Permissions\n" "\n" "A permission enables fine-grained delegation of permissions. Access Control\n" "Rules, or instructions (ACIs), grant permission to permissions to perform\n" "given tasks such as adding a user, modifying a group, etc.\n" "\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" "\n" "EXAMPLES:\n" "\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" "\n" " When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" "\n" " Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" +" ipa selfservice-show \"Users manage their own address\"\n" "\n" " Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" +" ipa selfservice-del \"Users manage their own address\"\n" msgstr "" "\n" -"Grupo a Delegación de Grupo\n" +"Auto servicio de Permisos\n" "\n" -"Un permiso habilita una delegación de grano fino de permisos. Reglas de " -"Control\n" -"de Acceso o instrucciones (ACIs), otorgan permisos a los permisos para " -"llevar a\n" -"cabo tareas dadas como añadir un usuario, modificar un grupo, etc.\n" +"Un permiso habilita una delegación de grano fino de permisos. Las Reglas de " +"Control de\n" +"Acceso o instrucciones (ACIs), conceden permisos a los permisos para llevar " +"a cabo tareas\n" +"dadas como añadir un usuario, modificar un grupo, etc.\n" +"\n" +"Un Permiso de Auto servicio define lo que un objeto puede cambiar en su " +"propia entrada.\n" "\n" -"Grupo a Delegaciones de Grupo concede a los miembros de un grupo para\n" -"actualizar un conjunto de atributos de miembros de otro grupo.\n" "\n" "EJEMPLOS:\n" "\n" -"Añadir una regla de delegación para permitir a los gestores editar las " -"direcciones de los empleados:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" Añadir una regla de auto servicio para permitir a los usuarios gestionar " +"sus direcciones:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Los usuarios maejan sus propias direcciones\"\n" "\n" -" Cuando gestiona una lista de atributos usted necesita incluir todos los " -"atributos en \n" -" la lista, incluyendo los existentes. Añadir postalCode a la lista:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" Cuando maneje una lista de atributos usted necesita incluir todos los " +"atributos en la lista, incluyendo los existentes. Añadir un Número de " +"teléfono a la lista:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Los usuarios manejan sus propias direcciones\"\n" "\n" -" Mostrar nuestra regla actualizada:\n" -" ipa delegation-show \"managers edit employees' street\"\n" +" Visualizar nuestra regla actualizada:\n" +" ipa selfservice-show \"Los Usuarios manejan sus propias direcciones\"\n" "\n" " Borrar una regla:\n" -" ipa delegation-del \"managers edit employees' street\"\n" +" ipa selfservice-del \"Los usuarios manejan sus propias direcciones\"\n" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" +"\n" +"Servicios\n" +"\n" +"Un servicio IPA representa un servicio que corre en un host. El registro del " +"servicio IPA\n" +"puede almacenar un principal Kerberos, un certificado SSL a ambos.\n" +"\n" +"Un servicio IPA puede ser manejado directamente desde una máquina, siempre " +"que la\n" +"máquina haya recibido los permisos correctos. Esto es cierto aún para " +"máquinas distintas\n" +"a aquella a la que el servicio está asociado. Por ejemplo, pidiendo un " +"certificado SSL\n" +"usando las credenciales de servicio principal de host del anfitrión. Para " +"manejar un\n" +" servicio usando las credenciales del anfitrión usted necesita tokinit como " +"el anfitrión:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Añadir un servicio IPA permite al servicios asociado pedir un certificado " +"SSL o keytab, pero esto se lleva a cabo como un paso separado; esto no se " +"produce como resultado de añadir el servicio.\n" +"\n" +"Solo se almacena el aspecto público de un certificado en un registro de " +"servicio la clave\n" +"privada no se almacena.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo servicio IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Permitir a un host manejar un certificado de servicio IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Anular una lista predeterminada de tipos PAC soportados para el servicio:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Borrar un servicio IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Encontrar todos los servicios IPA asociados con un host:\n" +" ipa service-find web.example.com\n" +"\n" +" Encontrar todos los servicios HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Deshabilitar la clave del servicio Kerberos y el certificado SSL:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Pedir un certificado para un servicio IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generar y recuperar una keytab para un servicio IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" +"Anular una lista predeterminada de tipos PAC soportados. Use 'NONE' para " +"deshabilitar eñ soporte PAC para este servicio" msgid "" "\n" @@ -2659,351 +15361,1394 @@ msgstr "" " Mostrat un Grupo de Comando Sudo:\n" " ipa group-show localadmins\n" -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" +msgid "comma-separated list of sudo commands to add" +msgstr "lista separada or comas de comandos sudo a añadir" + +msgid "comma-separated list of sudo commands to remove" +msgstr "lista separada por comas de comandos sudo a quitar" + +#, fuzzy +#| msgid "Active Directory domain administrator's password" +msgid "Active directory domain administrator's password" +msgstr "Contraseña del administrador de dominio Active Directory" + +msgid "GECOS field" msgstr "" -"\n" -"Servicios de HBAC\n" -"\n" -"Los servicios PAM a los que HBAC puede controlar el acceso. El nombre " -"utilizado aquí debe coincidir\n" -"con el nombre del servicio que PAM está evaluando.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo servicio:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modificar un servicio de HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Buscar servicios para HBAC. Este ejemplo retornará dos resultados, el " -"servicio FTP\n" -" y el servicio recién añadido tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Borrar un servicio de HBAC:\n" -" ipa hbacsvc-del tftp\n" -"\n" msgid "" "\n" -"Hosts/Machines\n" +"ID ranges\n" "\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" msgstr "" -"\n" -"Hosts/Máquinas\n" -"\n" -"Un host representa una máquina. Puede ser usado en distintos contextos:\n" -"- las entradas de servicio están asociadas con un host\n" -"- un host almacena el host/ servicio principal\n" -"- un host puede ser usado en reglas de Control de Acceso basado en Host " -"(HBAC)\n" -"- cada cliente inscrito genera una entrada de host\n" msgid "" "\n" -"IPA certificate operations\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " msgstr "" "\n" -"Operaciones de certificado IPA\n" +"Añadir un nuevo rango de ID.\n" +"\n" +" Para añadir un nuevo rango de ID siempre debe especificar\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Adicionalmente\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" puede ser dado para un nuevo rango de ID para el dominio local mientras\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" deben ser dados para añadir un nuevo rango para un AD de dominio de " +"confianza.\n" +"\n" +" PRECAUCIÓN:\n" +"\n" +" El plugin DNA en 389-ds ubicará IDs en base a los rangos configurados " +"para el dominio\n" +" local. Actualmente el plugin DNA \"no puede\" ser reconfigurado por si " +"mismo en base a\n" +" los rangos locales ajustados por medio de esta familia de comandos.\n" +"\n" +" El cambio manual de configuración ha sido hecho en la configuración del " +"plugin DNA\n" +" para el nuevo rango local. Específicamente, el atributo dnaNextRange de " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' ha " +"sido\n" +" modificado para coincidir con el nuevo rango.\n" +" " msgid "" "\n" -"IPA locations\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" msgstr "" "\n" -"Localizaciones IPA\n" +"Reglas Sudo\n" +"\n" +"Sudo (su \"do\") permite a un administrador de sistema delegar autoridad a " +"ciertos\n" +"usuarios dados(o grupos de usuarios) para tener la posibilidad de ejecutar " +"algunos (o\n" +" todos) los comandos como root u otro usuario mientras suministra pistas de " +"auditoria de\n" +" los comandos y sus argumentos.\n" +"\n" +"IPA proporciona un medio para configurar diversos aspectos de Sudo:\n" +" Users: Los usuario(s)/grupos(s) que tienen permitido llamar a Sudo.\n" +" Hosts: Loshost(s)/grupo(s) de host a los que el usuario permite llamar a " +"Sudo.\n" +" Allow Command: El comando(s) específico que tiene permitido ejecutarse " +"por medio de Sudo.\n" +" Deny Command: El comando(s) específico que tiene prohibido ejecutarse por " +"medio de Sudo.\n" +" RunAsUser: El usuario(s) o grupo(s) de usuarios con cuyos derechos será " +"invocado Sudo.\n" +" RunAsGroup: El grupo(s) con cuyos derechos gid será invocado Sudo.\n" +" Options: Las diversas opciones Sudoers que pueden modificar el " +"comportamiento de Sudo.\n" +"\n" +"Su puede aadir un orden a una regla sudo para controlar el orden en el que " +"será evaluada\n" +"(si el cliente lo soporta). Este orden es un entero y debe ser único.\n" +"\n" +"IPA suministra un binddn designado para usar con Sudo situado en :\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Para habilitar el binddn ejecute el siguiente comando para fijar la " +"contraseña:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"Para más información, vea la Documentación IPA para Sudo.\n" + +msgid "comma-separated list of sudo command groups to add" +msgstr "lista separada por comas de grupos de comandos sudo a añadir" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "lista separada por comas de grupos de comandos sudo a quitar" + +msgid "Additional instructions:" +msgstr "Instrucciones adicionales:" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"Número de Versión API no fue enviado, la compatibilidad de envío no está " +"garantizada. Asumiendo la versión API del servidor, %(server_version)s" msgid "" -"\n" -"IPA server roles\n" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" -"\n" -"Roles del servidor IPA\n" +"Las semánticas del promotor cambió desde IPA 4.0.\n" +"Usted puede desear usar las zonas de envío (dnsforwardzone-*) en su lugar.\n" +"Lea los documentos para más detalles." + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"El soporte DNSSEC es experimental.\n" +"%(additional_info)s" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s' opción obsoleta. %(additional_info)s" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"La semántica de %(label)s fue cambiada. %(current_behavior)s\n" +"%(hint)s" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "Servidor DNS %(server)s: %(error)s." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Servidor DNS %(server)s no soporta DNSSEC: %(error)s.\n" +"Si está habilitada la validación DNSSEC sobre servidor(es) IPA, " +"deshabilitélo por favor." + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"zona de envío \"%(fwzone)s\" no es efectiva por desaarición de la delegacion " +"NS apropiada en zona autorizada \"%(authzone)s\". Por favor añada registro " +"NS record \"%(ns_rec)s\" a la zona padre \"%(authzone)s\"." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Servidor DNS %(server)s no soporta EDNS0 (RFC 6891): %(error)s.\n" +"Si la validación DNSSEC está habilitada sobre servidor(es) IPA, por favor " +"deshabilitélo." + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Fallo en la validación DNSSEC: %(error)s.\n" +"Por favor verifique su configuración DNSSEC o deshabilite la validación " +"DNSSEC en todos los servidores IPA." + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"El registro _kerberos TXT del dominio %(domain)s podría no ser creado " +"(%(error)s).\n" +"Esto puede suceder si la zona no es manejada por IPA. Por favor cree el " +"registro manualmente, conteniendo el siguiente valor: '%(realm)s'" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"El registro _kerberos TXT del dominio %(domain)s podría no ser quitado " +"(%(error)s).\n" +"Esto puede suceder si la zona no está manejada por IPA. Por favor quite el " +"registro manualmente." msgid "" -"\n" -"IPA servers\n" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." msgstr "" -"\n" -"IPA servers\n" +"No se ha instalado clave maestra DNSSEC. La firma en la zona DNSSEC no " +"trabajará hasta que esté instalada la clave maestra DNSSEC." + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"El nombre relativo de registro '%(record)s' contiene como sufijo el nonbre " +"de zona '%(zone)s', que resulta de FQDN '%(fqdn)s'. Esto es normalmente una " +"equivocación causada por un punto perdido al final de la especificación del " +"nombre." + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' es obsoleto. %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Los resultados de la búsqueda han sido truncados: %(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Su confianza en %(domain)s se ha roto. Vuelva a creara ejecutando 'ipa trust-" +"add' otra vez." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "Registro(s) DNS del host %(host)s podría no ser removido. (%(reason)s)" msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." msgstr "" -"\n" -"IPA soporta el uso de fichas OTP para la autenticación de varios factores. " -"Este\n" -"código habilita la gestión de las fichas OTP.\n" +"Conflictos de la política de envío con algunas zonas vacías automáticas. Las " +"peticiones para las zonas especificadas por RFC 6303 ignorarán el envío y " +"recursión y siempre tendrán por resultado respuestas NXDOMAIN. Para evitar " +"este comportamiento use la política de envío 'only'." + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"Actualización del registro del sistema '%(record)s' falló con error: " +"%(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA no maneja la zona %(zone)s, por favor añada registros a su servidor DNS " +"manualmente" msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." msgstr "" -"\n" -"IPA soporta el uso de servidores proxy RADIUS externos para autenticaciones " -"krb5\n" -"OTP. Esto permite una gran oferta de flexibilidad cuando se integra con " -"servicios de \n" -"autenticación de tercera parte.\n" +"Actualización automática de registros DNS del sistema falló. Por favor " +"vuelva a ejecutar manualmente la actualización de registros del sistema para " +"obtener la lista de los registros desaparecidos." + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"El servicio %(service)s requiere ser reiniciado sobre el servidor IPA " +"%(server)s para aplicar los cambios de configuración." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"No hay servidores DNS en la localización IPA %(location)s. Sin la " +"localización de servidores DNS no se trabaja como se espera." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: Certificado mal formado. %(reason)s" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "El host fue añadido pero la actualización DNS falló por: %(reason)s" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "El certificado para %(ca)s no está disponible en este servidor." + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d variables" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d complemento cargado" +msgstr[1] "%(count)d complementos cargados" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Ingrese %(label)s nuevamente para verificar: " + +msgid "Passwords do not match!" +msgstr "Las contraseñas no coinciden." + +msgid "No matching entries found" +msgstr "No se encontraron entradas coincidentes" + +msgid "Topic or Command" +msgstr "Tópico o Comando" + +msgid "The topic or command name." +msgstr "Nombre de tópico o comando." + +msgid "Topic commands:" +msgstr "Tema comandos:" + +msgid "To get command help, use:" +msgstr "Para obtener ayuda sobre el comando, utilice:" + +msgid " ipa --help" +msgstr " ipa --help" + +msgid "Command name" +msgstr "Nombre del comando" + +msgid "Positional arguments" +msgstr "Argumentos posicionales" + +#, python-format +msgid "Same as --%s" +msgstr "Lo mismo que --%s" + +msgid "Deprecated options" +msgstr "Opciones obsoletas" + +msgid "No file to read" +msgstr "No existe el fichero para leer" + +msgid "A dictionary representing an LDAP entry" +msgstr "Un diccionario representando una entrada LDAP" + +msgid "A list of LDAP entries" +msgstr "Una lista de entradas LDAP" + +msgid "All commands should at least have a result" +msgstr "Todos los comandos deberían por lo menos tener un resultado" + +msgid "Results are truncated, try a more specific search" +msgstr "" +"Los resultados se encuentran truncados, intente realizar una búsqueda más " +"específica" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Opción desconocida: %(option)s" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Versión de cliente. Se utiliza para determinar si el servidor va a aceptar " +"la solicitud." + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "%(cver)s cliente incompatible con servidor %(sver)s en '%(server)s'" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "error %(code)d desconocido de %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "ha ocurrido un error interno" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "ha ocurrido un error interno en el servidor en '%(server)s'" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "comando desconocido '%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "error sobre el servidor '%(server)s': %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "no se pudo conectar a '%(uri)s': %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Petición JSON-RPC no válida: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "error de clasificación para el transporte de datos XML-RPC: %(error)s " + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Arbitro HTTP desaparecido o no válido, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" +"La codificación del sistema debe ser UTF-8, '%(encoding)s' no está(n) " +"soportada(s). Ajuste LC_ALL=\"C.UTF-8\", o LC_ALL=\"\" y LC_CTYPE=\"C." +"UTF-8\"." + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Error de kerberos: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "no se ha recibido ninguna credencial de Kerberos" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" +"El servicio '%(service)s' no se encontró en la base de datos de Kerberos" + +msgid "No credentials cache found" +msgstr "No se han encontrado credenciales de cache" + +msgid "Ticket expired" +msgstr "El ticket ha expirado" + +msgid "Credentials cache permissions incorrect" +msgstr "Los permisos de credenciales de caché son incorrectos" + +msgid "Bad format in credentials cache" +msgstr "Las credenciales de caché están mal formadas" + +msgid "Cannot resolve KDC for requested realm" +msgstr "No es posible resolver KDC para el reinado solicitado" + +msgid "Session error" +msgstr "Error de sesión" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "El principal %(principal)s no puede ser autenticado: %(message)s" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Acceso insuficiente: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "comando '%(name)s' no toma argumentos" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "comando '%(name)s' toma la mayoria %(count)d argumento" +msgstr[1] "comando '%(name)s' toma la mayoría %(count)d argumentos" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "superposición de argumentos y opciones: %(names)s" + +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' se requiere" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "'%(name)s' inválido: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "api no tiene dicho espacio de nombres: '%(name)s'" + +msgid "Passwords do not match" +msgstr "Las contraseñas no coinciden" + +msgid "Command not implemented" +msgstr "El comando no se ha implementado" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "El cliente no está configurado. Ejecutar la API de cliente a instalar." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "No se pudo obtener %(name)s interactivamente" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "Comando '%(name)s' es obsoleto" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "Dominio '%(domain)s' no es el dominio raíz para el bosque '%(forest)s'" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Esta entrada ya existe" + +msgid "You must enroll a host in order to create a host service" +msgstr "Debe registrar el equipo para poder generar un servicio de host" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"El servicio principal no tiene la forma de servicio/nombre de equipo " +"totalmente calificado: %(reason)s" msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" +"The realm for the principal does not match the realm for this IPA server" msgstr "" -"\n" -"IPA soporta el uso de certificados para la autenticación. Las certificados " -"pueden ser\n" -"bien almacenados en la entrada del usuario (el certificado completo en el " -"atributo\n" -"usercertificate) o simplemente enlazado a la entrada de usuario a través de " -"un\n" -"mapeo. Esta código habilita la gestión de las reglas permitiendo enlazar un\n" -"certificado a una entrada de usuario.\n" +"El reinado para el principal no coincide con el reinado para este servidor " +"IPA" + +msgid "This command requires root access" +msgstr "Este comando necesita acceso de usuario root" + +msgid "This is already a posix group" +msgstr "Este ya es un grupo posix" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "El principal no es de la forma user@REALM: '%(principal)s'" + +msgid "This entry is already enabled" +msgstr "Esta entrada ya está habilitada" + +msgid "This entry is already disabled" +msgstr "Esta entrada ya está desactivada" + +msgid "This entry cannot be enabled or disabled" +msgstr "Esta entrada no puede ser activada o desactivada" + +msgid "This entry is not a member" +msgstr "Esta entrada no es miembro" + +msgid "A group may not be a member of itself" +msgstr "Un grupo no puede ser miembro de sí mismo" + +msgid "This entry is already a member" +msgstr "Esta entrada ya es un miembro" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Falló la decodificación base64: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Un grupo no puede ser agregado como miembro de sí mismo" + +msgid "The default users group cannot be removed" +msgstr "El grupo de usuarios predeterminado no puede ser eliminado" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"No se permite eliminar un grupo administrado. Primero debe ser desasociado. " + +msgid "A managed group cannot have a password policy." +msgstr "Un grupo administrado no puede tener una política de contraseñas." + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s' no tiene certificado" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "No se puede crear un grupo privado. Un grupo de '%(group)s' ya existe." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Se encontró un problema al verificar si todos los miembros eran %(verb)s: " +"%(exc)s" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s no contiene '%(value)s'" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"El criterio de búsqueda no fue bastante específico. Se esperaba 1 y se " +"encontró %(found)d." + +msgid "This group already allows external members" +msgstr "Este grupo ya acepta miembros externos" + +msgid "This group cannot be posix because it is external" +msgstr "Este grupo o puede ser posix porque es externo" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "Esto es ya un grupo posix y no puede ser convertido en uno externo" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Borrado del servidor abortado: %(reason)s." + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s no está soportada para principal %(principal_type)s" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "Fallo en petición con estado %(status)s: %(reason)s" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" +"El conjunto de reglas de mapeo \"%(ruleset)s\" tiene más de una regla para " +"el auxiliar %(helper)s" + +#, fuzzy, python-format +#| msgid "%(attr)s does not contain '%(value)s'" +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s no contiene '%(value)s'" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "ni comando no tópico de ayuda '%(topic)s'" + +msgid "change collided with another change" +msgstr "la modificación choca con otra modificación diferente" + +msgid "no modifications to be performed" +msgstr "no existen modificaciones a ser realizadas" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s:%(info)s" + +msgid "limits exceeded for this query" +msgstr "han sido excedidos los límites para esta consulta" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "modificar la clave principal no está permitido" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr " %(attr)s : Solamente un valor permitido." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: sintaxis inválida." + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "%(info)s de filtro de búsqueda errado" + +msgid "Not allowed on non-leaf entry" +msgstr "No permitido sobre entrada no hoja" + +msgid "LDAP timeout" +msgstr "Tiempo de espera LDAP" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "Tiempo de espera de la tares LDAP %(task)s, Task DN: '%(task_dn)s'" + +msgid "Configured time limit exceeded" +msgstr "El tiempo límite configurado sobrepasado" + +msgid "Configured size limit exceeded" +msgstr "Tamaño límite configurado sobrepasado" + +msgid "Configured administrative server limit exceeded" +msgstr "Límite administrativo del servidor configurado sobrepasado" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "La operación certificada no puede ser completada: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Error de certificado de formato: %(error)s " + +msgid "Already registered" +msgstr "Ya está registrado" + +msgid "Not registered yet" +msgstr "Aún no está registrado" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"No se puede eliminar %(key)s porque %(label)s %(dependent)s lo requiere" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s no puede ser borrado o deshabilitado porque es el último miembro de " +"%(label)s %(container)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s no puede ser borrado/modificado: %(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "%(name)s certificado no válido" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "El esquema está actualizado (FP '%(fingerprint)s', TTL %(ttl)s s)" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "Host '%(hostname)s' no tiene el registro correspondiente DNS A/AAAA" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" +"Fallo en la comprobación DNS: Esperado {%(expected)s} obtenido {%(got)s}" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"Bosque '%(forest)s' tiene confianza existente para forest(s) %(domains)s que " +"evita una confianza en '%(conflict)s'" + +msgid "incorrect type" +msgstr "tipo incorrecto" + +msgid "Only one value is allowed" +msgstr "Sólo se permite un valor" + +msgid "this option is deprecated" +msgstr "esta opción es obsoleta" + +msgid "must be True or False" +msgstr "debe ser True o False" + +msgid "must be an integer" +msgstr "debe ser un entero" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "debe ser como mínimo %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "puede ser como máximo %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "debe ser un número decimal" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "debe ser al menos %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "puede ser como mucho %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" +"el número de clase '%(cls)s' no está incluido en una lista de los números de " +"clases permitidos: %(allowed)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "debe coincidir con el modelo \"%(pattern)s" + +msgid "must be binary data" +msgstr "debe ser un dato binario" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "debe ser como mínimo de %(minlength)d bytes" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "puede ser a lo sumo de %(maxlength)d bytes" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "debe ser exactamente de %(length)d bytes" + +msgid "must be a certificate" +msgstr "debe ser un certificado" + +msgid "must be a certificate signing request" +msgstr "debe ser una petición de firma de certificado" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" +"Falla al intentar decodificar la petición de identificación de certificado: " +"%s" + +msgid "must be Unicode text" +msgstr "debe ser texto Unicode" + +msgid "Leading and trailing spaces are not allowed" +msgstr "No están permitidos espacios iniciales ni finales" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "debe tener como mínimo %(minlength)d caracteres" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "puede tener a lo sumo %(maxlength)d caracteres" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "debe tener exactamente %(length)d caracteres" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "El carácter %(char)r no está permitido." + +#, python-format +msgid "must be '%(value)s'" +msgstr "debe ser «%(value)s»" + +#, python-format +msgid "must be one of %(values)s" +msgstr "debe ser uno de %(values)s" + +msgid "must be datetime value" +msgstr "debe ser un valor de fecha y hora" + +msgid "does not match any of accepted formats: " +msgstr "no coincide con ninguno de los formatos aceptados: " + +msgid "incomplete time value" +msgstr "valor de hora incompleto" + +msgid "must be DNS name" +msgstr "debe ser nombre DNS" + +msgid "must be absolute" +msgstr "debe ser absoluto" + +msgid "must be relative" +msgstr "debe ser relativo" + +msgid "must be dictionary" +msgstr "debe ser diccionario" + +msgid "must be Kerberos principal" +msgstr "debe ser Kerberos principal" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Principal mal construido: '%(value)s'" + +msgid "Service principal is required" +msgstr "Se requiere el servicio principal" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: fichero no encontrado" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "No es posible analizar los principales\n" + +msgid "any of the configured servers" +msgstr "cualquiera de los servidores configurados" + +msgid "Exceeded number of tries to forward a request." +msgstr "Excedido el número de intentos para enviar una petición." + +msgid "Filename is empty" +msgstr "El nombre de fichero está vacío" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "Permiso denegado:%(file)s " + +msgid "empty DNS label" +msgstr "etiqueta DNS vacía" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "La etiqueta DNS no puede ser más larga de 63 caracteres" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"sólo se permiten letras, números y %(chars)s. La etiqueta DNS no debe " +"empezar ni terminar con %(chars2)s" + +msgid "single label {}s are not supported" +msgstr "etiqueta sencilla {}s no está soportada" + +msgid "too many '@' characters" +msgstr "demasiados ‘@’ caracteres" + +msgid "cannot be longer that {} characters" +msgstr "no puede ser mayor de {} caracteres" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "el nombre de host contiene una etiqueta vacía (puntos consecutivos)" + +msgid "not fully qualified" +msgstr "no totalmente cualificado" + +msgid "invalid SSH public key" +msgstr "clave SSH pública no válida" + +msgid "options are not allowed" +msgstr "las opciones no están permitidas" + +msgid "invalid hostmask" +msgstr "máscara de host no válida" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "consulta'%(owner)s %(rtype)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "consulta '%(owner)s %(rtype)s' con EDNS0: %(error)s" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" +"respuesta a la consulta '%(owner)s %(rtype)s' tiene firmas DNSSEC " +"desaparecidas (sin datos RRSIG)" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"registro '%(owner)s %(rtype)s' fallo de validación DNSSEC sobre el servidor " +"%(ip)s" + +msgid "invalid escape code in domain name" +msgstr "código de salida no válido en el nombre de dominio" + +msgid "domain name cannot be longer than 255 characters" +msgstr "el nombre de dominio no puede ser mas largo de 255 caracteres" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "la etiqueta DNS no puede ser más larga de 63 caracteres" + +msgid "invalid domain name" +msgstr "nombre de domino no válido" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" +"el nombre de dominio '%(domain)s' debería ser normalizado a: %(normalized)s" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "nombre de dominio no válido: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"versión de dirección IP no válida (es %(value)d, debe ser " +"%(required_value)d)!" + +msgid "invalid IP address format" +msgstr "formato no válido de dirección IP" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s no es un puerto válido" msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" +"at least one value equal to the canonical principal name must be present" msgstr "" -"\n" -"Implementa un conjunto de comandos para manejar los certificados de servidor " -"SSL.\n" +"al menos un valor igual al nombre canónico principal debe estar presente" -msgid "" -"\n" -"In order to request a certificate:\n" +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" -"\n" -"Con el objetivo de pedir un certificado:\n" +"el dominio o sufijo UPN se superpone con el espacio de nombres de dominio de " +"confianza" -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" -"\n" -"Puede ser difícil manipular estos registros DNS sin hacer un error e " -"introducir un\n" -"valor no válido. El módulo DNS suministra una abstracción sobre estos " -"registros\n" -"brutos y permite manipular cada tipo RR con opciones específicas. Por cada " -"tipo\n" -"RR soportado, el módulo DNS suministra una opción estándar para manipular\n" -"unos registros brutos con el formato ---rec, e.g. --mx-rec y " -"opciones\n" -"especiales para cada parte de la estructura RR con formato ---" -",\n" -"e. g. --mx-preference and --mx-exchanger.\n" +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Fallo en recuperación de la cadena CA cert: %s" -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" -"\n" -"Uniendo un dominio IPA\n" +#, python-format +msgid "request failed with HTTP status %d" +msgstr "fallo en la petición con estado HTTP %d" -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Herramientas de informe de estados de características Kerberos PKINIT.\n" -"\n" -"Informa de los másters IPA sobre los cuales Kerberos PKINIT está habilitado " -"o deshabilitado\n" -"\n" -"EJEMPLOS:\n" -" Lista el estado PKINIT sobre todos los másters:\n" -" ipa pkinit-status\n" -"\n" -" Comprueba el estado PKINIT sobre `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" Lista todos los másters IPA con PKINIT deshabilitado:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"Para más información sobre soporte PKINIT vea:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Falló la obtención del estado de CA: %s" -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" -"\n" -"Opciones de kerberos pkinit\n" -"Activan o desactivan pkinit anónimo mediante el principal\n" -"WELLKNOWN/ANONYMOUS@REALM. El servidor debe haber sido instalado con soporte " -"pkinit.\n" -"EJEMPLOS:\n" -"Activar pkinit anónimo\n" -" ipa pkinit-anonymous enable\n" -"Desactivar pkinit anónimo:\n" -" ipa pkinit-anonymous disable\n" -"Para obtener mayor información sobre pkinit anónimo, por favor consulte: \n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -"\n" +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Fallo en la recuperación del estado CA con estado %d" -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" -"\n" -"Funciones \n" -"\n" -"Un rol se utiliza para la delegación de grano fino. Un permiso otorga la " -"capacidad de realizar tareas de bajo nivel (añadir un usuario, modificar un " -"grupo, etc.) Un privilegio combina uno o más permisos en una abstracción \n" -"de nivel superior tales como useradmin. Un useradmin sería capaz de añadir, " -"eliminar y modificar usuarios. \n" -"\n" -"Los privilegios son asignados a roles.\n" -"\n" -"Los usuarios, grupos, hosts y hostgroups pueden ser miembros de un Rol. \n" -"\n" -"Los Roles no pueden contener otros roles.\n" -"\n" -"EJEMPLOS:\n" -"\n" -"Añadir un nuevo rol: \n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege=add_user_to_default_group\n" -"junioradmin\n" -"\n" -"Agregar un grupo de usuarios a este rol:\n" -" ipa group-add --desc=\"User admins\" useradmins \n" -" ipa role-add-member --groups=useradmins junioradmin \n" -"\n" -"Mostrar información sobre el rol:\n" -" ipa role-show junioradmin\n" -"\n" -"El resultado de esto es que cualquier usuario en el grupo 'useradmins' puede " -"agregar usuarios, restablecer contraseñas o añadir un usuario al grupo de " -"usuarios predeterminado de la IPA.\n" +#, python-format +msgid "objectclass %s not found" +msgstr "clase objeto %s no encontrada" -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" -"\n" -"Manejar Autoridades de Certificado\n" +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "Incapaz de comunicar con CMS (estado %d)" +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "Acuerdo de replicación para %(hostname)s no encontrado" + +msgid "Failed to authenticate to CA REST API" +msgstr "Falló al autenticarse a CA REST API" + +msgid "automount location" +msgstr "localización automontaje" + +msgid "automount locations" +msgstr "localizaciones de automontaje" + +msgid "Automount Locations" +msgstr "Ubicaciones de automontado" + +msgid "Automount Location" +msgstr "Localización de Automontaje" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Añadida localización de automontaje \"%(value)s\"" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Borrada una localización de automontaje \"%(value)s\"" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d localización de automontaje coincidente" +msgstr[1] "%(count)d localizaciones de automontaje coincidentes" + +msgid "automount map" +msgstr "mapa de automontaje" + +msgid "automount maps" +msgstr "mapas de automontaje" + +msgid "Automount Maps" +msgstr "Mapas de montaje automático" + +msgid "Automount Map" +msgstr "Mapa de Automontaje" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Añadido mapa de automontaje \"%(value)s\"" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Borrado un mapa de automontaje \"%(value)s\"" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Modificado un mapa de automontaje \"%(value)s\"" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d mapa de automontaje coincidente" +msgstr[1] "%(count)d mapas de automontaje coincidentes" + +msgid "Automount key object." +msgstr "Objeto clave de automontaje" + +msgid "automount key" +msgstr "clave de automontaje" + +msgid "automount keys" +msgstr "claves de automontaje" + +msgid "Automount Keys" +msgstr "Llaves de montaje automático" + +msgid "Automount Key" +msgstr "Clave de Automontaje" + +#, python-format msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" msgstr "" -"\n" -"Gestionar la configuración y las reglas del Mapeo de Identidad del " -"Certificado.\n" +"El par de claves, la información debe ser único. Un nombre clave %(key)s " +"con información %(info)s ya existe" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "ya existe una llave denominada %(key)s" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "La clave de montaje automático %(key)s con info %(info)s no existe" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" +"Se ha encontrado más de una entrada con la llave %(key)s, utilice --info " +"para seleccionar una entrada específica." + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Añadida clave de automontaje \"%(value)s\"" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Añadido mapa de automontaje indirecto \"%(value)s\"" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "el punto de montaje es relativo al mapa padre, no puede empezar con /" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Borrada clave de automontaje \"%(value)s\"" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Modificada clave de automontaje \"%(value)s\"" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d clave de automontaje coincidente" +msgstr[1] "%(count)d claves de automontaje coincidentes" msgid "" "\n" @@ -3123,6 +16868,364 @@ msgstr "" " usar.\n" "\n" +msgid "CA is not configured" +msgstr "CA no está configurado" + +msgid "invalid Profile ID" +msgstr "ID de perfil no válido" + +msgid "Certificate Profile" +msgstr "Certificado de Perfil" + +msgid "Certificate Profiles" +msgstr "Certificado de Perfiles" + +msgid "Profile configuration" +msgstr "Configuración de perfil" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d perfil coincidente" +msgstr[1] "%(count)d perfiles coincidentes" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Perfil importado \"%(value)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "Los datos del perfil especifican profileId múltiples veces: %(values)s" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"ID de perfil '%(cli_value)s' no coincide con los datos de perfil " +"'%(file_value)s'" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Perfil borrado \"%(value)s\"" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "El perfil predefinido '%(profile_id)s' no puede ser borrado" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Modificado Certificado Perfil \"%(value)s\"" + +msgid "Certificate profiles cannot be renamed" +msgstr "Certificado de los perfiles no pueden ser renombrado" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "Privilegio insuficiente para modificar un certificado perfil" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "CA category" +msgstr "Categoría del equipo" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "CA category the ACL applies to" +msgstr "Categoría del equipo al que se aplica la regla" + +#, fuzzy +#| msgid "CA" +msgid "CAs" +msgstr "CA" + +#, fuzzy, python-format +#| msgid "Added HBAC rule \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "Añadida regla HBAC \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted CA \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Borrada CA \"%(value)s\"" + +#, fuzzy +#| msgid "IPA CA cannot be disabled" +msgid "default CA ACL can be only disabled" +msgstr "IPA CA no puede ser deshabilitada" + +#, fuzzy, python-format +#| msgid "Modified CA \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Modificada CA \"%(value)s\"" + +#, fuzzy +#| msgid "host category cannot be set to 'all' while there are allowed hosts" +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"la categoría de host no puede ser establecida a 'all' mientras hay host " +"permitidos" + +#, fuzzy +#| msgid "host category cannot be set to 'all' while there are allowed hosts" +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" +"la categoría de host no puede ser establecida a 'all' mientras hay host " +"permitidos" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" +"la categoría de usuario no puede ser establecida a 'all' mientras hay " +"usuarios permitidos" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"la categoría de host no puede ser establecida a 'all' mientras hay host " +"permitidos" + +#, fuzzy +#| msgid "user category cannot be set to 'all' while there are allowed users" +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"la categoría de usuario no puede ser establecida a 'all' mientras hay " +"usuarios permitidos" + +#, fuzzy, python-format +#| msgid "%(count)d CA matched" +#| msgid_plural "%(count)d CAs matched" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "%(count)d CA coincidente" +msgstr[1] "%(count)d CAs coincidentes" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Habilitada CA \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Deshabilitada CA \"%(value)s\"" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, fuzzy, python-format +#| msgid "Search for groups." +msgid "%i users or groups added." +msgstr "Buscar grupos." + +msgid "users cannot be added when user category='all'" +msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" + +#, fuzzy, python-format +#| msgid "Number of members removed" +msgid "%i user or group removed." +msgstr "Cantidad de miembros eliminados" + +#, fuzzy, python-format +#| msgid "Number of members removed" +msgid "%i users or groups removed." +msgstr "Cantidad de miembros eliminados" + +#, fuzzy, python-format +#| msgid "%(count)d hostgroup matched" +#| msgid_plural "%(count)d hostgroups matched" +msgid "%i host or hostgroup added." +msgstr "%(count)d grupo de equipos coincidente" + +#, fuzzy, python-format +#| msgid "Failed hosts/hostgroups" +msgid "%i hosts or hostgroups added." +msgstr "Host o grupo de Host fallidos" + +msgid "hosts cannot be added when host category='all'" +msgstr "hosts no puede ser añadido con categoría de host='all'" + +#, fuzzy, python-format +#| msgid "%(count)d hostgroup matched" +#| msgid_plural "%(count)d hostgroups matched" +msgid "%i host or hostgroup removed." +msgstr "%(count)d grupo de equipos coincidente" + +#, fuzzy, python-format +#| msgid "comma-separated list of host groups to remove" +msgid "%i hosts or hostgroups removed." +msgstr "lista separada por comas de grupos de host a quitar" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i service added." +msgstr "% (Count) d HBAC servicios encontrados" + +#, fuzzy, python-format +#| msgid "services" +msgid "%i services added." +msgstr "servicios" + +#, fuzzy +#| msgid "users cannot be added when user category='all'" +msgid "services cannot be added when service category='all'" +msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" + +#, fuzzy, python-format +#| msgid "Force server removal" +msgid "%i service removed." +msgstr "Forzar la eliminación del servidor" + +#, fuzzy, python-format +#| msgid "Select entries to be removed." +msgid "%i services removed." +msgstr "Las entradas seleccionadas han sido quitadas." + +#, fuzzy, python-format +#| msgid "%(count)d profile matched" +#| msgid_plural "%(count)d profiles matched" +msgid "%i profile added." +msgstr "%(count)d perfil coincidente" + +#, fuzzy, python-format +#| msgid "Failed profiles" +msgid "%i profiles added." +msgstr "Errores en los perfiles" + +#, fuzzy +#| msgid "hosts cannot be added when host category='all'" +msgid "profiles cannot be added when profile category='all'" +msgstr "hosts no puede ser añadido con categoría de host='all'" + +#, fuzzy, python-format +#| msgid "%s to remove" +msgid "%i profile removed." +msgstr "%s a eliminar" + +#, fuzzy, python-format +#| msgid "Number of privileges removed" +msgid "%i profiles removed." +msgstr "Número de privilegios eliminados" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +#, fuzzy +#| msgid "hosts cannot be added when host category='all'" +msgid "CAs cannot be added when CA category='all'" +msgstr "hosts no puede ser añadido con categoría de host='all'" + +#, fuzzy +#| msgid "Remove from CRL" +msgid "Remove CAs from a CA ACL." +msgstr "Borrar de CRL" + +#, fuzzy, python-format +#| msgid "%s to remove" +msgid "%i CA removed." +msgstr "%s a eliminar" + +#, fuzzy, python-format +#| msgid "%s to remove" +msgid "%i CAs removed." +msgstr "%s a eliminar" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +#, fuzzy +#| msgid "IPA server domain cannot be deleted" +msgid "Domain Level cannot be lowered." +msgstr "Servidor de dominio IPA no puede ser borrado" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"Sistema de Nombre de Dominio (DNS)\n" + msgid "" "\n" "Manage DNS zone and resource records.\n" @@ -3132,24 +17235,1899 @@ msgstr "" msgid "" "\n" -"Manage OTP tokens.\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" msgstr "" "\n" -"Gestionar fichas OTP.\n" +"TIPOS DE ZONA SOPORTADOS\n" +"\n" +" * Zona maestro (dnszone-*), contiene datos autoritativos.\n" +" * Zona de información (dnsforwardzone-*), envía solicitudes a otros " +"servidores \n" +" (un conjunto de servidores DNS).\n" msgid "" "\n" -"Manage RADIUS Proxy Servers.\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" msgstr "" "\n" -"Gestionar Servidores Proxy RADIUS.\n" +"USANDO OPCIONES ESTRUCTURADAS POR TIPO\n" msgid "" "\n" -"Manage YubiKey tokens.\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" msgstr "" "\n" -"Gestionar fichas YubiKey.\n" +"Hay muchos tipos de DNS RR estructurados donde los datos DNS almacenados\n" +"en el servidor LDAP no son solo un valor escalar, por ejemplo una dirección " +"IP o\n" +"un nombre de dominio, pero es una estructura de datos que puede ser con\n" +"frecuencia compleja. Un buen ejemplo es un registro LOC [RFC1876] que " +"consta\n" +"de muchas partes obligatorias y opcionales (grados,minutos, segundos de " +"latitud y longitud, altitud o precisión).\n" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" +"\n" +"Puede ser difícil manipular estos registros DNS sin hacer un error e " +"introducir un\n" +"valor no válido. El módulo DNS suministra una abstracción sobre estos " +"registros\n" +"brutos y permite manipular cada tipo RR con opciones específicas. Por cada " +"tipo\n" +"RR soportado, el módulo DNS suministra una opción estándar para manipular\n" +"unos registros brutos con el formato ---rec, e.g. --mx-rec y " +"opciones\n" +"especiales para cada parte de la estructura RR con formato ---" +",\n" +"e. g. --mx-preference and --mx-exchanger.\n" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" +"\n" +"Cuando se añade un registro, cualquiera de las opciones RR especificas o\n" +"estándar para un valor bruto se puede usar, simplemente no deben combinarse " +"en\n" +"operación de adicción. Cuando se modifica una entrada existente, se pueden " +"usar\n" +"nuevas opciones RR para cambiar una parte de un registro DNS, donde la " +"opción\n" +"estándar para el valor bruto se usa para especificar el valor modificado. El " +"siguiente\n" +"ejemplo muestra una modificación de la preferencia de un registro MX de 0 a " +"1 en\n" +"un registro sin modificación del intercambiador:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"\n" +"EJEMPLOS:\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" +"\n" +" Añadir nueva zona:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" +"\n" +" Añadir permiso de sistema que puede ser usado para delegación de privilegio " +"por zona:\n" +" ipa dnszone-add-permission example.com\n" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" +"\n" +" Modificar la zona para permitir actualizaciones dinámicas desde los propios " +"registros del host en el reino EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" +"\n" +" Este es el equivalente:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" +"\n" +" Modificar la zona para permitir transferencias de zona solo para la red " +"local:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" +"\n" +" Añadir nueva zona reversa especificada por la dirección IP de red:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" +"\n" +" Añadir segundo servidor de nombres para example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" +"\n" +" Añadir un servidor de correo para example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" +"\n" +" Añadir otro registro usando las opciones específicas de registro MX:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" +"\n" +" Añadir otro registro usando el modo interactivo (iniciado cuando dnsrecord-" +"add, dnsrecord-mod,\n" +" o dnsrecord-del son ejecutados sin opciones:\n" +" ipa dnsrecord-add example.com @\n" +" Por favor elija un tipo de recurso de registro DNS a añadir\n" +" Los tipos más comunes para este tipo de zona son: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" +"\n" +" Borrar ujn servidor de nombres previamente añadido desde example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" +"\n" +" Añadir registro LOC para example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" +"\n" +" Añadir un nuevo registro A para www.example.com. Crear un registro inverso " +"en la zona\n" +" inversa apropiada también. En esta caso un registro PTR \"2\" apuntando a " +"www.example.com\n" +" será creado en la zona 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" +"\n" +" Añadir nuevo registro PTR para www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" +"\n" +" Añadir nuevos registros SRV para servidores LDAP. Tres cuartos de las " +"peticiones\n" +"debería ir a fast.example.com, un cuarto a slow.example.com. Si ninguno " +"está\n" +"disponible conmutar a backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" +"\n" +" El modo interactivo puede ser usado para modificación fácil:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No se suministra opción para modificar registro específico.\n" +" El registro actual DNS contiene:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modificar registro SRV '0 3 389 fast.example.com'? Si/No (predeterminado " +"No):\n" +" Modificar registro SRV '0 1 389 slow.example.com'? Si/No (predeterminado " +"No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" +"\n" +" Después de esta modificación tres quintos de las peticiones deberían ir a \n" +" fast.example.com y dos quintos a slow.example.com.\n" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" +"\n" +" Un ejemplo del modom interactivo para el comando dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" +"\n" +" Mostrar zona example.com:\n" +" ipa dnszone-show example.com\n" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" +"\n" +" Encontrar una zona con \"example\" en su nombre de dominio:\n" +" ipa dnszone-find example\n" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" +"\n" +" Encontrar registros para recursos con \"www\" en su nombre en la zona " +"example.com:\n" +" ipa dnsrecord-find example.com www\n" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" +"\n" +" Encontrar registros A con el valor 192.0.2.2 en zona example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" +"\n" +" Mostrar registros para el recurso www en zona example.com\n" +" ipa dnsrecord-show example.com www\n" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" +"\n" +" Delegar zona sub.example a otro servidor de nombres:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" +"\n" +" Borrar zona example.com con todos los registros de recursos:\n" +" ipa dnszone-del example.com\n" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" +"\n" +" Si se configura un reenviador global, todas las peticiones para las que " +"este\n" +" servidor no está autorizado (e.g. sub.example.com) serán enrutados al " +"reenviador global.\n" +" La configuración de reenvío global se puede anular por zona.\n" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" +"\n" +" La semántica de reenvío en IPA coincide con la semántica en BIND y depende " +"del\n" +" tipo de zona:\n" +" * Zona Maestra: BIND local responde con autoridad a las consultas de " +"datos en la\n" +" zona dada (incluyendo las respuestas de autoridad NXDOMAIN) y el reenvío\n" +" afecta solo a las peticiones para nombres debajo de los cortes de zona " +"(registros \n" +" NS) de las zonas servidas localmente.\n" +"\n" +" * Zona de Reenvío:la zona de reenvío no contiene datos autorizados. las\n" +" las consultas de reenvío BIND, que no pueden ser contestadas desde su " +"cache\n" +" local, para configurar reenviadores.\n" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" +"\n" +" Semánticas de la opción --forward-policy:\n" +" * none - deshabilita el reenvío para una zona dada.\n" +" * first - reenvía todas las peticiones a los reenviadores configurados. " +"Si fallan,\n" +" resuelven usando los servidores raíz DNS.\n" +" * only - reenvía todas las peticiones a los reenviadores configurados y " +"si fallan,\n" +" devuelve un fallo.\n" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" +"\n" +" Deshabilita el reenvío global para el sub-árbol dado:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" +"\n" +" Esta configuración reenvia todas las peticiones para nombres fuera del sub " +"árbol example.com\n" +" a reenviadores globales. Se utiliza el proceso de resolución recursiva " +"normal para \n" +" los nombres dentro del sub-árbol example.com (i.e. registros NS son " +"seguidos etc.).\n" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" +"\n" +" Reenvía todas las peticiones para la zona external.example.com a otro " +"reenviador\n" +" usando una política \"first\" (enviará las peticiones al reenviador " +"seleccionado y si\n" +" no hay respuesta usará los servidores raíz globales):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" +"\n" +" Cambia la política de reenvío para external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" +"\n" +" Muestra la zona de reenvío external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" +"\n" +" Lista todas las zonas de reenvío:\n" +" ipa dnsforwardzone-find\n" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" +"\n" +" Borra la zona de reenvío external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" +"\n" +" Resuelve un nombre de host para ver si existe (añadirá el dominio IPA\n" +" predeterminado si no se ha incluido ninguno):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" +"\n" +"\n" +"CONFIGURACIÓN GLOBAL DNS\n" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" +"\n" +"La configuración de DNS que se pasa al script de instalación de la línea de\n" +"comandos está almacenado en un fichero de configuración local en cada " +"servidor\n" +"IPA donde el servicio DNS está configurado. Estos ajustes locales pueden ser " +"anulados con una configuración común almacenada en el servidor LDAP:\n" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" +"\n" +" Muestra la configuración DNS global:\n" +" ipa dnsconfig-show\n" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" +"\n" +" Modifica la configuración DNS global y establece una lista de reenviadores " +"globales:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" + +msgid "invalid IP network format" +msgstr "formato no válido de red IP" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "cada elemento ACL debe estar terminado con un punto y coma" + +msgid "invalid address format" +msgstr "formato de dirección no válido" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" +"formato esperado: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" + +msgid "algorithm value: allowed interval 0-255" +msgstr "valor del algoritmo: intervalo permitido 0-255" + +msgid "flags value: allowed interval 0-255" +msgstr "valor de banderas: intervalo permitido 0-255" + +msgid "iterations value: allowed interval 0-65535" +msgstr "iterations value: intervalo permitido 0-65535" + +#, python-format +msgid "salt value: %(err)s" +msgstr "valor salt: %(err)s" + +msgid "invalid domain-name: not fully qualified" +msgstr "nombre de dominio no válido: no totalmente cualificado" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "no debe ser un nombre de dominio comodín (RFC 4592 sección 4)" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" +"Todos los servidores de nombre fallaron al responder a la consulta sobre la " +"zona reversa DNS %(revdns)s" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" +"Zona reversa DNS %(revzone)s para dirección IP %(addr)s no está manejada por " +"este servidor" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "Zona DNS %(zone)s no encontrado" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "Dirección IP %(ip)s ya está asignada en el dominio %(domain)s." + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" +"Registro reverso para dirección IP %(ip)s ya existe en la zona reversa " +"%(zone)s." + +#, python-format +msgid "%s record" +msgstr "%s registro" + +#, python-format +msgid "Raw %s records" +msgstr "Registros brutos %s" + +#, python-format +msgid "%s Record" +msgstr "%s registro" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(vea detalles en el RFC %s)" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "«%s» es una parte requerida del registro DNS" + +msgid "Invalid number of parts!" +msgstr "El número de partes no es válido." + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "Tipo DNS RR \"%s\" no es soportado por el complemento bind-dyndb-ldap" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "el formato se debe especificar como \"%(format)s\" %(rfcs)s" + +msgid "Create reverse" +msgstr "Crear reversa" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "No puede crear registro reverso para \"%(value)s\": %(exc)s" + +msgid "Exchanger" +msgstr "Intercambiador" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" +"\"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] [siz[\"m" +"\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +"donde:\n" +"d1: [0 .. 90] (grados de latitud)\n" +"d2: [0 .. 180] (grados de longitud)\n" +"m1, m2: [0 .. 59] (minutos de latitud/longitud)\n" +"s1, s2: [0 .. 59.999] (segundos de latitud/longitud)\n" +"alt: [-100000.00 .. 42849672.95] BY .01 (altitud en metros)\n" +"siz, hp, vp: [0 .. 90000000.00] (tamaño/precisión en metros)\n" +"Vea RFC 1876 para detalles" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "'%(required)s' no debe estar vacío cuando '%(name)s' está establecido" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "las banderas deben ser una de \"S\", \"A\", \"U\" o \"P\"" + +msgid "Priority (order)" +msgstr "Prioridad (orden)" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" +"El número más bajo significa la prioridad más alta. Los clientes intentarán " +"contactar con el servidor con la prioridad de número más bajo que ellos " +"puedan alcanzar." + +msgid "Relative weight for entries with the same priority." +msgstr "Peso relativo de las entradas con la misma prioridad." + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "este valor no sigue el formato de hora \"YYYYMMDDHHMMSS\"" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" +"El número más bajo significa la prioridad más alta. Los clientes intentarán " +"contactar con la URI con la prioridad numerada más bajo que puedan alcanzar." + +msgid "Target Uniform Resource Identifier" +msgstr "Identificador Uniforme de Recursos Objetivo" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "Identificador Uniforme de Recursos Objetivo de acuerdo al RFC 3986" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" +"El servidor de nombre '%(host)s' no tiene su correspondiente registro A/AAAA" + +msgid "Managedby permission" +msgstr "Gestionado con permiso" + +msgid "DNS is not configured" +msgstr "DNS no está configurado" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "Solo se permite un tipo de zona por nombre de zona" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "Añadido permiso de sistema \"%(value)s\"" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "permiso \"%(value)s\" ya existe" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "Quitado permiso de sistema \"%(value)s\"" + +msgid "DNS zone" +msgstr "zona DNS" + +msgid "DNS zones" +msgstr "zonas DNS" + +msgid "DNS Zones" +msgstr "Zonas DNS" + +msgid "DNS Zone" +msgstr "Zona DNS" + +msgid "Default time to live" +msgstr "Tiempo de vida predeterminado" + +msgid "Time to live for records without explicit TTL definition" +msgstr "Tiempo de vida para los registros sin definición explícita TTL" + +msgid "setting Authoritative nameserver" +msgstr "Fijando el servidor de nombre Autoritario" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "ISe usa solo para el establecimiento del atributo SOA MNAME." + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "Registro(s) NS puede(n) ser editado(s) en zona apéndice - '@'. " + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" +"El servidor de nombre para la zona reversa no puede ser un nombre DNS " +"relativo" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Borrada zona DNS \"%(value)s\"" + +msgid "is required" +msgstr "se requiere" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Zona de DNS desactivada \"%(value)s\" " + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Zona DNS habilitada \" %(value)s \"" + +msgid "DNS resource record" +msgstr "Registro de recursos DNS" + +msgid "DNS resource records" +msgstr "Registros de recurso DNS" + +msgid "DNS Resource Records" +msgstr "Registros de Recursos DNS" + +msgid "DNS Resource Record" +msgstr "Registro de Recurso de DNS" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "El registro DS no debe estar en zona apéndice (RFC 4035 sección 2.4)" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" +"datos fuera de zona: el nombre de registro debe ser un subdominio de la zona " +"o un nombre relativo" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" +"el propietario de registros %(types)s no debería ser un nombre de dominio " +"comodín (RFC 4592 sección 4)" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" +"La zona reversa %(name)s requiere exactamente %(count)d direcciones IP " +"componentes, %(user_count)d dado" + +msgid "only master zones can contain records" +msgstr "solo las zonas maestras pueden contener registros" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "solo se permite un registro CNAME por nombre (RFC 2136, sección 1.1.5)" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" +"Registro CNAME no está permitido que coexista con ningún otro registro (RFC " +"1034, sección 3.6.2)" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "solo se permite un registro DNAME por nombre (RFC 6672, sección 2.4)" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"El registro NS no está permitido que coexista con un registro %(type)s " +"excepto cuando se localice en un registro de zona raíz (RFC 2181, sección " +"6.1)" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" +"El registro DS requiere coexistir con un registro NS record (RFC 4592 " +"sección 4.6, RFC 4035 sección 2.4)" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" +"El valor crudo de un registro DNS fue establecido siempre por la opción " +"\"%(name)s\"" + +msgid "DNS zone root record cannot be renamed" +msgstr "El registro DNS de zona raíz no puede ser renombrado" + +msgid "DNS records can be only updated one at a time" +msgstr "Los registros DNS solo pueden ser actualizados de uno en uno" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Registro eliminado \"%(value)s\"" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "No se puede eliminar el registro de zona «%s»" + +#, python-format +msgid "Found '%(value)s'" +msgstr "Ha sido encontrado '%(value)s'" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "No ha sido encontrado el equipo anfitrión '%(host)s' " + +msgid "DNS configuration options" +msgstr "Opciones de configuración de DNS" + +msgid "DNS Global Configuration" +msgstr "Configuración global de DNS" + +msgid "IPA DNS version" +msgstr "Versión IPA DNS" + +msgid "IPA DNS servers" +msgstr "Servidores IPA DNS" + +msgid "List of IPA masters configured as DNS servers" +msgstr "Lista de los maestros IPA configurados como servidores DNS" + +msgid "IPA DNSSec key master" +msgstr "Clave maestra IPA DNSSec" + +msgid "IPA server configured as DNSSec key master" +msgstr "Servidor IPA configurado como clave maestra DNSSec" + +msgid "Global DNS configuration is empty" +msgstr "La configuración global DNS está vacía" + +msgid "DNS forward zone" +msgstr "Zona de envío DNS" + +msgid "DNS forward zones" +msgstr "Zonas de envío DNS" + +msgid "DNS Forward Zones" +msgstr "Zonas de Envío DNS" + +msgid "DNS Forward Zone" +msgstr "Zona de Envío DNS" + +msgid "Please specify forwarders." +msgstr "Por favor especifique los reenviadores." + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Borrada forma de reenvío DNS \"%(value)s\"" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Deshabilitada zona de reenvío DNS \"%(value)s\"" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Habilitada zona de reenvío DNS \"%(value)s\"" + +msgid "IPA DNS records" +msgstr "Registros IPA DNS" + +msgid "IPA location records" +msgstr "Registros de ubicación IPA" + +msgid "Update location and IPA server DNS records" +msgstr "Actualizar registros de ubicación y servidor IPA DNS" + +msgid "Result of the command" +msgstr "Resultado del comando" + +msgid "Dry run" +msgstr "Correr en seco" + +msgid "Do not update records only return expected records" +msgstr "No actualizar registros solo devolver registros esperados" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Configuración del servidor DNS\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Manipular la configuración del servidor DNS\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +" Mostar la configuración de un servidor DNS especifico:\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Actualizar la configuración de un servidor DNS especifico:\n" +" ipa dnsserver-mod\n" + +msgid "DNS server" +msgstr "Servidor DNS" + +msgid "DNS servers" +msgstr "Servidores DNS" + +#, fuzzy +#| msgid "DNS servers" +msgid "DNS Servers" +msgstr "Servidores DNS" + +#, fuzzy +#| msgid "DNS server" +msgid "DNS Server" +msgstr "Servidor DNS" + +#, fuzzy +#| msgid "Server name" +msgid "DNS Server name" +msgstr "Nombre del servidor" + +msgid "SOA mname override" +msgstr "" + +#, fuzzy +#| msgid "Authoritative nameserver domain name" +msgid "SOA mname (authoritative server) override" +msgstr "Nombre de dominio servidor de nombre autorizado" + +#, fuzzy +#| msgid "Zone forwarders" +msgid "Forwarders" +msgstr "Zona de expedidores" + +#, fuzzy +#| msgid "" +#| "Per-zone forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Expedidores por zona. Se puede especificar un puerto personalizado para cada " +"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" + +#, fuzzy +#| msgid "" +#| "Per-zone conditional forwarding policy. Set to \"none\" to disable " +#| "forwarding to global forwarder for this zone. In that case, conditional " +#| "zone forwarders are disregarded." +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Política de envío condicional por zona. Se establece a \"none\" para " +"deshabilitar el envío a expedidores globales para esta zona. En este caso, " +"la zona condicional de expedidores es ignorada." + +#, fuzzy +#| msgid "" +#| "\n" +#| "DNS server configuration\n" +msgid "Modify DNS server configuration" +msgstr "" +"\n" +"Configuración del servidor DNS\n" + +#, fuzzy, python-format +#| msgid "Modified IPA server \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "Modificado servidor IPA \"%(value)s\"" + +#, fuzzy +#| msgid "Search for IPA servers." +msgid "Search for DNS servers." +msgstr "Buscar servidores IPA." + +#, fuzzy, python-format +#| msgid "%(count)d IPA server matched" +#| msgid_plural "%(count)d IPA servers matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d servidor IPA coincide" +msgstr[1] "%(count)d servidores IPA coinciden" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Servidor de IPA a utilizar" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Display configuration of a DNS server." +msgstr "Muestra información sobre un servidor proxy RADIUS." + +#, fuzzy +#| msgid "Add a new SMB service." +msgid "Add a new DNS server." +msgstr "Añadir un nuevo servicio SMB." + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Ha sido agregado el servicio \"%(value)s\"" + +#, fuzzy +#| msgid "Delete IPA server." +msgid "Delete a DNS server" +msgstr "Eliminar servidor IPA." + +#, fuzzy, python-format +#| msgid "Deleted IPA server \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Eliminado servidor IPA \"%(value)s\"" + +msgid "REST API is not logged in." +msgstr "REST API no ha iniciado sesión." + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "No hay respuesta 2xx desde CA REST API: %(status)d. %(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "Incapaz de comunicar con CMS" + +msgid "Response from CA was not valid JSON" +msgstr "La respuesta desde CA no era JSON válido" + +msgid "Host-based access control commands" +msgstr "Comandos de control de acceso basado en host" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Servicios de HBAC\n" +"\n" +"Los servicios PAM a los que HBAC puede controlar el acceso. El nombre " +"utilizado aquí debe coincidir\n" +"con el nombre del servicio que PAM está evaluando.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo servicio:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modificar un servicio de HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Buscar servicios para HBAC. Este ejemplo retornará dos resultados, el " +"servicio FTP\n" +" y el servicio recién añadido tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Borrar un servicio de HBAC:\n" +" ipa hbacsvc-del tftp\n" +"\n" + +msgid "HBAC services" +msgstr "Servicios HBAC" + +msgid "HBAC Services" +msgstr "Servicios HBAC" + +msgid "HBAC Service" +msgstr "Servicio HBAC" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Servicio de HBAC \"%(value)s\" añadido" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Suprimido el servicio HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr " Servicio modificado HBAC \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "Servicio HBAC %(count)d coincidente" +msgstr[1] "Servicios HBAC %(count)d coincidentes" + +msgid "HBAC service group" +msgstr "Grupo de servicio HBAC" + +msgid "HBAC service groups" +msgstr "Grupos de servicio HBAC" + +msgid "HBAC Service Groups" +msgstr "Grupos de Servicios HBAC" + +msgid "HBAC Service Group" +msgstr "Grupo de Servicio HBAC" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Agregado servicio de grupo HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr " Suprimido el servicio HBAC grupo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Servicio modificado HBAC grupo \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d grupo de servicio HBAC coincidente" +msgstr[1] "%(count)d grupos de servicio HBAC coincidentes" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" +"\n" +"Escenógrafos\n" +"\n" +"Gestionar las entradas de escenario de usuario.\n" +"\n" +"Las entradas de escenario de usuario están directamente bajo el contenedor.\n" +" \"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\". Los usuarios no " +"se\n" +" pueden autenticar con estas entradas (aunque las entradas contengan\n" +" credenciales). Estas entradas son solo candidatas a llegar a ser entradas " +"Activas.\n" +"\n" +"Las entradas Activas de usuario son usuarios Posix directamente bajo el " +"contenedor. \"cn=accounts, SUFFIX\".\n" +"Los usuario se pueden autenticar con entradas Activas con la condición de " +"que \n" +"tengan credenciales.\n" +"\n" +"Las entradas borradas de usuario son usuaruios Posix directamente bajo el " +"contenedor. \"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Los usuarios no se pueden autenticas con estas entradas, aunque estas " +"entradas contengan credenciales.\n" +"\n" +"El contenedor escenario de usuario contiene entradas:\n" +" - crreadas por comandos 'stageuser-add' que son usuarios Posix,\n" +" - creadas por un sistema externa de aprovisionamiento.\n" +"\n" +"Una entrada de escenario de usuario valida DEBE tener:\n" +" - entrada RDN es 'uid',\n" +" - ipaUniqueID es 'autogenerate'.\n" +"\n" +"IPA soporta un amplia rango de formatos de nombre de usuario, pero usted " +"debe\n" +"estar atento a algunas restricciones que pueden aplicarse a su entorno " +"concreto.\n" +"Por ejemplo, los nombres de usuario que empiezan con un dígito o los nombres " +"de \n" +"usuario que exceden cierta longitud pueden causar problemas en algunos " +"sistemas UNIX.\n" +"Use 'ipa config-mod' para cambiar el formato de nombre de usuario permitido " +"por las herramientas IPA.\n" +"\n" +"\n" +"EJEMPLOS:\n" +"\n" +"Añadir un uevo escenógrafo:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Añadir un escenografo desde un contenedor de usuarios borrados:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" + +msgid "Stage Users" +msgstr "Escenario Usuarios" + +msgid "Stage User" +msgstr "Escenario de Usuario" + +msgid "stage user" +msgstr "escenario usuario" + +msgid "stage users" +msgstr "escenario usuarios" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Añadido escenario usuario \"%(value)s\"" + +msgid "givenname is required" +msgstr "se requiere nombre" + +msgid "sn is required" +msgstr "se requiere sn" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "puede ser a lo sumo%(len)d caracteres" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Borrado escenario usuario \"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Modificado escenario usuario \"%(value)s\"" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d usuario coincidente" +msgstr[1] "%(count)d usuarios coincidentes" + +#, fuzzy, python-format +#| msgid "Added stage user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Añadido escenario usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Entry %s not found" +msgid "Entry RDN is not 'uid'" +msgstr "Entrada %s no encontrada" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgid "active user with name \"%(user)s\" already exists" +msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" + +#, fuzzy, python-format +#| msgid "Staged user account \"%(value)s\"" +msgid "Stage user %s activated" +msgstr "Cuenta de usuario por etapas \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "Añade uno o más certificados a la entrada del usuario" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Añadidos certificados al usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Borra uno o más certificados de la entrada de usuario" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Add new principal alias to the user entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "Añade un nuevo alias principal a la entrada de usuario" + +#, fuzzy, python-format +#| msgid "Added new aliases to user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Añade nuevos alias al usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Remove principal alias from the user entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "Borra el alias principal de la entrada de usuario" + +#, fuzzy, python-format +#| msgid "Removed aliases from user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Borrados alias del usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificate mappings to the user entry." +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." + +#, fuzzy +#| msgid "Remove one or more certificate mappings from the user entry." +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all servers:\n" +#| " ipa server-find\n" +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Encuentra todos los servidores:\n" +" ipa server-find\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all servers:\n" +#| " ipa server-find\n" +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Encuentra todos los servidores:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d equipo coincidente" +msgstr[1] "%(count)d equipos coincidentes" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Ha sido agregado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Ha sido eliminado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Ha sido modificado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "%(value)s" +msgstr "Ha sido encontrado '%(value)s'" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "suffixes" +msgstr "Sufijos UPN" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "Topology suffixes" +msgstr "Sufijos UPN" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d profile matched" +#| msgid_plural "%(count)d profiles matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d perfil coincidente" +msgstr[1] "%(count)d perfiles coincidentes" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Perfil borrado \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Ha sido agregado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Ha sido modificado el equipo \"%(value)s\"" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" +"Privilegio 'write' insuficiente al atributo 'krbLastPwdChange' de la entrada " +"'%s'." + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "grupos de host" + +msgid "Host Group" +msgstr "Grupo de Host" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Ha sido agregado el grupo de equipo \"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"grupo de red con nombre “%s” ya existe. Los grupos de host y grupos de red " +"comparten un espacio de nombre común" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Ha sido eliminado el grupo de equipo \"%(value)s\"" + +#, fuzzy +#| msgid "host group" +msgid "hostgroup" +msgstr "grupo de host" + +#, fuzzy +#| msgid "privileged group" +msgid "privileged hostgroup" +msgstr "grupo privilegiado" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Ha sido modificado el grupo de equipo \"%(value)s\"" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d grupo de equipos coincidente" +msgstr[1] "%(count)d grupos de equipos coincidentes" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Añadir usuarios que pueden manejar esta ficha." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Quitar usuarios que puedan manejar esta ficha." + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Bóvedas\n" msgid "" "\n" @@ -3158,6 +19136,1428 @@ msgstr "" "\n" "Manejar bóvedas.\n" +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"En base al propietario hay tres categorías de bóveda:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Las bóvedas de usuario son bóvedas propietarias usadas por un usuario " +"concreto. Las bóvedas\n" +"privadas son bóvedas propiedad del usuario actual. Las bóvedas de servcio " +"son\n" +"bóvedas propiedad de un servicio. Las bóvedas compartidas son propiedad del " +"administrador\n" +"pero pueden ser usadas por otros usuarios o sevicios.\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"En base al mecanismos de seguridad hay tres tipos de\n" +"bóvedas:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"La bóveda standard usa un mecanismo seguro para transportar y\n" +"almacenar el secreto. El secreto puede ser sólo recuperado por los usuarios\n" +"que tiene acceso a la bovéda.\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"La bóveda symmetric es similar a la standard, pero\n" +"encripta previamente el secreto usando una contraseña antes de transportar.\n" +"El secreto sólo se puede recuperar usando la misma contraseña.\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"La bóveda asymmetric es similar a la bóveda standard, pero\n" +"encripta el secreto usando una clave pública antes del transporte.\n" +"El secreto sólo se puede recuperar usando la clave privada.\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Show global DNS configuration:\n" +#| " ipa dnsconfig-show\n" +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Muestra la configuración DNS global:\n" +" ipa dnsconfig-show\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " List vaults:\n" +#| " ipa vault-find\n" +#| " [--user |--service |--shared]\n" +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainer" +msgstr "Contenedor de grupoi" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainers" +msgstr "Contenedor de grupoi" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Containers" +msgstr "Contenedor de grupoi" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Container" +msgstr "Contenedor de grupoi" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "only \"ad\" is supported" +msgid "Host is not supported" +msgstr "solo se admite «ad»" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +#| msgid "Delete an automount location." +msgid "Deleted vault container" +msgstr "Borrar una localización de automontaje." + +#, fuzzy, python-format +#| msgid "Owner" +msgid "owner %s" +msgstr "Propietario" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add an automember rule.\n" +#| " " +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Añadir una regla automiembro.\n" +" " + +#, fuzzy +#| msgid "" +#| "\n" +#| "Vaults\n" +msgid "vault" +msgstr "" +"\n" +"Bóvedas\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Vaults\n" +msgid "vaults" +msgstr "" +"\n" +"Bóvedas\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Vaults\n" +msgid "Vaults" +msgstr "" +"\n" +"Bóvedas\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Vaults\n" +msgid "Vault" +msgstr "" +"\n" +"Bóvedas\n" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "Modify a vault." +msgid "Add a vault." +msgstr "Modificar una bóveda" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Ha sido agregado el equipo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted trust \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Confianza borrada \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d trust matched" +#| msgid_plural "%(count)d trusts matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d confianza encontrada" +msgstr[1] "%(count)d confianzas encontradas" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Ha sido modificado el equipo \"%(value)s\"" + +#, fuzzy +#| msgid "trust configuration" +msgid "Vault configuration" +msgstr "configuración de la confianza" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "IPA KRA servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "IPA servers configured as key recovery agents" +msgstr "Servidores IPA configurados como agentes de confianza AD" + +#, fuzzy, python-format +#| msgid "Archive data into a vault." +msgid "Archived data into vault \"%(value)s\"" +msgstr "Datos archivados en una bóveda" + +#, fuzzy +#| msgid "Archive data into a vault." +msgid "Retrieve data from a vault." +msgstr "Datos archivados en una bóveda" + +#, fuzzy, python-format +#| msgid "Removed aliases from host \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Borrados alias del host \"%(value)s\"" + +msgid "No archived data." +msgstr "" + +#, fuzzy +#| msgid "Checks if any of the servers has the DNS service enabled." +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" +"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." + +msgid "netgroups" +msgstr "grupos de red" + +msgid "Netgroups" +msgstr "Grupos de red" + +msgid "Netgroup" +msgstr "Grupo de red" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\"netgroup añadido" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"grupo de host con nombre “%s” ya existe. Los grupos de nombres y los grupos " +"de red comparten un espacio de nombre común" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "%(value)s\" de netgroup eliminados" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "netgroup modificado \"%(value)s\"" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d autoservicio coincidente" +msgstr[1] "%(count)d autoservicios coincidentes" + +msgid "One time password commands" +msgstr "Comandos de contraseña de una vez" + +msgid "OTP configuration options" +msgstr "Opciones de configuración OTP" + +msgid "OTP Configuration" +msgstr "Configuración OTP" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Cambio de contraseña para \"%(value)s\"" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Herramientas de informe de estados de características Kerberos PKINIT.\n" +"\n" +"Informa de los másters IPA sobre los cuales Kerberos PKINIT está habilitado " +"o deshabilitado\n" +"\n" +"EJEMPLOS:\n" +" Lista el estado PKINIT sobre todos los másters:\n" +" ipa pkinit-status\n" +"\n" +" Comprueba el estado PKINIT sobre `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" Lista todos los másters IPA con PKINIT deshabilitado:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"Para más información sobre soporte PKINIT vea:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "" +" Los certificados de entrada deben estar codificados en DER. \n" +" Tenga en cuenta que no puede ser un normalizador en la Param, ya que " +"solamente las variables de \n" +" Unicode se normalizan.\n" +" " + +msgid "PKINIT status" +msgstr "Estado PKINIT" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "Sí PKINIT está habilitado o deshabilitado" + +msgid "Report PKINIT status on the IPA masters" +msgstr "Informa el estado PKINIT sobre los másters IPA" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s servidor coincide" +msgstr[1] "%(count)s servidores coinciden" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"Servidores Proxy RADIUS\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Gestionar Servidores Proxy RADIUS.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA soporta el uso de servidores proxy RADIUS externos para autenticaciones " +"krb5\n" +"OTP. Esto permite una gran oferta de flexibilidad cuando se integra con " +"servicios de \n" +"autenticación de tercera parte.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Añadir un nuevo servidor:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Encontrar todos los servidores cuyas entradas incluyan la cadena \"example." +"com\":\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Examinar la configuración:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Cambiar el secreto:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Borrar una configuración:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "nombre de atributo no válido" + +msgid "invalid port number" +msgstr "número de puerto no válido" + +msgid "RADIUS proxy server" +msgstr "Servidor proxy RADIUS" + +msgid "RADIUS proxy servers" +msgstr "Servidores proxy RADIUS" + +msgid "RADIUS Servers" +msgstr "Servidores RADIUS" + +msgid "RADIUS Server" +msgstr "Servidor RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Añadido servidor proxy RADIUS \"%(value)s\"" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Borrado servidor proxy RADIUS \"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Modificado servidor proxy RADIUS \"%(value)s\"" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d servidor proxy RADIUS coincidente" +msgstr[1] "%(count)d servidores proxy RADIUS coincidentes" + +msgid "A list of ACI values" +msgstr "Una lista de valores ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "tipo, filtro, subárbol y grupo de destino, se excluyen mutuamente" + +msgid "ACI prefix is required" +msgstr "Se requiere prefijo de ACI " + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"es necesario como mínimo alguno de: tipo, filtro, subárbol, grupo de " +"destino, atributos, o miembro de " + +msgid "filter and memberof are mutually exclusive" +msgstr "filtro y memberof son mutuamente excluyentes" + +msgid "group, permission and self are mutually exclusive" +msgstr "grupo, permisos y auto son mutuamente excluyentes" + +msgid "One of group, permission or self is required" +msgstr "Uno de grupo, permiso o self es necesario" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "El grupo '%s' no existe" + +msgid "empty filter" +msgstr "Vaciar filtro" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Error de sintaxis:%(error)s " + +#, python-format +msgid "invalid DN (%s)" +msgstr "DN no válido (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "No se encuentra un ACI cuyo nombre sea \"%s\"" + +msgid "ACI object." +msgstr "Objeto ACI." + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Ha sido creado ACI \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Ha sido eliminado ACI \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Ha sido modificado ACI \"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI coincidente" +msgstr[1] "%(count)d ACIs coincidentes" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI renombrado a \"%(value)s\"" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least 1" +msgid "must be at least 10" +msgstr "debe ser al menos 1" + +msgid "configuration options" +msgstr "opciones de configuración" + +msgid "Configuration" +msgstr "Configuración" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "Largo máximo para nombre de usuario" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA servers\n" +msgid "IPA masters" +msgstr "" +"\n" +"IPA servers\n" + +msgid "List of all IPA masters" +msgstr "" + +#, fuzzy +#| msgid "Include IPA master entries" +msgid "Hidden IPA masters" +msgstr "Incluir entradas IPA maestro" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "IPA CA servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "IPA servers configured as certificate authority" +msgstr "Servidor IPA configurado como clave maestra DNSSec" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA CA servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Servidor IPA configurado como clave maestra DNSSec" + +#, fuzzy +#| msgid "Cannot hide CA renewal master." +msgid "IPA CA renewal master" +msgstr "No se puede ocultar el maestro de renovación de CA." + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "IPA servers configured as key recovery agent" +msgstr "Servidores IPA configurados como agentes de confianza AD" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA KRA servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "Servidores IPA configurados como agentes de confianza AD" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "IPA servers configured as domain name server" +msgstr "Servidor IPA configurado como clave maestra DNSSec" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA DNS servers" +msgstr "Servidores IPA DNS" + +#, fuzzy +#| msgid "List of IPA masters configured as DNS servers" +msgid "Hidden IPA servers configured as domain name server" +msgstr "Lista de los maestros IPA configurados como servidores DNS" + +#, fuzzy +#| msgid "IPA DNSSec key master" +msgid "DNSec key master" +msgstr "Clave maestra IPA DNSSec" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "las opciones no están permitidas" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "nombre de dominio no válido: %s" + +#, fuzzy, python-format +#| msgid "Removed information about the trusted domain \"%(value)s\"" +msgid "Server has no information about domain '%(domain)s'" +msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "El grupo no existe" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "atributo \"%s\" no permitido" + +msgid "May not be empty" +msgstr "Puede no estar vacío" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "error sobre el servidor '%(server)s': %(error)s" + +#, fuzzy +#| msgid "SELinux user %(user)s not found in ordering list (in config)" +msgid "SELinux user map default user not in order list" +msgstr "" +"Usuario SELinux %(user)s no encontrado en la lista de pedidos (en config)" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "grupos" + +msgid "User Group" +msgstr "Grupo Usuario" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Ha sido agregado el grupo \"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "gid no puede ser fijado para un grupo externo" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Ha sido eliminado el grupo \"%(value)s\"" + +msgid "privileged group" +msgstr "grupo privilegiado" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Ha sido modificado el grupo \"%(value)s\"" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d grupo coincidente" +msgstr[1] "%(count)d grupos coincidentes" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"No se puede llevar a cabo la validación del miembro externo sin el soporte " +"para Samba 4 instalado. Asegúrese de que tiene instalado el sub-paquete " +"server-trust-ad de IPA en el servidor" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"No puede llevar a cabo la operación de unión si el dominio propio " +"configurado. Asegúrese primero que está corriendo ipa-adtrust-install sobre " +"el servidor IPA" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Ha sido desasociado el grupo \"%(value)s\" del usuario \"%(value)s\"" + +msgid "not allowed to modify user entries" +msgstr "no se permite modificar las entradas de los usuarios" + +msgid "not allowed to modify group entries" +msgstr "no se permite modificar las entradas de los grupos" + +msgid "Not a managed group" +msgstr "No es un grupo administrado" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Añadir usuarios que pueden manejar esta ficha." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Quitar usuarios que puedan manejar esta ficha." + +msgid "" +"\n" +"Permissions\n" +msgstr "" +"\n" +"Permisos\n" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" +"\n" +"Un permiso habilita una delegación de derechos de grano fino. Un permiso es " +"una\n" +"vuelta alrededor legible por humanos de una Regla de Control de Acceso (ACI) " +"o\n" +"instrucción 389-ds.\n" +"Un permiso concede el derecho de llevar a cabo una tarea especifica como " +"añadir\n" +"un usuario, modificar un grupo, etc.\n" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"Un permiso puede contener otros permisos.\n" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* Un permiso concede acceso a leer, escribir, añadir, borrar, buscar o " +"comparar.\n" +"* Un privilegio combina permisos similares (por ejemplo todos los permisos\n" +" necesarios para añadir un usuario).\n" +"* Un rol concede un conjunto de privilegios a usuarios, grupos, hosts o " +"grupos de host.\n" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" +"\n" +"Un permiso está constituido por diversas partes:\n" +"\n" +"1. El nombre del permiso.\n" +"2. El objetivo del permiso.\n" +"3. Los derechos concedidos por el permiso.\n" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"Los derechos definen que operaciones están permitidas y pueden ser una o " +"mas\n" +"de las siguientes:\n" +"1. write - escribe uno o más atributos\n" +"2. read - lee uno o más atributos\n" +"3. search - busca uno o más atributos\n" +"4. compare - compara uno o más atributos\n" +"5. add - añade una nueva entrada al árbol\n" +"6. delete - borra una entrada existente\n" +"7. all - concede todos los permisos\n" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" +"\n" +"Advierta la diferencia entre atributos y entradas. Los permisos son " +"independientes,\n" +"de este modo ser capaz de añadir un usuario no significa que el usuario sea\n" +"editable.\n" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" +"\n" +"Existen distinto objetivos permitidos:\n" +"1. subtree: un DN; el permiso se aplica al sub-árbol bajo este DN\n" +"2. target filter: un filtro LDAP\n" +"3. target: DN con posibles comodines, especifica las entradas a las que se " +"aplica\n" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" +"\n" +"Adicionalmente, existen las siguientes opciones de conveniencia.\n" +"Fijando una de estas opcines ajustará el correspondiente atributo(s).\n" +"1. type: un tipo de objeto (usuario, grupo, etc); fija sub-árbol y filtro " +"objetivo.\n" +"2. memberof: se aplica a los miembros de un grupo; fija filtro objetivo\n" +"3. targetgroup: concede acceso para modificar un grupo específico (como\n" +" concediendo los derechos para gestiona la membresía de grupo); fija " +"objetivo.\n" + msgid "" "\n" "Managed permissions\n" @@ -3165,6 +20565,988 @@ msgstr "" "\n" "Permisos gestionados\n" +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" +"\n" +"Los permisos que vienen con IPA por defecto se pueden llamar permisos\n" +"\"gestionados\". Estos tienen un conjunto de atributos predeterminados que " +"aplican,\n" +"pero el administrador puede añadir/borrar atributos individuales de/a el " +"conjunto.\n" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"El borrado o renombrado de un permiso gestionado, así como el cambio de su\n" +"objetivo, no está permitido.\n" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" +"\n" +" Añadir un permiso que concede la creación de usuarios:\n" +" ipa permission-add --type=user --permissions=add \"Añadir Usuarios\"\n" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +" Añadir un permiso que conceda la capacidad de gestionar la membresía de un " +"grupo:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Gestiona Miembros de Grupo\"\n" + +msgid "must be enclosed in parentheses" +msgstr "debe estar cerrado entre paréntesis" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "\"%s\" no es un tipo de objeto" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\" no es un tipo válido de permiso" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Obsoleto; use %s" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "Permiso con bandera desconocida %s puede no ser modificado o quitado" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "Un permiso SYSTEM no puede ser modificado o quitado" + +#, python-format +msgid "Entry %s not found" +msgstr "Entrada %s no encontrada" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "El ACI para el permiso %(name)s no fue encontrado en %(dn)s " + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" +"no puede especificar filtro de objetivo completo y filtro de objetivo extra " +"simultáneamente" + +#, python-format +msgid "option was renamed; use %s" +msgstr "la opción fue renombrada; use %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "No puede usar %(old_name)s con %(new_name)s" + +#, python-format +msgid "%s: group not found" +msgstr "%s: grupo no encontrado" + +msgid "target and targetgroup are mutually exclusive" +msgstr "target y targetgroup son mutuamente exclusivos" + +msgid "subtree and type are mutually exclusive" +msgstr "subtree y type son mutuamente exclusivos" + +msgid "Bad search filter" +msgstr "Mal filtro de búsqueda" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Entrada %s no existe" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" +"debe haber al menos una entrada objetivo especifica (e.g. target, " +"targetfilter, attrs)" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Permiso agregado \"%(value)s\"" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "los atributos attrs e included son mutuamente exclusivos" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "No puede almacenar permiso ACI a %s" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Permiso borrado \"%(value)s\"" + +msgid "cannot delete managed permissions" +msgstr "no puede borrar permisos gestionados" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI de permiso %s no fue encontrado" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Modificado el permiso \"%(value)s\"" + +msgid "cannot rename managed permissions" +msgstr "no puede renombrar permisos gestionados" + +msgid "not modifiable on managed permissions" +msgstr "no modificable sobre permisos gestionados" + +msgid "only available on managed permissions" +msgstr "solo disponible sobre permisos gestionados" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "los atributos attrs e included/excluded son mutuamente exclusivos" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" +"no puede establecer bindtype para un permiso que se ha asignado a un " +"privilegio" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d permiso coincidente" +msgstr[1] " %(count)d permisos coincidentes" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Fichas OTP\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Gestionar fichas OTP.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"IPA soporta el uso de fichas OTP para la autenticación de varios factores. " +"Este\n" +"código habilita la gestión de las fichas OTP.\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Añadir una nueva ficha:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Examinar la ficha:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" +"\n" +" Cambiar el vendedor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Borrar una ficha:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "OTP token" +msgstr "Ficha OTP" + +msgid "OTP tokens" +msgstr "Fichas OTP" + +msgid "OTP Tokens" +msgstr "Fichas OTP" + +msgid "OTP Token" +msgstr "Ficha OTP" + +msgid "URI" +msgstr "URI" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Añadir ficha OTP \"%(value)s\"" + +msgid "cannot be empty" +msgstr "no puede estar vacío" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Ficha OTP borrada \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Ficha OTP modificada \"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d OTP ficha coincidente" +msgstr[1] "%(count)d OTP fichas coincidentes" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "" +"\n" +"Sudo Rules\n" +msgstr "Reglas Sudo" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "esta opción ha quedado obsoleta." + +msgid "sudo rules" +msgstr "reglas sudo" + +msgid "Sudo Rules" +msgstr "Reglas Sudo" + +msgid "Sudo Rule" +msgstr "Regla Sudo" + +#, fuzzy, python-format +#| msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " +"por %(gname)s)" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Añadida Regla Sudo “%(value)s”" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Borrada Regla Sudo “%(value)s”" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Regla Sudo Modificada “%(value)s”" + +#, fuzzy, python-format +#| msgid "host category cannot be set to 'all' while there are allowed hosts" +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"la categoría de host no puede ser establecida a 'all' mientras hay host " +"permitidos" + +msgid "users" +msgstr "usuarios" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Comandos" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Comandos" + +#, fuzzy +#| msgid "RunAs Users" +msgid "runAs user" +msgstr "RunAs Usuarios" + +#, fuzzy +#| msgid "RunAs Users" +msgid "runAs users" +msgstr "RunAs Usuarios" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "grupos" + +#, fuzzy +#| msgid "RunAs Groups" +msgid "runAs groups" +msgstr "Grupos RunAs" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d Regla Sudo emparejada" +msgstr[1] "%(count)d Reglas Sudo emparejadas" + +#, fuzzy +#| msgid "hosts cannot be added when host category='all'" +msgid "commands cannot be added when command category='all'" +msgstr "hosts no puede ser añadido con categoría de host='all'" + +#, fuzzy +#| msgid "users cannot be added when user category='all'" +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "comandos para controlar la configuración sudo" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" +"\n" +"Comandos de Sudo\n" +"\n" +"Comandos usados como partes integrantes de sudo\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Crear un comando nuevo\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Eliminar un comando\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" + +msgid "sudo command" +msgstr "comando sudo" + +msgid "sudo commands" +msgstr "comandos sudo" + +msgid "Sudo Commands" +msgstr "Comandos de sudo" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Añadido Comando Sudo “%(value)s”" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Borrado Comando Sudo “%(value)s”" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Modificado Comando Sudo “%(value)s”" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d Comando Sudo emparejado" +msgstr[1] "%(count)d Comandos Sudo emparejados" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of Sudo Commands\n" +#| "\n" +#| "Manage groups of Sudo Commands.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new Sudo Command Group:\n" +#| " ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +#| "\n" +#| " Remove a Sudo Command Group:\n" +#| " ipa sudocmdgroup-del admincmds\n" +#| "\n" +#| " Manage Sudo Command Group membership, commands:\n" +#| " ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +#| "admincmds\n" +#| "\n" +#| " Manage Sudo Command Group membership, commands:\n" +#| " ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +#| "\n" +#| " Show a Sudo Command Group:\n" +#| " ipa group-show localadmins\n" +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" +"\n" +"Grupos de Comandos Sudo\n" +"\n" +"Gestionar grupos de Comandos Sudo.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo Grupo de Comandos Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Borrar un Grupo de Comando Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Mostrat un Grupo de Comando Sudo:\n" +" ipa group-show localadmins\n" + +msgid "sudo command group" +msgstr "grupo de comando sudo" + +msgid "sudo command groups" +msgstr "grupos de comando sudo" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Añadido Grupo de Comando Sudo “%(value)s”" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Borrado Grupo de Comando Sudo “%(value)s”" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Modificado Grupo de Comando Sudo “%(value)s”" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d Grupo de Comando Sudo emparejado" +msgstr[1] "%(count)d Grupos de Comando Sudo emparejados" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Dominios de reino\n" +"\n" +"Gestiona la lista de dominios asociados con el reino IPA.\n" +"\n" +"Esta lista es útil para los Controladores de Dominio de otros reinos que " +"tienen\n" +"establecida confianza con este reino IPA. Necesitan la información para " +"saber que \n" +"peticiones deberían ser reenviadas a KDC de este reino IPA.\n" +"\n" +"Gestión automática: se añade un dominio automáticamente a la lista de " +"dominios\n" +"cuando se crea una nueva Zona DNS gestionada por IPA. Lo mismo se aplica " +"para el borrado.\n" +"\n" +"DNS extermanete gestionado: los dominios que no son gestionados en el " +"servidor\n" +"IPA DNA necesitan ser añadidos manualmente a la lista usando el comando ipa " +"realmdomains-mod command.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Muestra la lista actual de dominios reino:\n" +" ipa realmdomains-show\n" +"\n" +" Reemplaza la lista de dominios reino:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Añade un dominio a la lista de dominios reino:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Borra un dominio de la lista de dominios reino:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" + +msgid "Realm domains" +msgstr "Dominios reino" + +msgid "Realm Domains" +msgstr "Dominios Reino" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" +"\n" +" Modificar dominios reino\n" +"\n" +" Comprobación DNS: Cuando añade manualmente un dominio a la lista, por\n" +" defecto se lleva a cabo una comprobación DNS. Asegura que el dominio " +"está\n" +" asociado con el reino IPA, comprobando si el dominio tiene un registro " +"_kerberos\n" +" TXT que contenga el nombre del reino IPA realm name. Esta comprobación " +"se\n" +" puede saltar especificando la opción --force.\n" +"\n" +" Eliminación: cuando un dominio reino que tiene una zona DNS coincidente\n" +" gestionada por IPA se borra, el registro _kerberos TXT correspondiente " +"en la\n" +" es borrado automáticamente también. Los demás registros en la zona o la " +"zona\n" +" no son afectados.\n" +" " + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"La zona DNS para cada realmdomain debe contener registros SOA o NS. No se " +"han encontrado registros para: %s" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "Los siguientes dominio no pertenecen a este reino: %(domains)s" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"El reino de los siguientes dominios podrían no ser detectados: %(domains)s. " +"Si estos dominios pertenecen a este reino, cree por favor un registro " +"_kerberos TXT que contenga \"%(realm)s\" en cada uno." + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"La opción --domain no puede ser usada junto con --add-domain o --del-domain. " +"Use --domain para especificar explícitamente la lista de todo el dominio, " +"para añadir/borrar dominios concretos, use --add-domain/del-domain." + +msgid "IPA server domain cannot be omitted" +msgstr "Servidor de domino IPA no puede ser omitido" + +msgid "IPA server domain cannot be deleted" +msgstr "Servidor de dominio IPA no puede ser borrado" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" +"\n" +"Información devuelta sobre la identidad actualmente autentificada\n" +"\n" +"El comando quien soy devuelve información sobre como obtener más detalles " +"sobre la identidad autentificada para esta petición. La información " +"incluye:\n" +"\n" +" * tipo de objeto\n" +" * comando para recuperar detalles del objeto\n" +" * argumentos y opciones a pasar al comando\n" +"\n" +"La información se devuelve como un diccionario. Los ejemplos de abajo usan " +"la salida 'key: value' con propósitos ilustrativos.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Buscar como usuario IPA:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Buscar como un usuario desde un dominio de confianza:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Buscar como host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Buscar como servicio Kerberos:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" + +msgid "Describe currently authenticated identity." +msgstr "Describe la identidad actualmente autentificada." + +msgid "Object class name" +msgstr "Nombre de clase objeto" + +msgid "Function to get details" +msgstr "Función para obtener detalles" + +msgid "Arguments to details function" +msgstr "Argumentos para detalles de la función" + +msgid "Cannot query Directory Manager with API" +msgstr "No se puede cosultar al Administrador de Directorios con API" + +msgid "kerberos ticket policy settings" +msgstr "ajustes de la entrada de política kerberos" + +msgid "Kerberos Ticket Policy" +msgstr " Política de tiquete de Kerberos" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "Vida máxima" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "Renovación máxima" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "Vida máxima" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "Nombre del servidor proxy RADIUS" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "Vida máxima" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "Renovación máxima" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +msgid "Hardened max renew" +msgstr "" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "La política de entrada para %s podría no ser leída" + +msgid "Default ticket policy could not be read" +msgstr "La política de entrada por defecto podría no ser leída" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"Localizaciones IPA\n" + msgid "" "\n" "Manipulate DNS locations\n" @@ -3174,10 +21556,6534 @@ msgstr "" msgid "" "\n" -"Manipulate DNS server configuration\n" +" Find all locations:\n" +" ipa location-find\n" msgstr "" "\n" -"Manipular la configuración del servidor DNS\n" +" Encontrar todas las localizaciones:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Mostrar localización específica:\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Añadir localización:\n" +" ipa location-add location --description 'My location'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Borrar localización:\n" +" ipa location-del location\n" + +msgid "location" +msgstr "localización" + +msgid "locations" +msgstr "localizaciones" + +msgid "IPA Locations" +msgstr "Localizaciones IPA" + +msgid "IPA Location" +msgstr "Localización IPA" + +msgid "Location name" +msgstr "Nombre de localización" + +msgid "IPA location name" +msgstr "Nombre de localización IPA" + +msgid "IPA Location description" +msgstr "Descripción de Localización IPA" + +msgid "Servers" +msgstr "Servidores" + +msgid "Servers that belongs to the IPA location" +msgstr "Servidores que pertenecen a la localización IPA" + +msgid "Advertised by servers" +msgstr "Anunciado por los servidores" + +msgid "List of servers which advertise the given location" +msgstr "Lista de servidores que anuncian la localización dada" + +msgid "Add a new IPA location." +msgstr "Añadir una nueva localización IPA." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Añadida localización IPA \"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "Borrar una localización IPA." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Borrada localización IPA \"%(value)s\"" + +msgid "IPA Server" +msgstr "Servidor IPA" + +msgid "Modify information about an IPA location." +msgstr "Modificar información sobre localización IPA." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Modificada localización IPA \"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "Buscar localizaciones IPA." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d localización IPA emparejada" +msgstr[1] "%(count)d localizaciones IPA emparejadas" + +msgid "Display information about an IPA location." +msgstr "Muestra información sobre una localización IPA." + +msgid "Servers in location" +msgstr "Servidores en localización" + +#, fuzzy +#| msgid "LDAP schema" +msgid "" +"\n" +"API Schema\n" +msgstr "Esquema LDAP" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Show specific location:\n" +#| " ipa location-show location\n" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Mostrar localización específica:\n" +" ipa location-show location\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all servers:\n" +#| " ipa server-find\n" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Encuentra todos los servidores:\n" +" ipa server-find\n" + +msgid "Name" +msgstr "Nombre" + +#, fuzzy +#| msgid "Location" +msgid "Documentation" +msgstr "Ubicación" + +msgid "Exclude from" +msgstr "" + +#, fuzzy +#| msgid "Include Enabled" +msgid "Include in" +msgstr "Include Habilitado" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" +"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Permiso" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Record name" +msgid "Method name" +msgstr "Nombre de registro" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: no se encuentra %(oname)s" + +#, fuzzy +#| msgid "Display information about a range." +msgid "Display information about a command." +msgstr "Mostrar información sobre un rango." + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for commands." +msgstr "Buscar Comandos Sudo." + +#, fuzzy +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "Ejecutar comandos" + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a class." +msgstr "Mostrar información sobre un host." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for classes." +msgstr "Buscar roles." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a help topic." +msgstr "Mostrar información sobre un grupo de red." + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Search for help topics." +msgstr "Buscar grupos de host." + +#, fuzzy +#| msgid "is required" +msgid "Required" +msgstr "se requiere" + +#, fuzzy +#| msgid "Custom value" +msgid "Multi-value" +msgstr "Valor personal" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "Nombre de ACI" + +#, fuzzy +#| msgid "Change password" +msgid "Confirm (password)" +msgstr "Cambiar contraseña" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Shell predeterminada" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "Grupo de usuarios predeterminado" + +msgid "Label" +msgstr "" + +#, fuzzy +#| msgid "Advertised by servers" +msgid "Convert on server" +msgstr "Anunciado por los servidores" + +#, fuzzy +#| msgid "Operations Error" +msgid "Option group" +msgstr "Error en Operaciones" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Argumentos posicionales" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: no se encuentra %(oname)s" + +#, fuzzy +#| msgid "Display information about a range." +msgid "Display information about a command parameter." +msgstr "Mostrar información sobre un rango." + +#, fuzzy +#| msgid "Search for ranges." +msgid "Search command parameters." +msgstr "Buscar intervalos." + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: no se encuentra %(oname)s" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a command output." +msgstr "Mostrar información sobre un grupo denominado." + +#, fuzzy +#| msgid "Search for Sudo Command Groups." +msgid "Search for command outputs." +msgstr "Buscar Grupos de Comando Sudo." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"=======\n" +"ADVERTENCIA:\n" +"\n" +"El plugin DNA en 389-ds asignará IDs basados en el rango configurado para " +"el\n" +"dominio local. Actualmente el plugin DNA *no puede* ser reconfigurado en " +"base a\n" +"los rangos locales establecidos por medio de esta familia de comandos.\n" +"\n" +"El cambio de configuración manual ha de ser hecho en la configuración del " +"plugin\n" +"DNA para e nuevo rango local. Especialmente, el atributo dnaNextRange de\n" +"'cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"ha\n" +"sido modificado para coincidir con el nuevo rango.\n" +"=======\n" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "Intervalos de ID" + +msgid "ID Range" +msgstr "Intervalo de ID" + +msgid "local domain range" +msgstr "intervalo de dominios locales" + +msgid "Active Directory domain range" +msgstr "Intervalo de dominios de Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "Rango de confianza Active Directory con atributos POSIX" + +msgid "ID range type, one of allowed values" +msgstr "Tipo de rango ID, uno de los siguientes valores" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" +"la modificación de rango dejando objetos con ID fuera del rango definido no " +"está permitida" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"No se puede llevar a cabo la validación SID sin el soporte de Samba 4 " +"instalado. Asegúrese de que tiene instalado el sub paquete server-trust-ad " +"de IPA en el servidor" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Los fideicomisos a través del reino no están instalados. Asegúrese de que " +"está corriendo ipa-adtrust-install en el servidor IPA primero" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "SID no es reconocido como un SID válido para el dominio de confianza" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +" Añadir un nuevo rango ID.\n" +"\n" +" Para añadir un nuevo rango ID usted debe especificar siempre\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Adicionalmente\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" puede ser dado para un nuevo rangi ID para el dominio local mientras\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" debe ser dado para añadir un nuevo rango para un dominio AD de " +"confianza.\n" +"\n" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Se añadió el intervalo de ID «%(value)s»" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "Las opciones dom-sid y dom-name no pueden ser usadas juntas" + +msgid "Specified trusted domain name could not be found." +msgstr "" +"El nombre especificado de dominio de confianza podría no ser encontrado." + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "Las opciones dom-sid/dom-name y rid-base se deben usar juntas" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"La opción rid-base no se debe usar cuando el tipo de rango IPA es ipa-ad-" +"trust-posix" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"El tipo de Rango IPA debe ser uno de ipa-ad-trust o ipa-ad-trust-posix " +"cuando se especifica el SID del dominio de confianza" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Las opciones dom-sid/dom-name y secondary-rid-base no pueden ser usados " +"juntos" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"El tipo de Rango IPA Range no debe ser ni ipa-ad-trust ni ipa-ad-trust-posix " +"cuando no se especifica el SID del dominio de confianza." + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "Las opciones secondary-rid-base y rid-base ser deben usar juntas" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "El rango RID primario y el secundario no pueden superponerse" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Debe especificar las opciones tanto rid-base como secondary-rid-base " +"options, puesto que ipa-adtrust-install ya ha estado corriendo." + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Se eliminó el intervalo de ID «%(value)s»" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d rango coincide" +msgstr[1] "%(count)d rangos coinciden" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" +"Modificar rango ID.\n" +"\n" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Modificar rango ID \"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Este comando no puede ser usado para cambiar la asignación de ID para el " +"dominio IPA local. Ejecute `ipa help idrange` para más información" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"El SID para el nombre de dominio de confianza especificado podría no ser " +"encontrado. Por favor especifique directamente el SID usando la opción dom-" +"sid." + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "Las opciones dom-sid y secondary-rid-base no podrían ser usadas juntas" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "Las opciones dom-sid y rid-base deben ser usadas juntas" + +msgid "self service permission" +msgstr "auto servicio de permiso" + +msgid "self service permissions" +msgstr "auto servicio de permisos" + +msgid "Self Service Permissions" +msgstr "Permisos de autoservicio" + +msgid "Self Service Permission" +msgstr "Auto Servicio de Permiso" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Añadido autoservicio \"%(value)s\"" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "autoservicio eliminados \"%(value)s\"" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Autoservicio modificado \"%(value)s\"" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d autoservicio coincidente" +msgstr[1] "%(count)d autoservicios coincidentes" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Roles del servidor IPA\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"Obtener el estado de los roles (servidor DNS, CA, etc.) suministrado por los " +"IPA maestros.\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" +"\n" +"El estado de un rol es habilitado, configurado o ausente.\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Muestra el estado del rol 'DNS server' sobre un servidor:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Muestra el estado de todos los roles que contienen 'AD' sobre un " +"servidor:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Muestra el estado de todos los roles configurados en un servidor:\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" +"\n" +" Muestra el rol maestro IPA implícito:\n" +" ipa server-role-find --include-master\n" + +msgid "server role" +msgstr "rol servidor" + +msgid "server roles" +msgstr "roles de servidor" + +msgid "IPA Server Roles" +msgstr "Roles de Servidor IPA" + +msgid "IPA Server Role" +msgstr "Rol de Servidor IPA" + +msgid "IPA server role name" +msgstr "Nombre de rol del servidor IPA" + +msgid "Role status" +msgstr "Estado rol" + +msgid "Status of the role" +msgstr "Estado del rol" + +msgid "Show role status on a server" +msgstr "Muestra el rol de estado sobre un servidor" + +msgid "Find a server role on a server(s)" +msgstr "Encontrar un rol de servidor sobre un servidor(s)" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s rol servidor coincidente" +msgstr[1] "%(count)s roles servidor coincidentes" + +msgid "Include IPA master entries" +msgstr "Incluir entradas IPA maestro" + +msgid "roles" +msgstr "roles" + +msgid "IPA role name" +msgstr "Nombre de rol IPA" + +msgid "HBAC rule and local members cannot both be set" +msgstr "Regla HBAC y miembros locales no pueden ser fijados" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "Lista de mapeo de usuario SELinux no encontrado en la configuración" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" +"Usuario SELinux %(user)s no encontrado en la lista de pedidos (en config)" + +msgid "SELinux User Map rule" +msgstr "Regla Mapa de Usuario SELinux" + +msgid "SELinux User Map rules" +msgstr "Reglas Mapa de Usuario SELinux" + +msgid "SELinux User Maps" +msgstr "Mapas de Usuario SELinux" + +msgid "SELinux User Map" +msgstr "Mapa de Usuario SELinux" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Regla HBAC %(rule)s no encontrada" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Añadido Mapa de Usuario SELinux \"%(value)s\"" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Borrado Mapa de Usuario SELinux \"%(value)s\"" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Modificado Mapa de Usuario SELinux \"%(value)s\"" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d Mapa de Usuario SELinux coincidente" +msgstr[1] "%(count)d Mapas de Usuario SELinux coincidentes" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Habilitado Mapa de Usuario SELinux \"%(value)s\"" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Deshabilitado Mapa de Usuario SELinux \"%(value)s\"" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: rol no encontrado" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}: no existe tal atributo" + +msgid "pyhbac is not installed." +msgstr "pyhbac no está instalado." + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"Operaciones de certificado IPA\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"Implementa un conjunto de comandos para manejar los certificados de servidor " +"SSL.\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"Las peticiones de certificado existen en la forma de una Petición de Firma " +"de\n" +"Certificado (CSR) en formato PEM.\n" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" +"\n" +"La placa de identidad CA usa el valor CN del CSR y fuerza al resto del " +"sujeto a\n" +"valores configurados en el servidor.\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"Se ha almacenado un certificado con un servicio principal y un servicio " +"principal\n" +"necesita un host.\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"Con el objetivo de pedir un certificado:\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* El host debe existir\n" +"* El servicio debe existir (o debe usar la opción --add para añadirlo " +"automáticamente)\n" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" +"\n" +"BUSCANDO:\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"Los certificados pueden ser buscados por sujeto del certificado, número de " +"serie,\n" +"razón de la revocación, fechas de validez y fecha de envío.\n" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" +"\n" +"Cuando se busca por fechas _from fecha hace un >= search y _to fecha hace\n" +"<= search. Cuando se combina esto hace como un AND.\n" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"Las fechas se tratan como GMT para coincidir con las fechas de los " +"certificados.\n" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" +"\n" +"El formato de fecha es YYYY-mm-dd.\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" +"\n" +" Pide un nuevo certificado y añade el principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" +"\n" +" Recupera un certificado existente:\n" +" ipa cert-show 1032\n" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" +"\n" +" Revocar un certificado (vea RFC 5280 para detalles de la razón):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" +"\n" +" Quita un certificado del estado de cogido para revocación:\n" +" ipa cert-remove-hold 1032\n" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" +"\n" +" Comprueba el estado de una petición de firma:\n" +" ipa cert-status 10\n" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for certificates by hostname:\n" +#| " ipa cert-find --subject=ipaserver.example.com\n" +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for certificates by hostname:\n" +#| " ipa cert-find --subject=ipaserver.example.com\n" +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for certificates by hostname:\n" +#| " ipa cert-find --subject=ipaserver.example.com\n" +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Search for certificates by hostname:\n" +#| " ipa cert-find --subject=ipaserver.example.com\n" +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "No especificada" + +#, fuzzy +#| msgid "Key Compromise" +msgid " * 1 - keyCompromise\n" +msgstr "Clave de transacción" + +#, fuzzy +#| msgid "AA Compromise" +msgid " * 2 - cACompromise\n" +msgstr "AA transacción" + +#, fuzzy +#| msgid "Affiliation Changed" +msgid " * 3 - affiliationChanged\n" +msgstr "Afiliación cambiada" + +msgid " * 4 - superseded\n" +msgstr "" + +#, fuzzy +#| msgid "Cessation of Operation" +msgid " * 5 - cessationOfOperation\n" +msgstr "Cese de operaciones" + +#, fuzzy +#| msgid "Certificate Hold" +msgid " * 6 - certificateHold\n" +msgstr "Certificado retenido" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +#, fuzzy +#| msgid "Privilege Withdrawn" +msgid " * 9 - privilegeWithdrawn\n" +msgstr "Retirada de privilegios" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "No ha sido encontrado el equipo anfitrión '%(host)s' " + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "Certificado codificado en Base-64." + +msgid "Certificate chain" +msgstr "Cadena de certificado" + +msgid "X.509 certificate chain" +msgstr "Cadena de certificado X.509" + +msgid "Subject" +msgstr "Asunto" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Dirección de correo electrónico" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject DNS name" +msgstr "Sujeto DN" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Dirección postal" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Base del directorio principal" + +#, fuzzy +#| msgid "Object class name" +msgid "Subject EDI Party name" +msgstr "Nombre de clase objeto" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Asunto" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "Dirección IP" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject OID" +msgstr "Sujeto DN" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject UPN" +msgstr "Sujeto DN" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "debe ser Kerberos principal" + +#, fuzzy +#| msgid "Subject Distinguished Name" +msgid "Subject Other Name" +msgstr "Nombre Distinguido del Sujeto" + +msgid "Issuer" +msgstr "Emisor" + +msgid "Issuer DN" +msgstr "Editor DN" + +msgid "Not Before" +msgstr "No antes de" + +msgid "Not After" +msgstr "No luego de" + +msgid "Fingerprint (SHA1)" +msgstr "Huella digital (SHA1)" + +msgid "Fingerprint (SHA256)" +msgstr "Huella digital (SHA256)" + +msgid "Serial number (hex)" +msgstr "N.º de serie (hex.)" + +msgid "Request status" +msgstr "Estado de la petición" + +msgid "Include certificate chain in output" +msgstr "Incluir la cadena del certificado en la salida" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "si no existe, agregar automáticamente el principal" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, fuzzy, python-format +#| msgid "" +#| "Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of " +#| "entry '%s'." +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" +"Privilegio 'write' insuficiente al atributo 'krbLastPwdChange' de la entrada " +"'%s'." + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, fuzzy, python-format +#| msgid "The principal for this request doesn't exist." +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "El principal para esta petición no existe." + +#, fuzzy, python-format +#| msgid "Insufficient privilege to modify a certificate profile." +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "Privilegio insuficiente para modificar un certificado perfil" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Sudo Option" +msgid "'add' option" +msgstr "Opción de sudo" + +msgid "The principal for this request doesn't exist." +msgstr "El principal para esta petición no existe." + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Estatus" + +msgid "Revoked" +msgstr "Revocado" + +msgid "Revocation reason" +msgstr "Motivo de la revocación" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "Motivo por el cual el certificado ha sido revocado (0-10)" + +#, fuzzy, python-format +#| msgid "Owner" +msgid "Owner %s" +msgstr "Propietario" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "7 no es una razón válida de revocación" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario (\"name" +"\")" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d servicio coincidente" +msgstr[1] "%(count)d servicios coincidentes\t\t\t" + +#, fuzzy, python-format +#| msgid "Search for services with these managed by hosts." +msgid "Search for certificates with these owner %s." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +#, fuzzy, python-format +#| msgid "Search for services without these managed by hosts." +msgid "Search for certificates without these owner %s." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy +#| msgid "View" +msgid "ID View" +msgstr "Ver" + +#, fuzzy +#| msgid "Assigned ID View" +msgid "system ID View" +msgstr "Vista ID asignada" + +#, fuzzy +#| msgid "View" +msgid "ID Views" +msgstr "Ver" + +#, fuzzy +#| msgid "User object class" +msgid "User object overrides" +msgstr "Clase de objeto de usuario" + +#, fuzzy +#| msgid "Group object class" +msgid "Group object overrides" +msgstr "Clase de objeto de grupo" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "Categoría del equipo al que se aplica la regla" + +#, fuzzy, python-format +#| msgid "Added ID range \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Se añadió el intervalo de ID «%(value)s»" + +#, fuzzy, python-format +#| msgid "Deleted ID range \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Se eliminó el intervalo de ID «%(value)s»" + +#, fuzzy, python-format +#| msgid "Modified ID range \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "Modificar rango ID \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d ACI coincidente" +msgstr[1] "%(count)d ACIs coincidentes" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#, fuzzy +#| msgid "realm not found\n" +msgid "not found" +msgstr "reino no encontrado\n" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +#, fuzzy +#| msgid "ACI object." +msgid "IPA object" +msgstr "Objeto ACI." + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, fuzzy, python-format +#| msgid "Conditions that could not be removed" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Condiciones que no pueden ser eliminadas" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +#| msgid "Add a new IPA service." +msgid "Add a new ID override." +msgstr "Añadir un nuevo servicio IPA." + +#, fuzzy, python-format +#| msgid "Added ID range \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Se añadió el intervalo de ID «%(value)s»" + +#, fuzzy +#| msgid "Delete an ID range." +msgid "Delete an ID override." +msgstr "Eliminar un intervalo de ID." + +#, fuzzy, python-format +#| msgid "Deleted ID range \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Se eliminó el intervalo de ID «%(value)s»" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an ID override." +msgstr "Modificar un servicio HBAC." + +#, fuzzy, python-format +#| msgid "Modified ID range \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Modificar rango ID \"%(value)s\"" + +msgid "ID override" +msgstr "" + +#, fuzzy +#| msgid "DNS zone root record cannot be renamed" +msgid "ID overrides cannot be renamed" +msgstr "El registro DNS de zona raíz no puede ser renombrado" + +#, fuzzy +#| msgid "Search for IPA services." +msgid "Search for an ID override." +msgstr "Buscar servicios IPA." + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d servicio coincidente" +msgstr[1] "%(count)d servicios coincidentes\t\t\t" + +#, fuzzy +#| msgid "Display information about an IPA service." +msgid "Display information about an ID override." +msgstr "Mostrar información sobre un servicio IPA." + +#, fuzzy +#| msgid "User ID" +msgid "User ID override" +msgstr "ID de usuario" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "Certificado de usuario codificado en Base-64" + +#, fuzzy +#| msgid "Group ID Number" +msgid "Group ID override" +msgstr "Número de Identificación de Grupo" + +#, fuzzy +#| msgid "Group ID Number" +msgid "Group ID overrides" +msgstr "Número de Identificación de Grupo" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Añade uno o más certificados a la entrada del usuario" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Añadidos certificados al usuario \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Borra uno o más certificados de la entrada de usuario" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Ha sido agregado el servicio \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Ha sido eliminado el servicio \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Ha sido modificado el servicio \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d servicio coincidente" +msgstr[1] "%(count)d servicios coincidentes\t\t\t" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Ha sido agregado el grupo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Ha sido eliminado el grupo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Ha sido modificado el grupo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d grupo coincidente" +msgstr[1] "%(count)d grupos coincidentes" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Regla de Membresía Automática.\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Brinde claridad a la membresía de hosts y usuarios configurando patrones\n" +"inclusivos o exclusivos de expresiones regulares, usted puede " +"automáticamente\n" +"asignar una nuevas entradas a un grupo o grupo de host en base a la " +"información del atributo.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Un regla está directamente asociada con un grupo por nombre, de modo que " +"usted\n" +"no puede crear un regla sin un grupo o grupo de host que lo acompañen.\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Una condición es una expresión regular usada por 389-ds para coincidir una " +"nueva\n" +"entrada entrtante con una regla de auto miembro. Si la coincidencia es una " +"regla\n" +"inclusiva la entrada se añade al grupo o grupo de host apopiado.\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"Se podría especificar un grupo o grupo de host predeterminado para las " +"entradas\n" +"que no coincidan con ninguna regla. En caso de entradas de usuario, este " +"grupo\n" +"será un grupo de reserva puesto que todos los usuarios son por defecto " +"miembros del grupo especificado en la configuración IPA.\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"El comando de reconstrucción de auto miembro puede ser usado para ejecutar \n" +"retroactivamente reglas de auto miembro contra las entradas existentes, así " +"reconstruirá su membresía.\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete a host:\n" +#| " ipa host-del test.example.com\n" +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +" Borrar un host:\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Modify an automember rule.\n" +#| " " +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Modificar una regla automiembro.\n" +" " + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all servers:\n" +#| " ipa server-find\n" +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Encuentra todos los servidores:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "Regla Auto Afiliación" + +#, fuzzy, python-format +#| msgid "%(pkey)s: %(oname)s not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(pkey)s: no se encuentra %(oname)s" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s no es un atributo válido." + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Añadir una regla automiembro.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Regla automiembro añadida \"%(value)s\"" + +msgid "Auto Membership is not configured" +msgstr "Auto Afiliación no está configurada" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Añadir condiciones a una regla automiembro.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Añadida condición(es) a \"%(value)s\"" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Regla auto miembro: %s no encontrada!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Anula esto de modo que podamos añadir completados y fallados al " +"resultado devuelto.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Borrar condiciones de una regla automiembro.\n" +" " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Condición(es) eliminada(s) de «%(value)s»" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Anula esto de modo que podamos fijar completados y fallados.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Modificar una regla automiembro.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Modificada regla de automiembro \"%(value)s\"" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Borra una regla automiembro.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Borrada regla automiembro \"%(value)s\"" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Búsqueda reglas automiembro.\n" +" " + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d reglas coincidentes" +msgstr[1] "%(count)d reglas coincidentes" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Muestra información sobre una regla automiembro.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +msgid "No default (fallback) group set" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Muestra información sobre una regla automiembro.\n" +" " + +msgid "Task DN" +msgstr "" + +#, fuzzy +#| msgid "Name of the trusted domain" +msgid "DN of the started task" +msgstr "Nombre del dominio de confianza" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +#, fuzzy +#| msgid "HBAC rule and local members cannot both be set" +msgid "users and hosts cannot both be set" +msgstr "Regla HBAC y miembros locales no pueden ser fijados" + +#, fuzzy +#| msgid "hosts cannot be added when host category='all'" +msgid "hosts cannot be set when type is 'group'" +msgstr "hosts no puede ser añadido con categoría de host='all'" + +#, fuzzy +#| msgid "users cannot be added when user category='all'" +msgid "users cannot be set when type is 'hostgroup'" +msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" + +#, fuzzy +#| msgid "Automember rebuild membership task completed" +msgid "Automember rebuild membership task started" +msgstr "Tarea completada de reconstruir la membresía del miembro" + +msgid "Automember rebuild membership task completed" +msgstr "Tarea completada de reconstruir la membresía del miembro" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +#, fuzzy +#| msgid "Automember Rule" +msgid "Automember" +msgstr "Regla Automiembro" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Remove conditions from an automember rule.\n" +#| " " +msgid "Remove orphan automember rules" +msgstr "" +"\n" +" Borrar condiciones de una regla automiembro.\n" +" " + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" +"\n" +"Manejar Autoridades de Certificado\n" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" +"\n" +"Su pueden añadir Autoridades de Certificado Subordinadas (Sub-CAs) para\n" +"emisión con alcance de certificados X.509.\n" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" +"\n" +"Las CAs están habilitadas en la creación, pero su uso está sujeto a las ACLs " +"de CA\n" +"a no ser que el operador haya permitido saltarse las ACLs de CA.\n" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" +"\n" +"Todas las CAs excepto la CA 'IPA' pueden ser deshabilitadas y vueltas a " +"habilitar.\n" +"Deshabilitar una CA evita que envíe certificados pero no afecta a la validez " +"de sus \n" +"certificados.\n" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" +"\n" +"Las CAs (todas excepto la CA 'IPA') pueden ser borradas. El borrado de una " +"CA\n" +"origina que la su firma sea revocada y su clave privada borrada.\n" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "Autoridad de Certificado" + +msgid "Certificate Authorities" +msgstr "Autoridades de Certificado" + +msgid "Name for referencing the CA" +msgstr "Nombre para referenciar la CA" + +msgid "Description of the purpose of the CA" +msgstr "Descripción del propósito de la CA" + +msgid "Authority ID" +msgstr "ID de la Autoridad" + +msgid "Dogtag Authority ID" +msgstr "ID de la Placa de Identidad de la Autoridad" + +msgid "Subject DN" +msgstr "Sujeto DN" + +msgid "Subject Distinguished Name" +msgstr "Nombre Distinguido del Sujeto" + +msgid "Issuer Distinguished Name" +msgstr "Nombre Distinguido de Editor" + +msgid "Search for CAs." +msgstr "Búsqueda de CAs." + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d CA coincidente" +msgstr[1] "%(count)d CAs coincidentes" + +msgid "Display the properties of a CA." +msgstr "Muestra las propiedades de una CA." + +msgid "Create a CA." +msgstr "Crear una CA." + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "Creada CA \"%(value)s\"" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Privilegio 'add' insuficiente para la entrada '%s'." + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "Atributos no reconocidos: %(attrs)s" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "Sujeto DN ya está usado por CA '%s'" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "Borrada CA \"%(value)s\"" + +msgid "Insufficient privilege to delete a CA." +msgstr "Privilegio insuficiente para borrar una CA." + +msgid "CA" +msgstr "CA" + +msgid "IPA CA cannot be deleted" +msgstr "IPA CA no puede ser borrada" + +#, fuzzy +#| msgid "Must be an integer" +msgid "Must be disabled first" +msgstr "Debe ser un entero" + +msgid "Modify CA configuration." +msgstr "Modificar configuración de CA." + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "Modificada CA \"%(value)s\"" + +msgid "Insufficient privilege to modify a CA." +msgstr "Privilegio insuficiente para modificar una CA." + +msgid "Disable a CA." +msgstr "Deshabilitar una CA." + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "Deshabilitada CA \"%(value)s\"" + +msgid "IPA CA cannot be disabled" +msgstr "IPA CA no puede ser deshabilitada" + +msgid "Enable a CA." +msgstr "Habilitar una CA." + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "Habilitada CA \"%(value)s\"" + +msgid "Internationalization messages" +msgstr "Mensajes de internacionalización" + +msgid "Your session has expired. Please log in again." +msgstr "Su sesión ha expirado. Por favor acceda otra vez." + +msgid "Apply" +msgstr "Aplicar" + +msgid "Rebuild auto membership" +msgstr "Reconstruir auto membresía" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "¿Está seguro de que quiere reconstruir la auto membresía?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "¿Está seguro de que desea seguir adelante con la acción?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "¿Está seguro de que desea borrar ${object}?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "¿Está seguro de que desea deshabilitar ${object}?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Está seguro de que desea habilitar ${object}?" + +msgid "Actions" +msgstr "Acciones" + +msgid "Add" +msgstr "Agregar" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "${count} item(s) añadido" + +msgid "Direct Membership" +msgstr "Afiliación Directa" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "Filtro disponible ${other_entity}" + +msgid "Indirect Membership" +msgstr "Afiliación Indirecta" + +msgid "No entries." +msgstr "Sin entradas." + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Mostrando ${start} a ${end} de ${total} entradas." + +msgid "Remove" +msgstr "Borrar" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} item(s) borrado" + +msgid "Show Results" +msgstr "Mostrar Resultados" + +msgid "Authentication indicators" +msgstr "Indicadores de autenticación" + +msgid "Authentication indicator" +msgstr "Indicador de autenticación" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Método implícito (conraseña) será usado si no se ha elegido método.

Contraseña + Dos factores: LDAP y Kerberos permiten la " +"autenticación con uno de lostipos de autenticación pero Kerberos usa un " +"método de pre autenticacion que requiere usar armadura ccache.

RADIUS con otro tipo: Kerberos siempre usa RADIUS, " +"pero LDAP nunca lo hace. LDAP solo reconoce las opciones de contraseña y dos " +"factores.

" + +msgid "Add Custom Authentication Indicator" +msgstr "Añadir Indicador de Autenticación Personal" + +msgid "Two factor authentication (password + OTP)" +msgstr "Autenticación dos factores (contraseña + OTP)" + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "Deshabilitar la anulación por uso" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Configuración por uso, sobre escribe la configuracion global si cualquier " +"opción esta marcada.

Contraseña + Dos factores: LDAP " +"y Kerberos permiten la autenticación con uno de lostipos de autenticación " +"pero Kerberos usa un método de pre autenticacion que requiere usar armadura " +"ccache

RADIUS con otro tipo: Kerberos siempre usa " +"RADIUS, pero LDAP nunca lo hace. LDAP solo reconoce las opciones de " +"autenticación contraseña y dos factores.

" + +msgid "About" +msgstr "Sobre" + +msgid "Activate" +msgstr "Activar" + +msgid "Add and Add Another" +msgstr "Agregar y agregar otro" + +msgid "Add and Close" +msgstr "Añadir y cerrar" + +msgid "Add and Edit" +msgstr "Agregar y Editar" + +msgid "Add Many" +msgstr "Añadir Muchos" + +msgid "Back" +msgstr "Atrás" + +msgid "Cancel" +msgstr "Cancelar" + +msgid "Clear" +msgstr "Limpiar" + +msgid "Clear all fields on the page." +msgstr "Limpiar todos los campos en la página." + +msgid "Close" +msgstr "Cerrar" + +msgid "Disable" +msgstr "Desactivar" + +msgid "Download" +msgstr "Descargar" + +msgid "Download certificate as PEM formatted file." +msgstr "Descargar certificado como fichero formateado PEM." + +msgid "Edit" +msgstr "Editar" + +msgid "Enable" +msgstr "Activar" + +msgid "Find" +msgstr "Buscar" + +msgid "Get" +msgstr "Obtener" + +msgid "Hide" +msgstr "Ocultar" + +msgid "Issue" +msgstr "Tema" + +msgid "Match" +msgstr "Emparejar" + +msgid "Match users according to certificate." +msgstr "Emparejar usuarios de acuerdo al certificado" + +msgid "Migrate" +msgstr "Migrar" + +msgid "OK" +msgstr "Aceptar" + +msgid "Refresh" +msgstr "Actualizar" + +msgid "Reload current settings from the server." +msgstr "Recargar ajustes actuales desde el servidor." + +msgid "Delete" +msgstr "Eliminar" + +msgid "Remove hold" +msgstr "Quitar espera" + +msgid "Reset" +msgstr "Resetear" + +msgid "Reset Password" +msgstr "Restablecer contraseña" + +msgid "Reset Password and Log in" +msgstr "Resetear la Contraseña y Acceder" + +msgid "Restore" +msgstr "Restaurar" + +msgid "Retry" +msgstr "Reintentar" + +msgid "Revert" +msgstr "Revertir" + +msgid "Revoke" +msgstr "Revocar" + +msgid "Save" +msgstr "Guardar" + +msgid "Set" +msgstr "Definir" + +msgid "Show" +msgstr "Mostrar" + +msgid "Stage" +msgstr "Escenario" + +msgid "Update" +msgstr "Actualizar" + +msgid "View" +msgstr "Ver" + +msgid "Customization" +msgstr "Personalización" + +msgid "Pagination Size" +msgstr "Tamaño de Paginación" + +msgid "Collapse All" +msgstr "Cerrar Todo" + +msgid "Expand All" +msgstr "Expandir Todo" + +msgid "General" +msgstr "General" + +msgid "Identity Settings" +msgstr "Configuración de identidad" + +#, fuzzy +#| msgid "Role Settings" +msgid "Record Settings" +msgstr "Configuración de rol" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Configuraciones de ${entity} ${primary_key}" + +msgid "Back to Top" +msgstr "Volver al comienzo" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "${entity} ${primary_key} actualizado" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity} añadido con éxito" + +msgid "Add custom value" +msgstr "Añadir valor personal" + +msgid "Available" +msgstr "Disponible" + +msgid "Some operations failed." +msgstr "Algunas operaciones fallaron." + +msgid "Operations Error" +msgstr "Error en Operaciones" + +msgid "Confirmation" +msgstr "Confirmación " + +msgid "Custom value" +msgstr "Valor personal" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "Esta página tiene cambios sin guardar. Por favor, guardar o deshacer." + +msgid "Unsaved Changes" +msgstr "Cambios No Guardados" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Editar ${entity}" + +msgid "Hide details" +msgstr "Esconder detalles" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, versión: ${version}" + +msgid "Prospective" +msgstr "Prospectivo" + +msgid "Redirection" +msgstr "Redirección " + +msgid "Select entries to be removed." +msgstr "Las entradas seleccionadas han sido quitadas." + +msgid "Result" +msgstr "Resultado" + +msgid "Show details" +msgstr "Mostrar detalles" + +msgid "Success" +msgstr "Éxito" + +msgid "Validation error" +msgstr "Error de validación" + +msgid "Input form contains invalid or missing values." +msgstr "La entrada contiene valores no válidos o desaparecidos." + +msgid "Please try the following options:" +msgstr "Por favor intentar las siguientes opciones:" + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"Si el problema persiste por favor contacte con el administrador del sistema." + +msgid "Refresh the page." +msgstr "Refrescar la página." + +msgid "Reload the browser." +msgstr "Recargar el navegador." + +msgid "Return to the main page and retry the operation" +msgstr "Volver a la página principal y reintentar la operación" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Ha ocurrido un error (${error})" + +msgid "HTTP Error" +msgstr "Error HTTP" + +msgid "Internal Error" +msgstr "Error Interno" + +msgid "IPA Error" +msgstr "Error IPA" + +msgid "No response" +msgstr "Sin respuesta" + +msgid "Unknown Error" +msgstr "Error Desconocido" + +msgid "URL" +msgstr "URL" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} es gestionada por:" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "${primary_key} miembros:" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} es un miembro de:" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} members:" +msgid "${primary_key} member managers:" +msgstr "${primary_key} miembros:" + +msgid "Settings" +msgstr "Configuración" + +msgid "Search" +msgstr "Búsqueda" + +msgid "False" +msgstr "Falso" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +msgid "Allowed to create keytab" +msgstr "Permitido crear tabla de teclas" + +msgid "Allowed to retrieve keytab" +msgstr "Permitido recuperar tabla de teclas" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" +"Rechazar que los grupos de usuario creen tabla de tecla de '${primary_key}'" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Rechazar que los grupos de usuario recuperen tabla de teclas de " +"'${primary_key}'" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" +"Rechazar que los grupos de host creen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Rechazar que los grupos de host recuperen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "Rechazar que los hosts creen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "Rechazar que los hosts recuperen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "Rechazar que los usuarios creen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "Rechazar que los usuarios recuperen taa de teclas de '${primary_key}'" + +msgid "Add Kerberos Principal Alias" +msgstr "Añadir Alias Principal Kerberos" + +msgid "New kerberos principal alias" +msgstr "Nuevo alias principal Kerberos" + +msgid "Remove Kerberos Alias" +msgstr "Quitar Alias Kerberos" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "¿Desea quitar el alias kerberos ${alias}?" + +msgid "Inherited from server configuration" +msgstr "Heredado de la configuración del servidor" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Override inherited settings" +msgstr "Anular la configuración heredada" + +msgid "PAD" +msgstr "PAD" + +msgid "Authenticating" +msgstr "Autenticando" + +msgid "Authentication with personal certificate failed" +msgstr "Autenticación con certificado persona falló" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" +" Para acceder con certificado, por favor asegúrese de tener un certificado personal valido. " + +msgid "Continue to next page" +msgstr "Continúe a la siguiente página" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" +" Para acceder con nombre de " +"usuario y contraseña, introduzcalos en los correspondientes campos " +"después pulse 'Entrar'." + +msgid "Login failed due to an unknown reason" +msgstr "Acceso fallado debido a una razón desconocida" + +msgid "Logged In As" +msgstr "Registrado como" + +msgid "Authentication with Kerberos failed" +msgstr "Autenticación con Kerberos fallada" + +#, fuzzy, python-brace-format +#| msgid "" +#| " To log in with certificate, please make sure you have valid personal certificate. " +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" +" Para acceder con certificado, por favor asegúrese de tener un certificado personal valido. " + +msgid "Loading" +msgstr "Cargando" + +msgid "Kerberos Principal you entered is expired" +msgstr "Kerberos Principal su entrada ha expirado" + +msgid "Loading data" +msgstr "Cargando datos" + +msgid "Log in" +msgstr "Iniciar sesión" + +msgid "Log In Using Certificate" +msgstr "Iniciar sesión Usando Certificado" + +msgid "Log in using personal certificate" +msgstr "Iniciar sesión usando certificado personal" + +msgid "Log out" +msgstr "Cerrar sesión" + +#, fuzzy +#| msgid "Log out" +msgid "Log out error" +msgstr "Cerrar sesión" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "You will be redirected to DNS Zone." +msgid "You will be redirected in ${count}s" +msgstr "Será redirigido a Zona DNS." + +#, fuzzy +#| msgid "OTP Token" +msgid "Sync OTP Token" +msgstr "Ficha OTP" + +#, fuzzy +#| msgid "HOTP Synchronization Window" +msgid "Synchronizing" +msgstr "Ventana de Sincronización HOTP" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +#| msgid "Minimum length of password" +msgid "number of passwords" +msgstr "Longitud mínima de la contraseña" + +msgid "seconds" +msgstr "" + +#, fuzzy +#| msgid "Migrate" +msgid "Migrating" +msgstr "Migrar" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#, fuzzy +#| msgid "True means the operation was successful" +msgid "Password migration was not successful" +msgstr "«Verdadero» significa que la operación fue exitosa" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +#, fuzzy +#| msgid "True means the operation was successful" +msgid "Password migration was successful" +msgstr "«Verdadero» significa que la operación fue exitosa" + +msgid "Attribute" +msgstr "Atributo" + +#, fuzzy +#| msgid "delegation" +msgid "Add delegation" +msgstr "delegación" + +#, fuzzy +#| msgid "delegations" +msgid "Remove delegations" +msgstr "delegaciones" + +#, fuzzy +#| msgid "permission" +msgid "Add permission" +msgstr "permiso" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "Remove permissions" +msgstr "permisos" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove privileges from permission '${primary_key}'" +msgstr "Borrar privilegios de un rol." + +#, fuzzy +#| msgid "privilege" +msgid "Add privilege" +msgstr "privilegio" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgid "Add roles into privilege '${primary_key}'" +msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "member privilege" +msgid "Remove privileges" +msgstr "miembro privilegio" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a permission." +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "Borrar miembros desde un permiso." + +#, fuzzy, python-brace-format +#| msgid "Remove permissions from a privilege." +msgid "Remove roles from privilege '${primary_key}'" +msgstr "Borrar permisos de un privilegio." + +msgid "Role Settings" +msgstr "Configuración de rol" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add role" +msgstr "Añadir un nuevo rol." + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Add user groups into role '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Add hosts into role '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Add host groups into role '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add services into role '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add users into role '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove roles" +msgstr "Quitar espera" + +#, fuzzy, python-brace-format +#| msgid "Remove permissions from a privilege." +msgid "Remove role '${primary_key}' from privileges" +msgstr "Borrar permisos de un privilegio." + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Remove user groups from role '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Remove hosts from role '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Remove host groups from role '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Remove services from role '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Remove users from role '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "self service permission" +msgid "Add self service permission" +msgstr "auto servicio de permiso" + +#, fuzzy +#| msgid "self service permissions" +msgid "Remove self service permissions" +msgstr "auto servicio de permisos" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Add rule" +msgstr "Regla HBAC" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add inclusive condition into '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add exclusive condition into '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "Are you sure you want to delete ${object}?" +msgid "Are you sure you want to change default group?" +msgstr "¿Está seguro de que desea borrar ${object}?" + +#, fuzzy +#| msgid "Default users group" +msgid "Default host group" +msgstr "Grupo de usuarios predeterminado" + +#, fuzzy +#| msgid "Default users group" +msgid "Default user group" +msgstr "Grupo de usuarios predeterminado" + +#, fuzzy +#| msgid "Exclusive Regex" +msgid "Exclusive" +msgstr "Regex exclusivo" + +msgid "Expression" +msgstr "Expresión" + +#, fuzzy +#| msgid "host group" +msgid "Host group rule" +msgstr "grupo de host" + +#, fuzzy +#| msgid "host groups" +msgid "Host group rules" +msgstr "grupos de host" + +#, fuzzy +#| msgid "Inclusive Regex" +msgid "Inclusive" +msgstr "Regex inclusivo" + +#, fuzzy +#| msgid "Auto Membership Rule" +msgid "Remove auto membership rules" +msgstr "Regla Auto Afiliación" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User group rule" +msgstr "Grupo de usuarios" + +#, fuzzy +#| msgid "User group" +msgid "User group rules" +msgstr "Grupo de usuarios" + +#, fuzzy +#| msgid "automount key" +msgid "Add automount key" +msgstr "clave de automontaje" + +#, fuzzy +#| msgid "automount keys" +msgid "Remove automount keys" +msgstr "claves de automontaje" + +#, fuzzy +#| msgid "automount location" +msgid "Add automount location" +msgstr "localización automontaje" + +msgid "Automount Location Settings" +msgstr "Configuración de ubicación de automount" + +#, fuzzy +#| msgid "automount locations" +msgid "Remove automount locations" +msgstr "localizaciones de automontaje" + +#, fuzzy +#| msgid "automount map" +msgid "Add automount map" +msgstr "mapa de automontaje" + +msgid "Map Type" +msgstr "Tipo de Mapa" + +msgid "Direct" +msgstr "Directo" + +msgid "Indirect" +msgstr "Indirecto" + +#, fuzzy +#| msgid "automount maps" +msgid "Remove automount maps" +msgstr "mapas de automontaje" + +#, fuzzy +#| msgid "Certificate Authority" +msgid "Add certificate authority" +msgstr "Autoridad de Certificado" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Remove certificate authorities" +msgstr "Autoridades de Certificado" + +msgid "Add CA ACL" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "Certificado para ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "Certificado para ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add users into CA ACL '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "Allow" +msgid "All" +msgstr "Permitir" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "Cualquier host" + +msgid "Any Service" +msgstr "Cualquier servicio" + +#, fuzzy +#| msgid "Profile ID" +msgid "Any Profile" +msgstr "ID del Perfil" + +msgid "Anyone" +msgstr "Cualquiera" + +msgid "Rule status" +msgstr "Estatus de reglas" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +#, fuzzy +#| msgid "Remove from CRL" +msgid "Remove CA ACLs" +msgstr "Borrar de CRL" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "Certificado para ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Borrar usuarios y grupos de una regla HBAC." + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove certificates from a service" +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "Quitar certificados de un servicio" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified CAs" +msgstr "Grupos especificados" + +msgid "Specified Hosts and Groups" +msgstr "Hosts y grupos especificados" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified Profiles" +msgstr "Grupos especificados" + +msgid "Specified Services and Groups" +msgstr "Servicios y grupos especificados" + +msgid "Specified Users and Groups" +msgstr "Usuarios y grupos específicos" + +#, fuzzy +#| msgid "file to store certificate in" +msgid "Permitted to have certificates issued" +msgstr "archivo para almacenar" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Remove certificate profiles" +msgstr "Certificado de Perfiles" + +msgid "AA Compromise" +msgstr "AA transacción" + +#, fuzzy +#| msgid "Principal" +msgid "Add principal" +msgstr "Principal" + +msgid "Affiliation Changed" +msgstr "Afiliación cambiada" + +msgid "CA Compromise" +msgstr "CA de transacción" + +msgid "Certificates" +msgstr "Certificados" + +msgid "Certificate Hold" +msgstr "Certificado retenido" + +msgid "Cessation of Operation" +msgstr "Cese de operaciones" + +msgid "Common Name" +msgstr "Nombre común" + +#, fuzzy +#| msgid "Rule used to map the certificate with a user entry" +msgid "the certificate with serial number " +msgstr "Regla usada para mapear el certificado con una entrada de usuario" + +msgid "Expires On" +msgstr "Expira el" + +#, fuzzy +#| msgid "Issued On" +msgid "Issued on from" +msgstr "Expiración" + +#, fuzzy +#| msgid "Issued On" +msgid "Issued on to" +msgstr "Expiración" + +#, fuzzy +#| msgid "Serial number" +msgid "Maximum serial number" +msgstr "Número de serie" + +#, fuzzy +#| msgid "Serial number" +msgid "Minimum serial number" +msgstr "Número de serie" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on from" +msgstr "Revocado" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on to" +msgstr "Revocado" + +#, fuzzy +#| msgid "Validation error" +msgid "Valid not after from" +msgstr "Error de validación" + +#, fuzzy +#| msgid "Validity start" +msgid "Valid not after to" +msgstr "Validar inicio" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "Las huellas dactilares" + +#, fuzzy +#| msgid "New Certificate" +msgid "Get Certificate" +msgstr "Un nuevo certificado" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate Hold Removed" +msgstr "Certificado retenido" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for host '${primary_key}'" +msgstr "Certificado para ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for service '${primary_key}'" +msgstr "Certificado para ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for user '${primary_key}'" +msgstr "Certificado para ${entity} ${primary_key}" + +#, fuzzy +#| msgid "New Certificate" +msgid "Issue new certificate" +msgstr "Un nuevo certificado" + +msgid "Issued By" +msgstr "Expedido por" + +msgid "Issued On" +msgstr "Expiración" + +msgid "Issued To" +msgstr "Expedido para" + +msgid "Key Compromise" +msgstr "Clave de transacción" + +msgid "No Valid Certificate" +msgstr "Certificado no válido" + +msgid "New Certificate" +msgstr "Un nuevo certificado" + +#, fuzzy +#| msgid "Download certificate as PEM formatted file." +msgid "Certificate in base64 or PEM format" +msgstr "Descargar certificado como fichero formateado PEM." + +msgid "Note" +msgstr "Nota" + +msgid "Organization" +msgstr "Organización" + +msgid "Organizational Unit" +msgstr "Unidad organizativa" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) removed" +msgid "${count} certificate(s) present" +msgstr "${count} item(s) borrado" + +msgid "Privilege Withdrawn" +msgstr "Retirada de privilegios" + +msgid "Reason for Revocation" +msgstr "Motivo de la revocación" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate hold" +msgstr "Revocar un certificado." + +#, fuzzy +#| msgid "Do you want to remove kerberos alias ${alias}?" +msgid "Do you want to remove the certificate hold?" +msgstr "¿Desea quitar el alias kerberos ${alias}?" + +msgid "Remove from CRL" +msgstr "Borrar de CRL" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate requested" +msgstr "Certificado revocado" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Revoke certificate" +msgstr "Revocar un certificado." + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "Certificado revocado" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "Número de serie" + +msgid "Serial Number (hex)" +msgstr "N.º de serie (hex.)" + +msgid "SHA1 Fingerprint" +msgstr "Huella digital SHA1" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SHA256 Fingerprint" +msgstr "Huella digital SHA1" + +msgid "Superseded" +msgstr "Obsoleta" + +msgid "Unspecified" +msgstr "No especificada" + +msgid "Valid Certificate Present" +msgstr "Presentar certificado válido" + +#, fuzzy +#| msgid "Validation error" +msgid "Valid from" +msgstr "Error de validación" + +#, fuzzy +#| msgid "Validity" +msgid "Valid to" +msgstr "Validez" + +msgid "Validity" +msgstr "Validez" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Certificado para ${entity} ${primary_key}" + +#, fuzzy +#| msgid "New Certificate" +msgid "View Certificate" +msgstr "Un nuevo certificado" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "Certificado" + +#, fuzzy +#| msgid "Certificate chain" +msgid "Certificate For Match" +msgstr "Cadena de certificado" + +#, fuzzy +#| msgid "Certificate chain" +msgid "Certificate Mapping Match" +msgstr "Cadena de certificado" + +#, fuzzy +#| msgid "Matched rules" +msgid "Matched Users" +msgstr "Reglas coincidentes" + +#, fuzzy +#| msgid "User login" +msgid "User Login" +msgstr "Ingreso de usuario" + +#, fuzzy +#| msgid "Certificate Identity Mapping Rule" +msgid "Add certificate identity mapping rule" +msgstr "Regla de Mapeo de Identidad de Certificado" + +#, fuzzy +#| msgid "Certificate Association Data" +msgid "Add certificate mapping data" +msgstr "Datos de Asociación del Certificado" + +#, fuzzy +#| msgid "Certificate chain" +msgid "Certificate mapping data" +msgstr "Cadena de certificado" + +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "Configuración" + +#, fuzzy, python-brace-format +#| msgid "Do you want to remove kerberos alias ${alias}?" +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "¿Desea quitar el alias kerberos ${alias}?" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove certificate mapping data" +msgstr "Quitar certificados de un servicio" + +msgid "Issuer and subject" +msgstr "" + +#, fuzzy +#| msgid "Certificate Identity Mapping Rules" +msgid "Remove certificate identity mapping rules" +msgstr "Reglas de Mapeo de Identidad de Certificado" + +msgid "Group Options" +msgstr "Opciones de Grupo" + +msgid "Search Options" +msgstr "Opciones de Búsqueda" + +#, fuzzy +#| msgid "Sudo Option" +msgid "SELinux Options" +msgstr "Opción de sudo" + +#, fuzzy +#| msgid "Search Options" +msgid "Server Options" +msgstr "Opciones de Búsqueda" + +#, fuzzy +#| msgid "Search Options" +msgid "Service Options" +msgstr "Opciones de Búsqueda" + +msgid "User Options" +msgstr "Opciones de Usuario" + +#, fuzzy +#| msgid "Forward policy" +msgid "Forward first" +msgstr "Política de envío" + +#, fuzzy +#| msgid "Account disabled" +msgid "Forwarding disabled" +msgstr "Cuenta inhabilitada " + +#, fuzzy +#| msgid "Forward policy" +msgid "Forward only" +msgstr "Política de envío" + +msgid "Options" +msgstr "Opciones" + +#, fuzzy +#| msgid "Update DNS entries" +msgid "Update System DNS Records" +msgstr "Actualizar las entradas DNS" + +msgid "Do you want to update system DNS records?" +msgstr "" + +#, fuzzy +#| msgid "Split DNS record to parts" +msgid "System DNS records updated" +msgstr "Divide registro DNS en partes" + +#, fuzzy +#| msgid "DNS forward zone" +msgid "Add DNS forward zone" +msgstr "Zona de envío DNS" + +#, fuzzy +#| msgid "DNS forward zones" +msgid "Remove DNS forward zones" +msgstr "Zonas de envío DNS" + +#, fuzzy +#| msgid "DNS resource record" +msgid "Add DNS resource record" +msgstr "Registro de recursos DNS" + +msgid "DNS record was deleted because it contained no data." +msgstr "Registro DNS fue borrado porque no contenía datos." + +msgid "Other Record Types" +msgstr "Otros Tipos de Registro" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "Crear registro DNS" + +msgid "Creating record." +msgstr "Creando el registro." + +msgid "Record creation failed." +msgstr "Falló la creación del registro." + +msgid "Checking if record exists." +msgstr "Comprobando que el registro existe." + +msgid "Record not found." +msgstr "No se encontró el registro." + +#, fuzzy +#| msgid "Redirection" +msgid "Redirection to PTR record" +msgstr "Redirección " + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +#, fuzzy +#| msgid "%(parent)s: %(oname)s not found" +msgid "Target reverse zone not found." +msgstr "%(parent)s: no se encuentra %(oname)s" + +#, fuzzy +#| msgid "DNS zones" +msgid "Fetching DNS zones." +msgstr "zonas DNS" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "Será redirigido a Zona DNS." + +#, fuzzy +#| msgid "DNS resource records" +msgid "Remove DNS resource records" +msgstr "Registros de recurso DNS" + +msgid "Standard Record Types" +msgstr "Tipos de Registro Estándar" + +msgid "Records for DNS Zone" +msgstr "Los registros para la zona DNS" + +msgid "Record Type" +msgstr "Tipo de Registro" + +#, fuzzy +#| msgid "DNS zone" +msgid "Add DNS zone" +msgstr "zona DNS" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to disable ${object}?" +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "¿Está seguro de que desea deshabilitar ${object}?" + +msgid "DNS Zone Settings" +msgstr "Configuración de la Zona DNS" + +#, fuzzy +#| msgid "DNS zones" +msgid "Remove DNS zones" +msgstr "zonas DNS" + +#, fuzzy +#| msgid "Permission" +msgid "Remove Permission" +msgstr "Permiso" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete ${object}?" +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "¿Está seguro de que desea borrar ${object}?" + +#, fuzzy +#| msgid "Skip host check" +msgid "Skip DNS check" +msgstr "Salta la comprobación de host" + +#, fuzzy +#| msgid "Skip host check" +msgid "Skip overlap check" +msgstr "Salta la comprobación de host" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +#, fuzzy +#| msgid "Authoritative nameserver" +msgid "Authoritative nameserver change" +msgstr "Nombre de servidor autoritativo" + +msgid "Level" +msgstr "" + +#, fuzzy +#| msgid "Max domain level" +msgid "Set Domain Level" +msgstr "Nivel de dominio Max" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "Grupo de usuarios" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgid "Add user groups into user group '${primary_key}'" +msgstr "" +"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Añadir usuarios y grupos a una regla HBAC." + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Add user group '${primary_key}' into roles" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add services into user group '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add users into user group '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add user ID override into user group '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +msgid "Group Settings" +msgstr "Configuración del grupo" + +msgid "External" +msgstr "Externos" + +msgid "Groups" +msgstr "Grupos" + +#, fuzzy +#| msgid "RunAs Group category" +msgid "Group categories" +msgstr "RunAs Grupo categoría" + +#, fuzzy +#| msgid "gid cannot be set for external group" +msgid "Change to external group" +msgstr "gid no puede ser fijado para un grupo externo" + +#, fuzzy +#| msgid "change to a POSIX group" +msgid "Change to POSIX group" +msgstr "Cambiar a un grupo POSIX" + +#, fuzzy +#| msgid "POSIX" +msgid "Non-POSIX" +msgstr "POSIX" + +msgid "POSIX" +msgstr "POSIX" + +#, fuzzy +#| msgid "Member user group" +msgid "Remove user groups" +msgstr "Miembro del grupo de usuarios" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "Borrar miembros de un grupo de red." + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Borrar usuarios y grupos de una regla HBAC." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Borrar usuarios y grupos de una regla HBAC." + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" +"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove services from user group '${primary_key}'" +msgstr "Borrar servicio y grupos de servicio de una regla HBAC." + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Remove users from user group '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +msgid "Group Type" +msgstr "Tipo de grupo" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Add HBAC rule" +msgstr "Regla HBAC" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Añadir servicios a una regla HBAC." + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +msgid "Accessing" +msgstr "Acceso" + +#, fuzzy +#| msgid "HBAC rules" +msgid "Remove HBAC rules" +msgstr "Reglas HBAC" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Borrar usuarios y grupos de una regla HBAC." + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Borrar servicio y grupos de servicio de una regla HBAC." + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +msgid "Via Service" +msgstr "Vía de servicio" + +msgid "Who" +msgstr "¿Quién?" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add HBAC service" +msgstr "Servicio HBAC" + +#, fuzzy, python-brace-format +#| msgid "Add members to an HBAC service group." +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "Añadir miembros a un grupo de servicio HBAC." + +#, fuzzy +#| msgid "Member HBAC service" +msgid "Remove HBAC services" +msgstr "Miembro del servicio HBAC" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "Borrar miembros de un grupo de servicio HBAC." + +#, fuzzy +#| msgid "HBAC service group" +msgid "Add HBAC service group" +msgstr "Grupo de servicio HBAC" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "Member HBAC service groups" +msgid "Remove HBAC service groups" +msgstr "Grupos de servicio de Miembros HBAC" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Borrar miembros de un grupo de servicio HBAC." + +msgid "Access Denied" +msgstr "Acceso Denegado" + +msgid "Access Granted" +msgstr "Acceso Obtenido" + +msgid "Include Disabled" +msgstr "Include Deshabilitado" + +msgid "Include Enabled" +msgstr "Include Habilitado" + +msgid "HBAC Test" +msgstr "Prueba HBAC" + +msgid "Matched" +msgstr "Emparejado" + +msgid "Missing values: " +msgstr "Valores faltantes:" + +msgid "New Test" +msgstr "Nueva Prueba" + +msgid "Rules" +msgstr "Reglas" + +msgid "Run Test" +msgstr "Ejecutar Prueba" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "Especificar ${entity} externa" + +msgid "Unmatched" +msgstr "Desemparejado" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add host" +msgstr "Añadir un n uevo host." + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Add hosts managing host '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Añadir servicios a una regla HBAC." + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "Certificado de host" + +msgid "Host Name" +msgstr "Nombre de host" + +msgid "Delete Key, Unprovision" +msgstr "La eliminación de clave, unprovision" + +msgid "Host Settings" +msgstr "Configuración del host" + +#, fuzzy +#| msgid "Enrollment" +msgid "Enrolled" +msgstr "Inscripción" + +msgid "Enrollment" +msgstr "Inscripción" + +msgid "Fully Qualified Host Name" +msgstr "Nombre de host totalmente calificado" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Generate OTP" +msgstr "Reajustar OTP" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Generated OTP" +msgstr "Reajustar OTP" + +msgid "Kerberos Key" +msgstr "Clave Kerberos" + +msgid "Kerberos Key Not Present" +msgstr "No hay clave Kerberos Presente" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Claves de Kerberos presente, Host aprovisionado" + +#, fuzzy +#| msgid "Reset Password" +msgid "One-Time Password" +msgstr "Restablecer contraseña" + +#, fuzzy +#| msgid "One time password commands" +msgid "One-Time Password Not Present" +msgstr "Comandos de contraseña de una vez" + +#, fuzzy +#| msgid "One time password commands" +msgid "One-Time Password Present" +msgstr "Comandos de contraseña de una vez" + +msgid "Reset OTP" +msgstr "Reajustar OTP" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset One-Time Password" +msgstr "Restablecer contraseña" + +msgid "Set OTP" +msgstr "Establecer OTP" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP set" +msgstr "Ficha OTP" + +#, fuzzy +#| msgid "Reset Password" +msgid "Set One-Time Password" +msgstr "Restablecer contraseña" + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove hosts" +msgstr "Quitar espera" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Remove hosts managing host '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a hostgroup." +msgid "Remove host '${primary_key}' from host groups" +msgstr "Borrar miembros de un grupo de host." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove host '${primary_key}' from netgroups" +msgstr "Borrar miembros de un grupo de red." + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove host '${primary_key}' from roles" +msgstr "Borrar privilegios de un rol." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Borrar usuarios y grupos de una regla HBAC." + +#, fuzzy, python-brace-format +#| msgid "Remove an option from Sudo Rule." +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "Quitar una opción de la Regla Sudo." + +msgid "Unprovision" +msgstr "Unprovision" + +msgid "Are you sure you want to unprovision this host?" +msgstr "¿Está seguro que desea unprovision este equipo?" + +#, fuzzy +#| msgid "Unprovision" +msgid "Unprovisioning host" +msgstr "Unprovision" + +#, fuzzy +#| msgid "Unprovision" +msgid "Host unprovisioned" +msgstr "Unprovision" + +#, fuzzy +#| msgid "host group" +msgid "Add host group" +msgstr "grupo de host" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Add hosts into host group '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Add host groups into host group '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +msgid "Host Group Settings" +msgstr "Configuraciones del Grupo de Host" + +#, fuzzy +#| msgid "member host group" +msgid "Remove host groups" +msgstr "miembro del grupo de host" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Borrar usuarios y grupos de una regla HBAC." + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Remove hosts from host group '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Remove host groups from host group '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "User attribute" +msgid "User to override" +msgstr "Atributo de usuario" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +#, fuzzy +#| msgid "Profile ID" +msgid "Profile" +msgstr "ID del Perfil" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Enter trusted group name." +msgstr "" +" Desactivar la tecla de Kerberos, certificado SSL y todos los servicios " +"de un host." + +#, fuzzy +#| msgid "Assigned ID View" +msgid "Add ID view" +msgstr "Vista ID asignada" + +msgid "Add group ID override" +msgstr "" + +#, fuzzy +#| msgid "Disable per-user override" +msgid "Add user ID override" +msgstr "Deshabilitar la anulación por uso" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} members:" +msgid "${primary_key} applies to:" +msgstr "${primary_key} miembros:" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +#| msgid "host groups" +msgid "Apply to host groups" +msgstr "grupos de host" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} members:" +msgid "${primary_key} overrides:" +msgstr "${primary_key} miembros:" + +msgid "Remove ID views" +msgstr "" + +#, fuzzy +#| msgid "Remote server name" +msgid "Remove user ID overrides" +msgstr "Nombre del servidor remoto" + +msgid "Remove group ID overrides" +msgstr "" + +#, fuzzy +#| msgid "Search for hostgroups." +msgid "Un-apply from host groups" +msgstr "Buscar grupos de host." + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Apply" +msgid "Un-apply" +msgstr "Aplicar" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#, fuzzy +#| msgid "netgroup" +msgid "Add netgroup" +msgstr "grupo de red" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" +"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" +"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" +"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add users into netgroup '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +msgid "Host" +msgstr "Host" + +msgid "Netgroup Settings" +msgstr "Configuración de Netgroup" + +#, fuzzy +#| msgid "Member netgroups" +msgid "Remove netgroups" +msgstr " Miembros de netgroups" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "Borrar miembros de un grupo de red." + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" +"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" +"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" +"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Remove users from netgroup '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "OTP token" +msgid "Add OTP token" +msgstr "Ficha OTP" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add users managing OTP token '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Configure your token" +msgstr "Configuración" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +#| msgid "OTP Tokens" +msgid "OTP Token Settings" +msgstr "Fichas OTP" + +#, fuzzy +#| msgid "Disable" +msgid "Disable token" +msgstr "Desactivar" + +#, fuzzy +#| msgid "Enable" +msgid "Enable token" +msgstr "Activar" + +#, fuzzy +#| msgid "OTP tokens" +msgid "Remove OTP tokens" +msgstr "Fichas OTP" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +#| msgid "DNS configuration options" +msgid "Show configuration uri" +msgstr "Opciones de configuración de DNS" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +#| msgid "Add custom value" +msgid "Add Custom Attribute" +msgstr "Añadir valor personal" + +#, fuzzy +#| msgid "Permission flags" +msgid "Permission settings" +msgstr "Banderas de permiso" + +#, fuzzy +#| msgid "Attribute Key" +msgid "Attribute breakdown" +msgstr "Atributo Clave" + +msgid "Privilege Settings" +msgstr "Configuración de privilegios" + +#, fuzzy +#| msgid "SSH public key" +msgid "Public key:" +msgstr "Clave pública SSH" + +#, fuzzy +#| msgid "SSH public key" +msgid "Set public key" +msgstr "Clave pública SSH" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +#| msgid "password policy" +msgid "Add password policy" +msgstr "política de contraseña" + +msgid "Password Policy" +msgstr "Directiva de contraseñas" + +#, fuzzy +#| msgid "password policies" +msgid "Remove password policies" +msgstr "políticas de contraseña" + +#, fuzzy +#| msgid "Modify ID range." +msgid "Add ID range" +msgstr "Modificar rango de ID." + +#, fuzzy +#| msgid "Role Settings" +msgid "Range Settings" +msgstr "Configuración de rol" + +#, fuzzy +#| msgid "Base DN" +msgid "Base ID" +msgstr "Base DN" + +msgid "Primary RID base" +msgstr "" + +#, fuzzy +#| msgid "Range name" +msgid "Range size" +msgstr "Nombre del intervalo" + +#, fuzzy +#| msgid "Domain GUID" +msgid "Domain SID" +msgstr "GUID de Dominio" + +msgid "Secondary RID base" +msgstr "" + +#, fuzzy +#| msgid "ID Ranges" +msgid "Remove ID ranges" +msgstr "Intervalos de ID" + +#, fuzzy +#| msgid "Active Directory domain range" +msgid "Active Directory domain" +msgstr "Intervalo de dominios de Active Directory" + +#, fuzzy +#| msgid "Active Directory trust range with POSIX attributes" +msgid "Active Directory domain with POSIX attributes" +msgstr "Rango de confianza Active Directory con atributos POSIX" + +msgid "Detect" +msgstr "" + +#, fuzzy +#| msgid "local domain range" +msgid "Local domain" +msgstr "intervalo de dominios locales" + +#, fuzzy +#| msgid "trust" +msgid "IPA trust" +msgstr "confianza" + +#, fuzzy +#| msgid "Active Directory domain range" +msgid "Active Directory winsync" +msgstr "Intervalo de dominios de Active Directory" + +#, fuzzy +#| msgid "RADIUS Server" +msgid "Add RADIUS server" +msgstr "Servidor RADIUS" + +#, fuzzy +#| msgid "" +#| "\n" +#| "RADIUS Proxy Servers\n" +msgid "RADIUS Proxy Server Settings" +msgstr "" +"\n" +"Servidores Proxy RADIUS\n" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "Remove RADIUS servers" +msgstr "Servidores RADIUS" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +#, fuzzy +#| msgid "Update" +msgid "Force Update" +msgstr "Actualizar" + +#, fuzzy +#| msgid "SELinux User Map" +msgid "Add SELinux user map" +msgstr "Mapa de Usuario SELinux" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an SELinux User Map rule." +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "Añadir usuarios y grupos a una regla de Mapa de Usuario SELinux." + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" +"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +msgid "Remove selinux user maps" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." + +#, fuzzy +#| msgid "IPA Server Roles" +msgid "Server Roles" +msgstr "Roles de Servidor IPA" + +#, fuzzy +#| msgid "IPA Server Role" +msgid "Server Role" +msgstr "Rol de Servidor IPA" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +#| msgid "Delete IPA server." +msgid "Delete Server" +msgstr "Eliminar servidor IPA." + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add service" +msgstr "Servicio HBAC" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgid "Add hosts managing service '${primary_key}'" +msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "Certificado de servicio" + +msgid "Service Settings" +msgstr "Configuración del servicio" + +msgid "Provisioning" +msgstr "Aprovisionamiento" + +#, fuzzy +#| msgid "Member services" +msgid "Remove services" +msgstr "Servicios de miembros" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove service '${primary_key}' from roles" +msgstr "Borrar privilegios de un rol." + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgid "Remove hosts managing service '${primary_key}'" +msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" + +msgid "Are you sure you want to unprovision this service?" +msgstr "¿Está seguro de que desea no suministrar este servicio?" + +#, fuzzy +#| msgid "Unprovision" +msgid "Unprovisioning service" +msgstr "Unprovision" + +#, fuzzy +#| msgid "Self Service Permission" +msgid "Service unprovisioned" +msgstr "Auto Servicio de Permiso" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Claves de Kerberos actuales, Servicio suministrado" + +#, fuzzy +#| msgid "SSH public key" +msgid "SSH public keys" +msgstr "Clave pública SSH" + +#, fuzzy +#| msgid "SSH public key" +msgid "SSH public key:" +msgstr "Clave pública SSH" + +msgid "Set SSH key" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to activate selected users?" +msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to disable ${object}?" +msgid "Are you sure you want to activate ${object}?" +msgstr "¿Está seguro de que desea deshabilitar ${object}?" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) added" +msgid "${count} user(s) activated" +msgstr "${count} item(s) añadido" + +#, fuzzy +#| msgid "stage user" +msgid "Add stage user" +msgstr "escenario usuario" + +#, fuzzy +#| msgid "stage users" +msgid "Stage users" +msgstr "escenario usuarios" + +#, fuzzy +#| msgid "Preserved user" +msgid "Preserved users" +msgstr "Usuario preservado" + +#, fuzzy +#| msgid "Preserved user" +msgid "Remove preserved users" +msgstr "Usuario preservado" + +#, fuzzy +#| msgid "stage users" +msgid "Remove stage users" +msgstr "escenario usuarios" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to stage selected users?" +msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) added" +msgid "${count} users(s) staged" +msgstr "${count} item(s) añadido" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to disable ${object}?" +msgid "Are you sure you want to stage ${object}?" +msgstr "¿Está seguro de que desea deshabilitar ${object}?" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to restore selected users?" +msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete ${object}?" +msgid "Are you sure you want to restore ${object}?" +msgstr "¿Está seguro de que desea borrar ${object}?" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) removed" +msgid "${count} user(s) restored" +msgstr "${count} item(s) borrado" + +#, fuzzy +#| msgid "User category" +msgid "User categories" +msgstr "Categoría de usuario" + +#, fuzzy +#| msgid "sudo command" +msgid "Add sudo command" +msgstr "comando sudo" + +#, fuzzy, python-brace-format +#| msgid "comma-separated list of sudo command groups to add" +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "lista separada por comas de grupos de comandos sudo a añadir" + +#, fuzzy +#| msgid "member sudo command" +msgid "Remove sudo commands" +msgstr "miembro de comando sudo" + +#, fuzzy, python-brace-format +#| msgid "Remove members from Sudo Command Group." +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "Quitar miembros de un Grupo de Comando Sudo." + +#, fuzzy +#| msgid "sudo command group" +msgid "Add sudo command group" +msgstr "grupo de comando sudo" + +#, fuzzy, python-brace-format +#| msgid "Add commands and sudo command groups affected by Sudo Rule." +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "Añadir comandos y grupos de comando sudo afectados por Regla Sudo." + +#, fuzzy +#| msgid "member sudo command group" +msgid "Remove sudo command groups" +msgstr "miembro de grupo de comando sudo" + +#, fuzzy, python-brace-format +#| msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." + +#, fuzzy +#| msgid "sudo rule" +msgid "Add sudo rule" +msgstr "regla sudo" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Add sudo option" +msgstr "Opción de sudo" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add commands and sudo command groups affected by Sudo Rule." +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "Añadir comandos y grupos de comando sudo afectados por Regla Sudo." + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow hosts to create keytab of '${primary_key}'" +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add users into sudo rule '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +msgid "Allow" +msgstr "Permitir" + +msgid "Any Command" +msgstr "Cualquier comando" + +msgid "Any Group" +msgstr "Cualquier grupo" + +msgid "Run Commands" +msgstr "Ejecutar comandos" + +msgid "Deny" +msgstr "Negar" + +msgid "Access this host" +msgstr "Acceder a este host" + +#, fuzzy +#| msgid "Options" +msgid "Option added" +msgstr "Opciones" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) removed" +msgid "${count} option(s) removed" +msgstr "${count} item(s) borrado" + +#, fuzzy +#| msgid "sudo rules" +msgid "Remove sudo rules" +msgstr "reglas sudo" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow host groups to create keytab of '${primary_key}'" +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +msgid "As Whom" +msgstr "Como Whom" + +msgid "Specified Commands and Groups" +msgstr "Comandos especificados y grupos" + +msgid "Specified Groups" +msgstr "Grupos especificados" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Remove sudo options" +msgstr "Opción de sudo" + +msgid "Autogenerated" +msgstr "" + +#, fuzzy +#| msgid "Servers details:" +msgid "Segment details" +msgstr "Detalles de los servidores:" + +#, fuzzy +#| msgid "trust configuration" +msgid "Replication configuration" +msgstr "configuración de la confianza" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +#, fuzzy +#| msgid "Add a new IPA location." +msgid "Add IPA location" +msgstr "Añadir una nueva localización IPA." + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA locations\n" +msgid "Remove IPA locations" +msgstr "" +"\n" +"Localizaciones IPA\n" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +#, fuzzy +#| msgid "Ignore topology errors" +msgid "Remove topology segments" +msgstr "Ignorar errores de topología" + +msgid "Account" +msgstr "Cuenta" + +#, fuzzy +#| msgid "trust" +msgid "Add trust" +msgstr "confianza" + +msgid "Administrative account" +msgstr "" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklists" +msgstr "Lista negra de SID entrante" + +#, fuzzy +#| msgid "Host Settings" +msgid "Trust Settings" +msgstr "Configuración del host" + +msgid "Establish using" +msgstr "" + +#, fuzzy +#| msgid "Realm domains" +msgid "Fetch domains" +msgstr "Dominios reino" + +msgid "Pre-shared password" +msgstr "Contraseña precompartida" + +#, fuzzy +#| msgid "Remove" +msgid "Remove trusts" +msgstr "Borrar" + +#, fuzzy +#| msgid "Realm domains" +msgid "Remove domains" +msgstr "Dominios reino" + +msgid "Trust direction" +msgstr "Dirección de confianza" + +msgid "Trust status" +msgstr "Estado de confianza" + +msgid "Trust type" +msgstr "Tipo de confianza" + +#, fuzzy +#| msgid "UPN suffixes" +msgid "Alternative UPN suffixes" +msgstr "Sufijos UPN" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "User attributes for SMB services" +msgstr "Buscar un servicio HBAC." + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +#, fuzzy +#| msgid "Default location of home directories" +msgid "Drive to mount a home directory" +msgstr "Localización por defecto de los directorios home" + +msgid "Account Settings" +msgstr "Configuración de la cuenta" + +msgid "Account Status" +msgstr "Estado de Cuenta" + +#, fuzzy +#| msgid "Active zone" +msgid "Active users" +msgstr "Activar zona" + +#, fuzzy +#| msgid "Add a new user." +msgid "Add user" +msgstr "Añadir un nuevo usuario." + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Añadir servicios a una regla HBAC." + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "Configuración de contactos" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete mode" +msgstr "Borrar un rol." + +msgid "Employee Information" +msgstr "Información del Empleado" + +msgid "Error changing account status" +msgstr "Error al cambiar el estado de cuenta" + +msgid "Password expiration" +msgstr "Caducidad de la contraseña" + +msgid "Mailing Address" +msgstr "Dirección de correo" + +msgid "Misc. Information" +msgstr "Información diversa" + +#, fuzzy +#| msgid "Delete" +msgid "delete" +msgstr "Eliminar" + +#, fuzzy +#| msgid "server" +msgid "preserve" +msgstr "servidor" + +#, fuzzy +#| msgid "search for private groups" +msgid "No private group" +msgstr "Búsqueda de grupos privados" + +#, fuzzy +#| msgid "Member users" +msgid "Remove users" +msgstr "Usuarios miembros" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a group." +msgid "Remove user '${primary_key}' from user groups" +msgstr "Eliminar miembro desde un grupo." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove user '${primary_key}' from netgroups" +msgstr "Borrar miembros de un grupo de red." + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove user '${primary_key}' from roles" +msgstr "Borrar privilegios de un rol." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Borrar usuarios y grupos de una regla HBAC." + +#, fuzzy, python-brace-format +#| msgid "Remove an option from Sudo Rule." +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "Quitar una opción de la Regla Sudo." + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"¿Está seguro que desea ${action} el usuario?
El cambio tendrá efecto " +"inmediatamente." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Pulse para ${action}" + +msgid "Unlock" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to enable ${object}?" +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Está seguro de que desea habilitar ${object}?" + +msgid "Add vault" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add services into members of vault '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Add users into members of vault '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" +"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add services into owners of vault '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Add users into owners of vault '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +#, fuzzy +#| msgid "Member Host" +msgid "Members" +msgstr "Miembro del equipo anfitrión" + +msgid "My User Vaults" +msgstr "" + +#, fuzzy +#| msgid "Owner" +msgid "Owners" +msgstr "Propietario" + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove vaults" +msgstr "Quitar espera" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to create keytab of '${primary_key}'" +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Remove services from members of vault '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to create keytab of '${primary_key}'" +msgid "Remove users from members of vault '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" +"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Allow users to retrieve keytab of '${primary_key}'" +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "Sevicios HBAC" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +#, fuzzy +#| msgid "Map Type" +msgid "Vault Type" +msgstr "Tipo de Mapa" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "User attribute" +msgid "User Vaults" +msgstr "Atributo de usuario" + +msgid "Current password is required" +msgstr "Se necesita contraseña actual" + +#, fuzzy, python-brace-format +#| msgid "Maximum password lifetime (in days)" +msgid "Your password expires in ${days} days." +msgstr "Vida máxima de la contraseña (días)" + +#, fuzzy +#| msgid "Reset OTP" +msgid "First OTP" +msgstr "Reajustar OTP" + +#, fuzzy +#| msgid "Current password is required" +msgid "New password is required" +msgstr "Se necesita contraseña actual" + +#, fuzzy +#| msgid "" +#| " To log in with username and " +#| "password, enter them in the corresponding fields, then click " +#| "'Log in'." +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" +" Para acceder con nombre de " +"usuario y contraseña, introduzcalos en los correspondientes campos " +"después pulse 'Entrar'." + +#, fuzzy +#| msgid "" +#| " To log in with username and " +#| "password, enter them in the corresponding fields, then click " +#| "'Log in'." +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" +" Para acceder con nombre de " +"usuario y contraseña, introduzcalos en los correspondientes campos " +"después pulse 'Entrar'." + +#, fuzzy +#| msgid "HOTP synchronization skip-ahead" +msgid "Token synchronization failed" +msgstr "Vaya directamente a la sincronización HOTP" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "Cambiar la contraseña completa" + +#, fuzzy +#| msgid "Your session has expired. Please log in again." +msgid "Your password has expired. Please enter a new password." +msgstr "Su sesión ha expirado. Por favor acceda otra vez." + +msgid "Passwords must match" +msgstr "Las contraseñas deben coincidir" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset your password." +msgstr "Restablecer contraseña" + +#, fuzzy +#| msgid "Set OTP" +msgid "Second OTP" +msgstr "Establecer OTP" + +msgid "Verify Password" +msgstr "Verificar Contraseña" + +msgid "Are you sure you want to delete selected entries?" +msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) added" +msgid "${count} item(s) deleted" +msgstr "${count} item(s) añadido" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to disable selected entries?" +msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) added" +msgid "${count} item(s) disabled" +msgstr "${count} item(s) añadido" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to enable selected entries?" +msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) added" +msgid "${count} item(s) enabled" +msgstr "${count} item(s) añadido" + +msgid "Some entries were not deleted" +msgstr "Algunas entradas no fueron borradas" + +msgid "Quick Links" +msgstr "Enlaces rápidos" + +msgid "Select All" +msgstr " Seleccionar todo" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"La solicitud devolvió más resultados que el límite de tamaño configurado. " +"Mostrando los primeros resultados ${counter}." + +msgid "Unselect All" +msgstr "Anular selección" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "Auditoría" + +#, fuzzy +#| msgid "Authenticating" +msgid "Authentication" +msgstr "Autenticando" + +msgid "Automount" +msgstr "Montaje automático" + +msgid "DNS" +msgstr "DNS" + +#, fuzzy +#| msgid "Host-based access control commands" +msgid "Host-Based Access Control" +msgstr "Comandos de control de acceso basado en host" + +msgid "Identity" +msgstr "Identidad" + +#, fuzzy +#| msgid "Services" +msgid "Network Services" +msgstr "Sevicios HBAC" + +msgid "Policy" +msgstr "Política" + +#, fuzzy +#| msgid "Host-based access control commands" +msgid "Role-Based Access Control" +msgstr "Comandos de control de acceso basado en host" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "Confianzas" + +msgid "True" +msgstr "Verdad" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +#| msgid "First Code" +msgid "First" +msgstr "Primer Código" + +#, fuzzy +#| msgid "Last name" +msgid "Last" +msgstr "Apellido" + +msgid "Next" +msgstr "Siguiente" + +msgid "Page" +msgstr "Página" + +msgid "Prev" +msgstr "Anterior" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +#, fuzzy +#| msgid "Expand All" +msgid "Undo All" +msgstr "Expandir Todo" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Undo all changes in this field." +msgstr "Quite todos los principales en este ámbito" + +msgid "Text does not match field pattern" +msgstr "El texto no coincide con el patrón de campo" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a decimal number" +msgstr "debe ser un número decimal" + +#, fuzzy +#| msgid "read error\n" +msgid "Format error" +msgstr "Error de lectura\n" + +msgid "Must be an integer" +msgstr "Debe ser un entero" + +msgid "Not a valid IP address" +msgstr "No es una dirección IP válida" + +msgid "Not a valid IPv4 address" +msgstr "No es una dirección IPv4 válida" + +msgid "Not a valid IPv6 address" +msgstr "No es una dirección IPv6 válida" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Valor máximo es ${value}" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Valor mínimo es ${value}" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#, fuzzy +#| msgid "read error\n" +msgid "Parse error" +msgstr "Error de lectura\n" + +#, fuzzy +#| msgid "Must be an integer" +msgid "Must be a positive number" +msgstr "Debe ser un entero" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "«${port}» no es un puerto válido" + +msgid "Required field" +msgstr "Campo requerido" + +msgid "Unsupported value" +msgstr "Valor no admitido" + +msgid "Role" +msgstr "Rol" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rol agregado \"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Rol eliminado \"%(value)s\"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rol modificado \"%(value)s\"" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d rol coincidente" +msgstr[1] "%(count)d roles coincidentes" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"IPA servers\n" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"Obtener información sobre los servidores IPA instalados.\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Encuentra todos los servidores:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Mostrar un servidor específico:\n" +" ipa server-show ipa.example.com\n" + +msgid "server" +msgstr "servidor" + +msgid "servers" +msgstr "servidores" + +msgid "IPA Servers" +msgstr "Servidores IPA" + +msgid "Server location" +msgstr "Localización de servidor" + +msgid "Service weight" +msgstr "Peso del servicio" + +msgid "Weight for server services" +msgstr "Peso para los servicios del servidor" + +msgid "Service relative weight" +msgstr "Peso relativo del servicio" + +msgid "Relative weight for server services (counts per location)" +msgstr "" +"Pero relativo para los servicios del servidor (cuentas por localización)" + +msgid "Enabled server roles" +msgstr "Rolkes de servidor habilitados" + +msgid "List of enabled roles" +msgstr "Listra de roles habilitados" + +msgid "Modify information about an IPA server." +msgstr "Modificar información sobre un servidor IPA." + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Modificado servidor IPA \"%(value)s\"" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d servidor IPA coincide" +msgstr[1] "%(count)d servidores IPA coinciden" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Eliminado servidor IPA \"%(value)s\"" + +msgid "Ignore topology errors" +msgstr "Ignorar errores de topología" + +msgid "Ignore topology connectivity problems after removal" +msgstr "Ignorar problemas de conectividad de topología después de quitarla" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "Ignorar la comprobación del último servidor CA o DNS que queda" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Saltar una comprobación si el último maestro CA o servidor DNS se ha quitado" + +msgid "Force server removal" +msgstr "Forzar la eliminación del servidor" + +msgid "Force server removal even if it does not exist" +msgstr "Fuerza el borrado del servidor aunque no exista" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"La replica de la clave maestra DNSSEC está activa. Desinstalarla podría " +"romper su sistema DNS. Por favor deshabilite o reemplace la clave maestra " +"DNSSEC primero." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "Borrando este servidor dejará su instalación sin un DNS." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"El borrado de este servidor no está permitido puesto que dejaría su " +"instalación sin un KRA." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"El borrado de este servidor no está permitido puesto que dejaría su " +"instalción sin una CA." + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "Ignorar estos avisos y continuar con el borrado" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" +"Fallo al limpiar memberPrincipal %(principal)s de la entrada s4u2proxy " +"%(dn)s: %(err)s" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "Fallo al limpiar entradas DNA hostname para %(master)s: %(err)s" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" +"Fallo al quitar el servidor %(master)s de la lista de servidores: %(err)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "Fallo al limpiar claves Custodia para %(master)s: %(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Fallo al limpiar principales/claves del servidor: %(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Fallo al limpiar entradas %(hostname)s DNS: %(err)s" + +msgid "You may need to manually remove them from the tree" +msgstr "Usted puede necesitar borrarlo manualmente del árbol" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "Forzando el borrado de %(hostname)s" + +msgid "Ignoring topology connectivity errors." +msgstr "Ignorando los errores de topología de conectividad." + +msgid "Server has already been deleted" +msgstr "El servidor ya ha sido borrado" + +msgid "Agreements deleted" +msgstr "Acuerdos borrados" + +msgid "Following segments were not deleted:" +msgstr "Los siguientes segmentos no fueron borrados:" + +#, python-format +msgid "must be \"%s\"" +msgstr "debe ser \"%s\"" + +msgid "not allowed to perform server connection check" +msgstr "no permitido llevar a cabo la comprobación de conexión del servidor" + +msgid "Set enabled/hidden state of a server." +msgstr "Establecer estado habilitado/escondido de un servidor." + +msgid "State" +msgstr "Estado" + +msgid "Server state" +msgstr "Estado del servidor" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Cambiado el estado del servidor de \"%(value)s\"." + +msgid "Cannot hide CA renewal master." +msgstr "No se puede ocultar el maestro de renovación de CA." + +msgid "Cannot hide DNSSec key master." +msgstr "No se puede ocultar la clave maestra DNSSec." + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "No se puede ocultar el último servidor habilitado %(name)s." + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#, fuzzy +#| msgid "Allowed to create keytab" +msgid "Allowed to Impersonate" +msgstr "Permitido crear tabla de teclas" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Member principals" +msgstr "Principal kerberos" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "Principal mal construido: '%(value)s'" + +#, fuzzy +#| msgid "Add a new delegation." +msgid "Add target to a named service delegation." +msgstr "Añadir una nueva delegación." + +#, python-format +msgid "member %s" +msgstr "miembro %s" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation." +msgstr "Borrar miembros de un grupo de servicio HBAC." + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation rule" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation rules" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Service delegation rules" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Service delegation rule" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy, python-format +#| msgid "Added delegation \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Delegación añadida \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Delegación eliminada \"%(value)s\"" + +#, fuzzy +#| msgid "member service delegation target" +msgid "privileged service delegation rule" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy, python-format +#| msgid "%(count)d delegation matched" +#| msgid_plural "%(count)d delegations matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d delegación coincidente" +msgstr[1] "%(count)d delegaciones coincidentes" + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation target" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "service delegation targets" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Service delegation targets" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy +#| msgid "member service delegation target" +msgid "Service delegation target" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy, python-format +#| msgid "Added delegation \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Delegación añadida \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted delegation \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Delegación eliminada \"%(value)s\"" + +#, fuzzy +#| msgid "member service delegation target" +msgid "privileged service delegation target" +msgstr "objetivo de delegación de miembro de servicio" + +#, fuzzy, python-format +#| msgid "%(count)d delegation matched" +#| msgid_plural "%(count)d delegations matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d delegación coincidente" +msgstr[1] "%(count)d delegaciones coincidentes" msgid "" "\n" @@ -3391,532 +28297,119 @@ msgstr "" "añadido más un resumen cuando el grupo de usuario predeterminado se haya\n" "actualizado.\n" +#, python-format msgid "" -"\n" -"Misc plug-ins\n" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." msgstr "" -"\n" -"Misc plug-ins\n" +"El principal %s de Kerberos ya existe. Utilice 'ipa user-mod' para definirlo " +"manualmente." + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Incapaz de determinar si el principal Kerberos %s ya existe. Use 'ipa user-" +"mod' para establecerlo manualmente." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Falló al intenatar agregar al usuario al grupo predeterminado. Utilice 'ipa " +"group-add-member' para agregarlo manualmente. " + +msgid "Migration of LDAP search reference is not supported." +msgstr "Migración de búsqueda de referencia LDAP no está soportada." + +msgid "Malformed DN" +msgstr "DN Malformado" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s no es un usuario POSIX" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" +". Comprobar GID del grupo existente. Use la opción --group-overwrite-gid " +"para anular la GID" + +msgid "Invalid LDAP URI." +msgstr " URI LDAP no válida." + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s a excluir desde la migración" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"los resultados de la búsqueda de los objetos que se van a migrar se han " +"truncado por el servidor; el proceso de migración puede estar incompleto\n" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"%(container)s búsqueda LDAP no devolvió ningún resultado (buscar base: " +"%(search_base)s, objectclass: %(objectclass)s)" + +msgid "Default group for new users not found" +msgstr "Grupo predeterminado para nuevos usuarios no encontrado" msgid "" "\n" -"Netgroups\n" +"Hosts/Machines\n" "\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" msgstr "" "\n" -"Netgroups\n" +"Hosts/Máquinas\n" "\n" -"Un netgroup es un grupo usado para comprobación de permisos. Puede contener\n" -"valores tanto de usuario como de host.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Añadir miembros al netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Quitar un miembro del netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Mostrar información sobre un netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Borrar un netgroup:\n" -" ipa netgroup-del admins\n" +"Un host representa una máquina. Puede ser usado en distintos contextos:\n" +"- las entradas de servicio están asociadas con un host\n" +"- un host almacena el host/ servicio principal\n" +"- un host puede ser usado en reglas de Control de Acceso basado en Host " +"(HBAC)\n" +"- cada cliente inscrito genera una entrada de host\n" msgid "" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" msgstr "" "\n" -"Advierta la diferencia entre atributos y entradas. Los permisos son " -"independientes,\n" -"de este modo ser capaz de añadir un usuario no significa que el usuario sea\n" -"editable.\n" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Fichas OTP\n" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" -"\n" -"Configuración OTP\n" -"\n" -"Gestiona los valores por defecto que IPA usa para las fichas OTP.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Muestra a configuración OTP básica:\n" -" ipa otpconfig-show\n" -"\n" -" Muestra todas las opciones de configuración OTP:\n" -" ipa otpconfig-show --all\n" -"\n" -" Cambia la ventana máxima de autenticación TOTP a 10 minutos:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Cambia la ventana máxima de sincronización TOTP a 12 horas:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Cambia la ventana máxima de autenticación HOTP a 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Cambia la ventana máxima de sincronización a 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" -"\n" -"Política de contraseñas\n" -"\n" -"Una contraseña establece límites en contraseñas de IPA, incluyendo máxima y " -"mínima duración, el número de contraseñas a guardar en historial, el número " -"de clases de caracteresrequeridos (para contraseñas ás fuertes)\n" -"y el mínimo de longitud de una contraseña.\n" -"\n" -"Por defecto es una única política global para todos los usuarios. También " -"puede crear una política de contraseña para aplicar a un grupo. Cada usuario " -"está sujeto solamente a una política de contraseña, ya sea de grupo o " -"global. Una política de grupo es autónoma; no es uper-set de la política " -"global mas los parámetros personalizados.\n" -"Cada política de contraseña requiere una configuración única . Si un usuario " -"está en varios grupos que tienen políticas de contraseñas, esta prioridad " -"determina qué política de contraseña aplica. Un valor inferior indica una " -"política de prioridad superior.\n" -"\n" -"Las políticas de contraseña de grupo se eliminan automáticamente cuando se " -"eliminan los grupos a los cuales están asociados.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Modificar la política global:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Agregar una política de contraseña de nuevo grupo:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Mostrar una política de contraseña global:\n" -" ipa pwpolicy-show\n" -"\n" -" Mostrar una política de contraseña de grupo:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Mostrar la política que sería aplicada al usuario dado:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modificar una polítca de contraseña de grupo:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" - -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"Permisos\n" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -"Permisos\n" -"\n" -"Un permiso habilita una delegación de grano fino de derechos. Un permiso es " -"un formato\n" -"legible por el hombre de una Regla de Control de Acceso (ACL) 389-ds o una " -"instrucción (ACI).\n" -"Un permiso otorga el derecho de llevar a cabo una tarea específica como " -"añadir un\n" -"usuario, modificar un grupo, etc.\n" -"\n" -"Un permiso puede contener otros permisos.\n" -"\n" -"* Un permiso otorga acceso de escritura, lectura, añadir o borrar.\n" -"* Un privilegio combina permisos similares (por ejemplo los permisos " -"necesarios para \n" -" añadir un usuario).\n" -"* Un rol otorga un conjunto de privilegios a usuarios, grupos, hosts o " -"grupos de hosts.\n" -"\n" -"Un permiso consta de diversas partes:\n" -"\n" -"1. El nombre del permiso.\n" -"2. El objetivo del permiso.\n" -"3. Los derechos otorgados por el permiso.\n" -"\n" -"Los derechos definen que operaciones están permitidas y pueden ser una o más " -"de las\n" -"siguientes:\n" -"1. write - escribir uno o más atributos\n" -"2. read - leer uno o más atributos\n" -"3. add - añadir una nueva entrada al árbol\n" -"4. delete - borrar una entrada existente\n" -"5. all - se otorgan todos los permisos\n" -"\n" -"El permiso de lectura se otorga para la mayoría de los atributos por " -"defectos de modo que\n" -"el permiso de lectura no se espera que use con frecuencia.\n" -"\n" -"Advierta la distinción entre atributos y entradas. Los permisos son " -"independientes, de\n" -"modo que ser capaz de añadir un usuario no siginifica que el usuario será " -"editable.\n" -"\n" -"Hay diversos objetivos permitidos:\n" -"1. type: un tipo de objeto (usuario, grupo, etc).\n" -"2. memberof: un miembro de un grupo o grupo de host\n" -"3. filter: un filtro LDAP\n" -"4. subtree: un filtro LDAP especificando parte del LDAP DIT. Esto es un " -"superconjunto del\n" -" objetivo \"type\".\n" -"5. targetgroup: otorga acceso a modificar un grupo específico (como " -"obteniendo\n" -" derechos para manejar la pertenencia al grupo)\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un permiso que otorga la creación de usuarios:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Añadir un permiso que otorga la capacidad de manejar la pertenencia al " -"grupo:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" -"\n" -"Los permisos que vienen con IPA por defecto se pueden llamar permisos\n" -"\"gestionados\". Estos tienen un conjunto de atributos predeterminados que " -"aplican,\n" -"pero el administrador puede añadir/borrar atributos individuales de/a el " -"conjunto.\n" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" -"\n" -"Haga ping al servidor IPA remoto para asegurarse que está corriendo.\n" -"\n" -"El comando ping envía una petición de eco al servidor IPA. El servidor " -"devuelve\n" -"su información de versión. Esto se usa por un cliente IPA para confirmar que " -"el\n" -"servidor está disponible y acepta peticiones.\n" -"\n" -"El servidor de xmlrpc_uri en /etc/ipa/default.conf es el primero en " -"contactarse. Si no\n" -"responde el clinte contactará con cualquier de los servidores definidos por " -"los\n" -"registros ldap SRV en DNS.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Hacer ping a un servidor IPA:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Hacer ping a un servidor IPA verbosamente:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" -"\n" -"Haga ping al servidor IPA remoto para asegurar que está corriendo.\n" -"\n" -"El comando ping envía una petición de eco a un servidor IPA. El servidor " -"devuelve su\n" -"información de versión. Esto se usa por un cliente IPA para confirmar que el " -"servidor está\n" -"disponible y acepta peticiones.\n" -"\n" -"El servidor desde xmlrpc_uri en /etc/ipa/default.conf es contactado primero. " -"Si no\n" -"el cliente contactará con cualquier de los servidores definidos por los " -"registros ldap SRV\n" -"en DNS.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Ping a un servidor IPA:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping a un servidor IPA verbosamente:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" -"\n" -"Los plugins no son accesibles a través d CLI, comandos usados internamente\n" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" -"\n" -"Privilegios\n" -"Un privilegio combina permisos dentro de una tarea lógica. Un permiso " -"proporciona\n" -"los derechos para realizar una tarea específica.\n" -"Por ejemplo, añadir un usuario requiere los siguientes permisos:\n" -"Crear una nueva entradasd de usuario\n" -"Restablecer una contraseña de usuario\n" -"Añadir el nuevo usuario al grupo de usuario predeterminado de IPA\n" -"Combinar estos tres niveles inferiores dentro de una tarea de nivel superior " -"en forma de un privilegio \n" -"denominado \"Add User\" facilita el manejo de roles.\n" -"\n" -"Un privilegio no puede contener otros privilegios.\n" -"\n" -"Ver el rol y el permiso para información adicional. \n" -"\n" -" \n" -"\n" -"\n" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"Servidores Proxy RADIUS\n" +"INSCRIPCIÓN:\n" +"\n" +"Hay tres escenarios de inscripción cuando se inscribe un nuevo cliente:\n" +"\n" +"1. Se está inscribiendo como administrador total. La entrada de host puede " +"existir o\n" +" no. Un administrador total es miembro del rol hostadmin role o del grupo " +"admins.\n" +"2. Se está inscribiendo como administrador limitado. El host debe existir " +"ya. Un\n" +" administrador limitado es miembro de un rol con el privilegio Host " +"Enrollment.\n" +"3. El host ha sido creado con una contraseña de una vez.\n" msgid "" "\n" @@ -3946,526 +28439,1159 @@ msgstr "" msgid "" "\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" msgstr "" "\n" -"Dominios de reino\n" +" Añadir un nuevo host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" "\n" -"Gestiona la lista de dominios asociados con el reino IPA.\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" "\n" -"Esta lista es útil para los Controladores de Dominio de otros reinos que " -"tienen\n" -"establecida confianza con este reino IPA. Necesitan la información para " -"saber que \n" -"peticiones deberían ser reenviadas a KDC de este reino IPA.\n" +" Borrar un host:\n" +" ipa host-del test.example.com\n" + +msgid "" "\n" -"Gestión automática: se añade un dominio automáticamente a la lista de " -"dominios\n" -"cuando se crea una nueva Zona DNS gestionada por IPA. Lo mismo se aplica " -"para el borrado.\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" "\n" -"DNS extermanete gestionado: los dominios que no son gestionados en el " -"servidor\n" -"IPA DNA necesitan ser añadidos manualmente a la lista usando el comando ipa " -"realmdomains-mod command.\n" +" Añadir un nuevo host con una contraseña de un uso:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" "\n" -"EJEMPLOS:\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" "\n" -" Muestra la lista actual de dominios reino:\n" -" ipa realmdomains-show\n" +" Añadir un nuevo host con una contraseña aleatoria de un uso:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" "\n" -" Reemplaza la lista de dominios reino:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" "\n" -" Añade un dominio a la lista de dominios reino:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" +" Modificar información sobre un host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" "\n" -" Borra un dominio de la lista de dominios reino:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +" Quitar las claves públicas SSH de un host y actualizar DNS para reflejar " +"este cambio:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +" Deshabilitar la clave Kerberos de host, el certificado SSL y todos sus " +"servicios:\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +" Añadir un host que pueda manejar la tabla de teclas y certificado del " +"host:\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Permitir al usuario crear una tabla de teclas:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "Base-64 encoded host certificate" +msgstr "Certificado de host codificado en Base-64" + +msgid "Principal alias" +msgstr "Alias principal" + +msgid "SSH public key fingerprint" +msgstr "Huella digital de clave pública SSH" + +msgid "Authentication Indicators" +msgstr "Indicadores de Autenticación" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" #, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" -"\n" -"La eliminación de '%(hostname)s' lleva a desconectar la topología en sufijo " -"'%(suffix)s':\n" -"%(errors)s" +msgid "Added host \"%(value)s\"" +msgstr "Ha sido agregado el equipo \"%(value)s\"" #, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" +msgid "Deleted host \"%(value)s\"" +msgstr "Ha sido eliminado el equipo \"%(value)s\"" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" msgstr "" -"\n" -"La replica de la topología en el sufijo '%(suffix)s' está desconectada:\n" -"%(errors)s" +"Borrar los registros A, AAAA, SSHFP y PTR del host(s) gestionado por IPA DNS" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Sin registros A, AAAA, SSHFP o PTR encontrados." + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Ha sido modificado el equipo \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "La contraseña no puede ser fijada en el host matriculado." + +msgid "cn is immutable" +msgstr "cn es inmutable" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d equipo coincidente" +msgstr[1] "%(count)d equipos coincidentes" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Host desactivado \"%(value)s\"" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Añadidos certificados a host \"%(value)s\"" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Borrados certificados del host \"%(value)s\"" + +msgid "Add new principal alias to host entry" +msgstr "Añade un nuevo alias principal a una entrada de host" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Añadidos nuevos alias al host \"%(value)s\"" + +msgid "Remove principal alias from a host entry" +msgstr "Borra alias principal de la entrada de host" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Borrados alias del host \"%(value)s\"" + +msgid "Class of Service object used for linking policies with groups" +msgstr "Objeto Class of Service enlazando políticas con grupos" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " +"por %(gname)s)" + +msgid "Add Class of Service entry" +msgstr "Añadir entrada Class of Service" + +msgid "Delete Class of Service entry" +msgstr "Borrar entrada Class of Service" + +msgid "Modify Class of Service entry" +msgstr "Modificar entrada Class of Service" + +msgid "Display Class of Service entry" +msgstr "Visualizar entrada Class of Service" + +msgid "Search for Class of Service entry" +msgstr "Búsqueda de entrada Class of Service" + +msgid "password policy" +msgstr "política de contraseña" + +msgid "password policies" +msgstr "políticas de contraseña" + +msgid "Password Policies" +msgstr "Políticas de Contraseña" + +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "Renovación máxima" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Cantidad máxima de entradas obtenidas" + +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "Renovación máxima" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Nombre de usuario" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "La duración máxima de la contraseña debe ser mayor que la mínima." + +msgid "cannot delete global password policy" +msgstr "no puede borrar la Política global de contraseña" + +msgid "priority cannot be set on global policy" +msgstr "la prioridad no puede ser definida en una plítica global" msgid "" "\n" -"Return information about currently authenticated identity\n" +"Cross-realm trusts\n" "\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" +"Manage trust relationship between IPA and Active Directory domains.\n" "\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" "\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" "\n" -"EXAMPLES:\n" +"Examples:\n" "\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" "\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" +" ipa trust-add --type=ad --admin --password\n" "\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" +"2. List all existing trust relationships:\n" "\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" msgstr "" "\n" -"Información devuelta sobre la identidad actualmente autentificada\n" +"Confianza de reino cruzado\n" "\n" -"El comando quien soy devuelve información sobre como obtener más detalles " -"sobre la identidad autentificada para esta petición. La información " -"incluye:\n" +"Gestionar relaciones de confianza entre los dominios IPA y Active " +"Directory.\n" "\n" -" * tipo de objeto\n" -" * comando para recuperar detalles del objeto\n" -" * argumentos y opciones a pasar al comando\n" -"\n" -"La información se devuelve como un diccionario. Los ejemplos de abajo usan " -"la salida 'key: value' con propósitos ilustrativos.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Buscar como usuario IPA:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Buscar como un usuario desde un dominio de confianza:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Buscar como host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Buscar como servicio Kerberos:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"Los derechos definen que operaciones están permitidas y pueden ser una o " -"mas\n" -"de las siguientes:\n" -"1. write - escribe uno o más atributos\n" -"2. read - lee uno o más atributos\n" -"3. search - busca uno o más atributos\n" -"4. compare - compara uno o más atributos\n" -"5. add - añade una nueva entrada al árbol\n" -"6. delete - borra una entrada existente\n" -"7. all - concede todos los permisos\n" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" -"\n" -"BUSCANDO:\n" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" -"\n" -"Mapeo de Usuario SELinux\n" -"\n" -"Mapeo de usuarios IPA a usuarios SELinux por host.\n" -"\n" -"Hosts, grupos de hosts, usuarios y grupos pueden ser definidos bien dentro " -"de\n" -"una regla o pueden apuntar a una regla HBAC existente. Cuando se utiliza la\n" -"opción –hbacrule para selinuxusermap-find se hace una coincidencia exacta " -"con\n" -"el nombre de regla HBAC, de modo que solo se devolverán entradas uno o " -"cero.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Crear una regla, \"test1\", que ajuste a todos los usuarios a xguest_u:s0 " -"en el \"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Crear una regla, \"test2\", que fije todos los usuarios a guest_u:s0 y un " -"regla HBAC existente para los usuarios y hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Mostrar las propiedades de una regla:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Crear una regla para un usuario especifico. Esto ajusta el contexto SELinux " -"para el \n" -" usuario john a unconfined_u:s0-s0:c0.c1023 sobre cualquier máquina:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Deshabilita una regla:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Habilita una regla:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Encontrar una regla con referencia a un regla HBAC específica:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Borrar una regla:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"VEA TAMBIÉN:\n" -"\n" -" La lista controlando el orden en el cual se aplica el mapeo de usuario " -"SELinux\n" -" y el usuario SELinux predeterminado está disponible en el comando config-" -"show.\n" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" -"\n" -"TIPOS DE ZONA SOPORTADOS\n" -"\n" -" * Zona maestro (dnszone-*), contiene datos autoritativos.\n" -" * Zona de información (dnsforwardzone-*), envía solicitudes a otros " -"servidores \n" -" (un conjunto de servidores DNS).\n" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" -"\n" -"Buscar ACIs.\n" -"\n" -" Devolver una lista de ACIs\n" -"\n" -" EJEMPLOS:\n" -"\n" -" Para encontrar todos los ACIs que se aplican directamente a miembros " -"del grupo ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" Para encontrar todos los ACIs que obtienen acceso añadir:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Advierta que el comando find solo busca el texto dado en el conjunto de " -"ACIs, no\n" -" evalúa los ACIs a ver si aplicaría alguno.\n" -" Por ejemplo, la búsqueda sobre memberof=ipausers encontrará todos los " -"ACIs\n" -" que tengan ipausers como memberof. Allí puede haber otros ACIs que se\n" -" apliquen a miembros de ese grupo indirectamente.\n" -" " - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Permisos de Auto-Servicio\n" -"\n" -"Un permiso habilita una delegación de permisos de. Las Reglas de Control " -"Acceso, o instrucciones (ACIs), conceden permiso a los permisos para llevar " -"a cabo tareas\n" -"dadas como añadir un usuario, modificar un grupo, etc.\n" -"\n" -"Un permiso de Auto-Servicio define que un objeto puede cambiar en su propia " -"entrada.\n" -"\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir una regla de auto-servicio para permitir a los usuarios gestionar " -"su\n" -" dirección (usando una expresión Bash brace):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Los usuarios gestionan sus propias direcciones\"\n" -"\n" -" Cuando está gestionando la lista de atributos usted necesita incluir todos " +"Con el objetivo de permitir a los usuarios de un dominio remoto acceder a " "los\n" -" atributos en la lista, incluyendo los existentes.\n" -" Añadir telephoneNumber a la lista (usando expansión Bash brace):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Los usuarios gestionan sus propias direcciones\"\n" +"recursos en el dominio IPA, se necesita establecer relaciones de confianza.\n" +"Actualmente IPA soporta solo confianza entre dominios IPA y Active Directory " +"bajo \n" +"el control de Windows Server 2008 o posterior, con nivel funcional 2008 o " +"posterior.\n" "\n" -" Mostrar nuestra regla actualizada:\n" -" ipa selfservice-show \"Los usuarios gestionan sus propias direcciones\"\n" +"Por favor advierta que el DNS en ambos lados de los dominios IPA y Active\n" +"Directory deberían ser configurados apropiadamente para descubrir a cada " +"uno.\n" +"Las relaciones de confianza se apoyan en la capacidad de descubrir recursos " +"especiales en el otro dominio por medio de los registros DNS.\n" "\n" -" Borrar una regla:\n" -" ipa selfservice-del \"Los usuarios gestionan sus propias direcciones\"\n" +"Ejemplos:\n" +"\n" +"1. Establecer confianza de reino cruzado con Active Directory usando el \n" +" dministrador de credenciales AD:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. Listar todas las relaciones de confianza existentes:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Mostrar detalles de la relación de confianza específica:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Borrar relaciones de confianza existentes:\n" +"\n" +" ipa trust-del \n" +"\n" +"Una vez que la relación de confianza está establecida, los usuarios remotos\n" +"necesitarán ser mapeados a grupos POSIX locales con el objetivo de usar " +"recursos\n" +"IPA. El mapeado debería ser hecho por medio del uso de la membresía externa " +"de\n" +"grupo no-POSIX y después este grupo debería ser incluido en uno de los " +"grupos locales POSIX.\n" +"\n" +"Ejemplo:\n" +"\n" +"1. Crear un grupo para el mapeo de administrador de dominio de confianza y " +"su\n" +"grupo POSIX local:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Añadir identificador de seguridad de Domain Admins del al " +"grupo\n" +" ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Permitir a los miembros del grupo admins_external ser asociados con el " +"grupo\n" +" POSIX ad-admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lista de miembros de miembros externos del grupo ad_admins_external para " +"ver\n" +" sus SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"CONFIGURACIÓN GLOBAL DE CONFIANZA\n" +"\n" +"Cuando se instale un subpaquete de confianza IPA AD y está corriendo ipa-" +"adtrust-\n" +"install, se genera una configuración de dominio local (SID, GUID, nombre\n" +"NetBIOS). Estos identificadores se usan entonces cuando se comunica con un\n" +"dominio de confianza de un tipo concreto.\n" +"\n" +"1. Mostrar la configuración de confianza global para el tipo de confianza " +"Active Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modificar la configuración global de todos los confiados de tipo Active " +"Directory y\n" +" establecer un grupo primario de retroceso (el GID del grupo primario de " +"retroceso\n" +" se usa como GID de usuario primario y el usuario autenticando al dominio " +"IPA no\n" +" tiene ningún otro GID primario establecido ya):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Cambiar el grupo primario de retroceso al grupo escondido predeterminado\n" +" (cualquier grupo con un objeto clae posixGroup está permitido):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" +" Alternativamente, los siguientes servidores son capaces de ejecutar este " +"comando: %(masters)s" + +msgid "AD Trust setup" +msgstr "Ajuste de Confianza AD" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"No puede llevar a cabo el comando seleccionado sin el soporte de Samba 4 " +"instalad. Asegúrese de tener el instalado el sub-paquete server-trust-ad de " +"IPA." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"No puede llevar a cabo el comando seleccionado sin una instancia Samba 4 " +"configurada en este máquina. Asegúrese de estar ejecutando ipa-adtrust-" +"install sobre este servidor." + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"No puede buscar en los dominios de confianza sin un dominio propio " +"configurado. Asegúrese que tiene corriendo ipa-adtrust-install sobre el " +"servidor IPA primero" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"No se pudo recuperar dominios del bosque de confianza. Vea detalles en " +"error_log" + +msgid "trust" +msgstr "confianza" + +msgid "trusts" +msgstr "confianzas" + +msgid "Trust" +msgstr "Confianza" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklist incoming" +msgstr "Lista negra de SID entrante" + +#, fuzzy +#| msgid "SID blacklist outgoing" +msgid "SID blocklist outgoing" +msgstr "Lista negra de SID saliente" + +msgid "UPN suffixes" +msgstr "Sufijos UPN" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "SID no válido: {SID}" msgid "" "\n" -"Self-service Permissions\n" +"Add new trust to use.\n" "\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" "\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" +"Only trusts to Active Directory domains are supported right now.\n" "\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" "\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " msgstr "" "\n" -"Auto servicio de Permisos\n" +"Añadir nueva confianza a usar.\n" "\n" -"Un permiso habilita una delegación de grano fino de permisos. Las Reglas de " -"Control de\n" -"Acceso o instrucciones (ACIs), conceden permisos a los permisos para llevar " -"a cabo tareas\n" -"dadas como añadir un usuario, modificar un grupo, etc.\n" +"Este comando establece la relación de confianza con otro dominio que llegar " +"a ser \n" +"trusted'. Como resultado, los usuarios del dominio de confianza puede " +"acceder a\n" +"los recursos de este dominio.\n" "\n" -"Un Permiso de Auto servicio define lo que un objeto puede cambiar en su " -"propia entrada.\n" +"Solo están soportados ahora la confianza con dominios Active Directory.\n" "\n" +"El comando se puede ejecutar seguramente múltiples veces contra el mismo\n" +"dominio, esto causará cambios en las credenciales de relaciones de confianza " +"en\n" +"ambos lados.\n" "\n" -"EJEMPLOS:\n" +"Advierta que si el comando se ejecuta previamente con un tipo de rango " +"específico\n" +"o con detección automática del tipo de rango y usted desea configurar un " +"tipo de\n" +"rango diferente, usted puede necesitar borrar primero la ID del rango " +"usando \n" +"ipa idrange-del antes de reintentar el comando con el rango deseado.\n" +" " + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" +"Tipo de rango de ID de dominios de confianza, uno de los valores permitidos" + +msgid "External trust" +msgstr "Confianza externa" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Establecida confianza externa a un dominio en otro bosque. La confianza no " +"es transitiva más allá del dominio." + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Añadida confianza Active Directory para el reino \"%(value)s\"" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Restablecida la confianza al dominio \"%(value)s\"" + +msgid "missing base_id" +msgstr "base_id desaparecida" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" +"pysss_murmur no está disponible en el servidor y no se ha dado base-id." + +msgid "trust type" +msgstr "tipo de confianza" + +msgid "only \"ad\" is supported" +msgstr "solo se admite «ad»" + +msgid "domain" +msgstr "dominio" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"No puede establecer confianza al AD desplegado en el mismo dominio que IPA. " +"Este ajuste no se soporta." + +msgid "Realm-domain mismatch" +msgstr "Flata de coincidencia de dominio reino" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Para establecer confianza con Active Directory, el nombre de dominio y el " +"nombre de reino del servidor IPA deben coincidir" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"El dominio de confianza %(domain)s está incluido entre los dominios del " +"reino IPA realm. Necesita ser quitado antes de establecer la confianza. Vea " +"el comando \"ipa realmdomains-mod --del-domain\"." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"El dominio de confianza y la cuenta del administrador usan reinos diferentes" + +msgid "Realm administrator password should be specified" +msgstr "Debería especificarse la contraseña del administrador del reino" + +msgid "id range type" +msgstr "tipo de rango de id" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"Solo se permiten los valores ipa-ad-trust e ipa-ad-trust-posix para --range-" +"type cuando se añade una confianza AD." + +msgid "id range" +msgstr "rango id" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Ya existe un rango id para esta confianza. Usted debería bien borrar el " +"antiguo rango o excluir las opciones --base-id/--range-size del comando." + +msgid "range exists" +msgstr "el intervalo existe" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Rango de ID con el mismo nombre pero diferente SID de dominio ya existe. El " +"nuevo rango de ID para el nuevo dominio de confianza debe ser creado " +"manualmente." + +msgid "range type change" +msgstr "cambio de tipo de rango" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"El rango de ID para el dominio de confianza ya existe, pero tiene un tipo " +"diferente. Por favor borre manualmente el rango viejo o no haga cumplir el " +"tipo por medio de la opción --range-type." + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" +"Incapaz de resolver el controlador de dominio para el dominio {domain}. " + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"La política de reenvío se define para ello en IPA DNS, ¿tal vez el " +"reenviador apunta al host incorrecto?" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" +"IPA gestiona DNS, por favor verifique su configuración DNS y asegúrese que " +"el servicio de registros del dominio '{domain}' puede ser resuelto. Se " +"pueden encontrar ejemplos de como configurar DNS con comandos CLI o con Web " +"UI en la documentación. " + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" +"Puesto que IPA no gestiona los registros DNS, asegúrese de que DNS está " +"configurado para resolver el dominio '{domain}' desde los hosts IPA y vuelta." + +msgid "Unable to verify write permissions to the AD" +msgstr "Incapaz de verificar los permisos de escritura al AD" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" +"No se especifican bastantes argumentos para llevar a cabo un ajusta de " +"confianza" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Confianza borrada \"%(value)s\"" + +msgid "" "\n" -" Añadir una regla de auto servicio para permitir a los usuarios gestionar " -"sus direcciones:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Los usuarios maejan sus propias direcciones\"\n" +" Modify a trust (for future use).\n" "\n" -" Cuando maneje una lista de atributos usted necesita incluir todos los " -"atributos en la lista, incluyendo los existentes. Añadir un Número de " -"teléfono a la lista:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Los usuarios manejan sus propias direcciones\"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" "\n" -" Visualizar nuestra regla actualizada:\n" -" ipa selfservice-show \"Los Usuarios manejan sus propias direcciones\"\n" +" Modificar una confianza (para uso futuro).\n" "\n" -" Borrar una regla:\n" -" ipa selfservice-del \"Los usuarios manejan sus propias direcciones\"\n" +" Actualmente solo está disponible la opción predeterminada para modificar " +"los\n" +" atributos LDAP. Opciones más especificas serán añadidas en futuras " +"versiones.\n" +" " + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" +"Confianza modificada \"%(value)s\" (el cambio será efectivo en 60 segundos)" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d confianza encontrada" +msgstr[1] "%(count)d confianzas encontradas" + +msgid "trust configuration" +msgstr "configuración de la confianza" + +msgid "Global Trust Configuration" +msgstr "Configuración Global de Confianza" + +msgid "IPA AD trust agents" +msgstr "IPA AD agentes de confianza" + +msgid "IPA servers configured as AD trust agents" +msgstr "Servidores IPA configurados como agentes de confianza AD" + +msgid "IPA AD trust controllers" +msgstr "Controladores de confianza IPA AD" + +msgid "IPA servers configured as AD trust controllers" +msgstr "Servidores IPA configurados como controladores de confianza AD" + +msgid "unsupported trust type" +msgstr "tipo de confianza no soportado" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Modificada \"%(value)s\" configuración de confianza" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Este comando se basa en la existencia del grupo \"editors\" pero este grupo " +"no h sido encontrado." + +msgid "trust domain" +msgstr "dominio de confianza" + +msgid "trust domains" +msgstr "dominios de confianza" + +msgid "Trusted domains" +msgstr "Dominios de confianza" + +msgid "Trusted domain" +msgstr "Dominio de confianza" + +msgid "Domain enabled" +msgstr "Dominio habilitado" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"no puede borrar el dominio raíz de la confianza, use trust-del para borrarla " +"misma confianza" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Lista de dominios de confianza refrescados con éxito. Use el comando " +"trustdomain-find para listarlos." + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Configure this server as a trust agent." +msgstr "Servidores IPA configurados como agentes de confianza AD" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "no se permite modificar las entradas de los usuarios" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Habilitado dominio de confianza \"%(value)s\"" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"El dominio raíz de la confianza está siempre habilitado para la confianza " +"existente" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Deshabilitar dominio de confianza \"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"no puede deshabilitar el dominio raíz de la confianza, use trust-del para " +"borrar la confianza misma" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" +"\n" +"Mapeando la Identidad del Certificado\n" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" +"\n" +"Gestionar la configuración y las reglas del Mapeo de Identidad del " +"Certificado.\n" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" +"\n" +"IPA soporta el uso de certificados para la autenticación. Las certificados " +"pueden ser\n" +"bien almacenados en la entrada del usuario (el certificado completo en el " +"atributo\n" +"usercertificate) o simplemente enlazado a la entrada de usuario a través de " +"un\n" +"mapeo. Esta código habilita la gestión de las reglas permitiendo enlazar un\n" +"certificado a una entrada de usuario.\n" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +" Mostrar la configuración global del Mapeo de Identidad de Certificado:\n" +" ipa certmapconfig-show\n" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" +"\n" +" Modificar la configuración global del Mapeo de Identidad de Certificado:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" +"\n" +" Crea una nueva Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" +"\n" +" Modificar una Regla de Identidad de Certificado:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" +"\n" +" Deshabilitar una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-disable rule1\n" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" +"\n" +" Habilitar una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-enable rule1\n" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"\n" +" Muestra información sobre una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-show rule1\n" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" +"\n" +" Encuentra todas las Reglas de Mapeo de Identidad de Certificado con el " +"dominio especificado:\n" +" ipa certmaprule-find --domain example.com\n" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" +"\n" +" Borra una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-del rule1\n" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" +"El dominio(s) \"%s\" no puede ser usado para aplicar la comprobación " +"altSecurityIdentities." + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" +"La regla de mapeo con altSecurityIdentities debería ser aplicada a un " +"dominio Active Directory de confianza pero ningún dominio fue asociado con " +"la regla." + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "El dominio %s no es un dominio IPA ni un dominio de confianza." + +msgid "Certificate Identity Mapping configuration options" +msgstr "Opciones de configuración del Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "Configuración Global del Mapeo de Identidad de Certificado" + +msgid "Prompt for the username" +msgstr "Pedir el nombre de usuario" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" +"Pedir el nombre de usuario cuando múltiples identidades están mapeadas a un " +"certificado" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Modificar la configuración de Mapeo de Identidad de Certificado." + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Muestra la configuración actual del Mapeo de Identidad de Certificado." + +msgid "Certificate Identity Mapping Rules" +msgstr "Reglas de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rule" +msgstr "Regla de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rule name" +msgstr "Nombre de Regla de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rule description" +msgstr "Descripción de la Regla de Mapeo de Identidad de Certificado" + +msgid "Mapping rule" +msgstr "Regla de mapeo" + +msgid "Rule used to map the certificate with a user entry" +msgstr "Regla usada para mapear el certificado con una entrada de usuario" + +msgid "Matching rule" +msgstr "Regla de coincidencia" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" +"Regla usada para comprobar si un certificado puede ser usado para " +"autenticación" + +msgid "Domain where the user entry will be searched" +msgstr "Dominio donde se buscará la entrada de usuario" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" +"Prioridad de la regla (el número más alto significa la prioridad más baja" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "Crear una nueva Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Añadida Regla de Mapeo de Identidad de Certificado \"%(value)s\"" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Modificar una Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado modificada \"%(value)s\"" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Buscar Reglas de Mapeo de Identidad de Certificado." + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "%(count)d Regla de Mapeo de Identidad de Certificado coincidente" +msgstr[1] "%(count)d Reglas de Mapeo de Identidad de Certificado coincidentes" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" +"Visualizar información sobre una Regla de Mapeo de Identidad de Certificado." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Borrar una Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" borrada" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "Habilitar una Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" habilitada" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Deshabilitar una Regla de Mapeo de Identidad de Certificado." + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" deshabilitada" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "Fallo al conectar sssd sobre SystemBus. Vea detalles en error_log" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Fallo al encontrar usuarios sobre SystemBus. Vea detalles en error_log" + +msgid "User logins" +msgstr "Accesos de usuario" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" +"\n" +" Buscar usuarios que coincidan con el certificado suministrado.\n" +"\n" +" Este comando se basa en SSSD para recuperar la lista de los usuarios\n" +" coincidentes y puede devolver los datos en cache. Para más información " +"sobre \n" +" la purga del cache SSSD, vea por favor la documentación sss_cache.\n" +" " + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)s usuario coincidente" +msgstr[1] "%(count)s usuarios coincidentes" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "Privilegio" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Privilegio añadido \"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Privilegio eliminado \"%(value)s \"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Privilegio modificado \"%(value)s \"" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d privilegio coincidente" +msgstr[1] "%(count)d privilegios coincidentes" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" msgid "" "\n" @@ -4590,901 +29716,88 @@ msgstr "" msgid "" "\n" -"Services\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" "\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +" Permitir al usuario crear una tabla de claves:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" + +msgid "" "\n" " Generate and retrieve a keytab for an IPA service:\n" " ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" "httpd.keytab\n" +"\n" msgstr "" "\n" -"Servicios\n" -"\n" -"Un servicio IPA representa un servicio que corre en un host. El registro del " -"servicio IPA\n" -"puede almacenar un principal Kerberos, un certificado SSL a ambos.\n" -"\n" -"Un servicio IPA puede ser manejado directamente desde una máquina, siempre " -"que la\n" -"máquina haya recibido los permisos correctos. Esto es cierto aún para " -"máquinas distintas\n" -"a aquella a la que el servicio está asociado. Por ejemplo, pidiendo un " -"certificado SSL\n" -"usando las credenciales de servicio principal de host del anfitrión. Para " -"manejar un\n" -" servicio usando las credenciales del anfitrión usted necesita tokinit como " -"el anfitrión:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Añadir un servicio IPA permite al servicios asociado pedir un certificado " -"SSL o keytab, pero esto se lleva a cabo como un paso separado; esto no se " -"produce como resultado de añadir el servicio.\n" -"\n" -"Solo se almacena el aspecto público de un certificado en un registro de " -"servicio la clave\n" -"privada no se almacena.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo servicio IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Permitir a un host manejar un certificado de servicio IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Anular una lista predeterminada de tipos PAC soportados para el servicio:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Borrar un servicio IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Encontrar todos los servicios IPA asociados con un host:\n" -" ipa service-find web.example.com\n" -"\n" -" Encontrar todos los servicios HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Deshabilitar la clave del servicio Kerberos y el certificado SSL:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Pedir un certificado para un servicio IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generar y recuperar una keytab para un servicio IPA:\n" +" Generar y recuperar un tabla de clave para un servicio IPA:\n" " ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" "httpd.keytab\n" +"\n" -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" +msgid "Trusted to authenticate as user" +msgstr "Confiable pata autenticarse como usuario" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "El servicio puede autenticarse en nombre de un cliente" + +msgid "Malformed principal" +msgstr "Director malformado" + +msgid "{} is required by the IPA master" msgstr "" -"\n" -"Establecer contraseña de un usuario\n" -"\n" -"Si alguien que no sea un usuario cambia la contraseña del usuario (por " -"ejemplo, Servicio de Ayuda la restablece), entonces la contraseña tendrá que " -"ser cambiada la primera vez que se utiliza. Esto es para que el usuario " -"final sea el único que conoce la contraseña.\n" -"La directiva de contraseñas IPA controla la frecuencia de cambio de una " -"contraseña, los requisitos de fortaleza y longitud del historial de " -"contraseñas. EJEMPLOS:\n" -"Para restablecer su contraseña:\n" -" ipa passwd tuser1\n" -"\n" -" Para cambiar la contraseña de otro usuario:\n" -" ipa passwd tuser1\n" + +msgid "service" +msgstr "servicio" + +msgid "services" +msgstr "servicios" + +msgid "Service principal alias" +msgstr "Alias principal del servicio" + +msgid "Base-64 encoded service certificate" +msgstr "Certificado de servicio codificado en Base-64" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "El valor NONE no puede ser combinado con otros tipos de PAC" + +msgid "Add a new IPA service." +msgstr "Añadir un nuevo servicio IPA." + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Ha sido agregado el servicio \"%(value)s\"" + +msgid "force principal name even if host not in DNS" +msgstr "fuerza el nombre del principal si el host no está en el DNS" + +msgid "Skip host check" +msgstr "Salta la comprobación de host" msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" +"force service to be created even when host object does not exist to manage it" msgstr "" -"\n" -"Escenógrafos\n" -"\n" -"Gestionar las entradas de escenario de usuario.\n" -"\n" -"Las entradas de escenario de usuario están directamente bajo el contenedor.\n" -" \"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\". Los usuarios no " -"se\n" -" pueden autenticar con estas entradas (aunque las entradas contengan\n" -" credenciales). Estas entradas son solo candidatas a llegar a ser entradas " -"Activas.\n" -"\n" -"Las entradas Activas de usuario son usuarios Posix directamente bajo el " -"contenedor. \"cn=accounts, SUFFIX\".\n" -"Los usuario se pueden autenticar con entradas Activas con la condición de " -"que \n" -"tengan credenciales.\n" -"\n" -"Las entradas borradas de usuario son usuaruios Posix directamente bajo el " -"contenedor. \"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Los usuarios no se pueden autenticas con estas entradas, aunque estas " -"entradas contengan credenciales.\n" -"\n" -"El contenedor escenario de usuario contiene entradas:\n" -" - crreadas por comandos 'stageuser-add' que son usuarios Posix,\n" -" - creadas por un sistema externa de aprovisionamiento.\n" -"\n" -"Una entrada de escenario de usuario valida DEBE tener:\n" -" - entrada RDN es 'uid',\n" -" - ipaUniqueID es 'autogenerate'.\n" -"\n" -"IPA soporta un amplia rango de formatos de nombre de usuario, pero usted " -"debe\n" -"estar atento a algunas restricciones que pueden aplicarse a su entorno " -"concreto.\n" -"Por ejemplo, los nombres de usuario que empiezan con un dígito o los nombres " -"de \n" -"usuario que exceden cierta longitud pueden causar problemas en algunos " -"sistemas UNIX.\n" -"Use 'ipa config-mod' para cambiar el formato de nombre de usuario permitido " -"por las herramientas IPA.\n" -"\n" -"\n" -"EJEMPLOS:\n" -"\n" -"Añadir un uevo escenógrafo:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Añadir un escenografo desde un contenedor de usuarios borrados:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"La bóveda standard usa un mecanismo seguro para transportar y\n" -"almacenar el secreto. El secreto puede ser sólo recuperado por los usuarios\n" -"que tiene acceso a la bovéda.\n" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" -"\n" -"Su pueden añadir Autoridades de Certificado Subordinadas (Sub-CAs) para\n" -"emisión con alcance de certificados X.509.\n" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" -"\n" -"Comandos de Sudo\n" -"\n" -"Comandos usados como partes integrantes de sudo\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Crear un comando nuevo\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Eliminar un comando\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" -"\n" -"Reglas Sudo\n" -"\n" -"Sudo (su \"do\") permite a un administrador de sistema delegar autoridad a " -"ciertos\n" -"usuarios dados(o grupos de usuarios) para tener la posibilidad de ejecutar " -"algunos (o\n" -" todos) los comandos como root u otro usuario mientras suministra pistas de " -"auditoria de\n" -" los comandos y sus argumentos.\n" -"\n" -"IPA proporciona un medio para configurar diversos aspectos de Sudo:\n" -" Users: Los usuario(s)/grupos(s) que tienen permitido llamar a Sudo.\n" -" Hosts: Loshost(s)/grupo(s) de host a los que el usuario permite llamar a " -"Sudo.\n" -" Allow Command: El comando(s) específico que tiene permitido ejecutarse " -"por medio de Sudo.\n" -" Deny Command: El comando(s) específico que tiene prohibido ejecutarse por " -"medio de Sudo.\n" -" RunAsUser: El usuario(s) o grupo(s) de usuarios con cuyos derechos será " -"invocado Sudo.\n" -" RunAsGroup: El grupo(s) con cuyos derechos gid será invocado Sudo.\n" -" Options: Las diversas opciones Sudoers que pueden modificar el " -"comportamiento de Sudo.\n" -"\n" -"Su puede aadir un orden a una regla sudo para controlar el orden en el que " -"será evaluada\n" -"(si el cliente lo soporta). Este orden es un entero y debe ser único.\n" -"\n" -"IPA suministra un binddn designado para usar con Sudo situado en :\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Para habilitar el binddn ejecute el siguiente comando para fijar la " -"contraseña:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"Para más información, vea la Documentación IPA para Sudo.\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"La bóveda symmetric es similar a la standard, pero\n" -"encripta previamente el secreto usando una contraseña antes de transportar.\n" -"El secreto sólo se puede recuperar usando la misma contraseña.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"El comando de reconstrucción de auto miembro puede ser usado para ejecutar \n" -"retroactivamente reglas de auto miembro contra las entradas existentes, así " -"reconstruirá su membresía.\n" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"El formato de fecha es YYYY-mm-dd.\n" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" -"\n" -"La placa de identidad CA usa el valor CN del CSR y fuerza al resto del " -"sujeto a\n" -"valores configurados en el servidor.\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" -"\n" -"El estado de un rol es habilitado, configurado o ausente.\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"Existen distinto objetivos permitidos:\n" -"1. subtree: un DN; el permiso se aplica al sub-árbol bajo este DN\n" -"2. target filter: un filtro LDAP\n" -"3. target: DN con posibles comodines, especifica las entradas a las que se " -"aplica\n" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" -"\n" -"Hay muchos tipos de DNS RR estructurados donde los datos DNS almacenados\n" -"en el servidor LDAP no son solo un valor escalar, por ejemplo una dirección " -"IP o\n" -"un nombre de dominio, pero es una estructura de datos que puede ser con\n" -"frecuencia compleja. Un buen ejemplo es un registro LOC [RFC1876] que " -"consta\n" -"de muchas partes obligatorias y opcionales (grados,minutos, segundos de " -"latitud y longitud, altitud o precisión).\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" -"\n" -"Este código es una extensión del plugin otptoken y suministra el soporte " -"para\n" -" leer/escribir directamente en las fichasYubiKey.\n" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" -"\n" -"USANDO OPCIONES ESTRUCTURADAS POR TIPO\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Las bóvedas de usuario son bóvedas propietarias usadas por un usuario " -"concreto. Las bóvedas\n" -"privadas son bóvedas propiedad del usuario actual. Las bóvedas de servcio " -"son\n" -"bóvedas propiedad de un servicio. Las bóvedas compartidas son propiedad del " -"administrador\n" -"pero pueden ser usadas por otros usuarios o sevicios.\n" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" -"\n" -"Usuarios\n" -"\n" -"Gestiona entradas de usuario. Todos los usuarios son usuarios POXIS.\n" -"\n" -"IPA soporta un amplio rango de formatos de nombre de usuario, pero usted " -"debe estar atento a cualquier restricción que se pueda aplicar a su entorno " -"concreto. Por ejemplo, nombres de usuario que empiezan con un dígito o " -"nombres de usuario que superan cierta longitud pueden causar problemas en " -"algunos sistemas UNIX.\n" -"Use 'ipa config-mod' para cambiar el nombre de usuario permitido por las " -"herramientas IPA.\n" -"\n" -"Deshabilitando una cuenta de usuario evita que el usuario obtenga nuevas\n" -"credenciales Kerberos. Esto no invalida cualquier credencial que ya hay " -"sido\n" -"enviada.\n" -"\n" -"La gestión de contraseña no es parte de este módulo. Para más información " -"sobre \n" -"este punto vea por favor: ipa help passwd\n" -"\n" -"El cierre de una cuenta ante un fallo de contraseña sucede por el master " -"IPA. El\n" -"comando user-status se puede usar para identificar en que master está " -"bloqueado\n" -"el usuario. Y sobre ese master debe el administrador desbloquear al " -"usuario.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo usuario:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Encontrar todos los usuarios cuyas entradas incluyen la cadena \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Encontrar todos los usuarios con “Tim” como primer nombre:\n" -" ipa user-find --first=Tim\n" -"\n" -" Deshabilitar una cuenta de usuario:\n" -" ipa user-disable tuser1\n" -"\n" -" Habilitar una cuenta de usuario\n" -" ipa user-enable tuser1\n" -"\n" -" Borrar un usuario:\n" -" ipa user-del tuser1\n" - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Bóvedas\n" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" -"\n" -"Cuando se añade un registro, cualquiera de las opciones RR especificas o\n" -"estándar para un valor bruto se puede usar, simplemente no deben combinarse " -"en\n" -"operación de adicción. Cuando se modifica una entrada existente, se pueden " -"usar\n" -"nuevas opciones RR para cambiar una parte de un registro DNS, donde la " -"opción\n" -"estándar para el valor bruto se usa para especificar el valor modificado. El " -"siguiente\n" -"ejemplo muestra una modificación de la preferencia de un registro MX de 0 a " -"1 en\n" -"un registro sin modificación del intercambiador:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" -"\n" -"Cuando se busca por fechas _from fecha hace un >= search y _to fecha hace\n" -"<= search. Cuando se combina esto hace como un AND.\n" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"Fichas YubiKey\n" - -msgid " ipa --help" -msgstr " ipa --help" +"fuerza la creación del servicio aún cuando el host no exista para manejarlo" #, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -" Alternativamente, los siguientes servidores son capaces de ejecutar este " -"comando: %(masters)s" +msgid "The host '%s' does not exist to add a service to." +msgstr "El '%s' no existe para añadirle un servicio." + +msgid "Add a new SMB service." +msgstr "Añadir un nuevo servicio SMB." + +msgid "SMB service NetBIOS name" +msgstr "Nombre del servicio SMB de NetBIOS" #, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\" no es un tipo válido de permiso" +msgid "Deleted service \"%(value)s\"" +msgstr "Ha sido eliminado el servicio \"%(value)s\"" #, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\" no es un tipo de objeto" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} item(s) añadido" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} item(s) borrado" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Configuraciones de ${entity} ${primary_key}" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "${entity} ${primary_key} actualizado" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity} añadido con éxito" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} es un miembro de:" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} es gestionada por:" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "${primary_key} miembros:" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, versión: ${version}" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s no contiene '%(value)s'" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: sintaxis inválida." - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr " %(attr)s : Solamente un valor permitido." - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"%(container)s búsqueda LDAP no devolvió ningún resultado (buscar base: " -"%(search_base)s, objectclass: %(objectclass)s)" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -"%(count)d %(type)s registro omitido. Sólo un valor por DNS tipo de registro " -"puede ser modificado a la vez." -msgstr[1] "" -"%(count)d %(type)s registros omitidos. Sólo un valor por DNS tipo de " -"registro puede ser modificado a la vez." - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI coincidente" -msgstr[1] "%(count)d ACIs coincidentes" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d CA coincidente" -msgstr[1] "%(count)d CAs coincidentes" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "%(count)d Regla de Mapeo de Identidad de Certificado coincidente" -msgstr[1] "%(count)d Reglas de Mapeo de Identidad de Certificado coincidentes" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d regla coincidente de HBAC" -msgstr[1] "%(count)d reglas coincidentes de HBAC " - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d grupo de servicio HBAC coincidente" -msgstr[1] "%(count)d grupos de servicio HBAC coincidentes" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "Servicio HBAC %(count)d coincidente" -msgstr[1] "Servicios HBAC %(count)d coincidentes" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d localización IPA emparejada" -msgstr[1] "%(count)d localizaciones IPA emparejadas" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d servidor IPA coincide" -msgstr[1] "%(count)d servidores IPA coinciden" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d OTP ficha coincidente" -msgstr[1] "%(count)d OTP fichas coincidentes" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d servidor proxy RADIUS coincidente" -msgstr[1] "%(count)d servidores proxy RADIUS coincidentes" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d Mapa de Usuario SELinux coincidente" -msgstr[1] "%(count)d Mapas de Usuario SELinux coincidentes" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d Grupo de Comando Sudo emparejado" -msgstr[1] "%(count)d Grupos de Comando Sudo emparejados" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d Comando Sudo emparejado" -msgstr[1] "%(count)d Comandos Sudo emparejados" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d Regla Sudo emparejada" -msgstr[1] "%(count)d Reglas Sudo emparejadas" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d clave de automontaje coincidente" -msgstr[1] "%(count)d claves de automontaje coincidentes" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d localización de automontaje coincidente" -msgstr[1] "%(count)d localizaciones de automontaje coincidentes" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d mapa de automontaje coincidente" -msgstr[1] "%(count)d mapas de automontaje coincidentes" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d delegación coincidente" -msgstr[1] "%(count)d delegaciones coincidentes" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d grupo coincidente" -msgstr[1] "%(count)d grupos coincidentes" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d equipo coincidente" -msgstr[1] "%(count)d equipos coincidentes" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d grupo de equipos coincidente" -msgstr[1] "%(count)d grupos de equipos coincidentes" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d autoservicio coincidente" -msgstr[1] "%(count)d autoservicios coincidentes" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d permiso coincidente" -msgstr[1] " %(count)d permisos coincidentes" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d complemento cargado" -msgstr[1] "%(count)d complementos cargados" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d privilegio coincidente" -msgstr[1] "%(count)d privilegios coincidentes" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d perfil coincidente" -msgstr[1] "%(count)d perfiles coincidentes" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d rango coincide" -msgstr[1] "%(count)d rangos coinciden" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d rol coincidente" -msgstr[1] "%(count)d roles coincidentes" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d reglas coincidentes" -msgstr[1] "%(count)d reglas coincidentes" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d autoservicio coincidente" -msgstr[1] "%(count)d autoservicios coincidentes" +msgid "Modified service \"%(value)s\"" +msgstr "Ha sido modificado el servicio \"%(value)s\"" #, python-format msgid "%(count)d service matched" @@ -5493,8769 +29806,985 @@ msgstr[0] "%(count)d servicio coincidente" msgstr[1] "%(count)d servicios coincidentes\t\t\t" #, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d confianza encontrada" -msgstr[1] "%(count)d confianzas encontradas" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d usuario coincidente" -msgstr[1] "%(count)d usuarios coincidentes" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d variables" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s servidor coincide" -msgstr[1] "%(count)s servidores coinciden" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s rol servidor coincidente" -msgstr[1] "%(count)s roles servidor coincidentes" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)s usuario coincidente" -msgstr[1] "%(count)s usuarios coincidentes" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "%(cver)s cliente incompatible con servidor %(sver)s en '%(server)s'" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s:%(info)s" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: fichero no encontrado" - -#, python-format -msgid "%(host)s failed" -msgstr "%(host)s falló" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "%(host)s falló: %(error)s" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"No se puede eliminar %(key)s porque %(label)s %(dependent)s lo requiere" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s no puede ser borrado o deshabilitado porque es el último miembro de " -"%(label)s %(container)s" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s no puede ser borrado/modificado: %(reason)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s certificado no válido" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s no está soportada para principal %(principal_type)s" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: no se encuentra %(oname)s" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: no se encuentra %(oname)s" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s no es un puerto válido" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: Certificado mal formado. %(reason)s" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "Tiempo de espera de la tares LDAP %(task)s, Task DN: '%(task_dn)s'" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s no es un usuario POSIX" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s Record" -msgstr "%s registro" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s no es un atributo válido." - -#, python-format -msgid "%s record" -msgstr "%s registro" - -#, python-format -msgid "%s to add" -msgstr "%s a añadir" - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s a excluir desde la migración" - -#, python-format -msgid "%s to remove" -msgstr "%s a eliminar" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "%s: servidor proxy RADIUS no encontrado" - -#, python-format -msgid "%s: group not found" -msgstr "%s: grupo no encontrado" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: usuario ya preservado" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "«${port}» no es un puerto válido" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' es obsoleto. %(additional_info)s" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s' no tiene certificado" - -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' se requiere" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s' opción obsoleta. %(additional_info)s" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "'%(required)s' no debe estar vacío cuando '%(name)s' está establecido" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "«%s» es una parte requerida del registro DNS" - -msgid "(deprecated)" -msgstr "(obsoleto)" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(vea detalles en el RFC %s)" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" -". Comprobar GID del grupo existente. Use la opción --group-overwrite-gid " -"para anular la GID" - -msgid "7 is not a valid revocation reason" -msgstr "7 no es una razón válida de revocación" - -msgid "" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" -" Para acceder con certificado, por favor asegúrese de tener un certificado personal valido. " - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" -" Para acceder con nombre de " -"usuario y contraseña, introduzcalos en los correspondientes campos " -"después pulse 'Entrar'." - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Método implícito (conraseña) será usado si no se ha elegido método.

Contraseña + Dos factores: LDAP y Kerberos permiten la " -"autenticación con uno de lostipos de autenticación pero Kerberos usa un " -"método de pre autenticacion que requiere usar armadura ccache.

RADIUS con otro tipo: Kerberos siempre usa RADIUS, " -"pero LDAP nunca lo hace. LDAP solo reconoce las opciones de contraseña y dos " -"factores.

" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Configuración por uso, sobre escribe la configuracion global si cualquier " -"opción esta marcada.

Contraseña + Dos factores: LDAP " -"y Kerberos permiten la autenticación con uno de lostipos de autenticación " -"pero Kerberos usa un método de pre autenticacion que requiere usar armadura " -"ccache

RADIUS con otro tipo: Kerberos siempre usa " -"RADIUS, pero LDAP nunca lo hace. LDAP solo reconoce las opciones de " -"autenticación contraseña y dos factores.

" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"=======\n" -"ADVERTENCIA:\n" -"\n" -"El plugin DNA en 389-ds asignará IDs basados en el rango configurado para " -"el\n" -"dominio local. Actualmente el plugin DNA *no puede* ser reconfigurado en " -"base a\n" -"los rangos locales establecidos por medio de esta familia de comandos.\n" -"\n" -"El cambio de configuración manual ha de ser hecho en la configuración del " -"plugin\n" -"DNA para e nuevo rango local. Especialmente, el atributo dnaNextRange de\n" -"'cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"ha\n" -"sido modificado para coincidir con el nuevo rango.\n" -"=======\n" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "Un permiso SYSTEM no puede ser modificado o quitado" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Una lista separada por comas de los campos a buscar cuando se está buscando " -"grupos" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Una lista separada por comas de los campos a buscar cuando se está buscando " -"usuarios" - -msgid "A description of this RADIUS proxy server" -msgstr "Una descripción de este servidor proxy RADIUS" - -msgid "A description of this auto member rule" -msgstr "Una descripción de esta regla auto miembro" - -msgid "A description of this command" -msgstr "Una descripción de este comando " - -msgid "A description of this host" -msgstr "Una descripción de este equipo" - -msgid "A description of this host-group" -msgstr "Una descripción de este grupo de equipo" - -msgid "A description of this role-group" -msgstr "Una descripción de este grupo de roles" - -msgid "A dictionary representing an LDAP entry" -msgstr "Un diccionario representando una entrada LDAP" - -msgid "A group may not be a member of itself" -msgstr "Un grupo no puede ser miembro de sí mismo" - -msgid "A group may not be added as a member of itself" -msgstr "Un grupo no puede ser agregado como miembro de sí mismo" - -msgid "A host willing to act as a key exchanger" -msgstr "Un host dispuesto a actuar como un intercambiador clave" - -msgid "A host willing to act as a mail exchanger" -msgstr "Un host dispuesto a actuar como un intercambiador de correo" - -msgid "A hostname which this alias hostname points to" -msgstr "Un nombre de host al que este nombre de host alias apunta" - -msgid "A list of ACI values" -msgstr "Una lista de valores ACI" - -msgid "A list of LDAP entries" -msgstr "Una lista de entradas LDAP" - -msgid "A managed group cannot have a password policy." -msgstr "Un grupo administrado no puede tener una política de contraseñas." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Se encontró un problema al verificar si todos los miembros eran %(verb)s: " -"%(exc)s" - -msgid "A string searched in all relevant object attributes" -msgstr "Buscada una cadena en todos los atributos de objeto relevantes" - -msgid "AA Compromise" -msgstr "AA transacción" - -msgid "ACI" -msgstr "ACI" - -msgid "ACI name" -msgstr "Nombre de ACI" - -msgid "ACI object." -msgstr "Objeto ACI." - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI de permiso %s no fue encontrado" - -msgid "ACI prefix" -msgstr "Prefijo ACI" - -msgid "ACI prefix is required" -msgstr "Se requiere prefijo de ACI " - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "No se encuentra un ACI cuyo nombre sea \"%s\"" - -msgid "ACIs" -msgstr "ACI" - -msgid "AD Trust setup" -msgstr "Ajuste de Confianza AD" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"Número de Versión API no fue enviado, la compatibilidad de envío no está " -"garantizada. Asumiendo la versión API del servidor, %(server_version)s" - -msgid "About" -msgstr "Sobre" - -msgid "Access Denied" -msgstr "Acceso Denegado" - -msgid "Access Granted" -msgstr "Acceso Obtenido" - -#, python-format -msgid "Access granted: %s" -msgstr "Acceso obtenido: %s" - -msgid "Access this host" -msgstr "Acceder a este host" - -msgid "Access time" -msgstr "Hora de acceso" - -msgid "Accessing" -msgstr "Acceso" - -msgid "Account" -msgstr "Cuenta" - -msgid "Account Settings" -msgstr "Configuración de la cuenta" - -msgid "Account Status" -msgstr "Estado de Cuenta" - -msgid "Account disabled" -msgstr "Cuenta inhabilitada " - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Cuenta deshabilitada: %(disabled)s" - -msgid "Actions" -msgstr "Acciones" - -msgid "Activate" -msgstr "Activar" - -msgid "Active Directory domain administrator" -msgstr "Administrador de dominio Active Directory" - -msgid "Active Directory domain administrator's password" -msgstr "Contraseña del administrador de dominio Active Directory" - -msgid "Active Directory domain range" -msgstr "Intervalo de dominios de Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "Rango de confianza Active Directory con atributos POSIX" - -msgid "Active zone" -msgstr "Activar zona" - -msgid "Add" -msgstr "Agregar" - -msgid "Add Class of Service entry" -msgstr "Añadir entrada Class of Service" - -msgid "Add Custom Authentication Indicator" -msgstr "Añadir Indicador de Autenticación Personal" - -msgid "Add Kerberos Principal Alias" -msgstr "Añadir Alias Principal Kerberos" - -msgid "Add Many" -msgstr "Añadir Muchos" - -msgid "Add a manager to the user entry" -msgstr "Añade un gestor a entrada de usuario" - -msgid "Add a new HBAC service group." -msgstr "Añadir un nuevo grupo de servicio HBAC." - -msgid "Add a new HBAC service." -msgstr "Añadir un nuevo servicio HBAC." - -msgid "Add a new IPA location." -msgstr "Añadir una nueva localización IPA." - -msgid "Add a new IPA new service." -msgstr "Añadir un nuevo servicio nuevo IPA." - -msgid "Add a new IPA service." -msgstr "Añadir un nuevo servicio IPA." - -msgid "Add a new OTP token." -msgstr "Añadir una nueva ficha OTP." - -msgid "Add a new RADIUS proxy server." -msgstr "Añadir un nuevo servidor proxy RADIUS." - -msgid "Add a new SMB service." -msgstr "Añadir un nuevo servicio SMB." - -msgid "Add a new YubiKey OTP token." -msgstr "Añadir una nueva ficha YubiKey OTP." - -msgid "Add a new delegation." -msgstr "Añadir una nueva delegación." - -msgid "Add a new group password policy." -msgstr "Añadir un nuevo grupo de política de contraseña." - -msgid "Add a new host." -msgstr "Añadir un n uevo host." - -msgid "Add a new hostgroup." -msgstr "Añadir un nuevo grupo de host." - -msgid "Add a new netgroup." -msgstr "Añadir un nuevo grupo de red." - -msgid "Add a new permission." -msgstr "Añadir un nuevo permiso." - -msgid "Add a new privilege." -msgstr "Añadir un nuevo privilegio." - -msgid "Add a new role." -msgstr "Añadir un nuevo rol." - -msgid "Add a new self-service permission." -msgstr "Añadir un nuevo auto servicio de permiso." - -msgid "Add a new stage user." -msgstr "Añadir un nuevo escenario usuario." - -msgid "Add a new user." -msgstr "Añadir un nuevo usuario." - -msgid "Add a permission for per-forward zone access delegation." -msgstr "Añadir un permiso para una delegación de acceso a zona por reenvío." - -msgid "Add a permission for per-zone access delegation." -msgstr "Añade un permiso para una delegación de acceso por zona." - -msgid "Add a system permission without an ACI" -msgstr "Añadir un permiso al sistema sin un ACI" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "Añadir un permiso de sistema sin un ACI (comando interno)" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" -"Añadir un par atributo/valor. El formato es attr=value. El atributo debe ser " -"parte del esquema." - -msgid "Add an option to the Sudo Rule." -msgstr "Añadir una opción a la Regla Sudo." - -msgid "Add and Add Another" -msgstr "Agregar y agregar otro" - -msgid "Add and Close" -msgstr "Añadir y cerrar" - -msgid "Add and Edit" -msgstr "Agregar y Editar" - -msgid "Add certificates to host entry" -msgstr "Añade certificados a la entrada de host" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "Añadir comandos y grupos de comando sudo afectados por Regla Sudo." - -msgid "Add custom value" -msgstr "Añadir valor personal" - -msgid "Add domain" -msgstr "Añadir dominio" - -msgid "Add group for Sudo to execute as." -msgstr "Añadir grupo para Sudo a ejecutar como." - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Añadir hosts y grupos de hosts afectados por Regla Sudo." - -msgid "Add hosts that can manage this host." -msgstr "Añadir hosts que pueda manejar este host." - -msgid "Add hosts that can manage this service." -msgstr "Añadir hosts que pueden gestionar este servicio." - -msgid "Add members to Sudo Command Group." -msgstr "Añadir miembros a Grupo de Comando Sudo." - -msgid "Add members to a group." -msgstr "Agregar miembro a un grupo." - -msgid "Add members to a hostgroup." -msgstr "Añadir miembros a un grupo de host." - -msgid "Add members to a netgroup." -msgstr "Añadir miembros a un grupo de red." - -msgid "Add members to a permission." -msgstr "Añadir miembros a un permiso." - -msgid "Add members to a privilege." -msgstr "Añadir miembros a un privilegio." - -msgid "Add members to a role." -msgstr "Añadir miembros a un rol." - -msgid "Add members to an HBAC service group." -msgstr "Añadir miembros a un grupo de servicio HBAC." - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" -"Añadir usuarios migrados sin grupo a un grupo predeterminado (por defecto: " -"true)" - -msgid "Add new DNS resource record." -msgstr "Añadir nuevo registro de recurso DNS." - -msgid "Add new certificates to a service" -msgstr "Añadir nuevos certificados a un servicio" - -msgid "Add new principal alias to a service" -msgstr "Añadir un nuevo alias principal a un servicio" - -msgid "Add new principal alias to host entry" -msgstr "Añade un nuevo alias principal a una entrada de host" - -msgid "Add new principal alias to the user entry" -msgstr "Añade un nuevo alias principal a la entrada de usuario" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." - -msgid "Add one or more certificates to the user entry" -msgstr "Añade uno o más certificados a la entrada del usuario" - -msgid "Add permissions to a privilege." -msgstr "Añadir permisos a un privilegio." - -msgid "Add privileges to a role." -msgstr "Añadir privilegios a un rol." - -msgid "Add services to an HBAC rule." -msgstr "Añadir servicios a una regla HBAC." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" -"Añadir hosts y grupos de host objetivo a una regla de Mapa de Usuario " -"SELinux." - -msgid "Add the host to DNS with this IP address" -msgstr "Agregar el host de DNS con esta dirección IP" - -msgid "Add to default group" -msgstr "Añadir a grupo predeterminado" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "Añadir usuarios y grupos afectados por Regla Sudo." - -msgid "Add users and groups for Sudo to execute as." -msgstr "Añadir usuarios y grupos para Sudo a ejecutar como." - -msgid "Add users and groups to an HBAC rule." -msgstr "Añadir usuarios y grupos a una regla HBAC." - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "Añadir usuarios y grupos a una regla de Mapa de Usuario SELinux." - -msgid "Add users that can manage this token." -msgstr "Añadir usuarios que pueden manejar esta ficha." - -#, python-format -msgid "Added %(map)s" -msgstr "%(map)s agregados" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Agregado %(src)s a %(dst)s" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Añadida confianza Active Directory para el reino \"%(value)s\"" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Añadida Regla de Mapeo de Identidad de Certificado \"%(value)s\"" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Añadida regla HBAC \"%(value)s\"" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Servicio de HBAC \"%(value)s\" añadido" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Agregado servicio de grupo HBAC \"%(value)s\"" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Se añadió el intervalo de ID «%(value)s»" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Añadida localización IPA \"%(value)s\"" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Añadir ficha OTP \"%(value)s\"" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Añadido servidor proxy RADIUS \"%(value)s\"" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Añadido Mapa de Usuario SELinux \"%(value)s\"" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Añadido Comando Sudo “%(value)s”" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Añadido Grupo de Comando Sudo “%(value)s”" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Añadida Regla Sudo “%(value)s”" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Regla automiembro añadida \"%(value)s\"" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Añadido mapa de automontaje indirecto \"%(value)s\"" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Añadida clave de automontaje \"%(value)s\"" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Añadida localización de automontaje \"%(value)s\"" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Añadido mapa de automontaje \"%(value)s\"" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Añadidos certificados a host \"%(value)s\"" +msgid "Disabled service \"%(value)s\"" +msgstr "Servicio inhabilitado \"%(value)s\"" #, python-format msgid "Added certificates to service principal \"%(value)s\"" msgstr "Añadidos certificados al servicio principal \"%(value)s\"" #, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Añadidos certificados al usuario \"%(value)s\"" +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Quitados certificados del servicio principal \"%(value)s\"" -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Añadida condición(es) a \"%(value)s\"" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Delegación añadida \"%(value)s\"" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Ha sido agregado el grupo \"%(value)s\"" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Ha sido agregado el equipo \"%(value)s\"" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Ha sido agregado el grupo de equipo \"%(value)s\"" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\"netgroup añadido" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Añadidos nuevos alias al host \"%(value)s\"" +msgid "Add new principal alias to a service" +msgstr "Añadir un nuevo alias principal a un servicio" #, python-format msgid "Added new aliases to the service principal \"%(value)s\"" msgstr "Añadidos nuevos alias al servicio principal \"%(value)s\"" -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Añade nuevos alias al usuario \"%(value)s\"" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "Añadiendo la opción \"%(option)s\" a Sudo Rule \"%(rule)s\"" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Permiso agregado \"%(value)s\"" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Privilegio añadido \"%(value)s\"" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rol agregado \"%(value)s\"" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Añadido autoservicio \"%(value)s\"" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Ha sido agregado el servicio \"%(value)s\"" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Añadido escenario usuario \"%(value)s\"" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Añadido permiso de sistema \"%(value)s\"" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Ha sido agregado el usuario \"%(value)s\"" - -msgid "Additional instructions:" -msgstr "Instrucciones adicionales:" - -msgid "Administrator e-mail address" -msgstr "Correo-e de administrador" - -msgid "Advertised by servers" -msgstr "Anunciado por los servidores" - -msgid "Affiliation Changed" -msgstr "Afiliación cambiada" - -msgid "Agreements deleted" -msgstr "Acuerdos borrados" - -msgid "Algorithm" -msgstr "Algoritmo" - -msgid "All attributes to which the permission applies" -msgstr "Todos los atributos a los que aplica el permiso" - -msgid "All commands should at least have a result" -msgstr "Todos los comandos deberían por lo menos tener un resultado" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" -"Todos los servidores de nombre fallaron al responder a la consulta sobre la " -"zona reversa DNS %(revdns)s" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" -"Todos los filtros objetivo, incluyendo aquellos implicados por el tipo y " -"menbresia" - -msgid "Allow" -msgstr "Permitir" - -msgid "Allow PTR sync" -msgstr "Permitir sincronización PTR" - -msgid "Allow access from the trusted domain" -msgstr "Permitir acceso desde el dominio de confianza" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" -"Permitir el añadido de miembros externos no IPA desde dominios de confianza" - -msgid "Allow dynamic updates." -msgstr "Permitir actualizaciones dinámicas." - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" - -msgid "Allow in-line DNSSEC signing" -msgstr "Permitida la firma DNSSEC en línea" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "Permitida la firma DNSSEC de registros en la zona" - -msgid "Allow query" -msgstr "Permitir consulta" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" -"Permite la sincronización de registros de reenvío (A, AAAA) y reversa (PTR)" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" -"Permitir la sincronización de registros adelante (A, AAAA) y atrás (PTR) en " -"la zona" - -msgid "Allow transfer" -msgstr "Permitir transferencia" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "Permitir el uso de recursos IPA por el dominio de la confianza" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Permite a usuarios, grupos, hosts o grupos de host crear una keytab de este " -"host." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" -"Permitir a los usuarios, grupos, hosts o grupos de host crear una tabla de " -"claves de este servicio." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Permite a usuarios, grupos, hosts o grupos de host recuperar una keytab de " -"este host." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Permitir a los usuarios, grupos, hosts o grupos de host recuperar una tabla " -"de claves de este servicio." - -msgid "Allowed to create keytab" -msgstr "Permitido crear tabla de teclas" - -msgid "Allowed to retrieve keytab" -msgstr "Permitido recuperar tabla de teclas" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" -"Permitir la migración a pesar de la utilización del plugin de compatibilidad" - -msgid "Already registered" -msgstr "Ya está registrado" - -msgid "Altitude" -msgstr "Altitud" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Ha ocurrido un error (${error})" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Ya existe un rango id para esta confianza. Usted debería bien borrar el " -"antiguo rango o excluir las opciones --base-id/--range-size del comando." - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" -"Un intervalo entre preguntas regulares del servidor de nombre sobre nuevas " -"zonas DNS" - -msgid "Any Command" -msgstr "Cualquier comando" - -msgid "Any Group" -msgstr "Cualquier grupo" - -msgid "Any Host" -msgstr "Cualquier host" - -msgid "Any Service" -msgstr "Cualquier servicio" - -msgid "Anyone" -msgstr "Cualquiera" - -msgid "Apply" -msgstr "Aplicar" - -msgid "Apply ACI to your own entry (self)" -msgstr "Aplique ACI a su propia entrada (usted)" - -msgid "Archive data into a vault." -msgstr "Datos archivados en una bóveda" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"¿Está seguro que desea ${action} el usuario?
El cambio tendrá efecto " -"inmediatamente." - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "¿Está seguro de que desea borrar ${object}?" - -msgid "Are you sure you want to delete selected entries?" -msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "¿Está seguro de que desea deshabilitar ${object}?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Está seguro de que desea habilitar ${object}?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "¿Está seguro de que desea seguir adelante con la acción?" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "¿Está seguro de que quiere reconstruir la auto membresía?" - -msgid "Are you sure you want to unprovision this host?" -msgstr "¿Está seguro que desea unprovision este equipo?" - -msgid "Are you sure you want to unprovision this service?" -msgstr "¿Está seguro de que desea no suministrar este servicio?" - -msgid "Arguments to details function" -msgstr "Argumentos para detalles de la función" - -msgid "As Whom" -msgstr "Como Whom" - -msgid "Asks for a non-random password to use for the principal" -msgstr "Pregunta por una contraseña no aleatoria para la principal" - -msgid "Assigned ID View" -msgstr "Vista ID asignada" - -msgid "Assigned manager of the token (default: self)" -msgstr "Gestor asignado de la ficha (predeterminado: self)" - -msgid "Assigned user of the token (default: self)" -msgstr "Usuario asignado de la ficha (predeterminado: self)" - -msgid "Attribute" -msgstr "Atributo" - -msgid "Attribute Key" -msgstr "Atributo Clave" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Atributo a filtrar por medio de regex. Por ejemplo fqdn para un host o " -"gestor para un usuario" - -msgid "Attributes" -msgstr "Atributos" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "Atributos a ignorar para las entradas de grupo en DS" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "Atributos a ignorar para las entradas de usuario en DS" - -msgid "Attributes to which the delegation applies" -msgstr "Atributos a los que aplica la delegación" - -msgid "Attributes to which the permission applies" -msgstr "Atributos a los que aplican los permisos" - -msgid "Attributes to which the permission applies by default" -msgstr "Atributos a los que el permiso se aplica por defecto" - -msgid "Attributes to which the permission applies." -msgstr "Atributos a los que aplican los permisos." - -msgid "Audit" -msgstr "Auditoría" - -msgid "Authenticating" -msgstr "Autenticando" - -msgid "Authentication Indicators" -msgstr "Indicadores de Autenticación" - -msgid "Authentication indicator" -msgstr "Indicador de autenticación" - -msgid "Authentication indicators" -msgstr "Indicadores de autenticación" - -msgid "Authentication with Kerberos failed" -msgstr "Autenticación con Kerberos fallada" - -msgid "Authentication with personal certificate failed" -msgstr "Autenticación con certificado persona falló" - -msgid "Authoritative nameserver" -msgstr "Nombre de servidor autoritativo" - -msgid "Authoritative nameserver domain name" -msgstr "Nombre de dominio servidor de nombre autorizado" - -msgid "Authority ID" -msgstr "ID de la Autoridad" - -msgid "Auto Membership Rule" -msgstr "Regla Auto Afiliación" - -msgid "Auto Membership is not configured" -msgstr "Auto Afiliación no está configurada" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Regla auto miembro: %s no encontrada!" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Actualización automática de registros DNS del sistema falló. Por favor " -"vuelva a ejecutar manualmente la actualización de registros del sistema para " -"obtener la lista de los registros desaparecidos." - -msgid "Automember Rule" -msgstr "Regla Automiembro" - -msgid "Automember rebuild membership task completed" -msgstr "Tarea completada de reconstruir la membresía del miembro" - -msgid "Automount" -msgstr "Montaje automático" - -msgid "Automount Key" -msgstr "Clave de Automontaje" - -msgid "Automount Keys" -msgstr "Llaves de montaje automático" - -msgid "Automount Location" -msgstr "Localización de Automontaje" - -msgid "Automount Location Settings" -msgstr "Configuración de ubicación de automount" - -msgid "Automount Locations" -msgstr "Ubicaciones de automontado" - -msgid "Automount Map" -msgstr "Mapa de Automontaje" - -msgid "Automount Maps" -msgstr "Mapas de montaje automático" - -msgid "Automount key name." -msgstr " Nombre de clave de montaje automático" - -msgid "Automount key object." -msgstr "Objeto clave de automontaje" - -msgid "Automount location name." -msgstr "Nombre de la ubicación de montaje automático." - -msgid "Automount map name." -msgstr " Nombre del mapa automount." - -msgid "Automount master file." -msgstr " Archivo maestro automount." - -msgid "Available" -msgstr "Disponible" - -msgid "BIND update policy" -msgstr "Política de actualización de BIND" - -msgid "Back" -msgstr "Atrás" - -msgid "Back to Top" -msgstr "Volver al comienzo" - -msgid "Bad format in credentials cache" -msgstr "Las credenciales de caché están mal formadas" - -msgid "Bad or unsupported salt type.\n" -msgstr "Tipo de sal malo o no soportado.\n" - -msgid "Bad search filter" -msgstr "Mal filtro de búsqueda" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "%(info)s de filtro de búsqueda errado" - -msgid "Base DN" -msgstr "Base DN" - -msgid "Base DN on remote LDAP server" -msgstr "Base DN sobre servidor LDAP remoto" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "Base para sujetos certificados (OU=Prueba,O=Ejemplo)" - -msgid "Base-64 encoded certificate." -msgstr "Certificado codificado en Base-64." - -msgid "Base-64 encoded host certificate" -msgstr "Certificado de host codificado en Base-64" - -msgid "Base-64 encoded server certificate" -msgstr "Certificado del servidor codificado con base-64" - -msgid "Base-64 encoded service certificate" -msgstr "Certificado de servicio codificado en Base-64" - -msgid "Base-64 encoded user certificate" -msgstr "Certificado de usuario codificado en Base-64" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Falló la decodificación base64: %(reason)s" - -msgid "Binary data to archive" -msgstr "Datos binarios para archivar" - -msgid "Bind DN" -msgstr "Asociar DN" - -msgid "Bind rule type" -msgstr "Tipo de regla de enlace" - -msgid "Brief description of this profile" -msgstr "Breve descripción de este perfil" - -msgid "CA" -msgstr "CA" - -msgid "CA Compromise" -msgstr "CA de transacción" - -msgid "CA certificate" -msgstr "Certificado CA" - -msgid "CA is not configured" -msgstr "CA no está configurado" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" -"Registro CNAME no está permitido que coexista con ningún otro registro (RFC " -"1034, sección 3.6.2)" - -msgid "CSR" -msgstr "CSR" - -msgid "Cancel" -msgstr "Cancelar" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "No puede crear registro reverso para \"%(value)s\": %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "No puede decodificar fichero '%(filename)s': %(exc)s" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"No puede establecer confianza al AD desplegado en el mismo dominio que IPA. " -"Este ajuste no se soporta." - -msgid "Cannot hide CA renewal master." -msgstr "No se puede ocultar el maestro de renovación de CA." - -msgid "Cannot hide DNSSec key master." -msgstr "No se puede ocultar la clave maestra DNSSec." - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "No se puede ocultar el último servidor habilitado %(name)s." - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"No se puede llevar a cabo la validación SID sin el soporte de Samba 4 " -"instalado. Asegúrese de que tiene instalado el sub paquete server-trust-ad " -"de IPA en el servidor" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"No se puede llevar a cabo la validación del miembro externo sin el soporte " -"para Samba 4 instalado. Asegúrese de que tiene instalado el sub-paquete " -"server-trust-ad de IPA en el servidor" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"No puede llevar a cabo la operación de unión si el dominio propio " -"configurado. Asegúrese primero que está corriendo ipa-adtrust-install sobre " -"el servidor IPA" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"No puede llevar a cabo el comando seleccionado sin una instancia Samba 4 " -"configurada en este máquina. Asegúrese de estar ejecutando ipa-adtrust-" -"install sobre este servidor." - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"No puede llevar a cabo el comando seleccionado sin el soporte de Samba 4 " -"instalad. Asegúrese de tener el instalado el sub-paquete server-trust-ad de " -"IPA." - -msgid "Cannot query Directory Manager with API" -msgstr "No se puede cosultar al Administrador de Directorios con API" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "No puede leer el fichero '%(filename)s': %(exc)s" - -msgid "Cannot resolve KDC for requested realm" -msgstr "No es posible resolver KDC para el reinado solicitado" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"No puede buscar en los dominios de confianza sin un dominio propio " -"configurado. Asegúrese que tiene corriendo ipa-adtrust-install sobre el " -"servidor IPA primero" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" -"No pudde especificar el mecanismo SASL y el enlace DN simultáneamente.\n" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "No se puede especificar servidor y LDAP uri simultáneamente.\n" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "No puede almacenar permiso ACI a %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "No puede usar %(old_name)s con %(new_name)s" - -msgid "Car License" -msgstr "Licencia de conducción" - -msgid "Certificate" -msgstr "Certificado" - -msgid "Certificate Association Data" -msgstr "Datos de Asociación del Certificado" - -msgid "Certificate Authorities" -msgstr "Autoridades de Certificado" - -msgid "Certificate Authority" -msgstr "Autoridad de Certificado" - -msgid "Certificate Hold" -msgstr "Certificado retenido" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "Configuración Global del Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rule" -msgstr "Regla de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rule description" -msgstr "Descripción de la Regla de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rule name" -msgstr "Nombre de Regla de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rules" -msgstr "Reglas de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping configuration options" -msgstr "Opciones de configuración del Mapeo de Identidad de Certificado" - -msgid "Certificate Profile" -msgstr "Certificado de Perfil" - -msgid "Certificate Profiles" -msgstr "Certificado de Perfiles" - -msgid "Certificate Revoked" -msgstr "Certificado revocado" - -msgid "Certificate Subject base" -msgstr "Base de certificado de asunto" - -msgid "Certificate Type" -msgstr "Tipo de certificado" - -msgid "Certificate Usage" -msgstr "Utilización del Certificado" - -msgid "Certificate chain" -msgstr "Cadena de certificado" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Certificado para ${entity} ${primary_key}" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Error de certificado de formato: %(error)s " - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "La operación certificada no puede ser completada: %(error)s" - -msgid "Certificate profiles cannot be renamed" -msgstr "Certificado de los perfiles no pueden ser renombrado" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Certificados(s) almacenados en el archivo '%(file)s'" - -msgid "Certificate/CRL" -msgstr "Certificado/CRL" - -msgid "Certificates" -msgstr "Certificados" - -msgid "Cessation of Operation" -msgstr "Cese de operaciones" - -msgid "Change password" -msgstr "Cambiar contraseña" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Cambio de contraseña para \"%(value)s\"" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Cambiado el estado del servidor de \"%(value)s\"." - -msgid "Character classes" -msgstr "Clases de caracteres" - -msgid "Check connection to remote IPA server." -msgstr "Comprobar la conexión al servidor IPA remoto." - -msgid "Check the status of a certificate signing request." -msgstr "Verificar el estado de una solicitud de firma de certificado." - -msgid "Checking if record exists." -msgstr "Comprobando que el registro existe." - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" -"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." - -msgid "City" -msgstr "Ciudad" - -msgid "Class" -msgstr "Clase" - -msgid "Class of Service object used for linking policies with groups" -msgstr "Objeto Class of Service enlazando políticas con grupos" - -msgid "Clear" -msgstr "Limpiar" - -msgid "Clear all fields on the page." -msgstr "Limpiar todos los campos en la página." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Pulse para ${action}" - -msgid "Client credentials may be delegated to the service" -msgstr "Las credenciales del cliente pueden delegarse al servicio" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "El cliente no está configurado. Ejecutar la API de cliente a instalar." - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Versión de cliente. Se utiliza para determinar si el servidor va a aceptar " -"la solicitud." - -msgid "Clock interval" -msgstr "Intervalo de reloj" - -msgid "Clock offset" -msgstr "Desplazamiento del reloj" - -msgid "Close" -msgstr "Cerrar" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "Cierre de tabla de claves falló\n" - -msgid "Collapse All" -msgstr "Cerrar Todo" - -msgid "Comma separated encryption types list" -msgstr "Lista de tipos de cifrado separados por coma" - -msgid "Comma-separated list of attributes" -msgstr "Lista separada por comas de atributos" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" -"Lista separada por comas de permisos a obtener (lectura, escritura, borrado, " -"todos)" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "Comando '%(name)s' es obsoleto" - -msgid "Command category" -msgstr "Categoría de comandos" - -msgid "Command category the rule applies to" -msgstr "Categoría de comandos la regla se aplica a" - -msgid "Command name" -msgstr "Nombre del comando" - -msgid "Command not implemented" -msgstr "El comando no se ha implementado" - -msgid "Commands" -msgstr "Comandos" - -msgid "Common Name" -msgstr "Nombre común" - -msgid "Conditions that could not be added" -msgstr "Condiciones que no pueden ser agregadas" - -msgid "Conditions that could not be removed" -msgstr "Condiciones que no pueden ser eliminadas" - -msgid "Configuration" -msgstr "Configuración" - -msgid "Configured administrative server limit exceeded" -msgstr "Límite administrativo del servidor configurado sobrepasado" - -msgid "Configured size limit exceeded" -msgstr "Tamaño límite configurado sobrepasado" - -msgid "Configured time limit exceeded" -msgstr "El tiempo límite configurado sobrepasado" - -msgid "Confirmation" -msgstr "Confirmación " - -msgid "Consecutive failures before lockout" -msgstr "Fallos consecutivos antes del bloqueo" - -msgid "Consume an entitlement." -msgstr "Consumir un derecho." - -msgid "Contact Settings" -msgstr "Configuración de contactos" - -msgid "Contact this specific KDC Server" -msgstr "Contactar este servidor KDC específico" - -msgid "Continue" -msgstr "Continuar" - -msgid "Continue to next page" -msgstr "Continúe a la siguiente página" - -msgid "Continuous mode: Don't stop on errors." -msgstr "Modo continuo: No se detenga en los errores." - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" -"Modo de funcionamiento continuo. Se reportan errores, pero el proceso " -"continúa" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" -" Modo de funcionamiento continuo. Reporta los errores, pero el proceso " -"continúa." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "No se pudo obtener %(name)s interactivamente" - -msgid "Counter" -msgstr "Contador" - -msgid "Create Stage user in from a delete user" -msgstr "Crear Escenario usuario desde un usuario borrado" - -msgid "Create a CA." -msgstr "Crear una CA." - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "Crear una nueva Regla de Mapeo de Identidad de Certificado." - -msgid "Create a new HBAC rule." -msgstr "Crear una nueva regla HBAC." - -msgid "Create a new SELinux User Map." -msgstr "Crear un nuevo Mapa de Usuario SELinux." - -msgid "Create a new automount key." -msgstr "Crear una nueva clave de automontaje." - -msgid "Create a new automount location." -msgstr "Crear una nueva localización de automontaje." - -msgid "Create a new automount map." -msgstr "Crear un nuevo mapa de automontaje" - -msgid "Create a new group." -msgstr "Crear un grupo nuevo." - -msgid "Create a new indirect mount point." -msgstr "Crear un nuevo punto de montaje indirecto." - -msgid "Create a new vault." -msgstr "Crear una nueva bóveda." - -msgid "Create as a non-POSIX group" -msgstr " Crear como un grupo no POSIX" - -msgid "Create dns record" -msgstr "Crear registro DNS" - -msgid "Create new ACI." -msgstr "Crear nuevo ACI." - -msgid "Create new DNS forward zone." -msgstr "Crear una zona de envío DNS." - -msgid "Create new DNS zone (SOA record)." -msgstr "Crear nueva zona DNS (registro SOA)." - -msgid "Create new Sudo Command Group." -msgstr "Crear un nuevo Grupo de Comando Sudo." - -msgid "Create new Sudo Command." -msgstr "Crear un nuevo Comando Sudo." - -msgid "Create new Sudo Rule." -msgstr "Crear nueva Regla Sudo." - -msgid "Create reverse" -msgstr "Crear reversa" - -msgid "Create reverse record for this IP Address" -msgstr "Crear registro reverso para esta Dirección IP" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Ha sido creado ACI \"%(value)s\"" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Creada CA \"%(value)s\"" - -msgid "Creating record." -msgstr "Creando el registro." - -msgid "Credentials cache permissions incorrect" -msgstr "Los permisos de credenciales de caché son incorrectos" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Los fideicomisos a través del reino no están instalados. Asegúrese de que " -"está corriendo ipa-adtrust-install en el servidor IPA primero" - -msgid "Current DNS record contents:\n" -msgstr "Contenidos actuales del registro DNS:\n" - -msgid "Current Password" -msgstr "Contraseña Actual" - -msgid "Current password is required" -msgstr "Se necesita contraseña actual" - -msgid "Custom value" -msgstr "Valor personal" - -msgid "Customization" -msgstr "Personalización" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "DN de contenedor para grupos es DS relativo a DN" - -msgid "DN of container for users in DS relative to base DN" -msgstr "DN de contendor para usuarios es DS relativo a base DN" - -msgid "DN to bind as if not using kerberos" -msgstr "DN a vincular como si no usara kerberos" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS Forward Zone" -msgstr "Zona de Envío DNS" - -msgid "DNS Forward Zones" -msgstr "Zonas de Envío DNS" - -msgid "DNS Global Configuration" -msgstr "Configuración global de DNS" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "Tipo DNS RR \"%s\" no es soportado por el complemento bind-dyndb-ldap" - -msgid "DNS Resource Record" -msgstr "Registro de Recurso de DNS" - -msgid "DNS Resource Records" -msgstr "Registros de Recursos DNS" - -msgid "DNS Zone" -msgstr "Zona DNS" - -msgid "DNS Zone Settings" -msgstr "Configuración de la Zona DNS" - -msgid "DNS Zones" -msgstr "Zonas DNS" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" -"Fallo en la comprobación DNS: Esperado {%(expected)s} obtenido {%(got)s}" - -msgid "DNS class" -msgstr "Clase DNS" - -msgid "DNS configuration options" -msgstr "Opciones de configuración de DNS" - -msgid "DNS forward zone" -msgstr "Zona de envío DNS" - -msgid "DNS forward zones" -msgstr "Zonas de envío DNS" - -msgid "DNS forwarder" -msgstr "Reenviador DNS" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"Las semánticas del promotor cambió desde IPA 4.0.\n" -"Usted puede desear usar las zonas de envío (dnsforwardzone-*) en su lugar.\n" -"Lea los documentos para más detalles." - -msgid "DNS is not configured" -msgstr "DNS no está configurado" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "la etiqueta DNS no puede ser más larga de 63 caracteres" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "La etiqueta DNS no puede ser más larga de 63 caracteres" - -msgid "DNS record was deleted because it contained no data." -msgstr "Registro DNS fue borrado porque no contenía datos." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "Registro(s) DNS del host %(host)s podría no ser removido. (%(reason)s)" - -msgid "DNS records can be only updated one at a time" -msgstr "Los registros DNS solo pueden ser actualizados de uno en uno" - -msgid "DNS resource record" -msgstr "Registro de recursos DNS" - -msgid "DNS resource record type" -msgstr "Registro de tipo de recurso DNS " - -msgid "DNS resource records" -msgstr "Registros de recurso DNS" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" -"Zona reversa DNS %(revzone)s para dirección IP %(addr)s no está manejada por " -"este servidor" - -msgid "DNS server" -msgstr "Servidor DNS" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Servidor DNS %(server)s no soporta DNSSEC: %(error)s.\n" -"Si está habilitada la validación DNSSEC sobre servidor(es) IPA, " -"deshabilitélo por favor." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Servidor DNS %(server)s no soporta EDNS0 (RFC 6891): %(error)s.\n" -"Si la validación DNSSEC está habilitada sobre servidor(es) IPA, por favor " -"deshabilitélo." - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Servidor DNS %(server)s: %(error)s." - -msgid "DNS servers" -msgstr "Servidores DNS" - -msgid "DNS zone" -msgstr "zona DNS" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Zona DNS %(zone)s no encontrado" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"La zona DNS para cada realmdomain debe contener registros SOA o NS. No se " -"han encontrado registros para: %s" - -msgid "DNS zone root record cannot be renamed" -msgstr "El registro DNS de zona raíz no puede ser renombrado" - -msgid "DNS zones" -msgstr "zonas DNS" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"El soporte DNSSEC es experimental.\n" -"%(additional_info)s" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Fallo en la validación DNSSEC: %(error)s.\n" -"Por favor verifique su configuración DNSSEC o deshabilite la validación " -"DNSSEC en todos los servidores IPA." - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "El registro DS no debe estar en zona apéndice (RFC 4035 sección 2.4)" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" -"El registro DS requiere coexistir con un registro NS record (RFC 4592 " -"sección 4.6, RFC 4035 sección 2.4)" - -msgid "Data" -msgstr "Datos" - -msgid "Debugging output" -msgstr "Salida de depuración" - -msgid "Default attributes" -msgstr "Atributos predeterminados" - -msgid "Default e-mail domain" -msgstr "Dominio de correo electrónico por defecto" - -msgid "Default group for new users" -msgstr "Grupo predeterminado para usuarios nuevos" - -msgid "Default group for new users is not POSIX" -msgstr "El grupo predeterminado para nuevos usuarios no es POSIX" - -msgid "Default group for new users not found" -msgstr "Grupo predeterminado para nuevos usuarios no encontrado" - -msgid "Default group objectclasses" -msgstr "Grupo predeterminado objectclass" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Clases de objeto grupo por defecto (lista separada por comas)" - -msgid "Default location of home directories" -msgstr "Localización por defecto de los directorios home" - -msgid "Default shell" -msgstr "Shell predeterminada" - -msgid "Default shell for new users" -msgstr "Shell predeterminada para usuarios nuevos" - -msgid "Default ticket policy could not be read" -msgstr "La política de entrada por defecto podría no ser leída" - -msgid "Default time to live" -msgstr "Tiempo de vida predeterminado" - -msgid "Default user objectclasses" -msgstr "Usuario predeterminado objectclasses" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "Clases de objeto usuario por defecto (lista separada por comas)" - -msgid "Default users group" -msgstr "Grupo de usuarios predeterminado" - -msgid "Degrees Latitude" -msgstr "Latitud en grados" - -msgid "Degrees Longitude" -msgstr "Grados de Longitud" - -msgid "Delegation" -msgstr "Delegación" - -msgid "Delegation name" -msgstr "Nombre de delegación" - -msgid "Delegations" -msgstr "Delegaciones" - -msgid "Delete" -msgstr "Eliminar" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Borrar %(name)s '%(value)s'?" - -msgid "Delete ACI." -msgstr "Borrar ACI." - -msgid "Delete Class of Service entry" -msgstr "Borrar entrada Class of Service" - -msgid "Delete DNS forward zone." -msgstr "Borrar forma de reenvío DNS." - -msgid "Delete DNS record entry." -msgstr "Borrar entrada de registro DNS." - -msgid "Delete DNS resource record." -msgstr "Borrar un registro de recurso DNS." - -msgid "Delete DNS zone (SOA record)." -msgstr "Borrar zona DNS (registro SOA)." - -msgid "Delete IPA server." -msgstr "Eliminar servidor IPA." - -msgid "Delete Key, Unprovision" -msgstr "La eliminación de clave, unprovision" - -msgid "Delete Sudo Command Group." -msgstr "Borrado Grupo de Comando Sudo." - -msgid "Delete Sudo Command." -msgstr "Borrar Comando Sudo." - -msgid "Delete Sudo Rule." -msgstr "Borrar Regla Sudo." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Borrar una Regla de Mapeo de Identidad de Certificado." - -msgid "Delete a Certificate Profile." -msgstr "Borrar un Certificado Perfil" - -msgid "Delete a RADIUS proxy server." -msgstr "Borrar un servidor proxy RADIUS." - -msgid "Delete a SELinux User Map." -msgstr "Borrar un Mapa de Usuario SELinux." - -msgid "Delete a delegation." -msgstr "Borrar una delegación." - -msgid "Delete a group password policy." -msgstr "Borrar un grupo de política de contraseña." - -msgid "Delete a host." -msgstr "Borrar un host." - -msgid "Delete a hostgroup." -msgstr "Borrar un grupo de host." - -msgid "Delete a netgroup." -msgstr "Borrar un grupo de red." - -msgid "Delete a permission." -msgstr "Borrar un permiso." - -msgid "Delete a privilege." -msgstr "Borrar un privilegio." - -msgid "Delete a role." -msgstr "Borrar un rol." - -msgid "Delete a self-service permission." -msgstr "Borrar un auto servicio de permiso." - -msgid "Delete a stage user." -msgstr "Borrar un escenario usuario." - -msgid "Delete a trust." -msgstr "Borrar una confianza." - -msgid "Delete a user" -msgstr "Borrar un usuario" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "Borrar un usuario manteniendo la entrada disponible para un uso futuro" - -msgid "Delete a user." -msgstr "Borrar un usuario." - -msgid "Delete all associated records" -msgstr "Eliminar todos los registros asociados" - -msgid "Delete all?" -msgstr "¿Borrar todos?" - -msgid "Delete an HBAC rule." -msgstr "Borrar una regla HBAC." - -msgid "Delete an HBAC service group." -msgstr "Borrar un grupo de servicio HBAC." - -msgid "Delete an ID range." -msgstr "Eliminar un intervalo de ID." - -msgid "Delete an IPA location." -msgstr "Borrar una localización IPA." - -msgid "Delete an IPA service." -msgstr "Borrar un servicio IPA." - -msgid "Delete an OTP token." -msgstr "Borrar una ficha OTP." - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" -"Borrar un par atributo/valor. La opción será evaluada al final, después de " -"todos los ajustes y añadidos." - -msgid "Delete an automount key." -msgstr "Borrar una clave de automontaje." - -msgid "Delete an automount location." -msgstr "Borrar una localización de automontaje." - -msgid "Delete an automount map." -msgstr "Borrar un mapa de automontaje." - -msgid "Delete an existing HBAC service." -msgstr "Borrar un servicio HBAC existente." - -msgid "Delete domain" -msgstr "Borrar dominio" - -msgid "Delete group." -msgstr "Eliminar grupo." - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Ha sido eliminado ACI \"%(value)s\"" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Borrada CA \"%(value)s\"" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" borrada" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Borrada forma de reenvío DNS \"%(value)s\"" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Borrada zona DNS \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Suprimida regla HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Suprimido el servicio HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr " Suprimido el servicio HBAC grupo \"%(value)s\"" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Se eliminó el intervalo de ID «%(value)s»" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Borrada localización IPA \"%(value)s\"" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Eliminado servidor IPA \"%(value)s\"" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Ficha OTP borrada \"%(value)s\"" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Borrado servidor proxy RADIUS \"%(value)s\"" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Borrado Mapa de Usuario SELinux \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Borrado Comando Sudo “%(value)s”" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Borrado Grupo de Comando Sudo “%(value)s”" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Borrada Regla Sudo “%(value)s”" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Borrada regla automiembro \"%(value)s\"" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Borrada clave de automontaje \"%(value)s\"" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Borrada una localización de automontaje \"%(value)s\"" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Borrado un mapa de automontaje \"%(value)s\"" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Delegación eliminada \"%(value)s\"" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Ha sido eliminado el grupo \"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Ha sido eliminado el equipo \"%(value)s\"" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Ha sido eliminado el grupo de equipo \"%(value)s\"" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "%(value)s\" de netgroup eliminados" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Permiso borrado \"%(value)s\"" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Privilegio eliminado \"%(value)s \"" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Perfil borrado \"%(value)s\"" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Registro eliminado \"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rol eliminado \"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "autoservicio eliminados \"%(value)s\"" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Ha sido eliminado el servicio \"%(value)s\"" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Borrado escenario usuario \"%(value)s\"" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Confianza borrada \"%(value)s\"" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Ha sido eliminado el usuario \"%(value)s\"" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"No se permite eliminar un grupo administrado. Primero debe ser desasociado. " - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"El borrado de este servidor no está permitido puesto que dejaría su " -"instalción sin una CA." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"El borrado de este servidor no está permitido puesto que dejaría su " -"instalación sin un KRA." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "Borrando este servidor dejará su instalación sin un DNS." - -msgid "Deny" -msgstr "Negar" - -msgid "Deprecated options" -msgstr "Opciones obsoletas" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Obsoleto; use %s" - -msgid "Describe currently authenticated identity." -msgstr "Describe la identidad actualmente autentificada." - -msgid "Description" -msgstr "Descripción" - -msgid "Description of the purpose of the CA" -msgstr "Descripción del propósito de la CA" - -msgid "Detach a managed group from a user." -msgstr "Desenganchar un grupo gestionado desde un usuario." - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Ha sido desasociado el grupo \"%(value)s\" del usuario \"%(value)s\"" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" -"Determina si el plugin Schema Compatibility está configurado para servir a " -"los usuarios y grupos de los dominios de confianza" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" -"Determina si ipa-adtrust-install ha estado corriendo sobre este sistema" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "Determina si ipa-adtrust-install ha estado corriendo con tarea sidgen" - -msgid "Dict of I18N messages" -msgstr "Dictado de los mensajes regionales" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "Dict de JSON comandos codificados IPA" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "Métodos IPA codificados de Dict de JSON " - -msgid "Dict of JSON encoded IPA Objects" -msgstr "El dict de JSON ha codificado objetos IPA" - -msgid "Dictionary mapping variable name to value" -msgstr "Nombre de la variable de mapeo de dicionario a valorizar " - -msgid "Digest" -msgstr "Resumen" - -msgid "Digest Type" -msgstr "Tipo de Resumen" - -msgid "Digits" -msgstr "Dígitos" - -msgid "Direct" -msgstr "Directo" - -msgid "Direct Membership" -msgstr "Afiliación Directa" - -msgid "Direction Latitude" -msgstr "Latitud de dirección" - -msgid "Direction Longitude" -msgstr "Dirección de la Longitud" - -msgid "Disable" -msgstr "Desactivar" - -msgid "Disable DNS Forward Zone." -msgstr "Deshabilitar la Zona de Reenvío DNS." - -msgid "Disable DNS Zone." -msgstr "Deshabilitar Zona DNS." - -msgid "Disable a CA." -msgstr "Deshabilitar una CA." - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Deshabilitar una Regla de Mapeo de Identidad de Certificado." - -msgid "Disable a Sudo Rule." -msgstr "Deshabilitar Regla Sudo." - -msgid "Disable a user account." -msgstr "Deshabilitar una cuenta de usuario." - -msgid "Disable an HBAC rule." -msgstr "Deshabilitar una regla HBAC." - -msgid "Disable an SELinux User Map rule." -msgstr "Deshabilitar una regla de Mapa de Usuario SELinux." - -msgid "Disable per-user override" -msgstr "Deshabilitar la anulación por uso" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Deshabilitar la clave Kerberos y el certificado SSL de un servicio." - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" -"Deshabilitar la clave Kerberos, el certificado SSL y todos los servicios de " -"un host." - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "Deshabilitar el uso de recursos IPA por el dominio de la confianza" - -msgid "Disabled" -msgstr "Desactivado" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Deshabilitada CA \"%(value)s\"" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" deshabilitada" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Deshabilitada zona de reenvío DNS \"%(value)s\"" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Zona de DNS desactivada \"%(value)s\" " - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" regla HBAC desactivada " - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Deshabilitado Mapa de Usuario SELinux \"%(value)s\"" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Regla Sudo Deshabilitada “%s”" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Host desactivado \"%(value)s\"" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Servicio inhabilitado \"%(value)s\"" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Deshabilitar dominio de confianza \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr " \"%(value)s\" de cuenta de usuario desactivada" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" -"Rechazar que los grupos de host creen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Rechazar que los grupos de host recuperen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "Rechazar que los hosts creen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "Rechazar que los hosts recuperen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" -"Rechazar que los grupos de usuario creen tabla de tecla de '${primary_key}'" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Rechazar que los grupos de usuario recuperen tabla de teclas de " -"'${primary_key}'" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "Rechazar que los usuarios creen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "Rechazar que los usuarios recuperen taa de teclas de '${primary_key}'" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"No permite a usuarios, grupos, hosts o grupos de host crear una keytab de " -"este host." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" -"Dejar de permitir a los usuarios, grupos, hosts o grupos de host crear una " -"tabla de claves de este servicio." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"No permite a usuarios, grupos, hosts o grupos de host recuperar una keytab " -"de este host." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Dejar de permitir a los usuarios, grupos, hosts o grupos de host recuperar " -"una tabla de claves de este servicio." - -msgid "Display Class of Service entry" -msgstr "Visualizar entrada Class of Service" - -msgid "Display DNS resource." -msgstr "Mostrar un recurso DNS." - -msgid "Display Sudo Command Group." -msgstr "Mostrar Grupo de Comando Sudo." - -msgid "Display Sudo Command." -msgstr "Mostrar Comando Sudo." - -msgid "Display Sudo Rule." -msgstr "Mostrar Regla Sudo." - -msgid "Display a single ACI given an ACI name." -msgstr "Muestra un único ACI dando un nombre de ACI." - -msgid "Display an automount key." -msgstr "Mostrar una clave de automontaje." - -msgid "Display an automount location." -msgstr "Mostrar una localización de automontaje" - -msgid "Display an automount map." -msgstr "Mostrar un mapa de automontaje" - -msgid "Display current entitlements." -msgstr "Mostrar los derechos actuales." - -msgid "Display effective policy for a specific user" -msgstr "Ofrece la política efectiva para un determinado usuario" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" -"Visualizar información sobre una Regla de Mapeo de Identidad de Certificado." - -msgid "Display information about a DNS forward zone." -msgstr "Mostrar información sobre una zona de reenvío DNS." - -msgid "Display information about a DNS zone (SOA record)." -msgstr "Mostrar información sobre una zona DNS (registro SOA)." - -msgid "Display information about a RADIUS proxy server." -msgstr "Muestra información sobre un servidor proxy RADIUS." - -msgid "Display information about a delegation." -msgstr "Mostrar información sobre una delegación." - -msgid "Display information about a host." -msgstr "Mostrar información sobre un host." - -msgid "Display information about a hostgroup." -msgstr "Mostrar información sobre un grupo de host." - -msgid "Display information about a named group." -msgstr "Mostrar información sobre un grupo denominado." - -msgid "Display information about a netgroup." -msgstr "Mostrar información sobre un grupo de red." - -msgid "Display information about a permission." -msgstr "Mostrar información sobre un permiso." - -msgid "Display information about a privilege." -msgstr "Mostrar información sobre un privilegio." - -msgid "Display information about a range." -msgstr "Mostrar información sobre un rango." - -msgid "Display information about a role." -msgstr "Mostrar información sobre un rol." - -msgid "Display information about a self-service permission." -msgstr "Mostrar información sobre un auto servicio de permiso." - -msgid "Display information about a trust." -msgstr "Mostrar información sobre una confianza." - -msgid "Display information about a user." -msgstr "Mostrar información sobre un usuario." - -msgid "Display information about an HBAC service group." -msgstr "Mostrar información sobre un grupo de servicio HBAC." - -msgid "Display information about an HBAC service." -msgstr "Mostrar información sobre un servicio HBAC." - -msgid "Display information about an IPA location." -msgstr "Muestra información sobre una localización IPA." - -msgid "Display information about an IPA service." -msgstr "Mostrar información sobre un servicio IPA." - -msgid "Display information about an OTP token." -msgstr "Mostrar información sobre una ficha OTP." - -msgid "Display information about password policy." -msgstr "Mostrar información sobre la política de contraseña." - -msgid "Display name" -msgstr "Mostrar nombre" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Mostrar los derechos de acceso de esta entrada (requiere --all). Consulte la " -"página man de IPA para más detalles." - -msgid "Display the current Kerberos ticket policy." -msgstr "Mostrar la actual entrada de política Kerberos." - -msgid "Display the list of realm domains." -msgstr "Muestra la lista de dominios reino." - -msgid "Display the properties of a CA." -msgstr "Muestra las propiedades de una CA." - -msgid "Display the properties of a Certificate Profile." -msgstr "Muestra las propiedades de un Certificado de Perfil" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "Mostrar las propiedades de una regla de Mapa de Usuario SELinux." - -msgid "Display the properties of an HBAC rule." -msgstr "Mostrar las propiedades de una regla HBAC." - -msgid "Display user record for current Kerberos principal" -msgstr "Muestra el registro del usuario para el principal de Kerberos actual" - -msgid "Do not display QR code" -msgstr "No visualiza código QR" - -msgid "Do not update records only return expected records" -msgstr "No actualizar registros solo devolver registros esperados" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "¿Desea quitar el alias kerberos ${alias}?" - -msgid "Dogtag Authority ID" -msgstr "ID de la Placa de Identidad de la Autoridad" - -msgid "Domain" -msgstr "Dominio" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "Dominio '%(domain)s' no es el dominio raíz para el bosque '%(forest)s'" - -msgid "Domain GUID" -msgstr "GUID de Dominio" - -msgid "Domain NetBIOS name" -msgstr "Nombre de dominio NetBIOS" - -msgid "Domain SID of the trusted domain" -msgstr "SID de dominio del dominio de confianza" - -msgid "Domain Security Identifier" -msgstr "Identificador de Seguridad de Dominio" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "Controlador de dominio para el dominio Active Directory opcional)" - -msgid "Domain enabled" -msgstr "Dominio habilitado" - -msgid "Domain name" -msgstr "Nombre de dominio" - -msgid "Domain where the user entry will be searched" -msgstr "Dominio donde se buscará la entrada de usuario" - -msgid "Don't create user private group" -msgstr "No crear grupo privado de usuario" - -msgid "Download" -msgstr "Descargar" - -msgid "Download certificate as PEM formatted file." -msgstr "Descargar certificado como fichero formateado PEM." - -msgid "Dry run" -msgstr "Correr en seco" - -msgid "Duplicate keys skipped:" -msgstr "Llaves duplicadas omitidas" - -msgid "Duplicate maps skipped:" -msgstr "Mapa duplicado omitido" - -msgid "Dynamic update" -msgstr "Actualización dinámica" - -msgid "Edit" -msgstr "Editar" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Editar ${entity}" - -msgid "Effective attributes" -msgstr "Atributos efectivos" - -msgid "Email address" -msgstr "Dirección de correo electrónico" - -msgid "Employee Information" -msgstr "Información del Empleado" - -msgid "Enable" -msgstr "Activar" - -msgid "Enable DNS Forward Zone." -msgstr "Habilitar Zona de Reenvío DNS." - -msgid "Enable DNS Zone." -msgstr "Habilitar Zona DNS." - -msgid "Enable a CA." -msgstr "Habilitar una CA." - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "Habilitar una Regla de Mapeo de Identidad de Certificado." - -msgid "Enable a Sudo Rule." -msgstr "Habilitar Regla Sudo." - -msgid "Enable a user account." -msgstr "Habilitar una cuenta de usuario." - -msgid "Enable an HBAC rule." -msgstr "Habilitar una regla HBAC." - -msgid "Enable an SELinux User Map rule." -msgstr "Habilitar una regla de Mapa de Usuario SELinux." - -msgid "Enable migration mode" -msgstr "Habilitar modo migración" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "Habilitar o Deshabilitar PKINIT Anónimo." - -msgid "Enabled" -msgstr "Habilitado" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Habilitada CA \"%(value)s\"" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" habilitada" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Habilitada zona de reenvío DNS \"%(value)s\"" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Zona DNS habilitada \" %(value)s \"" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Habilitada regla HBAC \"%(value)s\"" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Habilitado Mapa de Usuario SELinux \"%(value)s\"" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Regla Sudo Habilitada “%s”" - -msgid "Enabled server roles" -msgstr "Rolkes de servidor habilitados" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Habilitado dominio de confianza \"%(value)s\"" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr " \"%(value)s\" de cuenta de usuario activada" - -msgid "Encryption types to request" -msgstr "Solicitud de tipos de cifrado" - -msgid "Enctype comparison failed!\n" -msgstr "¡Falló comparación de Enctype!\n" - -msgid "Enrollment" -msgstr "Inscripción" - -msgid "Enrollment UUID" -msgstr "Inscripción UUID" - -msgid "Enrollment UUID (not implemented)" -msgstr "Inscripción de UUID (no implementada)" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Inscripción fallada. %s\n" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Ingrese %(label)s nuevamente para verificar: " - -msgid "Entry" -msgstr "Entrada" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Entrada %s no existe" - -#, python-format -msgid "Entry %s not found" -msgstr "Entrada %s no encontrada" - -msgid "Error" -msgstr "Error" - -msgid "Error changing account status" -msgstr "Error al cambiar el estado de cuenta" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Error al obtener el dominio predeterminado Kerberos:%s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Error al obtener credenciales de iniciales:%s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Error de análisis \"%1$s\": %2$s.\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Error al resolver tabla de claves:%s.\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Error de almacenamiento de credenciales en cache de credenciales:%s.\n" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" -"Establecida confianza bidireccional. Por defecto la confianza es de un solo " -"sentido entrante." - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Establecida confianza externa a un dominio en otro bosque. La confianza no " -"es transitiva más allá del dominio." - -msgid "Exceeded number of tries to forward a request." -msgstr "Excedido el número de intentos para enviar una petición." - -msgid "Exchanger" -msgstr "Intercambiador" - -msgid "Excluded attributes" -msgstr "Atributos excluidos" - -msgid "Exclusive Regex" -msgstr "Regex exclusivo" - -msgid "Expand All" -msgstr "Expandir Todo" - -msgid "Expires On" -msgstr "Expira el" - -msgid "Export plugin meta-data for the webUI." -msgstr "Exportar los metadatos del plugin para webUI." - -msgid "Expression" -msgstr "Expresión" - -msgid "External" -msgstr "Externos" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "Grupo Externo los comandos pueden correr como (sudorule-find sólo)" - -msgid "External User" -msgstr "De usuarios externos" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "Usuario Externo los comandos pueden correr como (sudorule-find sólo)" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "Usuario Externo la regla aplica a (sudorule-find sólo)" - -msgid "External host" -msgstr "Equipo externo" - -msgid "External member" -msgstr "Miembro externo" - -msgid "External trust" -msgstr "Confianza externa" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Hashes extra para generar en el plugin de contraseña" - -msgid "Extra target filter" -msgstr "Filtro de objetivo adicional" - -msgid "Failed CAs" -msgstr "Error en CAs" - -msgid "Failed RunAs" -msgstr "Error al ejecutar como" - -msgid "Failed RunAsGroup" -msgstr "Erro al ejecutar grupo como" - -msgid "Failed allowed to create keytab" -msgstr "Falló permitir crear una KeyTab" - -msgid "Failed allowed to retrieve keytab" -msgstr "Falló permitir recuperar una KeyTab" - -msgid "Failed hosts/hostgroups" -msgstr "Host o grupo de Host fallidos" - -msgid "Failed logins" -msgstr "Inicios de sesión fallidos" - -msgid "Failed managedby" -msgstr "Falló managedby" - -msgid "Failed members" -msgstr "Miembros fallidos" - -msgid "Failed owners" -msgstr "Error en Propietarios" - -msgid "Failed profiles" -msgstr "Errores en los perfiles" - -msgid "Failed service/service groups" -msgstr "Error en el/los servicio(s)" - -msgid "Failed source hosts/hostgroups" -msgstr "Host o grupo de hosts origenes fallidos" - -msgid "Failed targets" -msgstr "Error en Objetivos" - -msgid "Failed to add" -msgstr "Fallo al añadir" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "No se pudo agregar clave de la tabla de claves\n" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Falló al intenatar agregar al usuario al grupo predeterminado. Utilice 'ipa " -"group-add-member' para agregarlo manualmente. " - -msgid "Failed to authenticate to CA REST API" -msgstr "Falló al autenticarse a CA REST API" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "Falló al enlazar al servidor!\n" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Fallo al limpiar memberPrincipal %(principal)s de la entrada s4u2proxy " -"%(dn)s: %(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Fallo al limpiar claves Custodia para %(master)s: %(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Fallo al limpiar entradas DNA hostname para %(master)s: %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Fallo al limpiar entradas %(hostname)s DNS: %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Fallo al limpiar principales/claves del servidor: %(err)s" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "No se pudo cerrar la tabla de claves\n" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "Fallo al conectar sssd sobre SystemBus. Vea detalles en error_log" - -#, c-format -msgid "Failed to create control!\n" -msgstr "¡Falló crear control!\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Error al crear el material de clave\n" - -msgid "Failed to create key!\n" -msgstr "¡Falló la creación de clave!\n" - -msgid "Failed to create random key!\n" -msgstr "Falló la creación de clave aleatoria\n" - -msgid "Failed to decode control reply!\n" -msgstr "Falló al decodificar la respuesta de control!\n" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Fallo al encontrar usuarios sobre SystemBus. Vea detalles en error_log" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "Falló al obtener keytab\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Falló para obtener keytab!\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "Falló al obtener resultados: %s\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Fallo abrir clave de tablas.\n" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "Falló al abrir el fichero de configuración %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "No pudo abrir la tabla de claves\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Fallo al abrir keytab '%1$s': %2$s\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Falló al analizar el fichero de configuración %s\n" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Falló al analizar el resultado extendido: %s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "Falló al analizar el resultado: %s\n" - -msgid "Failed to remove" -msgstr "Error al remover " - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" -"Fallo al quitar el servidor %(master)s de la lista de servidores: %(err)s" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "Falló al recuperar algunas teclas" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "Falló al recuperar la encriptación tipo %1$s (#%2$d)\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Falló al recuperar el tipo de encriptación tipo #%d\n" - -msgid "Failed users/groups" -msgstr "Usuario o grupos de usuario incorrectos" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" -"Falla al intentar decodificar la petición de identificación de certificado: " -"%s" - -msgid "Failure reset interval" -msgstr "Falló reajuste de intervalo" - -msgid "Fallback primary group" -msgstr "Grupo primario de respaldo" - -msgid "False" -msgstr "Falso" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" -"False si la migración falla porque el plug-in de compatibilidad está " -"habilitado." - -msgid "False if migration mode was disabled." -msgstr "\"False\", si el modo de migración fue inhabilitado." - -msgid "Fax Number" -msgstr "Número de fx" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"No se pudo recuperar dominios del bosque de confianza. Vea detalles en " -"error_log" - -#, python-format -msgid "File %(file)s not found" -msgstr "No se encontró el archivo %(file)s " - -msgid "File containing data to archive" -msgstr "Fichero conteniendo datos para archivar" - -msgid "File containing profile configuration" -msgstr "Fichero que contiene la configuración del perfil" - -msgid "File containing the new vault password" -msgstr "Fichero que contiene la nueva contraseña de bóveda" - -msgid "File containing the new vault public key" -msgstr "Fichero que contiene la nueva clave pública de bóveda" - -msgid "File containing the old vault password" -msgstr "Fichero conteniendo la contraseña de bóveda antigua" - -msgid "File containing the old vault private key" -msgstr "Fichero que contiene la clave privada de bóveda antigua" - -msgid "File containing the vault password" -msgstr "Fichero que contiene la contraseña de bóveda" - -msgid "File containing the vault public key" -msgstr "Fichero que contiene la clave pública de la bóveda" - -msgid "File to load the certificate from" -msgstr "Archivo desde el que cargar el certificado" - -msgid "File to load the certificate from." -msgstr "Archivo desde donde cargar el certificado" - -msgid "File to store the certificate in." -msgstr "Archivo para almacenar el certificado" - -msgid "Filename is empty" -msgstr "El nombre de fichero está vacío" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "Nombre de fichero de un perfil crudo. El formato XML no se soporta" - -msgid "Filter" -msgstr "Filtro" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "Filtro disponible ${other_entity}" - -msgid "Find" -msgstr "Buscar" - -msgid "Find a server role on a server(s)" -msgstr "Encontrar un rol de servidor sobre un servidor(s)" - -msgid "Fingerprint" -msgstr "Huella digital" - -msgid "Fingerprint (SHA1)" -msgstr "Huella digital (SHA1)" - -msgid "Fingerprint (SHA256)" -msgstr "Huella digital (SHA256)" - -msgid "Fingerprint Type" -msgstr "Tipo de huella digital" - -msgid "Fingerprints" -msgstr "Las huellas dactilares" - -msgid "First Code" -msgstr "Primer Código" - -msgid "First Posix ID of the range" -msgstr "Primer Posix ID del rango" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "Primera ID Posix ID del rango reservado para los dominios de confianza" - -msgid "First RID of the corresponding RID range" -msgstr "Primer RID del correspondiente rango RID" - -msgid "First RID of the secondary RID range" -msgstr "Primer RID del rango RID secundario" - -msgid "First date/time the token can be used" -msgstr "Primera fecha/hora en que puede usar la ficha" - -msgid "First name" -msgstr "Nombre" - -msgid "Flags" -msgstr "Banderas" - -msgid "Following segments were not deleted:" -msgstr "Los siguientes segmentos no fueron borrados:" - -msgid "Force" -msgstr "Forzar" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" -"Fuerza la creación de zona DNS aún en el caso de que se superponga con una " -"zona existente." - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" -"Fuerza la creación de zona DNS aunque el servidor de nombre no se pueda " -"resolver." - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" -"Fuerza la creación de zona DNS aunque el servidor de nombre no se pueda " -"resolver. (Obsoleto)" - -msgid "Force adding domain even if not in DNS" -msgstr "Forzar el añadir un dominio aunque no esté en DNS" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" -"Fuerza el cambio del servidor de nombre aunque el servidor de nombre no en " -"DNS" - -msgid "Force server removal" -msgstr "Forzar la eliminación del servidor" - -msgid "Force server removal even if it does not exist" -msgstr "Fuerza el borrado del servidor aunque no exista" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "Forzar la unión del host. Reunirlo aunque ya este unido." - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "Forzando el borrado de %(hostname)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"Bosque '%(forest)s' tiene confianza existente para forest(s) %(domains)s que " -"evita una confianza en '%(conflict)s'" - -msgid "Forward policy" -msgstr "Política de envío" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"La política de reenvío se define para ello en IPA DNS, ¿tal vez el " -"reenviador apunta al host incorrecto?" - -msgid "Forward to server instead of running locally" -msgstr "Reenvía al servidor en lugar de ejecutarse localmente" - -msgid "Forward zones only" -msgstr "Zonas de reenvío sólo" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"Conflictos de la política de envío con algunas zonas vacías automáticas. Las " -"peticiones para las zonas especificadas por RFC 6303 ignorarán el envío y " -"recursión y siempre tendrán por resultado respuestas NXDOMAIN. Para evitar " -"este comportamiento use la política de envío 'only'." - -#, python-format -msgid "Found '%(value)s'" -msgstr "Ha sido encontrado '%(value)s'" - -msgid "Full name" -msgstr "Nombre y apellidos" - -msgid "Fully Qualified Host Name" -msgstr "Nombre de host totalmente calificado" - -msgid "Function to get details" -msgstr "Función para obtener detalles" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (utilice esta opción para definirlo manualmente)" - -msgid "GSSAPI|EXTERNAL" -msgstr "GSSAPI|EXTERNAL" - -msgid "General" -msgstr "General" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "Generar una contraseña aleatoria que se utilizará en la inscripción " - -msgid "Generate automount files for a specific location." -msgstr "Generar ficheros de automontaje para una localización específica." - -msgid "Get" -msgstr "Obtener" - -msgid "Global DNS configuration is empty" -msgstr "La configuración global DNS está vacía" - -msgid "Global Trust Configuration" -msgstr "Configuración Global de Confianza" - -msgid "Global forwarders" -msgstr "Promotores globales" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Promotores globales. Se puede especificar un pueeto personalizado por cada " -"promotor usando el formato estándar \"IP_ADDRESS port PORT\"" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" -"Política de reenvío global. Establecer a \"none\" para deshabilitar " -"cualquier promotor global." - -msgid "Granted rights" -msgstr "Derechos concedidos" - -msgid "Granted to Privilege" -msgstr "Concedido al Privilegio" - -msgid "Granting privilege to roles" -msgstr "Concesión de privilegios a los roles" - -msgid "Group" -msgstr "Grupo" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "El grupo '%s' no existe" - -msgid "Group ID Number" -msgstr "Número de Identificación de Grupo" - -msgid "Group Options" -msgstr "Opciones de Grupo" - -msgid "Group Settings" -msgstr "Configuración del grupo" - -msgid "Group Type" -msgstr "Tipo de grupo" - -msgid "Group container" -msgstr "Contenedor de grupoi" - -msgid "Group description" -msgstr "Descripción del grupo" - -msgid "Group name" -msgstr "Nombre del grupo" - -msgid "Group object class" -msgstr "Clase de objeto de grupo" - -msgid "Group to apply ACI to" -msgstr "Grupo al que aplicar API" - -msgid "Grouping Type" -msgstr "Tipo de Agrupamiento" - -msgid "Grouping to which the rule applies" -msgstr "Agrupamiento al cual se aplican las reglas" - -msgid "Groups" -msgstr "Grupos" - -msgid "Groups allowed to create keytab" -msgstr "Los grupos pueden crear keytab" - -msgid "Groups allowed to retrieve keytab" -msgstr "Los grupos pueden recuperar keytab" - -msgid "Groups of RunAs Users" -msgstr "Grupos de Usuarios RunAs" - -msgid "HBAC Rule" -msgstr "REgla HBAC" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "Regla HBAC que define los usuarios, grupos y grupos de host" - -msgid "HBAC Rules" -msgstr "Reglas HBAC" - -msgid "HBAC Service" -msgstr "Servicio HBAC" - -msgid "HBAC Service Group" -msgstr "Grupo de Servicio HBAC" - -msgid "HBAC Service Groups" -msgstr "Grupos de Servicios HBAC" - -msgid "HBAC Services" -msgstr "Servicios HBAC" - -msgid "HBAC Test" -msgstr "Prueba HBAC" - -msgid "HBAC rule" -msgstr "Regla HBAC" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Regla HBAC %(rule)s no encontrada" - -msgid "HBAC rule and local members cannot both be set" -msgstr "Regla HBAC y miembros locales no pueden ser fijados" - -msgid "HBAC rules" -msgstr "Reglas HBAC" - -msgid "HBAC service" -msgstr "Servicio HBAC" - -msgid "HBAC service description" -msgstr "Descripción de servicio HBAC" - -msgid "HBAC service group" -msgstr "Grupo de servicio HBAC" - -msgid "HBAC service group description" -msgstr "Servicios y grupos especificados" - -msgid "HBAC service groups" -msgstr "Grupos de servicio HBAC" - -msgid "HBAC services" -msgstr "Servicios HBAC" - -msgid "HOTP Authentication Window" -msgstr "Ventana de Autenticación HOTP" - -msgid "HOTP Synchronization Window" -msgstr "Ventana de Sincronización HOTP" - -msgid "HOTP authentication skip-ahead" -msgstr "Vaya directamente a la autenticación HOTP" - -msgid "HOTP synchronization skip-ahead" -msgstr "Vaya directamente a la sincronización HOTP" - -msgid "HTTP Error" -msgstr "Error HTTP" - -msgid "Hardware MAC address(es) on this host" -msgstr "Dirección(es) Hardware MAC en este host" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Plataforma de hardware del equipo (p. ej. Lenovo T61)" - -msgid "Hello world" -msgstr "Hola mundo" - -msgid "Hide" -msgstr "Ocultar" - -msgid "Hide details" -msgstr "Esconder detalles" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" -"Esconder detalles de que reglas coinciden, no coinciden o son no válidas" - -msgid "History size" -msgstr "Tamaño del historial" - -msgid "Home directory" -msgstr "Directorio principal" - -msgid "Home directory base" -msgstr "Base del directorio principal" - -msgid "Horizontal Precision" -msgstr "Precisión horizontal" - -msgid "Host" -msgstr "Host" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "No ha sido encontrado el equipo anfitrión '%(host)s' " - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "Host '%(hostname)s' no tiene el registro correspondiente DNS A/AAAA" - -msgid "Host Certificate" -msgstr "Certificado de host" - -msgid "Host Group" -msgstr "Grupo de Host" - -msgid "Host Group Settings" -msgstr "Configuraciones del Grupo de Host" - -msgid "Host Groups" -msgstr "Grupos de equipo" - -msgid "Host Groups allowed to create keytab" -msgstr "Los Grupos de Host pueden crear keytab" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Los Grupos de Host pueden recuperar keytab" - -msgid "Host Name" -msgstr "Nombre de host" - -msgid "Host Settings" -msgstr "Configuración del host" - -msgid "Host category" -msgstr "Categoría del equipo" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Categoría de host (las semánticas situadas en este atributo son para " -"interpretación local)" - -msgid "Host category the rule applies to" -msgstr "Categoría del equipo al que se aplica la regla" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Plataforma de hardware del equipo (p. ej. \"Lenovo T61\")" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Host ya está vinculado\n" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Localidad del equipo (p.ej. \"Barrio latino, París\") " - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Ubicación del equipo (p. ej. \"Laboratorio\")" - -msgid "Host name" -msgstr "Nombre del equipo" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" -"Sistema operativo que utiliza el equipo y versión (p.ej. \"Fedora 11\")" - -msgid "Host-based access control commands" -msgstr "Comandos de control de acceso basado en host" - -msgid "Host-group" -msgstr "Grupo de equipo" - -msgid "Hostname" -msgstr "Nombre del equipo anfitrión" - -msgid "Hostname (FQDN)" -msgstr "Nombre de host (FQDN)" - -msgid "Hostname of this server" -msgstr "Nombre de host de este servidor" - -msgid "Hosts" -msgstr "Equipos" - -msgid "Hosts allowed to create keytab" -msgstr "Los hosts pueden crear keytab" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Los hosts pueden recuperar keytab" - -msgid "How long should negative responses be cached" -msgstr "¿Por cuánto tiempo las respuestas negativas deben guardarse en cache?" - -msgid "ID Range" -msgstr "Intervalo de ID" - -msgid "ID Ranges" -msgstr "Intervalos de ID" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"El rango de ID para el dominio de confianza ya existe, pero tiene un tipo " -"diferente. Por favor borre manualmente el rango viejo o no haga cumplir el " -"tipo por medio de la opción --range-type." - -msgid "ID range type, one of allowed values" -msgstr "Tipo de rango ID, uno de los siguientes valores" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Rango de ID con el mismo nombre pero diferente SID de dominio ya existe. El " -"nuevo rango de ID para el nuevo dominio de confianza debe ser creado " -"manualmente." - -msgid "IP Address" -msgstr "Dirección IP" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "Dirección IP %(ip)s ya está asignada en el dominio %(domain)s." - -msgid "IP network to create reverse zone name from" -msgstr "Red IP para crear un nombre de zona reversa desde" - -msgid "IPA AD trust agents" -msgstr "IPA AD agentes de confianza" - -msgid "IPA AD trust controllers" -msgstr "Controladores de confianza IPA AD" - -msgid "IPA CA cannot be deleted" -msgstr "IPA CA no puede ser borrada" - -msgid "IPA CA cannot be disabled" -msgstr "IPA CA no puede ser deshabilitada" - -msgid "IPA CA certificate" -msgstr "Certificado IPA CA" - -msgid "IPA DNS records" -msgstr "Registros IPA DNS" - -msgid "IPA DNS servers" -msgstr "Servidores IPA DNS" - -msgid "IPA DNS version" -msgstr "Versión IPA DNS" - -msgid "IPA DNSSec key master" -msgstr "Clave maestra IPA DNSSec" - -msgid "IPA Error" -msgstr "Error IPA" - -msgid "IPA Location" -msgstr "Localización IPA" - -msgid "IPA Location description" -msgstr "Descripción de Localización IPA" - -msgid "IPA Locations" -msgstr "Localizaciones IPA" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"El tipo de Rango IPA debe ser uno de ipa-ad-trust o ipa-ad-trust-posix " -"cuando se especifica el SID del dominio de confianza" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"El tipo de Rango IPA Range no debe ser ni ipa-ad-trust ni ipa-ad-trust-posix " -"cuando no se especifica el SID del dominio de confianza." - -msgid "IPA Server" -msgstr "Servidor IPA" - -msgid "IPA Server Role" -msgstr "Rol de Servidor IPA" - -msgid "IPA Server Roles" -msgstr "Roles de Servidor IPA" - -msgid "IPA Server to use" -msgstr "Servidor de IPA a utilizar" - -msgid "IPA Servers" -msgstr "Servidores IPA" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA no maneja la zona %(zone)s, por favor añada registros a su servidor DNS " -"manualmente" - -msgid "IPA location name" -msgstr "Nombre de localización IPA" - -msgid "IPA location records" -msgstr "Registros de ubicación IPA" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" -"IPA gestiona DNS, por favor verifique su configuración DNS y asegúrese que " -"el servicio de registros del dominio '{domain}' puede ser resuelto. Se " -"pueden encontrar ejemplos de como configurar DNS con comandos CLI o con Web " -"UI en la documentación. " - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "IPA namingContext no encontrado \n" - -msgid "IPA role name" -msgstr "Nombre de rol IPA" - -msgid "IPA server configured as DNSSec key master" -msgstr "Servidor IPA configurado como clave maestra DNSSec" - -msgid "IPA server domain cannot be deleted" -msgstr "Servidor de dominio IPA no puede ser borrado" - -msgid "IPA server domain cannot be omitted" -msgstr "Servidor de domino IPA no puede ser omitido" - -msgid "IPA server hostname" -msgstr "Nombre de host del servidor IPA" - -msgid "IPA server role name" -msgstr "Nombre de rol del servidor IPA" - -msgid "IPA servers configured as AD trust agents" -msgstr "Servidores IPA configurados como agentes de confianza AD" - -msgid "IPA servers configured as AD trust controllers" -msgstr "Servidores IPA configurados como controladores de confianza AD" - -msgid "IPA unique ID" -msgstr "ID unico de IPA" - -msgid "Identity" -msgstr "Identidad" - -msgid "Identity Settings" -msgstr "Configuración de identidad" - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"Si el problema persiste por favor contacte con el administrador del sistema." - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "Ignorar la comprobación del último servidor CA o DNS que queda" - -msgid "Ignore compat plugin" -msgstr "Ignorar plugin de compatibilidad" - -msgid "Ignore group attribute" -msgstr "Ignorar atributo de grupo" - -msgid "Ignore group object class" -msgstr "Ignorar clase de objeto grupo" - -msgid "Ignore topology connectivity problems after removal" -msgstr "Ignorar problemas de conectividad de topología después de quitarla" - -msgid "Ignore topology errors" -msgstr "Ignorar errores de topología" - -msgid "Ignore user attribute" -msgstr "Ignorar atributo de usuario" - -msgid "Ignore user object class" -msgstr "Ignorar clase de objeto usuario" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "%(src)s a %(dst)s ignorados" - -msgid "Ignored keys:" -msgstr "Llaves ignoradas: " - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "Ignorar estos avisos y continuar con el borrado" - -msgid "Ignoring topology connectivity errors." -msgstr "Ignorando los errores de topología de conectividad." - -msgid "Import a Certificate Profile." -msgstr "Importar un Certificado Perfil" - -msgid "Import an entitlement certificate." -msgstr "Importar un certificado de derecho." - -msgid "Import automount files for a specific location." -msgstr "Importar ficheros de automontaje para una localización específica." - -msgid "Imported keys:" -msgstr "Llaves (keys) importadas" - -msgid "Imported maps:" -msgstr "Mapas importados" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Perfil importado \"%(value)s\"" - -msgid "Include Disabled" -msgstr "Include Deshabilitado" - -msgid "Include Enabled" -msgstr "Include Habilitado" - -msgid "Include IPA master entries" -msgstr "Incluir entradas IPA maestro" - -msgid "Include all disabled IPA rules into test" -msgstr "Incluir todas las reglas IPA deshabilitadas en la prueba" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "Incluir todas las reglas IPA habilitadas en la prueba [por defecto]" - -msgid "Include certificate chain in output" -msgstr "Incluir la cadena del certificado en la salida" - -msgid "Included attributes" -msgstr "Atributos incluidos" - -msgid "Inclusive Regex" -msgstr "Regex inclusivo" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "Opciones suministradas incompatibles (-r y -P)\n" - -msgid "Indirect" -msgstr "Indirecto" - -msgid "Indirect Member HBAC service" -msgstr "Servicio HBAC de miembro indirecto" - -msgid "Indirect Member HBAC service group" -msgstr "Grupo de servicio HBAC de miembros indirectos " - -msgid "Indirect Member groups" -msgstr "Grupos de miembros indirectos" - -msgid "Indirect Member host-groups" -msgstr "Miembros indirectos de host-groups" - -msgid "Indirect Member hosts" -msgstr "Hosts de miembros indirectos" - -msgid "Indirect Member netgroups" -msgstr "Miembros indirectos netgroups" - -msgid "Indirect Member of roles" -msgstr "Roles de miembros indirectos" - -msgid "Indirect Member permissions" -msgstr "" -"\\n\n" -"Permisos indirectos de miembro " - -msgid "Indirect Member users" -msgstr "Usuarios indirectos miembros" - -msgid "Indirect Membership" -msgstr "Afiliación Indirecta" - -msgid "Inherited from server configuration" -msgstr "Heredado de la configuración del servidor" - -msgid "Initial counter for the HOTP token" -msgstr "Contador inicial para a ficha HOTP" - -msgid "Initials" -msgstr "Iniciales" - -msgid "Input file" -msgstr "Archivo de entrada" - -msgid "Input filename" -msgstr "Entrada nombre de archivo" - -msgid "Input form contains invalid or missing values." -msgstr "La entrada contiene valores no válidos o desaparecidos." - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Privilegio 'add' insuficiente para la entrada '%s'." - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Privilegio 'write' insuficiente al atributo 'krbLastPwdChange' de la entrada " -"'%s'." - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Acceso insuficiente: %(info)s" - -msgid "Insufficient privilege to delete a CA." -msgstr "Privilegio insuficiente para borrar una CA." - -msgid "Insufficient privilege to modify a CA." -msgstr "Privilegio insuficiente para modificar una CA." - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "Privilegio insuficiente para modificar un certificado perfil" - -msgid "Internal Error" -msgstr "Error Interno" - -msgid "Internationalization messages" -msgstr "Mensajes de internacionalización" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Petición JSON-RPC no válida: %(error)s" - -msgid "Invalid LDAP URI." -msgstr " URI LDAP no válida." - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "Mecanismo de enlace SASL no válido\n" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Nombre de servicio principal inválido\n" - -msgid "Invalid credentials" -msgstr "Credenciales no válidas" - -msgid "Invalid number of parts!" -msgstr "El número de partes no es válido." - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Invalido o tipo no soportado. Valores permitidos son: %s" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "Clave pública de bóveda no válida o no soportada: %s" - -msgid "Is zone active?" -msgstr "¿Está la zona activa?" - -msgid "Issue" -msgstr "Tema" - -msgid "Issued By" -msgstr "Expedido por" - -msgid "Issued On" -msgstr "Expiración" - -msgid "Issued To" -msgstr "Expedido para" - -msgid "Issuer" -msgstr "Emisor" - -msgid "Issuer DN" -msgstr "Editor DN" - -msgid "Issuer Distinguished Name" -msgstr "Nombre Distinguido de Editor" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "ISe usa solo para el establecimiento del atributo SOA MNAME." - -msgid "Job Title" -msgstr "Cargo" - -msgid "Join an IPA domain" -msgstr "Unir un dominio IPA" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" -"No se encontró la cache de credencial kerberos. ¿Tiene un tiquete de " -"kerberos?\n" - -msgid "Kerberos Key" -msgstr "Clave Kerberos" - -msgid "Kerberos Key Not Present" -msgstr "No hay clave Kerberos Presente" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Claves de Kerberos presente, Host aprovisionado" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Claves de Kerberos actuales, Servicio suministrado" - -msgid "Kerberos Principal you entered is expired" -msgstr "Kerberos Principal su entrada ha expirado" - -msgid "Kerberos Service Principal Name" -msgstr "Nombre principal del servicio de kerberos" - -msgid "Kerberos Ticket Policy" -msgstr " Política de tiquete de Kerberos" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" -"No se encontró usuario principal de kerberos. ¿Tiene una cache de credencial " -"válida?\n" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Inicio de contexto de kerberos falló\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Inicialización del contexto Kerberos falló: %1$s (%2$d)\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Error de kerberos: %(major)s/%(minor)s" - -msgid "Kerberos keys available" -msgstr "Claves Kerberos disponibles" - -msgid "Kerberos principal" -msgstr "Principal kerberos" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"El principal %s de Kerberos ya existe. Utilice 'ipa user-mod' para definirlo " -"manualmente." - -msgid "Kerberos principal name for this host" -msgstr "Nombre del prinicpal de Kerberos para este equipo" - -msgid "Key" -msgstr "Llave" - -msgid "Key Compromise" -msgstr "Clave de transacción" - -msgid "Key Tag" -msgstr "Etiqueta de clave" - -msgid "Keytab" -msgstr "Keytab" - -msgid "Keytab File Name" -msgstr "Nombre de archivo de tabla de claves" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Tabla de claves recuperada y almacenada correctamente en:%s\n" - -msgid "LDAP DN" -msgstr "LDAP DN" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "LDAP SASL enlaza mecanismo si no bindd/bindpw" - -msgid "LDAP URI" -msgstr "LDAP URI" - -msgid "LDAP URI of DS server to migrate from" -msgstr "LDAP URI del servidor DS desde donde realizar la migración" - -msgid "LDAP basedn" -msgstr "LDAP basedn" - -msgid "LDAP password" -msgstr "Contraseña LDAP" - -msgid "LDAP password (if not using Kerberos)" -msgstr "contraseña de LDAP (si no usa Kerberos)" - -msgid "LDAP schema" -msgstr "Esquema LDAP" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" -"Alcance de búsqueda LDAP para usuarios y grupos: base, un nivel o sub árbol. " -"Predeterminado a un nivel" - -msgid "LDAP timeout" -msgstr "Tiempo de espera LDAP" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "LDAP uri para conectar a. Mutuamente exclusiva con --server" - -msgid "Last date/time the token can be used" -msgstr "Último día/hora en que puede ser usada la ficha" - -msgid "Last failed authentication" -msgstr "Última autenticación fallada" - -msgid "Last name" -msgstr "Apellido" - -msgid "Last successful authentication" -msgstr "Última autenticación exitosa" - -msgid "Leading and trailing spaces are not allowed" -msgstr "No están permitidos espacios iniciales ni finales" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Filtro legal LDAP (p.ej. ou=Ingeniería)" - -msgid "Length of TOTP token code validity" -msgstr "Longitud de la ficha TOTP de validación de código" - -msgid "List of IPA masters configured as DNS servers" -msgstr "Lista de los maestros IPA configurados como servidores DNS" - -msgid "List of deletions that failed" -msgstr "Lista de eliminaciones fallidas" - -msgid "List of enabled roles" -msgstr "Listra de roles habilitados" - -msgid "List of servers which advertise the given location" -msgstr "Lista de servidores que anuncian la localización dada" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Lista de dominios de confianza refrescados con éxito. Use el comando " -"trustdomain-find para listarlos." - -msgid "Lists of objects migrated; categorized by type." -msgstr "Lista de objetos migrados; clasificados por tipo." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "Lista de objetos que no pueden ser migrados; categorizados por tipo." - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Cargar certificado CA del servidor LDAP desde FILE" - -msgid "Loading" -msgstr "Cargando" - -msgid "Loading data" -msgstr "Cargando datos" - -msgid "Locality" -msgstr "Localidad" - -msgid "Location" -msgstr "Ubicación" - -msgid "Location name" -msgstr "Nombre de localización" - -msgid "Location of the ACI" -msgstr "Localización del ACI" - -msgid "Lockout duration" -msgstr "Duración de bloqueo" - -msgid "Log In Using Certificate" -msgstr "Iniciar sesión Usando Certificado" - -msgid "Log in" -msgstr "Iniciar sesión" - -msgid "Log in using personal certificate" -msgstr "Iniciar sesión usando certificado personal" - -msgid "Log out" -msgstr "Cerrar sesión" - -msgid "Logged In As" -msgstr "Registrado como" - -msgid "Login failed due to an unknown reason" -msgstr "Acceso fallado debido a una razón desconocida" - -msgid "Login shell" -msgstr "Shell de ingreso" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" -"El número más bajo significa la prioridad más alta. Los clientes intentarán " -"contactar con la URI con la prioridad numerada más bajo que puedan alcanzar." - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" -"El número más bajo significa la prioridad más alta. Los clientes intentarán " -"contactar con el servidor con la prioridad de número más bajo que ellos " -"puedan alcanzar." - -msgid "MAC address" -msgstr "Dirección MAC" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Mailing Address" -msgstr "Dirección de correo" - -msgid "Malformed DN" -msgstr "DN Malformado" - -msgid "Malformed principal" -msgstr "Director malformado" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Principal mal construido: '%(value)s'" - -msgid "Manage password policy for specific group" -msgstr "Administra la política de contraseña de un grupo específico" - -msgid "Manage ticket policy for specific user" -msgstr "Administra política de ticket para un usuario específico" - -msgid "Managed by" -msgstr "Gestionado por" - -msgid "Managed suffixes" -msgstr "Sufijos gestionados" - -msgid "Managedby permission" -msgstr "Gestionado con permiso" - -msgid "Manager" -msgstr "Manager" - -msgid "Map" -msgstr "Mapa" - -msgid "Map Type" -msgstr "Tipo de Mapa" - -msgid "Mapping rule" -msgstr "Regla de mapeo" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"El conjunto de reglas de mapeo \"%(ruleset)s\" tiene más de una regla para " -"el auxiliar %(helper)s" - -msgid "Mark the token as disabled (default: false)" -msgstr "Marcar la ficha como deshabilitada (predeterminado: false)" - -msgid "Master file" -msgstr " Archivo maestro" - -msgid "Match" -msgstr "Emparejar" - -msgid "Match users according to certificate." -msgstr "Emparejar usuarios de acuerdo al certificado" - -msgid "Matched" -msgstr "Emparejado" - -msgid "Matched rules" -msgstr "Reglas coincidentes" - -msgid "Matching Type" -msgstr "Tipo de Coincidencia" - -msgid "Matching rule" -msgstr "Regla de coincidencia" - -msgid "Max domain level" -msgstr "Nivel de dominio Max" - -msgid "Max failures" -msgstr "Número máximo de fallas" - -msgid "Max life" -msgstr "Vida máxima" - -msgid "Max lifetime (days)" -msgstr "Vida máxima (días)" - -msgid "Max renew" -msgstr "Renovación máxima" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" -"Máxima cantidad de tiempo (segundos) parab una búsqueda (> 0, o -1 para " -"ilimitado)" - -msgid "Maximum domain level" -msgstr "Nivel máximo de dominio" - -msgid "Maximum number of agreements per replica" -msgstr "Número máximo de acuerdos por replica" - -msgid "Maximum number of entries returned" -msgstr "Cantidad máxima de entradas obtenidas" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Número máximo de entradas devueltas (0 es ilimitado)" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Máximo número de registros a buscar (-1 es ilimitado)" - -msgid "Maximum password life must be greater than minimum." -msgstr "La duración máxima de la contraseña debe ser mayor que la mínima." - -msgid "Maximum password lifetime (in days)" -msgstr "Vida máxima de la contraseña (días)" - -msgid "Maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -msgid "Maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -msgid "Maximum username length" -msgstr "Largo máximo para nombre de usuario" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Valor máximo es ${value}" - -msgid "May not be empty" -msgstr "Puede no estar vacío" - -msgid "Member HBAC service" -msgstr "Miembro del servicio HBAC" - -msgid "Member HBAC service groups" -msgstr "Grupos de servicio de Miembros HBAC" - -msgid "Member Host" -msgstr "Miembro del equipo anfitrión" - -msgid "Member Sudo commands" -msgstr "Comandos Miembro Sudo" - -msgid "Member groups" -msgstr "Grupos de miembros" - -msgid "Member host-groups" -msgstr "Grupos de equipo miembro" - -msgid "Member hosts" -msgstr "Equipos miembro" - -msgid "Member netgroups" -msgstr " Miembros de netgroups" - -msgid "Member of" -msgstr "Miembro de" - -msgid "Member of a group" -msgstr "Miembro de un grupo" - -msgid "Member of group" -msgstr "Miembro del grupo" - -msgid "Member of groups" -msgstr "Miembros de los grupos" - -msgid "Member of host-groups" -msgstr "Miembro de los grupos de equipo" - -msgid "Member of netgroups" -msgstr "Miembros de netgroups" - -msgid "Member service groups" -msgstr "Grupos de miembro de servicio" - -msgid "Member services" -msgstr "Servicios de miembros" - -msgid "Member user group" -msgstr "Miembro del grupo de usuarios" - -msgid "Member users" -msgstr "Usuarios miembros" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "Miembros de un dominio de confianza en formato DOM\\name o name@domain" - -msgid "Members that could not be added" -msgstr "Miembros que no han podido ser añadidos" - -msgid "Members that could not be removed" -msgstr "Miembros que no han podido ser eliminados" - -msgid "Migrate" -msgstr "Migrar" - -msgid "Migrate users and groups from DS to IPA." -msgstr "Migrar usuarios y grupos de DS a IPA." - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"El modo migración esta desactivado.\n" -"Use 'ip confi-mod --enable-migration=TRUE' para activarlo." - -msgid "Migration of LDAP search reference is not supported." -msgstr "Migración de búsqueda de referencia LDAP no está soportada." - -msgid "Min domain level" -msgstr "Nivel de dominio Min" - -msgid "Min length" -msgstr "Longitud mínima" - -msgid "Min lifetime (hours)" -msgstr "Vida mínima (horas)" - -msgid "Minimum domain level" -msgstr "Nivel mínimo de dominio" - -msgid "Minimum length of password" -msgstr "Longitud mínima de la contraseña" - -msgid "Minimum number of character classes" -msgstr "Cantidad mínima de clases de caracteres" - -msgid "Minimum password lifetime (in hours)" -msgstr "Vida mínima de la contraseña (en horas)" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Valor mínimo es ${value}" - -msgid "Minutes Latitude" -msgstr "Latitud en minutos" - -msgid "Minutes Longitude" -msgstr "Minutos de Longitud" - -msgid "Misc. Information" -msgstr "Información diversa" - -msgid "Missing new vault public key" -msgstr "Nueva clave pública de bóveda desaparecida" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Arbitro HTTP desaparecido o no válido, %(referer)s" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "Pérdida la contestación de la lista de control!\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "¡Falta control de respuesta!\n" - -msgid "Missing values: " -msgstr "Valores faltantes:" - -msgid "Missing vault public key" -msgstr "Clave pública de la bóveda desaparecida" - -msgid "Mobile Telephone Number" -msgstr "Número de teléfono celular" - -msgid "Model" -msgstr "Modelo" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Modificada \"%(value)s\" configuración de confianza" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Ha sido modificado ACI \"%(value)s\"" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Modificada CA \"%(value)s\"" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado modificada \"%(value)s\"" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Modificado Certificado Perfil \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Modificada regla HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr " Servicio modificado HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Servicio modificado HBAC grupo \"%(value)s\"" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Modificar rango ID \"%(value)s\"" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Modificada localización IPA \"%(value)s\"" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Modificado servidor IPA \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Ficha OTP modificada \"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Modificado servidor proxy RADIUS \"%(value)s\"" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Modificado Mapa de Usuario SELinux \"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Modificado Comando Sudo “%(value)s”" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Modificado Grupo de Comando Sudo “%(value)s”" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Regla Sudo Modificada “%(value)s”" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Modificada regla de automiembro \"%(value)s\"" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Modificada clave de automontaje \"%(value)s\"" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Modificado un mapa de automontaje \"%(value)s\"" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Delegación modificada \"%(value)s\"" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Ha sido modificado el grupo \"%(value)s\"" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Ha sido modificado el equipo \"%(value)s\"" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Ha sido modificado el grupo de equipo \"%(value)s\"" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "netgroup modificado \"%(value)s\"" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Modificado el permiso \"%(value)s\"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Privilegio modificado \"%(value)s \"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rol modificado \"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Autoservicio modificado \"%(value)s\"" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Ha sido modificado el servicio \"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Modificado escenario usuario \"%(value)s\"" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" -"Confianza modificada \"%(value)s\" (el cambio será efectivo en 60 segundos)" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Ha sido modificado el usuario \"%(value)s\"" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Modificar %(name)s '%(value)s'?" - -msgid "Modify ACI." -msgstr "Modificar ACI." - -msgid "Modify CA configuration." -msgstr "Modificar configuración de CA." - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Modificar la configuración de Mapeo de Identidad de Certificado." - -msgid "Modify Certificate Profile configuration." -msgstr "Modificar la configuración del Certificado Perfil" - -msgid "Modify Class of Service entry" -msgstr "Modificar entrada Class of Service" - -msgid "Modify DNS forward zone." -msgstr "Modificar zona de reenvío DNS." - -msgid "Modify DNS zone (SOA record)." -msgstr "Modificar zona DNS (registro SOA)." - -msgid "Modify ID range." -msgstr "Modificar rango de ID." - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" -"Modificar rango ID.\n" -"\n" - -msgid "Modify Kerberos ticket policy." -msgstr "Modificar entrada de política Kerberos." - -msgid "Modify OTP configuration options." -msgstr "Modificar opciones de configuración OTP." - -msgid "Modify Sudo Command Group." -msgstr "Modificar Grupo de Comando Sudo." - -msgid "Modify Sudo Command." -msgstr "Modificar Comando Sudo." - -msgid "Modify Sudo Rule." -msgstr "Modificar Regla Sudo." - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Modificar una Regla de Mapeo de Identidad de Certificado." - -msgid "Modify a DNS resource record." -msgstr "Modificar un registro de recurso DNS." - -msgid "Modify a OTP token." -msgstr "MOdificar una ficha OTP." - -msgid "Modify a RADIUS proxy server." -msgstr "Modificar un servidor proxy RADIUS." - -msgid "Modify a SELinux User Map." -msgstr "Modificar un Mapa de Usuario SELinux." - -msgid "Modify a delegation." -msgstr "Modificar una delegación." - -msgid "Modify a group password policy." -msgstr "Modificar un grupo de política de contraseña." - -msgid "Modify a group." -msgstr "Modificar un grupo." - -msgid "Modify a hostgroup." -msgstr "Modificar un grupo de host." - -msgid "Modify a netgroup." -msgstr "Modificar un grupo de red." - -msgid "Modify a permission." -msgstr "Modificar un permiso." - -msgid "Modify a privilege." -msgstr "Modificar un privilegio." - -msgid "Modify a role." -msgstr "Modificar un rol." - -msgid "Modify a self-service permission." -msgstr "Modificar un auto servicio de permiso." - -msgid "Modify a stage user." -msgstr "Modificar un escenario usuario." - -msgid "Modify a user." -msgstr "Modificar un usuario." - -msgid "Modify a vault." -msgstr "Modificar una bóveda" - -msgid "Modify an HBAC rule." -msgstr "Modificar una regla HBAC." - -msgid "Modify an HBAC service group." -msgstr "Modificar un grupo de servicio HBAC." - -msgid "Modify an HBAC service." -msgstr "Modificar un servicio HBAC." - -msgid "Modify an automount key." -msgstr "Modificar una clave de automontaje." - -msgid "Modify an automount map." -msgstr "Modificar un mapa de automontaje" - -msgid "Modify an existing IPA service." -msgstr "Modificar un servicio IPA existente." - -msgid "Modify configuration options." -msgstr "Modificar opciones de configuración." - -msgid "Modify global DNS configuration." -msgstr "Modificar la configuración global DNS." - -msgid "Modify global trust configuration." -msgstr "Modificar la configuración global de confianza." - -msgid "Modify information about a host." -msgstr "Modificar información sobre un host." - -msgid "Modify information about an IPA location." -msgstr "Modificar información sobre localización IPA." - -msgid "Modify information about an IPA server." -msgstr "Modificar información sobre un servidor IPA." - -msgid "Modify trustdomain of the trust" -msgstr "Modificar trustdomain de la confianza" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" -"Se ha encontrado más de una entrada con la llave %(key)s, utilice --info " -"para seleccionar una entrada específica." - -msgid "Mount information" -msgstr "Información de montaje" - -msgid "Mount point" -msgstr "Punto de montaje" - -msgid "Move deleted user into staged area" -msgstr "Mover el usuario borrado al área de escena" - -msgid "Must be an integer" -msgstr "Debe ser un entero" - -msgid "NIS domain name" -msgstr "Nombre del dominio NIS" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "El valor NONE no puede ser combinado con otros tipos de PAC" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"El registro NS no está permitido que coexista con un registro %(type)s " -"excepto cuando se localice en un registro de zona raíz (RFC 2181, sección " -"6.1)" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "Registro(s) NS puede(n) ser editado(s) en zona apéndice - '@'. " - -msgid "NSEC3PARAM record" -msgstr "Registro NSEC3PARAM" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" -"Registro NSEC3PARAM rpara la zona en formato: hash_algorithm flags " -"iterations salt" - -msgid "Name" -msgstr "Nombre" - -msgid "Name for referencing the CA" -msgstr "Nombre para referenciar la CA" - -msgid "Name of command to export" -msgstr "Nombre de comando a exportar" - -msgid "Name of host-group" -msgstr "Nombre del grupo de equipo" - -msgid "Name of method to export" -msgstr "Nombre del método para exportación" - -msgid "Name of object to export" -msgstr "Nombre del objeto a exportar" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" -"Nombre del mapa de montaje automático de padre (por defecto: auto.master)." - -msgid "Name of the trusted domain" -msgstr "Nombre del dominio de confianza" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" -"El servidor de nombre '%(host)s' no tiene su correspondiente registro A/AAAA" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" -"El servidor de nombre para la zona reversa no puede ser un nombre DNS " -"relativo" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Ni --del-all ni opciones para borrar un registro en concreto ha sido " -"especificado.\n" -"El comando de ayuda puede ser consultado para ver los tipos de registros " -"soportados." - -msgid "Nested Methods to execute" -msgstr "Métodos anidados para ejecutar" - -msgid "NetBIOS name" -msgstr "Nombre de NetBIOS" - -msgid "Netgroup" -msgstr "Grupo de red" - -msgid "Netgroup Settings" -msgstr "Configuración de Netgroup" - -msgid "Netgroup description" -msgstr "Descripción del grupo de red" - -msgid "Netgroup name" -msgstr "Nombre de grupo de red" - -msgid "Netgroups" -msgstr "Grupos de red" - -msgid "New ACI name" -msgstr " Nuevo nombre de ACI" - -msgid "New Certificate" -msgstr "Un nuevo certificado" - -msgid "New Password" -msgstr "Nueva Contraseña" - -msgid "New Principal Password" -msgstr "Nueva contraseña principal" - -msgid "New Test" -msgstr "Nueva Prueba" - -msgid "New kerberos principal alias" -msgstr "Nuevo alias principal Kerberos" - -msgid "New mount information" -msgstr "Nueva información de montaje" - -msgid "New public key specified multiple times" -msgstr "Nueva clave pública especificada múltiples veces" - -msgid "New vault password" -msgstr "Nueva contraseña de bóveda" - -msgid "Next" -msgstr "Siguiente" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Sin registros A, AAAA, SSHFP o PTR encontrados." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"No hay servidores DNS en la localización IPA %(location)s. Sin la " -"localización de servidores DNS no se trabaja como se espera." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"No se ha instalado clave maestra DNSSEC. La firma en la zona DNSSEC no " -"trabajará hasta que esté instalada la clave maestra DNSSEC." - -msgid "No Valid Certificate" -msgstr "Certificado no válido" - -msgid "No credentials cache found" -msgstr "No se han encontrado credenciales de cache" - -msgid "No entries." -msgstr "Sin entradas." - -msgid "No file to read" -msgstr "No existe el fichero para leer" - -msgid "No free YubiKey slot!" -msgstr "¡No hay espacio YubiKey libre!" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "No hay claves aceptadas por KDC\n" - -msgid "No matching entries found" -msgstr "No se encontraron entradas coincidentes" - -msgid "No option to delete specific record provided." -msgstr "Ninguna opción para borrar un registro en concreto especificado." - -msgid "No option to modify specific record provided." -msgstr "No hay opción para modificar registro específico proporcionado." - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "No tiene permiso para vincular este equipo al dominio de la API.\n" - -msgid "No response" -msgstr "Sin respuesta" - -msgid "No such virtual command" -msgstr "Ningún comando virtual" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "¿Ningún sistema enctypes preferido?\n" - -#, c-format -msgid "No values for %s" -msgstr "No hay valores para %s" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "No escribir permisos en archivo de tabla de claves'%s\n" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "No hay respuesta 2xx desde CA REST API: %(status)d. %(explanation)s" - -msgid "Non-existent or invalid rules" -msgstr "Reglas no existentes o no válidas" - -msgid "Not After" -msgstr "No luego de" - -msgid "Not Before" -msgstr "No antes de" - -msgid "Not a managed group" -msgstr "No es un grupo administrado" - -msgid "Not a valid IP address" -msgstr "No es una dirección IP válida" - -msgid "Not a valid IPv4 address" -msgstr "No es una dirección IPv4 válida" - -msgid "Not a valid IPv6 address" -msgstr "No es una dirección IPv6 válida" - -msgid "Not allowed on non-leaf entry" -msgstr "No permitido sobre entrada no hoja" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" -"No se especifican bastantes argumentos para llevar a cabo un ajusta de " -"confianza" - -msgid "Not matched rules" -msgstr "Reglas no coincidentes" - -msgid "Not registered yet" -msgstr "Aún no está registrado" - -msgid "Note" -msgstr "Nota" - -msgid "Number of IDs in the range" -msgstr "Número de IDs en el rango" - -msgid "Number of conditions added" -msgstr "Número de condiciones agregadas" - -msgid "Number of conditions removed" -msgstr "Número de condiciones eliminadas" - -msgid "Number of days's notice of impending password expiration" -msgstr "Aviso de número de días de expiración inminente de contraseña" - -msgid "Number of digits each token code will have" -msgstr "Número de digitos que cada código de ficha tendrá" - -msgid "Number of entries returned" -msgstr "Cantidad de entradas devueltas" - -msgid "Number of members added" -msgstr "Cantidad de miembros añadidos" - -msgid "Number of members removed" -msgstr "Cantidad de miembros eliminados" - -msgid "Number of permissions added" -msgstr "Número de permisos añadidos" - -msgid "Number of permissions removed" -msgstr "Número de permisos eliminados" - -msgid "Number of plugins loaded" -msgstr "Cantidad de complementos cargados" - -msgid "Number of privileges added" -msgstr "Número de privilegios agregados" - -msgid "Number of privileges removed" -msgstr "Número de privilegios eliminados" - -msgid "Number of variables returned (<= total)" -msgstr "Cantidad de variables devueltas (<= total)" - -msgid "OK" -msgstr "Aceptar" - -msgid "OTP" -msgstr "OTP" - -msgid "OTP Configuration" -msgstr "Configuración OTP" - -msgid "OTP Token" -msgstr "Ficha OTP" - -msgid "OTP Tokens" -msgstr "Fichas OTP" - -msgid "OTP configuration options" -msgstr "Opciones de configuración OTP" - -msgid "OTP token" -msgstr "Ficha OTP" - -msgid "OTP tokens" -msgstr "Fichas OTP" - -msgid "Object class name" -msgstr "Nombre de clase objeto" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "Objectclasses a ignorar para las entradas de grupo en DS" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "Objectclasses a se ignorado para entradas de usuario en DS" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "Objectclasses usado para buscar entradas de grupo en DS" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "Objectclasses usado para buscar entradas de usuario en DS" - -msgid "Old vault password" -msgstr "Contraseña de bóveda antigua" - -msgid "Old vault private key" -msgstr "Clave privada de bóveda antigua" - -msgid "One of group, permission or self is required" -msgstr "Uno de grupo, permiso o self es necesario" - -msgid "One time password commands" -msgstr "Comandos de contraseña de una vez" - -msgid "Only one value is allowed" -msgstr "Sólo se permite un valor" - -msgid "Only one zone type is allowed per zone name" -msgstr "Solo se permite un tipo de zona por nombre de zona" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"Solo se permiten los valores ipa-ad-trust e ipa-ad-trust-posix para --range-" -"type cuando se añade una confianza AD." - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Sistema operativo que utiliza el equipo y versión (p.ej. Fedora 9)" - -msgid "Operating system" -msgstr "Sistema operativo" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Falló operación: %s\n" - -msgid "Operations Error" -msgstr "Error en Operaciones" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" -"La opción rid-base no se debe usar cuando el tipo de rango IPA es ipa-ad-" -"trust-posix" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" -"Subárbol opcional DN desde donde se puede mover una entrada (debe estar en " -"el subárbol pero puede ser que todavía no exista)" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" -"Sub-árbol DN opcional donde una entrada puede ser movida (debe estar en el " -"sub-árbol, pero puede no existir todavía)" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" -"DN opcional a aplicar al permiso (debe estar en el sub-árbol, pero puede no " -"existir todavía)" - -msgid "Options" -msgstr "Opciones" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "Las opciones dom-sid y dom-name no pueden ser usadas juntas" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "Las opciones dom-sid y rid-base deben ser usadas juntas" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "Las opciones dom-sid y secondary-rid-base no podrían ser usadas juntas" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "Las opciones dom-sid/dom-name y rid-base se deben usar juntas" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Las opciones dom-sid/dom-name y secondary-rid-base no pueden ser usados " -"juntos" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "Las opciones secondary-rid-base y rid-base ser deben usar juntas" - -msgid "Order" -msgstr "Orden" - -msgid "Org. Unit" -msgstr "Unidad. org" - -msgid "Organization" -msgstr "Organización" - -msgid "Organizational Unit" -msgstr "Unidad organizativa" - -msgid "Origin DN subtree" -msgstr "Subárbol DN origen" - -msgid "Other Record Types" -msgstr "Otros Tipos de Registro" - -#, c-format -msgid "Out of Memory!\n" -msgstr "¡Memoria insuficiente!\n" - -msgid "Out of memory\n" -msgstr "¡Memoria insuficiente!\n" - -#, c-format -msgid "Out of memory \n" -msgstr "¡Memoria insuficiente!\n" - -#, c-format -msgid "Out of memory!" -msgstr "¡Memoria insuficiente!" - -#, c-format -msgid "Out of memory!\n" -msgstr "¡Memoria insuficiente!\n" - -msgid "Out of memory!?\n" -msgstr "" -"¡Memoria insuficiente!\n" -"\n" - -msgid "Output filename" -msgstr "Nombre de archivo de salida" - -msgid "Output only on errors" -msgstr "Solamente salida sobre errores" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" -"Anular una lista predeterminada de tipos PAC soportados. Use 'NONE' para " -"deshabilitar eñ soporte PAC para este servicio" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" -"Anular la lista predeterminada de tipos de PAC soportados. Use 'NONE' para " -"deshabilitar el soporte PAC para este servicio, e.g. esto podría ser " -"necesario para servicios NFS." - -msgid "Override existing password" -msgstr "Anular contraseña existente" - -msgid "Override inherited settings" -msgstr "Anular la configuración heredada" - -msgid "Overwrite GID" -msgstr "Sobrescribir GID" - -msgid "Owner" -msgstr "Propietario" - -msgid "PAC type" -msgstr "Tipo PAC" - -msgid "PAD" -msgstr "PAD" - -msgid "PKINIT" -msgstr "" -" Los certificados de entrada deben estar codificados en DER. \n" -" Tenga en cuenta que no puede ser un normalizador en la Param, ya que " -"solamente las variables de \n" -" Unicode se normalizan.\n" -" " - -msgid "PKINIT status" -msgstr "Estado PKINIT" - -msgid "POSIX" -msgstr "POSIX" - -msgid "Page" -msgstr "Página" - -msgid "Pager Number" -msgstr "Número de página" - -msgid "Pagination Size" -msgstr "Tamaño de Paginación" - -msgid "Parent map" -msgstr "Mapa del padre" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" -"Analiza todos los registros DNS crudos y los devuelve de modo estructurado" - -msgid "Password" -msgstr "Contraseña" - -msgid "Password Expiration Notification (days)" -msgstr "Notificación de Expiración de Contraseña (días)" - -msgid "Password Policies" -msgstr "Políticas de Contraseña" - -msgid "Password Policy" -msgstr "Directiva de contraseñas" - -msgid "Password can be specified only for symmetric vault" -msgstr "La contraseña solo se debe especificar para bóveda simétrica" - -msgid "Password cannot be set on enrolled host." -msgstr "La contraseña no puede ser fijada en el host matriculado." - -msgid "Password change complete" -msgstr "Cambiar la contraseña completa" - -msgid "Password expiration" -msgstr "Caducidad de la contraseña" - -msgid "Password history size" -msgstr "Tamaño del historial de la contraseña" - -msgid "Password plugin features" -msgstr "Funciones del complemento de contraseña" - -msgid "Password specified multiple times" -msgstr "Contraseña especificada múltiples veces" - -msgid "Password used in bulk enrollment" -msgstr "Contraseña utilizada en el registro bruto" - -msgid "Passwords do not match" -msgstr "Las contraseñas no coinciden" - -msgid "Passwords do not match!" -msgstr "Las contraseñas no coinciden." - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"Las contraseñas han sido migradas en formato pre-hashed.\n" -"IPA es incapaz de generar claves de Kerberos a menos que le sean\n" -"provistas contraseñas de texto claras. Todos los usuarios migrados\n" -"necesitan registrarse en https://your.domain/ipa/migration/ antes de\n" -"poder utilizar sus respectivas cuentas Kerberos." - -msgid "Passwords must match" -msgstr "Las contraseñas deben coincidir" - -msgid "Path to the IPA CA certificate" -msgstr "Ruta al certificado IPA CA" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Política de envío condicional por zona. Se establece a \"none\" para " -"deshabilitar el envío a expedidores globales para esta zona. En este caso, " -"la zona condicional de expedidores es ignorada." - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Expedidores por zona. Se puede especificar un puerto personalizado para cada " -"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "Período tras el cual se restablecerá (segundos) el conteo de errores" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Período durante el cual se fuerza el bloqueo (segundos)" - -msgid "Permission" -msgstr "Permiso" - -msgid "Permission ACI grants access to" -msgstr "El permiso ACI permite el acceso a" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "Permiso denegado:%(file)s " - -msgid "Permission flags" -msgstr "Banderas de permiso" - -msgid "Permission name" -msgstr "Nombre de permiso" - -msgid "Permission type" -msgstr "Tipo de permiso" - -msgid "Permission value" -msgstr "Valor de permiso" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "Permiso con bandera desconocida %s puede no ser modificado o quitado" - -msgid "Permissions" -msgstr "Permisos" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "Permisos a conceder (read, write). Predeterminado es write." - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "Permisos a obtener(lectura, escritura, añadir, borrar, todos)" - -msgid "Permitted Encryption Types" -msgstr "Tipos de cifrado permitidos" - -msgid "Ping a remote server." -msgstr "Hacer ping a un servidor remoto." - -msgid "Platform" -msgstr "Plataforma" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Por favor seleccione un tipo de origen de DNS para ser agregado" - -msgid "Please specify forwarders." -msgstr "Por favor especifique los reenviadores." - -msgid "Please try the following options:" -msgstr "Por favor intentar las siguientes opciones:" - -msgid "Policy" -msgstr "Política" - -msgid "Port" -msgstr "Puerto" - -msgid "Positional arguments" -msgstr "Argumentos posicionales" - -msgid "Pre-authentication is required for the service" -msgstr "Se requiere autenticación previa para el servicio" - -msgid "Pre-shared password" -msgstr "Contraseña precompartida" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "El perfil predefinido '%(profile_id)s' no puede ser borrado" - -msgid "Preference" -msgstr "Preferencia" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" -"Se ha dado preferencia a este intercambiador. Se prefieren más los valores " -"más bajos" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Prefijo utilizado para distinguir los tipos de ACI (permiso,delegación, " -"autoservicio, ninguno)" - -msgid "Preserved user" -msgstr "Usuario preservado" - -msgid "Prev" -msgstr "Anterior" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "El rango RID primario y el secundario no pueden superponerse" - -msgid "Primary key only" -msgstr "Sólo clave primaria" - -msgid "Principal" -msgstr "Principal" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "El principal %(principal)s no puede ser autenticado: %(message)s" - -msgid "Principal alias" -msgstr "Alias principal" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Principal para este certificado (e.g. HTTP/test.example.com)" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "El principal no es de la forma user@REALM: '%(principal)s'" - -msgid "Principal name" -msgstr "Nombre principal" - -msgid "Print as little as possible" -msgstr "Imprimir lo mínimo posible" - -msgid "Print debugging information" -msgstr "Imprimir la información de depuración" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Imprimir entradas como almacenadas en el servidor. Solamente afecta formato " -"de salida." - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Imprimir la salida cruda de XML-RPC en modo de GSSAPI" - -msgid "Priority" -msgstr "Prioridad" - -msgid "Priority (order)" -msgstr "Prioridad (orden)" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" -"Prioridad de la política (a mayor número corresponde una política menor)" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" -"Prioridad de la regla (el número más alto significa la prioridad más baja" - -msgid "Privilege" -msgstr "Privilegio" - -msgid "Privilege Settings" -msgstr "Configuración de privilegios" - -msgid "Privilege Withdrawn" -msgstr "Retirada de privilegios" - -msgid "Privilege description" -msgstr "" -" \n" -" Eliminar un servicio de la IPA." - -msgid "Privilege name" -msgstr " Añadir un nuevo servicio de la nueva IPA." - -msgid "Privileges" -msgstr " Objeto de servicio." - -msgid "Profile ID" -msgstr "ID del Perfil" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"ID de perfil '%(cli_value)s' no coincide con los datos de perfil " -"'%(file_value)s'" - -msgid "Profile ID for referring to this profile" -msgstr "ID de Perfil para referirse a este perfil" - -msgid "Profile configuration" -msgstr "Configuración de perfil" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Perfil de configuración guardado en el archivo '%(file)s'" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "Los datos del perfil especifican profileId múltiples veces: %(values)s" - -msgid "Profile description" -msgstr "Descripción del perfil" - -msgid "Prompt for the username" -msgstr "Pedir el nombre de usuario" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" -"Pedir el nombre de usuario cuando múltiples identidades están mapeadas a un " -"certificado" - -msgid "Prompt to set the user password" -msgstr "Solicita establecer la contraseña de usuario" - -msgid "Prospective" -msgstr "Prospectivo" - -msgid "Provisioning" -msgstr "Aprovisionamiento" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "La clave pública puede ser especificada solo para la bóveda asimétrica" - -msgid "Public key specified multiple times" -msgstr "Clave pública especificada múltiples veces" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" -"El código QR es más grande que el de la salida tty. Por favor modifique el " -"tamaño de su terminal." - -msgid "Quantity" -msgstr "Cantidad" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"La solicitud devolvió más resultados que el límite de tamaño configurado. " -"Mostrando los primeros resultados ${counter}." - -msgid "Quick Links" -msgstr "Enlaces rápidos" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Modo silencioso. Sólo se muestran los errores." - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "RADIUS Server" -msgstr "Servidor RADIUS" - -msgid "RADIUS Servers" -msgstr "Servidores RADIUS" - -msgid "RADIUS proxy server" -msgstr "Servidor proxy RADIUS" - -msgid "RADIUS proxy server name" -msgstr "Nombre del servidor proxy RADIUS" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "Servidor proxy RADIUS con nombre \"%s\" ya existe" - -msgid "RADIUS proxy servers" -msgstr "Servidores proxy RADIUS" - -msgid "REST API is not logged in." -msgstr "REST API no ha iniciado sesión." - -msgid "Random password" -msgstr "Contraseña aleatoria" - -msgid "Range name" -msgstr "Nombre del intervalo" - -msgid "Range type" -msgstr "Tipo de intervalo" - -#, python-format -msgid "Raw %s records" -msgstr "Registros brutos %s" - -msgid "Raw target filter" -msgstr "Filtro objetivo en bruto" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" -"El valor crudo de un registro DNS fue establecido siempre por la opción " -"\"%(name)s\"" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Restablecida la confianza al dominio \"%(value)s\"" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" -"Volver a sincronizar el cache de derechos local con el servidor de derechos." - -msgid "Realm Domains" -msgstr "Dominios Reino" - -msgid "Realm administrator password should be specified" -msgstr "Debería especificarse la contraseña del administrador del reino" - -msgid "Realm domains" -msgstr "Dominios reino" - -msgid "Realm name" -msgstr "Nombre de reino " - -msgid "Realm-domain mismatch" -msgstr "Flata de coincidencia de dominio reino" - -msgid "Reason" -msgstr "Motivo" - -msgid "Reason for Revocation" -msgstr "Motivo de la revocación" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Motivo por el cual el certificado ha sido revocado (0-10)" - -msgid "Rebuild auto membership" -msgstr "Reconstruir auto membresía" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "Número máximo de acuerdo recomendados por replica sobrepasado" - -msgid "Record Type" -msgstr "Tipo de Registro" - -msgid "Record creation failed." -msgstr "Falló la creación del registro." - -msgid "Record data" -msgstr "Registrar datos" - -msgid "Record name" -msgstr "Nombre de registro" - -msgid "Record not found." -msgstr "No se encontró el registro." - -msgid "Record type" -msgstr "Tipo de registro" - -msgid "Records" -msgstr "Registros" - -msgid "Records for DNS Zone" -msgstr "Los registros para la zona DNS" - -msgid "Redirection" -msgstr "Redirección " - -msgid "Refresh" -msgstr "Actualizar" - -msgid "Refresh list of the domains associated with the trust" -msgstr "Refrescar la lista de dominios asociados con la confianza" - -msgid "Refresh the page." -msgstr "Refrescar la página." - -msgid "Register to the entitlement system." -msgstr "Registro al sistema de derechos." - -msgid "Registration password" -msgstr "Contraseña de registro" - -msgid "Regular Expression" -msgstr "Expresión regular" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"El nombre relativo de registro '%(record)s' contiene como sufijo el nonbre " -"de zona '%(zone)s', que resulta de FQDN '%(fqdn)s'. Esto es normalmente una " -"equivocación causada por un punto perdido al final de la especificación del " -"nombre." - -msgid "Relative weight for entries with the same priority." -msgstr "Peso relativo de las entradas con la misma prioridad." - -msgid "Relative weight for server services (counts per location)" -msgstr "" -"Pero relativo para los servicios del servidor (cuentas por localización)" - -msgid "Reload current settings from the server." -msgstr "Recargar ajustes actuales desde el servidor." - -msgid "Reload the browser." -msgstr "Recargar el navegador." - -msgid "Remote IPA server hostname" -msgstr "Nombre de host del servidor IPA remoto" - -msgid "Remote server name" -msgstr "Nombre del servidor remoto" - -msgid "Remove" -msgstr "Borrar" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" -"Borrar los registros A, AAAA, SSHFP y PTR del host(s) gestionado por IPA DNS" - -msgid "Remove Kerberos Alias" -msgstr "Quitar Alias Kerberos" - -msgid "Remove a manager to the user entry" -msgstr "Borra un gestor a la entrada de usuario" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "Quitar un permiso para una delegación de acceso a zona por reenvío." - -msgid "Remove a permission for per-zone access delegation." -msgstr "Quita un permiso para una delegación de acceso por zona." - -msgid "Remove all principals in this realm" -msgstr "Quite todos los principales en este ámbito" - -msgid "Remove an option from Sudo Rule." -msgstr "Quitar una opción de la Regla Sudo." - -msgid "Remove certificates from a service" -msgstr "Quitar certificados de un servicio" - -msgid "Remove certificates from host entry" -msgstr "Borra certificados de una entrada de host" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." - -msgid "Remove entries from DNS" -msgstr "Eliminar entradas de DNS" - -msgid "Remove from CRL" -msgstr "Borrar de CRL" - -msgid "Remove group for Sudo to execute as." -msgstr "Quitar grupo para Sudo a ejecutar como." - -msgid "Remove hold" -msgstr "Quitar espera" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Quitar hosts y grupos de hosts afectados por Regla Sudo." - -msgid "Remove hosts that can manage this host." -msgstr "Borrar hosts que puede manejar este host." - -msgid "Remove hosts that can manage this service." -msgstr "Borrar hosts que puedan gestionar este servicio." - -msgid "Remove information about the domain associated with the trust." -msgstr "Borrar información sobre el dominio asociado con la confianza." - -msgid "Remove members from Sudo Command Group." -msgstr "Quitar miembros de un Grupo de Comando Sudo." - -msgid "Remove members from a group." -msgstr "Eliminar miembro desde un grupo." - -msgid "Remove members from a hostgroup." -msgstr "Borrar miembros de un grupo de host." - -msgid "Remove members from a netgroup." -msgstr "Borrar miembros de un grupo de red." - -msgid "Remove members from a permission." -msgstr "Borrar miembros desde un permiso." - -msgid "Remove members from a role." -msgstr "Borrar miembros de un rol." - -msgid "Remove members from an HBAC service group." -msgstr "Borrar miembros de un grupo de servicio HBAC." - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." - -msgid "Remove one or more certificates to the user entry" -msgstr "Borra uno o más certificados de la entrada de usuario" - -msgid "Remove permissions from a privilege." -msgstr "Borrar permisos de un privilegio." - -msgid "Remove principal alias from a host entry" -msgstr "Borra alias principal de la entrada de host" - msgid "Remove principal alias from a service" msgstr "Borrar alias principal de un servicio" -msgid "Remove principal alias from the user entry" -msgstr "Borra el alias principal de la entrada de usuario" - -msgid "Remove privileges from a role." -msgstr "Borrar privilegios de un rol." - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Borrar servicio y grupos de servicio de una regla HBAC." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Borrar hosts objetivos y grupos de host de una regla HBAC." - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" -"Borrar hosts y grupos de host objetivo de una regla de Mapa de Usuario " -"SELinux." - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Quitar usuarios y grupos afectados por Regla Sudo." - -msgid "Remove users and groups for Sudo to execute as." -msgstr "Quitar usuarios y grupos para Sudo a ejecutar como." - -msgid "Remove users and groups from an HBAC rule." -msgstr "Borrar usuarios y grupos de una regla HBAC." - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." - -msgid "Remove users that can manage this token." -msgstr "Quitar usuarios que puedan manejar esta ficha." - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Borrados alias del host \"%(value)s\"" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Borrados alias del usuario \"%(value)s\"" - #, python-format msgid "Removed aliases to the service principal \"%(value)s\"" msgstr "Borrados alias al servicio principal \"%(value)s\"" -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Borrados certificados del host \"%(value)s\"" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Quitados certificados del servicio principal \"%(value)s\"" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Condición(es) eliminada(s) de «%(value)s»" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Quitada opción \"%(option)s\" de Sudo Rule \"%(rule)s\"" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Quitado permiso de sistema \"%(value)s\"" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "Quitando %(servers)s desde la copia de topología, por favor espere..." - -#, c-format -msgid "Removing principal %s\n" -msgstr "Eliminando %s principales\n" - -msgid "Rename" -msgstr "Cambiar el nombre de" - -msgid "Rename an ACI." -msgstr "Renombrar un ACI." - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Cambie el nombre del %(ldap_obj_name)s objeto" - -msgid "Rename the permission object" -msgstr "Renombrar el permiso del objeto" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI renombrado a \"%(value)s\"" - -msgid "Replacement" -msgstr "Reemplazo" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"La replica de la clave maestra DNSSEC está activa. Desinstalarla podría " -"romper su sistema DNS. Por favor deshabilite o reemplace la clave maestra " -"DNSSEC primero." - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "Acuerdo de replicación para %(hostname)s no encontrado" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "La replica de la topología con sufijo \"%(suffix)s\" contiene errores." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "La repica de la topologia de sufijo \"%(suffix)s\" está en orden." - -msgid "Report PKINIT status on the IPA masters" -msgstr "Informa el estado PKINIT sobre los másters IPA" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "Fallo en petición con estado %(status)s: %(reason)s" - -msgid "Request id" -msgstr "Id de la petición" - -msgid "Request is missing \"method\"" -msgstr "La petición está con \"method\" desaparecido" - -msgid "Request is missing \"params\"" -msgstr "La petición está con \"params\" desaparecido" - -msgid "Request must be a dict" -msgstr "La petición debe ser un diccionario" - -msgid "Request status" -msgstr "Estado de la petición" - -msgid "Required field" -msgstr "Campo requerido" - -msgid "Requires pre-authentication" -msgstr "Requiere autenticación previa" - -msgid "Reset" -msgstr "Resetear" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "Reajustar la entrada de política Kerberos a los valores por defecto." - -msgid "Reset OTP" -msgstr "Reajustar OTP" - -msgid "Reset Password" -msgstr "Restablecer contraseña" - -msgid "Reset Password and Log in" -msgstr "Resetear la Contraseña y Acceder" - -msgid "Resolve a host name in DNS." -msgstr "Resolver un nombre de host en DNS." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "Resuelve un nombre de host en DNS. (Obsoleto)" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" -"Resolver los identificadores de seguridad de los usuario y grupos en los " -"dominios de confianza" - -msgid "Response from CA was not valid JSON" -msgstr "La respuesta desde CA no era JSON válido" - -msgid "Restore" -msgstr "Restaurar" - -msgid "Result" -msgstr "Resultado" - -msgid "Result of simulation" -msgstr "Resultado de la simulación" - -msgid "Result of the command" -msgstr "Resultado del comando" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Los resultados se encuentran truncados, intente realizar una búsqueda más " -"específica" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" -"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" -"Los resultados deberían contener solo atributos de clave primaria " -"(\"principal\")" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" -"Los resultados deberían contener solo atributo de clave primaria " -"(\"sudocmdgroup-name\")" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" -"Los resultados deberían contener solo el atributo de clave primaria " -"(\"sudorule-name\")" - -msgid "Retries" -msgstr "Reintentos" - -msgid "Retrieve an existing certificate." -msgstr "Recuperar un certificado existente." - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Recuperar e imprimir todos los atributos del servidor. Afecta a la salida " -"del comando." - -msgid "Retrieve current keys without changing them" -msgstr "Recupera las claves actuales sin cambiarlas" - -msgid "Retrieve the entitlement certs." -msgstr "Recuperar el certificado del derecho." - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Fallo en recuperación de la cadena CA cert: %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Fallo en la recuperación del estado CA con estado %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Falló la obtención del estado de CA: %s" - -msgid "Retry" -msgstr "Reintentar" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "Reintentando con el método de recuperacióm pre-4.0 keytab...\n" - -msgid "Return to the main page and retry the operation" -msgstr "Volver a la página principal y reintentar la operación" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" -"Registro reverso para dirección IP %(ip)s ya existe en la zona reversa " -"%(zone)s." - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" -"La zona reversa %(name)s requiere exactamente %(count)d direcciones IP " -"componentes, %(user_count)d dado" - -msgid "Reverse zone IP network" -msgstr "Zona reversa de red IP" - -msgid "Revert" -msgstr "Revertir" - -msgid "Revocation reason" -msgstr "Motivo de la revocación" - -msgid "Revoke" -msgstr "Revocar" - -msgid "Revoke a certificate." -msgstr "Revocar un certificado." - -msgid "Revoked" -msgstr "Revocado" - -msgid "Rights" -msgstr "Derechos" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "Derechos a conceder (read, search, compare, write, add, delete, all)" - -msgid "Role" -msgstr "Rol" - -msgid "Role Settings" -msgstr "Configuración de rol" - -msgid "Role name" -msgstr "Nombre de rol" - -msgid "Role status" -msgstr "Estado rol" - -msgid "Roles" -msgstr " Roles" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"El dominio raíz de la confianza está siempre habilitado para la confianza " -"existente" - -msgid "Rule name" -msgstr "Nombre de la regla" - -msgid "Rule status" -msgstr "Estatus de reglas" - -msgid "Rule type" -msgstr "Tipo de regla" - -msgid "Rule type (allow)" -msgstr "Tipo de regla (permitir)" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" -"Regla usada para comprobar si un certificado puede ser usado para " -"autenticación" - -msgid "Rule used to map the certificate with a user entry" -msgstr "Regla usada para mapear el certificado con una entrada de usuario" - -msgid "Rules" -msgstr "Reglas" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "Reglas para probar. Si no se especifica, - se asume que habilitado" - -msgid "Run Commands" -msgstr "Ejecutar comandos" - -msgid "Run Test" -msgstr "Ejecutar Prueba" - -msgid "Run as a user" -msgstr "Ejecutar como un usuario" - -msgid "Run as any user within a specified group" -msgstr "Ejecutar como cualquier usuario dentro de un grupo especificado" - -msgid "Run with the gid of a specified POSIX group" -msgstr "Ejecutar con la gid de un grupo POSIX especificado" - -msgid "RunAs External Group" -msgstr "Grupo externo RunAs" - -msgid "RunAs External User" -msgstr "RunAs de usuarios externos" - -msgid "RunAs Group category" -msgstr "RunAs Grupo categoría" - -msgid "RunAs Group category the rule applies to" -msgstr "RunAs Grupo categoría la regla aplica a" - -msgid "RunAs Groups" -msgstr "Grupos RunAs" - -msgid "RunAs User category" -msgstr "Categoría de Usuario RunAs" - -msgid "RunAs User category the rule applies to" -msgstr "RunAs Usuario categoría la regla aplica a " - -msgid "RunAs Users" -msgstr "RunAs Usuarios" - -msgid "SASL Bind failed\n" -msgstr "Falló SASL Bind\n" - -msgid "SELinux User" -msgstr "Usuario SELinux" - -msgid "SELinux User Map" -msgstr "Mapa de Usuario SELinux" - -msgid "SELinux User Map rule" -msgstr "Regla Mapa de Usuario SELinux" - -msgid "SELinux User Map rules" -msgstr "Reglas Mapa de Usuario SELinux" - -msgid "SELinux User Maps" -msgstr "Mapas de Usuario SELinux" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" -"Usuario SELinux %(user)s no encontrado en la lista de pedidos (en config)" - -msgid "SELinux user map list not found in configuration" -msgstr "Lista de mapeo de usuario SELinux no encontrado en la configuración" - -msgid "SHA1 Fingerprint" -msgstr "Huella digital SHA1" - -msgid "SID" -msgstr "SID" - -msgid "SID blacklist incoming" -msgstr "Lista negra de SID entrante" - -msgid "SID blacklist outgoing" -msgstr "Lista negra de SID saliente" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"El SID para el nombre de dominio de confianza especificado podría no ser " -"encontrado. Por favor especifique directamente el SID usando la opción dom-" -"sid." - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "SID no es reconocido como un SID válido para el dominio de confianza" - -msgid "SID is not valid" -msgstr "el SID no es válido" - -msgid "SMB service NetBIOS name" -msgstr "Nombre del servicio SMB de NetBIOS" - -msgid "SOA class" -msgstr "Clase SOA" - -msgid "SOA expire" -msgstr "Expirar SOA" - -msgid "SOA minimum" -msgstr "Mínimo SOA" - -msgid "SOA record class" -msgstr "Clase de registro SOA " - -msgid "SOA record expire time" -msgstr "tiempo de expiración de registro SOA" - -msgid "SOA record refresh time" -msgstr "registro SOA tiempo de actualización" - -msgid "SOA record retry time" -msgstr "tiempo de reintento de " - -msgid "SOA record serial number" -msgstr "Número de serie de registro SOA" - -msgid "SOA refresh" -msgstr "Actualizar SOA" - -msgid "SOA retry" -msgstr "Reintentar SOA" - -msgid "SOA serial" -msgstr "Serie SOA" - -msgid "SSH public key" -msgstr "Clave pública SSH" - -msgid "SSH public key fingerprint" -msgstr "Huella digital de clave pública SSH" - -#, python-format -msgid "Same as --%s" -msgstr "Lo mismo que --%s" - -msgid "Save" -msgstr "Guardar" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "El esquema está actualizado (FP '%(fingerprint)s', TTL %(ttl)s s)" - -msgid "Search" -msgstr "Búsqueda" - -msgid "Search Options" -msgstr "Opciones de Búsqueda" - -msgid "Search domains of the trust" -msgstr "Buscar dominios de confianza" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "Búsqueda de %1$s en rootdse falló con error %2$d\n" - -msgid "Search for CAs." -msgstr "Búsqueda de CAs." - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Buscar Reglas de Mapeo de Identidad de Certificado." - -msgid "Search for Certificate Profiles." -msgstr "Búsqueda de Certificados de Perfiles" - -msgid "Search for Class of Service entry" -msgstr "Búsqueda de entrada Class of Service" - -msgid "Search for DNS forward zones." -msgstr "Buscar zonas de reenvío DNS." - -msgid "Search for DNS resources." -msgstr "Buscar recursos DNS." - -msgid "Search for DNS zones (SOA records)." -msgstr "Buscar zonas DNS (registros SOA)." - -msgid "Search for HBAC rules." -msgstr "Buscar reglas HBAC." - -msgid "Search for HBAC services." -msgstr "Buscar un servicio HBAC." - -msgid "Search for IPA locations." -msgstr "Buscar localizaciones IPA." - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "Búsqueda de IPA namingContext fallada con error %d \n" - -msgid "Search for IPA servers." -msgstr "Buscar servidores IPA." - -msgid "Search for IPA services." -msgstr "Buscar servicios IPA." - -msgid "Search for OTP token." -msgstr "Búsqueda de ficha OTP." - -msgid "Search for RADIUS proxy servers." -msgstr "Búsqueda de servidores proxy RADIUS." - -msgid "Search for SELinux User Maps." -msgstr "Búsqueda de Mapas de Usuario SELinux." - -msgid "Search for Sudo Command Groups." -msgstr "Buscar Grupos de Comando Sudo." - -msgid "Search for Sudo Commands." -msgstr "Buscar Comandos Sudo." - -msgid "Search for Sudo Rule." -msgstr "Buscar Regla Sudo." - -msgid "Search for a netgroup." -msgstr "Buscar un grupo de red." - -msgid "Search for a self-service permission." -msgstr "Buscar un auto servicio de permiso." - -msgid "Search for an HBAC service group." -msgstr "Buscar un grupo de servicio HBAC." - -msgid "Search for an automount key." -msgstr "Buscar una clave de automontaje." - -msgid "Search for an automount location." -msgstr "Buscar una localización de automontaje." - -msgid "Search for an automount map." -msgstr "Buscar un mapa de automontaje." - -msgid "Search for delegations." -msgstr "Buscar delegaciones." - -msgid "Search for entitlement accounts." -msgstr "Búsqueda por cuentas de derechos." - -msgid "Search for forward zones only" -msgstr "Buscar zonas de reenvío sólo" - -msgid "Search for group password policies." -msgstr "Buscar grupo de políticas de contraseña." - -msgid "Search for groups." -msgstr "Buscar grupos." - -msgid "Search for hostgroups." -msgstr "Buscar grupos de host." - -msgid "Search for hosts." -msgstr "Buscar hosts." - -msgid "Search for permissions." -msgstr "Buscar permisos." - -msgid "Search for privileges." -msgstr "Buscar privilegios." - -msgid "Search for ranges." -msgstr "Buscar intervalos." - -msgid "Search for roles." -msgstr "Buscar roles." - -msgid "Search for services with these managed by hosts." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -msgid "Search for services without these managed by hosts." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "Search for trusts." -msgstr "Búsqueda de confianzas." - -msgid "Search for users." -msgstr "Buscar usuarios." - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Los resultados de la búsqueda han sido truncados: %(reason)s" - -msgid "Search scope" -msgstr "Alcance de búsqueda" - -msgid "Search size limit" -msgstr "Límite del tamaño de la búsqueda" - -msgid "Search time limit" -msgstr "Buscar límite de tiempo" - -msgid "Second Code" -msgstr "Segundo Código" - -msgid "Seconds Latitude" -msgstr "Latitud en segundos" - -msgid "Seconds Longitude" -msgstr "Segundos de Longitud" - -msgid "Secret" -msgstr "Secreto" - -msgid "Security Identifier" -msgstr "Identificador de Seguridad" - -msgid "Security Identifiers (SIDs)" -msgstr "Identificadores de Seguridad (SIDs)" - -msgid "Select All" -msgstr " Seleccionar todo" - -msgid "Select entries to be removed." -msgstr "Las entradas seleccionadas han sido quitadas." - -msgid "Selector" -msgstr "Selector" - -msgid "Self" -msgstr "Self" - -msgid "Self Service Permission" -msgstr "Auto Servicio de Permiso" - -msgid "Self Service Permissions" -msgstr "Permisos de autoservicio" - -msgid "Self-service name" -msgstr "Auto-servicio de nombres" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"La semántica de %(label)s fue cambiada. %(current_behavior)s\n" -"%(hint)s" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" -"Lista separada por punto y coma de direcciones IP o redes que tiene " -"permitido enviar peticiones" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" -"Lista separada por punto y coma de direcciones IP o redes que tiene " -"permitido transferir la zona" - -msgid "Serial" -msgstr "Serie" - -msgid "Serial Number" -msgstr "Número de serie" - -msgid "Serial Number (hex)" -msgstr "N.º de serie (hex.)" - -msgid "Serial number" -msgstr "Número de serie" - -msgid "Serial number (hex)" -msgstr "N.º de serie (hex.)" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "Número de serie en decimales, o hexadecimales, si tiene un prefijo 0x" - -msgid "Server" -msgstr "Servidor" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "El servidor \"%(srv)s\" tiene %(n)d acuerdos con servidores:" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" -"El servidor %(srv)s no puede contactar con los servidores: %(replicas)s" - -msgid "Server Name" -msgstr "Nombre de servidor" - -msgid "Server has already been deleted" -msgstr "El servidor ya ha sido borrado" - -msgid "Server location" -msgstr "Localización de servidor" - -msgid "Server name" -msgstr "Nombre del servidor" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "El nombre del servidor no se ha suministrado y es indisponible\n" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Borrado del servidor abortado: %(reason)s." - -msgid "Server state" -msgstr "Estado del servidor" - -msgid "Server will check DNS forwarder(s)." -msgstr "El servidor revisará los \"DNS forwarder(s)\"." - -msgid "Servers" -msgstr "Servidores" - -msgid "Servers details:" -msgstr "Detalles de los servidores:" - -msgid "Servers in location" -msgstr "Servidores en localización" - -msgid "Servers that belongs to the IPA location" -msgstr "Servidores que pertenecen a la localización IPA" - -msgid "Service" -msgstr "Servicio" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"El servicio %(service)s requiere ser reiniciado sobre el servidor IPA " -"%(server)s para aplicar los cambios de configuración." - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" -"El servicio '%(service)s' no se encontró en la base de datos de Kerberos" - -msgid "Service Certificate" -msgstr "Certificado de servicio" - -msgid "Service Groups" -msgstr " Búsqueda de servicios HBAC." - -msgid "Service Settings" -msgstr "Configuración del servicio" - -msgid "Service category" -msgstr " Añadir servicios a una regla de HBAC" - -msgid "Service category the rule applies to" -msgstr "Categoría de servicio a la que se aplica la regla" - -msgid "Service group name" -msgstr "" -" Desactivar la tecla de Kerberos, certificado SSL y todos los servicios " -"de un host." - -msgid "Service name" -msgstr "% (Count) d HBAC servicios encontrados" - -msgid "Service principal" -msgstr " Búsqueda de servicios IPA" - -msgid "Service principal alias" -msgstr "Alias principal del servicio" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Principal del servicio para este certificado (p.ej. HTTP/prueba.ejemplo.com)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"El servicio principal no tiene la forma de servicio/nombre de equipo " -"totalmente calificado: %(reason)s" - -msgid "Service principal is required" -msgstr "Se requiere el servicio principal" - -msgid "Service relative weight" -msgstr "Peso relativo del servicio" - -msgid "Service weight" -msgstr "Peso del servicio" - -msgid "Services" -msgstr "Sevicios HBAC" - -msgid "Session error" -msgstr "Error de sesión" - -msgid "Set" -msgstr "Definir" - -msgid "Set OTP" -msgstr "Establecer OTP" - -msgid "Set a user's password." -msgstr "Fijar una contraseña de usuario." - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" -"Establecer un atributo a un par nombre y valor. El formato es attr=value. \n" -"Para los atributos de valor múltiple, el comando sustituye los valores ya " -"presentes." - -msgid "Set enabled/hidden state of a server." -msgstr "Establecer estado habilitado/escondido de un servidor." - -msgid "Settings" -msgstr "Configuración" - -msgid "Shared secret for the trust" -msgstr "Secreto compartido para la confianza" - -msgid "Show" -msgstr "Mostrar" - -msgid "Show IPA server." -msgstr "Mostrar servidor IPA." - -msgid "Show Results" -msgstr "Mostrar Resultados" - -msgid "Show all loaded plugins." -msgstr "Mostrar todos los plugins cargados." - -msgid "Show details" -msgstr "Mostrar detalles" - -msgid "Show environment variables." -msgstr "Mostrar variables de entorno." - -msgid "Show global trust configuration." -msgstr "Mostrar la configuración de confianza global." - -msgid "Show role status on a server" -msgstr "Muestra el rol de estado sobre un servidor" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Muestra la configuración actual del Mapeo de Identidad de Certificado." - -msgid "Show the current OTP configuration." -msgstr "Mostrar la configuración OTP actual." - -msgid "Show the current configuration." -msgstr "Muestra la configuración actual" - -msgid "Show the current global DNS configuration." -msgstr "Mostrar la configuración global DNS actual." - -msgid "Show the list of permitted encryption types and exit" -msgstr "Mostrar la lista de los tipos cifrados permitidos y salir" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Mostrando ${start} a ${end} de ${total} entradas." - -msgid "Simple bind failed\n" -msgstr "¡Falló vinculación sencilla!\n" - -msgid "Simulate use of Host-based access controls" -msgstr "Simular el uso de controles de acceso basados en Host" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" -"Puesto que IPA no gestiona los registros DNS, asegúrese de que DNS está " -"configurado para resolver el dominio '{domain}' desde los hosts IPA y vuelta." - -msgid "Size" -msgstr "Tamaño" - -msgid "Size Limit" -msgstr "Tamaño límite" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "Tamaña del rango de ID reservado para los dominios de confianza" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Saltar una comprobación si el último maestro CA o servidor DNS se ha quitado" - -msgid "Skip host check" -msgstr "Salta la comprobación de host" - -#, python-format -msgid "Skipped %(key)s" -msgstr "%(key)s omitida" - -#, python-format -msgid "Skipped %(map)s" -msgstr "%(map)s omitido" - -msgid "Some entries were not deleted" -msgstr "Algunas entradas no fueron borradas" - -msgid "Some operations failed." -msgstr "Algunas operaciones fallaron." - -msgid "Specified Commands and Groups" -msgstr "Comandos especificados y grupos" - -msgid "Specified Groups" -msgstr "Grupos especificados" - -msgid "Specified Hosts and Groups" -msgstr "Hosts y grupos especificados" - -msgid "Specified Services and Groups" -msgstr "Servicios y grupos especificados" - -msgid "Specified Users and Groups" -msgstr "Usuarios y grupos específicos" - -msgid "Specified trusted domain name could not be found." -msgstr "" -"El nombre especificado de dominio de confianza podría no ser encontrado." - -msgid "Specifies where to store keytab information." -msgstr "Especifica dónde almacenar la información de tabla de claves." - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "Especificar ${entity} externa" - -msgid "Split DNS record to parts" -msgstr "Divide registro DNS en partes" - -msgid "Stage" -msgstr "Escenario" - -msgid "Stage User" -msgstr "Escenario de Usuario" - -msgid "Stage Users" -msgstr "Escenario Usuarios" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Cuenta de usuario por etapas \"%(value)s\"" - -msgid "Standard Record Types" -msgstr "Tipos de Registro Estándar" - -msgid "State" -msgstr "Estado" - -msgid "State/Province" -msgstr "Estado / Provincia" - -msgid "Status" -msgstr "Estatus" - -msgid "Status of the role" -msgstr "Estado del rol" - -msgid "Store issued certificates" -msgstr "Almacén de certificados enviados" - -msgid "Street address" -msgstr "Dirección postal" - -msgid "Structured" -msgstr "Estructurado" - -msgid "Subject" -msgstr "Asunto" - -msgid "Subject DN" -msgstr "Sujeto DN" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "Sujeto DN ya está usado por CA '%s'" - -msgid "Subject Distinguished Name" -msgstr "Nombre Distinguido del Sujeto" - -msgid "Submit a certificate signing request." -msgstr "Enviar una petición de firma de certificado." - -msgid "Subtree" -msgstr "Subárbol" - -msgid "Subtree to apply ACI to" -msgstr "Subárbol al que aplicar ACI" - -msgid "Subtree to apply permissions to" -msgstr "Subárbol para aplicar permisos" - -msgid "Subtype" -msgstr "Subtipo" - -msgid "Success" -msgstr "Éxito" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Sudo Allow Command Groups" -msgstr "Sudo Permitir Grupos de Comando" - -msgid "Sudo Allow Commands" -msgstr "Comandos Allow de sudo" - -msgid "Sudo Command" -msgstr "Comando sudo " - -msgid "Sudo Command Group" -msgstr "Grupo de comando sudo" - -msgid "Sudo Command Groups" -msgstr "Grupos de comando sudo" - -msgid "Sudo Commands" -msgstr "Comandos de sudo" - -msgid "Sudo Deny Command Groups" -msgstr "Sudo Denegar Grupos de Comandos" - -msgid "Sudo Deny Commands" -msgstr "Comandos Deny de sudo" - -msgid "Sudo Option" -msgstr "Opción de sudo" - -msgid "Sudo Rule" -msgstr "Regla Sudo" - -msgid "Sudo Rules" -msgstr "Reglas Sudo" - -msgid "Sudo order" -msgstr "Orden Sudo" - -msgid "Superseded" -msgstr "Obsoleta" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Tipos de cifrado suportado\n" - -msgid "Synchronize an OTP token." -msgstr "Sincronice una ficha OTP" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Error de sintaxis:%(error)s " - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"La codificación del sistema debe ser UTF-8, '%(encoding)s' no está(n) " -"soportada(s). Ajuste LC_ALL=\"C.UTF-8\", o LC_ALL=\"\" y LC_CTYPE=\"C." -"UTF-8\"." - -msgid "TOTP Synchronization Window" -msgstr "Ventana de Sincronización TOTP" - -msgid "TOTP authentication Window" -msgstr "Ventana de autenticación TOTP" - -msgid "TOTP authentication time variance (seconds)" -msgstr "Variación del tiempo de autenticación TOTP (segundos)" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "Variación del tiempo de sincronización TOTP (segundos)" - -msgid "TOTP token / IPA server time difference" -msgstr "Ficha TOTP / Diferencia de hora del servidor IPA" - -msgid "Take a revoked certificate off hold." -msgstr "Tomar un certificado revocado de espera." - -msgid "Target" -msgstr "Meta" - -msgid "Target DN" -msgstr "DN objetivo" - -msgid "Target DN subtree" -msgstr "Sub-árbol DN objetivo" - -msgid "Target Uniform Resource Identifier" -msgstr "Identificador Uniforme de Recursos Objetivo" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "Identificador Uniforme de Recursos Objetivo de acuerdo al RFC 3986" - -msgid "Target group" -msgstr "Grupo elegido" - -msgid "Target host" -msgstr "Host objetivo" - -msgid "Target members of a group" -msgstr "Miembros objetivo de un grupo" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "Miembros objetivos de un grupo (establece memberOf targetfilter)" - -msgid "Target your own entry (self)" -msgstr "Dirija su propia entrada (usted)" - -msgid "Telephone Number" -msgstr "Número de teléfono" - -msgid "Test the ACI syntax but don't write anything" -msgstr "Probar la sintaxis pero no escribir nada" - -msgid "Text Data" -msgstr "Datos de texto" - -msgid "Text does not match field pattern" -msgstr "El texto no coincide con el patrón de campo" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"La opción --domain no puede ser usada junto con --add-domain o --del-domain. " -"Use --domain para especificar explícitamente la lista de todo el dominio, " -"para añadir/borrar dominios concretos, use --add-domain/del-domain." - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "El ACI para el permiso %(name)s no fue encontrado en %(dn)s " - -msgid "The IPA realm" -msgstr "El reinado IPA" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"El registro _kerberos TXT del dominio %(domain)s podría no ser creado " -"(%(error)s).\n" -"Esto puede suceder si la zona no es manejada por IPA. Por favor cree el " -"registro manualmente, conteniendo el siguiente valor: '%(realm)s'" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"El registro _kerberos TXT del dominio %(domain)s podría no ser quitado " -"(%(error)s).\n" -"Esto puede suceder si la zona no está manejada por IPA. Por favor quite el " -"registro manualmente." - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "La clave de montaje automático %(key)s con info %(info)s no existe" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "El certificado para %(ca)s no está disponible en este servidor." - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "El carácter %(char)r no está permitido." - -msgid "The default users group cannot be removed" -msgstr "El grupo de usuarios predeterminado no puede ser eliminado" - -msgid "The deny type has been deprecated." -msgstr "El tipo deny ha quedado obsoleto." - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "El dominio %s no es un dominio IPA ni un dominio de confianza." - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" -"El nombre de dominio del host objetivo o '.' si el servicio es decididamente " -"no disponible en este dominio" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" -"El dominio(s) \"%s\" no puede ser usado para aplicar la comprobación " -"altSecurityIdentities." - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "Los siguientes dominio no pertenecen a este reino: %(domains)s" - -msgid "The group doesn't exist" -msgstr "El grupo no existe" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "El '%s' no existe para añadirle un servicio." - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "El host fue añadido pero la actualización DNS falló por: %(reason)s" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "El nombre de host debe ser totalmente calificado:%s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "El nombre del equipo no debe ser: %s\n" - -msgid "The hostname or IP (with or without port)" -msgstr "El nombre de host o IP (con o sin puerto)" - -msgid "The hostname this reverse record points to" -msgstr "El nombre de host al que apunta este registro inverso" - -msgid "The hostname to register as" -msgstr "El nombre del equipo a ser registrado como" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" -"El par de claves, la información debe ser único. Un nombre clave %(key)s " -"con información %(info)s ya existe" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" -"El archivo keytab para añadir a la nueva clave (será creado si no existe)." - -msgid "The keytab file to remove the principcal(s) from" -msgstr "El fichero keytab fpara borrar el principal(s) desde" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" -"La regla de mapeo con altSecurityIdentities debería ser aplicada a un " -"dominio Active Directory de confianza pero ningún dominio fue asociado con " -"la regla." - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Los tipos mas comunes para este tipo de zona son: %s\n" - -msgid "The number of times to retry authentication" -msgstr "El número de veces para reintentar la autenticación" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "El valor de primary_key de la entrada, p.ej., «jperez» para un usuario" - -msgid "The principal for this request doesn't exist." -msgstr "El principal para esta petición no existe." - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"La principal para obtener una tabla de claves para (ex: ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"El principal para borrar desde keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" -"El reinado para el principal no coincide con el reinado para este servidor " -"IPA" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"El reino de los siguientes dominios podrían no ser detectados: %(domains)s. " -"Si estos dominios pertenecen a este reino, cree por favor un registro " -"_kerberos TXT que contenga \"%(realm)s\" en cada uno." - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"El esquema utilizado en el servidor LDAP. Los valores admitidos son RFC2307 " -"y RFC2307bis. El valor predeterminado es RFC2307bis" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"El criterio de búsqueda no fue bastante específico. Se esperaba 1 y se " -"encontró %(found)d." - -msgid "The secret used to encrypt data" -msgstr "El secreto usado para encriptar datos" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "El servicio puede autenticarse en nombre de un cliente" - -msgid "The topic or command name." -msgstr "Nombre de tópico o comando." - -msgid "The total timeout across all retries (in seconds)" -msgstr "" -"El tiempo de espera total después de todos los reintentos (en segundos)" - -msgid "The username attribute on the user object" -msgstr "El atributo username sobre el objeto usuario" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Este comando no puede ser usado para cambiar la asignación de ID para el " -"dominio IPA local. Ejecute `ipa help idrange` para más información" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Este comando se basa en la existencia del grupo \"editors\" pero este grupo " -"no h sido encontrado." - -msgid "This command requires root access" -msgstr "Este comando necesita acceso de usuario root" - -msgid "This entry already exists" -msgstr "Esta entrada ya existe" - -msgid "This entry cannot be enabled or disabled" -msgstr "Esta entrada no puede ser activada o desactivada" - -msgid "This entry is already a member" -msgstr "Esta entrada ya es un miembro" - -msgid "This entry is already disabled" -msgstr "Esta entrada ya está desactivada" - -msgid "This entry is already enabled" -msgstr "Esta entrada ya está habilitada" - -msgid "This entry is not a member" -msgstr "Esta entrada no es miembro" - -msgid "This group already allows external members" -msgstr "Este grupo ya acepta miembros externos" - -msgid "This group cannot be posix because it is external" -msgstr "Este grupo o puede ser posix porque es externo" - -msgid "This is already a posix group" -msgstr "Este ya es un grupo posix" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "Esto es ya un grupo posix y no puede ser convertido en uno externo" - -msgid "This may take some time, please wait ..." -msgstr "Esto puede tomar un poco mas de tiempo. Por favor espere ..." - -msgid "This page has unsaved changes. Please save or revert." -msgstr "Esta página tiene cambios sin guardar. Por favor, guardar o deshacer." - -msgid "Ticket expired" -msgstr "El ticket ha expirado" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "La política de entrada para %s podría no ser leída" - -msgid "Time Limit" -msgstr "Tiempo límite" - -msgid "Time limit of search in seconds" -msgstr "Tiempo máximo de búsqueda en segundos" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Tiempo límite de búsqueda en segundos (0 es ilimitado)" - -msgid "Time now" -msgstr "Ahora" - -msgid "Time to live" -msgstr "Tiempo para abandonar" - -msgid "Time to live for records at zone apex" -msgstr "Tiempo de vida de los registros en zona apéndice" - -msgid "Time to live for records without explicit TTL definition" -msgstr "Tiempo de vida para los registros sin definición explícita TTL" - -msgid "Timeout" -msgstr "Tiempo de espera" - -#, c-format -msgid "Timeout exceeded." -msgstr "Tiempo de espera superado." - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Para establecer confianza con Active Directory, el nombre de dominio y el " -"nombre de reino del servidor IPA deben coincidir" - -msgid "To get command help, use:" -msgstr "Para obtener ayuda sobre el comando, utilice:" - -msgid "Token ID" -msgstr "ID de ficha" - -msgid "Token description (informational only)" -msgstr "Descripción de la ficha (solo informativo)" - -msgid "Token hash algorithm" -msgstr "Algoritmo de ficha picada" - -msgid "Token model (informational only)" -msgstr "Ficha modelo (solo informativo)" - -msgid "Token secret (Base32; default: random)" -msgstr "Ficha secreto (Base32; predeterminado: random)" - -msgid "Token serial (informational only)" -msgstr "Ficha serie (solo informativa)" - -msgid "Token vendor name (informational only)" -msgstr "Ficha nombre de vendedor (solo informativo)" - -msgid "Topic commands:" -msgstr "Tema comandos:" - -msgid "Topic or Command" -msgstr "Tópico o Comando" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" -"La topologia no permite al servidor %(server)s replicar con servidores:" - -msgid "Topology is disconnected" -msgstr "La topología está desconectada" - -msgid "Total number of variables env (>= count)" -msgstr "Cantidad total de variables env (>= count)" - -msgid "True" -msgstr "Verdad" - -msgid "True if not all results were returned" -msgstr "Verdadero si no todos los resultados se devolvieron" - -msgid "True means the operation was successful" -msgstr "«Verdadero» significa que la operación fue exitosa" - -msgid "Trust" -msgstr "Confianza" - -msgid "Trust direction" -msgstr "Dirección de confianza" - -msgid "Trust status" -msgstr "Estado de confianza" - -msgid "Trust type" -msgstr "Tipo de confianza" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "Tipo de confianza (ad para Active Directory, predeterminado)" - -msgid "Trusted domain" -msgstr "Dominio de confianza" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"El dominio de confianza %(domain)s está incluido entre los dominios del " -"reino IPA realm. Necesita ser quitado antes de establecer la confianza. Vea " -"el comando \"ipa realmdomains-mod --del-domain\"." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"El dominio de confianza y la cuenta del administrador usan reinos diferentes" - -msgid "Trusted domains" -msgstr "Dominios de confianza" - -msgid "Trusted for delegation" -msgstr "Confiable para la delegación" - -msgid "Trusted to authenticate as user" -msgstr "Confiable pata autenticarse como usuario" - -msgid "Trusts" -msgstr "Confianzas" - -msgid "Two factor authentication (password + OTP)" -msgstr "Autenticación dos factores (contraseña + OTP)" - -msgid "Two-way trust" -msgstr "Confianza de dos sentidos" - -msgid "Type" -msgstr "Tipo" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "Tipo de objeto IPA (establece subtree y objectClass targetfilter)" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" -"Tipo de objeto IPA (usuario, grupo, host, grupo de host, servicio, grupo de " -"red, dns)" - -msgid "Type of the token" -msgstr "Tipo de ficha" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" -"Tipo de rango de ID de dominios de confianza, uno de los valores permitidos" - -msgid "UID" -msgstr "UID" - -msgid "UPN suffixes" -msgstr "Sufijos UPN" - -msgid "URI" -msgstr "URI" - -msgid "URL" -msgstr "URL" - -msgid "UUID" -msgstr "UUID" - -msgid "Unable to communicate with CMS" -msgstr "Incapaz de comunicar con CMS" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Incapaz de comunicar con CMS (estado %d)" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "No se puede crear un grupo privado. Un grupo de '%(group)s' ya existe." - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "No se puede determinar servidor de la IPA de%s\n" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Incapaz de determinar si el principal Kerberos %s ya existe. Use 'ipa user-" -"mod' para establecerlo manualmente." - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "No se puede determinar DN de root de%s\n" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" -"Incapaz de mostrar el código QR usando la codificación de salida " -"configurada. Por favor use la ficha URI para configurar su dispositivo OTP" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "No se puede habilitar SSL en LDAP\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "No se puede generar la cache de credenciales de Kerberos\n" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "Incapaz de inicializar la sesión STARTTLS\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "¡No puede iniciar biblioteca IDAP!\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"No se puede unir host: cache de credenciales de Kerberos no se encuentra\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"No se puede unir host: principal de usuario no se encuentra y contraseña de " -"host no se proporciona.\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"No se puede unir host: la inicialización de contexto de Kerberos falló\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "No es posible analizar los principales\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "No se puede analizar nombre principal\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Incapaz de analizar el principal: %1$s (%2$d)\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "No se puede eliminar la entrada\n" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" -"Incapaz de resolver el controlador de dominio para el dominio {domain}. " - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "Incapaz de ajustar LDAP_OPT_PROTOCOL_VERSION\n" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "Incapaz de fijar LDAP_OPT_X_SASL_NOCANON \n" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "Incapaz de ajustar LDAP_OPT_X_TLS_REQUIRE_CERT\n" - -msgid "Unable to verify write permissions to the AD" -msgstr "Incapaz de verificar los permisos de escritura al AD" - -msgid "Undelete a delete user account." -msgstr "Recuperar una cuenta de usuario borrada." - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Recuperada cuenta de usuario \"%(value)s\"" - -msgid "Unenroll this host from IPA server" -msgstr "Cancelar registro de host de servidor IPA" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Cancelación falló.\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Cancelación de registro exitoso.\n" - -msgid "Unique ID" -msgstr "ID única" - -msgid "Unknown" -msgstr "Desconocido" - -msgid "Unknown Error" -msgstr "Error Desconocido" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Opción desconocida: %(option)s" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Cuenta desbloqueada \" %(value)s \"" - -msgid "Unmatched" -msgstr "Desemparejado" - -msgid "Unprovision" -msgstr "Unprovision" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "Atributos no reconocidos: %(attrs)s" - -msgid "Unresolved rules in --rules" -msgstr "Eliminar miembro desde un grupo." - -msgid "Unrevoked" -msgstr "No revocado" - -msgid "Unsaved Changes" -msgstr "Cambios No Guardados" - -msgid "Unselect All" -msgstr "Anular selección" - -msgid "Unspecified" -msgstr "No especificada" - -msgid "Unsupported value" -msgstr "Valor no admitido" - -msgid "Update" -msgstr "Actualizar" - -msgid "Update DNS entries" -msgstr "Actualizar las entradas DNS" - -msgid "Update location and IPA server DNS records" -msgstr "Actualizar registros de ubicación y servidor IPA DNS" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"Actualización del registro del sistema '%(record)s' falló con error: " -"%(error)s" - -msgid "User" -msgstr "Usuario" - -msgid "User Group" -msgstr "Grupo Usuario" - -msgid "User Groups" -msgstr "Grupos de usuarios" - -msgid "User ID" -msgstr "ID de usuario" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Número de ID de usuario (el sistema le asignará uno si no se indica ninguno)" - -msgid "User Options" -msgstr "Opciones de Usuario" - -msgid "User attribute" -msgstr "Atributo de usuario" - -msgid "User category" -msgstr "Categoría de usuario" - -msgid "User category the rule applies to" -msgstr "Categoría de usuario al que se aplica la regla" - -msgid "User container" -msgstr "Contenedor de usuario" - -msgid "User group" -msgstr "Grupo de usuarios" - -msgid "User group ACI grants access to" -msgstr "El grupo de usuarios ACI permite el acceso a" - -msgid "User group to apply delegation to" -msgstr "Grupo de usuarios para solicitar a la delegación" - -msgid "User group to apply permissions to" -msgstr "Grupo de usuario a aplicar los permisos para" - -msgid "User group to apply permissions to (sets target)" -msgstr "Usuario de grupo a aplicar permisos (establece target)" - -msgid "User login" -msgstr "Ingreso de usuario" - -msgid "User logins" -msgstr "Accesos de usuario" - -msgid "User name" -msgstr "Nombre de usuario" - -msgid "User object class" -msgstr "Clase de objeto de usuario" - -msgid "User password" -msgstr "Contraseña de usuario" - -msgid "User search fields" -msgstr "Campos de búsqueda de usuario" - -msgid "User-friendly description of action performed" -msgstr "Descripción sencilla de la acción realizada" - -msgid "User-specified attributes to which the permission applies" -msgstr "Atributos especificados por el usuario a los que aplica el permiso" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" -"Atributos especificados por el usuario a los cuales no se les aplica " -"explícitamente el permiso" - -msgid "Username" -msgstr "Nombre de usuario" - -msgid "Users" -msgstr "Usuarios" - -msgid "Users allowed to create keytab" -msgstr "Los usuarios pueden crear keytab" - -msgid "Users allowed to retrieve keytab" -msgstr "Los usuarios pueden recuperar keytab" - -msgid "Valid Certificate Present" -msgstr "Presentar certificado válido" - -msgid "Validation error" -msgstr "Error de validación" - -msgid "Validity" -msgstr "Validez" - -msgid "Validity end" -msgstr "Validar final" - -msgid "Validity start" -msgstr "Validar inicio" - -msgid "Vault password" -msgstr "Contraseña de la bóveda" - -msgid "Vendor" -msgstr "Vendedor" - -msgid "Verify Password" -msgstr "Verificar Contraseña" - -msgid "Verify Principal Password" -msgstr "Verificar contraseña principal" - -msgid "Vertical Precision" -msgstr "Precisión vertical" - -msgid "Via Service" -msgstr "Vía de servicio" - -msgid "View" -msgstr "Ver" - -msgid "Warning" -msgstr "Aviso" - -msgid "Warning unrecognized encryption type.\n" -msgstr "Precaución tipo de encriptación no reconocido.\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "Advertencia de tipo de sal no reconocido.\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Advertencia: Tipo para convertir falló (#%d)⏎\n" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Advertencia: tipos salt no se aceptan con contraseñas aleatorias (ver opt.\n" - -msgid "Weight" -msgstr "Peso" - -msgid "Weight for server services" -msgstr "Peso para los servicios del servidor" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" -"Cuando se migra un grupo que ya existe en el dominio IPA se sobrescribe el " -"GID de grupo e informa como conseguido" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "Sí PKINIT está habilitado o deshabilitado" - -msgid "Whether to store certs issued using this profile" -msgstr "Si se almacenan los certificados enviados usando este perfil" - -msgid "Who" -msgstr "¿Quién?" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "Escribir certificado (chain if --chain used) a archivo" - -msgid "Write profile configuration to file" -msgstr "Escribir configuración de perfil a fichero" - -msgid "X.509 certificate chain" -msgstr "Cadena de certificado X.509" - -msgid "You may need to manually remove them from the tree" -msgstr "Usted puede necesitar borrarlo manualmente del árbol" - -msgid "You must enroll a host in order to create a host service" -msgstr "Debe registrar el equipo para poder generar un servicio de host" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Debe especificar las opciones tanto rid-base como secondary-rid-base " -"options, puesto que ipa-adtrust-install ya ha estado corriendo." - -msgid "You will be redirected to DNS Zone." -msgstr "Será redirigido a Zona DNS." - -msgid "Your session has expired. Please log in again." -msgstr "Su sesión ha expirado. Por favor acceda otra vez." - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Su confianza en %(domain)s se ha roto. Vuelva a creara ejecutando 'ipa trust-" -"add' otra vez." - -msgid "YubiKey slot" -msgstr "Espacio YubiKey" - -msgid "ZIP" -msgstr "Zona " - -msgid "Zone forwarders" -msgstr "Zona de expedidores" - -msgid "Zone name" -msgstr "Nombre de la zona" - -msgid "Zone name (FQDN)" -msgstr "Nombre de la zona (FQDN)" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "No se puede eliminar el registro de zona «%s»" - -msgid "Zone refresh interval" -msgstr "Intervalo de refresco de zona" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "access() sobre %1$s falló: errno = %2$d\n" - -msgid "algorithm value: allowed interval 0-255" -msgstr "valor del algoritmo: intervalo permitido 0-255" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "todos los maestros deben tener el rol %(role)s habilitado" - -msgid "an internal error has occurred" -msgstr "ha ocurrido un error interno" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "ha ocurrido un error interno en el servidor en '%(server)s'" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" -"respuesta a la consulta '%(owner)s %(rtype)s' tiene firmas DNSSEC " -"desaparecidas (sin datos RRSIG)" - -msgid "any of the configured servers" -msgstr "cualquiera de los servidores configurados" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api no tiene dicho espacio de nombres: '%(name)s'" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"es necesario como mínimo alguno de: tipo, filtro, subárbol, grupo de " -"destino, atributos, o miembro de " - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" -"al menos un valor igual al nombre canónico principal debe estar presente" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "atributo \"%s\" no permitido" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "los atributos attrs e included son mutuamente exclusivos" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "los atributos attrs e included/excluded son mutuamente exclusivos" - -msgid "automatically add the principal if it doesn't exist" -msgstr "si no existe, agregar automáticamente el principal" - -msgid "automount key" -msgstr "clave de automontaje" - -msgid "automount keys" -msgstr "claves de automontaje" - -msgid "automount location" -msgstr "localización automontaje" - -msgid "automount locations" -msgstr "localizaciones de automontaje" - -msgid "automount map" -msgstr "mapa de automontaje" - -msgid "automount maps" -msgstr "mapas de automontaje" - -msgid "basedn" -msgstr "basedn" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "Falló ber_init(), ¿control inválido?\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "ber_scanf() falló, incapaz de encontrar kvno ?!\n" - -msgid "bind password" -msgstr "asociar contraseña" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "puede ser a lo sumo%(len)d caracteres" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "puede ser a lo sumo de %(maxlength)d bytes" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "puede tener a lo sumo %(maxlength)d caracteres" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "puede ser como máximo %(maxvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "puede ser como mucho %(maxvalue)s" - -msgid "cannot be empty" -msgstr "no puede estar vacío" - -msgid "cannot be longer that {} characters" -msgstr "no puede ser mayor de {} caracteres" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "no se pudo conectar a '%(uri)s': %(error)s" - -msgid "cannot delete global password policy" -msgstr "no puede borrar la Política global de contraseña" - -msgid "cannot delete managed permissions" -msgstr "no puede borrar permisos gestionados" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"no puede borrar el dominio raíz de la confianza, use trust-del para borrarla " -"misma confianza" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"no puede deshabilitar el dominio raíz de la confianza, use trust-del para " -"borrar la confianza misma" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "no se puede abrir archivo de configuración %s\\n\n" - -msgid "cannot rename managed permissions" -msgstr "no puede renombrar permisos gestionados" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" -"no puede establecer bindtype para un permiso que se ha asignado a un " -"privilegio" - -msgid "cannot specify both raw certificate and file" -msgstr "no puede especificar un certificado RAW y un archivo" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" -"no puede especificar filtro de objetivo completo y filtro de objetivo extra " -"simultáneamente" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "no puede stat () del archivo de configuración%s\n" - -msgid "change collided with another change" -msgstr "la modificación choca con otra modificación diferente" - -msgid "change to a POSIX group" -msgstr "Cambiar a un grupo POSIX" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" -"cambio para soportar miembros externos no IPA desde dominios de confianza" - -#, c-format -msgid "child exited with %d\n" -msgstr "hijo terminó con %d\n" - -msgid "cn is immutable" -msgstr "cn es inmutable" - -msgid "comma-separated list of groups to add" -msgstr "listas separada por comas de grupos a añadir" - -msgid "comma-separated list of groups to remove" -msgstr "lista separada por comas de grupos a quitar" - -msgid "comma-separated list of host groups to add" -msgstr "lista separada por comas de grupos de host a añadir" - -msgid "comma-separated list of host groups to remove" -msgstr "lista separada por comas de grupos de host a quitar" - -msgid "comma-separated list of hosts to add" -msgstr "lista separada por comas de hosts a añadir" - -msgid "comma-separated list of hosts to remove" -msgstr "lista separada por comas de hosts a quitar" - -msgid "comma-separated list of privileges to add" -msgstr "lista separada por comas de privilegios a añadir" - -msgid "comma-separated list of privileges to remove" -msgstr "lista separada por comas de privilegios a borrar" - -msgid "comma-separated list of sudo command groups to add" -msgstr "lista separada por comas de grupos de comandos sudo a añadir" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "lista separada por comas de grupos de comandos sudo a quitar" - -msgid "comma-separated list of sudo commands to add" -msgstr "lista separada or comas de comandos sudo a añadir" - -msgid "comma-separated list of sudo commands to remove" -msgstr "lista separada por comas de comandos sudo a quitar" - -msgid "comma-separated list of users to add" -msgstr "lista separada por comas de usuarios a añadir" - -msgid "comma-separated list of users to remove" -msgstr "lista separada por comas de usuarios a quitar" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "comando '%(name)s' toma la mayoria %(count)d argumento" -msgstr[1] "comando '%(name)s' toma la mayoría %(count)d argumentos" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "comando '%(name)s' no toma argumentos" - -msgid "commands for controlling sudo configuration" -msgstr "comandos para controlar la configuración sudo" - -msgid "configuration options" -msgstr "opciones de configuración" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "no se encuentra la entrada (%(container)s) de contenedor" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "curl_slist_append() falló para valor: '%s'\n" - msgid "delegation" msgstr "delegación" msgid "delegations" msgstr "delegaciones" -msgid "description" -msgstr "descripción" +msgid "Delegations" +msgstr "Delegaciones" -msgid "did not receive Kerberos credentials" -msgstr "no se ha recibido ninguna credencial de Kerberos" - -msgid "does not match any of accepted formats: " -msgstr "no coincide con ninguno de los formatos aceptados: " - -msgid "domain" -msgstr "dominio" - -msgid "domain is not configured" -msgstr "el dominio no está configurado" +msgid "Delegation" +msgstr "Delegación" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" -"el nombre de dominio '%(domain)s' debería ser normalizado a: %(normalized)s" - -msgid "domain name cannot be longer than 255 characters" -msgstr "el nombre de dominio no puede ser mas largo de 255 caracteres" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "cada elemento ACL debe estar terminado con un punto y coma" - -msgid "empty DNS label" -msgstr "etiqueta DNS vacía" - -msgid "empty filter" -msgstr "Vaciar filtro" - -msgid "entries" -msgstr "entradas" - -msgid "entry" -msgstr "entrada" +msgid "Added delegation \"%(value)s\"" +msgstr "Delegación añadida \"%(value)s\"" #, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "error de clasificación para el transporte de datos XML-RPC: %(error)s " +msgid "Deleted delegation \"%(value)s\"" +msgstr "Delegación eliminada \"%(value)s\"" #, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "error sobre el servidor '%(server)s': %(error)s" +msgid "Modified delegation \"%(value)s\"" +msgstr "Delegación modificada \"%(value)s\"" -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "la ejecución de ipa-getkeytab falló, errno %d\n" +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d delegación coincidente" +msgstr[1] "%(count)d delegaciones coincidentes" + +msgid "The deny type has been deprecated." +msgstr "El tipo deny ha quedado obsoleto." + +msgid "HBAC rules" +msgstr "Reglas HBAC" + +msgid "HBAC Rules" +msgstr "Reglas HBAC" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Añadida regla HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Suprimida regla HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Modificada regla HBAC \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d regla coincidente de HBAC" +msgstr[1] "%(count)d reglas coincidentes de HBAC " + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Habilitada regla HBAC \"%(value)s\"" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" regla HBAC desactivada " + +msgid "Access time" +msgstr "Hora de acceso" + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -"formato esperado: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgid "file to store DNS records in nsupdate format" -msgstr "archivo para almacenar los registros DNS en formato nsupdate" - -msgid "file to store certificate in" -msgstr "archivo para almacenar" - -msgid "filename" -msgstr "nombre de archivo" - -msgid "filter and memberof are mutually exclusive" -msgstr "filtro y memberof son mutuamente excluyentes" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "las banderas deben ser una de \"S\", \"A\", \"U\" o \"P\"" - -msgid "flags value: allowed interval 0-255" -msgstr "valor de banderas: intervalo permitido 0-255" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "Forzar la creación del registro DNS, aunque su nombre no sea absoluto" - -msgid "force delete of SYSTEM permissions" -msgstr "fuerza el borrado de permisos SYSTEM" - -msgid "force host name even if not in DNS" -msgstr "" -"fuerza el nombre del equipo anfitrión, incluso si no se encuentra en DNS" - -msgid "force principal name even if host not in DNS" -msgstr "fuerza el nombre del principal si el host no está en el DNS" - -msgid "force principal name even if not in DNS" -msgstr "fuerza el nombre del prinicpal, aún si no se encuentra en DNS" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" -"fuerza la creación del servicio aún cuando el host no exista para manejarlo" - -#, c-format -msgid "fork() failed\n" -msgstr "bifurcación () falló\n" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" -"\"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] [siz[\"m" -"\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -"donde:\n" -"d1: [0 .. 90] (grados de latitud)\n" -"d2: [0 .. 180] (grados de longitud)\n" -"m1, m2: [0 .. 59] (minutos de latitud/longitud)\n" -"s1, s2: [0 .. 59.999] (segundos de latitud/longitud)\n" -"alt: [-100000.00 .. 42849672.95] BY .01 (altitud en metros)\n" -"siz, hp, vp: [0 .. 90000000.00] (tamaño/precisión en metros)\n" -"Vea RFC 1876 para detalles" +msgid "Unresolved rules in --rules" +msgstr "Eliminar miembro desde un grupo." #, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "el formato se debe especificar como \"%(format)s\" %(rfcs)s" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"zona de envío \"%(fwzone)s\" no es efectiva por desaarición de la delegacion " -"NS apropiada en zona autorizada \"%(authzone)s\". Por favor añada registro " -"NS record \"%(ns_rec)s\" a la zona padre \"%(authzone)s\"." - -msgid "gid cannot be set for external group" -msgstr "gid no puede ser fijado para un grupo externo" - -msgid "givenname is required" -msgstr "se requiere nombre" - -msgid "group" -msgstr "grupo" - -msgid "group, permission and self are mutually exclusive" -msgstr "grupo, permisos y auto son mutuamente excluyentes" - -msgid "groups" -msgstr "grupos" - -msgid "host" -msgstr "host" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"la categoría de host no puede ser establecida a 'all' mientras hay host " -"permitidos" - -msgid "host group" -msgstr "grupo de host" - -msgid "host groups" -msgstr "grupos de host" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"grupo de host con nombre “%s” ya existe. Los grupos de nombres y los grupos " -"de red comparten un espacio de nombre común" - -msgid "hostname" -msgstr "nombre de host" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "el nombre de host contiene una etiqueta vacía (puntos consecutivos)" - -msgid "hosts" -msgstr "hosts" - -msgid "hosts cannot be added when host category='all'" -msgstr "hosts no puede ser añadido con categoría de host='all'" - -msgid "id range" -msgstr "rango id" - -msgid "id range type" -msgstr "tipo de rango de id" - -msgid "incomplete time value" -msgstr "valor de hora incompleto" - -msgid "incorrect type" -msgstr "tipo incorrecto" - -msgid "integer to order the Sudo rules" -msgstr "entero para ordenar las reglas Sudo" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "'%(name)s' inválido: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "DN no válido (%s)" - -msgid "invalid IP address format" -msgstr "formato no válido de dirección IP" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"versión de dirección IP no válida (es %(value)d, debe ser " -"%(required_value)d)!" - -msgid "invalid IP network format" -msgstr "formato no válido de red IP" - -msgid "invalid Profile ID" -msgstr "ID de perfil no válido" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "SID no válido: {SID}" - -msgid "invalid SSH public key" -msgstr "clave SSH pública no válida" - -msgid "invalid address format" -msgstr "formato de dirección no válido" - -msgid "invalid attribute name" -msgstr "nombre de atributo no válido" - -msgid "invalid domain name" -msgstr "nombre de domino no válido" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "nombre de dominio no válido: %s" - -msgid "invalid domain-name: not fully qualified" -msgstr "nombre de dominio no válido: no totalmente cualificado" - -msgid "invalid escape code in domain name" -msgstr "código de salida no válido en el nombre de dominio" - -msgid "invalid hostmask" -msgstr "máscara de host no válida" - -msgid "invalid port number" -msgstr "número de puerto no válido" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "¿Tiene ipa-getkeytab permisos errados?\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytab no se encuentra\n" - -msgid "is required" -msgstr "se requiere" - -msgid "iterations value: allowed interval 0-65535" -msgstr "iterations value: intervalo permitido 0-65535" - -msgid "kerberos ticket policy settings" -msgstr "ajustes de la entrada de política kerberos" - -#, python-format -msgid "key %(key)s already exists" -msgstr "key %(key)s ya existe" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "ya existe una llave denominada %(key)s" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -msgid "limits exceeded for this query" -msgstr "han sido excedidos los límites para esta consulta" - -msgid "local domain range" -msgstr "intervalo de dominios locales" - -msgid "location" -msgstr "localización" - -msgid "locations" -msgstr "localizaciones" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "Administrador %(manager)s no encontrado" - -#, python-format -msgid "map %(map)s already exists" -msgstr "map %(map)s ya existe" - -msgid "maps not connected to /etc/auto.master:" -msgstr "mapa no conectado a /etc/auto.master" - -#, python-format -msgid "member %s" -msgstr "miembro %s" - -msgid "member group" -msgstr "miembro de grupo" - -msgid "member host" -msgstr "host miembro" - -msgid "member host group" -msgstr "miembro del grupo de host" - -msgid "member privilege" -msgstr "miembro privilegio" - -msgid "member service delegation target" -msgstr "objetivo de delegación de miembro de servicio" - -msgid "member sudo command" -msgstr "miembro de comando sudo" - -msgid "member sudo command group" -msgstr "miembro de grupo de comando sudo" - -msgid "member user" -msgstr "usuario miembro" - -msgid "missing base_id" -msgstr "base_id desaparecida" - -msgid "modifying primary key is not allowed" -msgstr "modificar la clave principal no está permitido" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "el punto de montaje es relativo al mapa padre, no puede empezar con /" - -#, python-format -msgid "must be \"%s\"" -msgstr "debe ser \"%s\"" - -#, python-format -msgid "must be '%(value)s'" -msgstr "debe ser «%(value)s»" - -msgid "must be DNS name" -msgstr "debe ser nombre DNS" - -msgid "must be Kerberos principal" -msgstr "debe ser Kerberos principal" - -msgid "must be True or False" -msgstr "debe ser True o False" - -msgid "must be Unicode text" -msgstr "debe ser texto Unicode" - -msgid "must be a certificate" -msgstr "debe ser un certificado" - -msgid "must be a certificate signing request" -msgstr "debe ser una petición de firma de certificado" - -msgid "must be a decimal number" -msgstr "debe ser un número decimal" - -msgid "must be absolute" -msgstr "debe ser absoluto" - -msgid "must be an integer" -msgstr "debe ser un entero" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "debe ser como mínimo de %(minlength)d bytes" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "debe tener como mínimo %(minlength)d caracteres" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "debe ser como mínimo %(minvalue)d" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "debe ser al menos %(minvalue)s" - -msgid "must be at least 1" -msgstr "debe ser al menos 1" - -msgid "must be binary data" -msgstr "debe ser un dato binario" - -msgid "must be datetime value" -msgstr "debe ser un valor de fecha y hora" - -msgid "must be dictionary" -msgstr "debe ser diccionario" - -msgid "must be enclosed in parentheses" -msgstr "debe estar cerrado entre paréntesis" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "debe ser exactamente de %(length)d bytes" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "debe tener exactamente %(length)d caracteres" - -#, python-format -msgid "must be one of %(values)s" -msgstr "debe ser uno de %(values)s" - -msgid "must be relative" -msgstr "debe ser relativo" - -#, python-format -msgid "must equal %r" -msgstr "debe ser igual a %r" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "debe tener el rol %(role)s habilitado" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "debe coincidir con el modelo \"%(pattern)s" - -msgid "netgroup" -msgstr "grupo de red" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"grupo de red con nombre “%s” ya existe. Los grupos de host y grupos de red " -"comparten un espacio de nombre común" - -msgid "netgroups" -msgstr "grupos de red" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "ni comando no tópico de ayuda '%(topic)s'" - -msgid "no modifications to be performed" -msgstr "no existen modificaciones a ser realizadas" - -msgid "not allowed to modify group entries" -msgstr "no se permite modificar las entradas de los grupos" - -msgid "not allowed to modify user entries" -msgstr "no se permite modificar las entradas de los usuarios" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "no está permitido llevar a cabo la operación: %s" - -msgid "not allowed to perform server connection check" -msgstr "no permitido llevar a cabo la comprobación de conexión del servidor" - -msgid "not fully qualified" -msgstr "no totalmente cualificado" - -msgid "not modifiable on managed permissions" -msgstr "no modificable sobre permisos gestionados" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" -"el número de clase '%(cls)s' no está incluido en una lista de los números de " -"clases permitidos: %(allowed)s" - -#, python-format -msgid "objectclass %s not found" -msgstr "clase objeto %s no encontrada" - -msgid "only \"ad\" is supported" -msgstr "solo se admite «ad»" - -msgid "only available on managed permissions" -msgstr "solo disponible sobre permisos gestionados" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"sólo se permiten letras, números y %(chars)s. La etiqueta DNS no debe " -"empezar ni terminar con %(chars2)s" - -msgid "only master zones can contain records" -msgstr "solo las zonas maestras pueden contener registros" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "solo se permite un registro CNAME por nombre (RFC 2136, sección 1.1.5)" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "solo se permite un registro DNAME por nombre (RFC 6672, sección 2.4)" +msgid "Access granted: %s" +msgstr "Acceso obtenido: %s" msgid "operation not defined" msgstr "operación no definida" #, python-format -msgid "option was renamed; use %s" -msgstr "la opción fue renombrada; use %s" +msgid "not allowed to perform operation: %s" +msgstr "no está permitido llevar a cabo la operación: %s" -msgid "options are not allowed" -msgstr "las opciones no están permitidas" +msgid "No such virtual command" +msgstr "Ningún comando virtual" -#, c-format -msgid "out of memory\n" -msgstr "sin Memoria\n" +msgid "Member service groups" +msgstr "Grupos de miembro de servicio" -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" +msgid "Member HBAC service groups" +msgstr "Grupos de servicio de Miembros HBAC" + +#, fuzzy +#| msgid "Member services" +msgid "Member ID user overrides" +msgstr "Servicios de miembros" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "Usuarios indirectos miembros" + +msgid "Indirect Member permissions" msgstr "" -"datos fuera de zona: el nombre de registro debe ser un subdominio de la zona " -"o un nombre relativo" +"\\n\n" +"Permisos indirectos de miembro " + +msgid "Indirect Member HBAC service" +msgstr "Servicio HBAC de miembro indirecto" + +msgid "Indirect Member HBAC service group" +msgstr "Grupo de servicio HBAC de miembros indirectos " + +msgid "Invalid format. Should be name=value" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Esta entrada no puede ser activada o desactivada" + +msgid "entry" +msgstr "entrada" + +msgid "entries" +msgstr "entradas" + +msgid "Entry" +msgstr "Entrada" #, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "superposición de argumentos y opciones: %(names)s" +msgid "container entry (%(container)s) not found" +msgstr "no se encuentra la entrada (%(container)s) de contenedor" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: no se encuentra %(oname)s" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" + +#, fuzzy, python-format +#| msgid "attribute \"%s\" not allowed" +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "atributo \"%s\" no permitido" + +#, fuzzy, python-format +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "atributo \"%s\" no permitido" + +#, fuzzy +#| msgid "domain is not configured" +msgid "attribute is not configurable" +msgstr "el dominio no está configurado" + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "No such attribute on this entry" +msgstr "El atributo username sobre el objeto usuario" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Cambie el nombre del %(ldap_obj_name)s objeto" + +msgid "the entry was deleted while being modified" +msgstr "la entrada fue eliminada mientras estaba siendo modificada" + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "%s a añadir" + +#, python-format +msgid "%s to remove" +msgstr "%s a eliminar" #, python-format msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" -"el propietario de registros %(types)s no debería ser un nombre de dominio " -"comodín (RFC 4592 sección 4)" + +#, fuzzy, python-format +#| msgid "Search for services without these managed by hosts." +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +#, fuzzy, python-format +#| msgid "Added new aliases to user \"%(value)s\"" +msgid "added attribute value to entry %(value)s" +msgstr "Añade nuevos alias al usuario \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Removed aliases from user \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" +msgstr "Borrados alias del usuario \"%(value)s\"" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "debe ser True o False" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "Caducidad de la contraseña" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Directorio principal" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Base del directorio principal" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "Administrador %(manager)s no encontrado" + +#, fuzzy +#| msgid "file to store certificate in" +msgid "Issuer of the certificate" +msgstr "archivo para almacenar" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Subject of the certificate" +msgstr "debe ser un certificado" + +#, fuzzy +#| msgid "cannot be empty" +msgid "cannot have an empty subject" +msgstr "no puede estar vacío" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and certificate" +msgstr "no puede especificar un certificado RAW y un archivo" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "no puede especificar un certificado RAW y un archivo" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Añadidos certificados al usuario \"%(value)s\"" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Ha sido agregado el usuario \"%(value)s\"" + +msgid "Default group for new users is not POSIX" +msgstr "El grupo predeterminado para nuevos usuarios no es POSIX" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Ha sido eliminado el usuario \"%(value)s\"" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: usuario ya preservado" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Ha sido modificado el usuario \"%(value)s\"" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Recuperada cuenta de usuario \"%(value)s\"" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "usuario \"%s\" ya está activo" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Cuenta de usuario por etapas \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr " \"%(value)s\" de cuenta de usuario desactivada" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr " \"%(value)s\" de cuenta de usuario activada" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +"Desbloquear una cuenta de usuario\n" +"\n" +" Una cuenta de usuario puede llegar a bloquearse si la contraseña se ha " +"introducido incorrectamente demasiadas\n" +"veces dentro de un período de tiempo controlado por la política de\n" +"contraseña. Una cuenta bloqueada es una condición temporal y puede ser " +"desbloqueada por\n" +"un administrador." + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Cuenta desbloqueada \" %(value)s \"" + +msgid "Failed logins" +msgstr "Inicios de sesión fallidos" + +msgid "Last successful authentication" +msgstr "Última autenticación exitosa" + +msgid "Last failed authentication" +msgstr "Última autenticación fallada" + +msgid "Time now" +msgstr "Ahora" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +" Estado de bloqueo de una cuenta de usuario\n" +"\n" +" Una cuenta de usuario puede resultar bloqueada si la contraseña se " +"introduce\n" +" incorrectamente muchas veces dentro de un período especifico de tiempo\n" +" controlado por la política de contraseña. Un bloqueo de cuenta es una " +"condición\n" +" temporal y debe ser desbloqueada por un administrador.\n" +"\n" +" Esto conecta con el máster IPA y muestra el estado de bloqueo de cada " +"uno.\n" +"\n" +" Para determinar si una cuenta está bloqueada en un servidor dado usted\n" +" necesita comparar el número de accesos fallido y la hora del último " +"fallo. Para\n" +" que una cuenta se bloquee debe exceder maxfail dentro de la duración\n" +" failinterval según se especifique en la política de contraseña asociada " +"con el\n" +" usuario.\n" +"\n" +" El contador de acceso fallado se modifica solo cuando un usuario intenta " +"acceder\n" +" por lo que es posible que una cuenta puede aparecer bloqueada pero el " +"último\n" +" acceso fallado sea más antiguo que el lockouttime de la política de " +"contraseña.\n" +" Esto significa que el usuario puede intentar acceder otra vez." + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "%(host)s falló: %(error)s" + +#, python-format +msgid "%(host)s failed" +msgstr "%(host)s falló" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Cuenta deshabilitada: %(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Añadidos certificados al usuario \"%(value)s\"" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +msgid "Add new principal alias to the user entry" +msgstr "Añade un nuevo alias principal a la entrada de usuario" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Añade nuevos alias al usuario \"%(value)s\"" + +msgid "Remove principal alias from the user entry" +msgstr "Borra el alias principal de la entrada de usuario" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Borrados alias del usuario \"%(value)s\"" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "todos los maestros deben tener el rol %(role)s habilitado" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "debe tener el rol %(role)s habilitado" + +#, fuzzy +#| msgid "must be enclosed in parentheses" +msgid "must be enabled only on a single master" +msgstr "debe estar cerrado entre paréntesis" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +#, fuzzy +#| msgid "IPA AD trust controllers" +msgid "AD domain controller" +msgstr "Controladores de confianza IPA AD" + +#, fuzzy +#| msgid "unsupported trust type" +msgid "unsupported functional level" +msgstr "tipo de confianza no soportado" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +#, fuzzy +#| msgid "Realm administrator password should be specified" +msgid "At least the domain or IP address should be specified" +msgstr "Debería especificarse la contraseña del administrador del reino" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "no trusted domain is configured" +msgstr "el dominio no está configurado" + +msgid "domain is not configured" +msgstr "el dominio no está configurado" + +msgid "SID is not valid" +msgstr "el SID no es válido" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +#, fuzzy +#| msgid "does not match any of accepted formats: " +msgid "SID does not match any trusted domain" +msgstr "no coincide con ninguno de los formatos aceptados: " + +#, fuzzy +#| msgid "AD Trust setup" +msgid "Trust setup" +msgstr "Ajuste de Confianza AD" + +#, fuzzy +#| msgid "domain is not configured" +msgid "Our domain is not configured" +msgstr "el dominio no está configurado" + +#, fuzzy +#| msgid "domain is not configured" +msgid "No trusted domain is not configured" +msgstr "el dominio no está configurado" + +#, fuzzy +#| msgid "Trusted domain" +msgid "trusted domain object" +msgstr "Dominio de confianza" + +#, fuzzy +#| msgid "domain is not configured" +msgid "domain is not trusted" +msgstr "el dominio no está configurado" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +#, fuzzy +#| msgid "Specified trusted domain name could not be found." +msgid "trusted domain object not found" +msgstr "" +"El nombre especificado de dominio de confianza podría no ser encontrado." + +#, fuzzy +#| msgid "Name of the trusted domain" +msgid "Object does not belong to a trusted domain" +msgstr "Nombre del dominio de confianza" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +#, fuzzy +#| msgid "Specified trusted domain name could not be found." +msgid "trusted domain user not found" +msgstr "" +"El nombre especificado de dominio de confianza podría no ser encontrado." + +#, fuzzy +#| msgid "Name of the trusted domain" +msgid "Cannot retrieve trusted domain GC list" +msgstr "Nombre del dominio de confianza" + +#, fuzzy +#| msgid "Invalid credentials" +msgid "CIFS credentials object" +msgstr "Credenciales no válidas" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +#, fuzzy +#| msgid "Invalid credentials" +msgid "Credentials" +msgstr "Credenciales no válidas" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +#, fuzzy +#| msgid "Trust direction" +msgid "Trusting forest" +msgstr "Dirección de confianza" + +#, fuzzy +#| msgid "Trusted for delegation" +msgid "Trusted forest" +msgstr "Confiable para la delegación" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "Desconocido" + +#, fuzzy +#| msgid "Active Directory domain range" +msgid "Non-Active Directory domain" +msgstr "Intervalo de dominios de Active Directory" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" +"\n" +"La replica de la topología en el sufijo '%(suffix)s' está desconectada:\n" +"%(errors)s" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" +"\n" +"La eliminación de '%(hostname)s' lleva a desconectar la topología en sufijo " +"'%(suffix)s':\n" +"%(errors)s" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" +"La topologia no permite al servidor %(server)s replicar con servidores:" + +msgid "Request must be a dict" +msgstr "La petición debe ser un diccionario" + +msgid "Request is missing \"method\"" +msgstr "La petición está con \"method\" desaparecido" + +msgid "Request is missing \"params\"" +msgstr "La petición está con \"params\" desaparecido" msgid "params must be a list" msgstr "params debe ser una lista" @@ -14269,321 +30798,86 @@ msgstr "params[0] (aka args) debe ser una lista" msgid "params[1] (aka options) must be a dict" msgstr "params[1] (aka options) debe ser un diccionario" -msgid "password" -msgstr "contraseña" +#, python-format +msgid "must equal %r" +msgstr "debe ser igual a %r" -msgid "password policies" -msgstr "políticas de contraseña" - -msgid "password policy" -msgstr "política de contraseña" - -msgid "password to use if not using kerberos" -msgstr "Contraseña a usar si no usa kerberos" - -msgid "permission" -msgstr "permiso" +msgid "Hello world" +msgstr "Hola mundo" #, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "permiso \"%(value)s\" ya existe" - -msgid "permissions" -msgstr "permisos" - -msgid "pkinit" -msgstr "pkinit" - -msgid "preserve and no-preserve cannot be both set" -msgstr "preserve y no-preserve no pueden estar ambos ajustados" - -#, c-format -msgid "principal not found\n" -msgstr "principal no se encuentra\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "principales no se encuentran en respuesta XML-RPC\n" - -msgid "priority cannot be set on global policy" -msgstr "la prioridad no puede ser definida en una plítica global" +msgid "%s: RADIUS proxy server not found" +msgstr "%s: servidor proxy RADIUS no encontrado" #, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "Servidor proxy RADIUS con nombre \"%s\" ya existe" + +msgid "must be at least 1" +msgstr "debe ser al menos 1" + +msgid "Out of memory\n" +msgstr "¡Memoria insuficiente!\n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "Precaución tipo de encriptación no reconocido.\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "Advertencia de tipo de sal no reconocido.\n" + +msgid "Out of memory!?\n" msgstr "" -"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " -"por %(gname)s)" +"¡Memoria insuficiente!\n" +"\n" -msgid "privilege" -msgstr "privilegio" +msgid "Enctype comparison failed!\n" +msgstr "¡Falló comparación de Enctype!\n" -msgid "privileged group" -msgstr "grupo privilegiado" +#, fuzzy +#| msgid "Password history size" +msgid "Password is too long!\n" +msgstr "Tamaño del historial de la contraseña" -msgid "privileges" -msgstr "privilegios" +msgid "Failed to create random key!\n" +msgstr "Falló la creación de clave aleatoria\n" -msgid "pyhbac is not installed." -msgstr "pyhbac no está instalado." +msgid "Failed to create key!\n" +msgstr "¡Falló la creación de clave!\n" -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" -"pysss_murmur no está disponible en el servidor y no se ha dado base-id." +msgid "Bad or unsupported salt type.\n" +msgstr "Tipo de sal malo o no soportado.\n" -msgid "python-yubico is not installed." -msgstr "python-yubico no está instalado." +#, fuzzy, c-format +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "¡No puede iniciar biblioteca IDAP!\n" -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "consulta '%(owner)s %(rtype)s' con EDNS0: %(error)s" +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "Incapaz de ajustar LDAP_OPT_PROTOCOL_VERSION\n" -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "consulta'%(owner)s %(rtype)s': %(error)s" +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "Incapaz de fijar LDAP_OPT_X_SASL_NOCANON \n" -msgid "range exists" -msgstr "el intervalo existe" +#, fuzzy +#| msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "Incapaz de ajustar LDAP_OPT_X_TLS_REQUIRE_CERT\n" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "Incapaz de ajustar LDAP_OPT_X_TLS_REQUIRE_CERT\n" + +#, fuzzy +#| msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "Incapaz de ajustar LDAP_OPT_PROTOCOL_VERSION\n" msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" msgstr "" -"la modificación de rango dejando objetos con ID fuera del rango definido no " -"está permitida" -msgid "range type change" -msgstr "cambio de tipo de rango" - -#, c-format -msgid "read error\n" -msgstr "Error de lectura\n" - -#, c-format -msgid "realm not found\n" -msgstr "reino no encontrado\n" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" -"el dominio o sufijo UPN se superpone con el espacio de nombres de dominio de " -"confianza" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"registro '%(owner)s %(rtype)s' fallo de validación DNSSEC sobre el servidor " -"%(ip)s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "fallo en la petición con estado HTTP %d" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "resultado no se encuentra en respuesta XML-RPC\n" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" -" Determinar si la ACI es un autoservicio de ACI y hacer una excepción " -"si\n" -" no lo es.\n" -" Devolver el resultado si se trata de un autoservicio de ACI." - -msgid "role" -msgstr "rol" - -msgid "roles" -msgstr "roles" - -#, python-format -msgid "salt value: %(err)s" -msgstr "valor salt: %(err)s" - -msgid "search for POSIX groups" -msgstr "buscar por grupos POXIS" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" -"búsqueda de grupos con soporte de miembros externos no IPA desde dominios de " -"confianza" - -msgid "search for managed groups" -msgstr "buscar grupos gestionados" - -msgid "search for non-POSIX groups" -msgstr "búsqueda de grupos no POSIX" - -msgid "search for private groups" -msgstr "Búsqueda de grupos privados" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"los resultados de la búsqueda de los objetos que se van a migrar se han " -"truncado por el servidor; el proceso de migración puede estar incompleto\n" - -msgid "self service permission" -msgstr "auto servicio de permiso" - -msgid "self service permissions" -msgstr "auto servicio de permisos" - -msgid "server" -msgstr "servidor" - -msgid "server role" -msgstr "rol servidor" - -msgid "server roles" -msgstr "roles de servidor" - -msgid "servers" -msgstr "servidores" - -msgid "service" -msgstr "servicio" - -msgid "services" -msgstr "servicios" - -msgid "setting Authoritative nameserver" -msgstr "Fijando el servidor de nombre Autoritario" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "no debe ser un nombre de dominio comodín (RFC 4592 sección 4)" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "single label {}s are not supported" -msgstr "etiqueta sencilla {}s no está soportada" - -msgid "skip reverse DNS detection" -msgstr "Ignorar la detección inversa de DNS" - -msgid "sn is required" -msgstr "se requiere sn" - -msgid "stage user" -msgstr "escenario usuario" - -msgid "stage users" -msgstr "escenario usuarios" - -msgid "subtree and type are mutually exclusive" -msgstr "subtree y type son mutuamente exclusivos" - -msgid "sudo command" -msgstr "comando sudo" - -msgid "sudo command group" -msgstr "grupo de comando sudo" - -msgid "sudo command groups" -msgstr "grupos de comando sudo" - -msgid "sudo commands" -msgstr "comandos sudo" - -msgid "sudo rule" -msgstr "regla sudo" - -msgid "sudo rules" -msgstr "reglas sudo" - -msgid "target and targetgroup are mutually exclusive" -msgstr "target y targetgroup son mutuamente exclusivos" - -msgid "the entry was deleted while being modified" -msgstr "la entrada fue eliminada mientras estaba siendo modificada" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "este valor no sigue el formato de hora \"YYYYMMDDHHMMSS\"" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" -"debe haber al menos una entrada objetivo especifica (e.g. target, " -"targetfilter, attrs)" - -msgid "this option has been deprecated." -msgstr "esta opción ha quedado obsoleta." - -msgid "this option is deprecated" -msgstr "esta opción es obsoleta" - -msgid "too many '@' characters" -msgstr "demasiados ‘@’ caracteres" - -msgid "trust" -msgstr "confianza" - -msgid "trust configuration" -msgstr "configuración de la confianza" - -msgid "trust domain" -msgstr "dominio de confianza" - -msgid "trust domains" -msgstr "dominios de confianza" - -msgid "trust type" -msgstr "tipo de confianza" - -msgid "trusts" -msgstr "confianzas" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" -"Objeto de tipo IPA (usuario, grupo, grupo de host, servicio, grupo de red)" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "tipo, filtro, subárbol y grupo de destino, se excluyen mutuamente" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "comando desconocido '%(name)s'" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "error %(code)d desconocido de %(server)s: %(error)s" - -msgid "unsupported trust type" -msgstr "tipo de confianza no soportado" - -msgid "url" -msgstr "url" - -msgid "user" -msgstr "usuario" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "usuario \"%s\" ya está activo" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"la categoría de usuario no puede ser establecida a 'all' mientras hay " -"usuarios permitidos" - -msgid "users" -msgstr "usuarios" - -msgid "users cannot be added when user category='all'" -msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: no existe tal atributo" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: rol no encontrado" +msgid "Unable to initialize STARTTLS session\n" +msgstr "Incapaz de inicializar la sesión STARTTLS\n" #~ msgid "" #~ "\n" diff --git a/po/eu.po b/po/eu.po index 85a6ec1b8..3968482f9 100644 --- a/po/eu.po +++ b/po/eu.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:06+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Basque\n" @@ -18,126 +18,1794 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" +#, c-format +msgid "Out of memory!\n" +msgstr "" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" -msgid "A description of this host" -msgstr "Ostalari honen deskribapena" +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" -msgid "A description of this host-group" -msgstr "Ostalari-talde honen deskribapena" +#, c-format +msgid "Out of memory!" +msgstr "" -msgid "A list of ACI values" -msgstr "ACI balioen zerrenda bat" +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" -msgid "ACI" -msgstr "ACI" +msgid "SASL Bind failed\n" +msgstr "" -msgid "ACI name" -msgstr "ACI izena" +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" -msgid "ACI prefix" -msgstr "ACI aurrizkia" +#, c-format +msgid "No values for %s" +msgstr "" -msgid "ACIs" -msgstr "ACIak" +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" -msgid "Account Settings" -msgstr "Kontuaren ezarpenak" +#, fuzzy, c-format +#| msgid "ipa-getkeytab not found\n" +msgid "IPA namingContext not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" -msgid "Add Many" -msgstr "Gehitu hainbat" +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" -msgid "Add and Add Another" -msgstr "Gehitu eta gehitu beste bat" +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" -msgid "Add and Close" -msgstr "Gehitu eta itxi" +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" -msgid "Add and Edit" -msgstr "Gehitu eta editatu" +#, c-format +msgid "Host is already joined.\n" +msgstr "" -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" -msgid "Administrator e-mail address" -msgstr "Administratzailearen e-posta helbidea" +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" -msgid "Allow" -msgstr "Onartu" +#, c-format +msgid "json_dumps() failed\n" +msgstr "" -msgid "Any Command" -msgstr "Edozein komando" +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" -msgid "Any Group" -msgstr "Edozein talde" +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" -msgid "Are you sure you want to delete selected entries?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" -msgid "Attribute" -msgstr "Atributua" +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" -msgid "Attributes" -msgstr "Atributuak" +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" -msgid "Cancel" -msgstr "Utzi" +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" -msgid "Certificate" +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" + +#, fuzzy, c-format +#| msgid "ipa-getkeytab not found\n" +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ez da ipa-getkeytab aurkitu\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +msgid "hostname" +msgstr "ostalari-izena" + +msgid "IPA Server to use" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "fitxategi-izena" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +msgid "password" +msgstr "pasahitza" + +#, fuzzy +#| msgid "LDAP password" +msgid "LDAP basedn" +msgstr "LDAP pasahitza" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "ipa-getkeytab not found\n" +msgid "principal not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "ipa-getkeytab not found\n" +msgid "realm not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Realm name" +msgstr "Berrizendatu" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Pasahitzak ez datoz bat!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server Name" +msgstr "Zerbitzuaren izena" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "LDAP pasahitza" + +msgid "password to use if not using kerberos" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Prompt for LDAP password" +msgstr "LDAP pasahitza" + +msgid "Path to the IPA CA certificate" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "IPA CA certificate" msgstr "Ziurtagiria" -msgid "Class" -msgstr "Klasea" +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" -msgid "Close" -msgstr "Itxi" +msgid "url" +msgstr "" -msgid "Command name" -msgstr "Komandoaren izena" +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" -msgid "Configuration" -msgstr "Konfigurazioa" +msgid "GSSAPI|EXTERNAL" +msgstr "" -msgid "Contact Settings" -msgstr "Kontaktuaren ezarpenak" +msgid "Retrieve current keys without changing them" +msgstr "" -msgid "Create a new group." +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Enter LDAP password" +msgstr "LDAP pasahitza" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New Principal Password" +msgstr "Pasahitz berria" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Failed hosts/hostgroups" +msgstr "Ostalari-taldearen izena" + +#, fuzzy +#| msgid "Default users group" +msgid "Failed users/groups" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key %(key)s already exists" +msgstr "Sarrera hau dagoeneko existitzen da" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "map %(map)s already exists" +msgstr "Sarrera hau dagoeneko existitzen da" + +msgid "Imported maps:" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added %(map)s" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +#, fuzzy +#| msgid "Output filename" +msgid "Input file" +msgstr "Irteerako fitxategi-izena" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a user" +msgstr "Ezabatu taldea." + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modify %(name)s '%(value)s'?" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Delete %(name)s '%(value)s'?" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +#| msgid "User" +msgid "User ID" +msgstr "Erabiltzailea" + +msgid "Password" +msgstr "Pasahitza" + +#, fuzzy +#| msgid "First name" +msgid "First Code" +msgstr "Izena" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new vault." msgstr "Sortu talde berri bat." -msgid "DNS" -msgstr "DNS" +#, fuzzy +#| msgid "password" +msgid "Vault password" +msgstr "pasahitza" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a vault." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Random password" +msgid "Change password" +msgstr "Ausazko pasahitza" + +#, fuzzy +#| msgid "password" +msgid "Old vault password" +msgstr "pasahitza" + +msgid "File containing the old vault password" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New vault password" +msgstr "Pasahitz berria" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" msgid "Data" msgstr "Datuak" -msgid "Default e-mail domain" -msgstr "E-posta domeinu lehenetsia" +msgid "Private key specified multiple times" +msgstr "" -msgid "Default group for new users" -msgstr "Erabiltzaile berrientzako talde lehenetsia" +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "Errorea" + +#, fuzzy +#| msgid "Output filename" +msgid "Input filename" +msgstr "Irteerako fitxategi-izena" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "ACI izena" + +msgid "Permission" +msgstr "Baimena" + +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "Erabiltzaile-taldea" + +msgid "User group ACI grants access to" +msgstr "" + +msgid "Permissions" +msgstr "Baimenak" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "Atributuak" + +msgid "Type" +msgstr "Mota" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Member of a group" +msgstr "Aldatu talde bat." + +msgid "Filter" +msgstr "Iragazkia" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "Azpi-zuhaitza" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "Helburuko taldea" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create new ACI." +msgstr "Sortu talde berri bat." + +msgid "ACI prefix" +msgstr "ACI aurrizkia" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete ACI." +msgstr "Ezabatu taldea." + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify ACI." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Rename" +msgid "Rename an ACI." +msgstr "Berrizendatu" + +msgid "New ACI name" +msgstr "ACI izen berria" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Mount information" +msgstr "Konfigurazioa" + +msgid "description" +msgstr "deskribapena" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "Deskribapena" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new automount key." +msgstr "Sortu talde berri bat." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for an automount key." +msgstr "Bilatu taldeak." + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an automount key." +msgstr "Aldatu talde bat." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "Berrizendatu" + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the automount key object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +#, fuzzy +#| msgid "Display name" +msgid "Display an automount key." +msgstr "Bistaratu izena" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new automount location." +msgstr "Sortu talde berri bat." + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new automount map." +msgstr "Sortu talde berri bat." + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new indirect mount point." +msgstr "Sortu talde berri bat." + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for an automount map." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an automount map." +msgstr "Aldatu talde bat." + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "Erabiltzaile-izenaren gehienezko luzera" + +msgid "Home directory base" +msgstr "Direktorio nagusiaren oinarria" msgid "Default location of home directories" msgstr "Karpeta nagusien kokaleku lehenetsia" @@ -151,89 +1819,1547 @@ msgstr "Erabiltzaile berrientzako shell lehenetsia" msgid "Default users group" msgstr "Erabiltzaile-talde lehenetsia" -msgid "Delete group." +msgid "Default group for new users" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +msgid "Default e-mail domain" +msgstr "E-posta domeinu lehenetsia" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Subject base" +msgstr "Ziurtagiria" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group objectclasses" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default user objectclasses" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default SELinux user" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Default PAC types" +msgstr "Shell lehenetsia" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member user group" +msgstr "Erabiltzaile-taldea" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a delegation." msgstr "Ezabatu taldea." -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" +#, fuzzy +#| msgid "Search for groups." +msgid "Search for delegations." +msgstr "Bilatu taldeak." -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a delegation." +msgstr "Aldatu talde bat." -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" +msgid "Display information about a delegation." +msgstr "" -msgid "Deny" -msgstr "Ukatu" +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" -msgid "Description" -msgstr "Deskribapena" +msgid "Global forwarders" +msgstr "" -msgid "Display name" -msgstr "Bistaratu izena" +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" -msgid "Email address" +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Zone name" +msgstr "Komandoaren izena" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Record name" +msgstr "Berrizendatu" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Record type" +msgstr "Arau-mota" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "IP Address" msgstr "E-posta helbidea" -msgid "Enabled" -msgstr "Gaituta" +msgid "A Create reverse" +msgstr "" -msgid "Error" -msgstr "Errorea" +msgid "Create reverse record for this IP Address" +msgstr "" -msgid "External User" -msgstr "Kanpoko erabiltzailea" +msgid "AAAA record" +msgstr "" -msgid "External host" -msgstr "Kanpoko ostalaria" +msgid "Raw AAAA records" +msgstr "" -msgid "Fax Number" -msgstr "Fax-zenbakia" +msgid "AAAA IP Address" +msgstr "" -msgid "Filter" -msgstr "Iragazkia" +msgid "AAAA Create reverse" +msgstr "" -msgid "Fingerprint (SHA1)" -msgstr "Hatz-marka (SHA1)" +msgid "A6 record" +msgstr "" -msgid "Fingerprints" +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +#, fuzzy +#| msgid "Subtree" +msgid "Subtype" +msgstr "Azpi-zuhaitza" + +#, fuzzy +#| msgid "Hostname" +msgid "AFSDB Hostname" +msgstr "Ostalari-izena" + +msgid "Hostname" +msgstr "Ostalari-izena" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate Type" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Type" +msgstr "Ziurtagiria" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate/CRL" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate/CRL" +msgstr "Ziurtagiria" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "CNAME Hostname" +msgstr "Ostalari-izena" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target" +msgstr "Helburuko taldea" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +#, fuzzy +#| msgid "HBAC Services" +msgid "NAPTR Service" +msgstr "HBAC zerbitzuak" + +#, fuzzy +#| msgid "Services" +msgid "Service" +msgstr "Zerbitzuak" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "NS Hostname" +msgstr "Ostalari-izena" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "PTR Hostname" +msgstr "Ostalari-izena" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSHFP Fingerprint Type" +msgstr "SHA1 hatz-marka" + +#, fuzzy +#| msgid "Fingerprints" +msgid "Fingerprint Type" msgstr "Hatz-markak" -msgid "First name" -msgstr "Izena" +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSHFP Fingerprint" +msgstr "SHA1 hatz-marka" + +#, fuzzy +#| msgid "Fingerprints" +msgid "Fingerprint" +msgstr "Hatz-markak" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "TLSA Certificate Usage" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Usage" +msgstr "Ziurtagiria" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +#, fuzzy +#| msgid "Data" +msgid "Text Data" +msgstr "Datuak" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "Administratzailearen e-posta helbidea" + +msgid "SOA serial" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "SOA record serial number" +msgstr "Serie-zenbakia" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +#, fuzzy +#| msgid "Allow" +msgid "Allow query" +msgstr "Onartu" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission value" +msgstr "Baimena" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for DNS forward zones." +msgstr "Bilatu taldeak." + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" msgid "Force" msgstr "Behartu" -msgid "Full name" -msgstr "Izen osoa" +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" -msgid "General" -msgstr "Orokorra" +msgid "Structured" +msgstr "" -msgid "Group" -msgstr "Taldea" +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" -msgid "Group Settings" -msgstr "Taldearen ezarpenak" +msgid "Delete DNS resource record." +msgstr "" -msgid "Groups" -msgstr "Taldeak" +msgid "Delete all associated records" +msgstr "" -msgid "HBAC Rules" -msgstr "HBAC arauak" +msgid "Delete DNS record entry." +msgstr "" -msgid "HBAC Services" -msgstr "HBAC zerbitzuak" +#, fuzzy +#| msgid "Search for groups." +msgid "Search for DNS resources." +msgstr "Bilatu taldeak." -msgid "HBAC rule" +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Rule name" +msgstr "Berrizendatu" + +msgid "Rule type" +msgstr "Arau-mota" + +#, fuzzy +#| msgid "Rule type" +msgid "Rule type (allow)" +msgstr "Arau-mota" + +#, fuzzy +#| msgid "User password" +msgid "User category" +msgstr "Erabiltzailearen pasahitza" + +msgid "User category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Host category" +msgstr "Ostalari-izena" + +msgid "Host category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service category" +msgstr "Zerbitzuaren izena" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "Gaituta" + +msgid "Users" +msgstr "Erabiltzaileak" + +msgid "User Groups" +msgstr "Erabiltzaile-taldeak" + +msgid "Hosts" +msgstr "Ostalariak" + +msgid "Host Groups" +msgstr "Ostalari-taldeak" + +msgid "Services" +msgstr "Zerbitzuak" + +msgid "Service Groups" +msgstr "Zerbitzu-taldeak" + +msgid "External host" +msgstr "Kanpoko ostalaria" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new HBAC rule." +msgstr "Sortu talde berri bat." + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "member host group" +msgstr "Ostalari-taldearen izena" + +#, fuzzy +#| msgid "Host Groups" +msgid "host groups to add" +msgstr "Ostalari-taldeak" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "member HBAC service" +msgstr "HBAC zerbitzua" + +#, fuzzy +#| msgid "HBAC service" +msgid "HBAC services to add" +msgstr "HBAC zerbitzua" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "member HBAC service group" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups to add" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "member group" +msgstr "Erabiltzaile-taldea" + +#, fuzzy +#| msgid "groups" +msgid "groups to add" +msgstr "taldeak" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Delete an HBAC rule." msgstr "HBAC araua" -msgid "HBAC rules" -msgstr "HBAC arauak" +#, fuzzy +#| msgid "HBAC rule" +msgid "Disable an HBAC rule." +msgstr "HBAC araua" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Enable an HBAC rule." +msgstr "HBAC araua" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for HBAC rules." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an HBAC rule." +msgstr "Aldatu talde bat." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "HBAC services to remove" +msgstr "HBAC zerbitzua" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups to remove" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "Zerbitzuaren izena" msgid "HBAC service" msgstr "HBAC zerbitzua" @@ -241,300 +3367,21447 @@ msgstr "HBAC zerbitzua" msgid "HBAC service description" msgstr "HBAC zerbitzuaren deskribapena" +#, fuzzy +#| msgid "HBAC service group description" +msgid "Member of HBAC service groups" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add a new HBAC service." +msgstr "HBAC zerbitzua" + +msgid "Delete an existing HBAC service." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for HBAC services." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "Modify an HBAC service." +msgstr "HBAC zerbitzua" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "Zerbitzu-taldearen izena" + msgid "HBAC service group description" msgstr "HBAC zerbitzu-taldearen deskribapena" -msgid "History size" -msgstr "Historiaren tamaina" +#, fuzzy +#| msgid "HBAC service" +msgid "Member HBAC service" +msgstr "HBAC zerbitzua" -msgid "Home directory base" -msgstr "Direktorio nagusiaren oinarria" +#, fuzzy +#| msgid "HBAC service group description" +msgid "Add a new HBAC service group." +msgstr "HBAC zerbitzu-taldearen deskribapena" -msgid "Host Groups" -msgstr "Ostalari-taldeak" +msgid "Add members to an HBAC service group." +msgstr "" -msgid "Host Name" -msgstr "Ostalari-izena" +#, fuzzy +#| msgid "Delete group." +msgid "Delete an HBAC service group." +msgstr "Ezabatu taldea." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for an HBAC service group." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an HBAC service group." +msgstr "Aldatu talde bat." + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" msgid "Host name" msgstr "Ostalari-izena" +msgid "A description of this host" +msgstr "Ostalari honen deskribapena" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "Sistema eragilea" + msgid "Host operating system and version (e.g. \"Fedora 9\")" msgstr "Ostalariaren sistema eragilea eta bertsioa (adibidez, \"Fedora 9\")" +msgid "User password" +msgstr "Erabiltzailearen pasahitza" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "Ausazko pasahitza" + +msgid "Certificate" +msgstr "Ziurtagiria" + +msgid "Base-64 encoded server certificate" +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Principal name" +msgstr "Bistaratu izena" + +#, fuzzy +#| msgid "Email address" +msgid "MAC address" +msgstr "E-posta helbidea" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "Klasea" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Member of host-groups" +msgstr "Ostalari-taldearen izena" + +msgid "Roles" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Member of netgroups" +msgstr "Ostalari-taldearen izena" + +msgid "Member of Sudo rule" +msgstr "" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Member of HBAC rule" +msgstr "HBAC araua" + +msgid "Indirect Member of netgroup" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Indirect Member of host-group" +msgstr "Ostalari-taldearen izena" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +#, fuzzy +#| msgid "Manager" +msgid "Managed by" +msgstr "Kudeatzailea" + +#, fuzzy +#| msgid "Manager" +msgid "Managing" +msgstr "Kudeatzailea" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +#, fuzzy +#| msgid "Add and Close" +msgid "Add a new host." +msgstr "Gehitu eta itxi" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a host." +msgstr "Ezabatu taldea." + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for hosts." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "host group" +msgstr "Ostalari-taldea" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "netgroup" +msgstr "taldea" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "HBAC araua" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "host" +msgstr "ostalari-izena" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + msgid "Host-group" msgstr "Ostalari-taldea" -msgid "Hostname" -msgstr "Ostalari-izena" +msgid "Name of host-group" +msgstr "Ostalari-taldearen izena" -msgid "Hosts" +msgid "A description of this host-group" +msgstr "Ostalari-talde honen deskribapena" + +msgid "Member hosts" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Member host-groups" +msgstr "Ostalari-taldearen izena" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Add a new hostgroup." +msgstr "Sortu talde berri bat." + +#, fuzzy +#| msgid "Name of host-group" +msgid "Add members to a hostgroup." +msgstr "Ostalari-taldearen izena" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a hostgroup." +msgstr "Ezabatu taldea." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for hostgroups." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a hostgroup." +msgstr "Aldatu talde bat." + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +#, fuzzy +#| msgid "Group" +msgid "Group name" +msgstr "Taldea" + +#, fuzzy +#| msgid "UID" +msgid "GID" +msgstr "UID" + +msgid "Group ID Number" +msgstr "" + +#, fuzzy +#| msgid "User Group" +msgid "User login" +msgstr "Erabiltzaile-taldea" + +msgid "UID" +msgstr "UID" + +#, fuzzy +#| msgid "Pager Number" +msgid "User ID Number" +msgstr "Bilagailu-zenbakia" + +msgid "GECOS" +msgstr "" + +#, fuzzy +#| msgid "Home directory base" +msgid "Home directory" +msgstr "Direktorio nagusiaren oinarria" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for an Group ID override." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an Group ID override." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the Group ID override object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "hosts" msgstr "Ostalariak" -msgid "IPA Server" +msgid "Hosts to apply the ID View to" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "hostgroups" +msgstr "Ostalari-taldea" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for an ID View." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an ID View." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the ID View object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Name of method to export" +msgstr "Ostalari-taldearen izena" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +#, fuzzy +#| msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Ostalariaren sistema eragilea eta bertsioa (adibidez, \"Fedora 9\")" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +#, fuzzy +#| msgid "Username" +msgid "User name" +msgstr "Erabiltzaile-izena" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +#, fuzzy +#| msgid "Invalid LDAP URI." +msgid "LDAP URI" +msgstr "LDAP URI baliogabea." + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +#, fuzzy +#| msgid "Random password" +msgid "bind password" +msgstr "Ausazko pasahitza" + +msgid "Bind DN" +msgstr "" + +#, fuzzy +#| msgid "Username" +msgid "User container" +msgstr "Erabiltzaile-izena" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +#, fuzzy +#| msgid "Group Settings" +msgid "Group container" +msgstr "Taldearen ezarpenak" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CA certificate" +msgstr "Ziurtagiria" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Netgroup name" +msgstr "Zerbitzu-taldearen izena" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Netgroup description" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +msgid "NIS domain name" +msgstr "NIS domeinu-izena" + +msgid "IPA unique ID" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member netgroups" +msgstr "Erabiltzaile-taldea" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +#, fuzzy +#| msgid "User Group" +msgid "Member Group" +msgstr "Erabiltzaile-taldea" + +msgid "Member Host" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "Member Hostgroup" +msgstr "Ostalari-taldea" + +#, fuzzy +#| msgid "Create a new group." +msgid "Add a new netgroup." +msgstr "Sortu talde berri bat." + +msgid "Add members to a netgroup." +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "member netgroup" +msgstr "Erabiltzaile-taldea" + +msgid "netgroups to add" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a netgroup." +msgstr "Ezabatu taldea." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for a netgroup." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Search for groups." +msgid "search for managed groups" +msgstr "Bilatu taldeak." + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "taldea" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a netgroup." +msgstr "Aldatu talde bat." + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Set a user's password." +msgstr "Erabiltzailearen pasahitza" + +msgid "New Password" +msgstr "Pasahitz berria" + +#, fuzzy +#| msgid "Reset Password" +msgid "Current Password" +msgstr "Berrezarri pasahitza" + +#, fuzzy +#| msgid "Set OTP" +msgid "OTP" +msgstr "Ezarri OTP" + +#, fuzzy +#| msgid "Reset Password" +msgid "One Time Password" +msgstr "Berrezarri pasahitza" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission name" +msgstr "Baimena" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Effective attributes" +msgstr "Atributuak" + +msgid "All attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Included attributes" +msgstr "Atributuak" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Excluded attributes" +msgstr "Atributuak" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Default attributes" +msgstr "Atributuak" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Bind rule type" +msgstr "Arau-mota" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target DN" +msgstr "Helburuko taldea" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Member of group" +msgstr "Ostalari-taldearen izena" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission flags" +msgstr "Baimenak" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a permission." +msgstr "Ezabatu taldea." + +msgid "force delete of SYSTEM permissions" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for permissions." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a permission." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the permission object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Privilege name" +msgstr "Zerbitzuaren izena" + +#, fuzzy +#| msgid "HBAC service description" +msgid "Privilege description" +msgstr "HBAC zerbitzuaren deskribapena" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "permission" +msgstr "Baimena" + +#, fuzzy +#| msgid "Permissions" +msgid "permissions" +msgstr "Baimenak" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for privileges." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a privilege." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the privilege object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "Taldea" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "Historiaren tamaina" + +#, fuzzy +#| msgid "History size" +msgid "Password history size" +msgstr "Historiaren tamaina" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Min length" +msgstr "Erabiltzaile-izenaren gehienezko luzera" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for group password policies." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a group password policy." +msgstr "Aldatu talde bat." + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "Erabiltzailea" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +#, fuzzy +#| msgid "A description of this host" +msgid "A description of this RADIUS proxy server" +msgstr "Ostalari honen deskribapena" + +#, fuzzy +#| msgid "IPA Server" +msgid "Server" msgstr "IPA zerbitzaria" -msgid "IPA Server to use" +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +#, fuzzy +#| msgid "entries" +msgid "Retries" +msgstr "sarrerak" + +msgid "The number of times to retry authentication" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "User attribute" +msgstr "Atributua" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for RADIUS proxy servers." +msgstr "Bilatu taldeak." + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +#, fuzzy +#| msgid "Add Many" +msgid "Add domain" +msgstr "Gehitu hainbat" + +#, fuzzy +#| msgid "Default e-mail domain" +msgid "Delete domain" +msgstr "E-posta domeinu lehenetsia" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify realm domains." +msgstr "Aldatu talde bat." + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Role name" +msgstr "Berrizendatu" + +#, fuzzy +#| msgid "A description of this host-group" +msgid "A description of this role-group" +msgstr "Ostalari-talde honen deskribapena" + +msgid "Member users" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member groups" +msgstr "Erabiltzaile-taldea" + +msgid "Privileges" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Member services" +msgstr "Zerbitzuak" + +#, fuzzy +#| msgid "Add and Close" +msgid "Add a new role." +msgstr "Gehitu eta itxi" + +msgid "Add members to a role." +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "member service" +msgstr "HBAC zerbitzua" + +#, fuzzy +#| msgid "Services" +msgid "services to add" +msgstr "Zerbitzuak" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a role." +msgstr "Ezabatu taldea." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for roles." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a role." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the role object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Remove members from a role." +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "services to remove" +msgstr "Zerbitzu-taldearen izena" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Self-service name" +msgstr "Zerbitzuaren izena" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +#, fuzzy +#| msgid "HBAC Rules" +msgid "HBAC Rule" +msgstr "HBAC arauak" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new SELinux User Map." +msgstr "Sortu talde berri bat." + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for SELinux User Maps." +msgstr "Bilatu taldeak." + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service principal" +msgstr "Zerbitzuaren izena" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for IPA services." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Command" +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "A description of this host" +msgid "A description of this command" +msgstr "Ostalari honen deskribapena" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Sudo Command Groups" +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Create new Sudo Command." +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Delete Sudo Command." +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Search for Sudo Commands." +msgstr "Sudo komandoak" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Modify Sudo Command." +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Display Sudo Command." +msgstr "Sudo komandoak" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "description" +msgid "Group description" +msgstr "deskribapena" + +#, fuzzy +#| msgid "Run Commands" +msgid "Commands" +msgstr "Exekutatu komandoak" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Member Sudo commands" +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Create new Sudo Command Group." +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Add members to Sudo Command Group." +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "member sudo command" +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "sudo commands to add" +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Delete Sudo Command Group." +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Search for Sudo Command Groups." +msgstr "Sudo komando-taldea" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Modify Sudo Command Group." +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Remove members from Sudo Command Group." +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "sudo commands to remove" +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Display Sudo Command Group." +msgstr "Sudo komando-taldea" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Izena" + +msgid "Last name" +msgstr "Abizena" + +msgid "Full name" +msgstr "Izen osoa" + +msgid "Display name" +msgstr "Bistaratu izena" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "E-posta helbidea" + +msgid "Prompt to set the user password" +msgstr "" + +#, fuzzy +#| msgid "Random password" +msgid "Generate a random user password" +msgstr "Ausazko pasahitza" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "Kalea" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "Telefono-zenbakia" + +msgid "Mobile Telephone Number" +msgstr "Mugikor-zenbakia" + +msgid "Pager Number" +msgstr "Bilagailu-zenbakia" + +msgid "Fax Number" +msgstr "Fax-zenbakia" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "Kudeatzailea" + +msgid "Car License" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Account disabled" +msgstr "Kontuaren ezarpenak" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "RADIUS proxy configuration" +msgstr "Konfigurazioa" + +msgid "RADIUS proxy username" +msgstr "" + +#, fuzzy +#| msgid "Pager Number" +msgid "Department Number" +msgstr "Bilagailu-zenbakia" + +#, fuzzy +#| msgid "Telephone Number" +msgid "Employee Number" +msgstr "Telefono-zenbakia" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Member of groups" +msgstr "Bilatu taldeak." + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +#, fuzzy +#| msgid "Add and Close" +msgid "Add a new user." +msgstr "Gehitu eta itxi" + +#, fuzzy +#| msgid "Default users group" +msgid "Don't create user private group" +msgstr "Erabiltzaile-talde lehenetsia" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a user." +msgstr "Ezabatu taldea." + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for users." +msgstr "Bilatu taldeak." + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a user." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the user object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "A description of this host" +msgid "A description of this auto member rule" +msgstr "Ostalari honen deskribapena" + +#, fuzzy +#| msgid "Default users group" +msgid "Default (fallback) Group" +msgstr "Erabiltzaile-talde lehenetsia" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for entries to land" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "Attribute Key" +msgstr "Atributua" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for automember rules." +msgstr "Bilatu taldeak." + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Arrazoia" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "minimum serial number" +msgstr "Serie-zenbakia" + +#, fuzzy +#| msgid "Serial number" +msgid "maximum serial number" +msgstr "Serie-zenbakia" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "Serie-zenbakia" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Revoke a certificate." +msgstr "Ziurtagiri berria" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "Irteerako fitxategi-izena" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "Sortu talde berri bat." + +#, fuzzy +#| msgid "Create a new group." +msgid "Create as a non-POSIX group" +msgstr "Sortu talde berri bat." + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +#, fuzzy +#| msgid "External User" +msgid "External member" +msgstr "Kanpoko erabiltzailea" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "Ezabatu taldea." + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Search for groups." +msgid "search for private groups" +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Search for groups." +msgid "search for POSIX groups" +msgstr "Bilatu taldeak." + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "search for non-POSIX groups" +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for groups with these member users." +msgstr "Bilatu taldeak." + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "Aldatu talde bat." + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the group object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target host" +msgstr "Helburuko taldea" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +#| msgid "New ACI name" +msgid "NetBIOS name" +msgstr "ACI izen berria" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Domain name" +msgstr "Komandoaren izena" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Range type" +msgstr "Arau-mota" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a trust." +msgstr "Ezabatu taldea." + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for trusts." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Range name" +msgstr "Berrizendatu" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for ranges." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify ID range." +msgstr "Aldatu talde bat." + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Disabled" +msgstr "Gaituta" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +#| msgid "Serial Number" +msgid "Serial" +msgstr "Serie-zenbakia" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for OTP token." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a OTP token." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the OTP token object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Command category" +msgstr "Komandoaren izena" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo order" +msgstr "Sudo komandoak" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "Kanpoko erabiltzailea" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host Masks" +msgstr "Ostalariak" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Allow Commands" +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Deny Commands" +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Sudo Allow Command Groups" +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Sudo Deny Command Groups" +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "RunAs External User" +msgid "RunAs Users" +msgstr "Exekutatu kanpoko erabiltzaile bezala" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "Exekutatu kanpoko erabiltzaile bezala" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "External User" +msgid "External Groups of RunAs Users" +msgstr "Kanpoko erabiltzailea" + +msgid "External Groups of users that the command can run as" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "RunAs Groups" +msgstr "Ostalari-taldeak" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "Exekutatu kanpoko talde bezala" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "Sudo aukera" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create new Sudo Rule." +msgstr "Sortu talde berri bat." + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "member sudo command group" +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "sudo command groups to add" +msgstr "Sudo komando-taldea" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete Sudo Rule." +msgstr "Ezabatu taldea." + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for Sudo Rule." +msgstr "Bilatu taldeak." + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify Sudo Rule." +msgstr "Aldatu talde bat." + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "sudo command groups to remove" +msgstr "Sudo komando-taldea" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Display Sudo Rule." +msgstr "Bistaratu izena" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "ACL name" +msgstr "ACI izena" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new CA ACL." +msgstr "Sortu talde berri bat." + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "member Certificate Profile" +msgstr "Ziurtagiri berria" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for CA ACLs." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a CA ACL." +msgstr "Aldatu talde bat." + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Add to default group" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +#, fuzzy +#| msgid "Search" +msgid "Search scope" +msgstr "Bilatu" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server name" +msgstr "Zerbitzuaren izena" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA server hostname" msgstr "Erabili beharreko IPA zerbitzaria" +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "Delete IPA server." +msgstr "IPA zerbitzaria" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for IPA servers." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "IPA Server" +msgid "Show IPA server." +msgstr "IPA zerbitzaria" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new service delegation rule." +msgstr "Sortu talde berri bat." + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +#, fuzzy +#| msgid "Deleted service \"%(value)s\"" +msgid "Delete service delegation." +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a stage user." +msgstr "Ezabatu taldea." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for stage users." +msgstr "Bilatu taldeak." + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a stage user." +msgstr "Aldatu talde bat." + +#, fuzzy +#| msgid "Rename the %(ldap_obj_name)s object" +msgid "Rename the stage user object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Segment name" +msgstr "Zerbitzuaren izena" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to strip" +msgstr "Atributuak" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to replicate" +msgstr "Atributuak" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Suffix name" +msgstr "fitxategi-izena" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a segment." +msgstr "Ezabatu taldea." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for topology segments." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a segment." +msgstr "Aldatu talde bat." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Display a segment." +msgstr "Bistaratu izena" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for topology suffices." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a topology suffix." +msgstr "Aldatu talde bat." + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Vault name" +msgstr "Abizena" + +#, fuzzy +#| msgid "description" +msgid "Vault description" +msgstr "deskribapena" + +#, fuzzy +#| msgid "Rule type" +msgid "Vault type" +msgstr "Arau-mota" + +msgid "Salt" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Vault salt" +msgstr "Shell lehenetsia" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Owner groups" +msgstr "Erabiltzaile-taldea" + +#, fuzzy +#| msgid "Services" +msgid "Owner services" +msgstr "Zerbitzuak" + +#, fuzzy +#| msgid "HBAC service" +msgid "Vault service" +msgstr "HBAC zerbitzua" + +msgid "Shared vault" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Vault user" +msgstr "Erabiltzaile-talde lehenetsia" + +#, fuzzy +#| msgid "Certificate" +msgid "Transport Certificate" +msgstr "Ziurtagiria" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "owner group" +msgstr "Erabiltzaile-taldea" + +#, fuzzy +#| msgid "HBAC service" +msgid "owner service" +msgstr "HBAC zerbitzua" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a vault." +msgstr "Ezabatu taldea." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for vaults." +msgstr "Bilatu taldeak." + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Show vault configuration." +msgstr "Konfigurazioa" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Profile description" +msgstr "deskribapena" + +#, fuzzy +#| msgid "A description of this host" +msgid "Brief description of this profile" +msgstr "Ostalari honen deskribapena" + +#, fuzzy +#| msgid "New Certificate" +msgid "Store issued certificates" +msgstr "Ziurtagiri berria" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for Certificate Profiles." +msgstr "Bilatu taldeak." + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "Hostname (FQDN)" +msgstr "Ostalari-izena" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Remote server name" +msgstr "Zerbitzuaren izena" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "Remote IPA server hostname" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for topology suffixes." +msgstr "Bilatu taldeak." + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "NSEC Next Domain Name" +msgstr "NIS domeinu-izena" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Next Domain Name" +msgstr "NIS domeinu-izena" + +msgid "NSEC Type Map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "Mota" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for entitlement accounts." +msgstr "Bilatu taldeak." + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "Erabiltzaile-izena" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "Registration password" +msgstr "Berrezarri pasahitza" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "Source Host Groups" +msgstr "Ostalari-taldeak" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target members of a group" +msgstr "Helburuko taldea" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission type" +msgstr "Baimena" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +msgid "Passwords do not match!" +msgstr "Pasahitzak ez datoz bat!" + +msgid "No matching entries found" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Topic or Command" +msgstr "Sudo komandoak" + +msgid "The topic or command name." +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Topic commands:" +msgstr "Sudo komandoak" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "Komandoaren izena" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +#, fuzzy +#| msgid "A list of ACI values" +msgid "A list of LDAP entries" +msgstr "ACI balioen zerrenda bat" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "barne-errore bat gertatu da" + +#, fuzzy, python-format +#| msgid "an internal error has occurred" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "barne-errore bat gertatu da" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + #, python-format msgid "Invalid JSON-RPC request: %(error)s" msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" -msgid "Invalid LDAP URI." -msgstr "LDAP URI baliogabea." +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" #, python-format msgid "Kerberos error: %(major)s/%(minor)s" msgstr "Kerberos errorea: %(major)s/%(minor)s" -msgid "LDAP password" -msgstr "LDAP pasahitza" - -msgid "Last name" -msgstr "Abizena" - -msgid "Manager" -msgstr "Kudeatzailea" - -msgid "Maximum username length" -msgstr "Erabiltzaile-izenaren gehienezko luzera" - -msgid "Mobile Telephone Number" -msgstr "Mugikor-zenbakia" +msgid "did not receive Kerberos credentials" +msgstr "" #, python-format -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" #, python-format -msgid "Modified user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" -msgid "Modify a group." -msgstr "Aldatu talde bat." +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" -msgid "NIS domain name" -msgstr "NIS domeinu-izena" +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" -msgid "Name of host-group" -msgstr "Ostalari-taldearen izena" +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" -msgid "New ACI name" -msgstr "ACI izen berria" +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" -msgid "New Certificate" -msgstr "Ziurtagiri berria" +#, python-format +msgid "'%(name)s' is required" +msgstr "" -msgid "New Password" -msgstr "Pasahitz berria" +#, fuzzy, python-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "invalid '%(name)s': %(error)s" +msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" -msgid "OK" -msgstr "Ados" - -msgid "Operating system" -msgstr "Sistema eragilea" - -msgid "Organization" -msgstr "Erakundea" - -msgid "Output filename" -msgstr "Irteerako fitxategi-izena" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "Pager Number" -msgstr "Bilagailu-zenbakia" - -msgid "Password" -msgstr "Pasahitza" +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" msgid "Passwords do not match" msgstr "Pasahitzak ez datoz bat" -msgid "Passwords do not match!" -msgstr "Pasahitzak ez datoz bat!" +#, fuzzy +#| msgid "Command name" +msgid "Command not implemented" +msgstr "Komandoaren izena" -msgid "Passwords must match" -msgstr "Pasahitzek bat etorri behar dute" - -msgid "Permission" -msgstr "Baimena" - -msgid "Permissions" -msgstr "Baimenak" - -msgid "Random password" -msgstr "Ausazko pasahitza" - -msgid "Reason" -msgstr "Arrazoia" - -msgid "Rename" -msgstr "Berrizendatu" +msgid "Client is not configured. Run ipa-client-install." +msgstr "" #, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" +msgid "Could not get %(name)s interactively" +msgstr "" -msgid "Reset Password" -msgstr "Berrezarri pasahitza" +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" -msgid "Retry" -msgstr "Saiatu berriz" +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" -msgid "Rule type" -msgstr "Arau-mota" +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" -msgid "Run Commands" -msgstr "Exekutatu komandoak" +msgid "This entry already exists" +msgstr "Sarrera hau dagoeneko existitzen da" -msgid "RunAs External Group" -msgstr "Exekutatu kanpoko talde bezala" +msgid "You must enroll a host in order to create a host service" +msgstr "" -msgid "RunAs External User" -msgstr "Exekutatu kanpoko erabiltzaile bezala" +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" -msgid "SHA1 Fingerprint" -msgstr "SHA1 hatz-marka" +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" -msgid "Search" -msgstr "Bilatu" +msgid "This command requires root access" +msgstr "" -msgid "Search for groups." +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already enabled" +msgstr "Sarrera hau dagoeneko existitzen da" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already disabled" +msgstr "Sarrera hau dagoeneko existitzen da" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already a member" +msgstr "Sarrera hau dagoeneko existitzen da" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "The default users group cannot be removed" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Syntax Error: %(error)s" +msgid "Certificate format error: %(error)s" +msgstr "Sintaxi-errorea: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(reason)s" +msgid "%(exception)s" +msgstr "%(reason)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "can be at most %(maxvalue)s" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "must be a certificate" +msgstr "Ziurtagiri berria" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "must be '%(value)s'" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "invalid domain name" +msgstr "NIS domeinu-izena" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "IP helbide formatu baliogabea" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added hostgroup \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified automount map \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key named %(key)s already exists" +msgstr "Sarrera hau dagoeneko existitzen da" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Added hostgroup \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified automount key \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profile" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profiles" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Konfigurazioa" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, fuzzy, python-format +#| msgid "Search for groups." +msgid "%i users or groups added." msgstr "Bilatu taldeak." -msgid "Serial Number" -msgstr "Serie-zenbakia" +msgid "users cannot be added when user category='all'" +msgstr "" -msgid "Serial number" -msgstr "Serie-zenbakia" +#, python-format +msgid "%i user or group removed." +msgstr "" -msgid "Service Groups" -msgstr "Zerbitzu-taldeak" +#, python-format +msgid "%i users or groups removed." +msgstr "" -msgid "Service group name" -msgstr "Zerbitzu-taldearen izena" +#, python-format +msgid "%i host or hostgroup added." +msgstr "" -msgid "Service name" +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i service added." msgstr "Zerbitzuaren izena" -msgid "Services" -msgstr "Zerbitzuak" +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i services added." +msgstr "Zerbitzuaren izena" -msgid "Set OTP" -msgstr "Ezarri OTP" +msgid "services cannot be added when service category='all'" +msgstr "" -msgid "Settings" -msgstr "Ezarpenak" +#, python-format +msgid "%i service removed." +msgstr "" -msgid "Specified Groups" -msgstr "Zehazturiko taldeak" +#, python-format +msgid "%i services removed." +msgstr "" -msgid "Status" -msgstr "Egoera" +#, python-format +msgid "%i profile added." +msgstr "" -msgid "Street address" -msgstr "Kalea" +#, python-format +msgid "%i profiles added." +msgstr "" -msgid "Subject" -msgstr "Gaia" +msgid "profiles cannot be added when profile category='all'" +msgstr "" -msgid "Subtree" -msgstr "Azpi-zuhaitza" +#, python-format +msgid "%i profile removed." +msgstr "" -msgid "Sudo" -msgstr "Sudo" +#, python-format +msgid "%i profiles removed." +msgstr "" -msgid "Sudo Command Group" -msgstr "Sudo komando-taldea" +msgid "Add CAs to a CA ACL." +msgstr "" -msgid "Sudo Commands" -msgstr "Sudo komandoak" +#, python-format +msgid "%i CA added." +msgstr "" -msgid "Sudo Option" -msgstr "Sudo aukera" +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "IP sare formatu baliogabea" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +#, fuzzy +#| msgid "invalid IP address format" +msgid "invalid address format" +msgstr "IP helbide formatu baliogabea" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Managedby permission" +msgstr "Baimena" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "permission \"%(value)s\" already exists" +msgstr "Sarrera hau dagoeneko existitzen da" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed system permission \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +#, fuzzy +#| msgid "Default location of home directories" +msgid "Default time to live" +msgstr "Karpeta nagusien kokaleku lehenetsia" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "" +msgstr "IPA zerbitzaria" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted record \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "DNS configuration options" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "Configuration" +msgid "DNS Global Configuration" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA DNS version" +msgstr "IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA DNS servers" +msgstr "IPA zerbitzaria" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA DNS records" +msgstr "IPA zerbitzaria" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Konfigurazioa" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS server" +msgstr "IPA zerbitzaria" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS Servers" +msgstr "IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS Server" +msgstr "IPA zerbitzaria" + +#, fuzzy +#| msgid "Service name" +msgid "DNS Server name" +msgstr "Zerbitzuaren izena" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for DNS servers." +msgstr "Bilatu taldeak." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "HBAC services" +msgstr "HBAC zerbitzua" + +msgid "HBAC Services" +msgstr "HBAC zerbitzuak" + +#, fuzzy +#| msgid "HBAC Services" +msgid "HBAC Service" +msgstr "HBAC zerbitzuak" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "HBAC service" +msgid "HBAC service group" +msgstr "HBAC zerbitzua" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Groups" +msgstr "Zerbitzu-taldeak" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Group" +msgstr "Zerbitzu-taldeak" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy, python-format +#| msgid "HBAC service group description" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "HBAC zerbitzu-taldearen deskribapena" +msgstr[1] "HBAC zerbitzu-taldearen deskribapena" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "Stage Users" +msgstr "Erabiltzaileak" + +#, fuzzy +#| msgid "External User" +msgid "Stage User" +msgstr "Kanpoko erabiltzailea" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "host groups" +msgstr "Ostalari-taldeak" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host Group" +msgstr "Ostalari-taldeak" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy +#| msgid "Host-group" +msgid "hostgroup" +msgstr "Ostalari-taldea" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA KRA servers" +msgstr "IPA zerbitzaria" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "netgroups" +msgstr "taldeak" + +#, fuzzy +#| msgid "groups" +msgid "Netgroups" +msgstr "taldeak" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "taldea" + +#, fuzzy, python-format +#| msgid "Added hostgroup \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Konfigurazioa" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Changed password for \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "PKINIT" + +#, fuzzy +#| msgid "PKINIT" +msgid "PKINIT status" +msgstr "PKINIT" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Serie-zenbakia" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Servers" +msgstr "IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Server" +msgstr "IPA zerbitzaria" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "ACI balioen zerrenda bat" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "ACI prefix" +msgid "ACI prefix is required" +msgstr "ACI aurrizkia" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "The group doesn't exist" +msgid "Group '%s' does not exist" +msgstr "Taldea ez da existitzen" + +msgid "empty filter" +msgstr "" #, python-format msgid "Syntax Error: %(error)s" msgstr "Sintaxi-errorea: %(error)s" -msgid "Target group" -msgstr "Helburuko taldea" +#, python-format +msgid "invalid DN (%s)" +msgstr "" -msgid "Telephone Number" -msgstr "Telefono-zenbakia" +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACIak" + +msgid "ACI" +msgstr "ACI" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Konfigurazioa" + +msgid "Configuration" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "Erabiltzaile-izenaren gehienezko luzera" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA CA servers" +msgstr "IPA zerbitzaria" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "Hidden IPA DNS servers" +msgstr "IPA zerbitzaria" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" msgid "The group doesn't exist" msgstr "Taldea ez da existitzen" -msgid "This entry already exists" -msgstr "Sarrera hau dagoeneko existitzen da" +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" -msgid "Type" -msgstr "Mota" +msgid "May not be empty" +msgstr "" -msgid "UID" -msgstr "UID" +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" -msgid "User" -msgstr "Erabiltzailea" +msgid "A list of SELinux users delimited by $ expected" +msgstr "" -msgid "User Group" -msgstr "Erabiltzaile-taldea" +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" -msgid "User Groups" -msgstr "Erabiltzaile-taldeak" +msgid "SELinux user map default user not in order list" +msgstr "" -msgid "User group" -msgstr "Erabiltzaile-taldea" - -msgid "User password" -msgstr "Erabiltzailearen pasahitza" - -msgid "Username" -msgstr "Erabiltzaile-izena" - -msgid "Users" -msgstr "Erabiltzaileak" - -msgid "View" -msgstr "Ikusi" - -msgid "an internal error has occurred" -msgstr "barne-errore bat gertatu da" - -msgid "description" -msgstr "deskribapena" - -msgid "entries" -msgstr "sarrerak" - -msgid "entry" -msgstr "sarrera" - -msgid "filename" -msgstr "fitxategi-izena" - -msgid "group" -msgstr "taldea" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" msgid "groups" msgstr "taldeak" -msgid "hostname" +msgid "User Group" +msgstr "Erabiltzaile-taldea" + +#, fuzzy, python-format +#| msgid "Added hostgroup \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy +#| msgid "Target group" +msgid "privileged group" +msgstr "Helburuko taldea" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Not a managed group" +msgstr "Sortu talde berri bat." + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Permissions\n" +msgstr "Baimenak" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Managed permissions\n" +msgstr "Baimenak" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deprecated; use %s" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "The group doesn't exist" +msgid "Entry %s does not exist" +msgstr "Taldea ez da existitzen" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified permission \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +#, fuzzy +#| msgid "HBAC rules" +msgid "sudo rules" +msgstr "HBAC arauak" + +#, fuzzy +#| msgid "HBAC Rules" +msgid "Sudo Rules" +msgstr "HBAC arauak" + +#, fuzzy +#| msgid "Sudo" +msgid "Sudo Rule" +msgstr "Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "users" +msgstr "Erabiltzaileak" + +#, fuzzy +#| msgid "Any Command" +msgid "command" +msgstr "Edozein komando" + +#, fuzzy +#| msgid "Run Commands" +msgid "commands" +msgstr "Exekutatu komandoak" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "taldeak" + +#, fuzzy +#| msgid "groups" +msgid "runAs groups" +msgstr "taldeak" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "sudo command" +msgstr "Sudo komandoak" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "sudo commands" +msgstr "Sudo komandoak" + +msgid "Sudo Commands" +msgstr "Sudo komandoak" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "sudo command group" +msgstr "Sudo komando-taldea" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "sudo command groups" +msgstr "Sudo komando-taldea" + +#, fuzzy, python-format +#| msgid "Added hostgroup \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy, python-format +#| msgid "Sudo Command Group" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "Sudo komando-taldea" +msgstr[1] "Sudo komando-taldea" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Default e-mail domain" +msgid "Realm domains" +msgstr "E-posta domeinu lehenetsia" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Location name" +msgstr "Abizena" + +#, fuzzy +#| msgid "NIS domain name" +msgid "IPA location name" +msgstr "NIS domeinu-izena" + +#, fuzzy +#| msgid "description" +msgid "IPA Location description" +msgstr "deskribapena" + +#, fuzzy +#| msgid "Services" +msgid "Servers" +msgstr "Zerbitzuak" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "IPA Server" +msgstr "IPA zerbitzaria" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for IPA locations." +msgstr "Bilatu taldeak." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Ostalari-izena" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Baimena" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "Method name" msgstr "ostalari-izena" -msgid "invalid IP address format" +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for commands." +msgstr "Bilatu taldeak." + +#, fuzzy +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "Exekutatu komandoak" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for classes." +msgstr "Bilatu taldeak." + +msgid "Display information about a help topic." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for help topics." +msgstr "Bilatu taldeak." + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI izena" + +#, fuzzy +#| msgid "Random password" +msgid "Confirm (password)" +msgstr "Ausazko pasahitza" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Shell lehenetsia" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for command outputs." +msgstr "Bilatu taldeak." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "local domain range" +msgstr "NIS domeinu-izena" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Modify a group." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Aldatu talde bat." + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +#| msgid "HBAC service description" +msgid "self service permission" +msgstr "HBAC zerbitzuaren deskribapena" + +#, fuzzy +#| msgid "HBAC service description" +msgid "self service permissions" +msgstr "HBAC zerbitzuaren deskribapena" + +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Baimenak" + +#, fuzzy +#| msgid "Permission" +msgid "Self Service Permission" +msgstr "Baimena" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Roles" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Role" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA server role name" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Ziurtagiria" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "Gaia" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "E-posta helbidea" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Gaia" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Kalea" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Direktorio nagusiaren oinarria" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Gaia" + +#, fuzzy +#| msgid "Street address" +msgid "Subject IP Address" +msgstr "Kalea" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Gaia" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Gaia" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "Hatz-marka (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Hatz-marka (SHA1)" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Serie-zenbakia" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Sudo Option" +msgid "'add' option" +msgstr "Sudo aukera" + +#, fuzzy +#| msgid "The group doesn't exist" +msgid "The principal for this request doesn't exist." +msgstr "Taldea ez da existitzen" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Egoera" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +#, fuzzy +#| msgid "View" +msgid "ID View" +msgstr "Ikusi" + +msgid "system ID View" +msgstr "" + +#, fuzzy +#| msgid "View" +msgid "ID Views" +msgstr "Ikusi" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Authority" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Authorities" +msgstr "Ziurtagiria" + +msgid "Name for referencing the CA" +msgstr "" + +#, fuzzy +#| msgid "A description of this host" +msgid "Description of the purpose of the CA" +msgstr "Ostalari honen deskribapena" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DN" +msgstr "Gaia" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for CAs." +msgstr "Bilatu taldeak." + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display the properties of a CA." +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a CA." +msgstr "Sortu talde berri bat." + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Created CA \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Modify CA configuration." +msgstr "Konfigurazioa" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "IPA CA cannot be disabled" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Enable a CA." +msgstr "Gaituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to proceed with the action?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to delete ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to disable ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to enable ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +#, fuzzy +#| msgid "entries" +msgid "No entries." +msgstr "sarrerak" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "Gehitu eta gehitu beste bat" + +msgid "Add and Close" +msgstr "Gehitu eta itxi" + +msgid "Add and Edit" +msgstr "Gehitu eta editatu" + +msgid "Add Many" +msgstr "Gehitu hainbat" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "Utzi" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "Itxi" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Enable" +msgstr "Gaituta" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "Ados" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete" +msgstr "Ezabatu taldea." + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "Berrezarri pasahitza" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset Password and Log in" +msgstr "Berrezarri pasahitza" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "Saiatu berriz" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +#, fuzzy +#| msgid "Set OTP" +msgid "Set" +msgstr "Ezarri OTP" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "Ikusi" + +#, fuzzy +#| msgid "Configuration" +msgid "Customization" +msgstr "Konfigurazioa" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "Orokorra" + +#, fuzzy +#| msgid "Contact Settings" +msgid "Identity Settings" +msgstr "Kontaktuaren ezarpenak" + +#, fuzzy +#| msgid "Account Settings" +msgid "Record Settings" +msgstr "Kontuaren ezarpenak" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +#| msgid "Added host \"%(value)s\"" +msgid "Add custom value" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Confirmation" +msgstr "Konfigurazioa" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Redirection" +msgstr "deskribapena" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "barne-errore bat gertatu da" + +#, fuzzy +#| msgid "Error" +msgid "HTTP Error" +msgstr "Errorea" + +msgid "Internal Error" +msgstr "" + +#, fuzzy +#| msgid "Error" +msgid "IPA Error" +msgstr "Errorea" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "Ezarpenak" + +msgid "Search" +msgstr "Bilatu" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Authenticating" +msgstr "Kontuaren ezarpenak" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Log In Using Certificate" +msgstr "Ziurtagiria" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "number of passwords" +msgstr "Erabiltzailearen pasahitza" + +msgid "seconds" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Migrating" +msgstr "Konfigurazioa" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "Atributua" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Add permission" +msgstr "Baimena" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove permissions" +msgstr "Baimenak" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Role Settings" +msgstr "Ezarpenak" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "HBAC service description" +msgid "Add self service permission" +msgstr "HBAC zerbitzuaren deskribapena" + +msgid "Remove self service permissions" +msgstr "" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Add rule" +msgstr "HBAC araua" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to change default group?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy +#| msgid "Default users group" +msgid "Default host group" +msgstr "Erabiltzaile-talde lehenetsia" + +#, fuzzy +#| msgid "Default users group" +msgid "Default user group" +msgstr "Erabiltzaile-talde lehenetsia" + +msgid "Exclusive" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Expression" +msgstr "Baimena" + +#, fuzzy +#| msgid "Host-group" +msgid "Host group rule" +msgstr "Ostalari-taldea" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host group rules" +msgstr "Ostalari-taldeak" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User group rule" +msgstr "Erabiltzaile-taldea" + +#, fuzzy +#| msgid "User group" +msgid "User group rules" +msgstr "Erabiltzaile-taldea" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Automount Location Settings" +msgstr "Kontuaren ezarpenak" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Map Type" +msgstr "Mota" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Allow" +msgid "All" +msgstr "Onartu" + +msgid "Any CA" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Any Host" +msgstr "Ostalariak" + +#, fuzzy +#| msgid "HBAC Services" +msgid "Any Service" +msgstr "HBAC zerbitzuak" + +#, fuzzy +#| msgid "Any Group" +msgid "Any Profile" +msgstr "Edozein talde" + +msgid "Anyone" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Rule status" +msgstr "Arau-mota" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified CAs" +msgstr "Zehazturiko taldeak" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified Hosts and Groups" +msgstr "Zehazturiko taldeak" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified Profiles" +msgstr "Zehazturiko taldeak" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified Services and Groups" +msgstr "Zehazturiko taldeak" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified Users and Groups" +msgstr "Zehazturiko taldeak" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificates" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Hold" +msgstr "Ziurtagiria" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Common Name" +msgstr "Komandoaren izena" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Maximum serial number" +msgstr "Serie-zenbakia" + +#, fuzzy +#| msgid "Serial number" +msgid "Minimum serial number" +msgstr "Serie-zenbakia" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "Hatz-markak" + +#, fuzzy +#| msgid "New Certificate" +msgid "Get Certificate" +msgstr "Ziurtagiri berria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Hold Removed" +msgstr "Ziurtagiria" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Issue new certificate" +msgstr "Ziurtagiri berria" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "No Valid Certificate" +msgstr "Ziurtagiri berria" + +msgid "New Certificate" +msgstr "Ziurtagiri berria" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "Erakundea" + +#, fuzzy +#| msgid "Organization" +msgid "Organizational Unit" +msgstr "Erakundea" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Remove certificate hold" +msgstr "Ziurtagiri berria" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate requested" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "New Certificate" +msgid "Revoke certificate" +msgstr "Ziurtagiri berria" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Revoked" +msgstr "Ziurtagiria" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "Serie-zenbakia" + +#, fuzzy +#| msgid "Serial Number" +msgid "Serial Number (hex)" +msgstr "Serie-zenbakia" + +msgid "SHA1 Fingerprint" +msgstr "SHA1 hatz-marka" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SHA256 Fingerprint" +msgstr "SHA1 hatz-marka" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Valid Certificate Present" +msgstr "Ziurtagiria" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "View Certificate" +msgstr "Ziurtagiri berria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate For Match" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Mapping Match" +msgstr "Ziurtagiria" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +#| msgid "User Group" +msgid "User Login" +msgstr "Erabiltzaile-taldea" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate mapping data" +msgstr "Ziurtagiria" + +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "Konfigurazioa" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +#, fuzzy +#| msgid "Group Settings" +msgid "Group Options" +msgstr "Taldearen ezarpenak" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Search Options" +msgstr "Sudo aukera" + +#, fuzzy +#| msgid "Sudo Option" +msgid "SELinux Options" +msgstr "Sudo aukera" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "Server Options" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +#| msgid "Services" +msgid "Service Options" +msgstr "Zerbitzuak" + +#, fuzzy +#| msgid "Sudo Option" +msgid "User Options" +msgstr "Sudo aukera" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Options" +msgstr "Sudo aukera" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create dns record" +msgstr "Sortu talde berri bat." + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "DNS Zone Settings" +msgstr "Kontuaren ezarpenak" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Remove Permission" +msgstr "Baimena" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "Erabiltzaile-taldea" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "Taldearen ezarpenak" + +#, fuzzy +#| msgid "External User" +msgid "External" +msgstr "Kanpoko erabiltzailea" + +msgid "Groups" +msgstr "Taldeak" + +#, fuzzy +#| msgid "Group Settings" +msgid "Group categories" +msgstr "Taldearen ezarpenak" + +#, fuzzy +#| msgid "RunAs External Group" +msgid "Change to external group" +msgstr "Exekutatu kanpoko talde bezala" + +#, fuzzy +#| msgid "Target group" +msgid "Change to POSIX group" +msgstr "Helburuko taldea" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Remove user groups" +msgstr "Erabiltzaile-talde lehenetsia" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group" +msgid "Group Type" +msgstr "Taldea" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Add HBAC rule" +msgstr "HBAC araua" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +#, fuzzy +#| msgid "HBAC rules" +msgid "Remove HBAC rules" +msgstr "HBAC arauak" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Via Service" +msgstr "Zerbitzuak" + +msgid "Who" +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add HBAC service" +msgstr "HBAC zerbitzua" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "Remove HBAC services" +msgstr "HBAC zerbitzua" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add HBAC service group" +msgstr "HBAC zerbitzua" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Remove HBAC service groups" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Include Enabled" +msgstr "Gaituta" + +#, fuzzy +#| msgid "HBAC Rules" +msgid "HBAC Test" +msgstr "HBAC arauak" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +#, fuzzy +#| msgid "HBAC Rules" +msgid "Rules" +msgstr "HBAC arauak" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Host Certificate" +msgstr "Ziurtagiria" + +msgid "Host Name" +msgstr "Ostalari-izena" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Host Settings" +msgstr "Ezarpenak" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +#| msgid "General" +msgid "Generate OTP" +msgstr "Orokorra" + +#, fuzzy +#| msgid "General" +msgid "Generated OTP" +msgstr "Orokorra" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "One-Time Password" +msgstr "Berrezarri pasahitza" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +#, fuzzy +#| msgid "Set OTP" +msgid "Reset OTP" +msgstr "Ezarri OTP" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset One-Time Password" +msgstr "Berrezarri pasahitza" + +msgid "Set OTP" +msgstr "Ezarri OTP" + +msgid "OTP set" +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "Set One-Time Password" +msgstr "Berrezarri pasahitza" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to unprovision this host?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "Add host group" +msgstr "Ostalari-taldea" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group Settings" +msgid "Host Group Settings" +msgstr "Taldearen ezarpenak" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Remove host groups" +msgstr "Ostalari-taldearen izena" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Enter trusted group name." +msgstr "Zerbitzu-taldearen izena" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Apply to host groups" +msgstr "Ostalari-taldearen izena" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Un-apply from host groups" +msgstr "Ostalari-taldearen izena" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host" +msgstr "Ostalariak" + +#, fuzzy +#| msgid "Group Settings" +msgid "Netgroup Settings" +msgstr "Taldearen ezarpenak" + +#, fuzzy +#| msgid "Service Groups" +msgid "Remove netgroups" +msgstr "Zerbitzu-taldeak" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Configure your token" +msgstr "Konfigurazioa" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "OTP Token Settings" +msgstr "Kontuaren ezarpenak" + +msgid "Disable token" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Enable token" +msgstr "Gaituta" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Show configuration uri" +msgstr "Konfigurazioa" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "Add Custom Attribute" +msgstr "Atributua" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission settings" +msgstr "Baimenak" + +#, fuzzy +#| msgid "Attribute" +msgid "Attribute breakdown" +msgstr "Atributua" + +#, fuzzy +#| msgid "Group Settings" +msgid "Privilege Settings" +msgstr "Taldearen ezarpenak" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Add password policy" +msgstr "LDAP pasahitza" + +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "Pasahitza" + +msgid "Remove password policies" +msgstr "" + +#, fuzzy +#| msgid "Add Many" +msgid "Add ID range" +msgstr "Gehitu hainbat" + +#, fuzzy +#| msgid "Settings" +msgid "Range Settings" +msgstr "Ezarpenak" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "Server Roles" +msgstr "Erabili beharreko IPA zerbitzaria" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "Server Role" +msgstr "Erabili beharreko IPA zerbitzaria" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete Server" +msgstr "Ezabatu taldea." + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add service" +msgstr "HBAC zerbitzua" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Service Certificate" +msgstr "Ziurtagiri berria" + +#, fuzzy +#| msgid "Group Settings" +msgid "Service Settings" +msgstr "Taldearen ezarpenak" + +#, fuzzy +#| msgid "Permission" +msgid "Provisioning" +msgstr "Baimena" + +#, fuzzy +#| msgid "Services" +msgid "Remove services" +msgstr "Zerbitzuak" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to unprovision this service?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Service unprovisioned" +msgstr "Zerbitzu-taldeak" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to activate selected users?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to activate ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to stage selected users?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to stage ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to restore selected users?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to restore ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Add sudo command" +msgstr "Sudo komandoak" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Remove sudo commands" +msgstr "Sudo komandoak" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Add sudo command group" +msgstr "Sudo komando-taldea" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Group" +msgid "Remove sudo command groups" +msgstr "Sudo komando-taldea" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Add and Close" +msgid "Add sudo rule" +msgstr "Gehitu eta itxi" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Add sudo option" +msgstr "Sudo aukera" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Onartu" + +msgid "Any Command" +msgstr "Edozein komando" + +msgid "Any Group" +msgstr "Edozein talde" + +msgid "Run Commands" +msgstr "Exekutatu komandoak" + +msgid "Deny" +msgstr "Ukatu" + +#, fuzzy +#| msgid "A description of this host" +msgid "Access this host" +msgstr "Ostalari honen deskribapena" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Specified Commands and Groups" +msgstr "Zehazturiko taldeak" + +msgid "Specified Groups" +msgstr "Zehazturiko taldeak" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Remove sudo options" +msgstr "Sudo aukera" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Replication configuration" +msgstr "Konfigurazioa" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Account" +msgstr "Kontuaren ezarpenak" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +#| msgid "Group Settings" +msgid "Trust Settings" +msgstr "Taldearen ezarpenak" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Pre-shared password" +msgstr "Erabiltzailearen pasahitza" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Trust type" +msgstr "Arau-mota" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +#, fuzzy +#| msgid "Default location of home directories" +msgid "Drive to mount a home directory" +msgstr "Karpeta nagusien kokaleku lehenetsia" + +msgid "Account Settings" +msgstr "Kontuaren ezarpenak" + +#, fuzzy +#| msgid "Account Settings" +msgid "Account Status" +msgstr "Kontuaren ezarpenak" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "Kontaktuaren ezarpenak" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete mode" +msgstr "Ezabatu taldea." + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "Mailing Address" +msgstr "E-posta helbidea" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "Zerbitzuak" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "User Groups" +msgid "User Vaults" +msgstr "Erabiltzaile-taldeak" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#, fuzzy +#| msgid "First name" +msgid "First OTP" +msgstr "Izena" + +#, fuzzy +#| msgid "New Password" +msgid "New password is required" +msgstr "Pasahitz berria" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "Pasahitzek bat etorri behar dute" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset your password." +msgstr "Berrezarri pasahitza" + +#, fuzzy +#| msgid "Set OTP" +msgid "Second OTP" +msgstr "Ezarri OTP" + +#, fuzzy +#| msgid "New Password" +msgid "Verify Password" +msgstr "Pasahitz berria" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to disable selected entries?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete selected entries?" +msgid "Are you sure you want to enable selected entries?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Network Services" +msgstr "Zerbitzuak" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +#| msgid "First name" +msgid "First" +msgstr "Izena" + +#, fuzzy +#| msgid "Last name" +msgid "Last" +msgstr "Abizena" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +#, fuzzy +#| msgid "invalid IP address format" +msgid "Not a valid IP address" msgstr "IP helbide formatu baliogabea" -msgid "invalid IP network format" -msgstr "IP sare formatu baliogabea" +#, fuzzy +#| msgid "invalid IP address format" +msgid "Not a valid IPv4 address" +msgstr "IP helbide formatu baliogabea" + +#, fuzzy +#| msgid "invalid IP address format" +msgid "Not a valid IPv6 address" +msgstr "IP helbide formatu baliogabea" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "IPA Server" +msgid "" +"\n" +"IPA servers\n" +msgstr "IPA zerbitzaria" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "server" +msgstr "IPA zerbitzaria" + +msgid "servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Servers" +msgstr "IPA zerbitzaria" + +msgid "Server location" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service weight" +msgstr "Zerbitzuaren izena" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "Egoera" + +#, fuzzy +#| msgid "Service name" +msgid "Server state" +msgstr "Zerbitzuaren izena" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Service delegation target" +msgstr "Zerbitzu-taldearen izena" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "LDAP URI baliogabea." + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users not found" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +#, fuzzy +#| msgid "SHA1 Fingerprint" +msgid "SSH public key fingerprint" +msgstr "SHA1 hatz-marka" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "password policy" +msgstr "pasahitza" + +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "pasahitza" + +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "Pasahitza" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "External trust" +msgstr "Kanpoko ostalaria" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "trust type" +msgstr "Arau-mota" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Konfigurazioa" + +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Konfigurazioa" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, fuzzy +#| msgid "UID" +msgid "SID" +msgstr "UID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain enabled" +msgstr "NIS domeinu-izena" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User Groups" +msgid "User logins" +msgstr "Erabiltzaile-taldeak" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "service" +msgstr "Zerbitzuak" + +#, fuzzy +#| msgid "Services" +msgid "services" +msgstr "Zerbitzuak" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "SMB service NetBIOS name" +msgstr "Zerbitzuaren izena" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified service \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Remove principal alias from a service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria aldatuta" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "HBAC arauak" + +msgid "HBAC Rules" +msgstr "HBAC arauak" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Member service groups" +msgstr "Zerbitzu-taldeak" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Member HBAC service groups" +msgstr "HBAC zerbitzu-taldearen deskribapena" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "Indirect Member HBAC service" +msgstr "HBAC zerbitzua" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "sarrera" + +msgid "entries" +msgstr "sarrerak" + +#, fuzzy +#| msgid "entry" +msgid "Entry" +msgstr "sarrera" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "User password expiration" +msgstr "Erabiltzailearen pasahitza" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory" +msgstr "Direktorio nagusiaren oinarria" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Direktorio nagusiaren oinarria" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Issuer of the certificate" +msgstr "Ziurtagiri berria" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users is not POSIX" +msgstr "Erabiltzaile berrientzako talde lehenetsia" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea aldatuta" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Password is too long!\n" +msgstr "Pasahitzak ez datoz bat!" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" #, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" -msgid "password" -msgstr "pasahitza" +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/fr.po b/po/fr.po index 5dd81ef66..ac0a5df08 100644 --- a/po/fr.po +++ b/po/fr.po @@ -18,549 +18,883 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n > 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "Mémoire saturée !\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Pas d'autorisation pour joindre cet hôte dans le domaine IPA.\n" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" +"Pas de permission en écriture sur le fichier « %s » du tableau de clés\n" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "Échec de « access() » sur %1$s : erreur n°= %2$d\n" + +#, c-format +msgid "Out of memory!" +msgstr "Mémoire saturée !" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "Impossible d'activer SSL dans LDAP\n" + +#, fuzzy +#| msgid "Simple bind failed\n" +msgid "SASL Bind failed\n" +msgstr "Échec de la connexion simple\n" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "La recherche de %1$s sur « rootdse » a échoué avec l'erreur %2$d\n" + +#, c-format +msgid "No values for %s" +msgstr "Aucune valeur pour %s" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "La recherche du « namingContext » d'IPA a échoué avec l'erreur %d\n" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "« namingContext » d'IPA introuvable\n" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "Impossible de déterminer le DN racine de %s\n" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Échec de l'enregistrement. %s\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "principal introuvable dans la réponse XML-RPC\n" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Hôte déjà joint.\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_dumps() failed\n" +msgstr "echec de « fork() »\n" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "Requête JSON-RPC invalide : %(error)s" + +#, fuzzy, c-format +#| msgid "Operation failed: %s\n" +msgid "JSON-RPC call failed: %s\n" +msgstr "Opération échouée : %s\n" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "No response" +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "Pas de réponse" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_pack_ex() failed: %s\n" +msgstr "echec de « fork() »\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Désinscription réussie.\n" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Échec de la désinscription.\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "résultat de la réponse XML-RPC introuvable\n" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "Impossible de déterminer le serveur IPA depuis %s\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"Impossible de joindre l'hôte : l'initialisation du contexte Kerberos a " +"échoué\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"Impossible de joindre l'hôte : cache des justificatifs d'identité Kerberos " +"introuvable\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"Impossible de joindre l'hôte : principal d'utilisateur Kerberos introuvable " +"et mot de passe non fourni.\n" + +#, c-format +msgid "fork() failed\n" +msgstr "echec de « fork() »\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "« ipa-getkeytab » introuvable\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "« ipa-getkeytab » a des permissions incorrectes ?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "échec de l'exécution de « ipa-getkeytab », erreur n° %d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "processus fils terminé avec %d\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Erreur à la résolution du tableau de clés : %s.\n" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Erreur à l'obtention du royaume Kerberos par défaut : %s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Erreur à l'analyse de « %1$s » : %2$s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Impossible d'obtenir les justificatifs d'identité initiaux : %s.\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Impossible de créer le cache des justificatifs d'identité Kerberos\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Erreur lors du stockage des justificatifs d'identité dans le cache : %s.\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Affiche la sortie XML-RPC brute en mode GSSAPI" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Mode discret. Seules les erreurs sont affichées." + +msgid "Unenroll this host from IPA server" +msgstr "Désinscrire cet hôte du serveur IPA" + +msgid "Hostname of this server" +msgstr "Nom d'hôte de ce serveur" + +msgid "hostname" +msgstr "nom d'hôte" + +msgid "IPA Server to use" +msgstr "Serveur IPA à utiliser" + +msgid "Specifies where to store keytab information." +msgstr "Indique où stocker l'information du tableau de clés." + +msgid "filename" +msgstr "nom de fichier" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" +"Forcer l'hôte à rejoindre le domaine. Rejoindre à nouveau même s'il a déjà " +"rejoint le domaine." + +msgid "LDAP password (if not using Kerberos)" +msgstr "Mot de passe LDAP (hors utilisation de Kerberos)" + +msgid "password" +msgstr "mot de passe" + +msgid "LDAP basedn" +msgstr "« basedn » de LDAP" + +msgid "basedn" +msgstr "« basedn »" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Le nom d'hôte doit être pleinement qualifié : %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Le nom d'hôte ne doit pas être : %s\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Impossible d'analyser le nom du principal\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "« krb5_parse_name » %1$d : %2$s\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Suppression du principal %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Impossible d'ouvrir le tableau de clés\n" + +#, c-format +msgid "principal not found\n" +msgstr "principal introuvable\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "« krb5_kt_get_entry » %1$d : %2$s\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Impossible de supprimer l'entrée\n" + +#, c-format +msgid "kvno %d\n" +msgstr "« kvno » %d\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "« krb5_kt_remove_entry » %1$d : %2$s\n" + +#, fuzzy, c-format +#| msgid "Failed to get result: %s\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "Impossible d'obtenir le résultat : %s\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Impossible d'analyser le principal\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "« krb5_unparse_name » %1$d : %2$s\n" + +#, c-format +msgid "realm not found\n" +msgstr "domaine introuvable\n" + +msgid "Print debugging information" +msgstr "Affiche les informations de débogage" + +msgid "Debugging output" +msgstr "Sortie de débogage" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Le principal à supprimer d'un tableau de clés (par ex. : ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "Kerberos Service Principal Name" +msgstr "Nom de principal de service Kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" +"Le fichier tableau de clés duquel il faut retirer le principal ou les " +"principaux." + +msgid "Keytab File Name" +msgstr "Nom de fichier du tableau de clés" + +msgid "Remove all principals in this realm" +msgstr "Supprimer tous les principaux de ce royaume" + +msgid "Realm name" +msgstr "Nom du royaume" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Échec de l'initialisation du contexte Kerberos\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Échec de l'ouverture du tableau de clés « %1$s » : %2$s\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "La fermeture du tableau des clés a échoué\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "« krb5_kt_close » %1$d : %2$s\n" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "impossible d'ouvrir le fichier de configuration %s\n" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "impossible d'utiliser « stat() » sur le fichier de configuration %s\n" + +#, c-format +msgid "out of memory\n" +msgstr "mémoire saturée\n" + +#, c-format +msgid "read error\n" +msgstr "erreur en lecture\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Échec de l'initialisation du contexte Kerberos : %1$s (%2$d)\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Impossible d'analyser le principal : %1$s (%2$d)\n" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Aucune clé acceptée par le KDC\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Mémoire saturée\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Impossible d'initialiser la bibliothèque LDAP !\n" + +msgid "Simple bind failed\n" +msgstr "Échec de la connexion simple\n" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Opération échouée : %s\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "Impossible d'obtenir le résultat : %s\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "Délai d'attente dépassé." + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "Impossible d'analyser le résultat étendu : %s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "Impossible d'analyser le résultat : %s\n" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Absence de liste de contrôle des réponses !\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Absence de contrôle de réponse !\n" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Mémoire saturée !\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Échec à la création du contrôle !\n" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "La liaison au serveur a échoué !\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Échec d'obtention du tableau de clés !\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "Échec de « ber_init() », contrôle invalide ?!\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "échec de « ber_scanf() », « kvno » introuvable ?!\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Échec lors de la récupération du type de chiffrement #%d\n" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "Échec lors de la récupération du type de chiffrement %1$s (#%2$d)\n" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "Échec lors de la récupération de toute clé" + +msgid "Failed to decode control reply!\n" +msgstr "Impossible de décoder la réponse de contrôle !\n" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Les mots de passe ne correspondent pas !" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "impossible d'ouvrir le fichier de configuration %s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Impossible d'analyser le fichier de configuration %s\n" + +#, fuzzy +#| msgid "Failed to open keytab\n" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Impossible d'ouvrir le tableau de clés\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "Afficher aussi peu que possible" + +msgid "Output only on errors" +msgstr "N'afficher que les erreurs" + +msgid "Contact this specific KDC Server" +msgstr "Contacter ce serveur KDC particulier" + +msgid "Server Name" +msgstr "Nom du serveur" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Le principal pour lequel obtenir un tableau de clés (par ex: ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "Type de chiffrement à demander" + +msgid "Comma separated encryption types list" +msgstr "Liste, séparée par des virgules, des types de chiffrement" + +msgid "Show the list of permitted encryption types and exit" +msgstr "Affiche la liste des types de chiffrement autorisés, et sort." + +msgid "Permitted Encryption Types" +msgstr "Type de chiffrements autorisés" + +msgid "Asks for a non-random password to use for the principal" +msgstr "Demande un mot de passe non aléatoire à utiliser pour le principal" + +msgid "LDAP DN" +msgstr "DN LDAP" + +msgid "DN to bind as if not using kerberos" +msgstr "DN à utiliser pour la connexion en cas de non-utilisation de Kerberos" + +msgid "LDAP password" +msgstr "Mot de passe LDAP" + +msgid "password to use if not using kerberos" +msgstr "" +"mot de passe à utiliser pour la connexion en cas de non-utilisation de " +"Kerberos" + +#, fuzzy +#| msgid "LDAP password" +msgid "Prompt for LDAP password" +msgstr "Mot de passe LDAP" + +#, fuzzy +#| msgid "CA certificate" +msgid "Path to the IPA CA certificate" +msgstr "Certificat d'AC" + +#, fuzzy +#| msgid "CA certificate" +msgid "IPA CA certificate" +msgstr "Certificat d'AC" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "Retrouver les clés courantes sans les modifier" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "Aucune préférence de type de chiffrement sur le système ?!\n" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Type de chiffrements pris en charge :\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Avertissement : échec de conversion de type (#%d)\n" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Enter LDAP password" +msgstr "Mot de passe LDAP" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "" +#| "cannot specify full target filter and extra target filter simultaneously" +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" +"impossible de définir simultanément un filtre de cible totale et un filtre " +"de cible complémentaire" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "Nom de serveur non fourni et indisponible\n" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "Options incompatibles indiquées (-r et -P)\n" + +msgid "New Principal Password" +msgstr "Nouveau mot de passe du principal" + +msgid "Verify Principal Password" +msgstr "Vérifier le mot de passe du principal" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Avertissement : les types « salt » ne sont pas traités avec des mots de " +"passe aléatoires (cf. option -P)\n" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Nom de principal de service invalide\n" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" +"Cache des justificatifs d'identité Kerberos introuvable. Possédez-vous un " +"ticket Kerberos ?\n" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" +"Principal d'utilisateur Kerberos introuvable. Avez-vous un cache de " +"justificatifs d'identité Kerberos ?\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Échec à l'ouverture du tableau de clés\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "Nouvelle tentative de récupération avec la méthode pre-4.0...\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Échec de création du contenu de la clé\n" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "Échec à l'obtention du tableau de clés\n" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Échec lors de l'ajout de la clé au tableau\n" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "Échec à la fermeture du tableau de clés\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Récupération du tableau de clés et stockage avec succès dans : %s\n" + +msgid "Failed members" +msgstr "Membres en échec" + +msgid "Failed source hosts/hostgroups" +msgstr "Hôtes/groupes d'hôtes source en échec" + +msgid "Failed hosts/hostgroups" +msgstr "Hôtes/groupes d'hôtes en échec" + +msgid "Failed users/groups" +msgstr "Utilisateurs/groupes en échec" + +msgid "Failed service/service groups" +msgstr "Services/groupes de service en échec" + +msgid "Failed to remove" +msgstr "Échec à la suppression" + +msgid "Failed RunAs" +msgstr "Échec de « RunAs »" + +msgid "Failed RunAsGroup" +msgstr "Échec de « RunAsGroup »" + +msgid "Failed profiles" +msgstr "Profils en échec" + +msgid "Failed CAs" +msgstr "AC en échec" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed member manager" +msgstr "Membres en échec" + +msgid "Failed managedby" +msgstr "Échec de « managedby »" + +msgid "Failed allowed to retrieve keytab" +msgstr "Échec de l'autorisation de récupération des tableaux de clés" + +msgid "Failed allowed to create keytab" +msgstr "Échec de l'autorisation de création de tableaux de clés" + +msgid "Failed targets" +msgstr "Échec de la cible" + +msgid "Failed owners" +msgstr "Propriétaires en échec" + +msgid "Failed to add" +msgstr "Échec lors de l'ajout" + +msgid "maps not connected to /etc/auto.master:" +msgstr "cartes non connectées à « /etc/auto.master » :" + +msgid "Import automount files for a specific location." +msgstr "Importer des fichiers « automount » pour un emplacement donné." + +msgid "Master file" +msgstr "Fichier maître" + +msgid "Automount master file." +msgstr "Fichier maître « automount »" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" +"Mode opératoire continu. Les erreurs sont notées, mais le processus continue." + +#, python-format +msgid "File %(file)s not found" +msgstr "Fichier %(file)s introuvable" + +#, python-format +msgid "key %(key)s already exists" +msgstr "La clé %(key)s existe déjà" + +#, python-format +msgid "map %(map)s already exists" +msgstr "La carte %(map)s existe déjà" + +msgid "Imported maps:" +msgstr "Cartes importées :" + +#, python-format +msgid "Added %(map)s" +msgstr " %(map)s ajoutée" + +msgid "Imported keys:" +msgstr "Clés importées :" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Ajout de %(src)s à %(dst)s" + +msgid "Ignored keys:" +msgstr "Clés ignorées :" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "%(src)s ignoré pour %(dst)s" + +msgid "Duplicate maps skipped:" +msgstr "Cartes dupliquées ignorées :" + +#, python-format +msgid "Skipped %(map)s" +msgstr "%(map)s ignoré" + +msgid "Duplicate keys skipped:" +msgstr "Clés dupliquées ignorées :" + +#, python-format +msgid "Skipped %(key)s" +msgstr "%(key)s ignoré" + +#, fuzzy +#| msgid "Input filename" +msgid "Input file" +msgstr "Nom du fichier en entrée" + +#, fuzzy +#| msgid "File to load the certificate from." +msgid "File to load the certificate from" +msgstr "Fichier depuis lequel charger le certificat." + +msgid "cannot specify both raw certificate and file" +msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Profil de configuration enregistré dans le fichier « %(file)s »" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Certificat(s) enregistré(s) dans le fichier '%(file)s'" + +msgid "Servers details:" +msgstr "Informations sur les serveurs :" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"Mode migration désactivé.\n" +"Utiliser la commande « ipa config-mod --enable-migration=TRUE » pour " +"l'activer." + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Les mots de passe ont été migrés dans un format chiffré.\n" +"IPA est incapable de créer des clés Kerberos sauf à\n" +"utiliser les mots de passe en clair. Tous les utilisateurs\n" +"migrés devront se connecter à https://your.domain/ipa/migration/\n" +"avant de pouvoir utiliser leur compte Kerberos." + +msgid "python-yubico is not installed." +msgstr "" + msgid "" "\n" +"YubiKey Tokens\n" +msgstr "" +"\n" +"Jetons YubiKey\n" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"Gestion de jetons YubiKey.\n" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" +"\n" +"Ce code est une extension du greffon « otptoken » ; il fournit la prise en\n" +"charge pour lire/écrire des jetons YubiKey directement.\n" + +msgid "" "\n" "EXAMPLES:\n" msgstr "" "\n" -"\n" "EXEMPLES :\n" -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -"\n" -"Exemples :\n" -" Trouver tous les serveurs :\n" -" ipa server-find\n" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" -"\n" -"\n" -"CONFIGURATION GLOBALE du DNS\n" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Surcharger ceci afin de pouvoir ajouter réussites et échecs aux\n" -" résultats renvoyés.\n" -" " - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Surcharger ceci afin de pouvoir définir réussites et échecs.\n" -" " - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Ajouter une règle d'auto-adhésion.\n" -" " - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Ajouter des conditions à une règle d'auto-adhésion.\n" -" " - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Supprimer une règle d'auto-adhésion.\n" -" " - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Afficher des informations au sujet d'une règle d'auto-adhésion.\n" -" " - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Afficher des informations pour les groupes d'auto-adhésion par défaut " -"(repli).\n" -" " - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -" État verrouillé d'un compte utilisateur\n" -"\n" -" Un compte peut être verrouillé si un mot de passe incorrect est entre à\n" -" plusieurs reprises dans un laps de temps donnée selon la politique de\n" -" contrôle des mots de passe. Le verrouillage du compte est un état\n" -" temporaire ; le compte peut être déverrouillé par un administrateur.\n" -"\n" -" Ce dernier se connecte sur l'IPA maître et affiche l'état du\n" -" verrouillage de chacun.\n" -"\n" -" Pour savoir si un compte est verrouillé sur un serveur donné, vous " -"devez\n" -" comparer le nombre d'échecs de connexion et l'heure du dernier échec.\n" -" Pour qu'un compte soit verrouillé, le nombre d'échecs doit dépasser le\n" -" maximum autorisé dans l'intervalle de temps donné tel que défini dans " -"la\n" -" politique de mot de passe propre à l'utilisateur.\n" -"\n" -" Le compteur d'échecs de connexion n'est incrémenté que lorsqu'un\n" -" utilisateur tente une connexion, il est donc possible qu'un compte\n" -" paraisse bloqué mais que la dernière tentative de connexion soit\n" -" antérieure à la durée de verrouillage de la règle. Cela\n" -" signifie que l'utilisateur peut tenter de se connecter à nouveau." - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Modifier la confiance (pour utilisation future).\n" -"\n" -" Actuellement seule l'option par défaut pour modifier les attributs LDAP\n" -" est disponible. D'autres options particulières seront ajoutées\n" -" dans les versions à venir.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Modifier une règle d'auto-adhésion.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Supprimer des conditions d'une règle d'auto-adhésion.\n" -" " - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Supprimer le groupe par défaut (repli) pour toute entrée sans " -"correspondance.\n" -" " - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Rechercher des règles d'auto-adhésion.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Définit un groupe par défaut (repli) pour toutes les entrées sans " -"correspondance.\n" -" " - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -" Déverrouiller un compte utilisateur\n" -"\n" -" Un compte utilisateur peut se verrouiller si le mot de passe n'est pas\n" -" saisi correctement plusieurs fois de suite dans un laps de temps donné\n" -" défini par la politique du mot de passe. Le verrouillage d'un compte " -"est\n" -" un état temporaire ; il peut être déverrouillé par un administrateur." - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" Objet conteneur de coffre-fort.\n" -" " - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Objet coffre-fort.\n" -" " - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" -"\n" -" C'est l'équivalent de :\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Ajouter un emplacement :\n" -" ipa location-add location --description 'Mon emplacement'\n" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Ajouter un segment de topologie au suffixe « ca » :\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Ajouter un segment de topologie au suffixe du domaine :\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Supprimer un emplacement :\n" -" ipa location-del location\n" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" -"\n" -" Supprimer un segment de topologie du suffixe « ca » :\n" -" ipa topologysegment-del ca segment_name\n" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" -"\n" -" Supprimer un segment de topologie du suffixe du domaine :\n" -" ipa topologysegment-del domain segment_name\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Trouver tous les emplacements :\n" -" ipa location-find\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Trouver tous les serveurs :\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Trouver tous les suffixes :\n" -" ipa topologysuffix-find\n" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" -"\n" -" Énumérer tous les segments de topologie dans le suffixe « ca » :\n" -" ipa topologysegment-find ca\n" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" -"\n" -" Énumérer tous les segments de topologie dans le suffixe du domaine :\n" -" ipa topologysegment-find domain\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -"Afficher la configuration d'un serveur DNS spécifique :\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Afficher un emplacement spécifique :\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Afficher les informations d'un serveur en particulier :\n" -" ipa server-show ipa.example.com\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Afficher l'état du rôle « Serveur DNS » d'un serveur :\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Afficher l'état de tous les rôles configurés sur un serveur :\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Modifier la configuration d'un serveur DNS spécifique :\n" -" ipa dnsserver-mod\n" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -" Vérification de la topologie du suffixe « ca » :\n" -" ipa topologysuffix-verify ca\n" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" -"\n" -" Vérification de la topologie du suffixe du domaine :\n" -" ipa topologysuffix-verify domain\n" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" -"\n" -" Ajouter un enregistrement LOC pour « example.com » :\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" -"\n" -" Ajouter une condition à la règle :\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -" Ajouter un hôte pouvant gérer tableau de clés et certificat d'un hôte " -"donné :\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" -"\n" -" Ajout d'un hôte à la règle :\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -" Ajouter un hôte :\n" -" ipa host-add web1.example.com\n" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" -"\n" -" Ajouter un serveur courriel pour « example.com » :\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Ajouter un nouvel hôte à l'aide d'un mot de passe à usage unique :\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -"Ajouter un nouvel hôte avec un mot de passe aléatoire :\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -" Ajouter un nouvel hôte :\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Ajouter un nouveau serveur :\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Ajouter un nouveau jeton :\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - msgid "" "\n" " Add a new token:\n" @@ -570,1435 +904,602 @@ msgstr "" " Ajouter un nouveau jeton :\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -" Ajouter une permission autorisant de gérer l'appartenance à un groupe :\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +msgid "Add a new YubiKey OTP token." +msgstr "Ajouter un nouveau jeton OTP YubiKey." -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" -"\n" -" Ajouter une permission autorisant la création d'utilisateurs :\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgid "YubiKey slot" +msgstr "Connecteur YubiKey" -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" -"\n" -" Ajout d'une règle sudo spéciale pour la configuration du serveur sudo par " -"défaut :\n" -" ipa sudorule-add defaults\n" +msgid "No free YubiKey slot!" +msgstr "Aucun connecteur YubiKey libre !" -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." msgstr "" -"\n" -" Ajouter un coffre-fort standard :\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" +"Suppression de %(servers)s de la topologie de réplication, merci de " +"patienter..." -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Ajouter un coffre-fort symétrique :\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file mot_de_passe.txt\n" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Règle sudo « %s » activée" -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" -"\n" -" Ajout d'un utilisateur à la règle :\n" -" ipa sudorule-add-user readfiles --users jsmith\n" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Règle sudo « %s » désactivée" -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" -"\n" -" Ajouter un utilisateur :\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "Option « %(option)s » ajoutée à la règle sudo « %(rule)s »" -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Ajouter un coffre-fort symétrique :\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --public-key-file public.pem\n" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Option « %(option)s » supprimée de la règle sudo « %(rule)s »" -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" -"\n" -" Ajouter une condition d'exclusion à la règle pour empêcher l'auto-" -"assignation :\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "La topologie de réplication du suffixe « %(suffix)s » est en ordre." -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." msgstr "" -"\n" -" Ajouter un autre enregistrement avec des options propres à MX :\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"La topologie de réplication du suffixe « %(suffix)s » contient des erreurs." -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" -"\n" -" Ajouter un autre enregistrement en mode interactif (lancé si dnsrecord-" -"add,\n" -" dnsrecord-mod, ou dnsrecord-del sont exécutés sans options) :\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgid "Topology is disconnected" +msgstr "La topologie est déconnectée" -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" -"\n" -" Ajouter un nouvel enregistrement A à www.example.com. Créer son inverse\n" -" dans la zone inverse appropriée. Dans ce cas, un enregistrement PTR « 2 »\n" -" pointant sur www.example.com sera créé dans la zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "Le serveur %(srv)s ne peut contacter les serveurs : %(replicas)s" -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" -"\n" -" Ajoutez un nouvel enregistrement PTR pour www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "Le nombre maximal d'agréments de réplication est dépassé" -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" -"\n" -" Ajouter de nouveaux enregistrements SRV pour serveurs LDAP. 3 requêtes\n" -" sur 4 iront vers fast.example.com, unes sur 4 vers slow.example.com. Si ni\n" -" l'un ni l'autre, n'est disponible, basculer sur backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" +msgid "Maximum number of agreements per replica" +msgstr "Le nombre maximal d'agréments par réplique" -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" -"\n" -" Ajouter une nouvelle zone inverse spécifiée par adresse IP de réseau :\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "Le serveur « %(srv)s » possède %(n)d agréments avec les serveurs :" -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgid "Delete a user, keeping the entry available for future use" msgstr "" -"\n" -" Ajouter une nouvelle zone :\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"Supprimer un utilisateur en préservant l'entrée correspondantes pour un " +"usage futur" -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" -"\n" -" Ajouter un second serveur de noms pour « example.com » :\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgid "Delete a user" +msgstr "Supprimer un utilisateur" -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" -"\n" -" Ajout d'un objet de commande sudo et ajout en tant que commande autorisée " -"dans la règle :\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgid "preserve and no-preserve cannot be both set" +msgstr "preserve et no-preserve ne peuvent être indiqués simultanément" -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" +msgid "Write certificate (chain if --chain used) to file" msgstr "" -"\n" -" Ajouter une permission système pour une délégation de privilège par zone :\n" -" ipa dnszone-add-permission example.com\n" -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" -"\n" -" Ajouter le groupe ou le groupe d'hôtes initial :\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" +#, fuzzy +#| msgid "System DNS records updated" +msgid "Split DNS record to parts" +msgstr "Enregistrements DNS du système mis à jour" -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" -"\n" -" Ajouter la règle initiale :\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" +msgid "Please choose a type of DNS resource record to be added" +msgstr "Veuillez choisir un type d'enregistrement de ressource DNS à ajouter" -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Ajouter des membres à un coffre-fort :\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Les types les plus courants pour ce type de zone sont : %s\n" -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Ajouter des propriétaires à un coffre-fort :\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" +msgid "DNS resource record type" +msgstr "Type d'enregistrement de ressource DNS" -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" -"\n" -" Après cette modification, 3 requêtes sur 5 iront vers fast.example.com\n" -" et 2 sur 5 vers slow.example.com.\n" +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Type invalide ou non pris en compte. Les valeurs autorisées sont : %s" -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Autoriser un utilisateur à créer un tableau de clé :\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgid "No option to modify specific record provided." +msgstr "Aucune option fournie pour modifier un enregistrement donné." -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" -"\n" -" Autoriser un utilisateur à créer un tableau de clé :\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgid "Current DNS record contents:\n" +msgstr "Contenu actuel de l'enregistrement DNS :\n" -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" -"\n" -" Voici un exemple du mode interactif pour la commande dnsrecord-del :\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Modifier '%(value)s' pour %(name)s ?" +#, python-format msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Archiver des données dans un coffre-fort asymétrique :\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +"%(count)d enregistrement %(type)s sauté. Une seule valeur modifiable par " +"enregistrement DNS." +msgstr[1] "" +"%(count)d enregistrements %(type)s sautés. Une seule valeur modifiable par " +"enregistrement DNS." msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." msgstr "" -"\n" -" Archiver des données dans un coffre-fort standard :\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" +"Ni « --del-all », ni aucune option de suppression d'enregistrement donné n'a " +"été indiqué.\n" +"Consulter l'aide pour connaître tous les types d'enregistrements pris en " +"charge." -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Archiver des données dans un coffre-fort symétrique :\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file mot_de_passe.txt\n" +msgid "No option to delete specific record provided." +msgstr "Pas d'option fournie pour supprimer un enregistrement donné." -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" -"\n" -" Modifier la politique de redirection pour « external.example.com » :\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgid "Delete all?" +msgstr "Tout supprimer ?" -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Changer le secret :\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Supprimer '%(value)s' pour %(name)s ?" -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Modifier le fournisseur :\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" +msgid "Server will check DNS forwarder(s)." +msgstr "Le serveur vérifiera le ou les serveurs de redirection DNS." -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" -"\n" -" Création d'une nouvelle règle :\n" -" ipa sudorule-add readfiles\n" +msgid "This may take some time, please wait ..." +msgstr "Cela peut prendre un peu de temps, veuillez patienter..." -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" -"\n" -" Déléguer la zone sub.example à un autre nom de serveur :\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgid "DNS forwarder" +msgstr "Transmetteur DNS" -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Supprimer une configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" +#, fuzzy +#| msgid "System DNS records updated" +msgid "file to store DNS records in nsupdate format" +msgstr "Enregistrements DNS du système mis à jour" msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" msgstr "" -"\n" -" Supprimer un hôte :\n" -" ipa host-del test.example.com\n" +"Impossible d'afficher le code QR avec l'encodage configuré sur la sortie. " +"Merci d'utiliser l'URI du jeton pour configurer votre jeton OTP" msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." msgstr "" -"\n" -" Supprimer un jeton :\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +"La largeur du code QR est supérieure à celle du terminal. Merci d'agrandir " +"votre fenêtre de terminal." -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Supprimer un coffre-fort :\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" +msgid "Synchronize an OTP token." +msgstr "Synchroniser un jeton OTP." -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -" Supprimer une règle d'adhésion automatique :\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" +msgid "User ID" +msgstr "Identifiant utilisateur" -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" -"\n" -" Supprimer la rediretion de zone « external.example.com » :\n" -" ipa dnsforwardzone-del external.example.com\n" +msgid "Password" +msgstr "Mot de passe" -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" -"\n" -" Supprimer le serveur de noms précédemment ajouté à « example.com » :\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgid "First Code" +msgstr "Premier code" -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Supprimer des membres d'un coffre-fort :\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" +msgid "Second Code" +msgstr "Second code" -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Supprimer des propriétaires d'un coffre-fort :\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" +msgid "Token ID" +msgstr "ID du jeton" -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" -"\n" -" Supprimer la zone « example.com » avec tous les enregistrements de " -"ressources :\n" -" ipa dnszone-del example.com\n" +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Impossible de lire le fichier « %(filename)s » : %(exc)s" -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" -"\n" -" Désactive la redirection globale pour les sous-arbres donnés :\n" -" ipa dnszone-mod example.com --forward-policy=none\n" +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Impossible de décoder le fichier « %(filename)s » : %(exc)s" -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -"Désactiver la clé Kerberos, les certificats SSL et tout service d'un hôte :\n" -" ipa host-disable test.example.com\n" +msgid "Invalid credentials" +msgstr "Données d'authentification invalides" -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" -"\n" -" Afficher une règle d'adhésion automatique :\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" +msgid "Create a new vault." +msgstr "Créer un nouveau coffre-fort." -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Afficher la configuration des coffres-forts :\n" -" ipa vaultconfig-show\n" +msgid "Vault password" +msgstr "Mot de passe du coffre-fort" -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Examiner la configuration :\n" -" ipa radiusproxy-show MyRADIUS\n" +msgid "File containing the vault password" +msgstr "Fichier contenant le mot de passe du coffre-fort" -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Examiner un jeton :\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "File containing the vault public key" +msgstr "Fichier contenant la clé publique du coffre-fort" -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgid "Password can be specified only for symmetric vault" msgstr "" -"\n" -" Trouver des enregistrements A avec la valeur 192.0.2.2 dans la zone\n" -" « example.com » :\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"Un mot de passe ne peut être indiqué que pour un coffre-fort symétrique" -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" +msgid "Public key can be specified only for asymmetric vault" msgstr "" -"\n" -" Retrouver toutes les règles d'adhésion automatique :\n" -" ipa automember-find\n" +"Une clé publique ne peut être indiquée que pour un coffre-fort asymétrique" -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Trouver tous serveurs dont les entrées incluent la chaîne « example." -"com » :\n" -" ipa radiusproxy-find example.com\n" +msgid "Password specified multiple times" +msgstr "Mot de passe indiqué plusieurs fois" -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" -"\n" -" Trouver des enregistrements de ressources avec « www » dans le nom dans la\n" -" zone « example.com » :\n" -" ipa dnsrecord-find example.com www\n" +msgid "Public key specified multiple times" +msgstr "Clé publique indiquée plusieurs fois" -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Trouver les arguments disponibles pour user-find :\n" -" ipa param-find user-find\n" +msgid "Missing vault public key" +msgstr "Clé publique du coffre-fort manquante" -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" -"\n" -" Trouver une zone avec « example » dans son nom de domaine :\n" -" ipa dnszone-find example\n" +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "Clé publique invalide ou non prise en charge : %s" -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" -"\n" -" Redirige toutes les requêtes pour la zone « external.example.com » vers un\n" -" autre redirecteur avec la politique « first » (il adresse les requêtes au\n" -" redirecteur sélectionné et s'il n'y a pas de réponse, les serveurs racines\n" -" globaux sont sollicités) :\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" +msgid "Modify a vault." +msgstr "Modifier un coffre-fort." -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" -"\n" -" Générer et récupérer un tableau de clés d'un service IPA :\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" +msgid "Change password" +msgstr "Modifier le mot de passe" -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" -"\n" -" Si une redirection globale est configurée, toute requête pour laquelle ce\n" -" serveur ne fait pas autorité (ex. sub.example.com) sera routée vers le \n" -" redirecteur global.\n" -" La configuration d'une redirection globale peut être surchargée par zone.\n" +msgid "Old vault password" +msgstr "Ancien mot de passe du coffre-fort" -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" -"\n" -" Lister toutes les redirections de zones :\n" -" ipa dnsforwardzone-find\n" +msgid "File containing the old vault password" +msgstr "Fichier contenant l'ancien mot de passe du coffre-fort" -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Énumérer les coffres-forts pour un service :\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" +msgid "New vault password" +msgstr "Nouveau mot de passe du coffre-fort" -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" -"\n" -" Modifier les clés d'un coffre-fort asymétrique :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" +msgid "File containing the new vault password" +msgstr "Fichier contenant le nouveau mot de passe du coffre-fort" -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" -"\n" -" Modifier la configuration DNS globale et définir une liste de redirecteurs\n" -" globaux :\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgid "Old vault private key" +msgstr "Ancienne clé privée du coffre-fort" -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Modifier les informations d'un hôte :\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" +msgid "File containing the old vault private key" +msgstr "Fichier contenant l'ancienne clé privée du coffre-fort" -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" -"\n" -" Modifier un coffre-fort symétrique :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" +msgid "File containing the new vault public key" +msgstr "Fichier contenant la nouvelle clé publique du coffre-fort" -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Modifier la règle d'adhésion automatique :\n" -" ipa automember-mod\n" +msgid "New public key specified multiple times" +msgstr "Nouvelle clé publique indiquée plusieurs fois" -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" -"\n" -" Modifier la zone pour permettre des mises à jour dynamiques des propres\n" -" enregistrements des hôtes dans le royaume EXAMPLE.COM :\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgid "Missing new vault public key" +msgstr "Nouvelle clé publique du coffre-fort manquante" -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" -"\n" -" Modifier la zone pour permettre des transferts de zone pour le réseau local " -"uniquement :\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgid "Archive data into a vault." +msgstr "Archiver des données dans un coffre-fort." -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Modifier la description d'un coffre-fort :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" +msgid "Binary data to archive" +msgstr "Fichier binaire à archiver" -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" -"\n" -" Modifier le type d'un coffre-fort :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [ancient mot de passe/clé privée]\n" -" [nouveau mot de passe/clé publique]\n" +msgid "File containing data to archive" +msgstr "Fichier contenant les données à archiver" -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"\n" -" Reconstruire l'appartenance de tous les hôtes :\n" -" ipa automember-rebuild --type=hostgroup\n" +msgid "Override existing password" +msgstr "Réécrire le mot de passe existant" -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"\n" -" Reconstruire l'appartenance de tous les utilisateurs :\n" -" ipa automember-rebuild --type=group\n" +msgid "Input data specified multiple times" +msgstr "Les données en entrée ont été indiquées plusieurs fois" +#, python-format msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" msgstr "" -"\n" -" Reconstruire l'appartenance d'hôtes donnés :\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" +"La taille des données excède la limite actuelle fixée à %(limit)d octets." -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" -"\n" -" Reconstruire l'appartenance d'utilisateurs donnés :\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgid "Invalid vault type" +msgstr "Type de coffre-fort invalide" -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -" Supprimer les clés publiques SSH d'un hôte et modifier DNS en " -"conséquence :\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgid "Retrieve a data from a vault." +msgstr "Récupérer une donnée depuis un coffre-fort" -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" -"\n" -" Supprimer une condition de la règle :\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" +msgid "File to store retrieved data" +msgstr "Fichier duquel récupérer les données" -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" -"\n" -" Supprimer le groupe cible par défaut (repli) ::\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" +msgid "Vault private key" +msgstr "Clé privée du coffre-fort" -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" -"\n" -" Résoudre un nom d'hôte pour voir s'il existe (ajoute le domaine IPA par\n" -" défaut s'il n'est pas inclus) :\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" +msgid "File containing the vault private key" +msgstr "Fichier contenant la clé privée du coffre-fort" -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Récupérer des données d'un coffre-fort asymétrique :\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file clé_privée.pem\n" +msgid "Data" +msgstr "Données" -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Récupérer des données d'un coffre-fort standard :\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" +msgid "Private key specified multiple times" +msgstr "Clé privée indiquée plusieurs fois" -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Récupérer des données d'un coffre-fort symétrique :\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file mot_de_passe.txt\n" +msgid "Missing vault private key" +msgstr "Clé privée du coffre-fort manquante" -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" -"\n" -" La sémantique de la redirection de zone dans IPA est la même que \n" -" celle de BIND, et dépend du type de zone :\n" -" * Zone maître : le serveur BIND local répond avec autorité aux " -"requêtes \n" -" de données dans la zone donnée (y compris les réponses ayant autorité\n" -" NXDOMAIN) et transfère uniquement les requêtes sur les noms dans les \n" -" sous-zones (enregistrements NS) des zones locales servies.\n" -" \n" -" * Zone redirigée : les zones transférées ne contiennent aucune donnée \n" -" faisant autorité. BIND transmet les requêtes qui ne peuvent être \n" -" servies par son cache local aux serveurs de redirection configurés.\n" -" \n" +msgid "Unrevoked" +msgstr "Réintégré" -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -" Définition d'une option par défaut pour sudo :\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgid "Error" +msgstr "Erreur" -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" -"\n" -" Définir le groupe cible par défaut (recours) :\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgid "Input filename" +msgstr "Nom du fichier en entrée" -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Afficher un coffre-fort :\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" +msgid "File to load the certificate from." +msgstr "Fichier depuis lequel charger le certificat." msgid "" "\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" +"Directory Server Access Control Instructions (ACIs)\n" "\n" -" Afficher la politique de redirection pour la zone « external.example." -"com » :\n" -" ipa dnsforwardzone-show external.example.com\n" - -msgid "" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" "\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" "\n" -"Afficher la configuration DNS globale :\n" -" ipa dnsconfig-show\n" - -msgid "" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" "\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" "\n" -" Afficher les enregistrements de ressources « www » dans la zone\n" -" « example.com » :\n" -" ipa dnsrecord-show example.com www\n" - -msgid "" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" "\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" "\n" -" Afficher le groupe cible par défaut (repki) :\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" - -msgid "" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" "\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" "\n" -" Afficher les informations sur user-find :\n" -" ipa command-show user-find\n" - -msgid "" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" "\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" "\n" -" Afficher la zone « example.com » :\n" -" ipa dnszone-show example.com\n" - -msgid "" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" "\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" "\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" +"EXAMPLES:\n" "\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" "\n" -" On peut utiliser le mode interactif pour faciliter les modifications :\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" "\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" "\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" - -msgid "" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" "\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" "\n" -" Cette configuration redirige toutes les requêtes pour les noms en dehors\n" -" du sous-arbre « example.com » vers les redirecteurs globaux. Le processus\n" -" normal de résolution récursive est utilisé pour les noms dans le sous-" -"arbre\n" -" « example.com » (ex. les enregistrements NS sont suivis, etc.).\n" - -msgid "" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" "\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" "\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" "\n" -" Vérifier une adhésion automatique :\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" "\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" - -msgid "" +"The show command shows the raw 389-ds ACI.\n" "\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" msgstr "" -"\n" -"* Une permission donne le droit de lire, écrire, ajouter, supprimer,\n" -" rechercher, ou comparer.\n" -"* Un privilège combine des permissions semblables (par exemple\n" -" toutes les permissions nécessaires pour ajouter un utilisateur).\n" -"* Un rôle garantit un ensemble de privilèges pour des utilisateurs, des " -"groupes, des hôtes ou des groupes d'hôtes.\n" -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Une condition est une expression rationnelle dont se sert « 389-ds » pour\n" -"associer nouvelle entrée et règle d'adhésion. Si l'entrée correspond à une\n" -"règle d'inclusion, elle est ajoutée au groupe ou groupe d'hôte approprié.\n" +msgid "ACI name" +msgstr "Nom d'ACI" -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" +msgid "Permission" +msgstr "Permission" + +msgid "Permission ACI grants access to" +msgstr "L'ACI « permission » permet un accès à" + +msgid "User group" +msgstr "Groupe d'utilisateurs" + +msgid "User group ACI grants access to" +msgstr "L'ACI d'un groupe utilisateur permet un accès à" + +msgid "Permissions" +msgstr "Permissions" + +msgid "Permissions to grant(read, write, add, delete, all)" msgstr "" -"\n" -"Un groupe ou groupe d'hôte par défaut peut être défini pour des entrées ne\n" -"correspondant à aucune règle. Tout utilisateur a ce groupe comme repli, car\n" -"il est par défaut membre du groupe indiqué dans la configuration de IPA.\n" +"Permissions à accorder (« read », « write », « add », « delete », « all »)" -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" +msgid "Attributes to which the permission applies" +msgstr "Attributs auxquels les permissions s'appliquent" + +msgid "Attributes" +msgstr "Attributs" + +msgid "Type" +msgstr "Type" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" msgstr "" -"\n" -"Une permission permet une délégation de droits finement nuancée. Elle est\n" -"une enveloppe lisible par le commun de Règles de contrôle d'accès 389-ds,\n" -"ou d'instruction (ACI).\n" -"Une permission donne le droit d'effectuer des tâches données comme ajouter\n" -"un utilisateur, modifier un groupe, etc.\n" +"type d'objet IPA (« user », « group », « host », « hostgroup », « service », " +"« netgroup »)" + +msgid "Member of" +msgstr "Membre de" + +msgid "Member of a group" +msgstr "Membre d'un groupe" + +msgid "Filter" +msgstr "Filtre" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Filtre LDAP valide (i.e. ou=Engineering)" + +msgid "Subtree" +msgstr "Sous-arbre" + +msgid "Subtree to apply ACI to" +msgstr "Sous-arbre auquel appliquer l'ACI" + +msgid "Target group" +msgstr "Groupe cible" + +msgid "Group to apply ACI to" +msgstr "Groupe auquel appliquer l'ACI" + +msgid "Target your own entry (self)" +msgstr "Cibler votre propre entrée (« self »)" + +msgid "Apply ACI to your own entry (self)" +msgstr "Appliquer l'ACI à votre propre entrée (« self »)" + +msgid "Create new ACI." +msgstr "Créer une nouvelle ICA." + +msgid "ACI prefix" +msgstr "Préfixe d'ACI" msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" msgstr "" -"\n" -"Une permission se compose de plusieurs parties :\n" -"\n" -"1. le nom de la permission.\n" -"2. la cible de la permission.\n" -"3. les droits garantis par la permission.\n" +"Préfixe utilisé pour distinguer les types d'ACI (« permission », " +"« delegation », « selfservice », « none »)" + +msgid "Test the ACI syntax but don't write anything" +msgstr "Tester la syntaxe de l'ACI, sans rien écrire" msgid "" -"\n" -"A permission may not contain other permissions.\n" +"Retrieve and print all attributes from the server. Affects command output." msgstr "" -"\n" -"Une permission ne peut pas contenir d'autres permissions.\n" +"Récupérer et afficher tous les attributs à partir du serveur. Affecte la " +"sortie de la commande." -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" +msgid "Print entries as stored on the server. Only affects output format." msgstr "" -"\n" -"Une règle est directement associée à un groupe par le nom, donc il n'est " -"pas\n" -"possible de créer une règle sans groupe ou groupe d'hôtes d'accompagnement.\n" +"Afficher les entrées telles qu'enregistrées sur le serveur. Affecte " +"uniquement le format de sortie." -msgid "" -"\n" -"API Schema\n" +msgid "User-friendly description of action performed" +msgstr "Description intelligible de l'action effectuée" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" msgstr "" -"\n" -"Schéma de l'API\n" +"La valeur de la clé principale de l'entrée, par ex. « jdoe » pour un " +"utilisateur" + +msgid "Delete ACI." +msgstr "Supprimer une ICA." + +msgid "True means the operation was successful" +msgstr "Vrai signifie que l'opération a réussi" msgid "" "\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" +"Search for ACIs.\n" "\n" -" --rid-base\n" -" --dom-sid\n" +" Returns a list of ACIs\n" "\n" -" must be given to add a new range for a trusted AD domain.\n" +" EXAMPLES:\n" "\n" -" WARNING:\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" "\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" "\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" " " msgstr "" -"\n" -"Ajouter une nouvelle plage d'identifiants.\n" -"\n" -" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " -"préciser\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" En outre,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " -"que\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " -"confiance.\n" -"\n" -" AVERTISSEMENT :\n" -"\n" -" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" -" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" -" lui-même reconfiguré selon les plages locales définies par " -"l'intermédiaire\n" -" de cette famille de commandes.\n" -"\n" -" Un changement manuel de configuration doit être opéré dans la " -"configuration\n" -" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" -" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " -"Assignment Plugin », « cn=plugins », « cn=config »\n" -" doivent être modifiés pour correspondre à cette nouvelle plage.\n" -" " -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " +msgid "A string searched in all relevant object attributes" msgstr "" -"\n" -"Ajout d'une nouvelle relation de confiance.\n" -"\n" -"Cette commande établit une relation de confiance avec un autre domaine\n" -"qui ainsi devient « de confiance ». En conséquence, des utilisateurs du\n" -"domaine approuvé peuvent avoir accès aux ressources de ce domaine.\n" -"\n" -"Actuellement, seules les relations d'approbation avec les domaines\n" -"Active Directory sont prises en charge.\n" -"\n" -"Cette commande peut être lancée plusieurs fois en toute sécurité à\n" -"l'encontre du même domaine, elle modifiera les références de la relation de\n" -"confiance des deux côtés.\n" -" " +"Une chaîne de caractères recherchée dans tous les attributs d'objets " +"pertinents" -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"En plus, il y a les options de commodité suivantes.\n" -"Activer une de ces options définit l'attribut correspondant.\n" -"1. type: un type d'objet (utilisateur, groupe, etc) ; définit le filtre du\n" -"sous-arbre et de la cible.\n" -"2. memberof : s'applique aux membres d'un groupe ; définit le filtre de la\n" -"cible.\n" -"3. targetgroup : permet la modification d'un groupe donné (comme ceux\n" -" de gestion de l'appartenance à un groupe); définit la cible.\n" +msgid "Primary key only" +msgstr "Clé principale uniquement" -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" +msgid "Results should contain primary key attribute only (\"name\")" msgstr "" -"\n" -"Les agréments sont représentés par des segments de topologie. Un segment de " -"topologie\n" -"représente par défaut deux agréments de réplication, un pour chaque " -"direction, par exemple\n" -"de A vers B et de B vers A. La création de segments unidirectionnels n'est " -"pas permise.\n" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« name »)" -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"Il est possible d'ajouter aux règles sudo l'indication de l'ordre dans\n" -"lequel elles doivent être examinées (si le client le prend en charge).\n" -"Cet ordre est défini par un entier, qui doit être unique.\n" +msgid "Number of entries returned" +msgstr "Nombre d'entrées renvoyées" -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"Le coffre-fort asymétrique est similaire au coffre standard, mais il \n" -"pré-chiffre le secret à l'aide d'une clé publique avant son transport.\n" -"Le secret ne peut être récupéré qu'avec la clé privée correspondante.\n" +msgid "True if not all results were returned" +msgstr "Vrai si tous les résultats n'ont pas été renvoyés" -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Règle d'adhésion automatique.\n" +msgid "Modify ACI." +msgstr "Modifier une ICA." + +msgid "Rename an ACI." +msgstr "Renommer une ICA." + +msgid "New ACI name" +msgstr "Nouveau nom de l'ACI" + +msgid "Display a single ACI given an ACI name." +msgstr "Afficher une ICA d'après son nom." + +msgid "Location of the ACI" +msgstr "Emplacement de l'ACI" msgid "" "\n" @@ -2213,380 +1714,409 @@ msgstr "" " Supprimer la clé « man » de la carte « auto.share » :\n" " ipa automountkey-del baltimore auto.share --key=man\n" +msgid "Key" +msgstr "Clé" + +msgid "Automount key name." +msgstr "Nom de clé « automount »." + +msgid "Mount information" +msgstr "Information de montage" + +msgid "description" +msgstr "description" + +msgid "Location" +msgstr "Emplacement" + +msgid "Automount location name." +msgstr "Nom d'emplacement ." + +msgid "Map" +msgstr "Carte" + +msgid "Automount map name." +msgstr "Nom de carte « automount »." + +msgid "Description" +msgstr "Description" + +msgid "Create a new automount key." +msgstr "Créer une nouvelle clé « automount »." + msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." msgstr "" -"\n" -"Il existe trois types de coffres-forts en fonction de leur propriété :\n" -"* coffre utilisateur/privé\n" -"* coffre de service\n" -"* coffre-fort partagé (shared)\n" +"Modifie un attribut d'une paire nom/valeur. Le format est attribut=valeur.\n" +"Pour des attributs à valeurs multiples, la commande remplace les valeurs " +"déjà présentes." + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Ajouter une paire attribut/valeur. Format : attribut=valeur. Les\n" +"attributs doivent faire partie du schéma." + +msgid "Delete an automount key." +msgstr "Supprimer une clé « automount »." + +msgid "Continuous mode: Don't stop on errors." +msgstr "Mode continu : pas d'arrêt sur erreurs." + +msgid "List of deletions that failed" +msgstr "Liste des suppressions ayant échoué" + +msgid "Search for an automount key." +msgstr "Rechercher une clé « automount »." + +msgid "Time Limit" +msgstr "Limitation de durée" + +msgid "Time limit of search in seconds" +msgstr "Limite de la durée de la recherche en secondes" + +msgid "Size Limit" +msgstr "Limitation de taille" + +msgid "Maximum number of entries returned" +msgstr "Nombre maximal d'entrées renvoyées" + +msgid "Modify an automount key." +msgstr "Modifier une clé « automount »." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Supprimer une paire attribut/valeur. L'option sera évaluée\n" +"en dernier, après toutes les modifications et ajouts." + +msgid "Rights" +msgstr "Droits" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Affiche les droits d'accès sur cette entrée (requiert --all). Cf. la page de " +"manuel de « ipa » pour plus d'informations." + +msgid "New mount information" +msgstr "Nouvelle information de montage" + +msgid "Rename" +msgstr "Renommer" + +msgid "Rename the automount key object" +msgstr "Renommer l'objet clé d'automontage" + +msgid "Display an automount key." +msgstr "Afficher une clé « automount »." + +msgid "Create a new automount location." +msgstr "Créer un nouvel emplacement " + +msgid "Delete an automount location." +msgstr "Supprimer un emplacement « automount »." + +msgid "Search for an automount location." +msgstr "Rechercher un emplacement « automount »." + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« location »)" + +msgid "Display an automount location." +msgstr "Afficher un emplacement « automount »" + +msgid "Generate automount files for a specific location." +msgstr "Créer les fichiers « automount » pour un emplacement donné." + +msgid "Create a new automount map." +msgstr "Créer une nouvelle carte « automount »." + +msgid "Create a new indirect mount point." +msgstr "Créer un nouveau point de montage indirect." + +msgid "Mount point" +msgstr "Point de montage" + +msgid "Parent map" +msgstr "Carte parente" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "Nom de la carte parente (par défaut : auto.master)." + +msgid "Delete an automount map." +msgstr "Supprimer une carte « automount »." + +msgid "Search for an automount map." +msgstr "Rechercher une carte « automount »." + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« map »)" + +msgid "Modify an automount map." +msgstr "Modifier une carte « automount »." + +msgid "Display an automount map." +msgstr "Afficher une carte « automount »." msgid "" "\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" +"Plugin to make multiple ipa calls via one remote procedure call\n" "\n" -"Il existe trois types de coffres-forts en fonction de leur mécanisme\n" -"de sécurité :\n" -"* coffre-fort standard\n" -"* coffre-fort symétrique\n" -"* coffre-fort asymétrique\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "Commandes imbriquées à exécuter" msgid "" "\n" -"Baseuser\n" +"Server configuration\n" "\n" -"This contains common definitions for user/stageuser\n" -msgstr "" +"Manage the default values that IPA uses and some of its tuning parameters.\n" "\n" -"Utilisateur de base\n" +"NOTES:\n" "\n" -"Ceci contient les définitions communes pour les utilisateurs et utilisateurs " -"en attente\n" - -msgid "" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Clarifie l'adhésion d'hôtes et d'utilisateurs en configurant des motifs\n" -"« regex » d'inclusion ou exclusion à assigner automatiquement aux nouvelles\n" -"entrées dans un groupe ou un groupe d'hôtes selon l'information d'attribut.\n" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" -"\n" -"Classes pour gérer des jonctions de confiance avec des appels DCE-RPC\n" -"\n" -"Le code de ce module s'appuie pour l'essentiel sur le paquet\n" -"« samba4-python » et les liaisons python de Samba4.\n" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Relations d'approbation entre domaines\n" -"\n" -"Gestion des relations d'approbation entre les domaines IPA et Active " -"Directory.\n" -"\n" -"Pour permettre aux utilisateurs d'un domaine distant l'accès aux ressources\n" -"d'un domaine IPA, des relations d'approbation doivent être établies.\n" -"Actuellement IPA ne prend en charge que les relations d'approbation entre " -"des\n" -"domaines IPA et Active Directory sous le contrôle de Windows Server 2008 ou\n" -"ultérieur, avec le niveau fonctionnel 2008 ou ultérieur.\n" -"\n" -"Veuillez noter que DNS doit être correctement configuré à la fois côté\n" -"domaine IPA et côté Active Directory pour une découverte mutuelle. La\n" -"relation de confiance repose sur la capacité à repérer des ressources\n" -"spéciales dans l'autre domaine via des enregistrements DNS.\n" -"\n" -"Exemples :\n" -"\n" -"1. Établir des relations d'approbation croisées entre royaumes avec Active\n" -"Directory avec les autorisations d'accès d'un administrateur AD :\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. Lister toutes les relations d'approbation existantes :\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Voir les détails d'une relation de confiance donnée :\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Supprimer une relation de confiance existante :\n" -"\n" -" ipa trust-del \n" -"\n" -"Une fois la relation de confiance établie, les utilisateurs distants " -"doivent\n" -"être mis en relation avec des groupes POSIX locaux pour utiliser réellement\n" -"des ressources IPA. La relation doit se faire via l'appartenance à un " -"groupe\n" -"non-POSIX externe, puis ce groupe doit être intégré dans l'un des groupes\n" -"POSIX locaux.\n" -"\n" -"Exemples :\n" -"\n" -"1. Créer un groupe pour la mise en relation avec le domaine approuvé\n" -" « admins » et leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter un identifiant de sécurité de de Domain Admins au\n" -" groupe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à s'associer\n" -" avec le groupe POSIX ad_admins :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe externe « ad_admins_external »\n" -" pour voir leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"CONFIGURATION D'UNE CONFIANCE GLOBALE\n" -"\n" -"Une fois le sous-paquet « IPA AD trust » installé et « ipa-adtrust-" -"install »\n" -"exécuté, une configuration de domaine local (SID, GUID, nom NetBIOS) est\n" -"créée. Ces identifiants sont alors utilisés lors de communications avec un\n" -"domaine approuvé de type particulier.\n" -"\n" -"1. Afficher la configuration de confiance globale pour les types de\n" -" confiance Active Directory :\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modifier la configuration globale de toutes les confiances de type\n" -" Active Directory et définir un groupe principal de recours (le GID du\n" -" groupe principal de recours est utilisé comme GID d'utilisateur " -"principal\n" -" si l'utilisateur s'authentifiant auprès du domaine IPA n'a pas d'autre\n" -" GID principal déjà défini) :\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Revenir au groupe caché par défaut comme groupe de recours principal\n" -" (tout groupe de la classe objet « posixGroup » est autorisé) :\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " +"Some attributes are read-only, provided only for information purposes. " "These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" +"include:\n" "\n" -"La configuration DNS, passée en ligne de commande du script d'installation,\n" -"est stockée dans un ficher de configuration local sur chaque serveur IPA \n" -"dans lequel le service DNS est configuré. Ces réglages locaux peuvent être\n" -"surchargés par une configuration commune stockée dans le serveur LDAP :\n" - -msgid "" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" "\n" -"DNS server configuration\n" -msgstr "" -"\n" -"Configuration du serveur DNS\n" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" -"\n" -"Les données enregistrées dans les serveurs IPA sont répliquées vers les " -"autres\n" -"serveurs IPA. Les agréments de réplication définissent la manière dont la \n" -"réplication s'opère. Les agréments de réplication doivent être définis " -"pour \n" -"les deux suffixes de manière séparée. Sur les domaines de niveau 0, ils " -"sont\n" -"gérés par les outils ipa-replica-manage et ipa-csreplica-manage tools. Sur \n" -"les domaines de niveau 1, ils sont gérés de manière centralisée par les " -"commandes\n" -"« ipa topology* ».\n" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"Supprimer ou renommer une permission administrée, ou changer sa cible,\n" -"n'est pas autorisé.\n" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"Domain Name System (DNS)\n" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"INSCRIPTION :\n" -"\n" -"Trois scenarii d'inscriptions d'un nouveau client sont possibles :\n" -"\n" -"1. La machine est enregistrée par un administrateur de plein droit.\n" -" L'entrée système peut pré-exister ou non. Un administrateur de\n" -" plein droit est membre du rôle hostadmin ou du groupe admins\n" -"2. L'inscription est faite par un administrateur limité. L'hôte\n" -" doit avoir été préalablement créé. Un administrateur limité\n" -" possède le privilège Host Enrollment.\n" -"3. Le système a été créé avec un mot de passe à usage unique.\n" - -msgid "" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" "\n" "EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" msgstr "" "\n" -"EXEMPLES :\n" +"Configuration du serveur\n" +"\n" +"Gérer les valeurs par défaut utilisées par IPA ainsi que certains de ses\n" +"paramètres d'ajustement.\n" +"\n" +"NOTES :\n" +"\n" +"La valeur de notification du mot de passe (--pwdexpnotify) est stockée ici\n" +"en vue de sa réplication. Elle n'est pas actuellement utilisée pour " +"notifier\n" +"par avance aux utilisateurs l'expiration de leur mot de passe.\n" +"\n" +"Certains attributs sont en lecture seule, fournis à titre d'information ;\n" +"ils comprennent :\n" +"\n" +"* la base sujet de certificat : la base de sujet de certificat configuré,\n" +" ex. O=EXAMPLE.COM, configurable uniquement à l'installation.\n" +"* les fonctions du greffon mots de passe : définit les hachages " +"additionnels\n" +" qu'un mot de passe va générer (d'autres conditions peuvent s'appliquer).\n" +"\n" +"En fixant la liste ordonnée pour le mappage des utilisateurs SELinux, vous\n" +"devez mettre entre guillemets les valeurs pour éviter leur interprétation.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Afficher la configuration de base du serveur :\n" +" ipa config-show\n" +"\n" +" Afficher toutes les options de configuration :\n" +" ipa config-show --all\n" +"\n" +" Modifier la longueur maximale d'un nom d'utilisateur à 99 caractères :\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Augmenter délais et limites de taille des recherches sur le serveur IPA :\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Définir le domaine pour les courriels de l'utilisateur par défaut :\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Activer le mode migration pour que « ipa migrate-ds » soit opérationelle :\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Définir l'ordre de la mappe des utilisateurs SELinux :\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "Maximum username length" +msgstr "Longueur maximale du nom d'utilisateur" + +msgid "Home directory base" +msgstr "Base du répertoire utilisateur" + +msgid "Default location of home directories" +msgstr "Emplacement par défaut des répertoires utilisateur" + +msgid "Default shell" +msgstr "Interpréteur de commande par défaut" + +msgid "Default shell for new users" +msgstr "Interpréteur de commande par défaut pour les nouveaux utilisateurs" + +msgid "Default users group" +msgstr "Groupe utilisateur par défaut" + +msgid "Default group for new users" +msgstr "Groupe utilisateur par défaut pour les nouveaux utilisateurs" + +msgid "Default e-mail domain" +msgstr "Domaine par défaut pour les courriels" + +msgid "Search time limit" +msgstr "Limite de temps d'une recherche" msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Afficher les informations au sujet des serveurs IPA installés.\n" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "Durée maximale (secondes) pour une recherche (> 0, -1 pour illimitée)" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgid "Search size limit" +msgstr "Limite de taille d'une recherche" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Nombre maximum d'entrées à rechercher (-1 pour illimité)" + +msgid "User search fields" +msgstr "Champs de recherche utilisateur" + +msgid "A comma-separated list of fields to search in when searching for users" msgstr "" -"\n" -"Obtenir l'état des rôles (serveur DNS, AC, etc. )fournis par les maîtres " -"IPA.\n" +"Une liste, séparée avec des virgules, des champs à explorer pour une " +"recherche d'utilisateurs" + +msgid "Group search fields" +msgstr "Champs de recherche de groupe" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Une liste séparée par des virgules des champs à explorer pour une recherche " +"de groupes" + +msgid "Enable migration mode" +msgstr "Activer le mode migration" + +msgid "Certificate Subject base" +msgstr "Base de sujet de certificat" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "Base pour les sujets de certificat (OU=Test,O=Example)" + +msgid "Default group objectclasses" +msgstr "Classes d'objets de groupe par défaut" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Classes d'objets de groupe par défaut (liste séparée par des virgules)" + +msgid "Default user objectclasses" +msgstr "Classes d'objets utilisateur par défaut" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" +"Classes d'objets utilisateurs par défaut (liste séparée par des virgules)" + +msgid "Password Expiration Notification (days)" +msgstr "Notification d'expiration de mot de passe (jours)" + +msgid "Number of days's notice of impending password expiration" +msgstr "Nombre de jours de préavis d'expiration de mot de passe" + +msgid "Password plugin features" +msgstr "Fonctionnalités du greffon mots de passe" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Hachages additionnels à générer dans le greffon mots de passe" + +msgid "SELinux user map order" +msgstr "Ordre de la mappe des utilisateurs SELinux" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" +"Ordre des utilisateurs SELinux par priorité croissante, délimités par $" + +msgid "Default SELinux user" +msgstr "Utilisateur SELinux par défaut" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" +"Utilisateur SELinux par défaut quand il n'y a aucune correspondance dans la " +"règle de mappe SELinux" + +msgid "Default PAC types" +msgstr "Types de PAC par défaut" + +msgid "Default types of PAC supported for services" +msgstr "Types de PAC par défaut pris en charge pour des services" + +msgid "Default user authentication types" +msgstr "Types d'authentification utilisateur par défaut" + +msgid "Default types of supported user authentication" +msgstr "Types d'authentification utilisateur pris en charge par défaut" + +msgid "Modify configuration options." +msgstr "Modifier les options de configuration." + +msgid "Show the current configuration." +msgstr "Afficher la configuration actuelle." msgid "" "\n" @@ -2645,426 +2175,1120 @@ msgstr "" " Supprimer une règle :\n" " ipa delegation-del \"managers edit employees' street\"\n" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" -"\n" -"Groupes de commandes sudo\n" -"\n" -"Administre les groupes de commandes sudo.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe de commandes sudo :\n" -" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" -"\n" -" Supprimer un groupe de commandes sudo :\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Afficher un groupe de commandes sudo :\n" -" ipa group-show localadmins\n" +msgid "Delegation name" +msgstr "Nom de délégation" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "Permissions à accorder (« read », « write »). Par défaut : « write »." + +msgid "Attributes to which the delegation applies" +msgstr "Attributs auxquels la délégation s'applique" + +msgid "Member user group" +msgstr "Groupe d'utilisateurs membre" + +msgid "User group to apply delegation to" +msgstr "Groupe d'utilisateur auquel s'applique la délégation" + +msgid "Add a new delegation." +msgstr "Ajouter une nouvelle délégation." + +msgid "Delete a delegation." +msgstr "Supprimer une délégation." + +msgid "Search for delegations." +msgstr "Rechercher des délégations." + +msgid "Modify a delegation." +msgstr "Modifier une délégation." + +msgid "Display information about a delegation." +msgstr "Afficher les informations sur une délégation." msgid "" "\n" -"Groups of Sudo Commands\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" "\n" -"Manage groups of Sudo Commands.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" msgstr "" -"\n" -"Groupes de commandes sudo\n" -"\n" -"Administre les groupes de commandes sudo.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe de commandes sudo :\n" -" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" -"\n" -" Supprimer un groupe de commandes sudo :\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Afficher un groupe de commandes sudo :\n" -" ipa sudocmdgroup-show admincmds\n" + +msgid "Global forwarders" +msgstr "Redirecteurs globaux" msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" msgstr "" -"\n" -"Groupes d'hôtes.\n" -"\n" -"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" -"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" -"\n" -" Ajouter des membres à un groupe d'hôtes :\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Supprimer un hôte d'un groupe :\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Afficher un groupe d'hôtes :\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Supprimer un groupe d'hôtes :\n" -" ipa hostgroup-del baltimore\n" +"Redirecteurs globaux. Un port personnalisé peut être indiqué pour chaque " +"redirecteur en utilisant le format standard « adresse_IP port PORT »" + +msgid "Forward policy" +msgstr "Politique de redirection" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." msgstr "" -"\n" -"Groupes d'utilisateurs\n" -"\n" -"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " -"POSIX.\n" -"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" -"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" -"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" -"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" -"POSIX.\n" -"\n" -"Chaque groupe doit avoir une description.\n" -"\n" -"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" -"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" -"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " -"groupe.\n" -"IPA en générera un automatiquement s'il n'est pas fourni.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe :\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Ajouter un nouveau groupe non-POSIX :\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convertir un groupe non-POSIX en groupe POSIX :\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " -"groupe :\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Supprimer un groupe :\n" -" ipa group-del unixadmins\n" -"\n" -" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Supprimer un utilisateur du groupe « localadmins » :\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Afficher des informations à propos d'un groupe donné :\n" -" ipa group-show localadmins\n" -"\n" -"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " -"de\n" -"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" -"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" -"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " -"tel\n" -"groupe peut plus tard être incorporé dans un des groupes POSIX\n" -"\n" -"Un membre de groupe externe est actuellement identifié par un « Security\n" -"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" -"un membre de groupe externe, il est possible de le définir, soit au format\n" -"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " -"passé\n" -"en SID en se servant du « Global Catalog » des domaines approuvés.\n" -"\n" -"Exemple:\n" -"\n" -"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" -" et à leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" -" groupe externe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à être associés " -"au\n" -" groupe POSIX « ad_admins » :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" -" leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" +"Politique globale de redirection. Mettre à « none » pour désactiver tout " +"redirecteur global configuré." + +msgid "Allow PTR sync" +msgstr "Autoriser la synchronisation PTR" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" +"Autoriser la synchronisation des enregistrements directs (A, AAAA) et " +"inverses (PTR)" + +msgid "Zone refresh interval" +msgstr "Intervalle de rafraîchissement de zone" + +msgid "Zone name" +msgstr "Nom de zone" + +msgid "Zone name (FQDN)" +msgstr "Nom de zone (FQDN)" + +msgid "Reverse zone IP network" +msgstr "Réseau IP de zone inverse" + +msgid "IP network to create reverse zone name from" +msgstr "Réseau IP pour lequel créer un nom de zone inverse" + +msgid "Active zone" +msgstr "Zone active" + +msgid "Is zone active?" +msgstr "La zone est-elle active ?" + +msgid "Zone forwarders" +msgstr "Redirection de zone" msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" msgstr "" -"\n" -"Groupes de services HBAC\n" -"\n" -"Les groupes de services HBAC peuvent contenir n'importe quel nombre de\n" -"services « membres » individuels. Chaque groupe doit avoir une description.\n" -"\n" -"EXEMPLES:\n" -"\n" -" Ajouter un nouveau groupe de services HBAC :\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Ajouter des membres à un groupe de services HBAC :\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Afficher les informations d'un groupe nommé :\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Supprimer un groupe de services HBAC :\n" -" ipa hbacsvcgroup-del login\n" +"Redirecteurs par zone. Un port personnalisé peut être indiqué pour chaque " +"redirecteur avec le format standard « adresse_IP port PORT »" msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." msgstr "" -"\n" -"Services HBAC\n" -"\n" -"Les services PAM dont le système HBAC peut contrôler l'accès. Le nom " -"utilisé\n" -"ici doit correspondre au nom du service analysé par PAM.\n" -"EXEMPLES:\n" -"\n" -" Ajouter un nouveau service HBAC :\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modifier un service HBAC existant :\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Chercher des services HBAC. Cet exemple renvoie deux résultats, le service\n" -" FTP et le service tftp nouvellement ajouté :\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Supprimer un service HBAC :\n" -" ipa hbacsvc-del tftp\n" -"\n" +"Politique de redirection conditionnelle par zone. Mettre à « none » pour " +"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " +"cas, les redirecteurs de zone conditionnels sont ignorés." + +msgid "Record name" +msgstr "Nom d'enregistrement" + +msgid "Time to live" +msgstr "Durée de vie" + +msgid "Records" +msgstr "Enregistrements" + +msgid "Record type" +msgstr "Type d'enregistrement" + +msgid "Record data" +msgstr "Données d'enregistrement" + +msgid "A record" +msgstr "Enregistrement A" + +msgid "Raw A records" +msgstr "Enregistrements A bruts" + +msgid "A IP Address" +msgstr "A Adresse IP" + +msgid "IP Address" +msgstr "Adresse IP" + +msgid "A Create reverse" +msgstr "A Créer un enregistrement inverse" + +msgid "Create reverse record for this IP Address" +msgstr "Créer l'enregistrement inverse pour cette adresse IP" + +msgid "AAAA record" +msgstr "Enregistrement AAAA" + +msgid "Raw AAAA records" +msgstr "Enregistrements AAAA bruts" + +msgid "AAAA IP Address" +msgstr "AAAA Adresse IP" + +msgid "AAAA Create reverse" +msgstr "AAAA Créer un enregistrement inverse" + +msgid "A6 record" +msgstr "Enregistrement A6" + +msgid "Raw A6 records" +msgstr "Enregistrements A6 bruts" + +msgid "A6 Record data" +msgstr "Données d'enregistrement A6" + +msgid "AFSDB record" +msgstr "Enregistrement AFSDB" + +msgid "Raw AFSDB records" +msgstr "Enregistrements AFSDB bruts" + +msgid "AFSDB Subtype" +msgstr "Sous-type AFSDB" + +msgid "Subtype" +msgstr "Sous-type" + +msgid "AFSDB Hostname" +msgstr "Nom d'hôte AFSDB" + +msgid "Hostname" +msgstr "Nom d'hôte" + +msgid "APL record" +msgstr "Enregistrement APL" + +msgid "Raw APL records" +msgstr "Enregistrements APL bruts" + +msgid "CERT record" +msgstr "Enregistrement CERT" + +msgid "Raw CERT records" +msgstr "Enregistrements CERT bruts" + +msgid "CERT Certificate Type" +msgstr "Type de certificat CERT" + +msgid "Certificate Type" +msgstr "Type de certificat" + +msgid "CERT Key Tag" +msgstr "Étiquette de clé CERT" + +msgid "Key Tag" +msgstr "Étiquette de clé" + +msgid "CERT Algorithm" +msgstr "Algorithme CERT" + +msgid "Algorithm" +msgstr "Algorithme" + +msgid "CERT Certificate/CRL" +msgstr "Certificat/CRL CERT" + +msgid "Certificate/CRL" +msgstr "Certificat/CRL" + +msgid "CNAME record" +msgstr "Enregistrement CNAME" + +msgid "Raw CNAME records" +msgstr "Enregistrements CNAME bruts" + +msgid "CNAME Hostname" +msgstr "Nom d'hôte CNAME" + +msgid "A hostname which this alias hostname points to" +msgstr "Un nom d'hôte vers lequel cet alias pointe" + +msgid "DHCID record" +msgstr "Enregistrement DHCID" + +msgid "Raw DHCID records" +msgstr "Enregistrements DHCID bruts" + +msgid "DLV record" +msgstr "Enregistrement DLV" + +msgid "Raw DLV records" +msgstr "Enregistrements DLV bruts" + +msgid "DLV Key Tag" +msgstr "Étiquette de clé DLV" + +msgid "DLV Algorithm" +msgstr "Algorithme DLV" + +msgid "DLV Digest Type" +msgstr "Type de condensé DLV" + +msgid "Digest Type" +msgstr "Type de condensé" + +msgid "DLV Digest" +msgstr "Condensé DLV" + +msgid "Digest" +msgstr "Condensé" + +msgid "DNAME record" +msgstr "Enregistrement DNAME" + +msgid "Raw DNAME records" +msgstr "Enregistrements DNAME bruts" + +msgid "DNAME Target" +msgstr "Cible DNAME" + +msgid "Target" +msgstr "Cible" + +msgid "DNSKEY record" +msgstr "Enregistrement DNSKEY" + +msgid "Raw DNSKEY records" +msgstr "Enregistrements DNSKEY bruts" + +msgid "DS record" +msgstr "Enregistrement DS" + +msgid "Raw DS records" +msgstr "Enregistrements DS bruts" + +msgid "DS Key Tag" +msgstr "Étiquette de clé DS" + +msgid "DS Algorithm" +msgstr "Algorithme DS" + +msgid "DS Digest Type" +msgstr "Type de condensé DS" + +msgid "DS Digest" +msgstr "Condensé DS" + +msgid "HIP record" +msgstr "Enregistrement HIP" + +msgid "Raw HIP records" +msgstr "Enregistrements HIP bruts" + +msgid "IPSECKEY record" +msgstr "Enregistrement IPSECKEY" + +msgid "Raw IPSECKEY records" +msgstr "Enregistrements IPSECKEY bruts" + +msgid "KEY record" +msgstr "Enregistrement KEY" + +msgid "Raw KEY records" +msgstr "Enregistrements KEY bruts" + +msgid "KX record" +msgstr "Enregistrement KX" + +msgid "Raw KX records" +msgstr "Enregistrements KX bruts" + +msgid "KX Preference" +msgstr "Préférence KX" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" +"Préférence donnée à cet échangeur. Les plus petites valeurs sont les " +"premières choisies" + +msgid "KX Exchanger" +msgstr "Échangeur KX" + +msgid "A host willing to act as a key exchanger" +msgstr "Un hôte prêt à jouer le rôle de changeur de clé" + +msgid "LOC record" +msgstr "Enregistrement LOC" + +msgid "Raw LOC records" +msgstr "Enregistrements LOC bruts" + +msgid "LOC Degrees Latitude" +msgstr "Degrés de latitude LOC" + +msgid "Degrees Latitude" +msgstr "Degrés de latitude" + +msgid "LOC Minutes Latitude" +msgstr "Minutes de latitude LOC" + +msgid "Minutes Latitude" +msgstr "Minutes de latitude" + +msgid "LOC Seconds Latitude" +msgstr "Secondes de latitude LOC" + +msgid "Seconds Latitude" +msgstr "Secondes de latitude" + +msgid "LOC Direction Latitude" +msgstr "Direction de latitude LOC" + +msgid "Direction Latitude" +msgstr "Direction de latitude" + +msgid "LOC Degrees Longitude" +msgstr "Degrés de longitude LOC" + +msgid "Degrees Longitude" +msgstr "Degrés de longitude" + +msgid "LOC Minutes Longitude" +msgstr "Minutes de longitude LOC" + +msgid "Minutes Longitude" +msgstr "Minutes de longitude" + +msgid "LOC Seconds Longitude" +msgstr "Secondes de longitude LOC" + +msgid "Seconds Longitude" +msgstr "Secondes de longitude" + +msgid "LOC Direction Longitude" +msgstr "Direction de longitude LOC" + +msgid "Direction Longitude" +msgstr "Direction de longitude" + +msgid "LOC Altitude" +msgstr "Altitude LOC" + +msgid "Altitude" +msgstr "Altitude" + +msgid "LOC Size" +msgstr "Taille LOC" + +msgid "Size" +msgstr "Taille" + +msgid "LOC Horizontal Precision" +msgstr "Précision horizontale LOC" + +msgid "Horizontal Precision" +msgstr "Précision horizontale" + +msgid "LOC Vertical Precision" +msgstr "Précision verticale LOC" + +msgid "Vertical Precision" +msgstr "Précision verticale" + +msgid "MX record" +msgstr "Enregistrement MX" + +msgid "Raw MX records" +msgstr "Enregistrements MX bruts" + +msgid "MX Preference" +msgstr "Préférence MX" + +msgid "MX Exchanger" +msgstr "Échangeur MX" + +msgid "A host willing to act as a mail exchanger" +msgstr "Un hôte pouvant agir comme changeur de messagerie" + +msgid "NAPTR record" +msgstr "Enregistrement NAPTR" + +msgid "Raw NAPTR records" +msgstr "Enregistrements NAPTR bruts" + +msgid "NAPTR Order" +msgstr "Ordre NAPTR" + +msgid "Order" +msgstr "Ordre" + +msgid "NAPTR Preference" +msgstr "Préférence NAPTR" + +msgid "Preference" +msgstr "Préférence" + +msgid "NAPTR Flags" +msgstr "Drapeaux NAPTR" + +msgid "Flags" +msgstr "Marqueurs" + +msgid "NAPTR Service" +msgstr "Service NAPTR" + +msgid "Service" +msgstr "Service" + +msgid "NAPTR Regular Expression" +msgstr "Expression rationnelle NAPTR" + +msgid "Regular Expression" +msgstr "Expression rationnelle" + +msgid "NAPTR Replacement" +msgstr "Remplacement NAPTR" + +msgid "Replacement" +msgstr "Remplacement" + +msgid "NS record" +msgstr "Enregistrement NS" + +msgid "Raw NS records" +msgstr "Enregistrements NS bruts" + +msgid "NS Hostname" +msgstr "Nom d'hôte NS" + +msgid "NSEC record" +msgstr "Enregistrement NSEC" + +msgid "Raw NSEC records" +msgstr "Enregistrements NSEC bruts" + +msgid "NSEC3 record" +msgstr "Enregistrement NSEC3" + +msgid "Raw NSEC3 records" +msgstr "Enregistrements NSEC3 bruts" + +msgid "PTR record" +msgstr "Enregistrement PTR" + +msgid "Raw PTR records" +msgstr "Enregistrements PTR bruts" + +msgid "PTR Hostname" +msgstr "Nom d'hôte PTR" + +msgid "The hostname this reverse record points to" +msgstr "Le nom d'hôte vers lequel cet enregistrement inverse pointe" + +msgid "RRSIG record" +msgstr "Enregistrement RRSIG" + +msgid "Raw RRSIG records" +msgstr "Enregistrements RRSIG bruts" + +msgid "RP record" +msgstr "Enregistrement RP" + +msgid "Raw RP records" +msgstr "Enregistrements RP bruts" + +msgid "SIG record" +msgstr "Enregistrement SIG" + +msgid "Raw SIG records" +msgstr "Enregistrements SIG bruts" + +msgid "SPF record" +msgstr "Enregistrement SPF" + +msgid "Raw SPF records" +msgstr "Enregistrements SPF bruts" + +msgid "SRV record" +msgstr "Enregistrement SRV" + +msgid "Raw SRV records" +msgstr "Enregistrements SRV bruts" + +msgid "SRV Priority" +msgstr "Priorité SRV" + +msgid "Priority" +msgstr "Priorité" + +msgid "SRV Weight" +msgstr "Poids SRV" + +msgid "Weight" +msgstr "Poids" + +msgid "SRV Port" +msgstr "Port SRV" + +msgid "Port" +msgstr "Port" + +msgid "SRV Target" +msgstr "Cible SRV" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" +"Le nom de domaine de l'hôte cible ou '.' si le service n'est vraiment pas " +"disponible dans ce domaine" + +msgid "SSHFP record" +msgstr "Enregistrement SSHFP" + +msgid "Raw SSHFP records" +msgstr "Enregistrements SSHFP bruts" + +msgid "SSHFP Algorithm" +msgstr "Algorithme SSHFP" + +msgid "SSHFP Fingerprint Type" +msgstr "Type d'empreinte SSHFP" + +msgid "Fingerprint Type" +msgstr "Type d'empreinte" + +msgid "SSHFP Fingerprint" +msgstr "Empreinte SSHFP" + +msgid "Fingerprint" +msgstr "Empreinte" + +msgid "TA record" +msgstr "Enregistrement TA" + +msgid "Raw TA records" +msgstr "Enregistrements TA bruts" + +msgid "TLSA record" +msgstr "Enregistrement TLSA" + +msgid "Raw TLSA records" +msgstr "Enregistrements TLSA bruts" + +msgid "TLSA Certificate Usage" +msgstr "Utilisation du certificat TLSA" + +msgid "Certificate Usage" +msgstr "Utilisation du certificat" + +msgid "TLSA Selector" +msgstr "Sélecteur TLSA" + +msgid "Selector" +msgstr "Sélecteur" + +msgid "TLSA Matching Type" +msgstr "Type de correspondance TLSA" + +msgid "Matching Type" +msgstr "Type correspondant" + +msgid "TLSA Certificate Association Data" +msgstr "Donnée d'association du certificat TLSA" + +msgid "Certificate Association Data" +msgstr "Donnée associée au certificat" + +msgid "TKEY record" +msgstr "Enregistrement TKEY" + +msgid "Raw TKEY records" +msgstr "Enregistrements TKEY bruts" + +msgid "TSIG record" +msgstr "Enregistrement TSIG" + +msgid "Raw TSIG records" +msgstr "Enregistrements TSIG bruts" + +#, fuzzy +#| msgid "KX record" +msgid "TXT record" +msgstr "Enregistrement KX" + +#, fuzzy +#| msgid "Raw TA records" +msgid "Raw TXT records" +msgstr "Enregistrements TA bruts" + +#, fuzzy +#| msgid "Text Data" +msgid "TXT Text Data" +msgstr "Donnée texte" + +msgid "Text Data" +msgstr "Donnée texte" + +msgid "Authoritative nameserver" +msgstr "Serveur de nom faisant autorité" + +msgid "Authoritative nameserver domain name" +msgstr "Nom de domaine du serveur de nom faisant autorité" + +msgid "Administrator e-mail address" +msgstr "Adresse courriel de l'administrateur" + +msgid "SOA serial" +msgstr "Numéro de série SOA" + +msgid "SOA record serial number" +msgstr "Numéro de série de l'enregistrement SOA" + +msgid "SOA refresh" +msgstr "Actualisation SOA" + +msgid "SOA record refresh time" +msgstr "Durée d'actualisation de l'enregistrement SOA" + +msgid "SOA retry" +msgstr "Nouvel essai SOA" + +msgid "SOA record retry time" +msgstr "Durée avant nouvel essai d'enregistrement SOA" + +msgid "SOA expire" +msgstr "Expiration SOA" + +msgid "SOA record expire time" +msgstr "Heure d'expiration de l'enregistrement SOA" + +msgid "SOA minimum" +msgstr "Minimum SOA" + +msgid "How long should negative responses be cached" +msgstr "Durée de maintien en cache des réponses négatives" + +msgid "Time to live for records at zone apex" +msgstr "Durée de vie des enregistrements en sommet de zone" + +msgid "BIND update policy" +msgstr "Politique de mise à jour de BIND" + +msgid "Dynamic update" +msgstr "Mise à jour dynamique" + +msgid "Allow dynamic updates." +msgstr "Autoriser les mises à jour dynamiques." + +msgid "Allow query" +msgstr "Autoriser requête" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" +"Liste séparée par des points-virgules d'adresses IP ou de réseaux autorisés " +"à émettre des requêtes" + +msgid "Allow transfer" +msgstr "Autoriser le transfert" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" +"Liste séparée par des points-virgules d'adresses IP ou de réseaux autorisés " +"à effectuer des transferts" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" +"Autoriser la synchronisation des enregistrements directs (A, AAAA) et " +"inverses (PTR) dans la zone" + +msgid "Allow in-line DNSSEC signing" +msgstr "Autoriser la signature DNSSEC en ligne" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" +"Autoriser la signature DNSSEC en ligne des enregistrements dans la zone" + +msgid "NSEC3PARAM record" +msgstr "Enregistrement NSEC3PARAM" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" +"Enregistrement NSEC3PARAM pour une zone au format : algorithme_hachage " +"marqueurs itérations salt." + +#, fuzzy +#| msgid "Checks if any of the servers has the CA service enabled." +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" +"Vérifier si l'un des serveurs a activé le service autorité de certification." + +msgid "Resolve a host name in DNS." +msgstr "Résoudre un nom de système DNS." + +msgid "Modify global DNS configuration." +msgstr "Modifier la configuration DNS globale." + +msgid "Show the current global DNS configuration." +msgstr "Afficher la configuration DNS globale." + +msgid "Create new DNS forward zone." +msgstr "Créer une nouvelle zone de redirection DNS" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" +"Ajouter une permission pour une délégation d'accès de zone de redirection." + +msgid "Permission value" +msgstr "Valeur de permission" + +msgid "Delete DNS forward zone." +msgstr "Supprimer une zone de redirection DNS." + +msgid "Disable DNS Forward Zone." +msgstr "Désactiver une zone de redirection DNS." + +msgid "Enable DNS Forward Zone." +msgstr "Activer une zone de redirection DNS." + +msgid "Search for DNS forward zones." +msgstr "Rechercher des zones de redirection DNS." + +msgid "Modify DNS forward zone." +msgstr "Modifier une zone de redirection DNS." + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" +"Supprimer la permission pour une délégation d'accès de zone de redirection." + +msgid "Display information about a DNS forward zone." +msgstr "Afficher des informations à propos des zones de redirection DNS." + +msgid "Add new DNS resource record." +msgstr "Ajouter un nouvel enregistrement de ressources DNS." + +msgid "Force" +msgstr "Forcer" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" +"forcer la création d'un enregistrement NS même si le nom du système n'est " +"pas dans le DNS" + +msgid "Structured" +msgstr "Structuré" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" +"Analyser tous les enregistrements DNS et les renvoyer sous forme structurée" + +msgid "Delete DNS resource record." +msgstr "Supprimer un enregistrement de ressources DNS." + +msgid "Delete all associated records" +msgstr "Supprimer les enregistrements associés" + +#, fuzzy +#| msgid "Delete DNS resource record." +msgid "Delete DNS record entry." +msgstr "Supprimer un enregistrement de ressources DNS." + +msgid "Search for DNS resources." +msgstr "Rechercher des enregistrements de ressources DNS." + +msgid "Modify a DNS resource record." +msgstr "Modifier un enregistrement de ressources DNS." + +#, fuzzy +#| msgid "Delete DNS resource record." +msgid "Rename the DNS resource record object" +msgstr "Supprimer un enregistrement de ressources DNS." + +msgid "Display DNS resource." +msgstr "Afficher un enregistrement de ressources DNS." + +msgid "Create new DNS zone (SOA record)." +msgstr "Créer une nouvelle zone DNS (enregistrement SOA)." + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" +"Forcer la création de la zone DNS même si le serveur de nom n'est pas " +"résoluble." + +msgid "Add a permission for per-zone access delegation." +msgstr "Ajouter une permission pour une délégation d'accès par zone." + +msgid "Delete DNS zone (SOA record)." +msgstr "Supprimer la zone DNS (enregistrement SOA)." + +msgid "Disable DNS Zone." +msgstr "Désactiver la zone DNS." + +msgid "Enable DNS Zone." +msgstr "Activer la zone DNS." + +msgid "Search for DNS zones (SOA records)." +msgstr "Rechercher des zones DNS (enregistrements SOA)." + +msgid "Forward zones only" +msgstr "Zones redirigées uniquement" + +msgid "Search for forward zones only" +msgstr "Rechercher des zones redirigées uniquement" + +msgid "Modify DNS zone (SOA record)." +msgstr "Modifier la zone DNS (enregistrement SOA)." + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" +"Forcer un changement de serveur de nom même si le serveur de nom n'est pas " +"dans le DNS" + +msgid "Remove a permission for per-zone access delegation." +msgstr "Supprimer une permission pour une délégation d'accès par zone." + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" +"Afficher les informations au sujet d'une zone DNS (enregistrement SOA)." msgid "" "\n" @@ -3165,6 +3389,343 @@ msgstr "" " ipa hbacrule-del allow_server\n" "\n" +msgid "Rule name" +msgstr "Nom de règle" + +msgid "Rule type" +msgstr "Type de règle" + +msgid "Rule type (allow)" +msgstr "Type de règle (allow)" + +msgid "User category" +msgstr "Catégorie d'utilisateur" + +msgid "User category the rule applies to" +msgstr "Catégorie d'utilisateurs à laquelle la règle s'applique" + +msgid "Host category" +msgstr "Catégorie de systèmes" + +msgid "Host category the rule applies to" +msgstr "Catégorie d'hôtes à laquelle la règle s'applique" + +msgid "Service category" +msgstr "Catégorie de service" + +msgid "Service category the rule applies to" +msgstr "Catégorie de services à laquelle la règle s'applique" + +msgid "Enabled" +msgstr "Activé(e)" + +msgid "Users" +msgstr "Utilisateurs" + +msgid "User Groups" +msgstr "Groupes d'utilisateurs" + +msgid "Hosts" +msgstr "Hôtes" + +msgid "Host Groups" +msgstr "Groupes d'hôtes" + +msgid "Services" +msgstr "Services" + +msgid "Service Groups" +msgstr "Groupes de services" + +msgid "External host" +msgstr "Système externe" + +msgid "Create a new HBAC rule." +msgstr "Créer une nouvelle règle HBAC." + +msgid "Suppress processing of membership attributes." +msgstr "Suppression du traitement des attributs d'adhésion." + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." + +msgid "member host" +msgstr "hôte membre" + +msgid "hosts to add" +msgstr "hôtes à ajouter" + +msgid "member host group" +msgstr "groupe d'hôte membre" + +msgid "host groups to add" +msgstr "groupes d'hôtes à ajouter" + +msgid "Members that could not be added" +msgstr "Membres n'ayant pu être ajoutés" + +msgid "Number of members added" +msgstr "Nombre de membres ajoutés" + +msgid "Add services to an HBAC rule." +msgstr "Ajouter des services à une règle HBAC." + +msgid "member HBAC service" +msgstr "Service HBAC membre" + +msgid "HBAC services to add" +msgstr "Services HBAC à ajouter" + +msgid "member HBAC service group" +msgstr "Groupe de services HBAC membre" + +msgid "HBAC service groups to add" +msgstr "Groupes de services HBAC à ajouter" + +msgid "Add users and groups to an HBAC rule." +msgstr "Ajouter des utilisateurs et groupes à une règle HBAC." + +#, fuzzy +#| msgid "Member users" +msgid "member user" +msgstr "Utilisateurs membres" + +#, fuzzy +#| msgid "%s to add" +msgid "users to add" +msgstr "%s à ajouter" + +msgid "member group" +msgstr "groupe membre" + +msgid "groups to add" +msgstr "groupes à ajouter" + +msgid "Delete an HBAC rule." +msgstr "Supprimer une règle HBAC." + +msgid "Disable an HBAC rule." +msgstr "Désactiver une règle HBAC." + +msgid "Enable an HBAC rule." +msgstr "Activer une règle HBAC." + +msgid "Search for HBAC rules." +msgstr "Rechercher des règles HBAC." + +msgid "Modify an HBAC rule." +msgstr "Modifier une règle HBAC." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Retirer des hôtes et des groupes d'hôtes cibles d'une règle HBAC." + +msgid "hosts to remove" +msgstr "hôtes à supprimer" + +msgid "host groups to remove" +msgstr "groupes d'hôtes à supprimer" + +msgid "Members that could not be removed" +msgstr "Membres n'ayant pas pu être supprimés" + +msgid "Number of members removed" +msgstr "Nombre de membres supprimés" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Ajouter des services et des groupes de services d'une règle HBAC." + +msgid "HBAC services to remove" +msgstr "Services HBAC à supprimer" + +msgid "HBAC service groups to remove" +msgstr "Groupes de services HBAC à supprimer" + +msgid "Remove users and groups from an HBAC rule." +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +msgid "users to remove" +msgstr "utilisateurs à supprimer" + +msgid "groups to remove" +msgstr "groupes à supprimer" + +msgid "Display the properties of an HBAC rule." +msgstr "Afficher les propriétés d'une règle HBAC." + +#, fuzzy +#| msgid "" +#| "\n" +#| "HBAC Services\n" +#| "\n" +#| "The PAM services that HBAC can control access to. The name used here\n" +#| "must match the service name that PAM is evaluating.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new HBAC service:\n" +#| " ipa hbacsvc-add tftp\n" +#| "\n" +#| " Modify an existing HBAC service:\n" +#| " ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +#| "\n" +#| " Search for HBAC services. This example will return two results, the FTP\n" +#| " service and the newly-added tftp service:\n" +#| " ipa hbacsvc-find ftp\n" +#| "\n" +#| " Delete an HBAC service:\n" +#| " ipa hbacsvc-del tftp\n" +#| "\n" +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" +"\n" +"Services HBAC\n" +"\n" +"Les services PAM dont le système HBAC peut contrôler l'accès. Le nom " +"utilisé\n" +"ici doit correspondre au nom du service analysé par PAM.\n" +"EXEMPLES:\n" +"\n" +" Ajouter un nouveau service HBAC :\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modifier un service HBAC existant :\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Chercher des services HBAC. Cet exemple renvoie deux résultats, le service\n" +" FTP et le service tftp nouvellement ajouté :\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Supprimer un service HBAC :\n" +" ipa hbacsvc-del tftp\n" +"\n" + +msgid "Service name" +msgstr "Nom de service" + +msgid "HBAC service" +msgstr "Service HBAC" + +msgid "HBAC service description" +msgstr "Description de service HBAC" + +#, fuzzy +#| msgid "Member HBAC service groups" +msgid "Member of HBAC service groups" +msgstr "Groupes de services HBAC membres" + +msgid "Add a new HBAC service." +msgstr "Ajouter un nouveau service HBAC." + +msgid "Delete an existing HBAC service." +msgstr "Supprimer un service HBAC existant." + +msgid "Search for HBAC services." +msgstr "Rechercher des services HBAC." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"%s\")" +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« %s »)" + +msgid "Modify an HBAC service." +msgstr "Modifier un service HBAC." + +msgid "Display information about an HBAC service." +msgstr "Afficher des informations sur un service HBAC." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" +"\n" +"Groupes de services HBAC\n" +"\n" +"Les groupes de services HBAC peuvent contenir n'importe quel nombre de\n" +"services « membres » individuels. Chaque groupe doit avoir une description.\n" +"\n" +"EXEMPLES:\n" +"\n" +" Ajouter un nouveau groupe de services HBAC :\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Ajouter des membres à un groupe de services HBAC :\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Afficher les informations d'un groupe nommé :\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Supprimer un groupe de services HBAC :\n" +" ipa hbacsvcgroup-del login\n" + +msgid "Service group name" +msgstr "Nom de groupe de services HBAC" + +msgid "HBAC service group description" +msgstr "Description de groupe de services HBAC" + +msgid "Member HBAC service" +msgstr "Services HBAC membres" + +msgid "Add a new HBAC service group." +msgstr "Ajouter un nouveau groupe de services HBAC." + +msgid "Add members to an HBAC service group." +msgstr "Ajouter des membres à un groupe de services HBAC." + +msgid "Delete an HBAC service group." +msgstr "Supprimer un groupe de services HBAC." + +msgid "Search for an HBAC service group." +msgstr "Rechercher des groupes de services HBAC." + +msgid "Modify an HBAC service group." +msgstr "Supprimer un groupe de services HBAC." + +msgid "Remove members from an HBAC service group." +msgstr "Supprimer des membres d'un groupe de services HBAC." + +msgid "Display information about an HBAC service group." +msgstr "Afficher les informations sur un groupe de services HBAC." + msgid "" "\n" "Hosts/Machines\n" @@ -3174,297 +3735,758 @@ msgid "" "- a host stores the host/ service principal\n" "- a host can be used in Host-based Access Control (HBAC) rules\n" "- every enrolled client generates a host entry\n" -msgstr "" "\n" -"Hôtes/Machines\n" +"ENROLLMENT:\n" "\n" -"Un hôte représente une machine. Il peut être utilisé dans de nombreux " -"contextes :\n" -"- les entrées de services sont associées à un hôte,\n" -"- un hôte stocke le principal des hôtes/des services,\n" -"- un hôte est utilisable dans les règles HBAC (Host-based Access Control),\n" -"- chaque client enregistré génère une entrée d'hôte.\n" - -msgid "" +"There are three enrollment scenarios when enrolling a new client:\n" "\n" -"IPA certificate operations\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +"RE-ENROLLMENT:\n" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" "\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +"For more information, consult the manual pages for ipa-client-install.\n" "\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" "\n" "EXAMPLES:\n" "\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" "\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" "\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" "\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" "\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" "\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" "\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" "\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" "\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "Nom d'hôte" + +msgid "A description of this host" +msgstr "Une description de cet hôte" + +msgid "Locality" +msgstr "Localité" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Localité de l'hôte (par ex. « Paris, IDF »)" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Emplacement de l'hôte (par ex. \"Lab 2\")" + +msgid "Platform" +msgstr "Plate-forme" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Plate-forme matérielle de l'hôte (par ex. « Lenovo T61 »)" + +msgid "Operating system" +msgstr "Système d'exploitation" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Système d'exploitation et version (par ex. « Fedora 9 »)" + +msgid "User password" +msgstr "Mot de passe utilisateur" + +msgid "Password used in bulk enrollment" +msgstr "Mot de passe utilisé pour les inscriptions en masse" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "Créer un mot de passe aléatoire utilisé pour l'inscription en masse" + +msgid "Random password" +msgstr "Mot de passe aléatoire" + +msgid "Certificate" +msgstr "Certificat" + +msgid "Base-64 encoded server certificate" +msgstr "Certificat du serveur codé en Base-64" + +msgid "Principal name" +msgstr "Nom principal" + +msgid "MAC address" +msgstr "Adresse MAC" + +msgid "Hardware MAC address(es) on this host" +msgstr "Adresse(s) MAC du matériel sur cet hôte" + +msgid "SSH public key" +msgstr "Clé publique SSH" + +msgid "Class" +msgstr "Classe" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Catégorie d'hôte (les sémantiques associées à cet attribut vous sont propres)" + +msgid "Assigned ID View" +msgstr "Vue d'identifiants attribuée" + +msgid "Requires pre-authentication" +msgstr "Nécessite une authentification préalable" + +msgid "Pre-authentication is required for the service" +msgstr "Une authentification préalable est requise pour le service" + +msgid "Trusted for delegation" +msgstr "Approuvé pour délégation." + +msgid "Client credentials may be delegated to the service" +msgstr "" +"Les informations d'identification du client peuvent être déléguées au service" + +msgid "Member of host-groups" +msgstr "Membre du groupe d'hôtes" + +msgid "Roles" +msgstr "Rôles" + +msgid "Member of netgroups" +msgstr "Membre des groupes réseau" + +msgid "Member of Sudo rule" +msgstr "Membre de règle Sudo" + +msgid "Member of HBAC rule" +msgstr "Membre de règle HBAC" + +#, fuzzy +#| msgid "Indirect Member netgroups" +msgid "Indirect Member of netgroup" +msgstr "Groupes réseau de membres indirects" + +msgid "Indirect Member of host-group" +msgstr "Membre indirect des groupes d'hôtes" + +#, fuzzy +#| msgid "Indirect Member of roles" +msgid "Indirect Member of role" +msgstr "Membres indirect des rôles" + +#, fuzzy +#| msgid "Indirect Member of roles" +msgid "Indirect Member of Sudo rule" +msgstr "Membres indirect des rôles" + +#, fuzzy +#| msgid "Indirect Member of roles" +msgid "Indirect Member of HBAC rule" +msgstr "Membres indirect des rôles" + +msgid "Keytab" +msgstr "Tableau de clés" + +msgid "Managed by" +msgstr "Géré par" + +msgid "Managing" +msgstr "Gérant" + +msgid "Users allowed to retrieve keytab" +msgstr "Utilisateurs autorisés à récupérer un tableau de clés" + +msgid "Groups allowed to retrieve keytab" +msgstr "Groupes autorisés à récupérer un tableau de clés" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Hôtes autorisés à récupérer un tableau de clés" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Groupes d'hôtes autorisés à récupérer un tableau de clés" + +msgid "Users allowed to create keytab" +msgstr "Utilisateurs autorisés à créer un tableau de clés" + +msgid "Groups allowed to create keytab" +msgstr "Groupes autorisés à créer un tableau de clés" + +msgid "Hosts allowed to create keytab" +msgstr "Hôtes autorisés à créer un tableau de clés" + +msgid "Host Groups allowed to create keytab" +msgstr "Groupes d'hôtes autorisés à créer un tableau de clés" + +msgid "Add a new host." +msgstr "Ajouter un nouvel hôte." + +msgid "force host name even if not in DNS" +msgstr "forcer le nom même si absent des DNS" + +msgid "skip reverse DNS detection" +msgstr "sauter la détection du DNS inverse" + +msgid "Add the host to DNS with this IP address" +msgstr "Ajouter l'hôte aux DNS avec cette adresse IP" + +msgid "Add hosts that can manage this host." +msgstr "Ajouter les hôtes qui peuvent gérer cet hôte." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Autoriser des utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de " +"clés de cet hôte." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Autoriser des utilisateurs, hôtes ou groupes d'hôtes à récupérer un tableau " +"de clés de cet hôte." + +msgid "Delete a host." +msgstr "Supprimer un hôte." + +msgid "Remove entries from DNS" +msgstr "Supprimer les entrées du DNS" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" +"Désactiver la clé Kerberos, les certificats SSL et tous les services d'un " +"hôte." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " +"clés de cet hôte." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes à récupérer un tableau " +"de clés de cet hôte." + +msgid "Search for hosts." +msgstr "Rechercher des hôtes." + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« hostname »)" + +msgid "host group" +msgstr "groupe d'hôtes" + +msgid "Search for hosts with these member of host groups." +msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." + +msgid "Search for hosts without these member of host groups." +msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." + +msgid "netgroup" +msgstr "groupe réseau" + +#, fuzzy +#| msgid "Search for hosts with these member of host groups." +msgid "Search for hosts with these member of netgroups." +msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." + +#, fuzzy +#| msgid "Search for hosts without these member of host groups." +msgid "Search for hosts without these member of netgroups." +msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." + +msgid "role" +msgstr "rôle" + +#, fuzzy +#| msgid "Search for hosts without these member of roles." +msgid "Search for hosts with these member of roles." +msgstr "Rechercher des hôtes sans ces membres de rôles." + +msgid "Search for hosts without these member of roles." +msgstr "Rechercher des hôtes sans ces membres de rôles." + +msgid "HBAC rule" +msgstr "Règle HBAC" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for hosts without these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +msgid "sudo rule" +msgstr "règle sudo" + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for hosts with these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +msgid "Search for hosts without these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +msgid "user" +msgstr "utilisateur" + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for hosts with these enrolled by users." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for hosts without these enrolled by users." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +msgid "host" +msgstr "hôte" + +#, fuzzy +#| msgid "Search for hosts with these member of host groups." +msgid "Search for hosts with these managed by hosts." +msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." + +#, fuzzy +#| msgid "Search for hosts without these member of host groups." +msgid "Search for hosts without these managed by hosts." +msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." + +#, fuzzy +#| msgid "Search for hosts with these member of host groups." +msgid "Search for hosts with these managing hosts." +msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." + +#, fuzzy +#| msgid "Search for hosts without these member of host groups." +msgid "Search for hosts without these managing hosts." +msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." + +msgid "Modify information about a host." +msgstr "Modifier les informations d'un hôte." + +msgid "Kerberos principal name for this host" +msgstr "Nom du principal Kerberos pour cet hôte" + +msgid "Update DNS entries" +msgstr "Mettre à jour les entrées DNS" + +msgid "Remove hosts that can manage this host." +msgstr "Supprimer les hôtes qui peuvent gérer cet hôte." + +msgid "Display information about a host." +msgstr "Afficher les informations sur un hôte." + +msgid "file to store certificate in" +msgstr "fichier où stocker le certificat" + +msgid "" "\n" -"The following revocation reasons are supported:\n" +"Groups of hosts.\n" "\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" "\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"EXAMPLES:\n" "\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" msgstr "" "\n" -"Gestion de certficats IPA\n" +"Groupes d'hôtes.\n" "\n" -"Implémente un jeu de commandes pour gérer les certificats SSL du serveur.\n" -"\n" -"Les demandes de certificats existent sous la forme de\n" -"« Certificate Signing Request (CSR) » au format PEM.\n" -"\n" -"La plaque d'identité CA n'utilise que la valeur CN du CSR et force le reste\n" -"du sujet aux valeurs configurées dans le serveur.\n" -"\n" -"Un certificat est enregistré avec un principal de service et un principal\n" -" de service a besoin d'un hôte.\n" -"\n" -"Donc, pour demander un certificat :\n" -"\n" -"* l'hôte doit exister\n" -"* le service doit exister (utiliser --add pour l'ajouter automatiquement)\n" -"\n" -"RECHERCHE :\n" -"\n" -"Les certificats peuvent être recherchés par sujet, numéro de série,\n" -"motif de révocation, dates de validité et date d'émission.\n" -"\n" -"En recherchant par dates, _from effectue une recherche >= à la date et _to\n" -"une recherche <= à la date. Combinées, elles sont équivalentes à un AND.\n" -"\n" -"La date est traitée comme GMT pour correspondre aux dates de certificats.\n" -"\n" -"La date est au format YYYY-mm-dd.\n" +"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" +"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" "\n" "EXEMPLES :\n" "\n" -" Demander un nouveau certificat et ajouter le principal :\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" "\n" -" Retrouver un certificat existant :\n" -" ipa cert-show 1032\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" "\n" -" Révoquer un certificat (voir RFC 5280 pour le détail des raisons) :\n" -" ipa cert-revoke --revocation-reason=6 1032\n" +" Ajouter des membres à un groupe d'hôtes :\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" "\n" -" Lever l'état de maintien de révocation d'un certificat :\n" -" ipa cert-remove-hold 1032\n" +" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" "\n" -" Vérifier l'état d'une demande de signature :\n" -" ipa cert-status 10\n" +" Supprimer un hôte d'un groupe :\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" "\n" -" Rechercher des certificats par nom d'hôte :\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Rechercher les certificats révoqués par motif :\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Rechercher les certificats selon la date d'émission :\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"Actuellement IPA émet (ou refuse) aussitôt toute demande de certificat, " -"donc\n" -"l'état d'une requête ne sert normalement pas. C'est en vue d'une " -"utilisation\n" -"future ou au cas où un CA n'émettrait pas immédiatement un certificat.\n" -"\n" -"Les motifs de révocation suivants sont pris en charge :\n" -"\n" -" * 0 - « unspecified » (non précisé)\n" -" * 1 - « keyCompromise » (clé compromise)\n" -" * 2 - « cACompromise » (CA compromis)\n" -" * 3 - « affiliationChanged » (affiliation modifiée)\n" -" * 4 - « superseded » (remplacé)\n" -" * 5 - « cessationOfOperation » (arrêt d'opération)\n" -" * 6 - « certificateHold » (certificat retenu)\n" -" * 8 - « removeFromCRL » (sorti du CRL)\n" -" * 9 - « privilegeWithdrawn » (retrait de privilège)\n" -" * 10 - « aACompromise » (compromission)\n" -"\n" -"Notez que le motif code 7 ne sert pas. Voir RFC 5280 pour plus de détails :\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +" Afficher un groupe d'hôtes :\n" +" ipa hostgroup-show baltimore\n" "\n" +" Supprimer un groupe d'hôtes :\n" +" ipa hostgroup-del baltimore\n" + +msgid "Host-group" +msgstr "Groupe d'hôtes" + +msgid "Name of host-group" +msgstr "Nom du groupe d'hôtes" + +msgid "A description of this host-group" +msgstr "Description de ce groupe d'hôtes" + +msgid "Member hosts" +msgstr "Hôtes membres" + +msgid "Member host-groups" +msgstr "Groupes d'hôtes membres" + +msgid "Indirect Member hosts" +msgstr "Hôtes membres indirects" + +msgid "Indirect Member host-groups" +msgstr "Groupes d'hôtes membres indirects" + +msgid "Add a new hostgroup." +msgstr "Ajouter un nouveau groupe d'hôtes." + +msgid "Add members to a hostgroup." +msgstr "Ajouter des membres à un groupe d'hôtes." + +msgid "Delete a hostgroup." +msgstr "Supprimer un groupe d'hôtes." + +msgid "Search for hostgroups." +msgstr "Rechercher un groupe d'hôtes." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"group-name\")" +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« group-name »)" + +#, fuzzy +#| msgid "Search for netgroups with these member hosts." +msgid "Search for host groups with these member hosts." +msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." + +#, fuzzy +#| msgid "Search for netgroups without these member hosts." +msgid "Search for host groups without these member hosts." +msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." + +#, fuzzy +#| msgid "Search for netgroups with these member host groups." +msgid "Search for host groups with these member host groups." +msgstr "" +"Rechercher des groupes réseaux dont les membres sont ces groupes d'hôtes." + +#, fuzzy +#| msgid "Search for netgroups without these member host groups." +msgid "Search for host groups without these member host groups." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " +"d'hôtes." + +#, fuzzy +#| msgid "Search for hosts with these member of host groups." +msgid "Search for host groups with these member of host groups." +msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." + +#, fuzzy +#| msgid "Search for hosts without these member of host groups." +msgid "Search for host groups without these member of host groups." +msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." + +#, fuzzy +#| msgid "Search for netgroups with these member of netgroups." +msgid "Search for host groups with these member of netgroups." +msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups without these member of netgroups." +msgid "Search for host groups without these member of netgroups." +msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for host groups with these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for host groups without these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for host groups with these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for host groups without these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +msgid "Modify a hostgroup." +msgstr "Modifier un groupe d'hôtes." + +msgid "Remove members from a hostgroup." +msgstr "Supprimer des membres d'un groupe d'hôtes." + +msgid "Display information about a hostgroup." +msgstr "Afficher des informations sur un groupe d'hôtes." msgid "" "\n" -"IPA locations\n" -msgstr "" +"ID Views\n" "\n" -"Emplacements IPA\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "Balise à surcharger" + +msgid "Group name" +msgstr "Nom du groupe" + +msgid "GID" +msgstr "GID" + +msgid "Group ID Number" +msgstr "Numéro d'identifiant de groupe" + +msgid "User login" +msgstr "Identifiant de connexion" + +msgid "UID" +msgstr "UID" + +msgid "User ID Number" +msgstr "Numéro d'identifiant utilisateur" + +msgid "GECOS" +msgstr "GECOS" + +msgid "Home directory" +msgstr "Répertoire personnel" + +msgid "Login shell" +msgstr "Interpréteur de commande" + +msgid "ID View Name" +msgstr "Nom de la vue d'identifiants" + +msgid "Add a new Group ID override." +msgstr "Ajouter une nouvelle surcharge d'identifiants de groupes." + +msgid "Delete an Group ID override." +msgstr "Supprimer une surcharge d'identifiants de groupes." + +msgid "Search for an Group ID override." +msgstr "Rechercher une surcharge d'identifiants de groupes" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« anchor »)" + +msgid "Modify an Group ID override." +msgstr "Modifier une surcharge d'identifiants de groupes." + +msgid "Rename the Group ID override object" +msgstr "Renommer l'objet surcharge d'identifiant de groupe" + +msgid "Display information about an Group ID override." +msgstr "Afficher les informations d'une surcharge d'identifiants de groupes." + +msgid "Add a new User ID override." +msgstr "Ajouter une nouvelle surcharge d'identifiants utilisateurs." + +msgid "Delete an User ID override." +msgstr "Supprimer une surcharge d'identifiants utilisateurs." + +msgid "Search for an User ID override." +msgstr "Rechercher une surcharge d'identifiants utilisateurs" + +msgid "Modify an User ID override." +msgstr "Modifier une surcharge d'identifiants utilisateurs." + +msgid "Rename the User ID override object" +msgstr "Renommer l'objet surcharge d'identifiant d'utilisateur" + +msgid "Display information about an User ID override." +msgstr "Afficher les informations d'une surcharge d'identifiants utilisateurs." + +msgid "Add a new ID View." +msgstr "Ajouter une nouvelle vue d'identifiants" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" +"Applique une vue d'identifiants aux hôtes ou aux membres des groupes d'hôtes " +"indiqués. Si une autre vue d'identifiants était appliquée à l'hôte, elle est " +"remplacée." + +msgid "hosts" +msgstr "hôtes" + +msgid "Hosts to apply the ID View to" +msgstr "Hôtes auxquels appliquer la vue" + +msgid "hostgroups" +msgstr "groupe d'hôtes" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" +"Groupes d'hôtes auxquels s'applique la vue d'identifiants. Veuillez noter " +"que cette vue ne s'applique pas automatiquement aux hôtes ajoutés au groupe " +"après l'exécution de la commande idview-apply." + +msgid "Hosts that this ID View was applied to." +msgstr "Hôtes auxquels s'applique cette vue d'identifiants." + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" +"Hôtes ou groupes d'hôtes auxquels cette vue d'identifiants ne pourra pas " +"être appliquée." + +msgid "Number of hosts the ID View was applied to:" +msgstr "Nombre d'hôtes auxquels la vue d'identifiants a été appliquée :" + +msgid "Delete an ID View." +msgstr "Supprimer une vue d'identifiants." + +msgid "Search for an ID View." +msgstr "Rechercher une vue d'identifiants." + +msgid "Modify an ID View." +msgstr "Modifier une vue d'identifiants." + +msgid "Rename the ID View object" +msgstr "Renommer l'objet surcharge de vue d'identifiants" + +msgid "Display information about an ID View." +msgstr "Afficher les informations d'une vue d'identifiants." + +msgid "Enumerate all the hosts the view applies to." +msgstr "Énumérer tous les hôtes auxquels la vue s'applique." + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" +"Retire l'application de la vue d'identifiants des hôtes ou membres des " +"groupes d'hôtes indiqués." + +msgid "Hosts to clear (any) ID View from." +msgstr "Hôtes dont on va retirer toute vue d'identifiants." + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" +"Groupes d'hôtes dont les hôtes doivent se voir la vue d'identifiants " +"retirée. Veuillez noter que la vue n'est pas automatiquement retirée de tout " +"hôte ajouté au groupe d'hôte après l'exécution de la commande idview-unapply." + +msgid "Hosts that ID View was cleared from." +msgstr "Hôtes dont la vue d'identifiants a été retirée." + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" +"Hôtes ou groupes d'hôtes dont la vue d'identifiants n'a pu être retirée." + +msgid "Number of hosts that had a ID View was unset:" +msgstr "Nombre d'hôtes dont une vue d'identifiants a été retirée :" msgid "" "\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"Plugins not accessible directly through the CLI, commands used internally\n" msgstr "" "\n" -"IPA permet la désignation d'un « binddn » à utiliser avec sudo situé à :\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"Greffons non accessibles depuis la ligne de commande, commandes utilisées en " +"interne\n" -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"IPA offre les moyens de configurer les divers aspects de sudo :\n" -" Users : utilisateur/groupe autorisés à invoquer sudo.\n" -" Hosts : hôte/groupe d'hôte dont l'utilisateur peut invoquer sudo.\n" -" Allow Command : commande donnée pouvant être exécutée via sudo.\n" -" Deny Command : commande donnée interdite d'exécution avec sudo.\n" -" RunAsUser : utilisateur ou groupe dont les droits sudo pourront être " -"invoqués.\n" -" RunAsGroup : groupe dont les droits sudo associés au GID pourront être " -"invoqués.\n" -" Options : les diverses options de sudoers pouvant modifier le " -"comportement de sudo.\n" +msgid "Dict of I18N messages" +msgstr "Dictionnaire de messages I18N" -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Rôles serveurs IPA\n" +msgid "Export plugin meta-data for the webUI." +msgstr "Exporter les meta-données du greffons pour l'interface Web" -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" -"\n" -"Les données des serveurs IPA sont enregistrées dans le serveur LDAP\n" -"sous deux suffixes :\n" -"* le suffixe de domain, par exemple « dc=example,dc=com », qui contient " -"toutes\n" -" les informations relatives au domaine ;\n" -"* le suffixe ca, « o=ipaca », qui n'est présent que sur les serveurs où " -"l'autorité de certification\n" -" est installée. Il contient les données nécessaire au composant " -"Certificate Server\n" +msgid "Name of object to export" +msgstr "Nom de l'objet à exporter" -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"Serveurs IPA\n" +msgid "Name of method to export" +msgstr "Nom de la méthode à exporter" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" -"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" +msgid "Name of command to export" +msgstr "Nom de la commande à exporter" -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"IPA prend en charge l'utilisation d'un serveur mandataire externe RADIUS\n" -"pour des authentifications OTP « krb5 ». Cela procure une grande souplesse\n" -"pour l'intégration des services d'authentification tierce partie.\n" +msgid "Dict of JSON encoded IPA Objects" +msgstr "Dictionnaire d'objets IPA codés JSON" -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" -"\n" -"Il peut être difficile de manier de tels enregistrements DNS sans erreurs " -"et\n" -"sans entrer de valeur invalide. Le module DNS fournit une abstraction pour\n" -"ces enregistrements bruts afin de manier chaque type RR avec des options\n" -"données. Pour tout type RR pris en charge, le module DNS fournit une option\n" -"standard pour manier l'enregistrement brut avec le format ---rec,\n" -"ex. --mx-rec, et des options spéciales pour chaque élément de structure RR\n" -"avec le format ---, ex. --mx-preference ou --mx-" -"exchanger.\n" +msgid "Dict of JSON encoded IPA Methods" +msgstr "Dictionnaire de méthode IPA codées JSON" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "Dictionnaire de commande IPA codées JSON" msgid "" "\n" @@ -3473,44 +4495,20 @@ msgstr "" "\n" "Rejoindre un domaine IPA\n" -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" -"\n" -"Options de « pkinit » de Kerberos\n" -"\n" -"Activer ou désactiver l'opération « pkinit » anonyme en utilisant le\n" -"principal WELLKNOWN/ANONYMOUS@REALM. Le serveur doit avoir\n" -"été installé avec la prise en charge de « pkinit ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" Activer le « pkinit » anonyme :\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Désactiver le « pkinit » anonyme :\n" -" ipa pkinit-anonymous disable\n" -"\n" -"Pour plus d'informations sur « pkinit » anonyme, cf. :\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgid "Join an IPA domain" +msgstr "Rejoindre un domaine IPA" + +msgid "The hostname to register as" +msgstr "Le nom d'hôte sous lequel enregistrer" + +msgid "The IPA realm" +msgstr "Le domaine IPA" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Plate-forme matérielle de l'hôte (par ex. Lenovo T61)" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Système d'exploitation et version de l'hôte (par ex. Fedora 9)" msgid "" "\n" @@ -3594,250 +4592,32 @@ msgstr "" " Modifie la politique de ticket Kerberos de l'utilisateur 'admin' :\n" " ipa krbtpolicy-mod admin --maxlife=3600\n" -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" -"\n" -"Gestion des règles de LCA de l'AC.\n" -"\n" -"Ce grffon est utilisé pour définir les règles gouvernant quels principaux \n" -"sont autorisés à se voir attribuer des certificats à l'aide d'un profil\n" -"donné de certificat.\n" -"\n" -"SYNTAXE D'IDENTIFIANT DE PROFIL :\n" -"\n" -"Un identifiant de profil est une chaîne sans espace ni ponctuation débutant " -"par\n" -"une lettre et suivie d'une séquence de lettres, chiffres, ou caractère " -"souligné (\"_\").\n" -"\n" -"EXEMPLES :\n" -"\n" -" Créer une LCA d'AC « test » autorisant tous les utilisateurs à accéder \n" -" au profil « UserCert » :\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Afficher les propriétés d'une LCA d'AC nommée :\n" -" ipa caacl-show test\n" -"\n" -" Créer une LCA d'AC autorisant l'utilisatrice « alice » à utiliser le " -"profile « DNP3 » :\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Désactiver une LCA d'AC :\n" -" ipa caacl-disable test\n" -"\n" -" Supprimer une LCA d'AC :\n" -" ipa caacl-del test\n" +msgid "User name" +msgstr "Nom d'utilisateur" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" -"\n" -"Gestion des profils de certificats\n" -"\n" -"Les profils de certificats sont utilisés par l'autorité de certification " -"(AC) dans\n" -"la signature de certificats afin de déterminer si une demande de signature " -"de\n" -"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " -"quelles\n" -"fonctionnalités et extensions doivent figurer dans le certificat.\n" -"\n" -"Le format du profil de certificat est un format de liste de propriétés qui " -"sera\n" -"compris par une autorité de certification Dogtag ou Red Hat Certificate " -"System.\n" -"\n" -"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" -"\n" -"Un identifiant de profil est une chaîne de caractères sans espaces ni " -"caractère de\n" -"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " -"chiffres et\n" -"de caractère souligné (« _ »).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Importer un profil qui ne stockera pas les certificats émis :\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Supprimer un profil de certificat :\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Afficher les informations sur un profil :\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Enregistrer la configuration du profil dans un fichier :\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Rechercher des profils ne stockant pas les certificats :\n" -" ipa certprofile-find --store=false\n" -"\n" -"FORMAT DE LA CONFIGURATION DE PROFIL :\n" -"\n" -"Le format de configuration de profil est un format brut de liste de \n" -"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" -"pas pris en charge.\n" -"\n" -"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" -"\n" -"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " -"doit\n" -" correspondre à l'identifiant donné sur la ligne de commande.\n" -"\n" -"- Le champ « classId » doit être « caEnrollImpl »\n" -"\n" -"- Le champ « auth.instance_id  doit être « raCertAuth »\n" -"\n" -"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " -"doivent \n" -" être utilisées.\n" +msgid "Manage ticket policy for specific user" +msgstr "Administrer la politique de ticket pour un utilisateur donné" -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" -"\n" -"Gérer la zone DNS et les enregistrements de ressources.\n" +msgid "Max life" +msgstr "Vie max." -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Gérer les jetons OTP.\n" +msgid "Maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Gestion des serveurs mandataires RADIUS.\n" +msgid "Max renew" +msgstr "Renouvellement max." -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Gestion de jetons YubiKey.\n" +msgid "Maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Gestion des coffres-forts.\n" +msgid "Modify Kerberos ticket policy." +msgstr "Modifier la politique de tickets Kerberos." -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"Permissions administrées\n" +msgid "Reset Kerberos ticket policy to the default values." +msgstr "Réinitialiser la politique de tickets Kerberos." -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Manipulation des emplacements DNS\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Manipulation de la configuration du serveur DNS\n" +msgid "Display the current Kerberos ticket policy." +msgstr "Afficher la politique de tickets Kerberos." msgid "" "\n" @@ -4037,206 +4817,134 @@ msgstr "" "alors une entrée est inscrite pour chaque utilisateur ajouté, plus un\n" "résumé quand le groupe utilisateur par défaut est mis à jour.\n" -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" +msgid "Migrate users and groups from DS to IPA." +msgstr "Migrer les utilisateurs et groupes de DS vers IPA." + +msgid "LDAP URI" +msgstr "URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "URI LDAP du serveur DS depuis lequel effectuer la migration" + +msgid "bind password" +msgstr "mot de passe de connexion" + +msgid "Bind DN" +msgstr "DN de connexion" + +msgid "User container" +msgstr "Conteneur d'utilisateur" + +msgid "DN of container for users in DS relative to base DN" +msgstr "DN du conteneur pour les utilisateurs dans le DS relatif au DN de base" + +msgid "Group container" +msgstr "Conteneur de groupes" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "DN du conteneur pour des groupes dans le DS relatif au DN de base" + +msgid "User object class" +msgstr "Classe d'objets utilisateur" + +msgid "Objectclasses used to search for user entries in DS" msgstr "" -"\n" -"Migration vers IPA\n" -"\n" -"Migration d'utilisateurs et de groupes d'un serveur LDAP vers IPA.\n" -"\n" -"Ceci réalise une requête LDAP sur le serveur distant pour rechercher\n" -"utilisateurs et groupes dans un conteneur. Pour faire migrer les mots de\n" -"passe, vous devez vous connecter en tant qu'utilisateur capable de lire\n" -"l'attribut « userPassword » sur le serveur distant : chose généralement\n" -"réservée aux administrateurs de haut niveau comme « cn=Directory Manager »\n" -"dans 389-ds (utilisateur de la connexion par défaut).\n" -"\n" -"Par défaut, le conteneur utilisateur est ou=People.\n" -"\n" -"Par défaut, le conteneur groupe est ou=Groups.\n" -"\n" -"Utilisateurs et groupes préexistants sur le serveur IPA ne sont pas " -"touchés.\n" -"\n" -"Deux schémas LDAP définissent comment les membres d'un groupe sont\n" -"enregistrés : RFC2307 et RFC2307bis. RFC2307bis utilise « member » et\n" -"« uniquemember » pour définir les membres d'un groupe, RFC2307 utilise\n" -"« memberUid ». Le schéma par défaut est RFC2307bis.\n" -"\n" -"La fonctionnalité « compat » du schéma autorise IPA à formater à nouveau\n" -"les données pour les systèmes ne prenant pas en charge RFC2307bis. Il est\n" -"recommandé de désactiver cette fonction pendant la migration pour éviter\n" -"de surcharger le système. Vous la réactiverez après migration. Pour faire\n" -"la migration avec la fonction activée,utilisez l'option « --with-compat ».\n" -"\n" -"Les utilisateurs migrés n'ont pas de référence Kerberos, ils n'ont que leur\n" -"mot de passe LDAP. Pour achever le processus de migration, les utilisateurs\n" -"doivent aller à la page http://ipa.example.com/ipa/migration et\n" -"s'authentifier en utilisant leur mot de passe LDAP pour générer leur\n" -"justificatif d'identité Kerberos.\n" -"\n" -"Par défaut, la migration est désactivée. Utilisez la commande\n" -"« ipa config-mod » pour l'activer :\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Si un DN de base n'est pas indiqué avec « --basedn », IPA utilise alors,\n" -"soit la valeur de « defaultNamingContext » si elle est définie, soit la\n" -"première valeur fixée dans « namingContexts » dans la racine du serveur " -"LDAP\n" -"distant.\n" -"\n" -"Les utilisateurs sont ajoutés comme membres du groupe utilisateur par " -"défaut.\n" -"Cela peut être une tâche demandant du temps, ainsi pendant la migration " -"cela\n" -"se fait en mode « batch » par tranches de 100 utilisateurs. Il y aura donc\n" -"une fenêtre dans laquelle les utilisateurs seront ajoutés à IPA, mais\n" -"ne seront pas encore membres du groupe d'utilisateurs par défaut.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Migration la plus simple, acceptant tous les paramètres par défaut :\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" En précisant le conteneur utilisateur et groupe. S'utilise pour migrer les\n" -"données utilisateur et groupe d'un serveur IPA v1 :\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Comme un serveur IPA v2 comporte déjà des groupes prédéfinis pouvant " -"entrer\n" -"en conflit avec des groupes du serveur (IPA v1) migré (par exemple admins,\n" -"ipausers), des utilisateurs dans un groupe en conflit comme groupe " -"principal\n" -"peuvent se voir rattachés à un groupe inconnu sur le nouveau serveur IPA " -"v2.\n" -" Utilisez l'option « --group-overwrite-gid » pour écraser le GID des " -"groupes\n" -"préexistants afin d'éviter ce problème :\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Utilisateurs ou groupes migrés peuvent avoir des classes d'objets et\n" -"attributs associés inconnus du serveur IPA v2. Ces classes d'objets et\n" -"attributs doivent être tenus en dehors du processus de migration :\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"JOURNALISATION\n" -"\n" -"La migration inscrit des avertissements et des erreurs sur le journal\n" -"d'erreurs Apache. Ce fichier devra être examiné après la migration pour\n" -"corriger ou enquêter sur tout problème qui serait mentionné.\n" -"\n" -"Tous les 100 utilisateurs migrés un message de niveau info est affiché\n" -"indiquant l'avancement en cours et la durée écoulée pour permettre un suivi\n" -"du processus de progression de la migration.\n" -"\n" -"Si le niveau de journalisation est « debug », en définissant « debug=True »\n" -"soit dans « /etc/ipa/default.conf », soit dans « /etc/ipa/server.conf »,\n" -"alors une entrée est inscrite pour chaque utilisateur ajouté, plus un\n" -"résumé quand le groupe utilisateur par défaut est mis à jour.\n" +"Classes d'objets à utiliser pour la recherche d'entrées utilisateurs dans DS" + +msgid "Group object class" +msgstr "Classe d'objets groupe" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "Classes d'objets à utiliser pour la recherche d'entrées groupe dans DS" + +msgid "Ignore user object class" +msgstr "Classe d'objets utilisateur à ignorer" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "Classes d'objets à ignorer pour des entrées utilisateur dans DS" + +msgid "Ignore user attribute" +msgstr "Attribut utilisateur à ignorer" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "Attributs à ignorer dans des entrées utilisateur dans DS" + +msgid "Ignore group object class" +msgstr "Classe d'objets groupe à ignorer" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "Classes d'objets à ignorer pour les entrées groupe dans DS" + +msgid "Ignore group attribute" +msgstr "Attribut groupe à ignorer" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "Attributs à ignorer dans les entrées groupe dans DS" + +msgid "Overwrite GID" +msgstr "Surcharger le GID" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" +"Lors de la migration d'un groupe existant déjà dans le domaine IPA, " +"surcharger le GID du groupe et renvoyer un succès" + +msgid "LDAP schema" +msgstr "Schéma LDAP" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"Le schéma utilisé sur le serveur LDAP. Les valeurs prises en charge sont " +"RFC2307 et RFC2307bis. La valeur par défaut est RFC2307bis" + +msgid "Continue" +msgstr "Continuer" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" +"Mode continu. Les erreurs sont rapportées mais le processus se poursuit" + +msgid "Base DN" +msgstr "DN de base" + +msgid "Base DN on remote LDAP server" +msgstr "DN de base sur le serveur LDAP distant" + +msgid "Ignore compat plugin" +msgstr "Ignorer le greffon « compat »" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "Autoriser la migration malgré l'utilisation du greffon « compat »" + +msgid "CA certificate" +msgstr "Certificat d'AC" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Charger le certificat de l'AC du serveur LDAP depuis FILE" + +msgid "groups to exclude from migration" +msgstr "groupes à exclure de la migration" + +msgid "users to exclude from migration" +msgstr "utilisateurs à exclure de la migration" + +msgid "Lists of objects migrated; categorized by type." +msgstr "Liste des objets migrés, catégorisés par type." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "Liste des objets n'ayant pu être migrés, catégorisés par type." + +msgid "False if migration mode was disabled." +msgstr "Faux si le mode de migration a été désactivé." + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" +"False si la migration échoue parce que le greffon « compat » est activé." msgid "" "\n" @@ -4245,6 +4953,38 @@ msgstr "" "\n" "Greffons divers\n" +msgid "Show environment variables." +msgstr "Afficher les variables d'environnement." + +msgid "Forward to server instead of running locally" +msgstr "Rediriger vers le serveur au lieu d'exécuter localement" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" +"récupère et affiche tous les attributs du serveur. Modifie la sortie de la " +"commande." + +msgid "Dictionary mapping variable name to value" +msgstr "Annuaire associant un nom de variable à une valeur" + +msgid "Total number of variables env (>= count)" +msgstr "Nombre total de variables d'environnement (>= count)" + +msgid "Number of variables returned (<= total)" +msgstr "Nombre de variables renvoyées (<= total)" + +msgid "Show all loaded plugins." +msgstr "Afficher tous les greffons chargés." + +#, fuzzy +#| msgid "Dictionary mapping variable name to value" +msgid "Dictionary mapping plugin names to bases" +msgstr "Annuaire associant un nom de variable à une valeur" + +msgid "Number of plugins loaded" +msgstr "Nombre de greffons chargés" + msgid "" "\n" "Netgroups\n" @@ -4292,70 +5032,115 @@ msgstr "" " Supprimer un groupe réseau :\n" " ipa netgroup-del admins\n" -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"Notez la distinction entre attributs et entrées. Les permissions sont\n" -"indépendantes, donc la possibilité d'ajouter un utilisateur ne signifie\n" -"pas qu'il est possible de les modifier.\n" +msgid "Netgroup name" +msgstr "Nom de groupe réseau" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Jetons OTP\n" +msgid "Netgroup description" +msgstr "Description de groupe réseau" -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "NIS domain name" +msgstr "Nom de domaine NIS" + +msgid "IPA unique ID" +msgstr "ID unique IPA" + +msgid "Member netgroups" +msgstr "Groupes réseau membre" + +msgid "Indirect Member netgroups" +msgstr "Groupes réseau de membres indirects" + +msgid "Member User" +msgstr "Utilisateur membre" + +msgid "Member Group" +msgstr "Groupe membre" + +msgid "Member Host" +msgstr "Hôte membre" + +msgid "Member Hostgroup" +msgstr "Groupe d'hôtes membre" + +msgid "Add a new netgroup." +msgstr "Ajouter un nouveau groupe réseau." + +msgid "Add members to a netgroup." +msgstr "Ajouter des membres à un groupe réseau." + +msgid "member netgroup" +msgstr "Groupe réseau membre" + +msgid "netgroups to add" +msgstr "Groupes réseau à ajouter" + +msgid "Delete a netgroup." +msgstr "Supprimer un groupe réseau." + +msgid "Search for a netgroup." +msgstr "Rechercher un groupe réseau." + +msgid "search for managed groups" +msgstr "rechercher les groupes administrés" + +msgid "Search for netgroups with these member netgroups." msgstr "" -"\n" -"Jetons OTP\n" -"\n" -"Configuration des jetons OTP.\n" -"\n" -"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" -"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau jeton :\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examiner un jeton :\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Modifier le fournisseur :\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Supprimer un jeton :\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +"Rechercher des groupes réseaux dont les membres sont ces groupes réseau." + +msgid "Search for netgroups without these member netgroups." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " +"réseau." + +msgid "Search for netgroups with these member users." +msgstr "Rechercher des groupes réseaux dont les membres sont ces utilisateurs." + +msgid "Search for netgroups without these member users." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces utilisateurs." + +msgid "group" +msgstr "groupe" + +msgid "Search for netgroups with these member groups." +msgstr "Rechercher des groupes réseaux dont les membres sont ces groupes." + +msgid "Search for netgroups without these member groups." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes." + +msgid "Search for netgroups with these member hosts." +msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." + +msgid "Search for netgroups without these member hosts." +msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." + +msgid "Search for netgroups with these member host groups." +msgstr "" +"Rechercher des groupes réseaux dont les membres sont ces groupes d'hôtes." + +msgid "Search for netgroups without these member host groups." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " +"d'hôtes." + +msgid "Search for netgroups with these member of netgroups." +msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." + +msgid "Search for netgroups without these member of netgroups." +msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." + +msgid "Modify a netgroup." +msgstr "Modifier un groupe réseau." + +msgid "Remove members from a netgroup." +msgstr "Supprimer des membres d'un groupe réseau." + +msgid "netgroups to remove" +msgstr "Groupes réseau à supprimer" + +msgid "Display information about a netgroup." +msgstr "Afficher l'information sur un groupe réseau." msgid "" "\n" @@ -4408,6 +5193,552 @@ msgstr "" " Modifier la fenêtre maximale d'authentification HOTP à 50 :\n" " ipa hotpconfig-mod --hotp-sync-window=50\n" +msgid "TOTP authentication Window" +msgstr "Fenêtre d'authentification TOTP" + +msgid "TOTP authentication time variance (seconds)" +msgstr "Durée de la fenêtre d'authentification TOTP (secondes)" + +msgid "TOTP Synchronization Window" +msgstr "Fenêtre de synchronisation TOTP" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "Variance temporelle de synchronisation TOTP (secondes)" + +msgid "HOTP Authentication Window" +msgstr "Fenêtre d'authentification HOTP" + +msgid "HOTP authentication skip-ahead" +msgstr "passage d'occurrence d'authentification HOTP" + +msgid "HOTP Synchronization Window" +msgstr "Fenêtre de synchronisation HOTP" + +msgid "HOTP synchronization skip-ahead" +msgstr "passage d'occurrence de synchronisation HOTP" + +msgid "Modify OTP configuration options." +msgstr "Modifier les options de configuration OTP." + +msgid "Show the current OTP configuration." +msgstr "Afficher la configuration OTP actuelle." + +#, fuzzy +#| msgid "" +#| "\n" +#| "This code is an extension to the otptoken plugin and provides support " +#| "for\n" +#| "reading/writing YubiKey tokens directly.\n" +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" +"\n" +"Ce code est une extension du greffon « otptoken » ; il fournit la prise en\n" +"charge pour lire/écrire des jetons YubiKey directement.\n" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" +"\n" +"Définir le mot de passe d'un utilisateur\n" +"\n" +"Si une personne autre que l'utilisateur change le mot de passe de cet\n" +"utilisateur (par exemple en cas de réinitialisation par les services\n" +"d'assistance technique), le mot de passe devra être modifié la première\n" +"fois qu'il sera utilisé, afin que l'utilisateur soit le seul à connaître\n" +"son mot de passe.\n" +"\n" +"La politique de mot de passe de IPA contrôle la fréquence de changement\n" +"des mots de passe, les prérequis de leur résistance, et la taille\n" +"de l'historique des mots de passe.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Réinitialiser son propre mot de passe :\n" +" ipa passwd\n" +"\n" +" Modifier le mot de passe d'un utilisateur :\n" +" ipa passwd tuser1\n" + +msgid "Set a user's password." +msgstr "Définir le mot de passe d'un utilisateur." + +msgid "New Password" +msgstr "Nouveau mot de passe" + +msgid "Current Password" +msgstr "Mot de passe actuel" + +msgid "OTP" +msgstr "OTP" + +msgid "One Time Password" +msgstr "Mots de passe à usage unique" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "Nom de permission" + +msgid "Granted rights" +msgstr "Droits accordés" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "Droits à accorder (read, search, compare, write, add, delete, all)" + +msgid "Effective attributes" +msgstr "Attributs impactés" + +msgid "All attributes to which the permission applies" +msgstr "Tous les attributs auxquels la permission s'applique" + +msgid "Included attributes" +msgstr "Attributs inclus" + +msgid "User-specified attributes to which the permission applies" +msgstr "Attributs propres à un utilisateur auxquels la permission s'applique" + +msgid "Excluded attributes" +msgstr "Attributs exclus" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" +"Attributs propres à un utilisateur auxquels la permission ne s'applique " +"explicitement pas" + +msgid "Default attributes" +msgstr "Attributs par défaut" + +msgid "Attributes to which the permission applies by default" +msgstr "Attributs auxquels la permission s'applique par défaut" + +msgid "Bind rule type" +msgstr "Type de règle liée" + +msgid "Subtree to apply permissions to" +msgstr "Branche à laquelle appliquer les permissions" + +msgid "Extra target filter" +msgstr "Filtre cible supplémentaire" + +msgid "Raw target filter" +msgstr "Filtre cible brut" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" +"Tous les filtres cible, y compris ceux définis avec « type » et « memberof »" + +msgid "Target DN" +msgstr "DN cible" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" +"DN optionnel auquel appliquer les permissions (doit être dans le sous-arbre, " +"mais peut ne pas encore exister)" + +msgid "Member of group" +msgstr "Membre du groupe" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "Membres cibles d'un groupe (définit « memberof » du filtre cible)" + +msgid "User group to apply permissions to (sets target)" +msgstr "" +"Groupe d'utilisateurs auquel appliquer les permissions (définit « target »)" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" +"Type d'objets IPA (définit le sous-arbre et le filtre cible de la classe " +"d'objets)" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use extratargetfilter" +msgstr "Abandonné ; utiliser %s" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use ipapermlocation" +msgstr "Abandonné ; utiliser %s" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use ipapermright" +msgstr "Abandonné ; utiliser %s" + +#, fuzzy +#| msgid "Granted rights" +msgid "Granted to Privilege" +msgstr "Droits accordés" + +msgid "Indirect Member of roles" +msgstr "Membres indirect des rôles" + +msgid "Add a new permission." +msgstr "Ajouter une nouvelle permission." + +#, fuzzy +#| msgid "Add members to a privilege." +msgid "Add members to a permission." +msgstr "Ajouter des membres à un privilège." + +#, fuzzy +#| msgid "Add members to a privilege." +msgid "member privilege" +msgstr "Ajouter des membres à un privilège." + +#, fuzzy +#| msgid "privileges" +msgid "privileges to add" +msgstr "privilèges" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "Ajout d'une permission système sans ACI (commande interne)" + +msgid "Permission flags" +msgstr "Marqueurs de permission" + +msgid "Delete a permission." +msgstr "Supprimer une permission." + +msgid "force delete of SYSTEM permissions" +msgstr "forcer la suppression des permissions SYSTEM" + +msgid "Search for permissions." +msgstr "Recherche des permissions." + +msgid "Modify a permission." +msgstr "Modifier une permission." + +#, fuzzy +#| msgid "Rename the group object" +msgid "Rename the permission object" +msgstr "Renommer l'objet groupe" + +#, fuzzy +#| msgid "Remove members from a role." +msgid "Remove members from a permission." +msgstr "Supprimer des membres d'un rôle." + +#, fuzzy +#| msgid "roles to remove" +msgid "privileges to remove" +msgstr "rôles à supprimer" + +msgid "Display information about a permission." +msgstr "Afficher les informations sur une permission." + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" +"\n" +"« Ping » sur un serveur IPA distant pour s'assurer de son fonctionnement.\n" +"\n" +"La commande « ping » envoie une requête « echo « au serveur IPA. Le serveur\n" +"renvoie ses informations de version. Ce mécanisme est utilisé par le client\n" +"IPA pour confirmer que le serveur est disponible et est en mesure " +"d'accepter\n" +"les requêtes.\n" +"\n" +"Le serveur indiqué par « xmlrpc_uri » dans « /etc/ipa/default.conf » est\n" +"contacté en premier. S'il ne répond pas alors le client contactera " +"n'importe\n" +"quel autre serveur défini dans les enregistrements SRV du DNS.\n" +"\n" +"EXEMPLES :\n" +"\n" +" « Ping » d'un serveur IPA :\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" « Ping » verbeux d'un serveur IPA :\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" + +msgid "Ping a remote server." +msgstr "« Ping » sur un serveur distant." + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" +"\n" +"Options de « pkinit » de Kerberos\n" +"\n" +"Activer ou désactiver l'opération « pkinit » anonyme en utilisant le\n" +"principal WELLKNOWN/ANONYMOUS@REALM. Le serveur doit avoir\n" +"été installé avec la prise en charge de « pkinit ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" Activer le « pkinit » anonyme :\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Désactiver le « pkinit » anonyme :\n" +" ipa pkinit-anonymous disable\n" +"\n" +"Pour plus d'informations sur « pkinit » anonyme, cf. :\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "Active ou désactive un PKINIT anonyme" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" +"\n" +"Privilèges\n" +"\n" +"Un privilège combine les permissions en tâches logiques. Une permission\n" +"fournit les droits de réaliser une tâche unique. Certaines opérations IPA\n" +"requièrent une combinaison de plusieurs permissions. Un privilège est la\n" +"combinaison de ces permissions pour réaliser une tâche.\n" +"\n" +"Par exemple, la création d'utilisateurs requiert les permissions " +"suivantes :\n" +" * création d'une nouvelle entrée\n" +" * réinitialisation du mot de passe\n" +" * ajout du nouvel utilisateur au groupe d'utilisateurs par défaut de IPA\n" +"\n" +"La combinaison de ces trois tâches de bas niveau en privilège nommé\n" +"« Add User » facilite la gestion des rôles.\n" +"\n" +"Un privilège ne peut contenir d'autres privilèges.\n" +"\n" +"Reportez-vous la gestion des rôles et des permissions pour plus " +"d'informations.\n" + +msgid "Privilege name" +msgstr "Nom du privilège" + +msgid "Privilege description" +msgstr "Description du privilège" + +msgid "Granting privilege to roles" +msgstr "Privilèges accordés aux rôles" + +msgid "Add a new privilege." +msgstr "Ajouter un nouveau privilège." + +msgid "Add members to a privilege." +msgstr "Ajouter des membres à un privilège." + +#, fuzzy +#| msgid "member group" +msgid "member role" +msgstr "groupe membre" + +#, fuzzy +#| msgid "groups to add" +msgid "roles to add" +msgstr "groupes à ajouter" + +msgid "Add permissions to a privilege." +msgstr "Ajouter des permissions à un privilège." + +msgid "permission" +msgstr "permission" + +msgid "permissions" +msgstr "permissions" + +msgid "Number of permissions added" +msgstr "Nombre de permissions ajoutées" + +msgid "Delete a privilege." +msgstr "Supprimer un privilège" + +msgid "Search for privileges." +msgstr "Rechercher des privilèges." + +msgid "Modify a privilege." +msgstr "Modifier un privilège." + +#, fuzzy +#| msgid "Rename the ID View object" +msgid "Rename the privilege object" +msgstr "Renommer l'objet surcharge de vue d'identifiants" + +msgid "Remove members from a privilege" +msgstr "Supprimer les membres d'un privilège" + +msgid "roles to remove" +msgstr "rôles à supprimer" + +msgid "Remove permissions from a privilege." +msgstr "Supprimer des permissions d'un privilège." + +msgid "Number of permissions removed" +msgstr "Nombre de permissions supprimées" + +msgid "Display information about a privilege." +msgstr "Afficher les informations sur un privilège." + msgid "" "\n" "Password policy\n" @@ -4499,146 +5830,93 @@ msgstr "" " Modifier une politique de mots de passe de groupe :\n" " ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"Permissions\n" +msgid "Group" +msgstr "Groupe" -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" -"\n" -"Les permissions venant par défaut avec IPA sont dites « administrées ».\n" -"Un jeu d'attributs par défaut leur a été appliqué, mais l'administrateur\n" -"peut ajouter/supprimer des attributs individualisés à cet ensemble.\n" +msgid "Manage password policy for specific group" +msgstr "Gérer la politique de mots de passe d'un groupe spécifique" -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" -"\n" -"« Ping » sur un serveur IPA distant pour s'assurer de son fonctionnement.\n" -"\n" -"La commande « ping » envoie une requête « echo « au serveur IPA. Le serveur\n" -"renvoie ses informations de version. Ce mécanisme est utilisé par le client\n" -"IPA pour confirmer que le serveur est disponible et est en mesure " -"d'accepter\n" -"les requêtes.\n" -"\n" -"Le serveur indiqué par « xmlrpc_uri » dans « /etc/ipa/default.conf » est\n" -"contacté en premier. S'il ne répond pas alors le client contactera " -"n'importe\n" -"quel autre serveur défini dans les enregistrements SRV du DNS.\n" -"\n" -"EXEMPLES :\n" -"\n" -" « Ping » d'un serveur IPA :\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" « Ping » verbeux d'un serveur IPA :\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" +msgid "Max lifetime (days)" +msgstr "Durée de vie maximale (jours)" -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" -"\n" -"Greffons non accessibles depuis la ligne de commande, commandes utilisées en " -"interne\n" +msgid "Maximum password lifetime (in days)" +msgstr "Durée de vie maximale d'un mot de passe (en jours)" -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" -"\n" -"Privilèges\n" -"\n" -"Un privilège combine les permissions en tâches logiques. Une permission\n" -"fournit les droits de réaliser une tâche unique. Certaines opérations IPA\n" -"requièrent une combinaison de plusieurs permissions. Un privilège est la\n" -"combinaison de ces permissions pour réaliser une tâche.\n" -"\n" -"Par exemple, la création d'utilisateurs requiert les permissions " -"suivantes :\n" -" * création d'une nouvelle entrée\n" -" * réinitialisation du mot de passe\n" -" * ajout du nouvel utilisateur au groupe d'utilisateurs par défaut de IPA\n" -"\n" -"La combinaison de ces trois tâches de bas niveau en privilège nommé\n" -"« Add User » facilite la gestion des rôles.\n" -"\n" -"Un privilège ne peut contenir d'autres privilèges.\n" -"\n" -"Reportez-vous la gestion des rôles et des permissions pour plus " -"d'informations.\n" +msgid "Min lifetime (hours)" +msgstr "Durée de vie minimale (jours)" -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"Fournit des capacités d'introspection de l'API.\n" +msgid "Minimum password lifetime (in hours)" +msgstr "Durée de vie maximale d'un mot de passe (en jours)" -msgid "" -"\n" -"RADIUS Proxy Servers\n" +msgid "History size" +msgstr "Taille de l'historique" + +msgid "Password history size" +msgstr "Taille de l'historique des mots de passe" + +msgid "Character classes" +msgstr "Classes de caractères" + +msgid "Minimum number of character classes" +msgstr "Nombre minimal de classes de caractères" + +msgid "Min length" +msgstr "Longueur minimale" + +msgid "Minimum length of password" +msgstr "Taille minimale d'un mot de passe" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Priorité de la politique (une valeur élevé indique une priorité basse)" + +msgid "Max failures" +msgstr "Nombre maximal d'échecs" + +msgid "Consecutive failures before lockout" +msgstr "Échecs consécutifs avant verrouillage" + +msgid "Failure reset interval" +msgstr "Délai de réinitialisation après échec" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "Temps après lequel le compteur d'échecs sera réinitialisé (secondes)" + +msgid "Lockout duration" +msgstr "Durée du verrouillage" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Durée pendant laquelle le verrouillage est actif (secondes)" + +msgid "Results should contain primary key attribute only (\"cn\")" msgstr "" -"\n" -"Serveurs mandataires RADIUS\n" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« cn »)" + +msgid "Add a new group password policy." +msgstr "Ajouter une nouvelle politique de mot de passe." + +msgid "Delete a group password policy." +msgstr "Supprimer une politique de mot de passe." + +msgid "Search for group password policies." +msgstr "Rechercher des politiques de mot de passe de groupe." + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale (« " +"group »)" + +msgid "Modify a group password policy." +msgstr "Modifier une politique de mot de passe de groupe." + +msgid "Display information about password policy." +msgstr "Afficher les informations sur une politique de mot de passe." + +msgid "User" +msgstr "Utilisateur" + +msgid "Display effective policy for a specific user" +msgstr "Afficher la politique effective d'un utilisateur donné" msgid "" "\n" @@ -4695,37 +5973,61 @@ msgstr "" " Supprimer la configuration:\n" " ipa radiusproxy-del MyRADIUS\n" -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"RÉINSCRIPTION :\n" -"\n" -"Un hôte déjà inscrit à un certain endroit ayant perdu sa configuration\n" -"(ex.: parce que sa VM a été supprimée), peut être réinscrit.\n" -"\n" -"Pour plus d'informations, consulter les pages « man » de ipa-client-" -"install.\n" -"\n" -"Un hôte peut facultativement stocker des informations complémentaires\n" -"comme sa localisation, le système d'exploitation qu'il exécute, etc.\n" +msgid "RADIUS proxy server name" +msgstr "Nom du serveur mandataire RADIUS" -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" -"\n" -"Relever le niveau du domaine IPA.\n" +msgid "A description of this RADIUS proxy server" +msgstr "Description de ce serveur mandataire RADIUS" + +msgid "Server" +msgstr "Serveur" + +msgid "The hostname or IP (with or without port)" +msgstr "Nom d'hôte ou adresse IP (avec ou sans port)" + +msgid "Secret" +msgstr "Secret" + +msgid "The secret used to encrypt data" +msgstr "Secret utilisé pour chiffrer les données" + +msgid "Timeout" +msgstr "Délai d'expiration" + +msgid "The total timeout across all retries (in seconds)" +msgstr "Délai d'expiration total pour toutes les tentatives (en secondes)" + +msgid "Retries" +msgstr "Tentatives" + +msgid "The number of times to retry authentication" +msgstr "Le nombre de fois autorisées pour tenter une authentification" + +msgid "User attribute" +msgstr "Attribut utilisateur" + +msgid "The username attribute on the user object" +msgstr "L'attribut de nom d'utilisateur de l'objet utilisateur" + +msgid "Add a new RADIUS proxy server." +msgstr "Ajouter un nouveau serveur mandataire RADIUS." + +msgid "Delete a RADIUS proxy server." +msgstr "Supprimer un serveur mandataire RADIUS." + +msgid "Search for RADIUS proxy servers." +msgstr "Rechercher des serveurs mandataires RADIUS." + +msgid "Modify a RADIUS proxy server." +msgstr "Modifier un serveur mandataire RADIUS" + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Rename the RADIUS proxy server object" +msgstr "Supprimer un serveur mandataire RADIUS." + +msgid "Display information about a RADIUS proxy server." +msgstr "Afficher les informations sur un serveur mandataire RADIUS." msgid "" "\n" @@ -4768,51 +6070,23 @@ msgstr "" " Supprimer un domaine de la liste des domaines du royaume :\n" " ipa realmdomains-mod --del-domain=olddomain.com\n" -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" -"\n" -"La suppression de « %(hostname)s » engendre une déconnexion de la topologie " -"de réplication pour le suffixe « %(suffix)s » :\n" -"%(errors)s" +msgid "Domain" +msgstr "Domaine" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" -"\n" -"La topologie de réplication dans le suffixe « %(suffix)s » est " -"déconnectée :\n" -"%(errors)s" +msgid "Add domain" +msgstr "Ajouter un domaine" -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"Les droits définissent les opérations permises ; ce sont un ou plusieurs\n" -"des éléments suivants :\n" -"1. write - écrire un ou plusieurs attributs\n" -"2. read - lire un ou plusieurs attributs\n" -"3. search - rechercher un ou plusieurs attributs\n" -"4. compare - comparer un ou plusieurs attributs\n" -"5. add - ajouter une nouvelle entrée dans l'arbre\n" -"6. delete - supprimer une entrée existante\n" -"7. all - toutes les permissions sont garanties\n" +msgid "Delete domain" +msgstr "Supprimer un domaine" + +msgid "Modify realm domains." +msgstr "Modifier les domaines du royaume." + +msgid "Force adding domain even if not in DNS" +msgstr "Forcer l'ajout d'un domaine même si absent des DNS" + +msgid "Display the list of realm domains." +msgstr "Afficher la liste des domaines du royaume." msgid "" "\n" @@ -4891,6 +6165,170 @@ msgstr "" " peut ajouter des utilisateurs, réinitialiser des mots de passe, ou ajouter\n" " un utilisateur au groupe d'utilisateur par défaut de IPA.\n" +msgid "Role name" +msgstr "Nom du rôle" + +msgid "A description of this role-group" +msgstr "Description de ce groupe de rôles" + +msgid "Member users" +msgstr "Utilisateurs membres" + +msgid "Member groups" +msgstr "Groupes de membres" + +msgid "Privileges" +msgstr "Privilèges" + +msgid "Member services" +msgstr "Services membres" + +msgid "Add a new role." +msgstr "Ajouter un nouveau rôle." + +msgid "Add members to a role." +msgstr "Ajouter des membres à un rôle." + +#, fuzzy +#| msgid "Member services" +msgid "member service" +msgstr "Services membres" + +#, fuzzy +#| msgid "HBAC services to add" +msgid "services to add" +msgstr "Services HBAC à ajouter" + +msgid "Add privileges to a role." +msgstr "Ajouter des privilèges à un rôle." + +msgid "privilege" +msgstr "privilège" + +msgid "privileges" +msgstr "privilèges" + +msgid "Number of privileges added" +msgstr "Nombre de privilèges ajoutés" + +msgid "Delete a role." +msgstr "Supprimer un rôle" + +msgid "Search for roles." +msgstr "Rechercher des rôles." + +msgid "Modify a role." +msgstr "Modifier un rôle." + +#, fuzzy +#| msgid "Rename the group object" +msgid "Rename the role object" +msgstr "Renommer l'objet groupe" + +msgid "Remove members from a role." +msgstr "Supprimer des membres d'un rôle." + +#, fuzzy +#| msgid "HBAC services to remove" +msgid "services to remove" +msgstr "Services HBAC à supprimer" + +msgid "Remove privileges from a role." +msgstr "Supprimer des privilèges d'un rôle." + +msgid "Number of privileges removed" +msgstr "Nombre de privilèges retirés" + +msgid "Display information about a role." +msgstr "Afficher les informations sur un rôle." + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Permissions de libre service\n" +"\n" +"Une permission permet d'affiner une délégation de permissions. Les règles " +"ou\n" +"instructions de contrôle d'accès (ACI) accordent la permission de donner " +"les\n" +"permissions d'effectuer des tâches données comme ajouter un utilisateur,\n" +"modifier un groupe, etc.\n" +"\n" +"Une permission de libre service définit ce qu'un objet peut modifier dans " +"sa\n" +"propre entrée.\n" +"\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une règle de libre service permettant aux utilisateurs de gérer\n" +"leurs adresses (avec les extensions entre accolades de Bash) :\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" En gérant les listes d'attributs, vous devez incorporer tous les attributs\n" +"dans la liste, y compris les existants.\n" +" Ajouter « telephoneNumber » à la liste (avec extension entre accolades " +"Bash) :\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Afficher la règle modifiée :\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Supprimer une règle :\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +msgid "Self-service name" +msgstr "Nom de la permission de libre service" + +msgid "Attributes to which the permission applies." +msgstr "Attributs auxquels les permissions s'appliquent." + +msgid "Add a new self-service permission." +msgstr "Ajouter une nouvelle permission de libre service." + +msgid "Delete a self-service permission." +msgstr "Supprimer une permission de libre service." + +msgid "Search for a self-service permission." +msgstr "Rechercher des permissions de libre service." + +msgid "Modify a self-service permission." +msgstr "Modifier une permission de libre service." + +msgid "Display information about a self-service permission." +msgstr "Afficher les informations sur une permission de libre service." + msgid "" "\n" "SELinux User Mapping\n" @@ -4993,307 +6431,112 @@ msgstr "" "disponibles\n" " avec la commande « config-show ».\n" -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" -"\n" -"TYPES DE ZONE PRIS EN CHARGE\n" -"\n" -" * Zone maître (dnszone-*), contient les données faisant autorité.\n" -" * Zone redirigée (dnsforwardzone-*), qui transfère les requêtes aux " -"redirecteurs\n" -" configurés (un ensemble de serveurs DNS).\n" +msgid "SELinux User" +msgstr "Utilisateur SELinux" -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Permissions de libre service\n" -"\n" -"Une permission permet d'affiner une délégation de permissions. Les règles " -"ou\n" -"instructions de contrôle d'accès (ACI) accordent la permission de donner " -"les\n" -"permissions d'effectuer des tâches données comme ajouter un utilisateur,\n" -"modifier un groupe, etc.\n" -"\n" -"Une permission de libre service définit ce qu'un objet peut modifier dans " -"sa\n" -"propre entrée.\n" -"\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une règle de libre service permettant aux utilisateurs de gérer\n" -"leurs adresses (avec les extensions entre accolades de Bash) :\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" En gérant les listes d'attributs, vous devez incorporer tous les attributs\n" -"dans la liste, y compris les existants.\n" -" Ajouter « telephoneNumber » à la liste (avec extension entre accolades " -"Bash) :\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Afficher la règle modifiée :\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Supprimer une règle :\n" -" ipa selfservice-del \"Users manage their own address\"\n" +msgid "HBAC Rule" +msgstr "Règle HBAC" -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgid "HBAC Rule that defines the users, groups and hostgroups" msgstr "" -"\n" -"Configuration du serveur\n" -"\n" -"Gérer les valeurs par défaut utilisées par IPA ainsi que certains de ses\n" -"paramètres d'ajustement.\n" -"\n" -"NOTES :\n" -"\n" -"La valeur de notification du mot de passe (--pwdexpnotify) est stockée ici\n" -"en vue de sa réplication. Elle n'est pas actuellement utilisée pour " -"notifier\n" -"par avance aux utilisateurs l'expiration de leur mot de passe.\n" -"\n" -"Certains attributs sont en lecture seule, fournis à titre d'information ;\n" -"ils comprennent :\n" -"\n" -"* la base sujet de certificat : la base de sujet de certificat configuré,\n" -" ex. O=EXAMPLE.COM, configurable uniquement à l'installation.\n" -"* les fonctions du greffon mots de passe : définit les hachages " -"additionnels\n" -" qu'un mot de passe va générer (d'autres conditions peuvent s'appliquer).\n" -"\n" -"En fixant la liste ordonnée pour le mappage des utilisateurs SELinux, vous\n" -"devez mettre entre guillemets les valeurs pour éviter leur interprétation.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Afficher la configuration de base du serveur :\n" -" ipa config-show\n" -"\n" -" Afficher toutes les options de configuration :\n" -" ipa config-show --all\n" -"\n" -" Modifier la longueur maximale d'un nom d'utilisateur à 99 caractères :\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Augmenter délais et limites de taille des recherches sur le serveur IPA :\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Définir le domaine pour les courriels de l'utilisateur par défaut :\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Activer le mode migration pour que « ipa migrate-ds » soit opérationelle :\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Définir l'ordre de la mappe des utilisateurs SELinux :\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"Règle HBAC délimitant les utilisateurs, les groupes et les groupes d'hôtes" -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" +msgid "Create a new SELinux User Map." +msgstr "Créer une nouvelle mappe d'utilisateurs SELinux" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." msgstr "" -"\n" -"Délégation contrainte de services\n" -"\n" -"Gérez les règles permettant la délégation contrainte d'informations\n" -"d'authentification de façon à ce qu'un service puisse se faire passer\n" -"pour un utilisateur lors de la communication avec un service sans\n" -"que cela ne nécessite de la part de l'utilisateur de transmettre son TGT.\n" -"Cela constitue une méthode bien meilleure de délégation d'identification\n" -"car elle évite l'exposition du secret court terme de l'utilisateur.\n" -"\n" -"La convention de nommage est d'ajouter le mot « target » ou « targets »\n" -"au nom de la règle de correspondance. Ce poitn n'est pas obligatoire mais\n" -"aide à visualiser l'association entre règles et cibles.\n" -"\n" -"Une règle est constituée de deux choses :\n" -" - une liste de cibles auxquelles la règle s'applique,\n" -" - une liste de memberPrincipals qui sont autorisés à leur déléguer\n" -" leurs droits.\n" -"\n" -"Une cible consiste en une liste de principaux qui peuvent être délégués.\n" -"\n" -"En anglais, une règle que ce principal peut déléguer comme cette liste\n" -"de principaux, tels que définis par ces cibles.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une nouvelle règle de délégation contrainte :\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Ajouter une nouvelle cible de délégation contrainte :\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Ajouter un principal à la règle :\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Ajouter notre cible à la règle :\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add un principal à la cible :\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Afficher les informations au sujet d'une règle de délégation et sa cible :\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Supprimer une délégation contrainte :\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"Dans cet exemple, le service ftp peut obtenir un TGT pour le service ldap\n" -"au nom de l'utilisateur associé.\n" -"\n" -"Il est fortement découragé de modifier les délégations livrées avec IPA,\n" -"ipa-http-delegation et ses cibles ipa-cifs-delegation-targets et\n" -"ipa-ldap-delegation-targets. Des modifications erronées peuvent obérer\n" -"la capacité de délégation, en provoquant l'arrêt de fonctionnement du\n" -"moteur.\n" +"Ajouter des hôtes et groupes d'hôtes cibles à une mappe d'utilisateurs " +"SELinux" +msgid "Add users and groups to an SELinux User Map rule." +msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" + +msgid "Delete a SELinux User Map." +msgstr "Supprimer une mappe d'utilisateurs SELinux" + +msgid "Disable an SELinux User Map rule." +msgstr "Désactiver une mappe d'utilisateurs SELinux" + +msgid "Enable an SELinux User Map rule." +msgstr "Activer une mappe d'utilisateurs SELinux" + +msgid "Search for SELinux User Maps." +msgstr "Rechercher des mappes d'utilisateurs SELinux" + +msgid "Modify a SELinux User Map." +msgstr "Modifier une mappe d'utilisateurs SELinux" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" +"Supprimer des hôtes et groupes d'hôtes cibles d'une mappe d'utilisateurs " +"SELinux" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" +"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "Afficher les propriétés d'une mappe d'utilisateurs SELinux" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Services\n" +#| "\n" +#| "A IPA service represents a service that runs on a host. The IPA service\n" +#| "record can store a Kerberos principal, an SSL certificate, or both.\n" +#| "\n" +#| "An IPA service can be managed directly from a machine, provided that\n" +#| "machine has been given the correct permission. This is true even for\n" +#| "machines other than the one the service is associated with. For example,\n" +#| "requesting an SSL certificate using the host service principal " +#| "credentials\n" +#| "of the host. To manage a service using host credentials you need to\n" +#| "kinit as the host:\n" +#| "\n" +#| " # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +#| "\n" +#| "Adding an IPA service allows the associated service to request an SSL\n" +#| "certificate or keytab, but this is performed as a separate step; they\n" +#| "are not produced as a result of adding the service.\n" +#| "\n" +#| "Only the public aspect of a certificate is stored in a service record;\n" +#| "the private key is not stored.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new IPA service:\n" +#| " ipa service-add HTTP/web.example.com\n" +#| "\n" +#| " Allow a host to manage an IPA service certificate:\n" +#| " ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +#| " ipa role-add-member --hosts=web.example.com certadmin\n" +#| "\n" +#| " Override a default list of supported PAC types for the service:\n" +#| " ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +#| "\n" +#| " A typical use case where overriding the PAC type is needed is NFS.\n" +#| " Currently the related code in the Linux kernel can only handle " +#| "Kerberos\n" +#| " tickets up to a maximal size. Since the PAC data can become quite " +#| "large it\n" +#| " is recommended to set --pac-type=NONE for NFS services.\n" +#| "\n" +#| " Delete an IPA service:\n" +#| " ipa service-del HTTP/web.example.com\n" +#| "\n" +#| " Find all IPA services associated with a host:\n" +#| " ipa service-find web.example.com\n" +#| "\n" +#| " Find all HTTP services:\n" +#| " ipa service-find HTTP\n" +#| "\n" +#| " Disable the service Kerberos key and SSL certificate:\n" +#| " ipa service-disable HTTP/web.example.com\n" +#| "\n" +#| " Request a certificate for an IPA service:\n" +#| " ipa cert-request --principal=HTTP/web.example.com example.csr\n" msgid "" "\n" "Services\n" @@ -5349,6 +6592,13 @@ msgid "" "\n" " Request a certificate for an IPA service:\n" " ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" msgstr "" "\n" "Services\n" @@ -5410,45 +6660,2152 @@ msgstr "" " Demander un certificat pour un service IPA :\n" " ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgid "Principal" +msgstr "Principal" + +msgid "Service principal" +msgstr "Principal du service" + +msgid "PAC type" +msgstr "type de PAC" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" +"Surcharger la liste par défaut des types PAC pris en charge. Utiliser « NONE " +"» pour désactiver la prise en charge PAC pour ce service, ce qui peut être " +"nécessaire pour les services NFS par exemple." + +msgid "Add a new IPA new service." +msgstr "Ajouter un nouveau service IPA." + +msgid "force principal name even if not in DNS" +msgstr "forcer le nom du principal même si absent du DNS" + +msgid "Add hosts that can manage this service." +msgstr "Ajouter des hôtes pouvant administrer ce service." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" +"Autoriser utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de clés " +"de ce service." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Autoriser les utilisateurs, groupes, hôtes ou groupes d'hôtes à récupérer un " +"tableau de clés pour ce service." + +msgid "Delete an IPA service." +msgstr "Supprimer un service IPA." + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Désactiver la clé Kerberos et le certificat SSL d'un service." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " +"clés de ce service." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de récupérer un tableau " +"de clés de ce service." + +msgid "Search for IPA services." +msgstr "Rechercher des services IPA." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« name »)" + +#, fuzzy +#| msgid "Search for netgroups with these member hosts." +msgid "Search for services with these managed by hosts." +msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." + +#, fuzzy +#| msgid "Search for netgroups without these member hosts." +msgid "Search for services without these managed by hosts." +msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." + +msgid "Modify an existing IPA service." +msgstr "Modifier un service IPA." + +msgid "Remove hosts that can manage this service." +msgstr "Supprimer des hôtes pouvant administrer ce service." + +msgid "Display information about an IPA service." +msgstr "Afficher les informations sur un service IPA." + msgid "" "\n" -"Set a user's password\n" +"Session Support for IPA\n" +"John Dennis \n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"Goals\n" +"=====\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" "\n" "EXAMPLES:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" msgstr "" "\n" -"Définir le mot de passe d'un utilisateur\n" +"Commandes sudo\n" "\n" -"Si une personne autre que l'utilisateur change le mot de passe de cet\n" -"utilisateur (par exemple en cas de réinitialisation par les services\n" -"d'assistance technique), le mot de passe devra être modifié la première\n" -"fois qu'il sera utilisé, afin que l'utilisateur soit le seul à connaître\n" -"son mot de passe.\n" -"\n" -"La politique de mot de passe de IPA contrôle la fréquence de changement\n" -"des mots de passe, les prérequis de leur résistance, et la taille\n" -"de l'historique des mots de passe.\n" +"Commandes utilisées en tant que briques de base pour sudo\n" "\n" "EXEMPLES :\n" "\n" -" Réinitialiser son propre mot de passe :\n" -" ipa passwd\n" +" Ajouter une nouvelle commande\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" "\n" -" Modifier le mot de passe d'un utilisateur :\n" -" ipa passwd tuser1\n" +" Supprimer une commande\n" +" ipa sudocmd-del /usr/bin/less\n" + +msgid "Sudo Command" +msgstr "Commande sudo" + +msgid "A description of this command" +msgstr "Description de la commande" + +msgid "Sudo Command Groups" +msgstr "Groupes de commandes sudo" + +msgid "Create new Sudo Command." +msgstr "Créer une nouvelle commande sudo." + +msgid "Delete Sudo Command." +msgstr "Supprimer une commande sudo." + +msgid "Search for Sudo Commands." +msgstr "Rechercher des commandes sudo." + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« command »)" + +msgid "Modify Sudo Command." +msgstr "Modifier une commande sudo." + +msgid "Display Sudo Command." +msgstr "Afficher une commande sudo." + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" +"\n" +"Groupes de commandes sudo\n" +"\n" +"Administre les groupes de commandes sudo.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe de commandes sudo :\n" +" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" +"\n" +" Supprimer un groupe de commandes sudo :\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Afficher un groupe de commandes sudo :\n" +" ipa group-show localadmins\n" + +msgid "Sudo Command Group" +msgstr "Groupe de commandes sudo" + +msgid "Group description" +msgstr "Description du groupe" + +msgid "Commands" +msgstr "Commandes" + +msgid "Member Sudo commands" +msgstr "Membres de commandes sudo" + +msgid "Create new Sudo Command Group." +msgstr "Créer un nouveau groupe de commandes sudo." + +msgid "Add members to Sudo Command Group." +msgstr "Ajouter des membres à un groupe de commandes sudo." + +msgid "member sudo command" +msgstr "commande membre de règle sudo" + +msgid "sudo commands to add" +msgstr "commandes sudo à ajouter" + +msgid "Delete Sudo Command Group." +msgstr "Supprimer un groupe de commandes sudo." + +msgid "Search for Sudo Command Groups." +msgstr "Rechercher des groupes de commandes sudo." + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« sudocmdgroup-name »)" + +msgid "Modify Sudo Command Group." +msgstr "Modifier un groupe de commandes sudo." + +msgid "Remove members from Sudo Command Group." +msgstr "Supprimer des membres d'un groupe de commandes sudo." + +msgid "sudo commands to remove" +msgstr "commandes sudo à supprimer" + +msgid "Display Sudo Command Group." +msgstr "Afficher un groupe de commandes sudo." + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" +"\n" +"Utilisateurs\n" +"\n" +"Gestion des utilisateurs. Tous les utilisateurs sont de type POSIX.\n" +"\n" +"IPA prend en charge un grand nombre de formats de noms d'utilisateurs.\n" +"Certaines restrictions peuvent cependant s'appliquer dans un environnement\n" +"particulier. Par exemple, les noms d'utilisateurs commençant par un chiffre\n" +"ou ceux dépassant une certaine longueur peuvent poser problème à certains\n" +"systèmes UNIX.\n" +"Utiliser la commande « ipa config-mod » afin de modifier le format de nom\n" +"d'utilisateur autorisé par les outils IPA.\n" +"\n" +"La désactivation d'un compte utilisateur lui interdit d'obtenir de\n" +"nouveaux justificatifs d'identité Kerberos. Elle n'invalide pas les\n" +"justificatifs déjà obtenus.\n" +"\n" +"L'administration des mots de passe ne fait pas partie de ce module. Pour\n" +"plus d'informations sur ce sujet, cf. : « ipa help passwd »\n" +"\n" +"Le verrouillage de compte en cas d'échec de mot de passe est déclenché par\n" +"le maître IPA de l'utilisateur. La commande « user-status » permet de\n" +"l'identifier. C'est sur ​​ce maître que l'administrateur doit déverrouiller\n" +"l'utilisateur.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouvel utilisateur :\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Trouver tous les utilisateurs dont l'entrée contient la chaîne « Tim » :\n" +" ipa user-find Tim\n" +"\n" +" Trouver tous les utilisateurs ayant « Tim » comme prénom :\n" +" ipa user-find --first=Tim\n" +"\n" +" Désactiver un compte utilisateur :\n" +" ipa user-disable tuser1\n" +"\n" +" Activer un compte utilisateur :\n" +" ipa user-enable tuser1\n" +"\n" +" Supprimer un utilisateur :\n" +" ipa user-del tuser1\n" +"\n" + +msgid "First name" +msgstr "Prénom" + +msgid "Last name" +msgstr "Nom" + +msgid "Full name" +msgstr "Nom complet" + +msgid "Display name" +msgstr "Nom affiché" + +msgid "Initials" +msgstr "Initiales" + +msgid "Kerberos principal" +msgstr "Principal Kerberos" + +msgid "Kerberos principal expiration" +msgstr "Expiration du principal Kerberos" + +msgid "Email address" +msgstr "Adresse courriel" + +msgid "Prompt to set the user password" +msgstr "Invite de définition du mot de passe utilisateur" + +msgid "Generate a random user password" +msgstr "Créer un mot de passe aléatoire" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Numéro identifiant d'utilisateur (le système en assigne un si non défini)" + +msgid "Street address" +msgstr "Adresse" + +msgid "City" +msgstr "Ville" + +msgid "State/Province" +msgstr "État/Province" + +msgid "ZIP" +msgstr "Code postal" + +msgid "Telephone Number" +msgstr "Numéro de téléphone" + +msgid "Mobile Telephone Number" +msgstr "Numéro de téléphone mobile" + +msgid "Pager Number" +msgstr "Numéro de téléavertisseur" + +msgid "Fax Number" +msgstr "Numéro de fax" + +msgid "Org. Unit" +msgstr "Unité organisationnelle" + +msgid "Job Title" +msgstr "Titre de poste" + +msgid "Manager" +msgstr "Gestionnaire" + +msgid "Car License" +msgstr "Permis de conduire/carte d'identité" + +msgid "Account disabled" +msgstr "Compte désactivé" + +msgid "User authentication types" +msgstr "Types d'authentification utilisateur" + +msgid "Types of supported user authentication" +msgstr "Types d'authentification utilisateur pris en charge" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Catégorie d'utilisateurs (la sémantique associée à cet attribut est " +"interprétée localement)" + +msgid "RADIUS proxy configuration" +msgstr "Configuration du serveur mandataire RADIUS" + +msgid "RADIUS proxy username" +msgstr "Nom d'utilisateur sur serveur mandataire RADIUS" + +msgid "Department Number" +msgstr "Numéro du service" + +msgid "Employee Number" +msgstr "Matricule" + +msgid "Employee Type" +msgstr "Type d'employé" + +msgid "Preferred Language" +msgstr "Langue préférée" + +msgid "Member of groups" +msgstr "Membre des groupes" + +#, fuzzy +#| msgid "Indirect Member groups" +msgid "Indirect Member of group" +msgstr "Groupes membres indirects" + +msgid "Kerberos keys available" +msgstr "Clés Kerberos disponibles" + +msgid "Add a new user." +msgstr "Ajouter un nouvel utilisateur." + +msgid "Don't create user private group" +msgstr "Ne pas créer de groupe privé" + +msgid "Delete a user." +msgstr "Supprimer un utilisateur." + +msgid "Disable a user account." +msgstr "Désactiver un compte utilisateur." + +msgid "Enable a user account." +msgstr "Activer un compte utilisateur." + +msgid "Search for users." +msgstr "Rechercher des utilisateurs." + +msgid "Self" +msgstr "Moi-même" + +msgid "Display user record for current Kerberos principal" +msgstr "" +"Afficher l'enregistrement utilisateur pour le principal Kerberos en cours" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"location\")" +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« location »)" + +#, fuzzy +#| msgid "Search for netgroups with these member of netgroups." +msgid "Search for users with these member of groups." +msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups without these member of netgroups." +msgid "Search for users without these member of groups." +msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups with these member of netgroups." +msgid "Search for users with these member of netgroups." +msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups without these member of netgroups." +msgid "Search for users without these member of netgroups." +msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for hosts without these member of roles." +msgid "Search for users with these member of roles." +msgstr "Rechercher des hôtes sans ces membres de rôles." + +#, fuzzy +#| msgid "Search for hosts without these member of roles." +msgid "Search for users without these member of roles." +msgstr "Rechercher des hôtes sans ces membres de rôles." + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for users with these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for users without these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for users with these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for users without these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +msgid "Modify a user." +msgstr "Modifier un utilisateur." + +#, fuzzy +#| msgid "Rename the group object" +msgid "Rename the user object" +msgstr "Renommer l'objet groupe" + +msgid "Display information about a user." +msgstr "Afficher l'information sur un utilisateur." + +#, fuzzy +#| msgid "" +#| "\n" +#| " Lockout status of a user account\n" +#| "\n" +#| " An account may become locked if the password is entered incorrectly " +#| "too\n" +#| " many times within a specific time period as controlled by password\n" +#| " policy. A locked account is a temporary condition and may be unlocked " +#| "by\n" +#| " an administrator.\n" +#| "\n" +#| " This connects to each IPA master and displays the lockout status on\n" +#| " each one.\n" +#| "\n" +#| " To determine whether an account is locked on a given server you need\n" +#| " to compare the number of failed logins and the time of the last " +#| "failure.\n" +#| " For an account to be locked it must exceed the maxfail failures " +#| "within\n" +#| " the failinterval duration as specified in the password policy " +#| "associated\n" +#| " with the user.\n" +#| "\n" +#| " The failed login counter is modified only when a user attempts a log " +#| "in\n" +#| " so it is possible that an account may appear locked but the last " +#| "failed\n" +#| " login attempt is older than the lockouttime of the password policy. " +#| "This\n" +#| " means that the user may attempt a login again. " +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" +"\n" +" État verrouillé d'un compte utilisateur\n" +"\n" +" Un compte peut être verrouillé si un mot de passe incorrect est entre à\n" +" plusieurs reprises dans un laps de temps donnée selon la politique de\n" +" contrôle des mots de passe. Le verrouillage du compte est un état\n" +" temporaire ; le compte peut être déverrouillé par un administrateur.\n" +"\n" +" Ce dernier se connecte sur l'IPA maître et affiche l'état du\n" +" verrouillage de chacun.\n" +"\n" +" Pour savoir si un compte est verrouillé sur un serveur donné, vous " +"devez\n" +" comparer le nombre d'échecs de connexion et l'heure du dernier échec.\n" +" Pour qu'un compte soit verrouillé, le nombre d'échecs doit dépasser le\n" +" maximum autorisé dans l'intervalle de temps donné tel que défini dans " +"la\n" +" politique de mot de passe propre à l'utilisateur.\n" +"\n" +" Le compteur d'échecs de connexion n'est incrémenté que lorsqu'un\n" +" utilisateur tente une connexion, il est donc possible qu'un compte\n" +" paraisse bloqué mais que la dernière tentative de connexion soit\n" +" antérieure à la durée de verrouillage de la règle. Cela\n" +" signifie que l'utilisateur peut tenter de se connecter à nouveau." + +#, fuzzy +#| msgid "" +#| "\n" +#| " Unlock a user account\n" +#| "\n" +#| " An account may become locked if the password is entered incorrectly " +#| "too\n" +#| " many times within a specific time period as controlled by password\n" +#| " policy. A locked account is a temporary condition and may be unlocked " +#| "by\n" +#| " an administrator." +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" +"\n" +" Déverrouiller un compte utilisateur\n" +"\n" +" Un compte utilisateur peut se verrouiller si le mot de passe n'est pas\n" +" saisi correctement plusieurs fois de suite dans un laps de temps donné\n" +" défini par la politique du mot de passe. Le verrouillage d'un compte " +"est\n" +" un état temporaire ; il peut être déverrouillé par un administrateur." + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "Une description de cette règle d'auto-adhésion" + +msgid "Default (fallback) Group" +msgstr "Groupe par défaut (repli)" + +msgid "Default group for entries to land" +msgstr "Groupe par défaut pour les nouvelles entrées" + +msgid "Add an automember rule." +msgstr "Ajouter une règle d'auto-adhésion." + +msgid "Automember Rule" +msgstr "Règle d'auto-adhésion" + +msgid "Grouping Type" +msgstr "Type de groupe" + +msgid "Grouping to which the rule applies" +msgstr "Type de groupe auquel la règle s'applique" + +msgid "Add conditions to an automember rule." +msgstr "Ajouter une condition à une règle d'auto-adhésion." + +msgid "Inclusive Regex" +msgstr "« Regex » d'inclusion" + +msgid "Exclusive Regex" +msgstr "« Regex » d'exclusion" + +msgid "Attribute Key" +msgstr "Clé d'attribut" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Attribut à filtrer via « regex ». Ex. FQDN pour un hôte, ou « manager » pour " +"un utilisateur" + +msgid "Conditions that could not be added" +msgstr "Conditions n'ayant pu être ajoutées" + +msgid "Number of conditions added" +msgstr "Nombre de conditions ajoutées" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" +"Supprimer le groupe par défaut (repli) pour toute entrée sans correspondance." + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" +"Définir un groupe par défaut (repli) pour toutes les entrées sans " +"correspondance." + +msgid "Default (fallback) group for entries to land" +msgstr "Groupe par défaut (repli) pour ranger des entrées" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" +"Afficher des informations pour les groupes d'auto-adhésion par défaut " +"(repli).\n" +" " + +msgid "Delete an automember rule." +msgstr "Supprimer une règle d'auto-adhésion." + +msgid "Search for automember rules." +msgstr "Rechercher des règles d'auto-adhésion." + +msgid "Modify an automember rule." +msgstr "" +"Modifier une règle d'auto-adhésion.\n" +" " + +msgid "Rebuild auto membership." +msgstr "Reconstruire les appartenances automatiques." + +msgid "Rebuild membership for all members of a grouping" +msgstr "Reconstruire l'appartenance pour tous les membres d'un groupe" + +msgid "Rebuild membership for specified users" +msgstr "Reconstruire l'appartenance pour les utilisateurs indiqués " + +msgid "Rebuild membership for specified hosts" +msgstr "Reconstruire l'appartenance pour les hôtes indiqués" + +msgid "No wait" +msgstr "Pas d'attente" + +msgid "Don't wait for rebuilding membership" +msgstr "Ne pas attendre pour reconstruire l'appartenance" + +msgid "Remove conditions from an automember rule." +msgstr "Supprimer des conditions d'une règle d'auto-adhésion. " + +msgid "Conditions that could not be removed" +msgstr "Conditions n'ayant pu être supprimées" + +msgid "Number of conditions removed" +msgstr "Nombre de conditions supprimées" + +msgid "Display information about an automember rule." +msgstr "Afficher des informations au sujet d'une règle d'auto-adhésion. " + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" +"\n" +"Gestion de certficats IPA\n" +"\n" +"Implémente un jeu de commandes pour gérer les certificats SSL du serveur.\n" +"\n" +"Les demandes de certificats existent sous la forme de\n" +"« Certificate Signing Request (CSR) » au format PEM.\n" +"\n" +"La plaque d'identité CA n'utilise que la valeur CN du CSR et force le reste\n" +"du sujet aux valeurs configurées dans le serveur.\n" +"\n" +"Un certificat est enregistré avec un principal de service et un principal\n" +" de service a besoin d'un hôte.\n" +"\n" +"Donc, pour demander un certificat :\n" +"\n" +"* l'hôte doit exister\n" +"* le service doit exister (utiliser --add pour l'ajouter automatiquement)\n" +"\n" +"RECHERCHE :\n" +"\n" +"Les certificats peuvent être recherchés par sujet, numéro de série,\n" +"motif de révocation, dates de validité et date d'émission.\n" +"\n" +"En recherchant par dates, _from effectue une recherche >= à la date et _to\n" +"une recherche <= à la date. Combinées, elles sont équivalentes à un AND.\n" +"\n" +"La date est traitée comme GMT pour correspondre aux dates de certificats.\n" +"\n" +"La date est au format YYYY-mm-dd.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Demander un nouveau certificat et ajouter le principal :\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrouver un certificat existant :\n" +" ipa cert-show 1032\n" +"\n" +" Révoquer un certificat (voir RFC 5280 pour le détail des raisons) :\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Lever l'état de maintien de révocation d'un certificat :\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Vérifier l'état d'une demande de signature :\n" +" ipa cert-status 10\n" +"\n" +" Rechercher des certificats par nom d'hôte :\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Rechercher les certificats révoqués par motif :\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Rechercher les certificats selon la date d'émission :\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"Actuellement IPA émet (ou refuse) aussitôt toute demande de certificat, " +"donc\n" +"l'état d'une requête ne sert normalement pas. C'est en vue d'une " +"utilisation\n" +"future ou au cas où un CA n'émettrait pas immédiatement un certificat.\n" +"\n" +"Les motifs de révocation suivants sont pris en charge :\n" +"\n" +" * 0 - « unspecified » (non précisé)\n" +" * 1 - « keyCompromise » (clé compromise)\n" +" * 2 - « cACompromise » (CA compromis)\n" +" * 3 - « affiliationChanged » (affiliation modifiée)\n" +" * 4 - « superseded » (remplacé)\n" +" * 5 - « cessationOfOperation » (arrêt d'opération)\n" +" * 6 - « certificateHold » (certificat retenu)\n" +" * 8 - « removeFromCRL » (sorti du CRL)\n" +" * 9 - « privilegeWithdrawn » (retrait de privilège)\n" +" * 10 - « aACompromise » (compromission)\n" +"\n" +"Notez que le motif code 7 ne sert pas. Voir RFC 5280 pour plus de détails :\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" +"Vérifier si l'un des serveurs a activé le service autorité de certification." + +msgid "Search for existing certificates." +msgstr "Recherche de certificats existants." + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "Match cn attribute in subject" +msgstr "L'attribut de nom d'utilisateur de l'objet utilisateur" + +msgid "Reason" +msgstr "Raison" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Raison de révocation du certificat (0-10)" + +msgid "minimum serial number" +msgstr "numéro de série plancher" + +msgid "maximum serial number" +msgstr "numéro de série plafond" + +msgid "match the common name exactly" +msgstr "correspond exactement au nom commun" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "Valide à partir de cette date (AAAA-mm-jj)" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "Valide jusqu'à cette date (AAAA-mm-jj)" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "Valide à partir de cette date (AAAA-mm-jj), non valide avant" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "Valide à cette date (AAAA-mm-jj), non valide avant" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "Émis à partir de cette date (AAAA-mm-jj)" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "Émis à cette date (AAAA-mm-jj)" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "Révoqué à partir de cette date (AAAA-mm-jj)" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "Révoqué à cette date (AAAA-mm-jj)" + +msgid "Maximum number of certs returned" +msgstr "Nombre maximum de certificats renvoyés" + +msgid "Take a revoked certificate off hold." +msgstr "Ôter un certificat révoqué en attente." + +msgid "Serial number" +msgstr "Numéro de série" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "Numéro de série en décimal (ou en hexadécimal avec le préfixe 0x)" + +msgid "Submit a certificate signing request." +msgstr "Soumettre une demande de signature de certificat." + +msgid "CSR" +msgstr "CSR" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Principal de service pour ce certificat (par ex.: HTTP/test.example.com)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "ajoute automatiquement le principal s'il n'existe pas" + +msgid "Revoke a certificate." +msgstr "Révoquer un certificat." + +msgid "Retrieve an existing certificate." +msgstr "Récupérer un certificat existant." + +msgid "Output filename" +msgstr "Nom de fichier de sortie" + +msgid "File to store the certificate in." +msgstr "Fichier dans lequel stocker le certificat." + +msgid "Check the status of a certificate signing request." +msgstr "Vérifier l'état d'une demande de signature de certificat." + +msgid "Request id" +msgstr "Identifiant de la demande" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of users\n" +#| "\n" +#| "Manage groups of users. By default, new groups are POSIX groups. You\n" +#| "can add the --nonposix option to the group-add command to mark a new " +#| "group\n" +#| "as non-POSIX. You can use the --posix argument with the group-mod " +#| "command\n" +#| "to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +#| "converted to non-POSIX groups.\n" +#| "\n" +#| "Every group must have a description.\n" +#| "\n" +#| "POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +#| "supported but can have an impact on your file permissions. It is not " +#| "necessary\n" +#| "to supply a GID when creating a group. IPA will generate one " +#| "automatically\n" +#| "if it is not provided.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new group:\n" +#| " ipa group-add --desc='local administrators' localadmins\n" +#| "\n" +#| " Add a new non-POSIX group:\n" +#| " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +#| "\n" +#| " Convert a non-POSIX group to posix:\n" +#| " ipa group-mod --posix remoteadmins\n" +#| "\n" +#| " Add a new POSIX group with a specific Group ID number:\n" +#| " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +#| "\n" +#| " Add a new POSIX group and let IPA assign a Group ID number:\n" +#| " ipa group-add --desc='printer admins' printeradmins\n" +#| "\n" +#| " Remove a group:\n" +#| " ipa group-del unixadmins\n" +#| "\n" +#| " To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +#| " ipa group-add-member --groups=remoteadmins localadmins\n" +#| "\n" +#| " Add multiple users to the \"localadmins\" group:\n" +#| " ipa group-add-member --users=test1 --users=test2 localadmins\n" +#| "\n" +#| " Remove a user from the \"localadmins\" group:\n" +#| " ipa group-remove-member --users=test2 localadmins\n" +#| "\n" +#| " Display information about a named group.\n" +#| " ipa group-show localadmins\n" +#| "\n" +#| "External group membership is designed to allow users from trusted " +#| "domains\n" +#| "to be mapped to local POSIX groups in order to actually use IPA " +#| "resources.\n" +#| "External members should be added to groups that specifically created as\n" +#| "external and non-POSIX. Such group later should be included into one of " +#| "POSIX\n" +#| "groups.\n" +#| "\n" +#| "An external group member is currently a Security Identifier (SID) as " +#| "defined by\n" +#| "the trusted domain. When adding external group members, it is possible " +#| "to\n" +#| "specify them in either SID, or DOM\n" +#| "ame, or name@domain format. IPA will attempt\n" +#| "to resolve passed name to SID with the use of Global Catalog of the " +#| "trusted domain.\n" +#| "\n" +#| "Example:\n" +#| "\n" +#| "1. Create group for the trusted domain admins' mapping and their local " +#| "POSIX group:\n" +#| "\n" +#| " ipa group-add --desc=' admins external map' " +#| "ad_admins_external --external\n" +#| " ipa group-add --desc=' admins' ad_admins\n" +#| "\n" +#| "2. Add security identifier of Domain Admins of the to the " +#| "ad_admins_external\n" +#| " group:\n" +#| "\n" +#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#| "Admins'\n" +#| "\n" +#| "3. Allow members of ad_admins_external group to be associated with " +#| "ad_admins POSIX group:\n" +#| "\n" +#| " ipa group-add-member ad_admins --groups ad_admins_external\n" +#| "\n" +#| "4. List members of external members of ad_admins_external group to see " +#| "their SIDs:\n" +#| "\n" +#| " ipa group-show ad_admins_external\n" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Groupes d'utilisateurs\n" +"\n" +"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " +"POSIX.\n" +"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" +"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" +"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" +"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" +"POSIX.\n" +"\n" +"Chaque groupe doit avoir une description.\n" +"\n" +"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" +"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" +"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " +"groupe.\n" +"IPA en générera un automatiquement s'il n'est pas fourni.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe :\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Ajouter un nouveau groupe non-POSIX :\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convertir un groupe non-POSIX en groupe POSIX :\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " +"groupe :\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Supprimer un groupe :\n" +" ipa group-del unixadmins\n" +"\n" +" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Supprimer un utilisateur du groupe « localadmins » :\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Afficher des informations à propos d'un groupe donné :\n" +" ipa group-show localadmins\n" +"\n" +"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " +"de\n" +"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" +"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" +"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " +"tel\n" +"groupe peut plus tard être incorporé dans un des groupes POSIX\n" +"\n" +"Un membre de groupe externe est actuellement identifié par un « Security\n" +"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" +"un membre de groupe externe, il est possible de le définir, soit au format\n" +"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " +"passé\n" +"en SID en se servant du « Global Catalog » des domaines approuvés.\n" +"\n" +"Exemple:\n" +"\n" +"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" +" et à leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" +" groupe externe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à être associés " +"au\n" +" groupe POSIX « ad_admins » :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" +" leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "GID (use this option to set it manually)" +msgstr "GID (utiliser cette option pour le définir manuellement)" + +msgid "Indirect Member users" +msgstr "Utilisateurs membres indirects" + +msgid "Indirect Member groups" +msgstr "Groupes membres indirects" + +msgid "Create a new group." +msgstr "Créer un nouveau groupe." + +msgid "Create as a non-POSIX group" +msgstr "Créer en tant que groupe non-POSIX" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" +"Autoriser l'ajout de membres externes non-IPA depuis des domaines approuvés" + +msgid "Add members to a group." +msgstr "Ajouter des membres à un groupe." + +msgid "External member" +msgstr "Membre externe" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "Membres d'un domaine approuvé sous la forme DOM\\nom ou nom@domaine" + +msgid "Delete group." +msgstr "Supprimer un groupe." + +msgid "Detach a managed group from a user." +msgstr "Détacher un groupe administré d'un utilisateur." + +msgid "Search for groups." +msgstr "Rechercher des groupes." + +msgid "search for private groups" +msgstr "rechercher des groupes privés" + +msgid "search for POSIX groups" +msgstr "rechercher des groupes POSIX" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" +"rechercher des groupes autorisant la prise en charge des membres externes " +"non-IPA depuis les domaines approuvés" + +msgid "search for non-POSIX groups" +msgstr "rechercher des groupes non-POSIX" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« group-name »)" + +#, fuzzy +#| msgid "Search for netgroups with these member users." +msgid "Search for groups with these member users." +msgstr "Rechercher des groupes réseaux dont les membres sont ces utilisateurs." + +#, fuzzy +#| msgid "Search for netgroups without these member users." +msgid "Search for groups without these member users." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces utilisateurs." + +#, fuzzy +#| msgid "Search for netgroups with these member groups." +msgid "Search for groups with these member groups." +msgstr "Rechercher des groupes réseaux dont les membres sont ces groupes." + +#, fuzzy +#| msgid "Search for netgroups without these member groups." +msgid "Search for groups without these member groups." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes." + +#, fuzzy +#| msgid "Search for netgroups with these member of netgroups." +msgid "Search for groups with these member of groups." +msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups without these member of netgroups." +msgid "Search for groups without these member of groups." +msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups with these member of netgroups." +msgid "Search for groups with these member of netgroups." +msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups without these member of netgroups." +msgid "Search for groups without these member of netgroups." +msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for hosts without these member of roles." +msgid "Search for groups with these member of roles." +msgstr "Rechercher des hôtes sans ces membres de rôles." + +#, fuzzy +#| msgid "Search for hosts without these member of roles." +msgid "Search for groups without these member of roles." +msgstr "Rechercher des hôtes sans ces membres de rôles." + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for groups with these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for groups without these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for groups with these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for groups without these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +msgid "Modify a group." +msgstr "Modifier un groupe." + +msgid "change to a POSIX group" +msgstr "Transformer en groupe POSIX" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" +"modifier afin de permettre une prise en charge des membres externes non-IPA " +"depuis des domaines approuvés" + +msgid "Rename the group object" +msgstr "Renommer l'objet groupe" + +msgid "Remove members from a group." +msgstr "Supprimer des membres d'un groupe." + +msgid "Display information about a named group." +msgstr "Afficher les informations d'un groupe nommé." msgid "" "\n" @@ -5841,6 +9198,10079 @@ msgstr "" " Matched rules: allow_all\n" " Not matched rules: can_login\n" +msgid "Simulate use of Host-based access controls" +msgstr "Simulation de l'utilisation des contrôles d'accès basées sur les hôtes" + +msgid "Target host" +msgstr "Hôte cible" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "Règles à tester. Si non précisé, --enabled est implicite" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "Masquer les détails des règles satisfaites ou pas, ou invalides" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "Inclure toutes les règles IPA actives dans le test [par défaut]" + +msgid "Include all disabled IPA rules into test" +msgstr "Inclure toutes les règles IPA inactives dans le test" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "Nombre maximal de règles à traiter quand « --rules » n'est défini" + +msgid "Warning" +msgstr "Attention" + +msgid "Matched rules" +msgstr "Règles satisfaites" + +msgid "Not matched rules" +msgstr "Règles non satisfaites" + +msgid "Non-existent or invalid rules" +msgstr "Règles inexistantes ou invalides" + +msgid "Result of simulation" +msgstr "Résultat de la simulation" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Relations d'approbation entre domaines\n" +"\n" +"Gestion des relations d'approbation entre les domaines IPA et Active " +"Directory.\n" +"\n" +"Pour permettre aux utilisateurs d'un domaine distant l'accès aux ressources\n" +"d'un domaine IPA, des relations d'approbation doivent être établies.\n" +"Actuellement IPA ne prend en charge que les relations d'approbation entre " +"des\n" +"domaines IPA et Active Directory sous le contrôle de Windows Server 2008 ou\n" +"ultérieur, avec le niveau fonctionnel 2008 ou ultérieur.\n" +"\n" +"Veuillez noter que DNS doit être correctement configuré à la fois côté\n" +"domaine IPA et côté Active Directory pour une découverte mutuelle. La\n" +"relation de confiance repose sur la capacité à repérer des ressources\n" +"spéciales dans l'autre domaine via des enregistrements DNS.\n" +"\n" +"Exemples :\n" +"\n" +"1. Établir des relations d'approbation croisées entre royaumes avec Active\n" +"Directory avec les autorisations d'accès d'un administrateur AD :\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. Lister toutes les relations d'approbation existantes :\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Voir les détails d'une relation de confiance donnée :\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Supprimer une relation de confiance existante :\n" +"\n" +" ipa trust-del \n" +"\n" +"Une fois la relation de confiance établie, les utilisateurs distants " +"doivent\n" +"être mis en relation avec des groupes POSIX locaux pour utiliser réellement\n" +"des ressources IPA. La relation doit se faire via l'appartenance à un " +"groupe\n" +"non-POSIX externe, puis ce groupe doit être intégré dans l'un des groupes\n" +"POSIX locaux.\n" +"\n" +"Exemples :\n" +"\n" +"1. Créer un groupe pour la mise en relation avec le domaine approuvé\n" +" « admins » et leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter un identifiant de sécurité de de Domain Admins au\n" +" groupe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à s'associer\n" +" avec le groupe POSIX ad_admins :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe externe « ad_admins_external »\n" +" pour voir leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"CONFIGURATION D'UNE CONFIANCE GLOBALE\n" +"\n" +"Une fois le sous-paquet « IPA AD trust » installé et « ipa-adtrust-" +"install »\n" +"exécuté, une configuration de domaine local (SID, GUID, nom NetBIOS) est\n" +"créée. Ces identifiants sont alors utilisés lors de communications avec un\n" +"domaine approuvé de type particulier.\n" +"\n" +"1. Afficher la configuration de confiance globale pour les types de\n" +" confiance Active Directory :\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modifier la configuration globale de toutes les confiances de type\n" +" Active Directory et définir un groupe principal de recours (le GID du\n" +" groupe principal de recours est utilisé comme GID d'utilisateur " +"principal\n" +" si l'utilisateur s'authentifiant auprès du domaine IPA n'a pas d'autre\n" +" GID principal déjà défini) :\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Revenir au groupe caché par défaut comme groupe de recours principal\n" +" (tout groupe de la classe objet « posixGroup » est autorisé) :\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +msgid "Domain NetBIOS name" +msgstr "Nom de domaine NetBIOS" + +msgid "Domain Security Identifier" +msgstr "Identifiant de sécurité du domaine" + +msgid "SID blacklist incoming" +msgstr "Entrant dans liste noire de SID" + +msgid "SID blacklist outgoing" +msgstr "Sortant de liste noire de SID" + +msgid "Security Identifier" +msgstr "Identifiant de sécurité" + +msgid "NetBIOS name" +msgstr "Nom NetBIOS" + +msgid "Domain GUID" +msgstr "GUID du domaine" + +msgid "Fallback primary group" +msgstr "Groupe principal de repli" + +msgid "Domain name" +msgstr "Nom de domaine" + +msgid "Trusted domain partner" +msgstr "Partenaire de domaine approuvé" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" +"Déterminer si la commande « ipa-adtrust-install » a été exécutée sur ce " +"système" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" +"Déterminer si le greffon de compatibilité de schéma est configuré pour " +"servir les utilisateurs et groupes du domaine" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" +"Déterminer si la commande « ipa-adtrust-install » a été exécutée avec la " +"tâche « sidgen »" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" +"\n" +"Ajout d'une nouvelle relation de confiance.\n" +"\n" +"Cette commande établit une relation de confiance avec un autre domaine\n" +"qui ainsi devient « de confiance ». En conséquence, des utilisateurs du\n" +"domaine approuvé peuvent avoir accès aux ressources de ce domaine.\n" +"\n" +"Actuellement, seules les relations d'approbation avec les domaines\n" +"Active Directory sont prises en charge.\n" +"\n" +"Cette commande peut être lancée plusieurs fois en toute sécurité à\n" +"l'encontre du même domaine, elle modifiera les références de la relation de\n" +"confiance des deux côtés.\n" +" " + +msgid "Trust type (ad for Active Directory, default)" +msgstr "Type de confiance (par défaut, ad pour Active Directory)" + +msgid "Active Directory domain administrator" +msgstr "Administrateur du domaine Active Directory" + +msgid "Active Directory domain administrator's password" +msgstr "Mot de passe de l'administrateur de domaine Active Directory" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "Contrôleur de domaine pour le domaine Active Directory (optionnel)" + +msgid "Shared secret for the trust" +msgstr "Secret partagé pour la confiance" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "Premier ID POSIX de la plage réservée au domaine approuvé" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "Taille de la plage d'ID réservée au domaine approuvé" + +msgid "Range type" +msgstr "Type de plage" + +#, fuzzy +#| msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" +"Type de plage d'identifiants, doit être ipa-ad-trust-posix, ipa-ad-trust ou " +"ipa-local" + +msgid "Delete a trust." +msgstr "Supprimer la confiance." + +msgid "Refresh list of the domains associated with the trust" +msgstr "Rafraîchir la liste des domaines associés à la relation de confiance" + +msgid "Search for trusts." +msgstr "Rechercher des confiances." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« name »)" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Modify a trust (for future use).\n" +#| "\n" +#| " Currently only the default option to modify the LDAP attributes is\n" +#| " available. More specific options will be added in coming releases.\n" +#| " " +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Modifier la confiance (pour utilisation future).\n" +"\n" +" Actuellement seule l'option par défaut pour modifier les attributs LDAP\n" +" est disponible. D'autres options particulières seront ajoutées\n" +" dans les versions à venir.\n" +" " + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" +"Résoudre les identifiants de sécurité des groupes et utilisateurs dans des " +"domaines approuvés" + +msgid "Security Identifiers (SIDs)" +msgstr "Identifiants de sécurité (SID)" + +msgid "Display information about a trust." +msgstr "Afficher des informations sur une relation de confiance." + +msgid "Modify global trust configuration." +msgstr "Modifier la configuration globale des relations d'approbation." + +msgid "Show global trust configuration." +msgstr "Afficher la configuration globale des relations d'approbation." + +msgid "Allow access from the trusted domain" +msgstr "Autoriser l'accès depuis le domaine approuvé" + +#, fuzzy +#| msgid "Refresh list of the domains associated with the trust" +msgid "Remove information about the domain associated with the trust." +msgstr "Rafraîchir la liste des domaines associés à la relation de confiance" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "Interdire l'utilisation de ressources IPA par le domaine approuvé" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "Autoriser l'utilisation des ressources IPA par le domaine approuvé" + +msgid "Search domains of the trust" +msgstr "Recherches dans les domaines approuvés" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"command\")" +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« command »)" + +msgid "Modify trustdomain of the trust" +msgstr "Modifier le domaine approuvé de la confiance" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "Nom de la plage" + +msgid "First Posix ID of the range" +msgstr "Premier ID POSIX de la plage" + +msgid "Number of IDs in the range" +msgstr "Nombre d'IDs dans la plage" + +msgid "First RID of the corresponding RID range" +msgstr "Premier RID dans la plage de RID correspondante" + +msgid "First RID of the secondary RID range" +msgstr "Premier RID dans la plage de RID secondaire" + +msgid "Domain SID of the trusted domain" +msgstr "SID du domaine approuvé" + +msgid "Name of the trusted domain" +msgstr "Nom du domaine approuvé" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" +"Type de plage d'identifiants, doit être ipa-ad-trust-posix, ipa-ad-trust ou " +"ipa-local" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +"Ajouter une nouvelle plage d'identifiants.\n" +"\n" +" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " +"préciser\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" En outre,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " +"que\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " +"confiance.\n" +"\n" +" AVERTISSEMENT :\n" +"\n" +" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" +" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" +" lui-même reconfiguré selon les plages locales définies par " +"l'intermédiaire\n" +" de cette famille de commandes.\n" +"\n" +" Un changement manuel de configuration doit être opéré dans la " +"configuration\n" +" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" +" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " +"Assignment Plugin », « cn=plugins », « cn=config »\n" +" doivent être modifiés pour correspondre à cette nouvelle plage.\n" +" " + +msgid "Delete an ID range." +msgstr "Supprimer une plage d'ID.." + +msgid "Search for ranges." +msgstr "Rechercher des plages." + +msgid "Modify ID range." +msgstr "Modifier une plage." + +msgid "Display information about a range." +msgstr "Afficher les informations sur une plage." + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +"Jetons OTP\n" +"\n" +"Configuration des jetons OTP.\n" +"\n" +"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" +"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau jeton :\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examiner un jeton :\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Modifier le fournisseur :\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Supprimer un jeton :\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "Unique ID" +msgstr "ID unique" + +msgid "Type of the token" +msgstr "Type du jeton" + +msgid "Token description (informational only)" +msgstr "Description du jeton (à titre d'information)" + +msgid "Owner" +msgstr "Propriétaire" + +msgid "Assigned user of the token (default: self)" +msgstr "Utilisateur assigné au jeton (par défaut : soi-même)" + +msgid "Assigned manager of the token (default: self)" +msgstr "Administrateur assigné au jeton (par défaut : soi-même)" + +msgid "Disabled" +msgstr "Désactivé" + +msgid "Mark the token as disabled (default: false)" +msgstr "Marquer le jeton comme désactivé (par défaut : faux, false)" + +msgid "Validity start" +msgstr "Départ de validation" + +msgid "First date/time the token can be used" +msgstr "Date et heure à partir desquels le jeton peut être utilisé" + +msgid "Validity end" +msgstr "Fin de validation" + +msgid "Last date/time the token can be used" +msgstr "Date et heure au delà desquels le jeton ne peut plus être utilisé" + +msgid "Vendor" +msgstr "Fournisseur" + +msgid "Token vendor name (informational only)" +msgstr "Nom du fabricant du jeton (à titre d'information)" + +msgid "Model" +msgstr "Modèle" + +msgid "Token model (informational only)" +msgstr "Modèle du jeton (à titre d'information)" + +msgid "Serial" +msgstr "Numéro de série" + +msgid "Token serial (informational only)" +msgstr "Numéro de série du jeton (à titre d'information)" + +msgid "Token secret (Base32; default: random)" +msgstr "Secret du jeton (Base32 ; par défaut : aléatoire)" + +msgid "Token hash algorithm" +msgstr "Algorithme de hachage du jeton" + +msgid "Digits" +msgstr "Chiffres" + +msgid "Number of digits each token code will have" +msgstr "Nombre de chiffres des codes du jeton" + +msgid "Clock offset" +msgstr "Décalage d'horloge" + +msgid "TOTP token / IPA server time difference" +msgstr "Différence entre le jeton TOTP et le serveur IPA" + +msgid "Clock interval" +msgstr "Intervalle d'horloge" + +msgid "Length of TOTP token code validity" +msgstr "Durée de validité du code du jeton TOTP" + +msgid "Counter" +msgstr "Compteur" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "Ajouter un nouveau jeton OTP" + +msgid "(deprecated)" +msgstr "(obsolète)" + +msgid "Do not display QR code" +msgstr "Ne pas afficher le code QR" + +msgid "Add users that can manage this token." +msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." + +msgid "Delete an OTP token." +msgstr "Supprimer un jeton OTP" + +msgid "Search for OTP token." +msgstr "Rechercher un jeton OTP" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« id »)" + +msgid "Modify a OTP token." +msgstr "Modifier un jeton OTP" + +msgid "Rename the OTP token object" +msgstr "Renommer l'objet jeton OTP" + +msgid "Display information about an OTP token." +msgstr "Afficher des informations au sujet du jeton OTP" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "Catégorie de commande" + +msgid "Command category the rule applies to" +msgstr "Catégorie de commande à laquelle la règle s'applique" + +msgid "RunAs User category" +msgstr "Catégorie « RunAs User »" + +msgid "RunAs User category the rule applies to" +msgstr "Catégorie « RunAs User » à laquelle la règle s'applique" + +msgid "RunAs Group category" +msgstr "Catégorie « RunAs Group »" + +msgid "RunAs Group category the rule applies to" +msgstr "Catégorie « RunAs Group » à laquelle la règle s'applique" + +msgid "Sudo order" +msgstr "Ordre sudo" + +msgid "integer to order the Sudo rules" +msgstr "entier pour ordonner les règles sudo" + +msgid "External User" +msgstr "Utilisateur externe" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" +"Utilisateur externe auquel la règle s'applique (« sudorule-find » uniquement)" + +msgid "Host Masks" +msgstr "Masques d'hôtes" + +msgid "Sudo Allow Commands" +msgstr "Commandes « sudo allow »" + +msgid "Sudo Deny Commands" +msgstr "Commande « sudo deny »" + +msgid "Sudo Allow Command Groups" +msgstr "Groupes de commandes « sudo allow »" + +msgid "Sudo Deny Command Groups" +msgstr "Groupes de commandes « sudo deny »" + +msgid "RunAs Users" +msgstr "« RunAs Users »" + +msgid "Run as a user" +msgstr "Lancer en tant qu'un utilisateur donné" + +msgid "Groups of RunAs Users" +msgstr "Groupe de « RunAs Users »" + +msgid "Run as any user within a specified group" +msgstr "Lancer en tant que n'importe quel utilisateur du groupe indiqué" + +msgid "RunAs External User" +msgstr "Utilisateur « RunAs External »" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" +"Utilisateur externe comme tel les commandes peuvent être lancées (« sudorule-" +"find » uniquement)" + +msgid "External Groups of RunAs Users" +msgstr "Groupes externes de « RunAs Users »" + +msgid "External Groups of users that the command can run as" +msgstr "" +"Groupes externes d'utilisateurs comme tel la commande peut être exécutée" + +msgid "RunAs Groups" +msgstr "« RunAs Groups»" + +msgid "Run with the gid of a specified POSIX group" +msgstr "Lancer avec le GID d'un groupe POSIX donné" + +msgid "RunAs External Group" +msgstr "Groupe « RunAs External »" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" +"Groupe externe en tant que tel les commandes sont lancées (« sudorule-find » " +"uniquement)" + +msgid "Sudo Option" +msgstr "Option sudo" + +msgid "Create new Sudo Rule." +msgstr "Créer une nouvelle règle sudo." + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" +"Ajouter des commandes et groupes de commandes sudo affectés par la règle " +"sudo." + +#, fuzzy +#| msgid "member sudo command" +msgid "member sudo command group" +msgstr "commande membre de règle sudo" + +#, fuzzy +#| msgid "sudo commands to add" +msgid "sudo command groups to add" +msgstr "commandes sudo à ajouter" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Ajouter des hôtes et groupes d'hôtes affectés par la règle sudo." + +msgid "host masks of allowed hosts" +msgstr "masques d'hôtes des hôtes autorisés" + +msgid "Add an option to the Sudo Rule." +msgstr "Ajouter une option à la règle sudo." + +msgid "Add group for Sudo to execute as." +msgstr "Ajouter un groupe dans sudo pour exécution comme." + +msgid "Add users and groups for Sudo to execute as." +msgstr "Ajouter des utilisateurs et groupes dans sudo pour exécution comme." + +msgid "Add users and groups affected by Sudo Rule." +msgstr "Ajouter des utilisateurs et groupes affectés par la règle sudo." + +msgid "Delete Sudo Rule." +msgstr "Règle sudo supprimée." + +msgid "Disable a Sudo Rule." +msgstr "Désactiver une règle sudo." + +msgid "Enable a Sudo Rule." +msgstr "Activer une règle sudo." + +msgid "Search for Sudo Rule." +msgstr "Rechercher une règle sudo." + +#, fuzzy +#| msgid "" +#| "Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« sudocmdgroup-name »)" + +msgid "Modify Sudo Rule." +msgstr "Modifier une règle sudo." + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" +"Retirer des commandes et groupes de commandes sudo affectés par la règle " +"sudo." + +#, fuzzy +#| msgid "sudo commands to remove" +msgid "sudo command groups to remove" +msgstr "commandes sudo à supprimer" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Retirer des hôtes et groupes d'hôtes affectés par la règle sudo." + +msgid "Remove an option from Sudo Rule." +msgstr "Retirer une option d'une règle sudo." + +msgid "Remove group for Sudo to execute as." +msgstr "Retirer un groupe de sudo pour exécution comme." + +msgid "Remove users and groups for Sudo to execute as." +msgstr "Retirer des utilisateurs et groupes dans sudo pour exécution comme." + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Retirer des utilisateurs et groupes affectés par la règle sudo." + +msgid "Display Sudo Rule." +msgstr "Afficher une règle sudo." + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Limite de la durée de la recherche en secondes (0 pour illimité)" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Nombre maximal d'entrées renvoyées (0 pour illimité)" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Gestion des règles de LCA de l'AC.\n" +"\n" +"Ce grffon est utilisé pour définir les règles gouvernant quels principaux \n" +"sont autorisés à se voir attribuer des certificats à l'aide d'un profil\n" +"donné de certificat.\n" +"\n" +"SYNTAXE D'IDENTIFIANT DE PROFIL :\n" +"\n" +"Un identifiant de profil est une chaîne sans espace ni ponctuation débutant " +"par\n" +"une lettre et suivie d'une séquence de lettres, chiffres, ou caractère " +"souligné (\"_\").\n" +"\n" +"EXEMPLES :\n" +"\n" +" Créer une LCA d'AC « test » autorisant tous les utilisateurs à accéder \n" +" au profil « UserCert » :\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Afficher les propriétés d'une LCA d'AC nommée :\n" +" ipa caacl-show test\n" +"\n" +" Créer une LCA d'AC autorisant l'utilisatrice « alice » à utiliser le " +"profile « DNP3 » :\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Désactiver une LCA d'AC :\n" +" ipa caacl-disable test\n" +"\n" +" Supprimer une LCA d'AC :\n" +" ipa caacl-del test\n" + +msgid "ACL name" +msgstr "Nom de la LCA" + +msgid "Profile category" +msgstr "Catégorie de profil" + +msgid "Profile category the ACL applies to" +msgstr "Catégorie de profil à laquelle la LCA s'applique" + +msgid "User category the ACL applies to" +msgstr "Catégorie d'utilisateur à laquelle la LCA s'applique" + +msgid "Host category the ACL applies to" +msgstr "Catégorie d'hôte à laquelle la LCA s'applique" + +msgid "Service category the ACL applies to" +msgstr "Catégorie de service à laquelle la LCA s'applique" + +msgid "Profiles" +msgstr "Profils" + +msgid "Create a new CA ACL." +msgstr "Créer une nouvelle LCA d'AC." + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Ajouter des hôtes cibles et groupes d'hôtes à une LCA d'AC." + +msgid "Add profiles to a CA ACL." +msgstr "Ajouter des profils à une LCA d'AC." + +#, fuzzy +#| msgid "Certificate Profile" +msgid "member Certificate Profile" +msgstr "Profil de certificat" + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Profiles to add" +msgstr "Profil de certificat à utiliser" + +msgid "Add services to a CA ACL." +msgstr "Ajouter des services à une LCA d'AC." + +msgid "Add users and groups to a CA ACL." +msgstr "Ajouter des utilisateurs et groupes à une LCA d'AC." + +msgid "Delete a CA ACL." +msgstr "Supprimer une LCA d'AC." + +msgid "Disable a CA ACL." +msgstr "Désactiver une LCA d'AC." + +msgid "Enable a CA ACL." +msgstr "Activer une LCA d'AC." + +msgid "Search for CA ACLs." +msgstr "Rechercher des LCA d'AC." + +msgid "Modify a CA ACL." +msgstr "Modifier une LCA d'AC." + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." + +msgid "Remove profiles from a CA ACL." +msgstr "Retirer des profils d'une LCA d'AC." + +#, fuzzy +#| msgid "Certificate Profile to use" +msgid "Certificate Profiles to remove" +msgstr "Profil de certificat à utiliser" + +msgid "Remove services from a CA ACL." +msgstr "Retirer des services d'une LCA d'AC." + +msgid "Remove users and groups from a CA ACL." +msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." + +msgid "Display the properties of a CA ACL." +msgstr "Afficher les propriétés d'une LCA d'AC." + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "Durée maximale (secondes) pour une recherche (0 ou -1 pour illimitée)" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "Nombre maximum d'entrées à rechercher (-1 ou 0 pour illimité)" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" +"\n" +"Relever le niveau du domaine IPA.\n" + +msgid "Query current Domain Level." +msgstr "Interroger le niveau actuel du domaine." + +msgid "Current domain level:" +msgstr "Niveau actuel du domaine :" + +msgid "Change current Domain Level." +msgstr "Modifier le niveau actuel du domaine." + +msgid "Domain Level" +msgstr "Niveau du domaine" + +msgid "Add certificates to host entry" +msgstr "Ajouter les certificats à l'entrée de l'hôte" + +msgid "Remove certificates from host entry" +msgstr "Supprimer les certificats de l'entrée de l'hôte" + +msgid "Fallback to AD DC LDAP" +msgstr "Repli sur l'annuaire LDAP du contrôleur de domaine AD" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" +"Autorise l'utilisation en repli de l'annuaire LDAP du contrôleur de domaine " +"AD. Pour les relations d'approbation bidirectionnelles uniquement." + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" +"Applique une vue d'identifiants aux hôtes ou aux membres des groupes d'hôtes " +"indiqués. Si une autre vue d'identifiants était appliquée à l'hôte, elle est " +"remplacée." + +msgid "Add to default group" +msgstr "Ajouter au groupe par défaut" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" +"Ajouter les utilisateurs migrés n'ayant pas de groupe à un groupe par défaut " +"(par défaut : vrai)" + +msgid "Search scope" +msgstr "Étendue de la recherche" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" +"Portée de recherche LDAP pour les utilisateurs et les groupes : base, " +"onelevel, ou subtree. Valeur par défaut : onelevel" + +msgid "Target DN subtree" +msgstr "Sous-arbre des DN cibles" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" +"Sous-arbre optionnel de DN dans lequel une entrée peut être déplacée (doit " +"être dans le sous-arbre, mais peut ne pas encore exister)" + +msgid "Origin DN subtree" +msgstr "Sous-arbre des DN origines" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" +"Sous-arbre optionnel de DN dans lequel une entrée peut être déplacée (doit " +"être dans le sous-arbre, mais peut ne pas encore exister)" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "Nom du serveur" + +msgid "IPA server hostname" +msgstr "Nom d'hôte du serveur IPA" + +msgid "Managed suffix" +msgstr "Suffixe administré" + +msgid "Min domain level" +msgstr "Niveau de domaine mini" + +msgid "Minimum domain level" +msgstr "Niveau de domaine minimal" + +msgid "Max domain level" +msgstr "Niveau de domaine maxi" + +msgid "Maximum domain level" +msgstr "Niveau de domaine maximal" + +msgid "Delete IPA server." +msgstr "Supprimer un serveur IPA." + +msgid "Search for IPA servers." +msgstr "Rechercher des serveurs IPA." + +msgid "Show IPA server." +msgstr "Afficher les informations sur le serveur IPA." + +msgid "Add new certificates to a service" +msgstr "Ajouter un nouveau certificat à un service" + +msgid "Remove certificates from a service" +msgstr "Supprimer les certificats d'un service" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Délégation contrainte de services\n" +"\n" +"Gérez les règles permettant la délégation contrainte d'informations\n" +"d'authentification de façon à ce qu'un service puisse se faire passer\n" +"pour un utilisateur lors de la communication avec un service sans\n" +"que cela ne nécessite de la part de l'utilisateur de transmettre son TGT.\n" +"Cela constitue une méthode bien meilleure de délégation d'identification\n" +"car elle évite l'exposition du secret court terme de l'utilisateur.\n" +"\n" +"La convention de nommage est d'ajouter le mot « target » ou « targets »\n" +"au nom de la règle de correspondance. Ce poitn n'est pas obligatoire mais\n" +"aide à visualiser l'association entre règles et cibles.\n" +"\n" +"Une règle est constituée de deux choses :\n" +" - une liste de cibles auxquelles la règle s'applique,\n" +" - une liste de memberPrincipals qui sont autorisés à leur déléguer\n" +" leurs droits.\n" +"\n" +"Une cible consiste en une liste de principaux qui peuvent être délégués.\n" +"\n" +"En anglais, une règle que ce principal peut déléguer comme cette liste\n" +"de principaux, tels que définis par ces cibles.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une nouvelle règle de délégation contrainte :\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Ajouter une nouvelle cible de délégation contrainte :\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Ajouter un principal à la règle :\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Ajouter notre cible à la règle :\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add un principal à la cible :\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Afficher les informations au sujet d'une règle de délégation et sa cible :\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Supprimer une délégation contrainte :\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"Dans cet exemple, le service ftp peut obtenir un TGT pour le service ldap\n" +"au nom de l'utilisateur associé.\n" +"\n" +"Il est fortement découragé de modifier les délégations livrées avec IPA,\n" +"ipa-http-delegation et ses cibles ipa-cifs-delegation-targets et\n" +"ipa-ldap-delegation-targets. Des modifications erronées peuvent obérer\n" +"la capacité de délégation, en provoquant l'arrêt de fonctionnement du\n" +"moteur.\n" + +msgid "Allowed Target" +msgstr "Cibles autorisées" + +msgid "Create a new service delegation rule." +msgstr "Créer une nouvelle règle de délégation de service" + +msgid "Add member to a named service delegation rule." +msgstr "Ajouter un membre à une règle nommée de délégation de service." + +#, fuzzy +#| msgid "Member principals" +msgid "member principal" +msgstr "Principaux membres de" + +#, fuzzy +#| msgid "principal not found\n" +msgid "principal to add" +msgstr "principal introuvable\n" + +msgid "Add target to a named service delegation rule." +msgstr "Ajouter une cible à une règle nommée de délégation de service." + +#, fuzzy +#| msgid "service delegation target" +msgid "member service delegation target" +msgstr "cible de délégation de service" + +#, fuzzy +#| msgid "service delegation targets" +msgid "service delegation targets to add" +msgstr "cibles de délégation de service" + +msgid "Delete service delegation." +msgstr "Supprimer une règle de délégation de service." + +msgid "Search for service delegations rule." +msgstr "Rechercher des règle de délégation de service." + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"group-name\")" +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« group-name »)" + +msgid "Remove member from a named service delegation rule." +msgstr "Supprimer un membre d'une règle nommée de délégation de service." + +#, fuzzy +#| msgid "roles to remove" +msgid "principal to remove" +msgstr "rôles à supprimer" + +msgid "Remove target from a named service delegation rule." +msgstr "Supprimer une cible d'une règle nommée de délégation de service." + +#, fuzzy +#| msgid "service delegation targets" +msgid "service delegation targets to remove" +msgstr "cibles de délégation de service" + +msgid "Display information about a named service delegation rule." +msgstr "" +"Afficher les informations au sujet d'une règle de délégation de service." + +msgid "Create a new service delegation target." +msgstr "Créer une nouvelle cible de délégation de service" + +msgid "Add member to a named service delegation target." +msgstr "Ajouter un membre à une cible de délégation de service." + +msgid "Delete service delegation target." +msgstr "Supprimer une cible de délégation de service." + +msgid "Search for service delegation target." +msgstr "Rechercher des cibles de délégation de service" + +msgid "Remove member from a named service delegation target." +msgstr "Supprimer un membre d'une cible de délégation de service." + +msgid "Display information about a named service delegation target." +msgstr "Afficher les informations sur une cible de délégation de service." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Stageusers\n" +#| "\n" +#| "Manage stage user entries.\n" +#| "\n" +#| "Stage user entries are directly under the container: \"cn=stage users,\n" +#| "cn=accounts, cn=provisioning, SUFFIX\".\n" +#| "Users can not authenticate with those entries (even if the entries\n" +#| "contain credentials). Those entries are only candidate to become Active " +#| "entries.\n" +#| "\n" +#| "Active user entries are Posix users directly under the container: " +#| "\"cn=accounts, SUFFIX\".\n" +#| "Users can authenticate with Active entries, at the condition they have\n" +#| "credentials.\n" +#| "\n" +#| "Deleted user entries are Posix users directly under the container: " +#| "\"cn=deleted users,\n" +#| "cn=accounts, cn=provisioning, SUFFIX\".\n" +#| "Users can not authenticate with those entries, even if the entries " +#| "contain credentials.\n" +#| "\n" +#| "The stage user container contains entries:\n" +#| " - created by 'stageuser-add' commands that are Posix users,\n" +#| " - created by external provisioning system.\n" +#| "\n" +#| "A valid stage user entry MUST have:\n" +#| " - entry RDN is 'uid',\n" +#| " - ipaUniqueID is 'autogenerate'.\n" +#| "\n" +#| "IPA supports a wide range of username formats, but you need to be aware " +#| "of any\n" +#| "restrictions that may apply to your particular environment. For example,\n" +#| "usernames that start with a digit or usernames that exceed a certain " +#| "length\n" +#| "may cause problems for some UNIX systems.\n" +#| "Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +#| "\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new stageuser:\n" +#| " ipa stageuser-add --first=Tim --last=User --password tuser1\n" +#| "\n" +#| " Add a stageuser from the deleted users container:\n" +#| " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +#| "\n" +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" +"\n" +"Utilisateurs en attente\n" +"\n" +"Gestion des entrées des utilisateurs en attente (« stage users »).\n" +"\n" +"Les entrées des utilisateurs en attente sont situées directement dans le \n" +"conteneur « cn=stage users, cn=accounts, cn=provisioning, SUFFIXE x.\n" +"Les utilisateurs ne peuvent utiliser ces entrées pour s'authentifier (même\n" +"si les entrées contiennent des données d'authentification) et ne sont que\n" +"candidates à devenir des entrées actives.\n" +"\n" +"Les entrées d'utilisateurs actifs sont des utilisateurs Posix situées dans " +"le \n" +"conteneur « cn=accounts, SUFFIXE ». Les utilisateurs peuvent les utiliser " +"pour \n" +"s'authentifier à la condition qu'elles comportent des données " +"d'authentification.\n" +"\n" +"Les entrées d'utilisateurs supprimés sont des entrées d'utilisateurs Posix " +"situées\n" +"dans le conteneur « cn=deleted users, cn=accounts, cn=provisioning, " +"SUFFIXE ».\n" +"Un utilisateur ne peut s'authentifier à l'aide de ces entrées , même si " +"elles contiennent\n" +"des données d'authentification valides.\n" +"\n" +"Le conteneur d'entrées utilisateurs en attente contient des entrées :\n" +" - créées par les commandes « stageuser-add », qui sont des utilisateurs " +"Posix,\n" +" - créées par des systèmes d'approvisionnement externes.\n" +"\n" +"Un utilisateur en attente valide DOIT posséder les propriétés suivantes :\n" +" - le RDN de l'entrée est « uid »\n" +" - l'attribut « ipaUniqueID » est « autogenerate »\n" +"\n" +"IPA prend en charge une grande variété de formats de noms d'utilisateurs, " +"mais\n" +"il est important de savoir que des restrictions peuvent s'appliquer dans un " +"environnement\n" +"particulier. Ainsi, les noms d'utilisateurs débutant par un chiffre ou ceux " +"excédant une \n" +"certaine taille peuvent poser problème sur certains systèmes UNIX.\n" +"Utiliser la commande « ipa config-mod » pour modifier le format autorisé par " +"les outils IPA.\n" +"\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouvel utilisateur en attente :\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Ajouter un utilisateur en attente depuis le conteneur des utilisateurs " +"supprimés :\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" + +msgid "Activate a stage user." +msgstr "Activer un utilisateur en attente." + +msgid "Add a new stage user." +msgstr "Ajouter un nouvel utilisateur en attente." + +msgid "Create Stage user in from a delete user" +msgstr "Créer un utilisateur en attente depuis un utilisateur supprimé" + +msgid "Delete a stage user." +msgstr "Supprimer un utilisateur en attente." + +msgid "Search for stage users." +msgstr "Rechercher des utilisateurs en attente." + +#, fuzzy +#| msgid "Search for netgroups with these member of netgroups." +msgid "Search for stage users with these member of groups." +msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups without these member of netgroups." +msgid "Search for stage users without these member of groups." +msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups with these member of netgroups." +msgid "Search for stage users with these member of netgroups." +msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for netgroups without these member of netgroups." +msgid "Search for stage users without these member of netgroups." +msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." + +#, fuzzy +#| msgid "Search for hosts without these member of roles." +msgid "Search for stage users with these member of roles." +msgstr "Rechercher des hôtes sans ces membres de rôles." + +#, fuzzy +#| msgid "Search for hosts without these member of roles." +msgid "Search for stage users without these member of roles." +msgstr "Rechercher des hôtes sans ces membres de rôles." + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for stage users with these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts with these member of HBAC rules." +msgid "Search for stage users without these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for stage users with these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +#, fuzzy +#| msgid "Search for hosts without these member of sudo rules." +msgid "Search for stage users without these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +msgid "Modify a stage user." +msgstr "Modifier un utilisateur en attente." + +#, fuzzy +#| msgid "Rename the group object" +msgid "Rename the stage user object" +msgstr "Renommer l'objet groupe" + +msgid "Display information about a stage user." +msgstr "Afficher les informations sur un utilisateur en attente." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" +"\n" +"Topologie\n" +"\n" +"Gestion de la topologie de réplication.\n" +"\n" +"Nécessite a minima le niveau 1 de domaine.\n" + +msgid "Segment name" +msgstr "Nom de segment" + +msgid "Arbitrary string identifying the segment" +msgstr "Chaîne arbitraire identifiant le segment" + +msgid "Left node" +msgstr "Nœud de gauche" + +msgid "Left replication node - an IPA server" +msgstr "Nœud de réplication à gauche - un serveur IPA" + +msgid "Right node" +msgstr "Nœud de droite" + +msgid "Right replication node - an IPA server" +msgstr "Nœud de réplication à droite - un serveur IPA" + +msgid "Connectivity" +msgstr "Connectivité" + +msgid "Direction of replication between left and right replication node" +msgstr "" +"Direction de la réplication entre les nœuds gauche et droit de réplication" + +msgid "Attributes to strip" +msgstr "Attributs à supprimer" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" +"Une liste séparée par des espaces d'attributs qui seront supprimés lors des " +"mises à jour de la réplication." + +#, fuzzy +#| msgid "Attributes to strip" +msgid "Attributes to replicate" +msgstr "Attributs à supprimer" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" +"Attributs qui ne seront pas répliqués vers un serveur consommateur lors " +"d'une réplication partielle. Par exemple, `(objectclass=*) $ EXCLUDE " +"accountlockout memberof" + +msgid "Attributes for total update" +msgstr "Attributs pour une mise à jour complète" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" +"Les attributs qui ne sont pas répliqués vers un serveur consommateur pendant " +"une mise à jour complète. Par exemple : (objectclass=*) $ EXCLUDE " +"accountlockout" + +msgid "Session timeout" +msgstr "Délai d'expiration de la session" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" +"Durée en secondes à attendre le bon achèvement des requêtes LDAP sortantes " +"de la part d'un replica distant avant mise en échec" + +msgid "Replication agreement enabled" +msgstr "Agrément de réplication activé" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" +"Activation ou non d'un agrément de réplication, signifiant que la " +"réplication fonctionne par le biais de cet agrément" + +msgid "Suffix name" +msgstr "Nom du suffixe" + +msgid "LDAP suffix to be managed" +msgstr "Suffixe LDAP qui sera géré" + +msgid "Add a new segment." +msgstr "Ajouter un noveau segment." + +msgid "Delete a segment." +msgstr "Supprimer un segment." + +msgid "Search for topology segments." +msgstr "Rechercher des segments de topologie." + +msgid "Modify a segment." +msgstr "Modifier un segment." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" +"Demander une réinitialisation complète du nœud en récupérant les données " +"d'un autre nœud." + +msgid "Initialize left node" +msgstr "Initialiser le nœud de gauche" + +msgid "Initialize right node" +msgstr "Initialiser le nœud de droite" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "Arrêter un rafraichissement en cours du ou des nœuds choisis." + +msgid "Display a segment." +msgstr "Afficher un segment." + +msgid "Add a new topology suffix to be managed." +msgstr "Ajouter un nouveau suffixe de topologie à gérer." + +msgid "Delete a topology suffix." +msgstr "Supprimer un suffixe de topologie." + +msgid "Search for topology suffices." +msgstr "Rechercher des suffixes de topologie." + +msgid "Modify a topology suffix." +msgstr "Modifier un suffixe de topologie." + +msgid "Show managed suffix." +msgstr "Afficher le suffixe géré." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Verify replication topology for suffix.\n" +#| "\n" +#| "Checks done:\n" +#| " 1. check if a topology is not disconnected. In other words if there " +#| "are\n" +#| " replication paths between all servers.\n" +#| " 2. check if servers don't have more than the recommended number of\n" +#| " replication agreements\n" +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" +"\n" +"Vérifier la topologie de réplication pour le suffixe.\n" +"\n" +"Vérifications effectuées :\n" +" 1. vérfier si la topologie n'est pas déconnectée. En d'autres mots, si des " +"chemins\n" +" de réplication existent bien entre tous les serveurs.\n" +" 2. vérifier si tous les serveurs n'ont pas un nombre supérieur à celui " +"recommandé\n" +" d'agrément de réplication.\n" + +msgid "Preserved user" +msgstr "Utilisateurs préservés" + +msgid "Add one or more certificates to the user entry" +msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" + +msgid "Remove one or more certificates to the user entry" +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" + +msgid "Move deleted user into staged area" +msgstr "Déplacer l'utilisateur supprimé dans l'espace en attente" + +msgid "Undelete a delete user account." +msgstr "Restaurer un compte utilisateur supprimé." + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "Nom du coffre-fort" + +msgid "Vault description" +msgstr "Description du coffre-fort" + +msgid "Vault type" +msgstr "Type de coffre-fort" + +msgid "Salt" +msgstr "Sel" + +msgid "Vault salt" +msgstr "Sel du coffre-fort" + +msgid "Public key" +msgstr "Clé publique" + +msgid "Vault public key" +msgstr "Clé publique du coffre-fort" + +msgid "Owner users" +msgstr "Utilisateurs propriétaires" + +msgid "Owner groups" +msgstr "Groupes propriétaires" + +msgid "Owner services" +msgstr "Services propriétaires" + +msgid "Vault service" +msgstr "Service du coffre-fort" + +msgid "Shared vault" +msgstr "Coffre-fort partagé" + +msgid "Vault user" +msgstr "Utilisateur du coffre-fort" + +msgid "Transport Certificate" +msgstr "Certificat de transport" + +msgid "Service name of the service vault" +msgstr "Nom de service du service coffre" + +msgid "Username of the user vault" +msgstr "Nom d'utilisateur du coffre-fort personnel" + +msgid "Add members to a vault." +msgstr "Ajouter des membres à un coffre-fort." + +msgid "Add owners to a vault." +msgstr "Ajouter des propriétaires à un coffre-fort." + +#, fuzzy +#| msgid "Owner users" +msgid "owner user" +msgstr "Utilisateurs propriétaires" + +#, fuzzy +#| msgid "Owner groups" +msgid "owner group" +msgstr "Groupes propriétaires" + +#, fuzzy +#| msgid "Owner services" +msgid "owner service" +msgstr "Services propriétaires" + +msgid "Owners that could not be added" +msgstr "Propriétaires n'ayant pu être ajoutés" + +msgid "Number of owners added" +msgstr "Nombre de propriétaires ajoutés" + +msgid "Session key wrapped with transport certificate" +msgstr "Clé de session emballée avec le certificat de transport" + +msgid "Vault data encrypted with session key" +msgstr "Les données du coffre-fort sont chiffrées avec la clé de session" + +msgid "Nonce" +msgstr "Usage unique" + +msgid "Delete a vault." +msgstr "Supprimer un coffre-fort." + +msgid "Search for vaults." +msgstr "Rechercher des coffres-forts" + +msgid "List all service vaults" +msgstr "Énumérer tous les coffres-forts de services" + +msgid "List all user vaults" +msgstr "Énumérer tous les coffres-forts d'utilisateurs" + +msgid "Remove members from a vault." +msgstr "Supprimer les membres d'un coffre-fort." + +msgid "Remove owners from a vault." +msgstr "Supprimer les propriétaires d'un coffre-fort." + +msgid "Owners that could not be removed" +msgstr "Propriétaires n'ayant pu être supprimés" + +msgid "Number of owners removed" +msgstr "Nombre de propriétaires supprimés" + +msgid "Display information about a vault." +msgstr "Afficher des informations sur un coffre-fort." + +msgid "Show vault configuration." +msgstr "Afficher la configuration du coffre-fort." + +msgid "Output file to store the transport certificate" +msgstr "Fichier où stocker le certificat de transport" + +msgid "Add owners to a vault container." +msgstr "Ajouter des propriétaires à un conteneur de coffre-fort." + +msgid "Delete a vault container." +msgstr "Supprimer un conteneur de coffre-fort." + +msgid "Remove owners from a vault container." +msgstr "Supprimer des propriétaires d'un conteneur de coffre-fort." + +msgid "Display information about a vault container." +msgstr "Afficher les informations sur un conteneur de coffre-fort." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Principal de ce certificate (par exemple : HTTP/test.example.com)" + +msgid "Profile ID" +msgstr "ID de profil" + +msgid "Certificate Profile to use" +msgstr "Profil de certificat à utiliser" + +msgid "Two-way trust" +msgstr "Confiance réciproque" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" +"Établir une relation d'approbation bidirectionnelle. Par défaut, la relation " +"est unilatérale entrante uniquement." + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Add new ID range.\n" +#| "\n" +#| " To add a new ID range you always have to specify\n" +#| "\n" +#| " --base-id\n" +#| " --range-size\n" +#| "\n" +#| " Additionally\n" +#| "\n" +#| " --rid-base\n" +#| " --secondary-rid-base\n" +#| "\n" +#| " may be given for a new ID range for the local domain while\n" +#| "\n" +#| " --rid-base\n" +#| " --dom-sid\n" +#| "\n" +#| " must be given to add a new range for a trusted AD domain.\n" +#| "\n" +#| " WARNING:\n" +#| "\n" +#| " DNA plugin in 389-ds will allocate IDs based on the ranges configured " +#| "for the\n" +#| " local domain. Currently the DNA plugin *cannot* be reconfigured " +#| "itself based\n" +#| " on the local ranges set via this family of commands.\n" +#| "\n" +#| " Manual configuration change has to be done in the DNA plugin " +#| "configuration for\n" +#| " the new local range. Specifically, The dnaNextRange attribute of " +#| "'cn=Posix\n" +#| " IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +#| "has to be\n" +#| " modified to match the new range.\n" +#| " " +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Ajouter une nouvelle plage d'identifiants.\n" +"\n" +" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " +"préciser\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" En outre,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " +"que\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " +"confiance.\n" +"\n" +" AVERTISSEMENT :\n" +"\n" +" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" +" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" +" lui-même reconfiguré selon les plages locales définies par " +"l'intermédiaire\n" +" de cette famille de commandes.\n" +"\n" +" Un changement manuel de configuration doit être opéré dans la " +"configuration\n" +" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" +" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " +"Assignment Plugin », « cn=plugins », « cn=config »\n" +" doivent être modifiés pour correspondre à cette nouvelle plage.\n" +" " + +#, fuzzy +#| msgid "" +#| "\n" +#| "Add new ID range.\n" +#| "\n" +#| " To add a new ID range you always have to specify\n" +#| "\n" +#| " --base-id\n" +#| " --range-size\n" +#| "\n" +#| " Additionally\n" +#| "\n" +#| " --rid-base\n" +#| " --secondary-rid-base\n" +#| "\n" +#| " may be given for a new ID range for the local domain while\n" +#| "\n" +#| " --rid-base\n" +#| " --dom-sid\n" +#| "\n" +#| " must be given to add a new range for a trusted AD domain.\n" +#| "\n" +#| " WARNING:\n" +#| "\n" +#| " DNA plugin in 389-ds will allocate IDs based on the ranges configured " +#| "for the\n" +#| " local domain. Currently the DNA plugin *cannot* be reconfigured " +#| "itself based\n" +#| " on the local ranges set via this family of commands.\n" +#| "\n" +#| " Manual configuration change has to be done in the DNA plugin " +#| "configuration for\n" +#| " the new local range. Specifically, The dnaNextRange attribute of " +#| "'cn=Posix\n" +#| " IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +#| "has to be\n" +#| " modified to match the new range.\n" +#| " " +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Ajouter une nouvelle plage d'identifiants.\n" +"\n" +" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " +"préciser\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" En outre,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " +"que\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " +"confiance.\n" +"\n" +" AVERTISSEMENT :\n" +"\n" +" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" +" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" +" lui-même reconfiguré selon les plages locales définies par " +"l'intermédiaire\n" +" de cette famille de commandes.\n" +"\n" +" Un changement manuel de configuration doit être opéré dans la " +"configuration\n" +" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" +" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " +"Assignment Plugin », « cn=plugins », « cn=config »\n" +" doivent être modifiés pour correspondre à cette nouvelle plage.\n" +" " + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage Certificate Profiles\n" +#| "\n" +#| "Certificate Profiles are used by Certificate Authority (CA) in the " +#| "signing of\n" +#| "certificates to determine if a Certificate Signing Request (CSR) is " +#| "acceptable,\n" +#| "and if so what features and extensions will be present on the " +#| "certificate.\n" +#| "\n" +#| "The Certificate Profile format is the property-list format understood by " +#| "the\n" +#| "Dogtag or Red Hat Certificate System CA.\n" +#| "\n" +#| "PROFILE ID SYNTAX:\n" +#| "\n" +#| "A Profile ID is a string without spaces or punctuation starting with a " +#| "letter\n" +#| "and followed by a sequence of letters, digits or underscore (\"_\").\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Import a profile that will not store issued certificates:\n" +#| " ipa certprofile-import ShortLivedUserCert \\\n" +#| " --file UserCert.profile --desc \"User Certificates\" \\\n" +#| " --store=false\n" +#| "\n" +#| " Delete a certificate profile:\n" +#| " ipa certprofile-del ShortLivedUserCert\n" +#| "\n" +#| " Show information about a profile:\n" +#| " ipa certprofile-show ShortLivedUserCert\n" +#| "\n" +#| " Save profile configuration to a file:\n" +#| " ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +#| "\n" +#| " Search for profiles that do not store certificates:\n" +#| " ipa certprofile-find --store=false\n" +#| "\n" +#| "PROFILE CONFIGURATION FORMAT:\n" +#| "\n" +#| "The profile configuration format is the raw property-list format\n" +#| "used by Dogtag Certificate System. The XML format is not supported.\n" +#| "\n" +#| "The following restrictions apply to profiles managed by IPA:\n" +#| "\n" +#| "- When importing a profile the \"profileId\" field, if present, must\n" +#| " match the ID given on the command line.\n" +#| "\n" +#| "- The \"classId\" field must be set to \"caEnrollImpl\"\n" +#| "\n" +#| "- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +#| "\n" +#| "- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +#| " class must be used.\n" +#| "\n" +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" +"\n" +"Gestion des profils de certificats\n" +"\n" +"Les profils de certificats sont utilisés par l'autorité de certification " +"(AC) dans\n" +"la signature de certificats afin de déterminer si une demande de signature " +"de\n" +"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " +"quelles\n" +"fonctionnalités et extensions doivent figurer dans le certificat.\n" +"\n" +"Le format du profil de certificat est un format de liste de propriétés qui " +"sera\n" +"compris par une autorité de certification Dogtag ou Red Hat Certificate " +"System.\n" +"\n" +"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" +"\n" +"Un identifiant de profil est une chaîne de caractères sans espaces ni " +"caractère de\n" +"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " +"chiffres et\n" +"de caractère souligné (« _ »).\n" +"\n" +"EXEMPLES :\n" +"\n" +" Importer un profil qui ne stockera pas les certificats émis :\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Supprimer un profil de certificat :\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Afficher les informations sur un profil :\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Enregistrer la configuration du profil dans un fichier :\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Rechercher des profils ne stockant pas les certificats :\n" +" ipa certprofile-find --store=false\n" +"\n" +"FORMAT DE LA CONFIGURATION DE PROFIL :\n" +"\n" +"Le format de configuration de profil est un format brut de liste de \n" +"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" +"pas pris en charge.\n" +"\n" +"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" +"\n" +"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " +"doit\n" +" correspondre à l'identifiant donné sur la ligne de commande.\n" +"\n" +"- Le champ « classId » doit être « caEnrollImpl »\n" +"\n" +"- Le champ « auth.instance_id  doit être « raCertAuth »\n" +"\n" +"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " +"doivent \n" +" être utilisées.\n" + +msgid "Profile ID for referring to this profile" +msgstr "Identifiant de profil" + +msgid "Profile description" +msgstr "Description de profil" + +msgid "Brief description of this profile" +msgstr "Brève description de ce profil" + +msgid "Store issued certificates" +msgstr "Stocker les certificats émis" + +msgid "Whether to store certs issued using this profile" +msgstr "Stocker ou non les certificats émis à partir de ce profil" + +msgid "Delete a Certificate Profile." +msgstr "Supprimer un profil de certificat." + +msgid "Search for Certificate Profiles." +msgstr "Rechercher des profils de certificats." + +msgid "Import a Certificate Profile." +msgstr "Importer un profil de certificat." + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "Nom de fichier du profil brut. Le format XML n'est pas pris en charge." + +msgid "Modify Certificate Profile configuration." +msgstr "Modifier la configuration d'un profil de certificat." + +msgid "File containing profile configuration" +msgstr "Fichier contenant la configuration du profil" + +msgid "Display the properties of a Certificate Profile." +msgstr "Afficher les propriétés d'un profil de certificat." + +msgid "Write profile configuration to file" +msgstr "Écrire le profil de configuration dans un fichier" + +msgid "Remove users that can manage this token." +msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "Résoudre un nom de système DNS. (Obsolète)" + +msgid "Hostname (FQDN)" +msgstr "Nom d'hôte (FQDN)" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" +"Forcer la création de la zone DNS même si elle recouvre une zone existante." + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" +"Forcer la création de la zone DNS même si le serveur de nom n'est pas " +"résoluble. (Obsolète)" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Groupes d'utilisateurs\n" +"\n" +"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " +"POSIX.\n" +"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" +"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" +"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" +"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" +"POSIX.\n" +"\n" +"Chaque groupe doit avoir une description.\n" +"\n" +"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" +"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" +"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " +"groupe.\n" +"IPA en générera un automatiquement s'il n'est pas fourni.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe :\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Ajouter un nouveau groupe non-POSIX :\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convertir un groupe non-POSIX en groupe POSIX :\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " +"groupe :\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Supprimer un groupe :\n" +" ipa group-del unixadmins\n" +"\n" +" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Supprimer un utilisateur du groupe « localadmins » :\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Afficher des informations à propos d'un groupe donné :\n" +" ipa group-show localadmins\n" +"\n" +"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " +"de\n" +"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" +"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" +"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " +"tel\n" +"groupe peut plus tard être incorporé dans un des groupes POSIX\n" +"\n" +"Un membre de groupe externe est actuellement identifié par un « Security\n" +"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" +"un membre de groupe externe, il est possible de le définir, soit au format\n" +"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " +"passé\n" +"en SID en se servant du « Global Catalog » des domaines approuvés.\n" +"\n" +"Exemple:\n" +"\n" +"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" +" et à leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" +" groupe externe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à être associés " +"au\n" +" groupe POSIX « ad_admins » :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" +" leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Simulate use of Host-based access controls\n" +#| "\n" +#| "HBAC rules control who can access what services on what hosts.\n" +#| "You can use HBAC to control which users or groups can access a service,\n" +#| "or group of services, on a target host.\n" +#| "\n" +#| "Since applying HBAC rules implies use of a production environment,\n" +#| "this plugin aims to provide simulation of HBAC rules evaluation without\n" +#| "having access to the production environment.\n" +#| "\n" +#| " Test user coming to a service on a named host against\n" +#| " existing enabled rules.\n" +#| "\n" +#| " ipa hbactest --user= --host= --service=\n" +#| " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +#| " [--sizelimit= ]\n" +#| "\n" +#| " --user, --host, and --service are mandatory, others are optional.\n" +#| "\n" +#| " If --rules is specified simulate enabling of the specified rules and " +#| "test\n" +#| " the login of the user using only these rules.\n" +#| "\n" +#| " If --enabled is specified, all enabled HBAC rules will be added to " +#| "simulation\n" +#| "\n" +#| " If --disabled is specified, all disabled HBAC rules will be added to " +#| "simulation\n" +#| "\n" +#| " If --nodetail is specified, do not return information about rules " +#| "matched/not matched.\n" +#| "\n" +#| " If both --rules and --enabled are specified, apply simulation to --rules " +#| "_and_\n" +#| " all IPA enabled rules.\n" +#| "\n" +#| " If no --rules specified, simulation is run against all IPA enabled " +#| "rules.\n" +#| " By default there is a IPA-wide limit to number of entries fetched, you " +#| "can change it\n" +#| " with --sizelimit option.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " 1. Use all enabled HBAC rules in IPA database to simulate:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Matched rules: allow_all\n" +#| "\n" +#| " 2. Disable detailed summary of how rules were applied:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| "\n" +#| " 3. Test explicitly specified HBAC rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: myrule\n" +#| "\n" +#| " 4. Use all enabled HBAC rules in IPA database + explicitly specified " +#| "rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule --enabled\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Matched rules: allow_all\n" +#| "\n" +#| " 5. Test all disabled HBAC rules in IPA database:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: new-rule\n" +#| "\n" +#| " 6. Test all disabled HBAC rules in IPA database + explicitly " +#| "specified rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule --disabled\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| "\n" +#| " 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --enabled --disabled\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Not matched rules: new-rule\n" +#| " Matched rules: allow_all\n" +#| "\n" +#| "\n" +#| "HBACTEST AND TRUSTED DOMAINS\n" +#| "\n" +#| "When an external trusted domain is configured in IPA, HBAC rules are also " +#| "applied\n" +#| "on users accessing IPA resources from the trusted domain. Trusted domain " +#| "users and\n" +#| "groups (and their SIDs) can be then assigned to external groups which can " +#| "be\n" +#| "members of POSIX groups in IPA which can be used in HBAC rules and thus " +#| "allowing\n" +#| "access to resources protected by the HBAC system.\n" +#| "\n" +#| "hbactest plugin is capable of testing access for both local IPA users and " +#| "users\n" +#| "from the trusted domains, either by a fully qualified user name or by " +#| "user SID.\n" +#| "Such user names need to have a trusted domain specified as a short name\n" +#| "(DOMAIN\\Administrator) or with a user principal name (UPN), " +#| "Administrator@ad.test.\n" +#| "\n" +#| "Please note that hbactest executed with a trusted domain user as --user " +#| "parameter\n" +#| "can be only run by members of \"trust admins\" group.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " 1. Test if a user from a trusted domain specified by its shortname " +#| "matches any\n" +#| " rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +#| "service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" +#| "\n" +#| " 2. Test if a user from a trusted domain specified by its domain name " +#| "matches\n" +#| " any rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +#| "service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" +#| "\n" +#| " 3. Test if a user from a trusted domain specified by its SID matches " +#| "any rule:\n" +#| "\n" +#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 " +#| "\\\n" +#| " --host `hostname` --service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" +#| "\n" +#| " 4. Test if other user from a trusted domain specified by its SID " +#| "matches any rule:\n" +#| "\n" +#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 " +#| "\\\n" +#| " --host `hostname` --service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Not matched rules: can_login\n" +#| "\n" +#| " 5. Test if other user from a trusted domain specified by its shortname " +#| "matches\n" +#| " any rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +#| "sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Not matched rules: can_login\n" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" +"\n" +"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" +"\n" +"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" +"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " +"groupes\n" +"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" +"\n" +"L'application de règles HBAC présuppose un environnement de production ;\n" +"ce greffon a pour objet de fournir une simulation de l'évaluation des " +"règles\n" +"HBAC sans nécessiter d'accès à cet environnement.\n" +"\n" +" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" +" vis à vis des règles actives existantes.\n" +"\n" +"ipa hbactest --user= --host= --service=\\\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" +" [--sizelimit= ]\n" +"\n" +"--user, --host et --service sont obligatoires, les autres sont " +"optionnelles.\n" +"\n" +" Si --rules est défini, simule l'activation des règles « rules-list » et\n" +" teste la connexion de l'utilisateur uniquement sur ces règles.\n" +"\n" +" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" +" la simulation\n" +"\n" +" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" +" à la simulation\n" +"\n" +" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " +"règles satisfaites ou non satisfaites.\n" +"\n" +" Si --rules et --enabled sont définis tous deux, la simulation est " +"appliquée\n" +" à --rules _et_ à tous les règles IPA activées.\n" +"\n" +" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" +" les règles IPA activées.\n" +" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" +" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" +" pour la simulation :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Désactiver le résumé détaillé sur l'application des règles :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Tester explicitement les règles HBAC indiquées :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Tester toutes les règles HBAC désactivées de la base de données " +"IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" +" de données IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +"\n" +"\n" +"TEST HBAC ET domaines approuvés\n" +"\n" +"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" +"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" +"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" +"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" +"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" +"autorise un accès aux ressources protégées par le système HBAC.\n" +"\n" +"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" +"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" +"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " +"noms\n" +"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" +"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" +"Administrator@ad.test.\n" +"\n" +"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" +"confiance en tant que paramètre --user ne peut être lancé que par des\n" +"membres du groupe des « administrateurs de confiance ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom de domaine satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" +" par son SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" +" son nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" + +msgid "Managed suffixes" +msgstr "Suffixes administrés" + +msgid "Check connection to remote IPA server." +msgstr "Vérifier la connexion au serveur IPA distant." + +msgid "Remote server name" +msgstr "Nom du serveur distant" + +msgid "Remote IPA server hostname" +msgstr "Nom d'hôte du serveur IPA distant" + +msgid "suffix" +msgstr "suffixe" + +#, fuzzy +#| msgid "Search for netgroups with these member users." +msgid "Search for servers with these managed suffixes." +msgstr "Rechercher des groupes réseaux dont les membres sont ces utilisateurs." + +#, fuzzy +#| msgid "Search for netgroups without these member users." +msgid "Search for servers without these managed suffixes." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces utilisateurs." + +msgid "Add a manager to the stage user entry" +msgstr "Ajouter un responsable à l'entrée d'utilisateur en attente" + +msgid "Remove a manager to the stage user entry" +msgstr "Supprimer un responsable de l'entrée de l'utilisateur en attente." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "DN du suffixe LDAP administré" + +msgid "Search for topology suffixes." +msgstr "Rechercher des suffixes de topologie." + +msgid "Add a manager to the user entry" +msgstr "Ajouter un responsable à l'entrée de l'utilisateur" + +msgid "Remove a manager to the user entry" +msgstr "Supprimer un responsable de l'entrée de l'utilisateur" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions to grant(read, write, add, delete, all)" +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" +"Permissions à accorder (« read », « write », « add », « delete », « all »)" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +#| "\n" +#| "Implements a set of commands for managing server SSL certificates.\n" +#| "\n" +#| "Certificate requests exist in the form of a Certificate Signing Request " +#| "(CSR)\n" +#| "in PEM format.\n" +#| "\n" +#| "The dogtag CA uses just the CN value of the CSR and forces the rest of " +#| "the\n" +#| "subject to values configured in the server.\n" +#| "\n" +#| "A certificate is stored with a service principal and a service principal\n" +#| "needs a host.\n" +#| "\n" +#| "In order to request a certificate:\n" +#| "\n" +#| "* The host must exist\n" +#| "* The service must exist (or you use the --add option to automatically " +#| "add it)\n" +#| "\n" +#| "SEARCHING:\n" +#| "\n" +#| "Certificates may be searched on by certificate subject, serial number,\n" +#| "revocation reason, validity dates and the issued date.\n" +#| "\n" +#| "When searching on dates the _from date does a >= search and the _to date\n" +#| "does a <= search. When combined these are done as an AND.\n" +#| "\n" +#| "Dates are treated as GMT to match the dates in the certificates.\n" +#| "\n" +#| "The date format is YYYY-mm-dd.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Request a new certificate and add the principal:\n" +#| " ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +#| "\n" +#| " Retrieve an existing certificate:\n" +#| " ipa cert-show 1032\n" +#| "\n" +#| " Revoke a certificate (see RFC 5280 for reason details):\n" +#| " ipa cert-revoke --revocation-reason=6 1032\n" +#| "\n" +#| " Remove a certificate from revocation hold status:\n" +#| " ipa cert-remove-hold 1032\n" +#| "\n" +#| " Check the status of a signing request:\n" +#| " ipa cert-status 10\n" +#| "\n" +#| " Search for certificates by hostname:\n" +#| " ipa cert-find --subject=ipaserver.example.com\n" +#| "\n" +#| " Search for revoked certificates by reason:\n" +#| " ipa cert-find --revocation-reason=5\n" +#| "\n" +#| " Search for certificates based on issuance date\n" +#| " ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +#| "\n" +#| "IPA currently immediately issues (or declines) all certificate requests " +#| "so\n" +#| "the status of a request is not normally useful. This is for future use\n" +#| "or the case where a CA does not immediately issue a certificate.\n" +#| "\n" +#| "The following revocation reasons are supported:\n" +#| "\n" +#| " * 0 - unspecified\n" +#| " * 1 - keyCompromise\n" +#| " * 2 - cACompromise\n" +#| " * 3 - affiliationChanged\n" +#| " * 4 - superseded\n" +#| " * 5 - cessationOfOperation\n" +#| " * 6 - certificateHold\n" +#| " * 8 - removeFromCRL\n" +#| " * 9 - privilegeWithdrawn\n" +#| " * 10 - aACompromise\n" +#| "\n" +#| "Note that reason code 7 is not used. See RFC 5280 for more details:\n" +#| "\n" +#| "http://www.ietf.org/rfc/rfc5280.txt\n" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" +"\n" +"Gestion de certficats IPA\n" +"\n" +"Implémente un jeu de commandes pour gérer les certificats SSL du serveur.\n" +"\n" +"Les demandes de certificats existent sous la forme de\n" +"« Certificate Signing Request (CSR) » au format PEM.\n" +"\n" +"La plaque d'identité CA n'utilise que la valeur CN du CSR et force le reste\n" +"du sujet aux valeurs configurées dans le serveur.\n" +"\n" +"Un certificat est enregistré avec un principal de service et un principal\n" +" de service a besoin d'un hôte.\n" +"\n" +"Donc, pour demander un certificat :\n" +"\n" +"* l'hôte doit exister\n" +"* le service doit exister (utiliser --add pour l'ajouter automatiquement)\n" +"\n" +"RECHERCHE :\n" +"\n" +"Les certificats peuvent être recherchés par sujet, numéro de série,\n" +"motif de révocation, dates de validité et date d'émission.\n" +"\n" +"En recherchant par dates, _from effectue une recherche >= à la date et _to\n" +"une recherche <= à la date. Combinées, elles sont équivalentes à un AND.\n" +"\n" +"La date est traitée comme GMT pour correspondre aux dates de certificats.\n" +"\n" +"La date est au format YYYY-mm-dd.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Demander un nouveau certificat et ajouter le principal :\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrouver un certificat existant :\n" +" ipa cert-show 1032\n" +"\n" +" Révoquer un certificat (voir RFC 5280 pour le détail des raisons) :\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Lever l'état de maintien de révocation d'un certificat :\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Vérifier l'état d'une demande de signature :\n" +" ipa cert-status 10\n" +"\n" +" Rechercher des certificats par nom d'hôte :\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Rechercher les certificats révoqués par motif :\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Rechercher les certificats selon la date d'émission :\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"Actuellement IPA émet (ou refuse) aussitôt toute demande de certificat, " +"donc\n" +"l'état d'une requête ne sert normalement pas. C'est en vue d'une " +"utilisation\n" +"future ou au cas où un CA n'émettrait pas immédiatement un certificat.\n" +"\n" +"Les motifs de révocation suivants sont pris en charge :\n" +"\n" +" * 0 - « unspecified » (non précisé)\n" +" * 1 - « keyCompromise » (clé compromise)\n" +" * 2 - « cACompromise » (CA compromis)\n" +" * 3 - « affiliationChanged » (affiliation modifiée)\n" +" * 4 - « superseded » (remplacé)\n" +" * 5 - « cessationOfOperation » (arrêt d'opération)\n" +" * 6 - « certificateHold » (certificat retenu)\n" +" * 8 - « removeFromCRL » (sorti du CRL)\n" +" * 9 - « privilegeWithdrawn » (retrait de privilège)\n" +" * 10 - « aACompromise » (compromission)\n" +"\n" +"Notez que le motif code 7 ne sert pas. Voir RFC 5280 pour plus de détails :\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Group to Group Delegation\n" +#| "\n" +#| "A permission enables fine-grained delegation of permissions. Access " +#| "Control\n" +#| "Rules, or instructions (ACIs), grant permission to permissions to " +#| "perform\n" +#| "given tasks such as adding a user, modifying a group, etc.\n" +#| "\n" +#| "Group to Group Delegations grants the members of one group to update a " +#| "set\n" +#| "of attributes of members of another group.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a delegation rule to allow managers to edit employee's addresses:\n" +#| " ipa delegation-add --attrs=street --group=managers --" +#| "membergroup=employees \"managers edit employees' street\"\n" +#| "\n" +#| " When managing the list of attributes you need to include all attributes\n" +#| " in the list, including existing ones. Add postalCode to the list:\n" +#| " ipa delegation-mod --attrs=street --attrs=postalCode --group=managers " +#| "--membergroup=employees \"managers edit employees' street\"\n" +#| "\n" +#| " Display our updated rule:\n" +#| " ipa delegation-show \"managers edit employees' street\"\n" +#| "\n" +#| " Delete a rule:\n" +#| " ipa delegation-del \"managers edit employees' street\"\n" +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" +"\n" +"Délégation de groupe à groupe\n" +"\n" +"Une permission permet une délégation fine des autorisations. Les règles de\n" +"contrôle d'accès, ou les instructions (ACI), accordent la possibilité aux\n" +"permissions de réaliser certaines tâches comme l'ajout d'utilisateur, la\n" +"modification d'un groupe, etc.\n" +"\n" +"La délégation de groupe à groupe permet aux membres d'un groupe de modifier\n" +"un jeu d'attributs de membres d'un autre groupe.\n" +"\n" +"EXEMPLES:\n" +"\n" +" Ajouter une règle de délégation permettant aux gestionnaires de modifier\n" +" les adresses des employés :\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" En gérant une liste d'attributs, vous devez inclure tous les attributs,\n" +" y compris les existants. Ajouter « postalCode » à la liste :\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Afficher la règle modifiée :\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Supprimer une règle :\n" +" ipa delegation-del \"managers edit employees' street\"\n" + +#, fuzzy +#| msgid "Permissions to grant (read, write). Default is write." +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "Permissions à accorder (« read », « write »). Par défaut : « write »." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Global forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Redirecteurs globaux. Un port personnalisé peut être indiqué pour chaque " +"redirecteur en utilisant le format standard « adresse_IP port PORT »" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" +"Délai entre deux interrogations du serveur de noms pour la recherche de " +"nouvelles zones" + +msgid "DNS class" +msgstr "Classe de DNS" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +#, fuzzy +#| msgid "Flags" +msgid "KEY Flags" +msgstr "Marqueurs" + +#, fuzzy +#| msgid "KEY record" +msgid "KEY Protocol" +msgstr "Enregistrement KEY" + +msgid "Protocol" +msgstr "" + +#, fuzzy +#| msgid "Algorithm" +msgid "KEY Algorithm" +msgstr "Algorithme" + +#, fuzzy +#| msgid "Public key" +msgid "KEY Public Key" +msgstr "Clé publique" + +#, fuzzy +#| msgid "Public key" +msgid "Public Key" +msgstr "Clé publique" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "NSEC Next Domain Name" +msgstr "Nom de domaine NIS" + +#, fuzzy +#| msgid "Domain name" +msgid "Next Domain Name" +msgstr "Nom de domaine" + +msgid "NSEC Type Map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "Type" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +#, fuzzy +#| msgid "RRSIG record" +msgid "RRSIG Type Covered" +msgstr "Enregistrement RRSIG" + +msgid "Type Covered" +msgstr "" + +#, fuzzy +#| msgid "DS Algorithm" +msgid "RRSIG Algorithm" +msgstr "Algorithme DS" + +msgid "RRSIG Labels" +msgstr "" + +#, fuzzy +#| msgid "Label" +msgid "Labels" +msgstr "Étiquette" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "Signature Expiration" +msgstr "Expiration de mot de passe" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +#, fuzzy +#| msgid "DS Key Tag" +msgid "RRSIG Key Tag" +msgstr "Étiquette de clé DS" + +msgid "RRSIG Signer's Name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Signer's Name" +msgstr "Nom du serveur" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +#, fuzzy +#| msgid "SIG record" +msgid "SIG Type Covered" +msgstr "Enregistrement SIG" + +#, fuzzy +#| msgid "DS Algorithm" +msgid "SIG Algorithm" +msgstr "Algorithme DS" + +#, fuzzy +#| msgid "Label" +msgid "SIG Labels" +msgstr "Étiquette" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +#, fuzzy +#| msgid "DS Key Tag" +msgid "SIG Key Tag" +msgstr "Étiquette de clé DS" + +#, fuzzy +#| msgid "ID View Name" +msgid "SIG Signer's Name" +msgstr "Nom de la vue d'identifiants" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +#, fuzzy +#| msgid "Time to live" +msgid "SOA time to live" +msgstr "Durée de vie" + +#, fuzzy +#| msgid "SOA record expire time" +msgid "SOA record time to live" +msgstr "Heure d'expiration de l'enregistrement SOA" + +msgid "SOA class" +msgstr "Classe SOA" + +msgid "SOA record class" +msgstr "Classe d'enregistrement SOA " + +#, fuzzy +#| msgid "" +#| "Per-zone forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Redirecteurs par zone. Un port personnalisé peut être indiqué pour chaque " +"redirecteur avec le format standard « adresse_IP port PORT »" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" +"Ajouter un enregistrement direct pour les serveurs de noms situés dans la " +"zone créée" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "Commande non implémentée" + +#, fuzzy +#| msgid "Identity" +msgid "Quantity" +msgstr "Identité" + +#, fuzzy +#| msgid "Search for delegations." +msgid "Search for entitlement accounts." +msgstr "Rechercher des délégations." + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "Retrieve the entitlement certs." +msgstr "Récupérer un certificat existant." + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "Import an entitlement certificate." +msgstr "Récupérer un certificat existant." + +msgid "UUID" +msgstr "" + +#, fuzzy +#| msgid "Enrollment" +msgid "Enrollment UUID" +msgstr "Inscription" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "Nom d'utilisateur" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "Commande non implémentée" + +#, fuzzy +#| msgid "Reset Password" +msgid "Registration password" +msgstr "Réinitialiser le mot de passe" + +#, fuzzy +#| msgid "Display a segment." +msgid "Display current entitlements." +msgstr "Afficher un segment." + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of users\n" +#| "\n" +#| "Manage groups of users. By default, new groups are POSIX groups. You\n" +#| "can add the --nonposix option to the group-add command to mark a new " +#| "group\n" +#| "as non-POSIX. You can use the --posix argument with the group-mod " +#| "command\n" +#| "to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +#| "converted to non-POSIX groups.\n" +#| "\n" +#| "Every group must have a description.\n" +#| "\n" +#| "POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +#| "supported but can have an impact on your file permissions. It is not " +#| "necessary\n" +#| "to supply a GID when creating a group. IPA will generate one " +#| "automatically\n" +#| "if it is not provided.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new group:\n" +#| " ipa group-add --desc='local administrators' localadmins\n" +#| "\n" +#| " Add a new non-POSIX group:\n" +#| " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +#| "\n" +#| " Convert a non-POSIX group to posix:\n" +#| " ipa group-mod --posix remoteadmins\n" +#| "\n" +#| " Add a new POSIX group with a specific Group ID number:\n" +#| " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +#| "\n" +#| " Add a new POSIX group and let IPA assign a Group ID number:\n" +#| " ipa group-add --desc='printer admins' printeradmins\n" +#| "\n" +#| " Remove a group:\n" +#| " ipa group-del unixadmins\n" +#| "\n" +#| " To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +#| " ipa group-add-member --groups=remoteadmins localadmins\n" +#| "\n" +#| " Add multiple users to the \"localadmins\" group:\n" +#| " ipa group-add-member --users=test1 --users=test2 localadmins\n" +#| "\n" +#| " Remove a user from the \"localadmins\" group:\n" +#| " ipa group-remove-member --users=test2 localadmins\n" +#| "\n" +#| " Display information about a named group.\n" +#| " ipa group-show localadmins\n" +#| "\n" +#| "External group membership is designed to allow users from trusted " +#| "domains\n" +#| "to be mapped to local POSIX groups in order to actually use IPA " +#| "resources.\n" +#| "External members should be added to groups that specifically created as\n" +#| "external and non-POSIX. Such group later should be included into one of " +#| "POSIX\n" +#| "groups.\n" +#| "\n" +#| "An external group member is currently a Security Identifier (SID) as " +#| "defined by\n" +#| "the trusted domain. When adding external group members, it is possible " +#| "to\n" +#| "specify them in either SID, or DOM\n" +#| "ame, or name@domain format. IPA will attempt\n" +#| "to resolve passed name to SID with the use of Global Catalog of the " +#| "trusted domain.\n" +#| "\n" +#| "Example:\n" +#| "\n" +#| "1. Create group for the trusted domain admins' mapping and their local " +#| "POSIX group:\n" +#| "\n" +#| " ipa group-add --desc=' admins external map' " +#| "ad_admins_external --external\n" +#| " ipa group-add --desc=' admins' ad_admins\n" +#| "\n" +#| "2. Add security identifier of Domain Admins of the to the " +#| "ad_admins_external\n" +#| " group:\n" +#| "\n" +#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#| "Admins'\n" +#| "\n" +#| "3. Allow members of ad_admins_external group to be associated with " +#| "ad_admins POSIX group:\n" +#| "\n" +#| " ipa group-add-member ad_admins --groups ad_admins_external\n" +#| "\n" +#| "4. List members of external members of ad_admins_external group to see " +#| "their SIDs:\n" +#| "\n" +#| " ipa group-show ad_admins_external\n" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Groupes d'utilisateurs\n" +"\n" +"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " +"POSIX.\n" +"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" +"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" +"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" +"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" +"POSIX.\n" +"\n" +"Chaque groupe doit avoir une description.\n" +"\n" +"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" +"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" +"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " +"groupe.\n" +"IPA en générera un automatiquement s'il n'est pas fourni.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe :\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Ajouter un nouveau groupe non-POSIX :\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convertir un groupe non-POSIX en groupe POSIX :\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " +"groupe :\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Supprimer un groupe :\n" +" ipa group-del unixadmins\n" +"\n" +" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Supprimer un utilisateur du groupe « localadmins » :\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Afficher des informations à propos d'un groupe donné :\n" +" ipa group-show localadmins\n" +"\n" +"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " +"de\n" +"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" +"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" +"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " +"tel\n" +"groupe peut plus tard être incorporé dans un des groupes POSIX\n" +"\n" +"Un membre de groupe externe est actuellement identifié par un « Security\n" +"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" +"un membre de groupe externe, il est possible de le définir, soit au format\n" +"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " +"passé\n" +"en SID en se servant du « Global Catalog » des domaines approuvés.\n" +"\n" +"Exemple:\n" +"\n" +"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" +" et à leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" +" groupe externe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à être associés " +"au\n" +" groupe POSIX « ad_admins » :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" +" leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" + +#, fuzzy +#| msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "Membres d'un domaine approuvé sous la forme DOM\\nom ou nom@domaine" + +msgid "comma-separated list of users to add" +msgstr "" + +#, fuzzy +#| msgid "host groups to add" +msgid "comma-separated list of groups to add" +msgstr "groupes d'hôtes à ajouter" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "comma-separated list of users to remove" +msgstr "" +"Une liste, séparée avec des virgules, des champs à explorer pour une " +"recherche d'utilisateurs" + +#, fuzzy +#| msgid "host groups to remove" +msgid "comma-separated list of groups to remove" +msgstr "groupes d'hôtes à supprimer" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Host-based access control\n" +#| "\n" +#| "Control who can access what services on what hosts. You\n" +#| "can use HBAC to control which users or groups can\n" +#| "access a service, or group of services, on a target host.\n" +#| "\n" +#| "You can also specify a category of users and target hosts.\n" +#| "This is currently limited to \"all\", but might be expanded in the\n" +#| "future.\n" +#| "\n" +#| "Target hosts in HBAC rules must be hosts managed by IPA.\n" +#| "\n" +#| "The available services and groups of services are controlled by the\n" +#| "hbacsvc and hbacsvcgroup plug-ins respectively.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Create a rule, \"test1\", that grants all users access to the host " +#| "\"server\" from\n" +#| " anywhere:\n" +#| " ipa hbacrule-add --usercat=all test1\n" +#| " ipa hbacrule-add-host --hosts=server.example.com test1\n" +#| "\n" +#| " Display the properties of a named HBAC rule:\n" +#| " ipa hbacrule-show test1\n" +#| "\n" +#| " Create a rule for a specific service. This lets the user john access\n" +#| " the sshd service on any machine from any machine:\n" +#| " ipa hbacrule-add --hostcat=all john_sshd\n" +#| " ipa hbacrule-add-user --users=john john_sshd\n" +#| " ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +#| "\n" +#| " Create a rule for a new service group. This lets the user john access\n" +#| " the FTP service on any machine from any machine:\n" +#| " ipa hbacsvcgroup-add ftpers\n" +#| " ipa hbacsvc-add sftp\n" +#| " ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +#| " ipa hbacrule-add --hostcat=all john_ftp\n" +#| " ipa hbacrule-add-user --users=john john_ftp\n" +#| " ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +#| "\n" +#| " Disable a named HBAC rule:\n" +#| " ipa hbacrule-disable test1\n" +#| "\n" +#| " Remove a named HBAC rule:\n" +#| " ipa hbacrule-del allow_server\n" +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" +"\n" +"Contrôle d'accès des systèmes (HBAC)\n" +"\n" +"HBAC (Host-based acces control) permet de contrôler qui peut accéder\n" +"à quels services sur quels systèmes, et d'où. Il est possible\n" +"d'utiliser le système HBAC afin de contrôler quels utilisateurs ou quels\n" +"groupes d'un système source peuvent accéder à quels services, ou groupes\n" +"de services, sur un hôte cible.\n" +"\n" +"Vous pouvez aussi indiquer une catégorie d'utilisateur, d'hôtes cibles.\n" +"La seule catégorie existante pour le moment est \"all\", mais elles\n" +"pourront être étendues dans le futur.\n" +"\n" +"Les hôtes cible des règles HBAC doivent être des hôtes administrés par IPA.\n" +"\n" +"Les services et groupes de services disponibles sont gérés respectivement\n" +"par les greffons « hbacsvc » et « hbacsvcgroup ».\n" +"\n" +"EXEMPLES:\n" +"\n" +" Créer une règle \"test1\" autorisant tous les utilisateurs à accéder\n" +" le serveur « server » depuis n'importe où :\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Afficher les propriétés d'une règle HBAC nommée :\n" +" ipa hbacrule-show test1\n" +"\n" +" Créer une règle pour un service donné. Elle permet d'avoir accés au\n" +" service sshd sur toute machine depuis n'importe quelle autre machine :\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Créer une règle pour un nouveau groupe de services. Elle permet d'avoir\n" +" accès au service FTP de toute machine depuis n'importe quelle machine.\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Désactiver une règle HBAC nommée :\n" +" ipa hbacrule-disable test1\n" +"\n" +" Supprimer une règle HBAC nommée :\n" +" ipa hbacrule-del allow_server\n" +"\n" + +msgid "Source host category" +msgstr "Catégorie d'hôtes sources" + +msgid "Source host category the rule applies to" +msgstr "Catégorie d'hôtes sources à laquelle la règle s'applique" + +msgid "Source Hosts" +msgstr "Hôtes sources" + +msgid "Source Host Groups" +msgstr "Groupes d'hôtes sources" + +msgid "comma-separated list of hosts to add" +msgstr "" + +#, fuzzy +#| msgid "host groups to add" +msgid "comma-separated list of host groups to add" +msgstr "groupes d'hôtes à ajouter" + +#, fuzzy +#| msgid "HBAC services to add" +msgid "comma-separated list of HBAC services to add" +msgstr "Services HBAC à ajouter" + +#, fuzzy +#| msgid "HBAC service groups to add" +msgid "comma-separated list of HBAC service groups to add" +msgstr "Groupes de services HBAC à ajouter" + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "comma-separated list of hosts to remove" +msgstr "" +"Une liste, séparée avec des virgules, des champs à explorer pour une " +"recherche d'utilisateurs" + +#, fuzzy +#| msgid "host groups to remove" +msgid "comma-separated list of host groups to remove" +msgstr "groupes d'hôtes à supprimer" + +#, fuzzy +#| msgid "HBAC services to remove" +msgid "comma-separated list of HBAC services to remove" +msgstr "Services HBAC à supprimer" + +#, fuzzy +#| msgid "HBAC service groups to remove" +msgid "comma-separated list of HBAC service groups to remove" +msgstr "Groupes de services HBAC à supprimer" + +#, fuzzy +#| msgid "Remove target hosts and hostgroups from an HBAC rule." +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "Retirer des hôtes et des groupes d'hôtes cibles d'une règle HBAC." + +#, fuzzy +#| msgid "" +#| "\n" +#| "HBAC Service Groups\n" +#| "\n" +#| "HBAC service groups can contain any number of individual services,\n" +#| "or \"members\". Every group must have a description.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new HBAC service group:\n" +#| " ipa hbacsvcgroup-add --desc=\"login services\" login\n" +#| "\n" +#| " Add members to an HBAC service group:\n" +#| " ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +#| "\n" +#| " Display information about a named group:\n" +#| " ipa hbacsvcgroup-show login\n" +#| "\n" +#| " Delete an HBAC service group:\n" +#| " ipa hbacsvcgroup-del login\n" +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" +"\n" +"Groupes de services HBAC\n" +"\n" +"Les groupes de services HBAC peuvent contenir n'importe quel nombre de\n" +"services « membres » individuels. Chaque groupe doit avoir une description.\n" +"\n" +"EXEMPLES:\n" +"\n" +" Ajouter un nouveau groupe de services HBAC :\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Ajouter des membres à un groupe de services HBAC :\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Afficher les informations d'un groupe nommé :\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Supprimer un groupe de services HBAC :\n" +" ipa hbacsvcgroup-del login\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Simulate use of Host-based access controls\n" +#| "\n" +#| "HBAC rules control who can access what services on what hosts.\n" +#| "You can use HBAC to control which users or groups can access a service,\n" +#| "or group of services, on a target host.\n" +#| "\n" +#| "Since applying HBAC rules implies use of a production environment,\n" +#| "this plugin aims to provide simulation of HBAC rules evaluation without\n" +#| "having access to the production environment.\n" +#| "\n" +#| " Test user coming to a service on a named host against\n" +#| " existing enabled rules.\n" +#| "\n" +#| " ipa hbactest --user= --host= --service=\n" +#| " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +#| " [--sizelimit= ]\n" +#| "\n" +#| " --user, --host, and --service are mandatory, others are optional.\n" +#| "\n" +#| " If --rules is specified simulate enabling of the specified rules and " +#| "test\n" +#| " the login of the user using only these rules.\n" +#| "\n" +#| " If --enabled is specified, all enabled HBAC rules will be added to " +#| "simulation\n" +#| "\n" +#| " If --disabled is specified, all disabled HBAC rules will be added to " +#| "simulation\n" +#| "\n" +#| " If --nodetail is specified, do not return information about rules " +#| "matched/not matched.\n" +#| "\n" +#| " If both --rules and --enabled are specified, apply simulation to --rules " +#| "_and_\n" +#| " all IPA enabled rules.\n" +#| "\n" +#| " If no --rules specified, simulation is run against all IPA enabled " +#| "rules.\n" +#| " By default there is a IPA-wide limit to number of entries fetched, you " +#| "can change it\n" +#| " with --sizelimit option.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " 1. Use all enabled HBAC rules in IPA database to simulate:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Matched rules: allow_all\n" +#| "\n" +#| " 2. Disable detailed summary of how rules were applied:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| "\n" +#| " 3. Test explicitly specified HBAC rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: myrule\n" +#| "\n" +#| " 4. Use all enabled HBAC rules in IPA database + explicitly specified " +#| "rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule --enabled\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Matched rules: allow_all\n" +#| "\n" +#| " 5. Test all disabled HBAC rules in IPA database:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: new-rule\n" +#| "\n" +#| " 6. Test all disabled HBAC rules in IPA database + explicitly " +#| "specified rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule --disabled\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| "\n" +#| " 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --enabled --disabled\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Not matched rules: new-rule\n" +#| " Matched rules: allow_all\n" +#| "\n" +#| "\n" +#| "HBACTEST AND TRUSTED DOMAINS\n" +#| "\n" +#| "When an external trusted domain is configured in IPA, HBAC rules are also " +#| "applied\n" +#| "on users accessing IPA resources from the trusted domain. Trusted domain " +#| "users and\n" +#| "groups (and their SIDs) can be then assigned to external groups which can " +#| "be\n" +#| "members of POSIX groups in IPA which can be used in HBAC rules and thus " +#| "allowing\n" +#| "access to resources protected by the HBAC system.\n" +#| "\n" +#| "hbactest plugin is capable of testing access for both local IPA users and " +#| "users\n" +#| "from the trusted domains, either by a fully qualified user name or by " +#| "user SID.\n" +#| "Such user names need to have a trusted domain specified as a short name\n" +#| "(DOMAIN\\Administrator) or with a user principal name (UPN), " +#| "Administrator@ad.test.\n" +#| "\n" +#| "Please note that hbactest executed with a trusted domain user as --user " +#| "parameter\n" +#| "can be only run by members of \"trust admins\" group.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " 1. Test if a user from a trusted domain specified by its shortname " +#| "matches any\n" +#| " rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +#| "service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" +#| "\n" +#| " 2. Test if a user from a trusted domain specified by its domain name " +#| "matches\n" +#| " any rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +#| "service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" +#| "\n" +#| " 3. Test if a user from a trusted domain specified by its SID matches " +#| "any rule:\n" +#| "\n" +#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 " +#| "\\\n" +#| " --host `hostname` --service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" +#| "\n" +#| " 4. Test if other user from a trusted domain specified by its SID " +#| "matches any rule:\n" +#| "\n" +#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 " +#| "\\\n" +#| " --host `hostname` --service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Not matched rules: can_login\n" +#| "\n" +#| " 5. Test if other user from a trusted domain specified by its shortname " +#| "matches\n" +#| " any rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +#| "sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Not matched rules: can_login\n" +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" +"\n" +"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" +"\n" +"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" +"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " +"groupes\n" +"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" +"\n" +"L'application de règles HBAC présuppose un environnement de production ;\n" +"ce greffon a pour objet de fournir une simulation de l'évaluation des " +"règles\n" +"HBAC sans nécessiter d'accès à cet environnement.\n" +"\n" +" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" +" vis à vis des règles actives existantes.\n" +"\n" +"ipa hbactest --user= --host= --service=\\\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" +" [--sizelimit= ]\n" +"\n" +"--user, --host et --service sont obligatoires, les autres sont " +"optionnelles.\n" +"\n" +" Si --rules est défini, simule l'activation des règles « rules-list » et\n" +" teste la connexion de l'utilisateur uniquement sur ces règles.\n" +"\n" +" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" +" la simulation\n" +"\n" +" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" +" à la simulation\n" +"\n" +" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " +"règles satisfaites ou non satisfaites.\n" +"\n" +" Si --rules et --enabled sont définis tous deux, la simulation est " +"appliquée\n" +" à --rules _et_ à tous les règles IPA activées.\n" +"\n" +" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" +" les règles IPA activées.\n" +" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" +" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" +" pour la simulation :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Désactiver le résumé détaillé sur l'application des règles :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Tester explicitement les règles HBAC indiquées :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Tester toutes les règles HBAC désactivées de la base de données " +"IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" +" de données IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +"\n" +"\n" +"TEST HBAC ET domaines approuvés\n" +"\n" +"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" +"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" +"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" +"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" +"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" +"autorise un accès aux ressources protégées par le système HBAC.\n" +"\n" +"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" +"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" +"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " +"noms\n" +"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" +"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" +"Administrator@ad.test.\n" +"\n" +"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" +"confiance en tant que paramètre --user ne peut être lancé que par des\n" +"membres du groupe des « administrateurs de confiance ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom de domaine satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" +" par son SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" +" son nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" + +msgid "Source host" +msgstr "Hôte source" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of hosts.\n" +#| "\n" +#| "Manage groups of hosts. This is useful for applying access control to a\n" +#| "number of hosts by using Host-based Access Control.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new host group:\n" +#| " ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +#| "\n" +#| " Add another new host group:\n" +#| " ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +#| "\n" +#| " Add members to the hostgroup (using Bash brace expansion):\n" +#| " ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +#| "\n" +#| " Add a hostgroup as a member of another hostgroup:\n" +#| " ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +#| "\n" +#| " Remove a host from the hostgroup:\n" +#| " ipa hostgroup-remove-member --hosts=box2 baltimore\n" +#| "\n" +#| " Display a host group:\n" +#| " ipa hostgroup-show baltimore\n" +#| "\n" +#| " Delete a hostgroup:\n" +#| " ipa hostgroup-del baltimore\n" +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Groupes d'hôtes.\n" +"\n" +"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" +"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" +"\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" +"\n" +" Ajouter des membres à un groupe d'hôtes :\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Supprimer un hôte d'un groupe :\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Afficher un groupe d'hôtes :\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Supprimer un groupe d'hôtes :\n" +" ipa hostgroup-del baltimore\n" + +#, fuzzy +#| msgid "Objectclasses used to search for user entries in DS" +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" +"Classes d'objets à utiliser pour la recherche d'entrées utilisateurs dans DS" + +#, fuzzy +#| msgid "Objectclasses used to search for group entries in DS" +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "Classes d'objets à utiliser pour la recherche d'entrées groupe dans DS" + +#, fuzzy +#| msgid "Objectclasses to be ignored for user entries in DS" +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "Classes d'objets à ignorer pour des entrées utilisateur dans DS" + +#, fuzzy +#| msgid "Attributes to be ignored for user entries in DS" +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "Attributs à ignorer dans des entrées utilisateur dans DS" + +#, fuzzy +#| msgid "Objectclasses to be ignored for group entries in DS" +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "Classes d'objets à ignorer pour les entrées groupe dans DS" + +#, fuzzy +#| msgid "Attributes to be ignored for group entries in DS" +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "Attributs à ignorer dans les entrées groupe dans DS" + +#, fuzzy +#| msgid "groups to exclude from migration" +msgid "comma-separated list of groups to exclude from migration" +msgstr "groupes à exclure de la migration" + +#, fuzzy +#| msgid "users to exclude from migration" +msgid "comma-separated list of users to exclude from migration" +msgstr "utilisateurs à exclure de la migration" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Netgroups\n" +#| "\n" +#| "A netgroup is a group used for permission checking. It can contain both\n" +#| "user and host values.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new netgroup:\n" +#| " ipa netgroup-add --desc=\"NFS admins\" admins\n" +#| "\n" +#| " Add members to the netgroup:\n" +#| " ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +#| "\n" +#| " Remove a member from the netgroup:\n" +#| " ipa netgroup-remove-member --users=tuser2 admins\n" +#| "\n" +#| " Display information about a netgroup:\n" +#| " ipa netgroup-show admins\n" +#| "\n" +#| " Delete a netgroup:\n" +#| " ipa netgroup-del admins\n" +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" +"\n" +"Groupes réseau\n" +"\n" +"Un groupe réseau est un groupe utilisé pour la vérification des droits.\n" +"Il peut contenir à la fois des valeurs utilisateur et hôte.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe réseau :\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Ajouter des membres au groupe réseau :\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Retirer un membre du groupe réseau :\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Afficher les informations sur un groupe réseau :\n" +" ipa netgroup-show admins\n" +"\n" +" Supprimer un groupe réseau :\n" +" ipa netgroup-del admins\n" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +#, fuzzy +#| msgid "host groups to remove" +msgid "comma-separated list of netgroups to remove" +msgstr "groupes d'hôtes à supprimer" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions to grant(read, write, add, delete, all)" +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" +"Permissions à accorder (« read », « write », « add », « delete », « all »)" + +#, fuzzy +#| msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" +"type d'objet IPA (« user », « group », « host », « hostgroup », « service », " +"« netgroup »)" + +#, fuzzy +#| msgid "Member of a group" +msgid "Target members of a group" +msgstr "Membre d'un groupe" + +#, fuzzy +#| msgid "User group to apply permissions to (sets target)" +msgid "User group to apply permissions to" +msgstr "" +"Groupe d'utilisateurs auquel appliquer les permissions (définit « target »)" + +#, fuzzy +#| msgid "Number of privileges added" +msgid "comma-separated list of privileges to add" +msgstr "Nombre de privilèges ajoutés" + +#, fuzzy +#| msgid "Add a system permission without an ACI (internal command)" +msgid "Add a system permission without an ACI" +msgstr "Ajout d'une permission système sans ACI (commande interne)" + +#, fuzzy +#| msgid "Permission name" +msgid "Permission type" +msgstr "Nom de permission" + +#, fuzzy +#| msgid "Number of privileges removed" +msgid "comma-separated list of privileges to remove" +msgstr "Nombre de privilèges retirés" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Ping the remote IPA server to ensure it is running.\n" +#| "\n" +#| "The ping command sends an echo request to an IPA server. The server\n" +#| "returns its version information. This is used by an IPA client\n" +#| "to confirm that the server is available and accepting requests.\n" +#| "\n" +#| "The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +#| "If it does not respond then the client will contact any servers defined\n" +#| "by ldap SRV records in DNS.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Ping an IPA server:\n" +#| " ipa ping\n" +#| " ------------------------------------------\n" +#| " IPA server version 2.1.9. API version 2.20\n" +#| " ------------------------------------------\n" +#| "\n" +#| " Ping an IPA server verbosely:\n" +#| " ipa -v ping\n" +#| " ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +#| " ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/" +#| "xml'\n" +#| " -----------------------------------------------------\n" +#| " IPA server version 2.1.9. API version 2.20\n" +#| " -----------------------------------------------------\n" +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" +"\n" +"« Ping » sur un serveur IPA distant pour s'assurer de son fonctionnement.\n" +"\n" +"La commande « ping » envoie une requête « echo « au serveur IPA. Le serveur\n" +"renvoie ses informations de version. Ce mécanisme est utilisé par le client\n" +"IPA pour confirmer que le serveur est disponible et est en mesure " +"d'accepter\n" +"les requêtes.\n" +"\n" +"Le serveur indiqué par « xmlrpc_uri » dans « /etc/ipa/default.conf » est\n" +"contacté en premier. S'il ne répond pas alors le client contactera " +"n'importe\n" +"quel autre serveur défini dans les enregistrements SRV du DNS.\n" +"\n" +"EXEMPLES :\n" +"\n" +" « Ping » d'un serveur IPA :\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" « Ping » verbeux d'un serveur IPA :\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" + +msgid "comma-separated list of roles to add" +msgstr "" + +#, fuzzy +#| msgid "Comma separated encryption types list" +msgid "comma-separated list of permissions" +msgstr "Liste, séparée par des virgules, des types de chiffrement" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for users" +msgid "comma-separated list of roles to remove" +msgstr "" +"Une liste, séparée avec des virgules, des champs à explorer pour une " +"recherche d'utilisateurs" + +msgid "comma-separated list of privileges" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Self-service Permissions\n" +#| "\n" +#| "A permission enables fine-grained delegation of permissions. Access " +#| "Control\n" +#| "Rules, or instructions (ACIs), grant permission to permissions to " +#| "perform\n" +#| "given tasks such as adding a user, modifying a group, etc.\n" +#| "\n" +#| "A Self-service permission defines what an object can change in its own " +#| "entry.\n" +#| "\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a self-service rule to allow users to manage their address (using " +#| "Bash\n" +#| " brace expansion):\n" +#| " ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +#| "st} \"Users manage their own address\"\n" +#| "\n" +#| " When managing the list of attributes you need to include all attributes\n" +#| " in the list, including existing ones.\n" +#| " Add telephoneNumber to the list (using Bash brace expansion):\n" +#| " ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +#| "\"Users manage their own address\"\n" +#| "\n" +#| " Display our updated rule:\n" +#| " ipa selfservice-show \"Users manage their own address\"\n" +#| "\n" +#| " Delete a rule:\n" +#| " ipa selfservice-del \"Users manage their own address\"\n" +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Permissions de libre service\n" +"\n" +"Une permission permet d'affiner une délégation de permissions. Les règles " +"ou\n" +"instructions de contrôle d'accès (ACI) accordent la permission de donner " +"les\n" +"permissions d'effectuer des tâches données comme ajouter un utilisateur,\n" +"modifier un groupe, etc.\n" +"\n" +"Une permission de libre service définit ce qu'un objet peut modifier dans " +"sa\n" +"propre entrée.\n" +"\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une règle de libre service permettant aux utilisateurs de gérer\n" +"leurs adresses (avec les extensions entre accolades de Bash) :\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" En gérant les listes d'attributs, vous devez incorporer tous les attributs\n" +"dans la liste, y compris les existants.\n" +" Ajouter « telephoneNumber » à la liste (avec extension entre accolades " +"Bash) :\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Afficher la règle modifiée :\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Supprimer une règle :\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Services\n" +#| "\n" +#| "A IPA service represents a service that runs on a host. The IPA service\n" +#| "record can store a Kerberos principal, an SSL certificate, or both.\n" +#| "\n" +#| "An IPA service can be managed directly from a machine, provided that\n" +#| "machine has been given the correct permission. This is true even for\n" +#| "machines other than the one the service is associated with. For example,\n" +#| "requesting an SSL certificate using the host service principal " +#| "credentials\n" +#| "of the host. To manage a service using host credentials you need to\n" +#| "kinit as the host:\n" +#| "\n" +#| " # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +#| "\n" +#| "Adding an IPA service allows the associated service to request an SSL\n" +#| "certificate or keytab, but this is performed as a separate step; they\n" +#| "are not produced as a result of adding the service.\n" +#| "\n" +#| "Only the public aspect of a certificate is stored in a service record;\n" +#| "the private key is not stored.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new IPA service:\n" +#| " ipa service-add HTTP/web.example.com\n" +#| "\n" +#| " Allow a host to manage an IPA service certificate:\n" +#| " ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +#| " ipa role-add-member --hosts=web.example.com certadmin\n" +#| "\n" +#| " Override a default list of supported PAC types for the service:\n" +#| " ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +#| "\n" +#| " A typical use case where overriding the PAC type is needed is NFS.\n" +#| " Currently the related code in the Linux kernel can only handle " +#| "Kerberos\n" +#| " tickets up to a maximal size. Since the PAC data can become quite " +#| "large it\n" +#| " is recommended to set --pac-type=NONE for NFS services.\n" +#| "\n" +#| " Delete an IPA service:\n" +#| " ipa service-del HTTP/web.example.com\n" +#| "\n" +#| " Find all IPA services associated with a host:\n" +#| " ipa service-find web.example.com\n" +#| "\n" +#| " Find all HTTP services:\n" +#| " ipa service-find HTTP\n" +#| "\n" +#| " Disable the service Kerberos key and SSL certificate:\n" +#| " ipa service-disable HTTP/web.example.com\n" +#| "\n" +#| " Request a certificate for an IPA service:\n" +#| " ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" +"\n" +"Services\n" +"\n" +"Un service IPA représente un service qui s'exécute sur un hôte. " +"L'enregistrement du\n" +"service IPA peut contenir un principal Kerberos, un certificat SSL ou les " +"deux.\n" +"\n" +"Un service IPA peut être directement géré à partir d'une machine, pour\n" +"autant que des permissions adéquates aient été données à la machine. Ceci\n" +"est vrai même pour les machines autres que celle à laquelle le service est\n" +"associé. Par exemple, demander un certificat SSL en utilisant les\n" +"justificatifs d'identité du principal du service de l'hôte. Pour gérer un\n" +"service en utilisant les références de l'hôte, vous devrez exécuter\n" +"« kinit » en tant qu'hôte :\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Ajouter un service IPA permet au service associé de demander un certificat\n" +"SSL ou un tableau de clés, mais cela est réalisé dans une étape distincte ;\n" +"cela n'est pas le résultat de l'ajout du service.\n" +"\n" +"Seule la composante publique du certificat est stockée dans un\n" +"enregistrement de service ; la clé privée n'y est pas enregistrée.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau service IPA :\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Autoriser un hôte à gérer un certificat de service IPA :\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Écraser la liste par défaut des types PAC pris en charge pour le service :\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" NFS est un cas classique où la surcharge du type PAC est nécessaire.\n" +" Actuellement, le code relatif à cette fonction dans le noyau Linux ne " +"gère\n" +" les tickets Kerberos que jusqu'à une taille maximale donnée. Comme les\n" +" données PAC peuvent devenir bien plus grandes, il est recommandé de " +"fixer\n" +" « --pac-type=NONE » pour les services NFS.\n" +"\n" +" Supprimer un service IPA :\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Trouver tous les services IPA associés à un hôte :\n" +" ipa service-find web.example.com\n" +"\n" +" Trouver tous les service HTTP :\n" +" ipa service-find HTTP\n" +"\n" +" Désactiver la clé Kerberos et le certificat SSL d'un service :\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Demander un certificat pour un service IPA :\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" + +#, fuzzy +#| msgid "" +#| "Override default list of supported PAC types. Use 'NONE' to disable PAC " +#| "support for this service, e.g. this might be necessary for NFS services." +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" +"Surcharger la liste par défaut des types PAC pris en charge. Utiliser « NONE " +"» pour désactiver la prise en charge PAC pour ce service, ce qui peut être " +"nécessaire pour les services NFS par exemple." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of Sudo Commands\n" +#| "\n" +#| "Manage groups of Sudo Commands.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new Sudo Command Group:\n" +#| " ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +#| "\n" +#| " Remove a Sudo Command Group:\n" +#| " ipa sudocmdgroup-del admincmds\n" +#| "\n" +#| " Manage Sudo Command Group membership, commands:\n" +#| " ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/" +#| "bin/vim admincmds\n" +#| "\n" +#| " Manage Sudo Command Group membership, commands:\n" +#| " ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +#| "\n" +#| " Show a Sudo Command Group:\n" +#| " ipa group-show localadmins\n" +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" +"\n" +"Groupes de commandes sudo\n" +"\n" +"Administre les groupes de commandes sudo.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe de commandes sudo :\n" +" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" +"\n" +" Supprimer un groupe de commandes sudo :\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Afficher un groupe de commandes sudo :\n" +" ipa group-show localadmins\n" + +#, fuzzy +#| msgid "sudo commands to add" +msgid "comma-separated list of sudo commands to add" +msgstr "commandes sudo à ajouter" + +#, fuzzy +#| msgid "sudo commands to remove" +msgid "comma-separated list of sudo commands to remove" +msgstr "commandes sudo à supprimer" + +msgid "Active directory domain administrator's password" +msgstr "Mot de passe de l'administrateur du domaine Active Directory" + +#, fuzzy +#| msgid "GECOS" +msgid "GECOS field" +msgstr "GECOS" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Add new ID range.\n" +#| "\n" +#| " To add a new ID range you always have to specify\n" +#| "\n" +#| " --base-id\n" +#| " --range-size\n" +#| "\n" +#| " Additionally\n" +#| "\n" +#| " --rid-base\n" +#| " --secondary-rid-base\n" +#| "\n" +#| " may be given for a new ID range for the local domain while\n" +#| "\n" +#| " --rid-base\n" +#| " --dom-sid\n" +#| "\n" +#| " must be given to add a new range for a trusted AD domain.\n" +#| "\n" +#| " WARNING:\n" +#| "\n" +#| " DNA plugin in 389-ds will allocate IDs based on the ranges configured " +#| "for the\n" +#| " local domain. Currently the DNA plugin *cannot* be reconfigured " +#| "itself based\n" +#| " on the local ranges set via this family of commands.\n" +#| "\n" +#| " Manual configuration change has to be done in the DNA plugin " +#| "configuration for\n" +#| " the new local range. Specifically, The dnaNextRange attribute of " +#| "'cn=Posix\n" +#| " IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +#| "has to be\n" +#| " modified to match the new range.\n" +#| " " +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +"Ajouter une nouvelle plage d'identifiants.\n" +"\n" +" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " +"préciser\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" En outre,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " +"que\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " +"confiance.\n" +"\n" +" AVERTISSEMENT :\n" +"\n" +" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" +" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" +" lui-même reconfiguré selon les plages locales définies par " +"l'intermédiaire\n" +" de cette famille de commandes.\n" +"\n" +" Un changement manuel de configuration doit être opéré dans la " +"configuration\n" +" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" +" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " +"Assignment Plugin », « cn=plugins », « cn=config »\n" +" doivent être modifiés pour correspondre à cette nouvelle plage.\n" +" " + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "A comma-separated list of fields to search in when searching for groups" +msgid "comma-separated list of sudo command groups to add" +msgstr "" +"Une liste séparée par des virgules des champs à explorer pour une recherche " +"de groupes" + +#, fuzzy +#| msgid "sudo commands to remove" +msgid "comma-separated list of sudo command groups to remove" +msgstr "commandes sudo à supprimer" + +msgid "Additional instructions:" +msgstr "Instructions complémentaires :" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"Le numéro de version de l'API n'a pas été envoyé, la compatibilité " +"ascendante n'est pas garantie. La version de l'API du serveur est supposée " +"être %(server_version)s" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"La sémantique de redirection DNS a été modifié depuis IPA 4.0.\n" +"Utilisez à la place les redirections de zones (dnsforwardzone-*).\n" +"Pour plus de détails, lisez la documentation." + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"La prise en charge de DNSSEC est expérimentale.\n" +"%(additional_info)s" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "L'option « %(option)s » est obsolète. %(additional_info)s" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"La sémantique de %(label)s a changé. %(current_behavior)s\n" +"%(hint)s" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "Serveur DNS %(server)s : %(error)s." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Le serveur DNS %(server)s ne prend pas en charge : %(error)s.\n" +"Si la validation DNSSEC est activée sur le ou les serveurs IPA, merci de la " +"désactiver." + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"La zone redirigiée « %(fwzone)s » n'est pas en fonction car il lui manque " +"une délégation NS correcte dans la zone faisant autorité « %(authzone)s ». " +"Merci d'ajouter les enregistrement NS « %(ns_rec)s » à la zone " +"« %(authzone)s »." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Le serveur DNS %(server)s ne prend pas en charge EDNS0 (RFC 6891) : " +"%(error)s.\n" +"Si la validation DNSSEC est activée sur le ou les serveurs, merci de la " +"désactiver." + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Échec de la validation DNSSEC : %(error)s.\n" +"Merci de vérifier votre configuration DNSSEC ou de désactiver la validation " +"DNSSEC sur tous les serveurs IPA." + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être créé " +"(%(error)s).\n" +"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de créer " +"manuellement l'enregistrement, qui doit contenir la valeur suivante : " +"« %(realm)s »" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être supprimé " +"(%(error)s).\n" +"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de le supprimer " +"manuellement." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Aucune clé maîtresse DNSSEC n'est installée. La signature de zone DNSSEC ne " +"pourra pas fonctionner tant qu'une clé maîtresse n'est installée." + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"Le nom d'enregistrement relatif « %(record)s » contient le nom de la zone " +"« %(zone)s » comme suffixe, ce qui aboutit au FQDN « %(fqdn)s ». Cela " +"constitue généralement une erreur du fait du point final manquant à la fin " +"du nom indiqué." + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "La commande « %(command)s » est obsolète. %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Les résultats de la recherche ont été tronqués : %(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Votre relation d'approbation avec %(domain)s est cassée. Merci de la recréer " +"à l'aide de « ipa trust-add »." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" +"Le ou les enregistrements DNS de l'hôte %(host)s n'ont pu être supprimés. " +"(%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"La politique de transfert entre en conflit avec certaines zones automatiques " +"vides. Les requêtes pour les zones spécifiées dans la RFC 6303 ignoreront le " +"transfert et la récursion et résulteront toujours en des réponses NXDOMAIN. " +"Pour surcharger ce comportement, utiliser la politique de transfert « only »." + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"Échec de la à jour de l'enregistrement du système « %(record)s », erreur : " +"%(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA ne gère pas la zone %(zone)s, merci de modifier vos serveurs " +"DNS manuellement" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Échec de la mise à jour automatique des enregistrements DNS du système. " +"Merci de relancer la mise à jour des enregistrements du système manuellement " +"pour obtenir la liste des enregistrements manquants." + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"Le service %(service)s doit être redémarré sur le serveur IPA %(server)s " +"pour permettre la prise en compte de la nouvelle configuration." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"Aucun serveur DNS dans l'emplacement IPA %(location)s. Sans serveur DNS, " +"l'emplacement ne fonctionnera pas comme attendu." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "The character %(char)r is not allowed." +msgid "The certificate for %(ca)s is not available on this server." +msgstr "Le caractère « %(char)r » n'est pas autorisé." + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d variables" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d greffon chargé" +msgstr[1] "%(count)d greffons chargés" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Entrer à nouveau %(label)s pour validation :" + +msgid "Passwords do not match!" +msgstr "Les mots de passe ne correspondent pas !" + +msgid "No matching entries found" +msgstr "Aucune entrée correspondante trouvée" + +msgid "Topic or Command" +msgstr "Thème ou commande" + +msgid "The topic or command name." +msgstr "Le nom du thème ou de la commande." + +msgid "Topic commands:" +msgstr "Commandes du thème :" + +msgid "To get command help, use:" +msgstr "Pour obtenir de l'aide, utiliser :" + +msgid " ipa --help" +msgstr " ipa --help" + +msgid "Command name" +msgstr "Nom de commande" + +msgid "Positional arguments" +msgstr "Arguments positionnels" + +#, python-format +msgid "Same as --%s" +msgstr "Identique à --%s" + +msgid "Deprecated options" +msgstr "Options obsolètes" + +msgid "No file to read" +msgstr "Pas de fichier à lire" + +msgid "A dictionary representing an LDAP entry" +msgstr "Un annuaire représentant une entrée LDAP" + +msgid "A list of LDAP entries" +msgstr "Une liste d'entrées LDAP" + +msgid "All commands should at least have a result" +msgstr "Toutes les commandes doivent avoir au moins un résultat" + +msgid "Results are truncated, try a more specific search" +msgstr "Résultats tronqués, essayer un recherche plus précise" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Option inconnue : %(option)s" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Version client. Utilisée pour déterminer si le serveur accepte la requête." + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "Client %(cver)s incompatible avec le serveur %(sver)s à « %(server)s »" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "Erreur %(code)d inconnue renvoyée par %(server)s : %(error)s" + +msgid "an internal error has occurred" +msgstr "une erreur interne est survenue" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "une erreur interne est survenue sur le serveur à « %(server)s »" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "commande « %(name)s » inconnue" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "erreur sur le serveur « %(server)s » : %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "impossible de se connecter à « %(uri)s » : %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Requête JSON-RPC invalide : %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "erreur de conversion des données lors du transport XML-RPC : %(error)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Référence HTTP manquante ou invalide, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Erreur Kerberos : %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "Justificatifs Kerberos non reçus" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Service « %(service)s » introuvable dans la base de données Kerberos" + +msgid "No credentials cache found" +msgstr "Cache des justificatifs d'identité introuvable" + +msgid "Ticket expired" +msgstr "Ticket périmé" + +msgid "Credentials cache permissions incorrect" +msgstr "Droits d'accès incorrects au cache des justificatifs d'identité" + +msgid "Bad format in credentials cache" +msgstr "Mauvais format de cache des justificatifs d'identité" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Impossible de résoudre le KDC pour le domaine demandé" + +msgid "Session error" +msgstr "Erreur de session" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "Le principal %(principal)s n'a pas pu être authentifié : %(message)s" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Accès insuffisant : %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "la commande « %(name)s » ne prend pas d'argument" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "la commande « %(name)s » prend au plus %(count)d argument" +msgstr[1] "la commande « %(name)s » prend au plus %(count)d arguments" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "les arguments et options se chevauchent : %(names)s" + +#, python-format +msgid "'%(name)s' is required" +msgstr "« %(name)s » est requis" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "« %(name)s » invalide : %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "l'API n'a pas un tel espace de noms : « %(name)s »" + +msgid "Passwords do not match" +msgstr "Les mots de passe ne correspondent pas" + +msgid "Command not implemented" +msgstr "Commande non implémentée" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "Le client n'est pas configuré. Lancer « ipa-client-install »." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Impossible d'obtenir %(name)s de façon interactive" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "La commande « %(name)s » a été abandonnée." + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" +"Le domaine « %(domain)s » n'est pas un domaine racine pour la forêt " +"« %(forest)s »" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Cette entrée existe déjà" + +msgid "You must enroll a host in order to create a host service" +msgstr "Vous devez enregistrer un hôte afin de créer un service" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Le principal de service n'est pas de la forme : service/fully-qualified host " +"name: %(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Le domaine du principal ne correspond pas au domaine de ce serveur IPA" + +msgid "This command requires root access" +msgstr "Cette commande requiert un accès administrateur" + +msgid "This is already a posix group" +msgstr "Ce groupe est déjà de type POSIX" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "Le principal n'est pas de la forme user@REALM : « %(principal)s »" + +msgid "This entry is already enabled" +msgstr "Cette entrée est déjà activée" + +msgid "This entry is already disabled" +msgstr "Cette entrée est déjà désactivée" + +msgid "This entry cannot be enabled or disabled" +msgstr "Cette entrée ne peut être activée ou désactivée" + +msgid "This entry is not a member" +msgstr "Cette entrée n'est pas un membre" + +msgid "A group may not be a member of itself" +msgstr "Un groupe ne peut être membre de lui-même" + +msgid "This entry is already a member" +msgstr "Cette entrée est déjà membre" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Échec du décodage « base64 » : %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Un groupe ne peut être ajouté comme membre de lui-même" + +msgid "The default users group cannot be removed" +msgstr "Le groupe par défaut ne peut être supprimé" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"La suppression d'un groupe géré est interdite. Il doit d'abord être détaché." + +msgid "A managed group cannot have a password policy." +msgstr "Un groupe géré ne peut pas avoir de politique de mot de passe." + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s' ne possède pas de certificat." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" +"Impossible de créer un groupe privé. Un groupe '%(group)s' existe déjà." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Un problème est survenu en vérifiant que tous les membres étaient %(verb)s : " +"%(exc)s" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s ne contient pas '%(value)s'" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"Le critère de recherche n'est pas suffisamment précis. Une valeur attendue, " +"mais %(found)d trouvées." + +msgid "This group already allows external members" +msgstr "Ce groupe autorise déjà des membres externes" + +msgid "This group cannot be posix because it is external" +msgstr "Ce groupe ne peut être de type POSIX car il est externe" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" +"Ce groupe est déjà de type POSIX et ne peut être converti en groupe externe" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Arrêt brutal de la suppression du serveur : %(reason)s." + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, fuzzy, python-format +#| msgid "request failed with HTTP status %d" +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "échec de la requête avec le code état HTTP %d" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(attr)s does not contain '%(value)s'" +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s ne contient pas '%(value)s'" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "pas de commande ou de sujet d'aide pour « %(topic)s »" + +msgid "change collided with another change" +msgstr "la modification s'est heurtée à une autre" + +msgid "no modifications to be performed" +msgstr "pas de modification à effectuer" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s : %(info)s" + +msgid "limits exceeded for this query" +msgstr "limites dépassées pour cette requête" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "la modification de clé principale n'est pas autorisée" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s : une seule valeur autorisée." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s : syntaxe invalide." + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Filtre de recherche invalide %(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "Interdit sur une entrée qui n'est pas une feuille" + +msgid "LDAP timeout" +msgstr "Délai d'expiration LDAP" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" +"Délai échu pour la tâche LDAP %(task)s, DN de la tâche : « %(task_dn)s »" + +msgid "Configured time limit exceeded" +msgstr "Limite configurée de durée dépassée" + +msgid "Configured size limit exceeded" +msgstr "Limite configurée de taille dépassée" + +msgid "Configured administrative server limit exceeded" +msgstr "Limite configurée côté serveur dépassée" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "L'opération de certification ne peut être effectuée : %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Erreur de format de certificat : %(error)s" + +msgid "Already registered" +msgstr "Déjà enregistré" + +msgid "Not registered yet" +msgstr "Pas encore enregistré" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s ne peut pas être supprimé car %(label)s %(dependent)s le requiert" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s ne peut être supprimé ou désactivé étant le dernier membre de " +"%(container)s %(label)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s ne peut être supprimé ou modifié : %(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "le certificat %(name)s est invalide" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" +"L'hôte « %(hostname)s » n'a pas d'enregistrement DNS de type A/" +"AAAA correspondant" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" +"Échec de vérification du DNS : {%(expected)s} attendu, {%(got)s} obtenu" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "type incorrect" + +msgid "Only one value is allowed" +msgstr "Une seule valeur est autorisée" + +msgid "this option is deprecated" +msgstr "cette option est obsolète" + +msgid "must be True or False" +msgstr "doit être « True » ou « False »" + +msgid "must be an integer" +msgstr "doit être un nombre entier" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "doit être supérieur ou égal à %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "doit être inférieur ou égal à %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "doit être un nombre décimal" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "doit valoir a minima %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "doit valoir au plus %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" +"La classe de nombres « %(cls)s » n'est pas dans la liste des classes de " +"nombres autorisées : %(allowed)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "doit correspondre au motif « %(pattern)s »" + +msgid "must be binary data" +msgstr "doivent être des données binaires" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "doit être d'au moins %(minlength)d octets" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "peut être d'au plus %(maxlength)d octets" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "doit être d'exactement %(length)d octets" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "must be a certificate" +msgstr "Révoquer un certificat." + +#, fuzzy +#| msgid "Submit a certificate signing request." +msgid "must be a certificate signing request" +msgstr "Soumettre une demande de signature de certificat." + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Échec dans le décodage du « Certificate Signing Request » : %s" + +msgid "must be Unicode text" +msgstr "doit être un texte Unicode" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Les espaces de début et de fin ne sont pas autorisées" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "doit être d'au moins %(minlength)d caractères" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "peut être d'au plus %(maxlength)d caractères" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "doit être d'exactement %(length)d caractères" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "Le caractère « %(char)r » n'est pas autorisé." + +#, python-format +msgid "must be '%(value)s'" +msgstr "doit être « %(value)s »" + +#, python-format +msgid "must be one of %(values)s" +msgstr "doit être une valeur parmi %(values)s" + +msgid "must be datetime value" +msgstr "doit être une valeur date/heure" + +msgid "does not match any of accepted formats: " +msgstr "ne correspond à aucun des formats acceptés :" + +msgid "incomplete time value" +msgstr "valeur de temps incomplète" + +msgid "must be DNS name" +msgstr "doit être un nom de DNS" + +msgid "must be absolute" +msgstr "doit être absolu" + +msgid "must be relative" +msgstr "doit être relatif" + +msgid "must be dictionary" +msgstr "doit être un dictionnaire" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "must be Kerberos principal" +msgstr "Principal Kerberos" + +#, fuzzy, python-format +#| msgid "Malformed principal" +msgid "Malformed principal: '%(value)s'" +msgstr "Principal malformé" + +#, fuzzy +#| msgid "Service principal alias" +msgid "Service principal is required" +msgstr "Alias de principal de service" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(filename)s: file not found" +msgstr "Fichier %(file)s introuvable" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "Impossible d'analyser le principal\n" + +msgid "any of the configured servers" +msgstr "n'importe quel serveur configuré" + +#, fuzzy +#| msgid "The number of times to retry authentication" +msgid "Exceeded number of tries to forward a request." +msgstr "Le nombre de fois autorisées pour tenter une authentification" + +msgid "Filename is empty" +msgstr "Le nom de fichier est vide" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "Autorisation refusée : %(file)s" + +msgid "empty DNS label" +msgstr "libellé DNS vide" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "un libellé DNS ne peut pas dépasser 63 caractères" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"uniquement lettres, nombres, %(chars)s sont autorisés. Les noms DNS ne " +"peuvent commencer ou se terminer par %(chars2)s" + +#, fuzzy +#| msgid "Host is not supported" +msgid "single label {}s are not supported" +msgstr "L'hôte n'est pas pris en charge" + +msgid "too many '@' characters" +msgstr "trop de caractères « @ »" + +#, fuzzy +#| msgid "DNS label cannot be longer that 63 characters" +msgid "cannot be longer that {} characters" +msgstr "un libellé DNS ne peut pas dépasser 63 caractères" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "le nom d'hôte contient un libellé vide (plusieurs points consécutifs)" + +msgid "not fully qualified" +msgstr "pas pleinement qualifié" + +msgid "invalid SSH public key" +msgstr "clé publique SSH invalide" + +msgid "options are not allowed" +msgstr "les options ne sont pas autorisées" + +msgid "invalid hostmask" +msgstr "masque d'hôte invalide" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "requête « %(owner)s %(rtype)s » : %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "requête « %(owner)s %(rtype)s » avec EDNS0: %(error)s" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" +"la réponse à la requête « %(owner)s %(rtype)s » ne comporte pas de " +"signatures DNSSEC (pas de données RRSIG)" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"la validation DNSSEC de l'enregistrement « %(owner)s %(rtype)s » a échoué " +"sur le serveur %(ip)s" + +msgid "invalid escape code in domain name" +msgstr "code d'échappement invalide dans le nom du domaine" + +msgid "domain name cannot be longer than 255 characters" +msgstr "le nom de domaine ne peut pas dépasser 255 caractères" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "un libellé de DNS ne peut pas dépasser 63 caractères" + +msgid "invalid domain name" +msgstr "nom de domaine invalide" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" +"le nom de domaine « %(domain)s » doit être normalisé à : %(normalized)s" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "nom de domaine invalide : %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"version d'adresse IP invalide (est %(value)d, doit être %(required_value)d) !" + +msgid "invalid IP address format" +msgstr "format d'adresse IP invalide" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s n'est pas un port valide" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Échec de la récupération de la chaîne de certificat de l'AC : %s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "échec de la requête avec le code état HTTP %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Échec de la récupération de l'état de l'AC : %s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Échec de la récupération de l'état de l'AC avec l'état %d" + +#, python-format +msgid "objectclass %s not found" +msgstr "classe d'objet %s introuvable" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "Impossible de communiquer avec le CMS (état %d)" + +#, fuzzy, python-format +#| msgid "Replication agreement enabled" +msgid "Replication agreement for %(hostname)s not found" +msgstr "Agrément de réplication activé" + +msgid "Failed to authenticate to CA REST API" +msgstr "Échec de l'authentification auprès de l'API REST de l'AC" + +msgid "automount location" +msgstr "emplacement de montage automatique" + +msgid "automount locations" +msgstr "emplacements de montage automatique" + +msgid "Automount Locations" +msgstr "Emplacements de montage automatique" + +msgid "Automount Location" +msgstr "Emplacement de montage automatique" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Emplacement « automount » « %(value)s » ajouté" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Emplacement « automount » « %(value)s » supprimé" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d emplacement « automount » correspondant" +msgstr[1] "%(count)d emplacements « automount » correspondants" + +msgid "automount map" +msgstr "carte « automount »" + +msgid "automount maps" +msgstr "cartes « automount »" + +msgid "Automount Maps" +msgstr "Cartes « automount »" + +msgid "Automount Map" +msgstr "Carte « automount »" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Carte « automount » « %(value)s » ajoutée" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Carte « automount » « %(value)s » supprimée" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Carte « automount » « %(value)s » modifiée" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d carte « automount » correspondante" +msgstr[1] "%(count)d cartes « automount » correspondantes" + +msgid "Automount key object." +msgstr "Objet clé « automount »." + +msgid "automount key" +msgstr "clé « automount »" + +msgid "automount keys" +msgstr "clés « automount »" + +msgid "Automount Keys" +msgstr "Clés « automount »" + +msgid "Automount Key" +msgstr "Clé « automount »" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" +"La paire « key/info » doit être unique. Une clé nommée %(key)s avec l'info" +"%(info)s existe déjà." + +#, python-format +msgid "key named %(key)s already exists" +msgstr "la clé nommée %(key)s existe déjà" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "La clé « automount » %(key)s avec l'info %(info)s n'existe pas" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" +"Plus d'une entrée avec la clé %(key)s trouvée, utilisez --info pour " +"sélectionner l'entrée donnée." + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Clé « automount » « %(value)s » créée" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Carte « automount » indirect « %(value)s » créée" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" +"point de montage relatif à la carte parente, ne peut pas commencer par /" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Clé « automount » « %(value)s » supprimée" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Clé « automount » « %(value)s » modifiée" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d clé « automount » correspondante" +msgstr[1] "%(count)d clés « automount » correspondantes" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Gestion des profils de certificats\n" +"\n" +"Les profils de certificats sont utilisés par l'autorité de certification " +"(AC) dans\n" +"la signature de certificats afin de déterminer si une demande de signature " +"de\n" +"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " +"quelles\n" +"fonctionnalités et extensions doivent figurer dans le certificat.\n" +"\n" +"Le format du profil de certificat est un format de liste de propriétés qui " +"sera\n" +"compris par une autorité de certification Dogtag ou Red Hat Certificate " +"System.\n" +"\n" +"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" +"\n" +"Un identifiant de profil est une chaîne de caractères sans espaces ni " +"caractère de\n" +"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " +"chiffres et\n" +"de caractère souligné (« _ »).\n" +"\n" +"EXEMPLES :\n" +"\n" +" Importer un profil qui ne stockera pas les certificats émis :\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Supprimer un profil de certificat :\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Afficher les informations sur un profil :\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Enregistrer la configuration du profil dans un fichier :\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Rechercher des profils ne stockant pas les certificats :\n" +" ipa certprofile-find --store=false\n" +"\n" +"FORMAT DE LA CONFIGURATION DE PROFIL :\n" +"\n" +"Le format de configuration de profil est un format brut de liste de \n" +"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" +"pas pris en charge.\n" +"\n" +"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" +"\n" +"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " +"doit\n" +" correspondre à l'identifiant donné sur la ligne de commande.\n" +"\n" +"- Le champ « classId » doit être « caEnrollImpl »\n" +"\n" +"- Le champ « auth.instance_id  doit être « raCertAuth »\n" +"\n" +"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " +"doivent \n" +" être utilisées.\n" + +msgid "CA is not configured" +msgstr "L'AC n'est pas configurée" + +msgid "invalid Profile ID" +msgstr "Identifiant de profil invalide" + +msgid "Certificate Profile" +msgstr "Profil de certificat" + +msgid "Certificate Profiles" +msgstr "Profils de certificats" + +msgid "Profile configuration" +msgstr "Configuration de profil" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d profil correspondant" +msgstr[1] "%(count)d profils correspondants" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Profil « %(value)s » importé" + +#, fuzzy, python-format +#| msgid "Input data specified multiple times" +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "Les données en entrée ont été indiquées plusieurs fois" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"L'identifiant de profil « %(cli_value)s » ne correspond pas aux données du " +"profil « %(file_value)s »" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Profil « %(value)s » supprimé" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Le profil prédéfini « %(profile_id)s » ne peut être supprimé" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Profil de certificat « %(value)s » modifié" + +msgid "Certificate profiles cannot be renamed" +msgstr "Les profils de certificats ne peuvent être renommés" + +#, fuzzy +#| msgid "" +#| "Insufficient privilege to create a certificate with subject alt name '%s'." +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" +"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " +"alternatif." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage CA ACL rules.\n" +#| "\n" +#| "This plugin is used to define rules governing which principals are\n" +#| "permitted to have certificates issued using a given certificate\n" +#| "profile.\n" +#| "\n" +#| "PROFILE ID SYNTAX:\n" +#| "\n" +#| "A Profile ID is a string without spaces or punctuation starting with a " +#| "letter\n" +#| "and followed by a sequence of letters, digits or underscore (\"_\").\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Create a CA ACL \"test\" that grants all users access to the\n" +#| " \"UserCert\" profile:\n" +#| " ipa caacl-add test --usercat=all\n" +#| " ipa caacl-add-profile test --certprofiles UserCert\n" +#| "\n" +#| " Display the properties of a named CA ACL:\n" +#| " ipa caacl-show test\n" +#| "\n" +#| " Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +#| " ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +#| " ipa caacl-add-user alice_dnp3 --user=alice\n" +#| "\n" +#| " Disable a CA ACL:\n" +#| " ipa caacl-disable test\n" +#| "\n" +#| " Remove a CA ACL:\n" +#| " ipa caacl-del test\n" +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Gestion des règles de LCA de l'AC.\n" +"\n" +"Ce grffon est utilisé pour définir les règles gouvernant quels principaux \n" +"sont autorisés à se voir attribuer des certificats à l'aide d'un profil\n" +"donné de certificat.\n" +"\n" +"SYNTAXE D'IDENTIFIANT DE PROFIL :\n" +"\n" +"Un identifiant de profil est une chaîne sans espace ni ponctuation débutant " +"par\n" +"une lettre et suivie d'une séquence de lettres, chiffres, ou caractère " +"souligné (\"_\").\n" +"\n" +"EXEMPLES :\n" +"\n" +" Créer une LCA d'AC « test » autorisant tous les utilisateurs à accéder \n" +" au profil « UserCert » :\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Afficher les propriétés d'une LCA d'AC nommée :\n" +" ipa caacl-show test\n" +"\n" +" Créer une LCA d'AC autorisant l'utilisatrice « alice » à utiliser le " +"profile « DNP3 » :\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Désactiver une LCA d'AC :\n" +" ipa caacl-disable test\n" +"\n" +" Supprimer une LCA d'AC :\n" +" ipa caacl-del test\n" + +msgid "CA ACL" +msgstr "LCA de l'AC" + +msgid "CA ACLs" +msgstr "LCA de l'AC" + +msgid "CA category" +msgstr "Catégorie d'AC" + +msgid "CA category the ACL applies to" +msgstr "Catégorie d'AC à laquelle l'ACL s'applique" + +msgid "CAs" +msgstr "AC" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » créée" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » supprimée" + +msgid "default CA ACL can be only disabled" +msgstr "La LCA d'AC par défaut ne peut qu'être désactivée" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » modifiée" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"une catégorie d'AC ne peut pas être définie à « all » tant qu'il reste des " +"AC autorisées" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" +"la catégorie de profil ne peut être positionnée à 'all' tant qu'il existe " +"des profils autorisés" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" +"une catégorie d'utilisateurs ne peut pas être définie à « all » tant qu'il " +"reste des utilisateurs autorisés" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"une catégorie d'hôtes ne peut pas être définie à « all » tant qu'il reste " +"des hôtes autorisés" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"une catégorie de services ne peut pas être définie à « all » tant qu'il " +"reste des services autorisés" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "%(count)d LCA d'AC correspondante" +msgstr[1] "%(count)d LCA d'AC correspondantes" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » activée" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » désactivée" + +#, python-format +msgid "%i user or group added." +msgstr "%i utilisateur ou groupe ajouté." + +#, python-format +msgid "%i users or groups added." +msgstr "%i utilisateurs ou groupes ajoutés." + +msgid "users cannot be added when user category='all'" +msgstr "" +"des utilisateurs ne peuvent pas être ajoutés quand la catégorie de " +"l'utilisateur est « all »" + +#, python-format +msgid "%i user or group removed." +msgstr "%i utilisateur ou groupe supprimé." + +#, python-format +msgid "%i users or groups removed." +msgstr "%i utilisateurs ou groupes supprimés." + +#, python-format +msgid "%i host or hostgroup added." +msgstr "%i hôte ou groupe d'hôtes ajouté." + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "%i hôtes ou groupes d'hôtes ajoutés." + +msgid "hosts cannot be added when host category='all'" +msgstr "" +"des hôtes ne peuvent pas être ajoutés quand la catégorie de l'hôte est " +"« all »" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "%i hôte ou groupe d'hôtes supprimé." + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "%i hôtes ou groupes d'hôtes supprimés." + +#, python-format +msgid "%i service added." +msgstr "%i service ajouté." + +#, python-format +msgid "%i services added." +msgstr "%i services ajoutés." + +msgid "services cannot be added when service category='all'" +msgstr "" +"aucun service ne peut être ajouté quand la catégorie de services est « all »" + +#, python-format +msgid "%i service removed." +msgstr "%i service supprimé." + +#, python-format +msgid "%i services removed." +msgstr "%i services supprimés." + +#, python-format +msgid "%i profile added." +msgstr "%i profil ajouté." + +#, python-format +msgid "%i profiles added." +msgstr "%i profils ajoutés." + +msgid "profiles cannot be added when profile category='all'" +msgstr "" +"des profils ne peuvent pas être ajoutés quand la catégorie de profil est " +"« all »" + +#, python-format +msgid "%i profile removed." +msgstr "%i profil supprimé." + +#, python-format +msgid "%i profiles removed." +msgstr "%i profils supprimés." + +msgid "Add CAs to a CA ACL." +msgstr "Ajouter des AC à une LCA d'AC" + +#, python-format +msgid "%i CA added." +msgstr "%i AC ajoutée." + +#, python-format +msgid "%i CAs added." +msgstr "%i AC ajoutées." + +msgid "CAs cannot be added when CA category='all'" +msgstr "" +"des AC ne peuvent pas être ajoutées quand la catégorie de l'AC est « all »" + +msgid "Remove CAs from a CA ACL." +msgstr "Supprimer des AC d'une LCA d'AC" + +#, python-format +msgid "%i CA removed." +msgstr "%i AC supprimée." + +#, python-format +msgid "%i CAs removed." +msgstr "%i AC supprimées." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" +"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " +"prend pas en charge." + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "Le niveau du domaine ne peut être redescendu." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " +"prend pas en charge." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"Domain Name System (DNS)\n" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" +"\n" +"Gérer la zone DNS et les enregistrements de ressources.\n" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" +"\n" +"TYPES DE ZONE PRIS EN CHARGE\n" +"\n" +" * Zone maître (dnszone-*), contient les données faisant autorité.\n" +" * Zone redirigée (dnsforwardzone-*), qui transfère les requêtes aux " +"redirecteurs\n" +" configurés (un ensemble de serveurs DNS).\n" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" +"\n" +"UTILISATION d'OPTIONS STRUCTURÉES PAR TYPE\n" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" +"\n" +"Dans beaucoup de types RR de DNS, les données DNS mises dans un serveur " +"LDAP\n" +"ne sont pas qu'un scalaire, ex. adresse IP ou nom de domaine, mais une\n" +"structure de données parfois complexe. Un bon exemple est l'enregistrement\n" +"LOC [RFC1876] constitué de nombre de parties obligatoires ou optionnelles\n" +"(degrés-minutes-secondes de latitude et longitude, altitude ou précision).\n" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" +"\n" +"Il peut être difficile de manier de tels enregistrements DNS sans erreurs " +"et\n" +"sans entrer de valeur invalide. Le module DNS fournit une abstraction pour\n" +"ces enregistrements bruts afin de manier chaque type RR avec des options\n" +"données. Pour tout type RR pris en charge, le module DNS fournit une option\n" +"standard pour manier l'enregistrement brut avec le format ---rec,\n" +"ex. --mx-rec, et des options spéciales pour chaque élément de structure RR\n" +"avec le format ---, ex. --mx-preference ou --mx-" +"exchanger.\n" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" +"\n" +"À l'ajout d'un enregistrement, on peut utiliser des options RR spécifiques\n" +"ou standard pour une valeur brute, mais elles ne doivent pas être combinées\n" +"dans une même opération. En modifiant une entrée existante, des options RR\n" +"spécifiques peuvent s'utiliser pour modifier une partie d'un enregistrement\n" +"DNS où l'option standard est utilisée pour indiquer la valeur modifiée.\n" +"Cet exemple démontre une modification de préférence d'enregistrement MX de\n" +"0 à 1 dans un enregistrement sans modifier l'échangeur :\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"\n" +"EXEMPLES :\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" +"\n" +" Ajouter une nouvelle zone :\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" +"\n" +" Ajouter une permission système pour une délégation de privilège par zone :\n" +" ipa dnszone-add-permission example.com\n" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" +"\n" +" Modifier la zone pour permettre des mises à jour dynamiques des propres\n" +" enregistrements des hôtes dans le royaume EXAMPLE.COM :\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" +"\n" +" C'est l'équivalent de :\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" +"\n" +" Modifier la zone pour permettre des transferts de zone pour le réseau local " +"uniquement :\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" +"\n" +" Ajouter une nouvelle zone inverse spécifiée par adresse IP de réseau :\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" +"\n" +" Ajouter un second serveur de noms pour « example.com » :\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" +"\n" +" Ajouter un serveur courriel pour « example.com » :\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" +"\n" +" Ajouter un autre enregistrement avec des options propres à MX :\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" +"\n" +" Ajouter un autre enregistrement en mode interactif (lancé si dnsrecord-" +"add,\n" +" dnsrecord-mod, ou dnsrecord-del sont exécutés sans options) :\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" +"\n" +" Supprimer le serveur de noms précédemment ajouté à « example.com » :\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" +"\n" +" Ajouter un enregistrement LOC pour « example.com » :\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" +"\n" +" Ajouter un nouvel enregistrement A à www.example.com. Créer son inverse\n" +" dans la zone inverse appropriée. Dans ce cas, un enregistrement PTR « 2 »\n" +" pointant sur www.example.com sera créé dans la zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" +"\n" +" Ajoutez un nouvel enregistrement PTR pour www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" +"\n" +" Ajouter de nouveaux enregistrements SRV pour serveurs LDAP. 3 requêtes\n" +" sur 4 iront vers fast.example.com, unes sur 4 vers slow.example.com. Si ni\n" +" l'un ni l'autre, n'est disponible, basculer sur backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" +"\n" +" On peut utiliser le mode interactif pour faciliter les modifications :\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" +"\n" +" Après cette modification, 3 requêtes sur 5 iront vers fast.example.com\n" +" et 2 sur 5 vers slow.example.com.\n" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" +"\n" +" Voici un exemple du mode interactif pour la commande dnsrecord-del :\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" +"\n" +" Afficher la zone « example.com » :\n" +" ipa dnszone-show example.com\n" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" +"\n" +" Trouver une zone avec « example » dans son nom de domaine :\n" +" ipa dnszone-find example\n" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" +"\n" +" Trouver des enregistrements de ressources avec « www » dans le nom dans la\n" +" zone « example.com » :\n" +" ipa dnsrecord-find example.com www\n" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" +"\n" +" Trouver des enregistrements A avec la valeur 192.0.2.2 dans la zone\n" +" « example.com » :\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" +"\n" +" Afficher les enregistrements de ressources « www » dans la zone\n" +" « example.com » :\n" +" ipa dnsrecord-show example.com www\n" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" +"\n" +" Déléguer la zone sub.example à un autre nom de serveur :\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" +"\n" +" Supprimer la zone « example.com » avec tous les enregistrements de " +"ressources :\n" +" ipa dnszone-del example.com\n" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" +"\n" +" Si une redirection globale est configurée, toute requête pour laquelle ce\n" +" serveur ne fait pas autorité (ex. sub.example.com) sera routée vers le \n" +" redirecteur global.\n" +" La configuration d'une redirection globale peut être surchargée par zone.\n" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" +"\n" +" La sémantique de la redirection de zone dans IPA est la même que \n" +" celle de BIND, et dépend du type de zone :\n" +" * Zone maître : le serveur BIND local répond avec autorité aux " +"requêtes \n" +" de données dans la zone donnée (y compris les réponses ayant autorité\n" +" NXDOMAIN) et transfère uniquement les requêtes sur les noms dans les \n" +" sous-zones (enregistrements NS) des zones locales servies.\n" +" \n" +" * Zone redirigée : les zones transférées ne contiennent aucune donnée \n" +" faisant autorité. BIND transmet les requêtes qui ne peuvent être \n" +" servies par son cache local aux serveurs de redirection configurés.\n" +" \n" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" +"\n" +" Désactive la redirection globale pour les sous-arbres donnés :\n" +" ipa dnszone-mod example.com --forward-policy=none\n" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" +"\n" +" Cette configuration redirige toutes les requêtes pour les noms en dehors\n" +" du sous-arbre « example.com » vers les redirecteurs globaux. Le processus\n" +" normal de résolution récursive est utilisé pour les noms dans le sous-" +"arbre\n" +" « example.com » (ex. les enregistrements NS sont suivis, etc.).\n" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" +"\n" +" Redirige toutes les requêtes pour la zone « external.example.com » vers un\n" +" autre redirecteur avec la politique « first » (il adresse les requêtes au\n" +" redirecteur sélectionné et s'il n'y a pas de réponse, les serveurs racines\n" +" globaux sont sollicités) :\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" +"\n" +" Modifier la politique de redirection pour « external.example.com » :\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" +"\n" +" Afficher la politique de redirection pour la zone « external.example." +"com » :\n" +" ipa dnsforwardzone-show external.example.com\n" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" +"\n" +" Lister toutes les redirections de zones :\n" +" ipa dnsforwardzone-find\n" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" +"\n" +" Supprimer la rediretion de zone « external.example.com » :\n" +" ipa dnsforwardzone-del external.example.com\n" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" +"\n" +" Résoudre un nom d'hôte pour voir s'il existe (ajoute le domaine IPA par\n" +" défaut s'il n'est pas inclus) :\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" +"\n" +"\n" +"CONFIGURATION GLOBALE du DNS\n" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" +"\n" +"La configuration DNS, passée en ligne de commande du script d'installation,\n" +"est stockée dans un ficher de configuration local sur chaque serveur IPA \n" +"dans lequel le service DNS est configuré. Ces réglages locaux peuvent être\n" +"surchargés par une configuration commune stockée dans le serveur LDAP :\n" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" +"\n" +"Afficher la configuration DNS globale :\n" +" ipa dnsconfig-show\n" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" +"\n" +" Modifier la configuration DNS globale et définir une liste de redirecteurs\n" +" globaux :\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" + +msgid "invalid IP network format" +msgstr "format de réseau IP invalide" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "chaque élément de LCA doit se terminer par un point-virgule" + +msgid "invalid address format" +msgstr "format d'adresse invalide" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" +"format attendu : <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen (nombre impair de chiffres hexadécimaux " +"ou tiret)" + +msgid "algorithm value: allowed interval 0-255" +msgstr "valeur de l'algorithme : intervalle autorisé 0-255" + +msgid "flags value: allowed interval 0-255" +msgstr "valeur des marqueurs : intervalle autorisé 0-255" + +msgid "iterations value: allowed interval 0-65535" +msgstr "valeur des itérations : intervalle autorisé 0-65535" + +#, python-format +msgid "salt value: %(err)s" +msgstr "valeur « salt » : %(err)s" + +msgid "invalid domain-name: not fully qualified" +msgstr "nom de domaine invalide : doit être pleinement qualifié" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "ne doit pas être un nom de domaine avec joker (RFC 4592 section 4)" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" +"La zone DNS inverse %(revzone)s pour l'adresse IP %(addr)s n'est pas gérée " +"par ce serveur." + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "Zone DNS %(zone)s introuvable" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "L'adresse IP %(ip)s est déjà assignée au domaine %(domain)s." + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" +"L'enregistrement inverse pour l'adresse IP %(ip)s existe déjà dans la zone " +"inverse %(zone)s." + +#, python-format +msgid "%s record" +msgstr "enregistrement %s" + +#, python-format +msgid "Raw %s records" +msgstr "Enregistrements %s bruts" + +#, python-format +msgid "%s Record" +msgstr "Enregistrement %s" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(cf. RFC %s pour plus de détails)" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "'%s' est une partie requise d'un enregistrement DNS" + +msgid "Invalid number of parts!" +msgstr "Nombre de parties invalide !" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" +"Le type DNS RR « %s » n'est pas pris en charge par le greffon bind-dyndb-ldap" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "le format doit être spécifié comme « %(format)s » %(rfcs)s" + +msgid "Create reverse" +msgstr "Créer un enregistrement inverse" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" +"Impossible de créer l'enregistrement inverse pour « %(value)s » : %(exc)s" + +msgid "Exchanger" +msgstr "Changeur" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" +"le format doit être définit sous la forme\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" où :\n" +" d1: [0 .. 90] (degrés de latitude)\n" +" d2: [0 .. 180] (degrés de longitude)\n" +" m1, m2: [0 .. 59] (minutes de latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (secondes de latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] PAR .01 (altitude en mètres)\n" +" siz, hp, vp: [0 .. 90000000.00] (taille/précision en mètres)\n" +" Cf. RFC 1876 plus de détails" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "'%(required)s' ne doit pas être vide lorsque '%(name)s' est défini" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" +"les marqueurs doivent être une valeur parmi « S », « A », « U », ou « P »" + +#, fuzzy +#| msgid "Priority" +msgid "Priority (order)" +msgstr "Priorité" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +#, fuzzy +#| msgid "Relative weight for server services (counts per location)" +msgid "Relative weight for entries with the same priority." +msgstr "Poids relatifs des services des serveurs (compte par emplacement)" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "la valeur ne suit pas le format d'horodatage « YYYYMMDDHHMMSS »" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" +"Le serveur de noms '%(host)s' n'a pas d'enregistrement A/AAAA correspondant" + +msgid "Managedby permission" +msgstr "Permission « managedby »" + +msgid "DNS is not configured" +msgstr "Le DNS n'est pas configuré" + +#, fuzzy +#| msgid "hosts cannot be set when type is 'group'" +msgid "cannot be used when a zone is specified" +msgstr "des hôtes ne peuvent pas être définis quand le type est « group »" + +msgid "Only one zone type is allowed per zone name" +msgstr "Un seul type de zone autorisé par nom de zone" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "Permission système « %(value)s » ajoutée" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "la permisison « %(value)s » existe déjà" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "Permission système « %(value)s » supprimée" + +msgid "DNS zone" +msgstr "Zone DNS" + +msgid "DNS zones" +msgstr "Zones DNS" + +msgid "DNS Zones" +msgstr "Zones DNS" + +msgid "DNS Zone" +msgstr "Zone DNS" + +#, fuzzy +#| msgid "Time to live" +msgid "Default time to live" +msgstr "Durée de vie" + +#, fuzzy +#| msgid "Time to live for records at zone apex" +msgid "Time to live for records without explicit TTL definition" +msgstr "Durée de vie des enregistrements en sommet de zone" + +msgid "setting Authoritative nameserver" +msgstr "configuration du serveur de nom ayant autorité" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "Ceci est uniquement utilisée pour définir l'attribut SOA MNAME." + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" +"Les enregistrements NS peuvent être modifiés dans la somme sommet - '@'. " + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "" +msgstr "Serveurs DNS IPA" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "Le serveur de nom pour la zone inverse ne peut être un nom DNS relatif" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Zone DNS « %(value)s » supprimée" + +msgid "is required" +msgstr "est requis" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Zone DNS « %(value)s » désactivée" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Zone DNS « %(value)s » activée" + +msgid "DNS resource record" +msgstr "Enregistrement de ressource DNS" + +msgid "DNS resource records" +msgstr "Enregistrements de ressources DNS" + +msgid "DNS Resource Records" +msgstr "Enregistrements de ressources DNS" + +msgid "DNS Resource Record" +msgstr "Enregistrement de ressources DNS" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" +"L'enregistrement DS ne doit pas être dans la zone sommet (RFC 4035 section " +"2.4)" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" +"donnée hors zone : le nom de l'enregistrement doit être un sous-domaine de " +"la zone ou un nom relatif" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" +"le propriétaire des enregistrements %(types)s ne doit pas être un nom de " +"domaine comportant des jokers (RFC 4592 section 4)" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" +"La zone inverse %(name)s requiert exactement %(count)d composants d'adresses " +"IP, %(user_count)d donnés" + +msgid "only master zones can contain records" +msgstr "seules les zones maître peuvent contenir des enregistrements" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" +"seul un unique enregistrement CNAME est autorisé par nom (RFC 2136, section " +"1.1.5)" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" +"Un enregistrement CNAME ne peut coexister avec aucun autre enregistrement " +"(RFC 1034, section 3.6.2)" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" +"un seul enregistrement DNAME est autorisé par nom (RFC 6672, section 2.4)" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"l'enregistrement NS n'est pas autorisé à coexister avec un enregistrement " +"%(type)s sauf quand ils sont situés dans enregistrement de zone racine (RFC " +"2181, section 6.1)" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" +"l'enregistrement DS doit coexister avec un enregistrement NS (RFC 4592 " +"section 4.6, RFC 4035 section 2.4)" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" +"La valeur brute d'un enregistrement DNS a déjà été configurée avec l'option " +"« %(name)s »" + +msgid "DNS zone root record cannot be renamed" +msgstr "L'enregistrement racine de la zone DNS ne peut être renommé" + +msgid "DNS records can be only updated one at a time" +msgstr "" +"Les enregistrements DNS ne peuvent être mis à jour qu'un seul à la fois" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Enregistrement « %(value)s » supprimé" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "L'enregistrement '%s' de zone ne peut être supprimé" + +#, python-format +msgid "Found '%(value)s'" +msgstr "'%(value)s' trouvé." + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Hôte « %(host)s » introuvable" + +msgid "DNS configuration options" +msgstr "Options de configuration DNS" + +msgid "DNS Global Configuration" +msgstr "Configuration DNS globale" + +msgid "IPA DNS version" +msgstr "Version du DNS de IPA." + +msgid "IPA DNS servers" +msgstr "Serveurs DNS IPA" + +msgid "List of IPA masters configured as DNS servers" +msgstr "Liste des maîtres IPA configurés comme serveurs DNS" + +msgid "IPA DNSSec key master" +msgstr "Maître des clés DNSSec IPA" + +msgid "IPA server configured as DNSSec key master" +msgstr "Serveur IPA configuré comme maître des clés DNSSec" + +msgid "Global DNS configuration is empty" +msgstr "La configuration globale DNS est vide" + +msgid "DNS forward zone" +msgstr "Zone de redirection DNS" + +msgid "DNS forward zones" +msgstr "Zones de redirection DNS" + +msgid "DNS Forward Zones" +msgstr "Zones de redirection DNS" + +msgid "DNS Forward Zone" +msgstr "Zone de redirection DNS" + +msgid "Please specify forwarders." +msgstr "Veuillez indiquer les redirecteurs." + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Zone de redirection DNS « %(value)s » supprimée" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Zone de redirection DNS « %(value)s » désactivée" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Zone de redirection DNS « %(value)s » activée" + +msgid "IPA DNS records" +msgstr "Enregistrements DNS IPA" + +msgid "IPA location records" +msgstr "Enregistrements du ou des emplacements IPA" + +msgid "Update location and IPA server DNS records" +msgstr "Mettre à jour les enregistrements DNS des emplacements et serveurs IPA" + +msgid "Result of the command" +msgstr "Résultat de la commande" + +msgid "Dry run" +msgstr "Essai à blanc" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Configuration du serveur DNS\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Manipulation de la configuration du serveur DNS\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +"Afficher la configuration d'un serveur DNS spécifique :\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Modifier la configuration d'un serveur DNS spécifique :\n" +" ipa dnsserver-mod\n" + +msgid "DNS server" +msgstr "Serveur DNS" + +msgid "DNS servers" +msgstr "Serveurs DNS" + +msgid "DNS Servers" +msgstr "Serveurs DNS" + +msgid "DNS Server" +msgstr "Serveur DNS" + +msgid "DNS Server name" +msgstr "Nom du serveur DNS" + +#, fuzzy +#| msgid "Add a new ID override." +msgid "SOA mname override" +msgstr "Ajouter une nouvelle surcharge d'identifiant." + +#, fuzzy +#| msgid "Authoritative nameserver domain name" +msgid "SOA mname (authoritative server) override" +msgstr "Nom de domaine du serveur de nom faisant autorité" + +msgid "Forwarders" +msgstr "Redirecteurs de zone" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Redirecteurs par serveur. Un port personnalisé peut être indiqué pour chaque " +"redirecteur avec le format standard « adresse_IP port PORT »" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Politique de redirection conditionnelle par serveur. Mettre à « none » pour " +"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " +"cas, les redirecteurs de zone conditionnels sont ignorés." + +msgid "Modify DNS server configuration" +msgstr "Modifier la configuration du serveur DNS" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Serveur DNS « %(value)s » modifié" + +msgid "Search for DNS servers." +msgstr "Rechercher des serveurs DNS." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d serveur DNS correspondant" +msgstr[1] "%(count)d serveurs DNS correspondants" + +#, fuzzy +#| msgid "KRA service is not enabled" +msgid "IPA DNS Server is not installed" +msgstr "Le service KRA est désactivé" + +msgid "Display configuration of a DNS server." +msgstr "Afficher la configuration d'un nouveau serveur DNS." + +msgid "Add a new DNS server." +msgstr "Ajouter un nouveau serveur DNS." + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Nouveau serveur DNS « %(value)s » ajouté" + +msgid "Delete a DNS server" +msgstr "Supprimer un serveur DNS" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Serveur DNS « %(value)s » supprimé" + +msgid "REST API is not logged in." +msgstr "L'API REST n'est pas connectée." + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" +"Réponse non 2xx reçue de l'API REST de l'AC : %(status)d. %(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "Impossible de communiquer avec le CMS" + +msgid "Response from CA was not valid JSON" +msgstr "La réponse de l'AC n'est pas dans un format JSON valide" + +msgid "Host-based access control commands" +msgstr "Commandes de contrôle d'accès basé sur l'hôte" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Services HBAC\n" +"\n" +"Les services PAM dont le système HBAC peut contrôler l'accès. Le nom " +"utilisé\n" +"ici doit correspondre au nom du service analysé par PAM.\n" +"EXEMPLES:\n" +"\n" +" Ajouter un nouveau service HBAC :\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modifier un service HBAC existant :\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Chercher des services HBAC. Cet exemple renvoie deux résultats, le service\n" +" FTP et le service tftp nouvellement ajouté :\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Supprimer un service HBAC :\n" +" ipa hbacsvc-del tftp\n" +"\n" + +msgid "HBAC services" +msgstr "Services HBAC" + +msgid "HBAC Services" +msgstr "Services HBAC" + +msgid "HBAC Service" +msgstr "Service HBAC" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Service HBAC « %(value)s » ajouté" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Service HBAC « %(value)s » supprimé" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Service HBAC « %(value)s » modifié" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d service HBAC correspondant" +msgstr[1] "%(count)d services HBAC correspondant" + +msgid "HBAC service group" +msgstr "Groupe de services HBAC" + +msgid "HBAC service groups" +msgstr "Groupes de services HBAC" + +msgid "HBAC Service Groups" +msgstr "Groupes de services HBAC" + +msgid "HBAC Service Group" +msgstr "Groupe de services HBAC" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Groupe de services HBAC « %(value)s » ajouté" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Groupe de services HBAC « %(value)s » supprimé" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Groupe de services HBAC « %(value)s » modifié" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d groupe de services HBAC correspondant" +msgstr[1] "%(count)d groupes de services HBAC correspondant" + msgid "" "\n" "Stageusers\n" @@ -5944,169 +19374,184 @@ msgstr "" "supprimés :\n" " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"Le coffre-fort standard utilise un mécanisme sécurisé pour le\n" -"transport et le stockage du secret. Le secret ne peut être récupéré\n" -"que par les utilisateurs ayant accès au coffre.\n" +msgid "Stage Users" +msgstr "Mettre en attente les utilisateurs" + +msgid "Stage User" +msgstr "Mettre en attente l'utilisateur" + +msgid "stage user" +msgstr "utilis" + +msgid "stage users" +msgstr "utilisateurs en attente" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Utilisateur en attente « %(value)s » ajouté" + +msgid "givenname is required" +msgstr "givenname est requis" + +msgid "sn is required" +msgstr "sn est requis" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "doit contenir au plus %(len)d caractères" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Utilisateur en attente « %(value)s » supprimé" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Utilisateur en attente « %(value)s » modifié" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d utilisateur correspondant" +msgstr[1] "%(count)d utilisateurs correspondant" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Activer un utilisateur en attente « %(value)s »" + +msgid "Entry RDN is not 'uid'" +msgstr "Le RDN de l'entrée n'est pas l'attribut « uid »" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "L'entrée ne possède aucun attribut « %(attribute)s »" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "L'utilisateur actif nommé « %(user)s » existe déjà" + +#, python-format +msgid "Stage user %s activated" +msgstr "Utilisateur en attente %s activé" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Add new principal alias to host entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" + +#, fuzzy, python-format +#| msgid "Added new aliases to host \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Alias ajoutés à l'hôte « %(value)s »" + +#, fuzzy +#| msgid "Remove principal alias from a host entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "Supprimer un alias de principal de l'entrée d'un hôte" + +#, fuzzy, python-format +#| msgid "Removed aliases from host \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Alias supprimés pour l'hôte « %(value)s »" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" msgid "" "\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" msgstr "" "\n" -"Sudo (su « do ») autorise un administrateur système à déléguer la " -"possibilité\n" -" à certains utilisateurs (ou groupes d'utilisateurs) d'exécuter certaines\n" -" (ou toutes) commandes en tant qu'administrateur ou autre utilisateur, tout\n" -" en donnant des moyens de contrôle des commandes et de leurs arguments.\n" +"Topologie\n" +"\n" +"Gestion de la topologie de réplication.\n" msgid "" "\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" msgstr "" "\n" -"Commandes sudo\n" -"\n" -"Commandes utilisées en tant que briques de base pour sudo\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une nouvelle commande\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Supprimer une commande\n" -" ipa sudocmd-del /usr/bin/less\n" +"Les données des serveurs IPA sont enregistrées dans le serveur LDAP\n" +"sous deux suffixes :\n" +"* le suffixe de domain, par exemple « dc=example,dc=com », qui contient " +"toutes\n" +" les informations relatives au domaine ;\n" +"* le suffixe ca, « o=ipaca », qui n'est présent que sur les serveurs où " +"l'autorité de certification\n" +" est installée. Il contient les données nécessaire au composant " +"Certificate Server\n" msgid "" "\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" msgstr "" "\n" -"Commandes sudo\n" -"\n" -"Commandes utilisées en tant que briques de base pour sudo\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une nouvelle commande\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Supprimer une commande\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" +"Les données enregistrées dans les serveurs IPA sont répliquées vers les " +"autres\n" +"serveurs IPA. Les agréments de réplication définissent la manière dont la \n" +"réplication s'opère. Les agréments de réplication doivent être définis " +"pour \n" +"les deux suffixes de manière séparée. Sur les domaines de niveau 0, ils " +"sont\n" +"gérés par les outils ipa-replica-manage et ipa-csreplica-manage tools. Sur \n" +"les domaines de niveau 1, ils sont gérés de manière centralisée par les " +"commandes\n" +"« ipa topology* ».\n" msgid "" "\n" -"Sudo Rules\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" msgstr "" "\n" -"Règles sudo\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"Le coffre-fort symétrique est similaire au coffre standard, mais il \n" -"pré-chiffre le secret à l'aide d'un mot de passe avant son transport.\n" -"Le secret ne peut être récupéré qu'à l'aide du même mot de passe.\n" -"\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"« automember-rebuild » s'utilise pour appliquer rétroactivement les règles\n" -"d'adhésion automatique aux entrées présentes, et ainsi revoir leur " -"adhésion.\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"Il y a un certain nombre de cibles autorisées :\n" -"1. sous-arbre : un DN ; la permission s'applique au sous-arbre sous ce DN\n" -"2. filtre de cibles : un filtre LDAP\n" -"3. cible : un DN avec possiblement des jokers, indique les entrées\n" -"auxquelles la permission s'applique\n" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" -"\n" -"Dans beaucoup de types RR de DNS, les données DNS mises dans un serveur " -"LDAP\n" -"ne sont pas qu'un scalaire, ex. adresse IP ou nom de domaine, mais une\n" -"structure de données parfois complexe. Un bon exemple est l'enregistrement\n" -"LOC [RFC1876] constitué de nombre de parties obligatoires ou optionnelles\n" -"(degrés-minutes-secondes de latitude et longitude, altitude ou précision).\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" -"\n" -"Ce code est une extension du greffon « otptoken » ; il fournit la prise en\n" -"charge pour lire/écrire des jetons YubiKey directement.\n" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" -"\n" -"Pour activer « binddn », exécuter la commande pour fixer le mot de passe :\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" +"Les agréments sont représentés par des segments de topologie. Un segment de " +"topologie\n" +"représente par défaut deux agréments de réplication, un pour chaque " +"direction, par exemple\n" +"de A vers B et de B vers A. La création de segments unidirectionnels n'est " +"pas permise.\n" msgid "" "\n" @@ -6122,149 +19567,198 @@ msgstr "" msgid "" "\n" -"Topology\n" "\n" -"Management of a replication topology at domain level 1.\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" msgstr "" "\n" -"Topologie\n" "\n" -"Gestion de la topologie de réplication.\n" +"Exemples :\n" +" Trouver tous les serveurs :\n" +" ipa server-find\n" msgid "" "\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" msgstr "" "\n" -"Topologie\n" -"\n" -"Gestion de la topologie de réplication.\n" -"\n" -"Nécessite a minima le niveau 1 de domaine.\n" +" Trouver tous les suffixes :\n" +" ipa topologysuffix-find\n" msgid "" "\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" msgstr "" "\n" -"UTILISATION d'OPTIONS STRUCTURÉES PAR TYPE\n" +" Ajouter un segment de topologie au suffixe du domaine :\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" msgid "" "\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" msgstr "" "\n" -"Les coffres-forts utilisateurs sont des coffres appartenant à un " -"utilisateur\n" -"en particulier. Les coffres privés appartiennent à l'utilisateur courant. " -"Les\n" -"coffres de services appartiennent à un service. Les coffres partagés \n" -"appartiennent à l'administrateur, mais peuvent être utilisés par d'autres\n" -"utilisateurs ou services.\n" +" Ajouter un segment de topologie au suffixe « ca » :\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" msgid "" "\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" msgstr "" "\n" -"Utilisateurs\n" -"\n" -"Gestion des utilisateurs. Tous les utilisateurs sont de type POSIX.\n" -"\n" -"IPA prend en charge un grand nombre de formats de noms d'utilisateurs.\n" -"Certaines restrictions peuvent cependant s'appliquer dans un environnement\n" -"particulier. Par exemple, les noms d'utilisateurs commençant par un chiffre\n" -"ou ceux dépassant une certaine longueur peuvent poser problème à certains\n" -"systèmes UNIX.\n" -"Utiliser la commande « ipa config-mod » afin de modifier le format de nom\n" -"d'utilisateur autorisé par les outils IPA.\n" -"\n" -"La désactivation d'un compte utilisateur lui interdit d'obtenir de\n" -"nouveaux justificatifs d'identité Kerberos. Elle n'invalide pas les\n" -"justificatifs déjà obtenus.\n" -"\n" -"L'administration des mots de passe ne fait pas partie de ce module. Pour\n" -"plus d'informations sur ce sujet, cf. : « ipa help passwd »\n" -"\n" -"Le verrouillage de compte en cas d'échec de mot de passe est déclenché par\n" -"le maître IPA de l'utilisateur. La commande « user-status » permet de\n" -"l'identifier. C'est sur ​​ce maître que l'administrateur doit déverrouiller\n" -"l'utilisateur.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouvel utilisateur :\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Trouver tous les utilisateurs dont l'entrée contient la chaîne « Tim » :\n" -" ipa user-find Tim\n" -"\n" -" Trouver tous les utilisateurs ayant « Tim » comme prénom :\n" -" ipa user-find --first=Tim\n" -"\n" -" Désactiver un compte utilisateur :\n" -" ipa user-disable tuser1\n" -"\n" -" Activer un compte utilisateur :\n" -" ipa user-enable tuser1\n" -"\n" -" Supprimer un utilisateur :\n" -" ipa user-del tuser1\n" -"\n" +" Énumérer tous les segments de topologie dans le suffixe du domaine :\n" +" ipa topologysegment-find domain\n" msgid "" "\n" -"Vaults\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" msgstr "" "\n" -"Coffres-forts (vaults)\n" +" Énumérer tous les segments de topologie dans le suffixe « ca » :\n" +" ipa topologysegment-find ca\n" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" +"\n" +" Supprimer un segment de topologie du suffixe du domaine :\n" +" ipa topologysegment-del domain segment_name\n" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" +"\n" +" Supprimer un segment de topologie du suffixe « ca » :\n" +" ipa topologysegment-del ca segment_name\n" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" +"\n" +" Vérification de la topologie du suffixe du domaine :\n" +" ipa topologysuffix-verify domain\n" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +" Vérification de la topologie du suffixe « ca » :\n" +" ipa topologysuffix-verify ca\n" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "La gestion de la topologie nécessite le niveau de domaine minimal {0}" + +msgid "segment" +msgstr "segment" + +msgid "segments" +msgstr "segments" + +msgid "Topology Segments" +msgstr "Segments de topologie" + +msgid "Topology Segment" +msgstr "Segment de topologie" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "le nœud de gauche n'est pas un nœud de la topologie : %(leftnode)s" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "le nœud de droite n'est pas un nœud de la topologie : %(rightnode)s" + +msgid "left node and right node must not be the same" +msgstr "les nœuds de gauche et de droite ne peuvent être identiques" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d segment correspondant" +msgstr[1] "%(count)d segment correspondants" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Segment « %(value)s » ajouté" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Segment « %(value)s » supprimé" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Segment « %(value)s » modifié" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +msgid "left or right node has to be specified" +msgstr "le nœud de gauche ou de droite doit être indiqué" + +msgid "only one node can be specified" +msgstr "seul un nœud peut être indiqué" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" +"Raffraichissement demandé pour la réplication via le segment « %(pkey)s »." + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" +"Arrêt du raffraichissement demandé pour la réplication via le segment « " +"%(pkey)s »." + +msgid "suffixes" +msgstr "suffixes" + +msgid "Topology suffixes" +msgstr "Suffixes de topologie" + +msgid "Topology suffix" +msgstr "Suffixe de topologie" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d suffixe de topologie correspondant" +msgstr[1] "%(count)d suffixes de topologie correspondants" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Suffixe de topologie « %(value)s » supprimé" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Suffixe de topologie « %(value)s » ajouté" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Suffixe de topologie « %(value)s » modifié" msgid "" "\n" @@ -6287,103 +19781,5280 @@ msgstr "" "recommandé\n" " d'agrément de réplication.\n" +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" +"Privilège « write » insuffisant pour l'attribut « krbLastPwdChange » de " +"l'entrée « %s »." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of hosts.\n" +#| "\n" +#| "Manage groups of hosts. This is useful for applying access control to a\n" +#| "number of hosts by using Host-based Access Control.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new host group:\n" +#| " ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +#| "\n" +#| " Add another new host group:\n" +#| " ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +#| "\n" +#| " Add members to the hostgroup (using Bash brace expansion):\n" +#| " ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +#| "\n" +#| " Add a hostgroup as a member of another hostgroup:\n" +#| " ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +#| "\n" +#| " Remove a host from the hostgroup:\n" +#| " ipa hostgroup-remove-member --hosts=box2 baltimore\n" +#| "\n" +#| " Display a host group:\n" +#| " ipa hostgroup-show baltimore\n" +#| "\n" +#| " Delete a hostgroup:\n" +#| " ipa hostgroup-del baltimore\n" msgid "" "\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" msgstr "" "\n" -"À l'ajout d'un enregistrement, on peut utiliser des options RR spécifiques\n" -"ou standard pour une valeur brute, mais elles ne doivent pas être combinées\n" -"dans une même opération. En modifiant une entrée existante, des options RR\n" -"spécifiques peuvent s'utiliser pour modifier une partie d'un enregistrement\n" -"DNS où l'option standard est utilisée pour indiquer la valeur modifiée.\n" -"Cet exemple démontre une modification de préférence d'enregistrement MX de\n" -"0 à 1 dans un enregistrement sans modifier l'échangeur :\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" - -msgid "" +"Groupes d'hôtes.\n" "\n" -"YubiKey Tokens\n" -msgstr "" +"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" +"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" "\n" -"Jetons YubiKey\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" +"\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" +"\n" +" Ajouter des membres à un groupe d'hôtes :\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Supprimer un hôte d'un groupe :\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Afficher un groupe d'hôtes :\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Supprimer un groupe d'hôtes :\n" +" ipa hostgroup-del baltimore\n" -msgid " ipa --help" -msgstr " ipa --help" +msgid "host groups" +msgstr "groupes d'hôtes" -#, python-brace-format -msgid " -8 '${cn}'" -msgstr " -8 '${cn}'" +msgid "Host Group" +msgstr "Groupe d'hôtes" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Groupe d'hôtes « %(value)s » ajouté" #, python-format msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" msgstr "" -" De manière alternative, les serveurs suivants sont capables d'exécuter " -"cette commande : %(masters)s" +"Un groupe réseau nommé « %s » existe déjà. Les groupes d'hôtes et les " +"groupes réseau partagent un même espace de noms." + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Groupe d'hôtes « %(value)s » supprimé" + +msgid "hostgroup" +msgstr "groupe d'hôtes" + +msgid "privileged hostgroup" +msgstr "groupe d'hôtes privilégiés" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Groupe d'hôtes « %(value)s » modifié" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d groupe d'hôtes correspondant" +msgstr[1] "%(count)d groupes d'hôtes correspondant" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Coffres-forts (vaults)\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Gestion des coffres-forts.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"Il existe trois types de coffres-forts en fonction de leur propriété :\n" +"* coffre utilisateur/privé\n" +"* coffre de service\n" +"* coffre-fort partagé (shared)\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Les coffres-forts utilisateurs sont des coffres appartenant à un " +"utilisateur\n" +"en particulier. Les coffres privés appartiennent à l'utilisateur courant. " +"Les\n" +"coffres de services appartiennent à un service. Les coffres partagés \n" +"appartiennent à l'administrateur, mais peuvent être utilisés par d'autres\n" +"utilisateurs ou services.\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"Il existe trois types de coffres-forts en fonction de leur mécanisme\n" +"de sécurité :\n" +"* coffre-fort standard\n" +"* coffre-fort symétrique\n" +"* coffre-fort asymétrique\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"Le coffre-fort standard utilise un mécanisme sécurisé pour le\n" +"transport et le stockage du secret. Le secret ne peut être récupéré\n" +"que par les utilisateurs ayant accès au coffre.\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"Le coffre-fort symétrique est similaire au coffre standard, mais il \n" +"pré-chiffre le secret à l'aide d'un mot de passe avant son transport.\n" +"Le secret ne peut être récupéré qu'à l'aide du même mot de passe.\n" +"\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"Le coffre-fort asymétrique est similaire au coffre standard, mais il \n" +"pré-chiffre le secret à l'aide d'une clé publique avant son transport.\n" +"Le secret ne peut être récupéré qu'avec la clé privée correspondante.\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Énumérer les coffres-forts pour un service :\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Ajouter un coffre-fort standard :\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Ajouter un coffre-fort symétrique :\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file mot_de_passe.txt\n" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Ajouter un coffre-fort symétrique :\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --public-key-file public.pem\n" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Afficher un coffre-fort :\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Modifier la description d'un coffre-fort :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" +"\n" +" Modifier le type d'un coffre-fort :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [ancient mot de passe/clé privée]\n" +" [nouveau mot de passe/clé publique]\n" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" +"\n" +" Modifier un coffre-fort symétrique :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" +"\n" +" Modifier les clés d'un coffre-fort asymétrique :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Supprimer un coffre-fort :\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Afficher la configuration des coffres-forts :\n" +" ipa vaultconfig-show\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Archiver des données dans un coffre-fort standard :\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Archiver des données dans un coffre-fort symétrique :\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file mot_de_passe.txt\n" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Archiver des données dans un coffre-fort asymétrique :\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Récupérer des données d'un coffre-fort standard :\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Récupérer des données d'un coffre-fort symétrique :\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file mot_de_passe.txt\n" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Récupérer des données d'un coffre-fort asymétrique :\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file clé_privée.pem\n" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Ajouter des propriétaires à un coffre-fort :\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Supprimer des propriétaires d'un coffre-fort :\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Ajouter des membres à un coffre-fort :\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Supprimer des membres d'un coffre-fort :\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" Objet conteneur de coffre-fort.\n" +" " + +msgid "vaultcontainer" +msgstr "vaultcontainer" + +msgid "vaultcontainers" +msgstr "vaultcontainers" + +msgid "Vault Containers" +msgstr "Conteneurs de coffres-forts" + +msgid "Vault Container" +msgstr "Conteneur de coffres-forts" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" +"Les options de service, d'utilisateur ou de coffre-fort partagé ne peuvent " +"être utilisées simultanément" + +msgid "Host is not supported" +msgstr "L'hôte n'est pas pris en charge" + +msgid "KRA service is not enabled" +msgstr "Le service KRA est désactivé" + +msgid "Deleted vault container" +msgstr "Conteneur de coffre-fort supprimé" + +#, python-format +msgid "owner %s" +msgstr "propriétaire %s" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Objet coffre-fort.\n" +" " + +msgid "vault" +msgstr "coffre-fort" + +msgid "vaults" +msgstr "coffres-forts" + +msgid "Vaults" +msgstr "Coffres-forts" + +msgid "Vault" +msgstr "Coffre-fort" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" +"Les options de service, de partage et d'utilisateur ne peuvent être " +"utilisées simultanément." + +#, fuzzy +#| msgid "Modify a vault." +msgid "Add a vault." +msgstr "Modifier un coffre-fort." + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Ajout de « %(value)s » au coffre" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Valeur « %(value)s » supprimée du coffre" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d coffre-fort correspondant" +msgstr[1] "%(count)d coffre-forts correspondants" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" +"Les options de service(s), d'utilisateur(s) ou de coffres-forts partagé(s) " +"ne peuvent être utilisées simultanément" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Coffre-fort « %(value)s » modifié" + +msgid "Vault configuration" +msgstr "Configuration du coffre-fort" + +msgid "IPA KRA servers" +msgstr "Serveurs KRA IPA" + +msgid "IPA servers configured as key recovery agents" +msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Données archivées dans le coffre-fort « %(value)s »" + +#, fuzzy +#| msgid "Retrieve a data from a vault." +msgid "Retrieve data from a vault." +msgstr "Récupérer une donnée depuis un coffre-fort" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Donnée récupérée depuis le coffre-fort « %(value)s »" + +msgid "No archived data." +msgstr "Aucune donnée archivée." + +#, fuzzy +#| msgid "Checks if any of the servers has the CA service enabled." +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" +"Vérifier si l'un des serveurs a activé le service autorité de certification." + +msgid "netgroups" +msgstr "groupes réseau" + +msgid "Netgroups" +msgstr "Groupes réseau" + +msgid "Netgroup" +msgstr "Groupe réseau" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Groupe réseau « %(value)s » ajouté" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Un groupe d'hôtes nommé « %s » existe déjà. Les groupes d'hôtes et les " +"groupes réseau partagent le même espace de nommage" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Groupe réseau « %(value)s » supprimé" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Groupe réseau « %(value)s » supprimé" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d groupe réseau correspondant" +msgstr[1] "%(count)d groupes réseau correspondant" + +msgid "One time password commands" +msgstr "Commandes mots de passe à usage unique (OTP)" + +msgid "OTP configuration options" +msgstr "Options de configuration pour les mots de passe à usage unique" + +msgid "OTP Configuration" +msgstr "Configuration pour les mots de passe à usage unique" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Mot de passe modifié pour « %(value)s »" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "« pkinit »" + +msgid "PKINIT" +msgstr "PKINIT" + +#, fuzzy +#| msgid "Trust status" +msgid "PKINIT status" +msgstr "État de la confiance" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Cette entrée ne peut être activée ou désactivée" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s rôle serveur correspondant" +msgstr[1] "%(count)s rôles serveur correspondants" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"Serveurs mandataires RADIUS\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Gestion des serveurs mandataires RADIUS.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA prend en charge l'utilisation d'un serveur mandataire externe RADIUS\n" +"pour des authentifications OTP « krb5 ». Cela procure une grande souplesse\n" +"pour l'intégration des services d'authentification tierce partie.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Ajouter un nouveau serveur :\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Trouver tous serveurs dont les entrées incluent la chaîne « example." +"com » :\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Examiner la configuration :\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Changer le secret :\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Supprimer une configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "nom d'attribut invalide" + +msgid "invalid port number" +msgstr "numéro de port invalide" + +msgid "RADIUS proxy server" +msgstr "Serveur mandataire RADIUS" + +msgid "RADIUS proxy servers" +msgstr "Serveurs mandataires RADIUS" + +msgid "RADIUS Servers" +msgstr "Serveurs RADIUS" + +msgid "RADIUS Server" +msgstr "Serveur RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Serveur mandataire RADIUS « %(value)s » ajouté" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Serveur mandataire RADIUS « %(value)s » supprimé" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Serveur mandataire RADIUS « %(value)s » modifié" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d serveur mandataire RADIUS correspondant" +msgstr[1] "%(count)d serveurs mandataires RADIUS correspondant" + +msgid "A list of ACI values" +msgstr "Une liste de valeurs d'ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"« type », « filter », « subtree » et « targetgroup » s'excluent mutuellement" + +msgid "ACI prefix is required" +msgstr "Un préfixe ACI est requis" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"au moins un parmi « type », « filter », « subtree », « targetgroup », " +"« attrs » ou « memberof » est requis" + +msgid "filter and memberof are mutually exclusive" +msgstr "« filter » et « memberof » s'excluent mutuellement" + +msgid "group, permission and self are mutually exclusive" +msgstr "« group », « permission » et « self » s'excluent mutuellement" + +msgid "One of group, permission or self is required" +msgstr "Un parmi « group », « permission » ou « self » est requis" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Le groupe « %s » n'existe pas" + +msgid "empty filter" +msgstr "filtre vide" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Erreur de syntaxe : %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "DN invalide (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI de nom « %s » introuvable" + +#, fuzzy +#| msgid "IPA object" +msgid "ACI object." +msgstr "objet IPA" + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI « %(value)s » créée" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI « %(value)s » supprimée" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI « %(value)s » modifiée" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI correspondant" +msgstr[1] "%(count)d ACI correspondant" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI renommée en « %(value)s »" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Server configuration\n" +#| "\n" +#| "Manage the default values that IPA uses and some of its tuning " +#| "parameters.\n" +#| "\n" +#| "NOTES:\n" +#| "\n" +#| "The password notification value (--pwdexpnotify) is stored here so it " +#| "will\n" +#| "be replicated. It is not currently used to notify users in advance of an\n" +#| "expiring password.\n" +#| "\n" +#| "Some attributes are read-only, provided only for information purposes. " +#| "These\n" +#| "include:\n" +#| "\n" +#| "Certificate Subject base: the configured certificate subject base,\n" +#| " e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +#| "Password plug-in features: currently defines additional hashes that the\n" +#| " password will generate (there may be other conditions).\n" +#| "\n" +#| "When setting the order list for mapping SELinux users you may need to\n" +#| "quote the value so it isn't interpreted by the shell.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Show basic server configuration:\n" +#| " ipa config-show\n" +#| "\n" +#| " Show all configuration options:\n" +#| " ipa config-show --all\n" +#| "\n" +#| " Change maximum username length to 99 characters:\n" +#| " ipa config-mod --maxusername=99\n" +#| "\n" +#| " Increase default time and size limits for maximum IPA server search:\n" +#| " ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +#| "\n" +#| " Set default user e-mail domain:\n" +#| " ipa config-mod --emaildomain=example.com\n" +#| "\n" +#| " Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +#| " ipa config-mod --enable-migration=TRUE\n" +#| "\n" +#| " Define SELinux user map order:\n" +#| " ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:" +#| "s0-s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" +"\n" +"Configuration du serveur\n" +"\n" +"Gérer les valeurs par défaut utilisées par IPA ainsi que certains de ses\n" +"paramètres d'ajustement.\n" +"\n" +"NOTES :\n" +"\n" +"La valeur de notification du mot de passe (--pwdexpnotify) est stockée ici\n" +"en vue de sa réplication. Elle n'est pas actuellement utilisée pour " +"notifier\n" +"par avance aux utilisateurs l'expiration de leur mot de passe.\n" +"\n" +"Certains attributs sont en lecture seule, fournis à titre d'information ;\n" +"ils comprennent :\n" +"\n" +"* la base sujet de certificat : la base de sujet de certificat configuré,\n" +" ex. O=EXAMPLE.COM, configurable uniquement à l'installation.\n" +"* les fonctions du greffon mots de passe : définit les hachages " +"additionnels\n" +" qu'un mot de passe va générer (d'autres conditions peuvent s'appliquer).\n" +"\n" +"En fixant la liste ordonnée pour le mappage des utilisateurs SELinux, vous\n" +"devez mettre entre guillemets les valeurs pour éviter leur interprétation.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Afficher la configuration de base du serveur :\n" +" ipa config-show\n" +"\n" +" Afficher toutes les options de configuration :\n" +" ipa config-show --all\n" +"\n" +" Modifier la longueur maximale d'un nom d'utilisateur à 99 caractères :\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Augmenter délais et limites de taille des recherches sur le serveur IPA :\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Définir le domaine pour les courriels de l'utilisateur par défaut :\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Activer le mode migration pour que « ipa migrate-ds » soit opérationelle :\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Définir l'ordre de la mappe des utilisateurs SELinux :\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "doit être supérieur ou égal à %(minvalue)d" + +msgid "configuration options" +msgstr "options de configuration" + +msgid "Configuration" +msgstr "Configuration" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "Longueur maximale du nom d'utilisateur" + +msgid "IPA masters" +msgstr "Maîtres IPA" + +msgid "List of all IPA masters" +msgstr "Liste des maîtres IPA" + +#, fuzzy +#| msgid "IPA masters" +msgid "Hidden IPA masters" +msgstr "Maîtres IPA" + +#, fuzzy +#| msgid "List of all IPA masters" +msgid "List of all hidden IPA masters" +msgstr "Liste des maîtres IPA" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "Serveurs d'AC IPA" + +msgid "IPA servers configured as certificate authority" +msgstr "Serveurs IPA configurés comme autorité de certification" + +#, fuzzy +#| msgid "IPA CA servers" +msgid "Hidden IPA CA servers" +msgstr "Serveurs d'AC IPA" + +#, fuzzy +#| msgid "IPA servers configured as certificate authority" +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Serveurs IPA configurés comme autorité de certification" + +msgid "IPA CA renewal master" +msgstr "Maître de renouvellement d'AC IPA" + +msgid "Renewal master for IPA certificate authority" +msgstr "Maître en charge du renouvellement de l'autorité de certification" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "IPA servers configured as key recovery agent" +msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" + +#, fuzzy +#| msgid "IPA KRA servers" +msgid "Hidden IPA KRA servers" +msgstr "Serveurs KRA IPA" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "IPA servers configured as domain name server" +msgstr "Serveur IPA configuré comme maître des clés DNSSec" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA DNS servers" +msgstr "Serveurs DNS IPA" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "Hidden IPA servers configured as domain name server" +msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" + +#, fuzzy +#| msgid "IPA DNSSec key master" +msgid "DNSec key master" +msgstr "Maître des clés DNSSec IPA" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "les options ne sont pas autorisées" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "nom de domaine invalide : %s" + +#, fuzzy, python-format +#| msgid "Removed information about the trusted domain \"%(value)s\"" +msgid "Server has no information about domain '%(domain)s'" +msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "Le groupe n'existe pas" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "attribut « %s » interdit" + +msgid "May not be empty" +msgstr "Ne peut pas être vide" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "L'attribut par défaut %(attr)s de %(obj)s n'est pas autorisé !" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "Est attendue une liste des utilisateurs SELinux, délimités par des $" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "L'utilisateur SELinux « %(user)s » n'est pas valide : %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" +"L'utilisateur par défaut de la mappe utilisateur SELinux n'est pas dans la " +"liste d'ordre" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of users\n" +#| "\n" +#| "Manage groups of users. By default, new groups are POSIX groups. You\n" +#| "can add the --nonposix option to the group-add command to mark a new " +#| "group\n" +#| "as non-POSIX. You can use the --posix argument with the group-mod " +#| "command\n" +#| "to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +#| "converted to non-POSIX groups.\n" +#| "\n" +#| "Every group must have a description.\n" +#| "\n" +#| "POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +#| "supported but can have an impact on your file permissions. It is not " +#| "necessary\n" +#| "to supply a GID when creating a group. IPA will generate one " +#| "automatically\n" +#| "if it is not provided.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new group:\n" +#| " ipa group-add --desc='local administrators' localadmins\n" +#| "\n" +#| " Add a new non-POSIX group:\n" +#| " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +#| "\n" +#| " Convert a non-POSIX group to posix:\n" +#| " ipa group-mod --posix remoteadmins\n" +#| "\n" +#| " Add a new POSIX group with a specific Group ID number:\n" +#| " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +#| "\n" +#| " Add a new POSIX group and let IPA assign a Group ID number:\n" +#| " ipa group-add --desc='printer admins' printeradmins\n" +#| "\n" +#| " Remove a group:\n" +#| " ipa group-del unixadmins\n" +#| "\n" +#| " To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +#| " ipa group-add-member --groups=remoteadmins localadmins\n" +#| "\n" +#| " Add multiple users to the \"localadmins\" group:\n" +#| " ipa group-add-member --users=test1 --users=test2 localadmins\n" +#| "\n" +#| " Remove a user from the \"localadmins\" group:\n" +#| " ipa group-remove-member --users=test2 localadmins\n" +#| "\n" +#| " Display information about a named group.\n" +#| " ipa group-show localadmins\n" +#| "\n" +#| "External group membership is designed to allow users from trusted " +#| "domains\n" +#| "to be mapped to local POSIX groups in order to actually use IPA " +#| "resources.\n" +#| "External members should be added to groups that specifically created as\n" +#| "external and non-POSIX. Such group later should be included into one of " +#| "POSIX\n" +#| "groups.\n" +#| "\n" +#| "An external group member is currently a Security Identifier (SID) as " +#| "defined by\n" +#| "the trusted domain. When adding external group members, it is possible " +#| "to\n" +#| "specify them in either SID, or DOM\n" +#| "ame, or name@domain format. IPA will attempt\n" +#| "to resolve passed name to SID with the use of Global Catalog of the " +#| "trusted domain.\n" +#| "\n" +#| "Example:\n" +#| "\n" +#| "1. Create group for the trusted domain admins' mapping and their local " +#| "POSIX group:\n" +#| "\n" +#| " ipa group-add --desc=' admins external map' " +#| "ad_admins_external --external\n" +#| " ipa group-add --desc=' admins' ad_admins\n" +#| "\n" +#| "2. Add security identifier of Domain Admins of the to the " +#| "ad_admins_external\n" +#| " group:\n" +#| "\n" +#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#| "Admins'\n" +#| "\n" +#| "3. Allow members of ad_admins_external group to be associated with " +#| "ad_admins POSIX group:\n" +#| "\n" +#| " ipa group-add-member ad_admins --groups ad_admins_external\n" +#| "\n" +#| "4. List members of external members of ad_admins_external group to see " +#| "their SIDs:\n" +#| "\n" +#| " ipa group-show ad_admins_external\n" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Groupes d'utilisateurs\n" +"\n" +"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " +"POSIX.\n" +"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" +"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" +"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" +"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" +"POSIX.\n" +"\n" +"Chaque groupe doit avoir une description.\n" +"\n" +"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" +"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" +"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " +"groupe.\n" +"IPA en générera un automatiquement s'il n'est pas fourni.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe :\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Ajouter un nouveau groupe non-POSIX :\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convertir un groupe non-POSIX en groupe POSIX :\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " +"groupe :\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Supprimer un groupe :\n" +" ipa group-del unixadmins\n" +"\n" +" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Supprimer un utilisateur du groupe « localadmins » :\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Afficher des informations à propos d'un groupe donné :\n" +" ipa group-show localadmins\n" +"\n" +"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " +"de\n" +"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" +"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" +"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " +"tel\n" +"groupe peut plus tard être incorporé dans un des groupes POSIX\n" +"\n" +"Un membre de groupe externe est actuellement identifié par un « Security\n" +"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" +"un membre de groupe externe, il est possible de le définir, soit au format\n" +"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " +"passé\n" +"en SID en se servant du « Global Catalog » des domaines approuvés.\n" +"\n" +"Exemple:\n" +"\n" +"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" +" et à leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" +" groupe externe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à être associés " +"au\n" +" groupe POSIX « ad_admins » :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" +" leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "groups" +msgstr "groupes" + +msgid "User Group" +msgstr "Groupe d'Utilisateurs" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Groupe « %(value)s » créé" + +msgid "gid cannot be set for external group" +msgstr "l'identifiant de groupe ne peut être défini pour un groupe externe" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Groupe « %(value)s » supprimé" + +msgid "privileged group" +msgstr "groupe avec privilèges" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Groupe « %(value)s » modifié" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d groupe correspondant" +msgstr[1] "%(count)d groupes correspondants" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Impossible de réaliser la validation de membre externe sans installer " +"Samba 4. Assurez-vous d'avoir installé le sous-paquet « IPAserver-trust-ad » " +"sur le serveur" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Impossible de rejoindre un domaine sans avoir au préalable configuré son " +"propre domaine. Assurez-vous d'avoir lancé « ipa-adtrust-install » au " +"préalable sur le serveur" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Groupe « %(value)s » détaché de l'utilisateur « %(value)s »" + +msgid "not allowed to modify user entries" +msgstr "modification des entrées d'un utilisateur interdite" + +msgid "not allowed to modify group entries" +msgstr "modification des entrées de groupe interdite" + +msgid "Not a managed group" +msgstr "Pas un groupe administré" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." + +msgid "" +"\n" +"Permissions\n" +msgstr "" +"\n" +"Permissions\n" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" +"\n" +"Une permission permet une délégation de droits finement nuancée. Elle est\n" +"une enveloppe lisible par le commun de Règles de contrôle d'accès 389-ds,\n" +"ou d'instruction (ACI).\n" +"Une permission donne le droit d'effectuer des tâches données comme ajouter\n" +"un utilisateur, modifier un groupe, etc.\n" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"Une permission ne peut pas contenir d'autres permissions.\n" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* Une permission donne le droit de lire, écrire, ajouter, supprimer,\n" +" rechercher, ou comparer.\n" +"* Un privilège combine des permissions semblables (par exemple\n" +" toutes les permissions nécessaires pour ajouter un utilisateur).\n" +"* Un rôle garantit un ensemble de privilèges pour des utilisateurs, des " +"groupes, des hôtes ou des groupes d'hôtes.\n" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" +"\n" +"Une permission se compose de plusieurs parties :\n" +"\n" +"1. le nom de la permission.\n" +"2. la cible de la permission.\n" +"3. les droits garantis par la permission.\n" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"Les droits définissent les opérations permises ; ce sont un ou plusieurs\n" +"des éléments suivants :\n" +"1. write - écrire un ou plusieurs attributs\n" +"2. read - lire un ou plusieurs attributs\n" +"3. search - rechercher un ou plusieurs attributs\n" +"4. compare - comparer un ou plusieurs attributs\n" +"5. add - ajouter une nouvelle entrée dans l'arbre\n" +"6. delete - supprimer une entrée existante\n" +"7. all - toutes les permissions sont garanties\n" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" +"\n" +"Notez la distinction entre attributs et entrées. Les permissions sont\n" +"indépendantes, donc la possibilité d'ajouter un utilisateur ne signifie\n" +"pas qu'il est possible de les modifier.\n" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" +"\n" +"Il y a un certain nombre de cibles autorisées :\n" +"1. sous-arbre : un DN ; la permission s'applique au sous-arbre sous ce DN\n" +"2. filtre de cibles : un filtre LDAP\n" +"3. cible : un DN avec possiblement des jokers, indique les entrées\n" +"auxquelles la permission s'applique\n" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" +"\n" +"En plus, il y a les options de commodité suivantes.\n" +"Activer une de ces options définit l'attribut correspondant.\n" +"1. type: un type d'objet (utilisateur, groupe, etc) ; définit le filtre du\n" +"sous-arbre et de la cible.\n" +"2. memberof : s'applique aux membres d'un groupe ; définit le filtre de la\n" +"cible.\n" +"3. targetgroup : permet la modification d'un groupe donné (comme ceux\n" +" de gestion de l'appartenance à un groupe); définit la cible.\n" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" +"\n" +"Permissions administrées\n" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" +"\n" +"Les permissions venant par défaut avec IPA sont dites « administrées ».\n" +"Un jeu d'attributs par défaut leur a été appliqué, mais l'administrateur\n" +"peut ajouter/supprimer des attributs individualisés à cet ensemble.\n" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"Supprimer ou renommer une permission administrée, ou changer sa cible,\n" +"n'est pas autorisé.\n" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" +"\n" +" Ajouter une permission autorisant la création d'utilisateurs :\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +" Ajouter une permission autorisant de gérer l'appartenance à un groupe :\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" + +msgid "must be enclosed in parentheses" +msgstr "doit être mis entre parenthèses" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "« %s » n'est pas un type d'objet" #, python-format msgid "\"%s\" is not a valid permission type" msgstr "« %s » n'est pas un type de permission autorisé" #, python-format -msgid "\"%s\" is not an object type" -msgstr "« %s » n'est pas un type d'objet" +msgid "Deprecated; use %s" +msgstr "Abandonné ; utiliser %s" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" +"Une permission avec un marqueur inconnu %s ne peut pas être modifiée ou " +"supprimée" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "Une permission SYSTEM ne peut ni être modifiée, ni supprimée" + +#, python-format +msgid "Entry %s not found" +msgstr "Entrée %s introuvable" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "L'ACI de la permission %(name)s n'a pas été trouvée dans %(dn)s " + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" +"impossible de définir simultanément un filtre de cible totale et un filtre " +"de cible complémentaire" + +#, python-format +msgid "option was renamed; use %s" +msgstr "option renommée ; utiliser %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "Impossible d'utiliser %(old_name)s avec %(new_name)s" + +#, python-format +msgid "%s: group not found" +msgstr "%s : groupe introuvable" + +msgid "target and targetgroup are mutually exclusive" +msgstr "« target » et « targetgroup » s'excluent mutuellement" + +msgid "subtree and type are mutually exclusive" +msgstr "« subtree » et « type » s'excluent mutuellement" + +msgid "Bad search filter" +msgstr "Mauvais filtre de recherche" + +#, python-format +msgid "Entry %s does not exist" +msgstr "L'entrée %s n'existe pas" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" +"il doit y avoir au moins une définition d'entrée cible (ex. « target », " +"« targetfilter », « attrs »)" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Permission « %(value)s » ajoutée" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "« attrs » et attributs inclus s'excluent mutuellement" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "Impossible d'enregistrer les ACI de permissions dans %s" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Permission « %(value)s » supprimée" + +msgid "cannot delete managed permissions" +msgstr "impossible de supprimer des permissions administrées" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI de la permission %s introuvable" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Permission « %(value)s » modifiée" + +msgid "cannot rename managed permissions" +msgstr "impossible de renommer les permissions administrées" + +msgid "not modifiable on managed permissions" +msgstr "non modifiable sur les permissions administrées" + +msgid "only available on managed permissions" +msgstr "uniquement disponible sur les permissions administrées" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "« attrs » et attributs inclus/exclus s'excluent mutuellement" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" +"impossible de définir le type de liaison d'une permission assignée à un " +"privilège" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d permission correspondant" +msgstr[1] "%(count)d permissions correspondant" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Jetons OTP\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Gérer les jetons OTP.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" +"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Ajouter un nouveau jeton :\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Examiner un jeton :\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" +"\n" +" Modifier le fournisseur :\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Supprimer un jeton :\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "OTP token" +msgstr "jeton OTP" + +msgid "OTP tokens" +msgstr "jetons OTP" + +msgid "OTP Tokens" +msgstr "Jetons OTP" + +msgid "OTP Token" +msgstr "Jeton OTP" + +msgid "URI" +msgstr "URI" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Jeton OTP « %(value)s » ajouté" + +msgid "cannot be empty" +msgstr "ne peut pas être vide" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Jeton OTP « %(value)s » supprimé" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Jeton OTP « %(value)s » modifié" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d jeton OTP correspond" +msgstr[1] "%(count)d jetons OTP correspondant" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" +"\n" +"Règles sudo\n" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" +"\n" +"Sudo (su « do ») autorise un administrateur système à déléguer la " +"possibilité\n" +" à certains utilisateurs (ou groupes d'utilisateurs) d'exécuter certaines\n" +" (ou toutes) commandes en tant qu'administrateur ou autre utilisateur, tout\n" +" en donnant des moyens de contrôle des commandes et de leurs arguments.\n" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"IPA offre les moyens de configurer les divers aspects de sudo :\n" +" Users : utilisateur/groupe autorisés à invoquer sudo.\n" +" Hosts : hôte/groupe d'hôte dont l'utilisateur peut invoquer sudo.\n" +" Allow Command : commande donnée pouvant être exécutée via sudo.\n" +" Deny Command : commande donnée interdite d'exécution avec sudo.\n" +" RunAsUser : utilisateur ou groupe dont les droits sudo pourront être " +"invoqués.\n" +" RunAsGroup : groupe dont les droits sudo associés au GID pourront être " +"invoqués.\n" +" Options : les diverses options de sudoers pouvant modifier le " +"comportement de sudo.\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"Il est possible d'ajouter aux règles sudo l'indication de l'ordre dans\n" +"lequel elles doivent être examinées (si le client le prend en charge).\n" +"Cet ordre est défini par un entier, qui doit être unique.\n" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" +"\n" +"IPA permet la désignation d'un « binddn » à utiliser avec sudo situé à :\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" +"\n" +"Pour activer « binddn », exécuter la commande pour fixer le mot de passe :\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" +"\n" +" Création d'une nouvelle règle :\n" +" ipa sudorule-add readfiles\n" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" +"\n" +" Ajout d'un objet de commande sudo et ajout en tant que commande autorisée " +"dans la règle :\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" +"\n" +" Ajout d'un hôte à la règle :\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" +"\n" +" Ajout d'un utilisateur à la règle :\n" +" ipa sudorule-add-user readfiles --users jsmith\n" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" +"\n" +" Ajout d'une règle sudo spéciale pour la configuration du serveur sudo par " +"défaut :\n" +" ipa sudorule-add defaults\n" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +" Définition d'une option par défaut pour sudo :\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "cette option a été abandonnée." + +msgid "sudo rules" +msgstr "règles sudo" + +msgid "Sudo Rules" +msgstr "Règles sudo" + +msgid "Sudo Rule" +msgstr "Règle sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"le rang doit être une valeur unique (%(order)d déjà utilisée par %(rule)s)" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Règle sudo « %(value)s » ajoutée" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Règle sudo « %(value)s » supprimée" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Règle sudo « %(value)s » modifiée" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"la catégorie %(type)s ne peut pas être définie à « all » tant que sont " +"alloués %(objects)s" + +msgid "users" +msgstr "utilisateurs" + +msgid "command" +msgstr "commande" + +msgid "commands" +msgstr "commandes" + +msgid "runAs user" +msgstr "utilisateur runAs" + +msgid "runAs users" +msgstr "utilisateurs runAs" + +msgid "group runAs" +msgstr "groupe runAs" + +msgid "runAs groups" +msgstr "groupes runAs" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d règle sudo correspondant" +msgstr[1] "%(count)d règles sudo correspondant" + +msgid "commands cannot be added when command category='all'" +msgstr "" +"des commandes ne peuvent pas être ajoutées quand la catégorie de commande " +"est « all »" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" +"des utilisateurs ne peuvent pas être ajoutés quand la catégorie « RunAs " +"User » ou « RunAs Group » est « all »" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom d'utilisateur" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom de groupe" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "« RunAsGroup » n'accepte pas « %(name)s » comme nom de groupe" + +msgid "commands for controlling sudo configuration" +msgstr "commandes pour contrôler la configuration sudo" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" +"\n" +"Commandes sudo\n" +"\n" +"Commandes utilisées en tant que briques de base pour sudo\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une nouvelle commande\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Supprimer une commande\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" + +msgid "sudo command" +msgstr "commande sudo" + +msgid "sudo commands" +msgstr "commandes sudo" + +msgid "Sudo Commands" +msgstr "Commandes sudo" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Commande sudo « %(value)s » ajoutée" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Commande sudo « %(value)s » supprimée" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Commande sudo « %(value)s » modifiée" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d commande sudo correspondant" +msgstr[1] "%(count)d commandes sudo correspondant" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" +"\n" +"Groupes de commandes sudo\n" +"\n" +"Administre les groupes de commandes sudo.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe de commandes sudo :\n" +" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" +"\n" +" Supprimer un groupe de commandes sudo :\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Afficher un groupe de commandes sudo :\n" +" ipa sudocmdgroup-show admincmds\n" + +msgid "sudo command group" +msgstr "groupe de commandes sudo" + +msgid "sudo command groups" +msgstr "groupes de commandes sudo" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Groupe de commandes sudo « %(value)s » ajouté" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Groupe de commandes sudo « %(value)s » supprimé" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Groupe de commandes sudo « %(value)s » modifié." + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d groupe de commandes Sudo correspondant" +msgstr[1] "%(count)d groupes de commandes Sudo correspondant" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Realm domains\n" +#| "\n" +#| "Manage the list of domains associated with IPA realm.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Display the current list of realm domains:\n" +#| " ipa realmdomains-show\n" +#| "\n" +#| " Replace the list of realm domains:\n" +#| " ipa realmdomains-mod --domain=example.com\n" +#| " ipa realmdomains-mod --domain={example1.com,example2.com,example3." +#| "com}\n" +#| "\n" +#| " Add a domain to the list of realm domains:\n" +#| " ipa realmdomains-mod --add-domain=newdomain.com\n" +#| "\n" +#| " Delete a domain from the list of realm domains:\n" +#| " ipa realmdomains-mod --del-domain=olddomain.com\n" +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Domaines du royaume\n" +"\n" +"Gérer la liste des domaines associés au royaume IPA.\n" +"\n" +"EXEMPLES:\n" +"\n" +" Afficher la liste actuelle des domaines du royaume :\n" +" ipa realmdomains-show\n" +"\n" +" Remplacer la liste des domaines du royaume :\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Ajouter un domaine à la liste des domaines du royaume :\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Supprimer un domaine de la liste des domaines du royaume :\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" + +msgid "Realm domains" +msgstr "Domaines du royaume" + +msgid "Realm Domains" +msgstr "Domaines pour le royaume" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"La zone DNS de chaque domaine Kerberos doit contenir des enregistrements SOA " +"et NS. Aucun enregistrement trouvé pour : %s" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" +"Les domaines suivants n'appartiennent pas à ce domaine Kerberos : %(domains)s" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"Le domaine Kerberos des domaines suivants ne peuvent être détectés : " +"%(domains)s. S'il existe des domaines appartenant à ce royaume, merci de " +"créer un enregistrement TXT kerberos contenant « %(realm)s » dans chacun " +"d'entre eux." + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"L'option « --domain » ne peut être utilisée conjointement avec les options " +"« --add-domain » or « --del-domain ». Utilisez « --domain » pour indiquer " +"explicitement la liste complète des domaines du royaume, utilisez « --add-" +"domain » et « --del-domain » pour ajouter et supprimer les domaines de " +"manière individuelle." + +msgid "IPA server domain cannot be omitted" +msgstr "Le domaine du serveur IPA ne peut être omis" + +msgid "IPA server domain cannot be deleted" +msgstr "Le domaine du serveur IPA ne peut être supprimé" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +#, fuzzy +#| msgid "User object class" +msgid "Object class name" +msgstr "Classe d'objets utilisateur" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "réglages de la politique de tickets Kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Politique de tickets Kerberos" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "Vie max." + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "Renouvellement max." + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "Vie max." + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "Nom du serveur mandataire RADIUS" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "Vie max." + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "Renouvellement max." + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" + +msgid "Hardened max renew" +msgstr "" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "La politique de ticket pour %s ne peut pas être lue" + +msgid "Default ticket policy could not be read" +msgstr "La politique de ticket par défaut ne peut pas être lue" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" +"Impossible de lire « originfilter » de « UPG Definition ». Vérifiez vos " +"permissions." + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"Emplacements IPA\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Manipulation des emplacements DNS\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Trouver tous les emplacements :\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Afficher un emplacement spécifique :\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Ajouter un emplacement :\n" +" ipa location-add location --description 'Mon emplacement'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Supprimer un emplacement :\n" +" ipa location-del location\n" + +msgid "location" +msgstr "emplacement" + +msgid "locations" +msgstr "emplacements" + +msgid "IPA Locations" +msgstr "Emplacements IPA" + +msgid "IPA Location" +msgstr "Emplacement IPA" + +msgid "Location name" +msgstr "Nom de l'emplacement" + +msgid "IPA location name" +msgstr "Nom de l'emplacement IPA" + +msgid "IPA Location description" +msgstr "Description de l'emplacement IPA" + +msgid "Servers" +msgstr "Serveurs" + +msgid "Servers that belongs to the IPA location" +msgstr "Serveurs appartenants à l'emplacement IPA" + +msgid "Advertised by servers" +msgstr "Publié par les serveurs" + +msgid "List of servers which advertise the given location" +msgstr "Liste des serveurs qui publient un emplacement donné" + +msgid "Add a new IPA location." +msgstr "Ajouter un nouvel emplacement IPA." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Emplacement IPA « %(value)s » ajouté" + +msgid "Delete an IPA location." +msgstr "Supprimer un emplacement IPA." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Emplacement IPA « %(value)s » supprimé" + +msgid "IPA Server" +msgstr "Serveur IPA" + +msgid "Modify information about an IPA location." +msgstr "Modifier les informations d'un emplacement IPA." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Emplacement IPA « %(value)s » modifié" + +msgid "Search for IPA locations." +msgstr "Rechercher des emplacements IPA." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d emplacement IPA correspondant" +msgstr[1] "%(count)d emplacements IPA correspondants" + +msgid "Display information about an IPA location." +msgstr "Afficher les informations d'un emplacement IPA." + +msgid "Servers in location" +msgstr "Serveurs situés à l'emplacement" + +msgid "" +"\n" +"API Schema\n" +msgstr "" +"\n" +"Schéma de l'API\n" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"Fournit des capacités d'introspection de l'API.\n" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Afficher les informations sur user-find :\n" +" ipa command-show user-find\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Trouver les arguments disponibles pour user-find :\n" +" ipa param-find user-find\n" + +msgid "Name" +msgstr "Nom" + +msgid "Documentation" +msgstr "Documentation" + +msgid "Exclude from" +msgstr "Exclure de" + +msgid "Include in" +msgstr "Inclure dans" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« %s »)" + +msgid "Help topic" +msgstr "Sujet de l'aide" + +msgid "Version" +msgstr "Version" + +msgid "Parameters" +msgstr "Paramètres" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Record name" +msgid "Method name" +msgstr "Nom d'enregistrement" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s : %(oname)s introuvable" + +msgid "Display information about a command." +msgstr "Afficher des informations sur une commande." + +msgid "Search for commands." +msgstr "Rechercher des commandes." + +#, fuzzy +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "Exécute les commandes" + +#, fuzzy +#| msgid "Display information about a host." +msgid "Display information about a class." +msgstr "Afficher les informations sur un hôte." + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for classes." +msgstr "Rechercher des rôles." + +msgid "Display information about a help topic." +msgstr "Afficher les informations sur un sujet de l'aide." + +msgid "Search for help topics." +msgstr "Rechercher des sujets de l'aide." + +msgid "Required" +msgstr "Requis" + +msgid "Multi-value" +msgstr "Multi-valué" + +msgid "Always ask" +msgstr "Toujours demander" + +msgid "CLI metavar" +msgstr "Metavariable CLI" + +msgid "CLI name" +msgstr "Nom CLI" + +msgid "Confirm (password)" +msgstr "Confirmer le mot de passe" + +msgid "Default" +msgstr "Par défaut" + +msgid "Default from" +msgstr "Valeur par défaut depuis" + +msgid "Label" +msgstr "Étiquette" + +msgid "Convert on server" +msgstr "Convertir sur le serveur" + +msgid "Option group" +msgstr "Groupe d'options" + +msgid "Sensitive" +msgstr "Sensible" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Arguments positionnels" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s : %(oname)s introuvable" + +msgid "Display information about a command parameter." +msgstr "Afficher des informations sur un paramètre de commande." + +msgid "Search command parameters." +msgstr "Rechercher des paramètres de commandes." + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s : %(oname)s introuvable" + +msgid "Display information about a command output." +msgstr "Afficher les informations sur une sortie de commande." + +msgid "Search for command outputs." +msgstr "Rechercher des sorties de commande." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Add new ID range.\n" +#| "\n" +#| " To add a new ID range you always have to specify\n" +#| "\n" +#| " --base-id\n" +#| " --range-size\n" +#| "\n" +#| " Additionally\n" +#| "\n" +#| " --rid-base\n" +#| " --secondary-rid-base\n" +#| "\n" +#| " may be given for a new ID range for the local domain while\n" +#| "\n" +#| " --rid-base\n" +#| " --dom-sid\n" +#| "\n" +#| " must be given to add a new range for a trusted AD domain.\n" +#| "\n" +#| " WARNING:\n" +#| "\n" +#| " DNA plugin in 389-ds will allocate IDs based on the ranges configured " +#| "for the\n" +#| " local domain. Currently the DNA plugin *cannot* be reconfigured " +#| "itself based\n" +#| " on the local ranges set via this family of commands.\n" +#| "\n" +#| " Manual configuration change has to be done in the DNA plugin " +#| "configuration for\n" +#| " the new local range. Specifically, The dnaNextRange attribute of " +#| "'cn=Posix\n" +#| " IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +#| "has to be\n" +#| " modified to match the new range.\n" +#| " " +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"\n" +"Ajouter une nouvelle plage d'identifiants.\n" +"\n" +" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " +"préciser\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" En outre,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " +"que\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " +"confiance.\n" +"\n" +" AVERTISSEMENT :\n" +"\n" +" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" +" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" +" lui-même reconfiguré selon les plages locales définies par " +"l'intermédiaire\n" +" de cette famille de commandes.\n" +"\n" +" Un changement manuel de configuration doit être opéré dans la " +"configuration\n" +" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" +" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " +"Assignment Plugin », « cn=plugins », « cn=config »\n" +" doivent être modifiés pour correspondre à cette nouvelle plage.\n" +" " + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "Plages d'ID" + +msgid "ID Range" +msgstr "Plage d'ID" + +msgid "local domain range" +msgstr "Plage pour domaine local" + +msgid "Active Directory domain range" +msgstr "Plage pour les domaines Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" +"Plage pour les relations d'approbation Active Directory avec attributs POSIX" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" +"une modification de plage laissant des objets avec un ID en dehors de la " +"plage définie n'est pas autorisée" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Impossible de réaliser la validation du SID sans installer la prise en " +"charge de Samba 4. Assurez-vous d'avoir installé le sous-paquet d'IPA " +"« server-trust-ad » sur le serveur" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Les confiances croisées entre domaines n'ont pas été configurées. Assurez-" +"vous d'avoir préalablement exécuté « ipa-adtrust-install » sur le serveur" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" +"Le SID n'est pas reconnu en tant que SID valide pour un domaine approuvé" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Plage d'ID « %(value)s » ajoutée" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" +"Les options dom-sid et dom-name ne peuvent pas être utilisées simultanément" + +#, fuzzy +#| msgid "trusted domain object not found" +msgid "Specified trusted domain name could not be found." +msgstr "objet relation de confiance introuvable" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" +"Les options « dom-sid/dom-name » et « rid-base » doivent être utilisées " +"simultanément" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"L'option rid-base ne doit pas être utilisée lorsque le type de plage IPA est " +"ipa-ad-trust-posix" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"Le type de plage IPA doit être « ipa-ad-trust » ou « ipa-ad-trust-posix » " +"lorsque le SID du domaine approuvé est indiqué." + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Les options « dom-sid/dom-name » et « secondary-rid-base » ne peuvent pas " +"être utilisées simultanément" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"Le type de plage IPA ne doit être ni « ipa-ad-trust », ni « ipa-ad-trust-" +"posix » lorsque le SID du domaine approuvé n'est pas indiqué." + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" +"Les options « secondary-rid-base » et « rid-base » doivent être utilisées " +"simultanément" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "Les plages de RID principales et secondaires ne peuvent se recouvrir" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Vous devez préciser les deux options « rid-base » et « secondary-rid-base », " +"car « ipa-adtrust-install » a déjà été exécuté." + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Plage d'ID « %(value)s » supprimée" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d plage correspondant" +msgstr[1] "%(count)d plages correspondant" + +#, fuzzy +#| msgid "Modify ID range." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Modifier une plage." + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Plage d'ID « %(value)s » modifiée" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Cette commande ne peut être utilisée que pour modifier l'allocation d'ID " +"pour le domaine local. Utilisez « ipa help idrange » pour plus " +"d'informations." + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"Impossible de trouver le SID du domaine approuvé désigné. Veuillez indiquer " +"directement le SID avec l'option « dom-sid »." + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" +"Les options « dom-sid » et « secondary-rid-base » ne peuvent pas être " +"utilisées simultanément" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" +"Les options « dom-sid » et « rid-base » doivent être utilisées simultanément" + +msgid "self service permission" +msgstr "permission de libre service" + +msgid "self service permissions" +msgstr "permissions de libre service" + +msgid "Self Service Permissions" +msgstr "Permissions de libre service" + +msgid "Self Service Permission" +msgstr "Permission de libre service" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Permission de libre service « %(value)s » ajoutée" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Permission de libre service « %(value)s » supprimée" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Permission de libre service « %(value)s » modifiée" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d permission de libre service correspondant" +msgstr[1] "%(count)d permissions de libre service correspondant" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Rôles serveurs IPA\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"Obtenir l'état des rôles (serveur DNS, AC, etc. )fournis par les maîtres " +"IPA.\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Afficher l'état du rôle « Serveur DNS » d'un serveur :\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Show status of all configured roles on a server:\n" +#| " ipa server-role-find ipa.example.com\n" +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Afficher l'état de tous les rôles configurés sur un serveur :\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Afficher l'état de tous les rôles configurés sur un serveur :\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "rôle serveur" + +msgid "server roles" +msgstr "rôles serveur" + +msgid "IPA Server Roles" +msgstr "Rôles serveur IPA" + +msgid "IPA Server Role" +msgstr "Rôle serveur IPA" + +msgid "IPA server role name" +msgstr "Nom du rôle serveur IPA" + +msgid "Role status" +msgstr "État du rôle" + +msgid "Status of the role" +msgstr "État du rôle" + +msgid "Show role status on a server" +msgstr "Afficher l'état du rôle sur un serveur" + +msgid "Find a server role on a server(s)" +msgstr "Trouver les rôles serveur de serveurs" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s rôle serveur correspondant" +msgstr[1] "%(count)s rôles serveur correspondants" + +#, fuzzy +#| msgid "Included attributes" +msgid "Include IPA master entries" +msgstr "Attributs inclus" + +msgid "roles" +msgstr "rôles" + +msgid "IPA role name" +msgstr "Nom du rôle IPA" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" +"Des membres locaux et des membres d'une règle HBAC ne peuvent pas être " +"définis simultanément" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" #, python-brace-format -msgid "${count} certificate(s) present" -msgstr "${count} certificate(s) présent(s)" +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" +"Liste de correspondance d'utilisateurs SELinux introuvable dans cette " +"configuration" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" +"Utilisateur SELinux %(user)s introuvable dans la liste ordonnée (dans la " +"configuration)" + +msgid "SELinux User Map rule" +msgstr "Règle de mappe utilisateurs SELinux" + +msgid "SELinux User Map rules" +msgstr "Règles de mappes utilisateurs SELinux" + +msgid "SELinux User Maps" +msgstr "Mappes d'utilisateurs SELinux" + +msgid "SELinux User Map" +msgstr "Mappe d'utilisateurs SELinux" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Règle HBAC %(rule)s introuvable" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » ajoutée" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » supprimée." + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » modifiée" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d mappe d'utilisateurs SELinux correspondant" +msgstr[1] "%(count)d mappe d'utilisateurs SELinux correspondant" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » activée" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » désactivée" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role} : rôle introuvable" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr} : attribut introuvable" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Autorités de certification" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "Récupérer un certificat existant." + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +#, fuzzy +#| msgid "Check the status of a certificate signing request." +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "Vérifier l'état d'une demande de signature de certificat." + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +#| "revocation reason details. " +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " +"pour plus d'informations sur les raisons de révocation." + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Non-spécifié" + +#, fuzzy +#| msgid "Key Compromise" +msgid " * 1 - keyCompromise\n" +msgstr "Clé compromise" + +#, fuzzy +#| msgid "AA Compromise" +msgid " * 2 - cACompromise\n" +msgstr "AA compromis" + +#, fuzzy +#| msgid "Affiliation Changed" +msgid " * 3 - affiliationChanged\n" +msgstr "Affiliation modifiée" + +msgid " * 4 - superseded\n" +msgstr "" + +#, fuzzy +#| msgid "Cessation of Operation" +msgid " * 5 - cessationOfOperation\n" +msgstr "Cessation d'activité" + +#, fuzzy +#| msgid "Certificate Hold" +msgid " * 6 - certificateHold\n" +msgstr "Certificat bloqué" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +#, fuzzy +#| msgid "Privilege Withdrawn" +msgid " * 9 - privilegeWithdrawn\n" +msgstr "Privilège retiré" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"Le principal '%(principal)s' n'est pas autorisé à utiliser l'AC '%(ca)s' " +"avec le profil '%(profile_id)s' pour l'émission de certificat." + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Hôte « %(host)s » introuvable" + +msgid "Issuing CA" +msgstr "AC émettrice" + +msgid "Name of issuing CA" +msgstr "Nom de l'AC émettrice" + +#, fuzzy +#| msgid "Base-64 encoded host certificate" +msgid "Base-64 encoded certificate." +msgstr "Certificat de l'hôte encodé en Base-64" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Certificat" + +#, fuzzy +#| msgid "CA certificate" +msgid "X.509 certificate chain" +msgstr "Certificat d'AC" + +msgid "Subject" +msgstr "Sujet" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Adresse courriel" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject DNS name" +msgstr "DN de l'objet" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Adresse" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Base du répertoire utilisateur" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Sujet" + +#, fuzzy +#| msgid "A IP Address" +msgid "Subject IP Address" +msgstr "A Adresse IP" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject OID" +msgstr "DN de l'objet" + +#, fuzzy +#| msgid "Subject DN" +msgid "Subject UPN" +msgstr "DN de l'objet" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Principal Kerberos" + +#, fuzzy +#| msgid "Subject Distinguished Name" +msgid "Subject Other Name" +msgstr "Nom distinctif de l'objet" + +msgid "Issuer" +msgstr "Émetteur" + +msgid "Issuer DN" +msgstr "DN de l'émetteur" + +msgid "Not Before" +msgstr "Pas avant" + +msgid "Not After" +msgstr "Pas après" + +msgid "Fingerprint (SHA1)" +msgstr "Empreinte (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Empreinte (SHA1)" + +msgid "Serial number (hex)" +msgstr "Numéro de série (hex)" + +msgid "Request status" +msgstr "État de la demande" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "ajoute automatiquement le principal s'il n'existe pas" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "Aucun « Common Name » n'a été trouvé dans le sujet de cette demande." + +#, fuzzy, python-format +#| msgid "" +#| "hostname in subject of request '%(cn)s' does not match principal hostname " +#| "'%(hostname)s'" +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" +"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " +"pas au nom d'hôte du principal « %(hostname)s »" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" +"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " +"pas au nom d'hôte du principal « %(hostname)s »" + +msgid "DN commonName does not match user's login" +msgstr "" +"Le « commonName » du DN ne correspond pas à l'identifiant de connexion de " +"l'utilisateur" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" +"L'adresse email du DN ne correspond à aucune des adresses email de " +"l'utilisateur" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" +"Privilège « write » insuffisant sur l'attribut « userCertificate » de " +"l'entrée « %s »." + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" +"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " +"%s pour les principaux d'utilisateurs." + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" +"Le principal du service pour le nom %s alternatif du sujet dans la demande " +"de certificat n'existe pas" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" +"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " +"alternatif." + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" +"Le principal « %s » du nom alternatif ne correspond pas au principal demandé" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" +"L'attribut RFC822Name ne correspond à aucune des adresses email de " +"l'utilisateur" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" +"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " +"%s pour les principaux autres qu'utilisateurs." + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "Le type %s de nom alternatif de sujet est interdit" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "L'autorité de certification « %s » est désactivée" + +#, fuzzy +#| msgid "Sudo Option" +msgid "'add' option" +msgstr "Option sudo" + +msgid "The principal for this request doesn't exist." +msgstr "Le principal pour cette demande n'existe pas." + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "État" + +msgid "Revoked" +msgstr "Révoqué" + +msgid "Revocation reason" +msgstr "Raison de la révocation" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" +"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " +"pour plus d'informations sur les raisons de révocation." + +#, python-format +msgid "Owner %s" +msgstr "%s propriétaire" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Certificat de l'AC « %(ca)s » avec le numéro de série %(serial)s introuvable" + +msgid "7 is not a valid revocation reason" +msgstr "7 n'est pas une raison de révocation valide" + +#, fuzzy +#| msgid "Results should contain primary key attribute only (\"name\")" +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« name »)" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d certificat correspondant" +msgstr[1] "%(count)d certificats correspondants" + +#, fuzzy, python-format +#| msgid "Search for netgroups with these member hosts." +msgid "Search for certificates with these owner %s." +msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." + +#, fuzzy, python-format +#| msgid "Search for netgroups without these member hosts." +msgid "Search for certificates without these owner %s." +msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." + +msgid "ID View" +msgstr "Vue d'identifiants" + +msgid "system ID View" +msgstr "Vue d'identifiants du système" + +msgid "ID Views" +msgstr "Vues d'identifiants" + +msgid "User object overrides" +msgstr "Surcharges des objets utilisateurs" + +msgid "Group object overrides" +msgstr "Surcharges des objets groupes" + +msgid "Hosts the view applies to" +msgstr "Hôtes auxquels la vue s'applique" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Vue d'identifiants « %(value)s » ajoutée" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Vue d'identifiants « %(value)s » supprimée" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "Vue d'identifiant « %(value)s » modifiée" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d vue d'identifiants correspondante" +msgstr[1] "%(count)d vues d'identifiants correspondantes" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" +"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " +"hôte" + +msgid "not found" +msgstr "introuvable" + +#, fuzzy +#| msgid "Default Trust View cannot be applied on hosts" +msgid "ID View cannot be applied to IPA master" +msgstr "" +"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " +"hôte" + +msgid "ID View already applied" +msgstr "Vue d'identifiants déjà appliquée" + +msgid "value" +msgstr "valeur" + +#, python-format +msgid "ID View applied to %i host." +msgstr "Vue d'identifiants appliquée à %i hôte." + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "Vue d'identifiants appliquée à %i hôtes." + +#, python-format +msgid "ID View cleared from %i host." +msgstr "Vue d'identifiants retirée de %i hôte." + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "Vue d'identifiants retirée de %i hôtes." + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" +"Vous essayez de référencer un groupe privé magique qui ne peut être " +"surchargé. Essayez plutôt de surcharger l'attribut GID de l'utilisateur." + +msgid "IPA object" +msgstr "objet IPA" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "La balise « %(anchor)s » ne peut être résolue." + +msgid "Default Trust View cannot contain IPA users" +msgstr "" +"La vue de la relation d'approbation par défaut ne peut contenir des " +"utilisateurs IPA" + +msgid "Add a new ID override." +msgstr "Ajouter une nouvelle surcharge d'identifiant." + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants « %(value)s » ajoutée" + +msgid "Delete an ID override." +msgstr "Supprimer une surcharge d'identifiants." + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants « %(value)s » supprimée" + +msgid "Modify an ID override." +msgstr "Modifier une surcharge d'identifiants." + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants « %(value)s » modifiée" + +msgid "ID override" +msgstr "Surcharge d'identifiants" + +msgid "ID overrides cannot be renamed" +msgstr "Les surchages d'identifiants ne peuvent être renommées" + +msgid "Search for an ID override." +msgstr "Rechercher une surcharge d'identifiants." + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d surcharge d'identifiants correspondante" +msgstr[1] "%(count)d surcharges d'identifiants correspondantes" + +msgid "Display information about an ID override." +msgstr "Afficher les informations d'une surcharge d'identifiants." + +msgid "User ID override" +msgstr "Surcharge d'identifiant utilisateur" + +msgid "User ID overrides" +msgstr "Surcharges d'identifiants utilisateurs" + +msgid "Base-64 encoded user certificate" +msgstr "Certificat de l'utilisateur encodé en Base-64" + +msgid "Group ID override" +msgstr "Surcharge d'identifiant de groupe" + +msgid "Group ID overrides" +msgstr "Surcharges d'identifiants de groupes" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" +"Ajouter un ou plusieurs certificats à l'entrée de l'utilisateur surchargé " +"(idoverrideuser)" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur surchargé « %(value)s »" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Supprimer les certificats de l'entrée de l'utilisateur surchargé" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur surchargé « %(value)s »" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants utilisateurs « %(value)s » ajoutée" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants utilisateurs « %(value)s » supprimée" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants utilisateurs « %(value)s » modifiée" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d surcharge d'identifiants utilisateurs correspondante" +msgstr[1] "%(count)d surcharges d'identifiants utilisateurs correspondantes" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants de groupes « %(value)s » ajoutée" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants de groupes « %(value)s » supprimée" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants de groupes « %(value)s » modifiée" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d surcharge d'identifiants de groupes correspondante" +msgstr[1] "%(count)d surcharges d'identifiants de groupes correspondantes" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Règle d'adhésion automatique.\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Clarifie l'adhésion d'hôtes et d'utilisateurs en configurant des motifs\n" +"« regex » d'inclusion ou exclusion à assigner automatiquement aux nouvelles\n" +"entrées dans un groupe ou un groupe d'hôtes selon l'information d'attribut.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Une règle est directement associée à un groupe par le nom, donc il n'est " +"pas\n" +"possible de créer une règle sans groupe ou groupe d'hôtes d'accompagnement.\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Une condition est une expression rationnelle dont se sert « 389-ds » pour\n" +"associer nouvelle entrée et règle d'adhésion. Si l'entrée correspond à une\n" +"règle d'inclusion, elle est ajoutée au groupe ou groupe d'hôte approprié.\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"Un groupe ou groupe d'hôte par défaut peut être défini pour des entrées ne\n" +"correspondant à aucune règle. Tout utilisateur a ce groupe comme repli, car\n" +"il est par défaut membre du groupe indiqué dans la configuration de IPA.\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"« automember-rebuild » s'utilise pour appliquer rétroactivement les règles\n" +"d'adhésion automatique aux entrées présentes, et ainsi revoir leur " +"adhésion.\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" +"\n" +" Ajouter le groupe ou le groupe d'hôtes initial :\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" +"\n" +" Ajouter la règle initiale :\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" +"\n" +" Ajouter une condition à la règle :\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" +"\n" +" Ajouter une condition d'exclusion à la règle pour empêcher l'auto-" +"assignation :\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +" Ajouter un hôte :\n" +" ipa host-add web1.example.com\n" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" +"\n" +" Ajouter un utilisateur :\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" +"\n" +" Vérifier une adhésion automatique :\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" +"\n" +" Supprimer une condition de la règle :\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Modifier la règle d'adhésion automatique :\n" +" ipa automember-mod\n" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" +"\n" +" Définir le groupe cible par défaut (recours) :\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" +"\n" +" Supprimer le groupe cible par défaut (repli) ::\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" +"\n" +" Afficher le groupe cible par défaut (repki) :\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Retrouver toutes les règles d'adhésion automatique :\n" +" ipa automember-find\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete an automember rule:\n" +#| " ipa automember-del --type=hostgroup webservers\n" +#| " ipa automember-del --type=group devel\n" +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" +"\n" +" Supprimer une règle d'adhésion automatique :\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" +"\n" +" Afficher une règle d'adhésion automatique :\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +" Supprimer une règle d'adhésion automatique :\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"\n" +" Reconstruire l'appartenance de tous les utilisateurs :\n" +" ipa automember-rebuild --type=group\n" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"\n" +" Reconstruire l'appartenance de tous les hôtes :\n" +" ipa automember-rebuild --type=hostgroup\n" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" +"\n" +" Reconstruire l'appartenance d'utilisateurs donnés :\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +" Reconstruire l'appartenance d'hôtes donnés :\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "Auto Membership Rule" +msgstr "Règle d'appartenance automatique" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "« %(oname)s » de « %(otype)s » introuvable" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s n'est pas un attribut valide." + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Ajouter une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Règle d'auto-adhésion « %(value)s » ajoutée" + +msgid "Auto Membership is not configured" +msgstr "L'auto-adhésion n'est pas configurée" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Ajouter des conditions à une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Condition(s) ajoutées à « %(value)s »" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Règle d'auto-adhésion : %s introuvable !" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Surcharger ceci afin de pouvoir ajouter réussites et échecs aux\n" +" résultats renvoyés.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Supprimer des conditions d'une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Conditions supprimées de « %(value)s »" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Surcharger ceci afin de pouvoir définir réussites et échecs.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Modifier une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Règle d'auto-adhésion « %(value)s » modifiée" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Supprimer une règle d'auto-adhésion.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Règle d'auto-adhésion « %(value)s » supprimée" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Rechercher des règles d'auto-adhésion.\n" +" " + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d règle correspondante" +msgstr[1] "%(count)d règles correspondantes" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Afficher des informations au sujet d'une règle d'auto-adhésion.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Définit un groupe par défaut (repli) pour toutes les entrées sans " +"correspondance.\n" +" " + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" +"Définir le groupe « %(value)s » par défaut (repli) pour l'auto-adhésion" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Supprimer le groupe par défaut (repli) pour toute entrée sans " +"correspondance.\n" +" " + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Groupe « %(value)s » par défaut (repli) supprimé pour l'auto-adhésion" + +msgid "No default (fallback) group set" +msgstr "Pas de groupe par défaut (repli) défini" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Afficher des informations pour les groupes d'auto-adhésion par défaut " +"(repli).\n" +" " + +msgid "Task DN" +msgstr "DN de la tâche" + +msgid "DN of the started task" +msgstr "DN de la tâche lancée" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" +"au moins une des options « type », « users » ou « hosts » doit être indiquée" + +msgid "users and hosts cannot both be set" +msgstr "impossible de définir à la fois des utilisateurs et des hôtes" + +msgid "hosts cannot be set when type is 'group'" +msgstr "des hôtes ne peuvent pas être définis quand le type est « group »" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "impossible de définir des utilisateurs quand le type est « hostgroup »" + +msgid "Automember rebuild membership task started" +msgstr "" +"Tâche de reconstruction de l'appartenance avec adhésion automatique démarrée" + +msgid "Automember rebuild membership task completed" +msgstr "La tâche de reconstruction des appartenances automatiques est terminée" + +#, python-format +msgid "Task DN = '%s'" +msgstr "DN de la tâche = « %s »" + +msgid "Automember" +msgstr "Auto-adhésion" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Remove conditions from an automember rule." +msgid "Remove orphan automember rules" +msgstr "Supprimer des conditions d'une règle d'auto-adhésion. " + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "Autorités de certification" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "Autorité de certification" + +msgid "Certificate Authorities" +msgstr "Autorités de certification" + +msgid "Name for referencing the CA" +msgstr "Nom de référencement de l'AC" + +msgid "Description of the purpose of the CA" +msgstr "Description de l'objet de l'AC" + +msgid "Authority ID" +msgstr "ID de l'autorité" + +msgid "Dogtag Authority ID" +msgstr "ID de l'autorité Dogtag" + +msgid "Subject DN" +msgstr "DN de l'objet" + +msgid "Subject Distinguished Name" +msgstr "Nom distinctif de l'objet" + +msgid "Issuer Distinguished Name" +msgstr "Nom distinctif de l'émetteur" + +msgid "Search for CAs." +msgstr "Rechercher des AC." + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d AC correspondante" +msgstr[1] "%(count)d AC correspondantes" + +msgid "Display the properties of a CA." +msgstr "Afficher les propriétés d'une AC." + +msgid "Create a CA." +msgstr "Créer une AC." + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "AC « %(value)s » créée" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Privilège « add » insuffisant pour l'entrée « %s »." + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "AC « %(value)s » supprimée" + +#, fuzzy +#| msgid "Insufficient 'add' privilege for entry '%s'." +msgid "Insufficient privilege to delete a CA." +msgstr "Privilège « add » insuffisant pour l'entrée « %s »." + +msgid "CA" +msgstr "AC" + +msgid "IPA CA cannot be deleted" +msgstr "L'AC de IPA ne peut être supprimée" + +#, fuzzy +#| msgid "Must be a decimal number" +msgid "Must be disabled first" +msgstr "Doit être un nombre décimal" + +msgid "Modify CA configuration." +msgstr "Modifier la configuration de l'AC" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "AC « %(value)s » modifiée" + +#, fuzzy +#| msgid "Insufficient 'add' privilege for entry '%s'." +msgid "Insufficient privilege to modify a CA." +msgstr "Privilège « add » insuffisant pour l'entrée « %s »." + +#, fuzzy +#| msgid "Disable a CA ACL." +msgid "Disable a CA." +msgstr "Désactiver une LCA d'AC." + +#, fuzzy, python-format +#| msgid "Disabled CA ACL \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » désactivée" + +#, fuzzy +#| msgid "IPA CA cannot be deleted" +msgid "IPA CA cannot be disabled" +msgstr "L'AC de IPA ne peut être supprimée" + +#, fuzzy +#| msgid "Enable a CA ACL." +msgid "Enable a CA." +msgstr "Activer une LCA d'AC." + +#, fuzzy, python-format +#| msgid "Enabled CA ACL \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » activée" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "Appliquer" + +msgid "Rebuild auto membership" +msgstr "Reconstruction des adhésions automatiques" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Êtes-vous sûr de vouloir reconstruire l'adhésion automatique ?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "Êtes-vous sûr de vouloir engager cette action ?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "Êtes-vous sûr de vouloir supprimer ${object} ?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "Êtes-vous sûr de vouloir désactiver ${object} ?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Êtes-vous sûr de vouloir activer ${object} ?" + +msgid "Actions" +msgstr "Actions" + +msgid "Add" +msgstr "Ajouter" #, python-brace-format msgid "${count} item(s) added" msgstr "${count} élément(s) ajouté(s)" -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} élément(s) supprimé(s)" +msgid "Direct Membership" +msgstr "Adhésion directe" #, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} élément(s) désactivé(s)" +msgid "Filter available ${other_entity}" +msgstr "Filtre disponible ${other_entity}" + +msgid "Indirect Membership" +msgstr "Adhésion indirecte" + +msgid "No entries." +msgstr "Pas d'entrées." #, python-brace-format -msgid "${count} item(s) enabled" -msgstr "${count} élément(s) activé(s)" +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Affichage des entrées ${start} à ${end} sur ${total}." + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove" +msgstr "Supprimer le blocage" #, python-brace-format msgid "${count} item(s) removed" msgstr "${count} élément(s) supprimé(s)" -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} option(s) supprimée(s)" +msgid "Show Results" +msgstr "Afficher les résultats" -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} utilisateur(s) activé(s)" +msgid "Authentication indicators" +msgstr "Indicateurs d'authentification" -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} utilisateur(s) restauré(s)" +msgid "Authentication indicator" +msgstr "Indicateur d'authentification" -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} utilisateur(s) mis en attente" +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

La méthode implicite (mot de passe) est celle utilisée si aucune méthode " +"n'est choisie.

Mot de passe + double facteur : LDAP " +"et Kerberos permettent l'authentification avec l'un ou l'autre des type " +"d'authentification, mais Kerberos utilise une méthode de pré-" +"authentification qui nécessite d'utiliser un ccache blindé.

RADIUS avec un autre type : Kerberos utilise toujours " +"RADIUS, mais pas LDAP. LDAP ne reconnait que le mot de passe et une des " +"options d'authentification à double facteur.

" + +msgid "Add Custom Authentication Indicator" +msgstr "Ajouter un indicateur d'authentification personnalisé" + +msgid "Two factor authentication (password + OTP)" +msgstr "Authentification à deux-facteurs" + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "Désactiver la surcharge par utilisateur" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Paramètrage spécifique à l'utilisateur, surcharge la configuration " +"globale si l'une des options est cochée.

Mot de passe + double " +"facteur : LDAP est Kerberos permettent l'authentification avec l'un " +"ou l'autre des types d'authentification, mais Kerberos utilise une méthode " +"de pré-authentification qui nécessite d'utiliser un ccache blindé.

RADIUS avec un autre type : Kerberos utilise toujours " +"RADIUS, mais pas LDAP. LDAP ne reconnait que le mot de passe et une des " +"options d'authentification à double facteur.

" + +msgid "About" +msgstr "À propos de" + +msgid "Activate" +msgstr "Activer" + +msgid "Add and Add Another" +msgstr "Ajouter, puis ajouter un autre" + +msgid "Add and Close" +msgstr "Ajouter et fermer" + +msgid "Add and Edit" +msgstr "Ajouter et modifier" + +msgid "Add Many" +msgstr "Ajouter plusieurs" + +msgid "Back" +msgstr "Retour" + +msgid "Cancel" +msgstr "Annuler" + +msgid "Clear" +msgstr "" + +#, fuzzy +#| msgid "Refresh the page." +msgid "Clear all fields on the page." +msgstr "Rafraîchir la page." + +msgid "Close" +msgstr "Fermer" + +msgid "Disable" +msgstr "Désactiver" + +msgid "Download" +msgstr "Téléchargement" + +msgid "Download certificate as PEM formatted file." +msgstr "Télécharger le certificat dans un fichier au format PEM." + +msgid "Edit" +msgstr "Modifier" + +msgid "Enable" +msgstr "Activer" + +msgid "Find" +msgstr "Rechercher" + +msgid "Get" +msgstr "Obtenir" + +msgid "Hide" +msgstr "Masquer" + +msgid "Issue" +msgstr "Émettre" + +#, fuzzy +#| msgid "Matched" +msgid "Match" +msgstr "Correspondance" + +#, fuzzy +#| msgid "Search for existing certificates." +msgid "Match users according to certificate." +msgstr "Recherche de certificats existants." + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "OK" + +msgid "Refresh" +msgstr "Rafraîchir" + +msgid "Reload current settings from the server." +msgstr "Recharger la configuration actuelle depuis le serveur." + +msgid "Delete" +msgstr "Supprimer" + +msgid "Remove hold" +msgstr "Supprimer le blocage" + +msgid "Reset" +msgstr "Réinitialiser" + +msgid "Reset Password" +msgstr "Réinitialiser le mot de passe" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset Password and Log in" +msgstr "Réinitialiser le mot de passe" + +msgid "Restore" +msgstr "Restaurer" + +msgid "Retry" +msgstr "Réessayer" + +msgid "Revert" +msgstr "Rétablir" + +msgid "Revoke" +msgstr "Révoquer" + +msgid "Save" +msgstr "Enregistrer" + +msgid "Set" +msgstr "Définir" + +msgid "Show" +msgstr "Afficher" + +msgid "Stage" +msgstr "Mette en attente" + +msgid "Update" +msgstr "Modifier" + +msgid "View" +msgstr "Afficher" + +#, fuzzy +#| msgid "Confirmation" +msgid "Customization" +msgstr "Confirmation" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "Tout replier" + +msgid "Expand All" +msgstr "Tout déplier" + +msgid "General" +msgstr "Général" + +msgid "Identity Settings" +msgstr "Paramètres d'identité" + +#, fuzzy +#| msgid "Role Settings" +msgid "Record Settings" +msgstr "Paramètres du rôle" #, python-brace-format msgid "${entity} ${primary_key} Settings" msgstr "Réglages de ${primary_key} de ${entity}" +msgid "Back to Top" +msgstr "Retour en haut de page" + #, python-brace-format msgid "${entity} ${primary_key} updated" msgstr "${primary_key} de ${entity} modifié" @@ -6392,13 +25063,105 @@ msgstr "${primary_key} de ${entity} modifié" msgid "${entity} successfully added" msgstr "${entity} ajoutée avec succès" -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} s'applique à :" +msgid "Add custom value" +msgstr "Ajouter une valeur personnalisée" + +msgid "Available" +msgstr "Disponible" + +msgid "Some operations failed." +msgstr "Certaines opérations ont échoué." + +msgid "Operations Error" +msgstr "Erreur sur les opérations" + +msgid "Confirmation" +msgstr "Confirmation" + +msgid "Custom value" +msgstr "Valeur personnalisée" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"Cette page comporte des modifications non-sauvegardées. Veuillez les " +"enregistrer ou les annuler." + +msgid "Unsaved Changes" +msgstr "Modifications non sauvegardées" #, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} est membre de :" +msgid "Edit ${entity}" +msgstr "Modifier ${entity}" + +msgid "Hide details" +msgstr "Cacher les détails" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, version : ${version}" + +msgid "Prospective" +msgstr "Possibilité future" + +msgid "Redirection" +msgstr "Redirection" + +msgid "Select entries to be removed." +msgstr "Sélectionner les entrées à supprimer." + +msgid "Result" +msgstr "Résultat" + +msgid "Show details" +msgstr "Afficher les détails" + +msgid "Success" +msgstr "Succès" + +msgid "Validation error" +msgstr "Erreur de validation" + +msgid "Input form contains invalid or missing values." +msgstr "" +"Le formulaire de saisie comporte des valeurs non-valides ou manquantes." + +msgid "Please try the following options:" +msgstr "Veuillez essayer les options suivantes :" + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"Si le problème persiste, veuillez contacter l'administrateur du système." + +msgid "Refresh the page." +msgstr "Rafraîchir la page." + +msgid "Reload the browser." +msgstr "Recharger le navigateur." + +msgid "Return to the main page and retry the operation" +msgstr "Retourner à la page principale et tenter à nouveau l'opération" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Une erreur est survenue (${error})" + +msgid "HTTP Error" +msgstr "Erreur HTTP" + +msgid "Internal Error" +msgstr "Erreur interne" + +msgid "IPA Error" +msgstr "Erreur IPA" + +msgid "No response" +msgstr "Pas de réponse" + +msgid "Unknown Error" +msgstr "Erreur inconnue" + +msgid "URL" +msgstr "URL" #, python-brace-format msgid "${primary_key} is managed by:" @@ -6409,578 +25172,807 @@ msgid "${primary_key} members:" msgstr "membres de ${primary_key} :" #, python-brace-format -msgid "${primary_key} overrides:" +msgid "${primary_key} is a member of:" +msgstr "${primary_key} est membre de :" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} members:" +msgid "${primary_key} member managers:" +msgstr "membres de ${primary_key} :" + +msgid "Settings" +msgstr "Paramètres" + +msgid "Search" +msgstr "Rechercher" + +msgid "False" +msgstr "Faux" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to create a keytab of this " +#| "service." +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" +"Autoriser utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de clés " +"de ce service." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to retrieve a keytab of this " +#| "service." +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Autoriser les utilisateurs, groupes, hôtes ou groupes d'hôtes à récupérer un " +"tableau de clés pour ce service." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to create a keytab of this " +#| "service." +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" +"Autoriser utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de clés " +"de ce service." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to retrieve a keytab of this " +#| "service." +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Autoriser les utilisateurs, groupes, hôtes ou groupes d'hôtes à récupérer un " +"tableau de clés pour ce service." + +#, fuzzy, python-brace-format +#| msgid "Allowed to create keytab" +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "Autorisé à créer un tableau de clés" + +#, fuzzy, python-brace-format +#| msgid "Allowed to retrieve keytab" +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "Autorisé à récupérer un tableau de clés" + +#, fuzzy, python-brace-format +#| msgid "Allowed to create keytab" +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "Autorisé à créer un tableau de clés" + +#, fuzzy, python-brace-format +#| msgid "Allowed to retrieve keytab" +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "Autorisé à récupérer un tableau de clés" + +msgid "Allowed to create keytab" +msgstr "Autorisé à créer un tableau de clés" + +msgid "Allowed to retrieve keytab" +msgstr "Autorisé à récupérer un tableau de clés" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to create a keytab of this " +#| "service." +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " +"clés de ce service." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to retrieve a keytab of this " +#| "service." +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de récupérer un tableau " +"de clés de ce service." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to create a keytab of this " +#| "service." +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " +"clés de ce service." + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to retrieve a keytab of this " +#| "service." +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de récupérer un tableau " +"de clés de ce service." + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Users allowed to retrieve keytab" +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "Utilisateurs autorisés à récupérer un tableau de clés" + +msgid "Add Kerberos Principal Alias" +msgstr "Ajouter un nouvel alias de principal Kerberos" + +msgid "New kerberos principal alias" +msgstr "Nouvel alias de principal Kerberos" + +msgid "Remove Kerberos Alias" +msgstr "Supprimer un alias Kerberos" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "Voulez-vous supprimer l'alias kerberos ${alias} ?" + +msgid "Inherited from server configuration" +msgstr "Hérité de la configuration du serveur" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Override inherited settings" +msgstr "Surcharger la configuration héritée" + +msgid "PAD" +msgstr "PAD" + +#, fuzzy +#| msgid "Authentication" +msgid "Authenticating" +msgstr "Authentification" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "Connecté en tant que" + +#, fuzzy +#| msgid "Authentication Indicators" +msgid "Authentication with Kerberos failed" +msgstr "Indicateurs d'authentification" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal expiration" +msgid "Kerberos Principal you entered is expired" +msgstr "Expiration du principal Kerberos" + +#, fuzzy +#| msgid "Record data" +msgid "Loading data" +msgstr "Données d'enregistrement" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "Host Certificate" +msgid "Log In Using Certificate" +msgstr "Certificat de l'hôte" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +#, fuzzy +#| msgid "Format error" +msgid "Log out error" +msgstr "Erreur de format" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "You will be redirected to DNS Zone." +msgid "You will be redirected in ${count}s" +msgstr "Vous allez être redirigé vers la zone DNS." + +msgid "Sync OTP Token" +msgstr "Synchroniser le jeton OTP" + +#, fuzzy +#| msgid "HOTP Synchronization Window" +msgid "Synchronizing" +msgstr "Fenêtre de synchronisation HOTP" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "nombre de mots de passe" + +msgid "seconds" +msgstr "secondes" + +#, fuzzy +#| msgid "Configuration" +msgid "Migrating" +msgstr "Configuration" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#, fuzzy +#| msgid "Password reset was not successful." +msgid "Password migration was not successful" +msgstr "La réinitialisation du mot de passe a échoué." + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +#, fuzzy +#| msgid "The username, password or token codes are not correct" +msgid "The password or username you entered is incorrect" +msgstr "" +"Le nom d'utilisateur, mot de passe ou code du jeton ne sont pas corrects" + +#, fuzzy +#| msgid "Password reset was not successful." +msgid "Password migration was successful" +msgstr "La réinitialisation du mot de passe a échoué." + +msgid "Attribute" +msgstr "Attribut" + +#, fuzzy +#| msgid "delegation" +msgid "Add delegation" +msgstr "délégation" + +#, fuzzy +#| msgid "delegations" +msgid "Remove delegations" +msgstr "délégations" + +#, fuzzy +#| msgid "permission" +msgid "Add permission" +msgstr "permission" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove permissions" +msgstr "Supprimer une permission" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove privileges from permission '${primary_key}'" +msgstr "Supprimer des privilèges d'un rôle." + +#, fuzzy +#| msgid "privilege" +msgid "Add privilege" +msgstr "privilège" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "privileges" +msgid "Remove privileges" +msgstr "privilèges" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "Supprimer des privilèges d'un rôle." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a privilege" +msgid "Remove roles from privilege '${primary_key}'" +msgstr "Supprimer les membres d'un privilège" + +msgid "Role Settings" +msgstr "Paramètres du rôle" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add role" +msgstr "Ajouter un nouveau rôle." + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "host groups to remove" +msgid "Add host groups into role '${primary_key}'" +msgstr "groupes d'hôtes à supprimer" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} overrides:" +msgid "Add role '${primary_key}' into privileges" msgstr "Surcharges de ${primary_key} :" -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, version : ${version}" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s ne contient pas '%(value)s'" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s : syntaxe invalide." - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s : une seule valeur autorisée." - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"La recherche LDAP %(container)s ne renvoie aucun résultat (base de " -"recherche : %(search_base)s, classe d'objet : %(objectclass)s)" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -"%(count)d enregistrement %(type)s sauté. Une seule valeur modifiable par " -"enregistrement DNS." -msgstr[1] "" -"%(count)d enregistrements %(type)s sautés. Une seule valeur modifiable par " -"enregistrement DNS." - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI correspondant" -msgstr[1] "%(count)d ACI correspondant" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d LCA d'AC correspondante" -msgstr[1] "%(count)d LCA d'AC correspondantes" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d AC correspondante" -msgstr[1] "%(count)d AC correspondantes" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d serveur DNS correspondant" -msgstr[1] "%(count)d serveurs DNS correspondants" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d surcharge d'identifiants de groupes correspondante" -msgstr[1] "%(count)d surcharges d'identifiants de groupes correspondantes" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d règle HBAC correspondante" -msgstr[1] "%(count)d règles HBAC correspondantes" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d groupe de services HBAC correspondant" -msgstr[1] "%(count)d groupes de services HBAC correspondant" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d service HBAC correspondant" -msgstr[1] "%(count)d services HBAC correspondant" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d vue d'identifiants correspondante" -msgstr[1] "%(count)d vues d'identifiants correspondantes" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d surcharge d'identifiants correspondante" -msgstr[1] "%(count)d surcharges d'identifiants correspondantes" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d emplacement IPA correspondant" -msgstr[1] "%(count)d emplacements IPA correspondants" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d serveur IPA correspondant" -msgstr[1] "%(count)d serveurs IPA correspondants" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d jeton OTP correspond" -msgstr[1] "%(count)d jetons OTP correspondant" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d serveur mandataire RADIUS correspondant" -msgstr[1] "%(count)d serveurs mandataires RADIUS correspondant" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d mappe d'utilisateurs SELinux correspondant" -msgstr[1] "%(count)d mappe d'utilisateurs SELinux correspondant" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d groupe de commandes Sudo correspondant" -msgstr[1] "%(count)d groupes de commandes Sudo correspondant" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d commande sudo correspondant" -msgstr[1] "%(count)d commandes sudo correspondant" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d règle sudo correspondant" -msgstr[1] "%(count)d règles sudo correspondant" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d surcharge d'identifiants utilisateurs correspondante" -msgstr[1] "%(count)d surcharges d'identifiants utilisateurs correspondantes" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d clé « automount » correspondante" -msgstr[1] "%(count)d clés « automount » correspondantes" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d emplacement « automount » correspondant" -msgstr[1] "%(count)d emplacements « automount » correspondants" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d carte « automount » correspondante" -msgstr[1] "%(count)d cartes « automount » correspondantes" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d certificat correspondant" -msgstr[1] "%(count)d certificats correspondants" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d délégation correspondante" -msgstr[1] "%(count)d délégations correspondantes" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d groupe correspondant" -msgstr[1] "%(count)d groupes correspondants" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d hôte correspondant" -msgstr[1] "%(count)d hôtes correspondant" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d groupe d'hôtes correspondant" -msgstr[1] "%(count)d groupes d'hôtes correspondant" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d groupe réseau correspondant" -msgstr[1] "%(count)d groupes réseau correspondant" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d permission correspondant" -msgstr[1] "%(count)d permissions correspondant" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d greffon chargé" -msgstr[1] "%(count)d greffons chargés" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d privilège correspondant" -msgstr[1] "%(count)d privilèges correspondant" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d profil correspondant" -msgstr[1] "%(count)d profils correspondants" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d plage correspondant" -msgstr[1] "%(count)d plages correspondant" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d rôle correspondant" -msgstr[1] "%(count)d rôles correspondant" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d règle correspondante" -msgstr[1] "%(count)d règles correspondantes" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d segment correspondant" -msgstr[1] "%(count)d segment correspondants" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d permission de libre service correspondant" -msgstr[1] "%(count)d permissions de libre service correspondant" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d règle de délégation de service correspondante" -msgstr[1] "%(count)d règles de délégation de service correspondantes" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d cible de délégation de service correspondante" -msgstr[1] "%(count)d cibles de délégation de service correspondantes" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d service correspondant" -msgstr[1] "%(count)d services correspondant" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d suffixe de topologie correspondant" -msgstr[1] "%(count)d suffixes de topologie correspondants" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d confiance correspondante" -msgstr[1] "%(count)d confiances correspondantes" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d utilisateur correspondant" -msgstr[1] "%(count)d utilisateurs correspondant" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d variables" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d coffre-fort correspondant" -msgstr[1] "%(count)d coffre-forts correspondants" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s rôle serveur correspondant" -msgstr[1] "%(count)s rôles serveur correspondants" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "Client %(cver)s incompatible avec le serveur %(sver)s à « %(server)s »" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s : %(info)s" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "%(host)s failed" -msgstr "%(host)s en échec" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "%(host)s en échec : %(error)s" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s ne peut pas être supprimé car %(label)s %(dependent)s le requiert" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s ne peut être supprimé ou désactivé étant le dernier membre de " -"%(container)s %(label)s" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s ne peut être supprimé ou modifié : %(reason)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "le certificat %(name)s est invalide" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "L'attribut par défaut %(attr)s de %(obj)s n'est pas autorisé !" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "L'objet %(oname)s avec le nom « %(pkey)s » existe déjà" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "« %(oname)s » de « %(otype)s » introuvable" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s : %(oname)s introuvable" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s : %(oname)s introuvable" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s n'est pas un port valide" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" -"Délai échu pour la tâche LDAP %(task)s, DN de la tâche : « %(task_dn)s »" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" -"la catégorie %(type)s ne peut pas être définie à « all » tant que sont " -"alloués %(objects)s" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s n'est pas un utilisateur POSIX" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -#, python-format -msgid "%i CA added." -msgstr "%i AC ajoutée." - -#, python-format -msgid "%i CA removed." -msgstr "%i AC supprimée." - -#, python-format -msgid "%i CAs added." -msgstr "%i AC ajoutées." - -#, python-format -msgid "%i CAs removed." -msgstr "%i AC supprimées." - -#, python-format -msgid "%i host or hostgroup added." -msgstr "%i hôte ou groupe d'hôtes ajouté." - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "%i hôte ou groupe d'hôtes supprimé." - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "%i hôtes ou groupes d'hôtes ajoutés." - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "%i hôtes ou groupes d'hôtes supprimés." - -#, python-format -msgid "%i profile added." -msgstr "%i profil ajouté." - -#, python-format -msgid "%i profile removed." -msgstr "%i profil supprimé." - -#, python-format -msgid "%i profiles added." -msgstr "%i profils ajoutés." - -#, python-format -msgid "%i profiles removed." -msgstr "%i profils supprimés." - -#, python-format -msgid "%i service added." -msgstr "%i service ajouté." - -#, python-format -msgid "%i service removed." -msgstr "%i service supprimé." - -#, python-format -msgid "%i services added." -msgstr "%i services ajoutés." - -#, python-format -msgid "%i services removed." -msgstr "%i services supprimés." - -#, python-format -msgid "%i user or group added." -msgstr "%i utilisateur ou groupe ajouté." - -#, python-format -msgid "%i user or group removed." -msgstr "%i utilisateur ou groupe supprimé." - -#, python-format -msgid "%i users or groups added." -msgstr "%i utilisateurs ou groupes ajoutés." - -#, python-format -msgid "%i users or groups removed." -msgstr "%i utilisateurs ou groupes supprimés." - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s Record" -msgstr "Enregistrement %s" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s n'est pas un attribut valide." - -#, python-format -msgid "%s record" -msgstr "enregistrement %s" - -#, python-format -msgid "%s to add" -msgstr "%s à ajouter" - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s à exclure de la migration" - -#, python-format -msgid "%s to remove" -msgstr "%s à supprimer" - -#, python-format -msgid "%s: group not found" -msgstr "%s : groupe introuvable" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s : l'utilisateur est déjà préservé" +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add services into role '${primary_key}'" +msgstr "Certificat pour ${primary_key} de ${entity}" #, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "« ${port} » n'est pas un port valide" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "La commande « %(command)s » est obsolète. %(additional_info)s" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s' ne possède pas de certificat." - -#, python-format -msgid "'%(name)s' is required" -msgstr "« %(name)s » est requis" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "L'option « %(option)s » est obsolète. %(additional_info)s" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "'%(required)s' ne doit pas être vide lorsque '%(name)s' est défini" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "'%s' est une partie requise d'un enregistrement DNS" - -msgid "(deprecated)" -msgstr "(obsolète)" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(cf. RFC %s pour plus de détails)" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" +msgid "Add users into role '${primary_key}'" msgstr "" -". Vérifier le GID du groupe existant. Utiliser l'option « --group-overwrite-" -"gid » pour surcharger le GID" -msgid "7 is not a valid revocation reason" -msgstr "7 n'est pas une raison de révocation valide" +#, fuzzy +#| msgid "Remove hold" +msgid "Remove roles" +msgstr "Supprimer le blocage" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a privilege" +msgid "Remove role '${primary_key}' from privileges" +msgstr "Supprimer les membres d'un privilège" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from role '${primary_key}'" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove services from a CA ACL." +msgid "Remove services from role '${primary_key}'" +msgstr "Retirer des services d'une LCA d'AC." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a role." +msgid "Remove users from role '${primary_key}'" +msgstr "Supprimer des membres d'un rôle." + +#, fuzzy +#| msgid "self service permission" +msgid "Add self service permission" +msgstr "permission de libre service" + +#, fuzzy +#| msgid "self service permissions" +msgid "Remove self service permissions" +msgstr "permissions de libre service" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Add rule" +msgstr "Règle HBAC" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to stage selected users?" +msgid "Are you sure you want to change default group?" +msgstr "" +"Êtes-vous sûrs de vouloir mettre en attente les utilisateurs sélectionnés ?" + +msgid "Default host group" +msgstr "Groupe d'hôte par défaut" + +msgid "Default user group" +msgstr "Groupe d'utilisateur par défaut" + +msgid "Exclusive" +msgstr "Exclusion" + +msgid "Expression" +msgstr "Expression" + +msgid "Host group rule" +msgstr "Règle de groupes d'hôtes" + +msgid "Host group rules" +msgstr "Règles de groupes d'hôtes" + +msgid "Inclusive" +msgstr "Inclusion" + +#, fuzzy +#| msgid "Auto Membership Rule" +msgid "Remove auto membership rules" +msgstr "Règle d'appartenance automatique" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "Règle de groupe utilisateur" + +msgid "User group rules" +msgstr "Règles de groupes d'utilisateurs" + +#, fuzzy +#| msgid "automount key" +msgid "Add automount key" +msgstr "clé « automount »" + +#, fuzzy +#| msgid "automount keys" +msgid "Remove automount keys" +msgstr "clés « automount »" + +#, fuzzy +#| msgid "automount location" +msgid "Add automount location" +msgstr "emplacement de montage automatique" + +msgid "Automount Location Settings" +msgstr "Détail d'un emplacement « automount »" + +#, fuzzy +#| msgid "automount locations" +msgid "Remove automount locations" +msgstr "emplacements de montage automatique" + +#, fuzzy +#| msgid "automount map" +msgid "Add automount map" +msgstr "carte « automount »" + +msgid "Map Type" +msgstr "Type de mappe" + +msgid "Direct" +msgstr "Direct" + +msgid "Indirect" +msgstr "Indirect" + +#, fuzzy +#| msgid "automount maps" +msgid "Remove automount maps" +msgstr "cartes « automount »" + +#, fuzzy +#| msgid "Certificate Authority" +msgid "Add certificate authority" +msgstr "Autorité de certification" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Remove certificate authorities" +msgstr "Autorités de certification" + +#, fuzzy +#| msgid "CA ACL" +msgid "Add CA ACL" +msgstr "LCA de l'AC" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "Certificat pour ${primary_key} de ${entity}" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to a CA ACL." +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Ajouter des utilisateurs et groupes à une LCA d'AC." + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "Certificat pour ${primary_key} de ${entity}" + +#, fuzzy, python-brace-format +#| msgid "Add services to a CA ACL." +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Ajouter des services à une LCA d'AC." + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "Tou(te)s" + +msgid "Any CA" +msgstr "Toute AC" + +msgid "Any Host" +msgstr "N'importe quel hôte" + +msgid "Any Service" +msgstr "N'importe quel service" + +msgid "Any Profile" +msgstr "Tout profil" + +msgid "Anyone" +msgstr "N'importe qui" + +msgid "Rule status" +msgstr "État de la règle" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" +"Si aucune AC n'est indiquée, les requêtes à l'autorité de certification par " +"défaut sont autorisées." + +#, fuzzy +#| msgid "Remove from CRL" +msgid "Remove CA ACLs" +msgstr "Retrait de la LRC" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "Certificat pour ${primary_key} de ${entity}" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from a CA ACL." +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from a CA ACL." +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." + +#, fuzzy, python-brace-format +#| msgid "Remove CAs from a CA ACL." +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "Supprimer des AC d'une LCA d'AC" + +#, fuzzy, python-brace-format +#| msgid "Remove certificates from a service" +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "Supprimer les certificats d'un service" + +#, fuzzy, python-brace-format +#| msgid "Remove services from a CA ACL." +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "Retirer des services d'une LCA d'AC." + +#, fuzzy, python-brace-format +#| msgid "Remove services from a CA ACL." +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "Retirer des services d'une LCA d'AC." + +msgid "Specified CAs" +msgstr "AC indiquées" + +msgid "Specified Hosts and Groups" +msgstr "Hôtes et groupes indiqués" + +msgid "Specified Profiles" +msgstr "Prodils indiqués" + +msgid "Specified Services and Groups" +msgstr "Services et groupes indiqués" + +msgid "Specified Users and Groups" +msgstr "Utilisateurs et groupes indiqués" + +msgid "Permitted to have certificates issued" +msgstr "Autorisés à se voir émettre des certificats" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Remove certificate profiles" +msgstr "Profils de certificats" + +msgid "AA Compromise" +msgstr "AA compromis" + +msgid "Add principal" +msgstr "Ajouter un principal" + +msgid "Affiliation Changed" +msgstr "Affiliation modifiée" + +msgid "CA Compromise" +msgstr "AC compromis" + +msgid "Certificates" +msgstr "Certificats" + +msgid "Certificate Hold" +msgstr "Certificat bloqué" + +msgid "Cessation of Operation" +msgstr "Cessation d'activité" + +msgid "Common Name" +msgstr "Nom usuel" + +msgid "the certificate with serial number " +msgstr "le certificat ayant le numéro de série " + +msgid "Expires On" +msgstr "Expire le" + +msgid "Issued on from" +msgstr "Émis à partir du" + +msgid "Issued on to" +msgstr "Émis jusqu'au" + +msgid "Maximum serial number" +msgstr "Numéro de série maximum" + +msgid "Minimum serial number" +msgstr "Numéro de série minimum" + +msgid "Revoked on from" +msgstr "Révoqué à partir du" + +msgid "Revoked on to" +msgstr "Révoqué jusqu'au" + +msgid "Valid not after from" +msgstr "Invalide après à partir du" + +msgid "Valid not after to" +msgstr "Invalide après jusqu'au" + +msgid "Valid not before from" +msgstr "Invalide avant à partir du" + +msgid "Valid not before to" +msgstr "Invalide avant jusqu'au" + +msgid "Fingerprints" +msgstr "Empreintes" + +msgid "Get Certificate" +msgstr "Obtenir le certificat" + +msgid "Certificate Hold Removed" +msgstr "Blocage de certificat supprimé" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for host '${primary_key}'" +msgstr "Certificat pour ${primary_key} de ${entity}" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for service '${primary_key}'" +msgstr "Certificat pour ${primary_key} de ${entity}" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for user '${primary_key}'" +msgstr "Certificat pour ${primary_key} de ${entity}" + +#, fuzzy +#| msgid "New Certificate" +msgid "Issue new certificate" +msgstr "Nouveau certificat" + +msgid "Issued By" +msgstr "Émis par" + +msgid "Issued On" +msgstr "Émis le" + +msgid "Issued To" +msgstr "Émis pour" + +msgid "Key Compromise" +msgstr "Clé compromise" + +msgid "No Valid Certificate" +msgstr "Pas de certificat valide" + +msgid "New Certificate" +msgstr "Nouveau certificat" + +msgid "Certificate in base64 or PEM format" +msgstr "Certificat au format Base64 ou PEM" + +msgid "Note" +msgstr "Note" + +msgid "Organization" +msgstr "Organisation" + +msgid "Organizational Unit" +msgstr "Unité organisationnelle" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "${count} certificate(s) présent(s)" + +msgid "Privilege Withdrawn" +msgstr "Privilège retiré" + +msgid "Reason for Revocation" +msgstr "Raison de la révocation" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate hold" +msgstr "Révoquer un certificat." + +msgid "Do you want to remove the certificate hold?" +msgstr "Voulez-vous supprimer le blocage du certificat ?" + +msgid "Remove from CRL" +msgstr "Retrait de la LRC" #, python-brace-format msgid "" @@ -7002,3051 +25994,17 @@ msgstr "" "CERTIFICATE REQUEST----- jusque -----END NEW CERTIFICATE " "REQUEST-----) dans la zone de texte ci-dessous : " -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

La méthode implicite (mot de passe) est celle utilisée si aucune méthode " -"n'est choisie.

Mot de passe + double facteur : LDAP " -"et Kerberos permettent l'authentification avec l'un ou l'autre des type " -"d'authentification, mais Kerberos utilise une méthode de pré-" -"authentification qui nécessite d'utiliser un ccache blindé.

RADIUS avec un autre type : Kerberos utilise toujours " -"RADIUS, mais pas LDAP. LDAP ne reconnait que le mot de passe et une des " -"options d'authentification à double facteur.

" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Paramètrage spécifique à l'utilisateur, surcharge la configuration " -"globale si l'une des options est cochée.

Mot de passe + double " -"facteur : LDAP est Kerberos permettent l'authentification avec l'un " -"ou l'autre des types d'authentification, mais Kerberos utilise une méthode " -"de pré-authentification qui nécessite d'utiliser un ccache blindé.

RADIUS avec un autre type : Kerberos utilise toujours " -"RADIUS, mais pas LDAP. LDAP ne reconnait que le mot de passe et une des " -"options d'authentification à double facteur.

" - -msgid "A Create reverse" -msgstr "A Créer un enregistrement inverse" - -msgid "A IP Address" -msgstr "A Adresse IP" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "Une permission SYSTEM ne peut ni être modifiée, ni supprimée" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Une liste séparée par des virgules des champs à explorer pour une recherche " -"de groupes" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Une liste, séparée avec des virgules, des champs à explorer pour une " -"recherche d'utilisateurs" - -msgid "A description of this RADIUS proxy server" -msgstr "Description de ce serveur mandataire RADIUS" - -msgid "A description of this auto member rule" -msgstr "Une description de cette règle d'auto-adhésion" - -msgid "A description of this command" -msgstr "Description de la commande" - -msgid "A description of this host" -msgstr "Une description de cet hôte" - -msgid "A description of this host-group" -msgstr "Description de ce groupe d'hôtes" - -msgid "A description of this role-group" -msgstr "Description de ce groupe de rôles" - -msgid "A dictionary representing an LDAP entry" -msgstr "Un annuaire représentant une entrée LDAP" - -msgid "A group may not be a member of itself" -msgstr "Un groupe ne peut être membre de lui-même" - -msgid "A group may not be added as a member of itself" -msgstr "Un groupe ne peut être ajouté comme membre de lui-même" - -msgid "A host willing to act as a key exchanger" -msgstr "Un hôte prêt à jouer le rôle de changeur de clé" - -msgid "A host willing to act as a mail exchanger" -msgstr "Un hôte pouvant agir comme changeur de messagerie" - -msgid "A hostname which this alias hostname points to" -msgstr "Un nom d'hôte vers lequel cet alias pointe" - -msgid "A list of ACI values" -msgstr "Une liste de valeurs d'ACI" - -msgid "A list of LDAP entries" -msgstr "Une liste d'entrées LDAP" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "Est attendue une liste des utilisateurs SELinux, délimités par des $" - -msgid "A managed group cannot have a password policy." -msgstr "Un groupe géré ne peut pas avoir de politique de mot de passe." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Un problème est survenu en vérifiant que tous les membres étaient %(verb)s : " -"%(exc)s" - -msgid "A record" -msgstr "Enregistrement A" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" -"Une liste séparée par des espaces d'attributs qui seront supprimés lors des " -"mises à jour de la réplication." - -msgid "A string searched in all relevant object attributes" -msgstr "" -"Une chaîne de caractères recherchée dans tous les attributs d'objets " -"pertinents" - -msgid "A6 Record data" -msgstr "Données d'enregistrement A6" - -msgid "A6 record" -msgstr "Enregistrement A6" - -msgid "AA Compromise" -msgstr "AA compromis" - -msgid "AAAA Create reverse" -msgstr "AAAA Créer un enregistrement inverse" - -msgid "AAAA IP Address" -msgstr "AAAA Adresse IP" - -msgid "AAAA record" -msgstr "Enregistrement AAAA" - -msgid "ACI" -msgstr "ACI" - -msgid "ACI name" -msgstr "Nom d'ACI" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI de la permission %s introuvable" - -msgid "ACI prefix" -msgstr "Préfixe d'ACI" - -msgid "ACI prefix is required" -msgstr "Un préfixe ACI est requis" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI de nom « %s » introuvable" - -msgid "ACIs" -msgstr "ACI" - -msgid "ACL name" -msgstr "Nom de la LCA" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" -"Le contrôleur de domaine AD n'a pas été en mesure aucun des contrôleurs de " -"domaine IPA. Cela est probablement dû à un problème DNS ou de pare-feu." - -msgid "AD Trust setup" -msgstr "Configuration de la confiance AD" - -msgid "AD domain controller" -msgstr "Contrôleur de domaine AD" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" -"Le contrôleur de domaine AD se plaint à propos de la suite de mise en " -"communication. Cela peut signifier qu'il y a de mauvaises synchronisations " -"de l'un ou l'autre côté, par exemple." - -msgid "AFSDB Hostname" -msgstr "Nom d'hôte AFSDB" - -msgid "AFSDB Subtype" -msgstr "Sous-type AFSDB" - -msgid "AFSDB record" -msgstr "Enregistrement AFSDB" - -msgid "API Browser" -msgstr "Navigateur de l'API" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"Le numéro de version de l'API n'a pas été envoyé, la compatibilité " -"ascendante n'est pas garantie. La version de l'API du serveur est supposée " -"être %(server_version)s" - -msgid "APL record" -msgstr "Enregistrement APL" - -msgid "About" -msgstr "À propos de" - -msgid "Access Denied" -msgstr "Accès interdit" - -msgid "Access Granted" -msgstr "Accès autorisé" - -#, python-format -msgid "Access granted: %s" -msgstr "Accès autorisé : %s" - -msgid "Access this host" -msgstr "A accès à cet hôte" - -msgid "Access time" -msgstr "Horaire d'accès" - -msgid "Accessing" -msgstr "Accédant à" - -msgid "Account" -msgstr "Compte" - -msgid "Account Settings" -msgstr "Paramètres de compte" - -msgid "Account Status" -msgstr "État du compte" - -msgid "Account disabled" -msgstr "Compte désactivé" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Compte désactivé : %(disabled)s" - -msgid "Actions" -msgstr "Actions" - -msgid "Activate" -msgstr "Activer" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Activer un utilisateur en attente « %(value)s »" - -msgid "Activate a stage user." -msgstr "Activer un utilisateur en attente." - -msgid "Active Directory domain" -msgstr "Domaine Active Directory" - -msgid "Active Directory domain administrator" -msgstr "Administrateur du domaine Active Directory" - -msgid "Active Directory domain administrator's password" -msgstr "Mot de passe de l'administrateur de domaine Active Directory" - -msgid "Active Directory domain range" -msgstr "Plage pour les domaines Active Directory" - -msgid "Active Directory domain with POSIX attributes" -msgstr "Domaine Active Directory avec attributs POSIX" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" -"Plage pour les relations d'approbation Active Directory avec attributs POSIX" - -msgid "Active Directory winsync" -msgstr "Active Directory winsync" - -msgid "Active directory domain administrator's password" -msgstr "Mot de passe de l'administrateur du domaine Active Directory" - -msgid "Active users" -msgstr "Utilisateurs actifs" - -msgid "Active zone" -msgstr "Zone active" - -msgid "Add" -msgstr "Ajouter" - -msgid "Add CAs to a CA ACL." -msgstr "Ajouter des AC à une LCA d'AC" - -msgid "Add Custom Attribute" -msgstr "Ajouter un attribut personnalisé" - -msgid "Add Custom Authentication Indicator" -msgstr "Ajouter un indicateur d'authentification personnalisé" - -msgid "Add Kerberos Principal Alias" -msgstr "Ajouter un nouvel alias de principal Kerberos" - -msgid "Add Many" -msgstr "Ajouter plusieurs" - -msgid "Add a manager to the stage user entry" -msgstr "Ajouter un responsable à l'entrée d'utilisateur en attente" - -msgid "Add a manager to the user entry" -msgstr "Ajouter un responsable à l'entrée de l'utilisateur" - -msgid "Add a new DNS server." -msgstr "Ajouter un nouveau serveur DNS." - -msgid "Add a new Group ID override." -msgstr "Ajouter une nouvelle surcharge d'identifiants de groupes." - -msgid "Add a new HBAC service group." -msgstr "Ajouter un nouveau groupe de services HBAC." - -msgid "Add a new HBAC service." -msgstr "Ajouter un nouveau service HBAC." - -msgid "Add a new ID View." -msgstr "Ajouter une nouvelle vue d'identifiants" - -msgid "Add a new ID override." -msgstr "Ajouter une nouvelle surcharge d'identifiant." - -msgid "Add a new IPA location." -msgstr "Ajouter un nouvel emplacement IPA." - -msgid "Add a new IPA new service." -msgstr "Ajouter un nouveau service IPA." - -msgid "Add a new IPA service." -msgstr "Ajouter un nouveau service IPA." - -msgid "Add a new OTP token." -msgstr "Ajouter un nouveau jeton OTP" - -msgid "Add a new RADIUS proxy server." -msgstr "Ajouter un nouveau serveur mandataire RADIUS." - -msgid "Add a new User ID override." -msgstr "Ajouter une nouvelle surcharge d'identifiants utilisateurs." - -msgid "Add a new YubiKey OTP token." -msgstr "Ajouter un nouveau jeton OTP YubiKey." - -msgid "Add a new delegation." -msgstr "Ajouter une nouvelle délégation." - -msgid "Add a new group password policy." -msgstr "Ajouter une nouvelle politique de mot de passe." - -msgid "Add a new host." -msgstr "Ajouter un nouvel hôte." - -msgid "Add a new hostgroup." -msgstr "Ajouter un nouveau groupe d'hôtes." - -msgid "Add a new netgroup." -msgstr "Ajouter un nouveau groupe réseau." - -msgid "Add a new permission." -msgstr "Ajouter une nouvelle permission." - -msgid "Add a new privilege." -msgstr "Ajouter un nouveau privilège." - -msgid "Add a new role." -msgstr "Ajouter un nouveau rôle." - -msgid "Add a new segment." -msgstr "Ajouter un noveau segment." - -msgid "Add a new self-service permission." -msgstr "Ajouter une nouvelle permission de libre service." - -msgid "Add a new stage user." -msgstr "Ajouter un nouvel utilisateur en attente." - -msgid "Add a new topology suffix to be managed." -msgstr "Ajouter un nouveau suffixe de topologie à gérer." - -msgid "Add a new user." -msgstr "Ajouter un nouvel utilisateur." - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" -"Ajouter une permission pour une délégation d'accès de zone de redirection." - -msgid "Add a permission for per-zone access delegation." -msgstr "Ajouter une permission pour une délégation d'accès par zone." - -msgid "Add a system permission without an ACI (internal command)" -msgstr "Ajout d'une permission système sans ACI (commande interne)" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" -"Ajouter une paire attribut/valeur. Format : attribut=valeur. Les\n" -"attributs doivent faire partie du schéma." - -msgid "Add an automember rule." -msgstr "Ajouter une règle d'auto-adhésion." - -msgid "Add an option to the Sudo Rule." -msgstr "Ajouter une option à la règle sudo." - -msgid "Add and Add Another" -msgstr "Ajouter, puis ajouter un autre" - -msgid "Add and Close" -msgstr "Ajouter et fermer" - -msgid "Add and Edit" -msgstr "Ajouter et modifier" - -msgid "Add certificates to host entry" -msgstr "Ajouter les certificats à l'entrée de l'hôte" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" -"Ajouter des commandes et groupes de commandes sudo affectés par la règle " -"sudo." - -msgid "Add conditions to an automember rule." -msgstr "Ajouter une condition à une règle d'auto-adhésion." - -msgid "Add custom value" -msgstr "Ajouter une valeur personnalisée" - -msgid "Add domain" -msgstr "Ajouter un domaine" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" -"Ajouter un enregistrement direct pour les serveurs de noms situés dans la " -"zone créée" - -msgid "Add group for Sudo to execute as." -msgstr "Ajouter un groupe dans sudo pour exécution comme." - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Ajouter des hôtes et groupes d'hôtes affectés par la règle sudo." - -msgid "Add hosts that can manage this host." -msgstr "Ajouter les hôtes qui peuvent gérer cet hôte." - -msgid "Add hosts that can manage this service." -msgstr "Ajouter des hôtes pouvant administrer ce service." - -msgid "Add member to a named service delegation rule." -msgstr "Ajouter un membre à une règle nommée de délégation de service." - -msgid "Add member to a named service delegation target." -msgstr "Ajouter un membre à une cible de délégation de service." - -msgid "Add members to Sudo Command Group." -msgstr "Ajouter des membres à un groupe de commandes sudo." - -msgid "Add members to a group." -msgstr "Ajouter des membres à un groupe." - -msgid "Add members to a hostgroup." -msgstr "Ajouter des membres à un groupe d'hôtes." - -msgid "Add members to a netgroup." -msgstr "Ajouter des membres à un groupe réseau." - -msgid "Add members to a privilege." -msgstr "Ajouter des membres à un privilège." - -msgid "Add members to a role." -msgstr "Ajouter des membres à un rôle." - -msgid "Add members to a vault." -msgstr "Ajouter des membres à un coffre-fort." - -msgid "Add members to an HBAC service group." -msgstr "Ajouter des membres à un groupe de services HBAC." - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" -"Ajouter les utilisateurs migrés n'ayant pas de groupe à un groupe par défaut " -"(par défaut : vrai)" - -msgid "Add new DNS resource record." -msgstr "Ajouter un nouvel enregistrement de ressources DNS." - -msgid "Add new certificates to a service" -msgstr "Ajouter un nouveau certificat à un service" - -msgid "Add new principal alias to a service" -msgstr "Ajouter un nouvel alias de principal à un service" - -msgid "Add new principal alias to host entry" -msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" -"Ajouter un ou plusieurs certificats à l'entrée de l'utilisateur surchargé " -"(idoverrideuser)" - -msgid "Add one or more certificates to the user entry" -msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" - -msgid "Add owners to a vault container." -msgstr "Ajouter des propriétaires à un conteneur de coffre-fort." - -msgid "Add owners to a vault." -msgstr "Ajouter des propriétaires à un coffre-fort." - -msgid "Add permissions to a privilege." -msgstr "Ajouter des permissions à un privilège." - -msgid "Add principal" -msgstr "Ajouter un principal" - -msgid "Add privileges to a role." -msgstr "Ajouter des privilèges à un rôle." - -msgid "Add profiles to a CA ACL." -msgstr "Ajouter des profils à une LCA d'AC." - -msgid "Add services to a CA ACL." -msgstr "Ajouter des services à une LCA d'AC." - -msgid "Add services to an HBAC rule." -msgstr "Ajouter des services à une règle HBAC." - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Ajouter des hôtes cibles et groupes d'hôtes à une LCA d'AC." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" -"Ajouter des hôtes et groupes d'hôtes cibles à une mappe d'utilisateurs " -"SELinux" - -msgid "Add target to a named service delegation rule." -msgstr "Ajouter une cible à une règle nommée de délégation de service." - -msgid "Add target to a named service delegation." -msgstr "Ajouter des cibles à une délégation de service nommé" - -msgid "Add the host to DNS with this IP address" -msgstr "Ajouter l'hôte aux DNS avec cette adresse IP" - -msgid "Add to default group" -msgstr "Ajouter au groupe par défaut" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "Ajouter des utilisateurs et groupes affectés par la règle sudo." - -msgid "Add users and groups for Sudo to execute as." -msgstr "Ajouter des utilisateurs et groupes dans sudo pour exécution comme." - -msgid "Add users and groups to a CA ACL." -msgstr "Ajouter des utilisateurs et groupes à une LCA d'AC." - -msgid "Add users and groups to an HBAC rule." -msgstr "Ajouter des utilisateurs et groupes à une règle HBAC." - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" - -msgid "Add users that can manage this token." -msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." - -#, python-format -msgid "Added %(map)s" -msgstr " %(map)s ajoutée" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Ajout de %(src)s à %(dst)s" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Confiance Active Directory ajoutée pour le royaume « %(value)s »" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » créée" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants de groupes « %(value)s » ajoutée" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » ajoutée" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Service HBAC « %(value)s » ajouté" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Groupe de services HBAC « %(value)s » ajouté" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Vue d'identifiants « %(value)s » ajoutée" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants « %(value)s » ajoutée" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Plage d'ID « %(value)s » ajoutée" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Emplacement IPA « %(value)s » ajouté" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Jeton OTP « %(value)s » ajouté" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » ajouté" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » ajoutée" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Commande sudo « %(value)s » ajoutée" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Groupe de commandes sudo « %(value)s » ajouté" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Règle sudo « %(value)s » ajoutée" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants utilisateurs « %(value)s » ajoutée" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Règle d'auto-adhésion « %(value)s » ajoutée" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Carte « automount » indirect « %(value)s » créée" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Clé « automount » « %(value)s » créée" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Emplacement « automount » « %(value)s » ajouté" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Carte « automount » « %(value)s » ajoutée" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Certificats ajoutés à l'hôte « %(value)s »" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur surchargé « %(value)s »" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Certificats ajoutés au principal de service « %(value)s »" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Condition(s) ajoutées à « %(value)s »" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Délégation « %(value)s » ajoutée" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Groupe « %(value)s » créé" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Hôte « %(value)s » ajouté" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Groupe d'hôtes « %(value)s » ajouté" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Groupe réseau « %(value)s » ajouté" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Nouveau serveur DNS « %(value)s » ajouté" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Alias ajoutés à l'hôte « %(value)s »" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Alias ajoutés au principal de service « %(value)s »" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "Option « %(option)s » ajoutée à la règle sudo « %(rule)s »" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Permission « %(value)s » ajoutée" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Privilège « %(value)s » ajouté" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rôle « %(value)s » ajouté" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Segment « %(value)s » ajouté" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Permission de libre service « %(value)s » ajoutée" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Service « %(value)s » ajouté" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Règle de délégation de service « %(value)s » ajoutée" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Cible de délégation de service « %(value)s » ajoutée" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Utilisateur en attente « %(value)s » ajouté" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Permission système « %(value)s » ajoutée" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Suffixe de topologie « %(value)s » ajouté" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » ajouté" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Ajout de « %(value)s » au coffre" - -msgid "Additional instructions:" -msgstr "Instructions complémentaires :" - -msgid "Address not valid, can't redirect" -msgstr "Adresse invalide, impossible de rediriger" - -msgid "Administrative account" -msgstr "Compte administrateur" - -msgid "Administrator e-mail address" -msgstr "Adresse courriel de l'administrateur" - -msgid "Advertised by servers" -msgstr "Publié par les serveurs" - -msgid "Affiliation Changed" -msgstr "Affiliation modifiée" - -msgid "Agreements deleted" -msgstr "Agréments supprimés" - -msgid "Algorithm" -msgstr "Algorithme" - -msgid "All" -msgstr "Tou(te)s" - -msgid "All attributes to which the permission applies" -msgstr "Tous les attributs auxquels la permission s'applique" - -msgid "All commands should at least have a result" -msgstr "Toutes les commandes doivent avoir au moins un résultat" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" -"Tous les filtres cible, y compris ceux définis avec « type » et « memberof »" - -msgid "Allow" -msgstr "Autoriser" - -msgid "Allow PTR sync" -msgstr "Autoriser la synchronisation PTR" - -msgid "Allow access from the trusted domain" -msgstr "Autoriser l'accès depuis le domaine approuvé" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" -"Autoriser l'ajout de membres externes non-IPA depuis des domaines approuvés" - -msgid "Allow dynamic updates." -msgstr "Autoriser les mises à jour dynamiques." - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" -"Autorise l'utilisation en repli de l'annuaire LDAP du contrôleur de domaine " -"AD. Pour les relations d'approbation bidirectionnelles uniquement." - -msgid "Allow in-line DNSSEC signing" -msgstr "Autoriser la signature DNSSEC en ligne" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" -"Autoriser la signature DNSSEC en ligne des enregistrements dans la zone" - -msgid "Allow query" -msgstr "Autoriser requête" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" -"Autoriser la synchronisation des enregistrements directs (A, AAAA) et " -"inverses (PTR)" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" -"Autoriser la synchronisation des enregistrements directs (A, AAAA) et " -"inverses (PTR) dans la zone" - -msgid "Allow transfer" -msgstr "Autoriser le transfert" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "Autoriser l'utilisation des ressources IPA par le domaine approuvé" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Autoriser des utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de " -"clés de cet hôte." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" -"Autoriser utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de clés " -"de ce service." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Autoriser des utilisateurs, hôtes ou groupes d'hôtes à récupérer un tableau " -"de clés de cet hôte." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Autoriser les utilisateurs, groupes, hôtes ou groupes d'hôtes à récupérer un " -"tableau de clés pour ce service." - -msgid "Allowed Target" -msgstr "Cibles autorisées" - -msgid "Allowed to Impersonate" -msgstr "Autorisé à prendre l'identité" - -msgid "Allowed to create keytab" -msgstr "Autorisé à créer un tableau de clés" - -msgid "Allowed to retrieve keytab" -msgstr "Autorisé à récupérer un tableau de clés" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "Autoriser la migration malgré l'utilisation du greffon « compat »" - -msgid "Already registered" -msgstr "Déjà enregistré" - -msgid "Alternative UPN suffixes" -msgstr "Suffixes UPN alternatifs" - -msgid "Altitude" -msgstr "Altitude" - -msgid "Always ask" -msgstr "Toujours demander" - -msgid "Ambiguous search, user domain was not specified" -msgstr "Recherche ambiguë, le domaine utilisateur n'a pas été indiqué" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Un serveur maître IPA ne peut ni être supprimé ni désactivé" - #, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Une erreur est survenue (${error})" - -msgid "An error occurred while fetching dns zones." -msgstr "Une erreur est survenue lors de la récupération des zones DNS." - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Une plage d'identifiants existe déjà pour cette relation de confiance. Vous " -"devez soit supprimer l'ancienne plage, soit exclure les options « --base-" -"id » ou « --range-size » de la commande." - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" -"Délai entre deux interrogations du serveur de noms pour la recherche de " -"nouvelles zones" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "La balise « %(anchor)s » ne peut être résolue." - -msgid "Anchor to override" -msgstr "Balise à surcharger" - -msgid "Any CA" -msgstr "Toute AC" - -msgid "Any Command" -msgstr "Toute commande" - -msgid "Any Group" -msgstr "Tout groupe" - -msgid "Any Host" -msgstr "N'importe quel hôte" - -msgid "Any Profile" -msgstr "Tout profil" - -msgid "Any Service" -msgstr "N'importe quel service" - -msgid "Anyone" -msgstr "N'importe qui" - -msgid "Applied to hosts" -msgstr "Appliquée aux hôtes" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" -"Applique une vue d'identifiants aux hôtes ou aux membres des groupes d'hôtes " -"indiqués. Si une autre vue d'identifiants était appliquée à l'hôte, elle est " -"remplacée." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" -"Applique une vue d'identifiants aux hôtes ou aux membres des groupes d'hôtes " -"indiqués. Si une autre vue d'identifiants était appliquée à l'hôte, elle est " -"remplacée." - -msgid "Apply" -msgstr "Appliquer" - -msgid "Apply ACI to your own entry (self)" -msgstr "Appliquer l'ACI à votre propre entrée (« self »)" - -msgid "Apply to host groups" -msgstr "Appliquée aux groupes d'hôtes" - -msgid "Apply to hosts" -msgstr "Appliquer aux hôtes" - -msgid "Arbitrary string identifying the segment" -msgstr "Chaîne arbitraire identifiant le segment" - -msgid "Archive data into a vault." -msgstr "Archiver des données dans un coffre-fort." - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Données archivées dans le coffre-fort « %(value)s »" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"Êtes-vous sûr de vouloir ${action} l'utilisateur ?
Le changement prendra " -"effet immédiatement." - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Êtes-vous sûr(e) de vouloir activer ${object} ?" - -msgid "Are you sure you want to activate selected users?" -msgstr "Êtes-vous sûr de vouloir désactiver l'utilisateur sélectionné ?" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" -"Êtes-vous sûr de vouloir ajouter une permission pour la zone DNS ${object} ?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Êtes-vous sûr de vouloir supprimer ${object} ?" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Êtes-vous sûr de vouloir supprimer les entrées sélectionnées ?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Êtes-vous sûr de vouloir désactiver ${object} ?" - -msgid "Are you sure you want to disable selected entries?" -msgstr "Êtes-vous sûr de vouloir désactiver les entrées sélectionnées ?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Êtes-vous sûr de vouloir activer ${object} ?" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Êtes-vous sûr de vouloir activer les entrées sélectionnées ?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "Êtes-vous sûr de vouloir engager cette action ?" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Êtes-vous sûr de vouloir reconstruire l'adhésion automatique ?" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" -"Êtes-vous sûr de vouloir supprimer la permission pour la zone DNS ${object} ?" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Êtes-vous sûr de vouloir supprimer l'objet ${object} ?" - -msgid "Are you sure you want to restore selected users?" -msgstr "Êtes-vous sûr de vouloir restaurer les utilisateurs sélectionnés ?" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Êtes-vous sûr de vouloir mettre en attente l'objet ${object} ?" - -msgid "Are you sure you want to stage selected users?" -msgstr "" -"Êtes-vous sûrs de vouloir mettre en attente les utilisateurs sélectionnés ?" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" -"Êtes-vous sûr(e) de retirer l'application de la vue d'identifiants des " -"entrées sélectionnées ?" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Êtes-sous sûr de vouloir déverrouiller l'utilisateur ${object} ?" - -msgid "Are you sure you want to unprovision this host?" -msgstr "Êtes-vous sûr de vouloir supprimer les permissions à cet hôte ?" - -msgid "Are you sure you want to unprovision this service?" -msgstr "Êtes-vous sûr de vouloir supprimer les permissions ce service ?" - -msgid "As Whom" -msgstr "Comme qui" - -msgid "Asks for a non-random password to use for the principal" -msgstr "Demande un mot de passe non aléatoire à utiliser pour le principal" - -msgid "Assigned ID View" -msgstr "Vue d'identifiants attribuée" - -msgid "Assigned manager of the token (default: self)" -msgstr "Administrateur assigné au jeton (par défaut : soi-même)" - -msgid "Assigned user of the token (default: self)" -msgstr "Utilisateur assigné au jeton (par défaut : soi-même)" - -msgid "At least the domain or IP address should be specified" -msgstr "Au moins un nom de domaine ou une adresse IP doit être indiqué" - -msgid "Attribute" -msgstr "Attribut" - -msgid "Attribute Key" -msgstr "Clé d'attribut" - -msgid "Attribute breakdown" -msgstr "Répartition des attributs" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Attribut à filtrer via « regex ». Ex. FQDN pour un hôte, ou « manager » pour " -"un utilisateur" - -msgid "Attributes" -msgstr "Attributs" - -msgid "Attributes for total update" -msgstr "Attributs pour une mise à jour complète" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" -"Attributs qui ne seront pas répliqués vers un serveur consommateur lors " -"d'une réplication partielle. Par exemple, `(objectclass=*) $ EXCLUDE " -"accountlockout memberof" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" -"Les attributs qui ne sont pas répliqués vers un serveur consommateur pendant " -"une mise à jour complète. Par exemple : (objectclass=*) $ EXCLUDE " -"accountlockout" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "Attributs à ignorer dans les entrées groupe dans DS" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "Attributs à ignorer dans des entrées utilisateur dans DS" - -msgid "Attributes to strip" -msgstr "Attributs à supprimer" - -msgid "Attributes to which the delegation applies" -msgstr "Attributs auxquels la délégation s'applique" - -msgid "Attributes to which the permission applies" -msgstr "Attributs auxquels les permissions s'appliquent" - -msgid "Attributes to which the permission applies by default" -msgstr "Attributs auxquels la permission s'applique par défaut" - -msgid "Attributes to which the permission applies." -msgstr "Attributs auxquels les permissions s'appliquent." - -msgid "Audit" -msgstr "Audit" - -msgid "Authentication" -msgstr "Authentification" - -msgid "Authentication Indicators" -msgstr "Indicateurs d'authentification" - -msgid "Authentication indicator" -msgstr "Indicateur d'authentification" - -msgid "Authentication indicators" -msgstr "Indicateurs d'authentification" - -msgid "Authoritative nameserver" -msgstr "Serveur de nom faisant autorité" - -msgid "Authoritative nameserver change" -msgstr "Changement de serveur de nom faisant autorité" - -msgid "Authoritative nameserver domain name" -msgstr "Nom de domaine du serveur de nom faisant autorité" - -msgid "Authority ID" -msgstr "ID de l'autorité" - -msgid "Auto Membership Rule" -msgstr "Règle d'appartenance automatique" - -msgid "Auto Membership is not configured" -msgstr "L'auto-adhésion n'est pas configurée" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Règle d'auto-adhésion : %s introuvable !" - -msgid "Autogenerated" -msgstr "Autogénéré" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Échec de la mise à jour automatique des enregistrements DNS du système. " -"Merci de relancer la mise à jour des enregistrements du système manuellement " -"pour obtenir la liste des enregistrements manquants." - -msgid "Automember" -msgstr "Auto-adhésion" - -msgid "Automember Rule" -msgstr "Règle d'auto-adhésion" - -msgid "Automember rebuild membership task completed" -msgstr "La tâche de reconstruction des appartenances automatiques est terminée" - -msgid "Automember rebuild membership task started" -msgstr "" -"Tâche de reconstruction de l'appartenance avec adhésion automatique démarrée" - -msgid "Automount" -msgstr "Montage automatique" - -msgid "Automount Key" -msgstr "Clé « automount »" - -msgid "Automount Keys" -msgstr "Clés « automount »" - -msgid "Automount Location" -msgstr "Emplacement de montage automatique" - -msgid "Automount Location Settings" -msgstr "Détail d'un emplacement « automount »" - -msgid "Automount Locations" -msgstr "Emplacements de montage automatique" - -msgid "Automount Map" -msgstr "Carte « automount »" - -msgid "Automount Maps" -msgstr "Cartes « automount »" - -msgid "Automount key name." -msgstr "Nom de clé « automount »." - -msgid "Automount key object." -msgstr "Objet clé « automount »." - -msgid "Automount location name." -msgstr "Nom d'emplacement ." - -msgid "Automount map name." -msgstr "Nom de carte « automount »." - -msgid "Automount master file." -msgstr "Fichier maître « automount »" - -msgid "Available" -msgstr "Disponible" - -msgid "BIND update policy" -msgstr "Politique de mise à jour de BIND" - -msgid "Back" -msgstr "Retour" - -msgid "Back to Top" -msgstr "Retour en haut de page" - -msgid "Bad format in credentials cache" -msgstr "Mauvais format de cache des justificatifs d'identité" - -msgid "Bad or unsupported salt type.\n" -msgstr "Type « salt » non-conforme ou non pris en compte.\n" - -msgid "Bad search filter" -msgstr "Mauvais filtre de recherche" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Filtre de recherche invalide %(info)s" - -msgid "Base DN" -msgstr "DN de base" - -msgid "Base DN on remote LDAP server" -msgstr "DN de base sur le serveur LDAP distant" - -msgid "Base ID" -msgstr "ID de base" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "Base pour les sujets de certificat (OU=Test,O=Example)" - -msgid "Base-64 encoded host certificate" -msgstr "Certificat de l'hôte encodé en Base-64" - -msgid "Base-64 encoded server certificate" -msgstr "Certificat du serveur codé en Base-64" - -msgid "Base-64 encoded service certificate" -msgstr "Certificat du service encodé en Base-64" - -msgid "Base-64 encoded user certificate" -msgstr "Certificat de l'utilisateur encodé en Base-64" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Échec du décodage « base64 » : %(reason)s" - -msgid "Binary data to archive" -msgstr "Fichier binaire à archiver" - -msgid "Bind DN" -msgstr "DN de connexion" - -msgid "Bind rule type" -msgstr "Type de règle liée" - -msgid "Brief description of this profile" -msgstr "Brève description de ce profil" - -msgid "CA" -msgstr "AC" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "L'autorité de certification « %s » est désactivée" - -msgid "CA ACL" -msgstr "LCA de l'AC" - -msgid "CA ACLs" -msgstr "LCA de l'AC" - -msgid "CA Compromise" -msgstr "AC compromis" - -msgid "CA category" -msgstr "Catégorie d'AC" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"une catégorie d'AC ne peut pas être définie à « all » tant qu'il reste des " -"AC autorisées" - -msgid "CA category the ACL applies to" -msgstr "Catégorie d'AC à laquelle l'ACL s'applique" - -msgid "CA certificate" -msgstr "Certificat d'AC" - -msgid "CA is not configured" -msgstr "L'AC n'est pas configurée" - -msgid "CAs" -msgstr "AC" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" -"des AC ne peuvent pas être ajoutées quand la catégorie de l'AC est « all »" - -msgid "CERT Algorithm" -msgstr "Algorithme CERT" - -msgid "CERT Certificate Type" -msgstr "Type de certificat CERT" - -msgid "CERT Certificate/CRL" -msgstr "Certificat/CRL CERT" - -msgid "CERT Key Tag" -msgstr "Étiquette de clé CERT" - -msgid "CERT record" -msgstr "Enregistrement CERT" - -msgid "CIFS credentials object" -msgstr "Objet justificatif d'identité de CIFS" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "Le serveur CIFS %(host)s a refusé vos justificatifs d'identité" - -msgid "CIFS server denied your credentials" -msgstr "Le serveur CIFS a refusé vos justificatifs d'identité" - -msgid "CLI metavar" -msgstr "Metavariable CLI" - -msgid "CLI name" -msgstr "Nom CLI" - -msgid "CNAME Hostname" -msgstr "Nom d'hôte CNAME" - -msgid "CNAME record" -msgstr "Enregistrement CNAME" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" -"Un enregistrement CNAME ne peut coexister avec aucun autre enregistrement " -"(RFC 1034, section 3.6.2)" - -msgid "CSR" -msgstr "CSR" - -msgid "Cancel" -msgstr "Annuler" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" -"Impossible de créer l'enregistrement inverse pour « %(value)s » : %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Impossible de décoder le fichier « %(filename)s » : %(exc)s" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" -"Impossible d'établir la connexion LSA vers %(host)s. Le serveur CIFS est-il " -"en cours d'exécution ?" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"Impossible d'établir une relation d'approbation vers un AD déployé dans le " -"même domaine que IPA. Une telle configuration ne peut être prise en charge." - -msgid "Cannot find specified domain or server name" -msgstr "Impossible de trouver le domaine ou le serveur indiqué" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Impossible de réaliser la validation du SID sans installer la prise en " -"charge de Samba 4. Assurez-vous d'avoir installé le sous-paquet d'IPA " -"« server-trust-ad » sur le serveur" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Impossible de réaliser la validation de membre externe sans installer " -"Samba 4. Assurez-vous d'avoir installé le sous-paquet « IPAserver-trust-ad » " -"sur le serveur" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Impossible de rejoindre un domaine sans avoir au préalable configuré son " -"propre domaine. Assurez-vous d'avoir lancé « ipa-adtrust-install » au " -"préalable sur le serveur" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Impossible d'effectuer la commande sélectionnée sans configuration de Samba " -"4. Assurez-vous de bien avoir configuré ce serveur avec la commande « ipa-" -"adtrust-install »." - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Impossible d'effectuer la commande sélectionnée sans installation de " -"Samba 4. Assurez-vous de bien avoir installé sur le serveur le paquet IPA " -"« server-trust-ad »." - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Impossible de lire le fichier « %(filename)s » : %(exc)s" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Impossible de résoudre le KDC pour le domaine demandé" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "Impossible de récupérer la liste GC du domaine approuvé" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Impossible d'effectuer une recherche sur les domaines approuvés sans avoir " -"au préalable configuré son propre domaine. Assurez-vous d'avoir au préalable " -"lancé « ipa-adtrust-install » sur le serveur" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "Impossible d'enregistrer les ACI de permissions dans %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "Impossible d'utiliser %(old_name)s avec %(new_name)s" - -msgid "Car License" -msgstr "Permis de conduire/carte d'identité" - -msgid "Certificate" -msgstr "Certificat" - -msgid "Certificate Association Data" -msgstr "Donnée associée au certificat" - -msgid "Certificate Authorities" -msgstr "Autorités de certification" - -msgid "Certificate Authority" -msgstr "Autorité de certification" - -msgid "Certificate Hold" -msgstr "Certificat bloqué" - -msgid "Certificate Hold Removed" -msgstr "Blocage de certificat supprimé" - -msgid "Certificate Profile" -msgstr "Profil de certificat" - -msgid "Certificate Profile to use" -msgstr "Profil de certificat à utiliser" - -msgid "Certificate Profiles" -msgstr "Profils de certificats" - -msgid "Certificate Revoked" -msgstr "Certificat révoqué" - -msgid "Certificate Subject base" -msgstr "Base de sujet de certificat" - -msgid "Certificate Type" -msgstr "Type de certificat" - -msgid "Certificate Usage" -msgstr "Utilisation du certificat" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Certificat pour ${primary_key} de ${entity}" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Erreur de format de certificat : %(error)s" - -msgid "Certificate in base64 or PEM format" -msgstr "Certificat au format Base64 ou PEM" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "L'opération de certification ne peut être effectuée : %(error)s" - -msgid "Certificate profiles cannot be renamed" -msgstr "Les profils de certificats ne peuvent être renommés" +msgid " -8 '${cn}'" +msgstr " -8 '${cn}'" msgid "Certificate requested" msgstr "Certificat demandé" -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Certificat de l'AC « %(ca)s » avec le numéro de série %(serial)s introuvable" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Certificat(s) enregistré(s) dans le fichier '%(file)s'" - -msgid "Certificate/CRL" -msgstr "Certificat/CRL" - -msgid "Certificates" -msgstr "Certificats" - -msgid "Cessation of Operation" -msgstr "Cessation d'activité" - -msgid "Change current Domain Level." -msgstr "Modifier le niveau actuel du domaine." - -msgid "Change password" -msgstr "Modifier le mot de passe" - -msgid "Change to POSIX group" -msgstr "Transformer en groupe POSIX" - -msgid "Change to external group" -msgstr "Transformer en groupe externe" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Mot de passe modifié pour « %(value)s »" - -msgid "Character classes" -msgstr "Classes de caractères" - -msgid "Check DNS" -msgstr "Vérification DNS" - -msgid "Check connection to remote IPA server." -msgstr "Vérifier la connexion au serveur IPA distant." - -msgid "Check the status of a certificate signing request." -msgstr "Vérifier l'état d'une demande de signature de certificat." - -msgid "Checking if record exists." -msgstr "Vérification de l'existence de l'enregistrement." - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" -"Vérifier si l'un des serveurs a activé le service autorité de certification." - -msgid "City" -msgstr "Ville" - -msgid "Class" -msgstr "Classe" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" -"Retire l'application de la vue d'identifiants des hôtes ou membres des " -"groupes d'hôtes indiqués." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Cliquer pour ${action}." - -msgid "Client credentials may be delegated to the service" -msgstr "" -"Les informations d'identification du client peuvent être déléguées au service" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Le client n'est pas configuré. Lancer « ipa-client-install »." - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Version client. Utilisée pour déterminer si le serveur accepte la requête." - -msgid "Clock interval" -msgstr "Intervalle d'horloge" - -msgid "Clock offset" -msgstr "Décalage d'horloge" - -msgid "Close" -msgstr "Fermer" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "La fermeture du tableau des clés a échoué\n" - -msgid "Collapse All" -msgstr "Tout replier" - -msgid "Comma separated encryption types list" -msgstr "Liste, séparée par des virgules, des types de chiffrement" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "La commande « %(name)s » a été abandonnée." - -msgid "Command category" -msgstr "Catégorie de commande" - -msgid "Command category the rule applies to" -msgstr "Catégorie de commande à laquelle la règle s'applique" - -msgid "Command name" -msgstr "Nom de commande" - -msgid "Command not implemented" -msgstr "Commande non implémentée" - -msgid "Commands" -msgstr "Commandes" - -msgid "Common Name" -msgstr "Nom usuel" - -msgid "Conditions that could not be added" -msgstr "Conditions n'ayant pu être ajoutées" - -msgid "Conditions that could not be removed" -msgstr "Conditions n'ayant pu être supprimées" - -msgid "Configuration" -msgstr "Configuration" - -msgid "Configure your token" -msgstr "Configurer votre jeton" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" -"Configurez le code QR en reconnaissant le code QR ci-dessous. Cliquez sur le " -"code QR si vous voyez ceci sur le périphérique que vous souhaitez configurer." - -msgid "Configured administrative server limit exceeded" -msgstr "Limite configurée côté serveur dépassée" - -msgid "Configured size limit exceeded" -msgstr "Limite configurée de taille dépassée" - -msgid "Configured time limit exceeded" -msgstr "Limite configurée de durée dépassée" - -msgid "Confirm (password)" -msgstr "Confirmer le mot de passe" - -msgid "Confirmation" -msgstr "Confirmation" - -msgid "Connectivity" -msgstr "Connectivité" - -msgid "Consecutive failures before lockout" -msgstr "Échecs consécutifs avant verrouillage" - -msgid "Contact Settings" -msgstr "Paramètres de contact" - -msgid "Contact this specific KDC Server" -msgstr "Contacter ce serveur KDC particulier" - -msgid "Continue" -msgstr "Continuer" - -msgid "Continuous mode: Don't stop on errors." -msgstr "Mode continu : pas d'arrêt sur erreurs." - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" -"Mode continu. Les erreurs sont rapportées mais le processus se poursuit" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" -"Mode opératoire continu. Les erreurs sont notées, mais le processus continue." - -msgid "Convert on server" -msgstr "Convertir sur le serveur" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Impossible d'obtenir %(name)s de façon interactive" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" -"Impossible de lire « originfilter » de « UPG Definition ». Vérifiez vos " -"permissions." - -msgid "Counter" -msgstr "Compteur" - -msgid "Counter-based (HOTP)" -msgstr "Basé sur un compteur (HOTP)" - -msgid "Create Stage user in from a delete user" -msgstr "Créer un utilisateur en attente depuis un utilisateur supprimé" - -msgid "Create a CA." -msgstr "Créer une AC." - -msgid "Create a new CA ACL." -msgstr "Créer une nouvelle LCA d'AC." - -msgid "Create a new HBAC rule." -msgstr "Créer une nouvelle règle HBAC." - -msgid "Create a new SELinux User Map." -msgstr "Créer une nouvelle mappe d'utilisateurs SELinux" - -msgid "Create a new automount key." -msgstr "Créer une nouvelle clé « automount »." - -msgid "Create a new automount location." -msgstr "Créer un nouvel emplacement " - -msgid "Create a new automount map." -msgstr "Créer une nouvelle carte « automount »." - -msgid "Create a new group." -msgstr "Créer un nouveau groupe." - -msgid "Create a new indirect mount point." -msgstr "Créer un nouveau point de montage indirect." - -msgid "Create a new service delegation rule." -msgstr "Créer une nouvelle règle de délégation de service" - -msgid "Create a new service delegation target." -msgstr "Créer une nouvelle cible de délégation de service" - -msgid "Create a new vault." -msgstr "Créer un nouveau coffre-fort." - -msgid "Create as a non-POSIX group" -msgstr "Créer en tant que groupe non-POSIX" - -msgid "Create dns record" -msgstr "Créer un enregistrement DNS" - -msgid "Create new ACI." -msgstr "Créer une nouvelle ICA." - -msgid "Create new DNS forward zone." -msgstr "Créer une nouvelle zone de redirection DNS" - -msgid "Create new DNS zone (SOA record)." -msgstr "Créer une nouvelle zone DNS (enregistrement SOA)." - -msgid "Create new Sudo Command Group." -msgstr "Créer un nouveau groupe de commandes sudo." - -msgid "Create new Sudo Command." -msgstr "Créer une nouvelle commande sudo." - -msgid "Create new Sudo Rule." -msgstr "Créer une nouvelle règle sudo." - -msgid "Create reverse" -msgstr "Créer un enregistrement inverse" - -msgid "Create reverse record for this IP Address" -msgstr "Créer l'enregistrement inverse pour cette adresse IP" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI « %(value)s » créée" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "AC « %(value)s » créée" - -msgid "Creating record." -msgstr "Création de l'enregistrement." - -msgid "Credentials cache permissions incorrect" -msgstr "Droits d'accès incorrects au cache des justificatifs d'identité" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Les confiances croisées entre domaines n'ont pas été configurées. Assurez-" -"vous d'avoir préalablement exécuté « ipa-adtrust-install » sur le serveur" - -msgid "Current DNS record contents:\n" -msgstr "Contenu actuel de l'enregistrement DNS :\n" - -msgid "Current Password" -msgstr "Mot de passe actuel" - -msgid "Current domain level:" -msgstr "Niveau actuel du domaine :" - -msgid "Current password is required" -msgstr "Le mot de passe actuel est requis" - -msgid "Custom value" -msgstr "Valeur personnalisée" - -msgid "DHCID record" -msgstr "Enregistrement DHCID" - -msgid "DLV Algorithm" -msgstr "Algorithme DLV" - -msgid "DLV Digest" -msgstr "Condensé DLV" - -msgid "DLV Digest Type" -msgstr "Type de condensé DLV" - -msgid "DLV Key Tag" -msgstr "Étiquette de clé DLV" - -msgid "DLV record" -msgstr "Enregistrement DLV" - -msgid "DN commonName does not match user's login" -msgstr "" -"Le « commonName » du DN ne correspond pas à l'identifiant de connexion de " -"l'utilisateur" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" -"L'adresse email du DN ne correspond à aucune des adresses email de " -"l'utilisateur" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "DN du conteneur pour des groupes dans le DS relatif au DN de base" - -msgid "DN of container for users in DS relative to base DN" -msgstr "DN du conteneur pour les utilisateurs dans le DS relatif au DN de base" - -msgid "DN of the started task" -msgstr "DN de la tâche lancée" - -msgid "DN to bind as if not using kerberos" -msgstr "DN à utiliser pour la connexion en cas de non-utilisation de Kerberos" - -msgid "DNAME Target" -msgstr "Cible DNAME" - -msgid "DNAME record" -msgstr "Enregistrement DNAME" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS Forward Zone" -msgstr "Zone de redirection DNS" - -msgid "DNS Forward Zones" -msgstr "Zones de redirection DNS" - -msgid "DNS Global Configuration" -msgstr "Configuration DNS globale" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" -"Le type DNS RR « %s » n'est pas pris en charge par le greffon bind-dyndb-ldap" - -msgid "DNS Resource Record" -msgstr "Enregistrement de ressources DNS" - -msgid "DNS Resource Records" -msgstr "Enregistrements de ressources DNS" - -msgid "DNS Server" -msgstr "Serveur DNS" - -msgid "DNS Server name" -msgstr "Nom du serveur DNS" - -msgid "DNS Servers" -msgstr "Serveurs DNS" - -msgid "DNS Zone" -msgstr "Zone DNS" - -msgid "DNS Zone Settings" -msgstr "Paramètres de zone DNS" - -msgid "DNS Zones" -msgstr "Zones DNS" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" -"Échec de vérification du DNS : {%(expected)s} attendu, {%(got)s} obtenu" - -msgid "DNS class" -msgstr "Classe de DNS" - -msgid "DNS configuration options" -msgstr "Options de configuration DNS" - -msgid "DNS forward zone" -msgstr "Zone de redirection DNS" - -msgid "DNS forward zones" -msgstr "Zones de redirection DNS" - -msgid "DNS forwarder" -msgstr "Transmetteur DNS" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"La sémantique de redirection DNS a été modifié depuis IPA 4.0.\n" -"Utilisez à la place les redirections de zones (dnsforwardzone-*).\n" -"Pour plus de détails, lisez la documentation." - -msgid "DNS is not configured" -msgstr "Le DNS n'est pas configuré" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "un libellé de DNS ne peut pas dépasser 63 caractères" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "un libellé DNS ne peut pas dépasser 63 caractères" - -msgid "DNS record was deleted because it contained no data." -msgstr "L'enregistrement DNS a été supprimé car vide" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" -"Le ou les enregistrements DNS de l'hôte %(host)s n'ont pu être supprimés. " -"(%(reason)s)" - -msgid "DNS records can be only updated one at a time" -msgstr "" -"Les enregistrements DNS ne peuvent être mis à jour qu'un seul à la fois" - -msgid "DNS resource record" -msgstr "Enregistrement de ressource DNS" - -msgid "DNS resource record type" -msgstr "Type d'enregistrement de ressource DNS" - -msgid "DNS resource records" -msgstr "Enregistrements de ressources DNS" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" -"La zone DNS inverse %(revzone)s pour l'adresse IP %(addr)s n'est pas gérée " -"par ce serveur." - -msgid "DNS server" -msgstr "Serveur DNS" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Le serveur DNS %(server)s ne prend pas en charge : %(error)s.\n" -"Si la validation DNSSEC est activée sur le ou les serveurs IPA, merci de la " -"désactiver." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Le serveur DNS %(server)s ne prend pas en charge EDNS0 (RFC 6891) : " -"%(error)s.\n" -"Si la validation DNSSEC est activée sur le ou les serveurs, merci de la " -"désactiver." - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Serveur DNS %(server)s : %(error)s." - -msgid "DNS servers" -msgstr "Serveurs DNS" - -msgid "DNS zone" -msgstr "Zone DNS" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Zone DNS %(zone)s introuvable" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"La zone DNS de chaque domaine Kerberos doit contenir des enregistrements SOA " -"et NS. Aucun enregistrement trouvé pour : %s" - -msgid "DNS zone root record cannot be renamed" -msgstr "L'enregistrement racine de la zone DNS ne peut être renommé" - -msgid "DNS zones" -msgstr "Zones DNS" - -msgid "DNSKEY record" -msgstr "Enregistrement DNSKEY" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"La prise en charge de DNSSEC est expérimentale.\n" -"%(additional_info)s" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Échec de la validation DNSSEC : %(error)s.\n" -"Merci de vérifier votre configuration DNSSEC ou de désactiver la validation " -"DNSSEC sur tous les serveurs IPA." - -msgid "DS Algorithm" -msgstr "Algorithme DS" - -msgid "DS Digest" -msgstr "Condensé DS" - -msgid "DS Digest Type" -msgstr "Type de condensé DS" - -msgid "DS Key Tag" -msgstr "Étiquette de clé DS" - -msgid "DS record" -msgstr "Enregistrement DS" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" -"L'enregistrement DS ne doit pas être dans la zone sommet (RFC 4035 section " -"2.4)" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" -"l'enregistrement DS doit coexister avec un enregistrement NS (RFC 4592 " -"section 4.6, RFC 4035 section 2.4)" - -msgid "Data" -msgstr "Données" - -msgid "Debugging output" -msgstr "Sortie de débogage" - -msgid "Default" -msgstr "Par défaut" - -msgid "Default (fallback) Group" -msgstr "Groupe par défaut (repli)" - -msgid "Default (fallback) group for entries to land" -msgstr "Groupe par défaut (repli) pour ranger des entrées" - -msgid "Default PAC types" -msgstr "Types de PAC par défaut" - -msgid "Default SELinux user" -msgstr "Utilisateur SELinux par défaut" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" -"Utilisateur SELinux par défaut quand il n'y a aucune correspondance dans la " -"règle de mappe SELinux" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" -"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " -"hôte" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" -"La vue de la relation d'approbation par défaut ne peut contenir des " -"utilisateurs IPA" - -msgid "Default attributes" -msgstr "Attributs par défaut" - -msgid "Default e-mail domain" -msgstr "Domaine par défaut pour les courriels" - -msgid "Default from" -msgstr "Valeur par défaut depuis" - -msgid "Default group for entries to land" -msgstr "Groupe par défaut pour les nouvelles entrées" - -msgid "Default group for new users" -msgstr "Groupe utilisateur par défaut pour les nouveaux utilisateurs" - -msgid "Default group for new users is not POSIX" -msgstr "Le groupe par défaut des nouveaux utilisateurs n'est pas POSIX" - -msgid "Default group for new users not found" -msgstr "Groupe par défaut pour les nouveaux utilisateurs introuvable" - -msgid "Default group objectclasses" -msgstr "Classes d'objets de groupe par défaut" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Classes d'objets de groupe par défaut (liste séparée par des virgules)" - -msgid "Default host group" -msgstr "Groupe d'hôte par défaut" - -msgid "Default location of home directories" -msgstr "Emplacement par défaut des répertoires utilisateur" - -msgid "Default shell" -msgstr "Interpréteur de commande par défaut" - -msgid "Default shell for new users" -msgstr "Interpréteur de commande par défaut pour les nouveaux utilisateurs" - -msgid "Default ticket policy could not be read" -msgstr "La politique de ticket par défaut ne peut pas être lue" - -msgid "Default types of PAC supported for services" -msgstr "Types de PAC par défaut pris en charge pour des services" - -msgid "Default types of supported user authentication" -msgstr "Types d'authentification utilisateur pris en charge par défaut" - -msgid "Default user authentication types" -msgstr "Types d'authentification utilisateur par défaut" - -msgid "Default user group" -msgstr "Groupe d'utilisateur par défaut" - -msgid "Default user objectclasses" -msgstr "Classes d'objets utilisateur par défaut" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" -"Classes d'objets utilisateurs par défaut (liste séparée par des virgules)" - -msgid "Default users group" -msgstr "Groupe utilisateur par défaut" - -msgid "Degrees Latitude" -msgstr "Degrés de latitude" - -msgid "Degrees Longitude" -msgstr "Degrés de longitude" - -msgid "Delegation" -msgstr "Délégation" - -msgid "Delegation name" -msgstr "Nom de délégation" - -msgid "Delegations" -msgstr "Délégations" - -msgid "Delete" -msgstr "Supprimer" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Supprimer '%(value)s' pour %(name)s ?" - -msgid "Delete ACI." -msgstr "Supprimer une ICA." - -msgid "Delete DNS forward zone." -msgstr "Supprimer une zone de redirection DNS." - -msgid "Delete DNS resource record." -msgstr "Supprimer un enregistrement de ressources DNS." - -msgid "Delete DNS zone (SOA record)." -msgstr "Supprimer la zone DNS (enregistrement SOA)." - -msgid "Delete IPA server." -msgstr "Supprimer un serveur IPA." - -msgid "Delete Key, Unprovision" -msgstr "Supprimer une clé, ôter les permissions" - -msgid "Delete Server" -msgstr "Supprimer le serveur" - -msgid "Delete Sudo Command Group." -msgstr "Supprimer un groupe de commandes sudo." - -msgid "Delete Sudo Command." -msgstr "Supprimer une commande sudo." - -msgid "Delete Sudo Rule." -msgstr "Règle sudo supprimée." - -msgid "Delete a CA ACL." -msgstr "Supprimer une LCA d'AC." - -msgid "Delete a Certificate Profile." -msgstr "Supprimer un profil de certificat." - -msgid "Delete a DNS server" -msgstr "Supprimer un serveur DNS" - -msgid "Delete a RADIUS proxy server." -msgstr "Supprimer un serveur mandataire RADIUS." - -msgid "Delete a SELinux User Map." -msgstr "Supprimer une mappe d'utilisateurs SELinux" - -msgid "Delete a delegation." -msgstr "Supprimer une délégation." - -msgid "Delete a group password policy." -msgstr "Supprimer une politique de mot de passe." - -msgid "Delete a host." -msgstr "Supprimer un hôte." - -msgid "Delete a hostgroup." -msgstr "Supprimer un groupe d'hôtes." - -msgid "Delete a netgroup." -msgstr "Supprimer un groupe réseau." - -msgid "Delete a permission." -msgstr "Supprimer une permission." - -msgid "Delete a privilege." -msgstr "Supprimer un privilège" - -msgid "Delete a role." -msgstr "Supprimer un rôle" - -msgid "Delete a segment." -msgstr "Supprimer un segment." - -msgid "Delete a self-service permission." -msgstr "Supprimer une permission de libre service." - -msgid "Delete a stage user." -msgstr "Supprimer un utilisateur en attente." - -msgid "Delete a topology suffix." -msgstr "Supprimer un suffixe de topologie." - -msgid "Delete a trust." -msgstr "Supprimer la confiance." - -msgid "Delete a user" -msgstr "Supprimer un utilisateur" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" -"Supprimer un utilisateur en préservant l'entrée correspondantes pour un " -"usage futur" - -msgid "Delete a user." -msgstr "Supprimer un utilisateur." - -msgid "Delete a vault container." -msgstr "Supprimer un conteneur de coffre-fort." - -msgid "Delete a vault." -msgstr "Supprimer un coffre-fort." - -msgid "Delete all associated records" -msgstr "Supprimer les enregistrements associés" - -msgid "Delete all?" -msgstr "Tout supprimer ?" - -msgid "Delete an Group ID override." -msgstr "Supprimer une surcharge d'identifiants de groupes." - -msgid "Delete an HBAC rule." -msgstr "Supprimer une règle HBAC." - -msgid "Delete an HBAC service group." -msgstr "Supprimer un groupe de services HBAC." - -msgid "Delete an ID View." -msgstr "Supprimer une vue d'identifiants." - -msgid "Delete an ID override." -msgstr "Supprimer une surcharge d'identifiants." - -msgid "Delete an ID range." -msgstr "Supprimer une plage d'ID.." - -msgid "Delete an IPA location." -msgstr "Supprimer un emplacement IPA." - -msgid "Delete an IPA service." -msgstr "Supprimer un service IPA." - -msgid "Delete an OTP token." -msgstr "Supprimer un jeton OTP" - -msgid "Delete an User ID override." -msgstr "Supprimer une surcharge d'identifiants utilisateurs." - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" -"Supprimer une paire attribut/valeur. L'option sera évaluée\n" -"en dernier, après toutes les modifications et ajouts." - -msgid "Delete an automember rule." -msgstr "Supprimer une règle d'auto-adhésion." - -msgid "Delete an automount key." -msgstr "Supprimer une clé « automount »." - -msgid "Delete an automount location." -msgstr "Supprimer un emplacement « automount »." - -msgid "Delete an automount map." -msgstr "Supprimer une carte « automount »." - -msgid "Delete an existing HBAC service." -msgstr "Supprimer un service HBAC existant." - -msgid "Delete domain" -msgstr "Supprimer un domaine" - -msgid "Delete group." -msgstr "Supprimer un groupe." - -msgid "Delete mode" -msgstr "Mode suppression" - -msgid "Delete service delegation target." -msgstr "Supprimer une cible de délégation de service." - -msgid "Delete service delegation." -msgstr "Supprimer une règle de délégation de service." - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI « %(value)s » supprimée" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "AC « %(value)s » supprimée" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » supprimée" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Zone de redirection DNS « %(value)s » supprimée" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Serveur DNS « %(value)s » supprimé" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Zone DNS « %(value)s » supprimée" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants de groupes « %(value)s » supprimée" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » supprimée" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Service HBAC « %(value)s » supprimé" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Groupe de services HBAC « %(value)s » supprimé" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Vue d'identifiants « %(value)s » supprimée" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants « %(value)s » supprimée" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Plage d'ID « %(value)s » supprimée" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Emplacement IPA « %(value)s » supprimé" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Serveur IPA « %(value)s » supprimé" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Jeton OTP « %(value)s » supprimé" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » supprimé" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » supprimée." - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Commande sudo « %(value)s » supprimée" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Groupe de commandes sudo « %(value)s » supprimé" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Règle sudo « %(value)s » supprimée" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants utilisateurs « %(value)s » supprimée" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Règle d'auto-adhésion « %(value)s » supprimée" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Clé « automount » « %(value)s » supprimée" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Emplacement « automount » « %(value)s » supprimé" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Carte « automount » « %(value)s » supprimée" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Délégation « %(value)s » supprimée" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Groupe « %(value)s » supprimé" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Hôte « %(value)s » supprimé" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Groupe d'hôtes « %(value)s » supprimé" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Groupe réseau « %(value)s » supprimé" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Permission « %(value)s » supprimée" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Privilège « %(value)s » supprimé" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Profil « %(value)s » supprimé" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Enregistrement « %(value)s » supprimé" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rôle « %(value)s » supprimé" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Segment « %(value)s » supprimé" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Permission de libre service « %(value)s » supprimée" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Service « %(value)s » supprimé" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Règle de délégation de service « %(value)s » supprimée" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Cible de délégation de service « %(value)s » supprimée" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Utilisateur en attente « %(value)s » supprimé" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Suffixe de topologie « %(value)s » supprimé" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Confiance « %(value)s » supprimée" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » supprimé" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Valeur « %(value)s » supprimée du coffre" - -msgid "Deleted vault container" -msgstr "Conteneur de coffre-fort supprimé" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"La suppression d'un groupe géré est interdite. Il doit d'abord être détaché." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " -"installation sans AC." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "La suppression de ce serveur laissera votre installation sans DNS." - -msgid "Deny" -msgstr "Interdire" - -msgid "Department Number" -msgstr "Numéro du service" - -msgid "Deprecated options" -msgstr "Options obsolètes" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Abandonné ; utiliser %s" - -msgid "Description" -msgstr "Description" - -msgid "Description of the purpose of the CA" -msgstr "Description de l'objet de l'AC" - -msgid "Detach a managed group from a user." -msgstr "Détacher un groupe administré d'un utilisateur." - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Groupe « %(value)s » détaché de l'utilisateur « %(value)s »" - -msgid "Detect" -msgstr "Détection" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" -"Déterminer si le greffon de compatibilité de schéma est configuré pour " -"servir les utilisateurs et groupes du domaine" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" -"Déterminer si la commande « ipa-adtrust-install » a été exécutée sur ce " -"système" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" -"Déterminer si la commande « ipa-adtrust-install » a été exécutée avec la " -"tâche « sidgen »" - -msgid "Dict of I18N messages" -msgstr "Dictionnaire de messages I18N" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "Dictionnaire de commande IPA codées JSON" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "Dictionnaire de méthode IPA codées JSON" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Dictionnaire d'objets IPA codés JSON" - -msgid "Dictionary mapping variable name to value" -msgstr "Annuaire associant un nom de variable à une valeur" - -msgid "Digest" -msgstr "Condensé" - -msgid "Digest Type" -msgstr "Type de condensé" - -msgid "Digits" -msgstr "Chiffres" - -msgid "Direct" -msgstr "Direct" - -msgid "Direct Membership" -msgstr "Adhésion directe" - -msgid "Direction Latitude" -msgstr "Direction de latitude" - -msgid "Direction Longitude" -msgstr "Direction de longitude" - -msgid "Direction of replication between left and right replication node" -msgstr "" -"Direction de la réplication entre les nœuds gauche et droit de réplication" - -msgid "Disable" -msgstr "Désactiver" - -msgid "Disable DNS Forward Zone." -msgstr "Désactiver une zone de redirection DNS." - -msgid "Disable DNS Zone." -msgstr "Désactiver la zone DNS." - -msgid "Disable a CA ACL." -msgstr "Désactiver une LCA d'AC." - -msgid "Disable a Sudo Rule." -msgstr "Désactiver une règle sudo." - -msgid "Disable a user account." -msgstr "Désactiver un compte utilisateur." - -msgid "Disable an HBAC rule." -msgstr "Désactiver une règle HBAC." - -msgid "Disable an SELinux User Map rule." -msgstr "Désactiver une mappe d'utilisateurs SELinux" - -msgid "Disable per-user override" -msgstr "Désactiver la surcharge par utilisateur" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Désactiver la clé Kerberos et le certificat SSL d'un service." - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" -"Désactiver la clé Kerberos, les certificats SSL et tous les services d'un " -"hôte." - -msgid "Disable token" -msgstr "Désactiver un jeton" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "Interdire l'utilisation de ressources IPA par le domaine approuvé" - -msgid "Disabled" -msgstr "Désactivé" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » désactivée" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Zone de redirection DNS « %(value)s » désactivée" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Zone DNS « %(value)s » désactivée" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » désactivée" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » désactivée" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Règle sudo « %s » désactivée" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Hôte « %(value)s » désactivé" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Service « %(value)s » désactivé" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "domaine approuvé « %(value)s » désactivé" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » désactivé" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " -"clés de cet hôte." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " -"clés de ce service." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes à récupérer un tableau " -"de clés de cet hôte." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de récupérer un tableau " -"de clés de ce service." - -msgid "Display DNS resource." -msgstr "Afficher un enregistrement de ressources DNS." - -msgid "Display Sudo Command Group." -msgstr "Afficher un groupe de commandes sudo." - -msgid "Display Sudo Command." -msgstr "Afficher une commande sudo." - -msgid "Display Sudo Rule." -msgstr "Afficher une règle sudo." - -msgid "Display a segment." -msgstr "Afficher un segment." - -msgid "Display a single ACI given an ACI name." -msgstr "Afficher une ICA d'après son nom." - -msgid "Display an automount key." -msgstr "Afficher une clé « automount »." - -msgid "Display an automount location." -msgstr "Afficher un emplacement « automount »" - -msgid "Display an automount map." -msgstr "Afficher une carte « automount »." - -msgid "Display configuration of a DNS server." -msgstr "Afficher la configuration d'un nouveau serveur DNS." - -msgid "Display effective policy for a specific user" -msgstr "Afficher la politique effective d'un utilisateur donné" - -msgid "Display information about a DNS forward zone." -msgstr "Afficher des informations à propos des zones de redirection DNS." - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" -"Afficher les informations au sujet d'une zone DNS (enregistrement SOA)." - -msgid "Display information about a RADIUS proxy server." -msgstr "Afficher les informations sur un serveur mandataire RADIUS." - -msgid "Display information about a command output." -msgstr "Afficher les informations sur une sortie de commande." - -msgid "Display information about a command parameter." -msgstr "Afficher des informations sur un paramètre de commande." - -msgid "Display information about a command." -msgstr "Afficher des informations sur une commande." - -msgid "Display information about a delegation." -msgstr "Afficher les informations sur une délégation." - -msgid "Display information about a help topic." -msgstr "Afficher les informations sur un sujet de l'aide." - -msgid "Display information about a host." -msgstr "Afficher les informations sur un hôte." - -msgid "Display information about a hostgroup." -msgstr "Afficher des informations sur un groupe d'hôtes." - -msgid "Display information about a named group." -msgstr "Afficher les informations d'un groupe nommé." - -msgid "Display information about a named service delegation rule." -msgstr "" -"Afficher les informations au sujet d'une règle de délégation de service." - -msgid "Display information about a named service delegation target." -msgstr "Afficher les informations sur une cible de délégation de service." - -msgid "Display information about a netgroup." -msgstr "Afficher l'information sur un groupe réseau." - -msgid "Display information about a permission." -msgstr "Afficher les informations sur une permission." - -msgid "Display information about a privilege." -msgstr "Afficher les informations sur un privilège." - -msgid "Display information about a range." -msgstr "Afficher les informations sur une plage." - -msgid "Display information about a role." -msgstr "Afficher les informations sur un rôle." - -msgid "Display information about a self-service permission." -msgstr "Afficher les informations sur une permission de libre service." - -msgid "Display information about a stage user." -msgstr "Afficher les informations sur un utilisateur en attente." - -msgid "Display information about a trust." -msgstr "Afficher des informations sur une relation de confiance." - -msgid "Display information about a user." -msgstr "Afficher l'information sur un utilisateur." - -msgid "Display information about a vault container." -msgstr "Afficher les informations sur un conteneur de coffre-fort." - -msgid "Display information about a vault." -msgstr "Afficher des informations sur un coffre-fort." - -msgid "Display information about an Group ID override." -msgstr "Afficher les informations d'une surcharge d'identifiants de groupes." - -msgid "Display information about an HBAC service group." -msgstr "Afficher les informations sur un groupe de services HBAC." - -msgid "Display information about an HBAC service." -msgstr "Afficher des informations sur un service HBAC." - -msgid "Display information about an ID View." -msgstr "Afficher les informations d'une vue d'identifiants." - -msgid "Display information about an ID override." -msgstr "Afficher les informations d'une surcharge d'identifiants." - -msgid "Display information about an IPA location." -msgstr "Afficher les informations d'un emplacement IPA." - -msgid "Display information about an IPA service." -msgstr "Afficher les informations sur un service IPA." - -msgid "Display information about an OTP token." -msgstr "Afficher des informations au sujet du jeton OTP" - -msgid "Display information about an User ID override." -msgstr "Afficher les informations d'une surcharge d'identifiants utilisateurs." - -msgid "Display information about an automember rule." -msgstr "Afficher des informations au sujet d'une règle d'auto-adhésion. " - -msgid "Display information about password policy." -msgstr "Afficher les informations sur une politique de mot de passe." - -msgid "Display information about the default (fallback) automember groups." -msgstr "" -"Afficher des informations pour les groupes d'auto-adhésion par défaut " -"(repli).\n" -" " - -msgid "Display name" -msgstr "Nom affiché" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Affiche les droits d'accès sur cette entrée (requiert --all). Cf. la page de " -"manuel de « ipa » pour plus d'informations." - -msgid "Display the current Kerberos ticket policy." -msgstr "Afficher la politique de tickets Kerberos." - -msgid "Display the list of realm domains." -msgstr "Afficher la liste des domaines du royaume." - -msgid "Display the properties of a CA ACL." -msgstr "Afficher les propriétés d'une LCA d'AC." - -msgid "Display the properties of a CA." -msgstr "Afficher les propriétés d'une AC." - -msgid "Display the properties of a Certificate Profile." -msgstr "Afficher les propriétés d'un profil de certificat." - -msgid "Display the properties of a SELinux User Map rule." -msgstr "Afficher les propriétés d'une mappe d'utilisateurs SELinux" - -msgid "Display the properties of an HBAC rule." -msgstr "Afficher les propriétés d'une règle HBAC." - -msgid "Display user record for current Kerberos principal" -msgstr "" -"Afficher l'enregistrement utilisateur pour le principal Kerberos en cours" - -msgid "Do not display QR code" -msgstr "Ne pas afficher le code QR" - -msgid "Do you also want to perform DNS check?" -msgstr "Voulez-vous aussi faire une vérification DNS ?" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" -"Voulez-vous vérifier si l'adresse du nouveau serveur faisant autorité est " -"dans le DNS" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "Voulez-vous supprimer l'alias kerberos ${alias} ?" - -msgid "Do you want to remove the certificate hold?" -msgstr "Voulez-vous supprimer le blocage du certificat ?" +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Revoke certificate" +msgstr "Révoquer un certificat." msgid "" "Do you want to revoke this certificate? Select a reason from the pull-down " @@ -10055,182 +26013,604 @@ msgstr "" "Voulez-vous révoquer ce certificat ? Sélectionnez une raison depuis la liste " "déroulante." +msgid "Certificate Revoked" +msgstr "Certificat révoqué" + +msgid "REVOKED" +msgstr "RÉVOQUÉ" + +msgid "Serial Number" +msgstr "Numéro de série" + +msgid "Serial Number (hex)" +msgstr "Numéro de série (hex)" + +msgid "SHA1 Fingerprint" +msgstr "Empreinte SHA1" + +msgid "SHA256 Fingerprint" +msgstr "Empreinte SHA256" + +msgid "Superseded" +msgstr "Remplacé" + +msgid "Unspecified" +msgstr "Non-spécifié" + +msgid "Valid Certificate Present" +msgstr "Certificat valide présent" + +msgid "Valid from" +msgstr "Valide à partir du" + +msgid "Valid to" +msgstr "Valide jusqu'au" + +msgid "Validity" +msgstr "Validité" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Certificat pour ${primary_key} de ${entity}" + +msgid "View Certificate" +msgstr "Afficher le certificat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "Certificat" + +#, fuzzy +#| msgid "Certificate Authority" +msgid "Certificate For Match" +msgstr "Autorité de certification" + +#, fuzzy +#| msgid "Certificate Association Data" +msgid "Certificate Mapping Match" +msgstr "Donnée associée au certificat" + +#, fuzzy +#| msgid "Matched rules" +msgid "Matched Users" +msgstr "Règles satisfaites" + +#, fuzzy +#| msgid "User login" +msgid "User Login" +msgstr "Identifiant de connexion" + +#, fuzzy +#| msgid "Add new certificates to a service" +msgid "Add certificate identity mapping rule" +msgstr "Ajouter un nouveau certificat à un service" + +#, fuzzy +#| msgid "TLSA Certificate Association Data" +msgid "Add certificate mapping data" +msgstr "Donnée d'association du certificat TLSA" + +#, fuzzy +#| msgid "Certificate Association Data" +msgid "Certificate mapping data" +msgstr "Donnée associée au certificat" + +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "Configuration" + +#, fuzzy, python-brace-format +#| msgid "Do you want to remove the certificate hold?" +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "Voulez-vous supprimer le blocage du certificat ?" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove certificate mapping data" +msgstr "Supprimer les certificats d'un service" + +#, fuzzy +#| msgid "Issued on to" +msgid "Issuer and subject" +msgstr "Émis jusqu'au" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove certificate identity mapping rules" +msgstr "Supprimer les certificats d'un service" + +msgid "Group Options" +msgstr "Options de groupe" + +msgid "Search Options" +msgstr "Options de recherche" + +msgid "SELinux Options" +msgstr "Options SELinux" + +#, fuzzy +#| msgid "Service Options" +msgid "Server Options" +msgstr "Options du service" + +msgid "Service Options" +msgstr "Options du service" + +msgid "User Options" +msgstr "Options utilisateurs" + +msgid "Forward first" +msgstr "Redirection prioritaire" + +msgid "Forwarding disabled" +msgstr "Redirection désactivée" + +msgid "Forward only" +msgstr "Redirection uniquement" + +msgid "Options" +msgstr "Options" + +msgid "Update System DNS Records" +msgstr "Mettre à jour les enregistrements DNS du serveur" + msgid "Do you want to update system DNS records?" msgstr "Voulez-vous mettre à jour les enregistrements DNS du système ?" -msgid "Documentation" -msgstr "Documentation" +msgid "System DNS records updated" +msgstr "Enregistrements DNS du système mis à jour" -msgid "Dogtag Authority ID" -msgstr "ID de l'autorité Dogtag" +#, fuzzy +#| msgid "DNS forward zone" +msgid "Add DNS forward zone" +msgstr "Zone de redirection DNS" -msgid "Domain" -msgstr "Domaine" +#, fuzzy +#| msgid "DNS forward zones" +msgid "Remove DNS forward zones" +msgstr "Zones de redirection DNS" -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" -"Le domaine « %(domain)s » n'est pas un domaine racine pour la forêt " -"« %(forest)s »" +#, fuzzy +#| msgid "DNS resource record" +msgid "Add DNS resource record" +msgstr "Enregistrement de ressource DNS" -msgid "Domain GUID" -msgstr "GUID du domaine" +msgid "DNS record was deleted because it contained no data." +msgstr "L'enregistrement DNS a été supprimé car vide" -msgid "Domain Level" -msgstr "Niveau du domaine" +msgid "Other Record Types" +msgstr "Autres types d'enregistrements" -msgid "Domain Level cannot be lowered." -msgstr "Le niveau du domaine ne peut être redescendu." +msgid "Address not valid, can't redirect" +msgstr "Adresse invalide, impossible de rediriger" + +msgid "Create dns record" +msgstr "Créer un enregistrement DNS" + +msgid "Creating record." +msgstr "Création de l'enregistrement." + +msgid "Record creation failed." +msgstr "La création de l'enregistrement a échoué." + +msgid "Checking if record exists." +msgstr "Vérification de l'existence de l'enregistrement." + +msgid "Record not found." +msgstr "Enregistrement non trouvé." + +msgid "Redirection to PTR record" +msgstr "Redirection vers l'enregistrement PTR" #, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" -"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " -"prend pas en charge." +msgid "Zone found: ${zone}" +msgstr "Zone trouvée : ${zone}" -msgid "Domain NetBIOS name" -msgstr "Nom de domaine NetBIOS" +msgid "Target reverse zone not found." +msgstr "Zone inverse cible non trouvée." -msgid "Domain SID" -msgstr "SID du domaine" +msgid "Fetching DNS zones." +msgstr "Récupération des zones DNS." -msgid "Domain SID of the trusted domain" -msgstr "SID du domaine approuvé" +msgid "An error occurred while fetching dns zones." +msgstr "Une erreur est survenue lors de la récupération des zones DNS." -msgid "Domain Security Identifier" -msgstr "Identifiant de sécurité du domaine" +msgid "You will be redirected to DNS Zone." +msgstr "Vous allez être redirigé vers la zone DNS." -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "Contrôleur de domaine pour le domaine Active Directory (optionnel)" +#, fuzzy +#| msgid "DNS resource records" +msgid "Remove DNS resource records" +msgstr "Enregistrements de ressources DNS" -msgid "Domain enabled" -msgstr "Domaine activé" +msgid "Standard Record Types" +msgstr "Types d'enregistrement standard" -msgid "Domain name" -msgstr "Nom de domaine" +msgid "Records for DNS Zone" +msgstr "Enregistrements pour la zone DNS" -msgid "Don't create user private group" -msgstr "Ne pas créer de groupe privé" +msgid "Record Type" +msgstr "Type d'enregistrement" -msgid "Don't wait for rebuilding membership" -msgstr "Ne pas attendre pour reconstruire l'appartenance" - -msgid "Download" -msgstr "Téléchargement" - -msgid "Download certificate as PEM formatted file." -msgstr "Télécharger le certificat dans un fichier au format PEM." - -msgid "Dry run" -msgstr "Essai à blanc" - -msgid "Duplicate keys skipped:" -msgstr "Clés dupliquées ignorées :" - -msgid "Duplicate maps skipped:" -msgstr "Cartes dupliquées ignorées :" - -msgid "Dynamic update" -msgstr "Mise à jour dynamique" - -msgid "Edit" -msgstr "Modifier" +#, fuzzy +#| msgid "DNS zone" +msgid "Add DNS zone" +msgstr "Zone DNS" #, python-brace-format -msgid "Edit ${entity}" -msgstr "Modifier ${entity}" +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" +"Êtes-vous sûr de vouloir ajouter une permission pour la zone DNS ${object} ?" -msgid "Effective attributes" -msgstr "Attributs impactés" +msgid "DNS Zone Settings" +msgstr "Paramètres de zone DNS" -msgid "Email address" -msgstr "Adresse courriel" +#, fuzzy +#| msgid "DNS zones" +msgid "Remove DNS zones" +msgstr "Zones DNS" -msgid "Employee Information" -msgstr "Informations employé" +msgid "Remove Permission" +msgstr "Supprimer une permission" -msgid "Employee Number" -msgstr "Matricule" +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" +"Êtes-vous sûr de vouloir supprimer la permission pour la zone DNS ${object} ?" -msgid "Employee Type" -msgstr "Type d'employé" +msgid "Skip DNS check" +msgstr "Passer la vérification DNS" -msgid "Enable" -msgstr "Activer" +msgid "Skip overlap check" +msgstr "Passer la vérification de recouvrement" -msgid "Enable DNS Forward Zone." -msgstr "Activer une zone de redirection DNS." +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" +"Voulez-vous vérifier si l'adresse du nouveau serveur faisant autorité est " +"dans le DNS" -msgid "Enable DNS Zone." -msgstr "Activer la zone DNS." +msgid "Authoritative nameserver change" +msgstr "Changement de serveur de nom faisant autorité" -msgid "Enable a CA ACL." -msgstr "Activer une LCA d'AC." +msgid "Level" +msgstr "Niveau" -msgid "Enable a Sudo Rule." -msgstr "Activer une règle sudo." +msgid "Set Domain Level" +msgstr "Définir le niveau du domaine" -msgid "Enable a user account." -msgstr "Activer un compte utilisateur." +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "Groupe d'utilisateurs" -msgid "Enable an HBAC rule." -msgstr "Activer une règle HBAC." +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" -msgid "Enable an SELinux User Map rule." -msgstr "Activer une mappe d'utilisateurs SELinux" +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" -msgid "Enable migration mode" -msgstr "Activer le mode migration" +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Ajouter des utilisateurs et groupes à une règle HBAC." -msgid "Enable or Disable Anonymous PKINIT." -msgstr "Active ou désactive un PKINIT anonyme" +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" -msgid "Enable token" -msgstr "Activer un jeton" +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" -msgid "Enabled" -msgstr "Activé(e)" +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » activée" +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Zone de redirection DNS « %(value)s » activée" +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Zone DNS « %(value)s » activée" +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » activée" +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » activée" +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Règle sudo « %s » activée" +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" -msgid "Enabled server roles" -msgstr "Rôles serveur activés" +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Activation du domaine approuvé « %(value)s »" +msgid "Group Settings" +msgstr "Paramètres de groupe" -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » activé" +msgid "External" +msgstr "Externe" -msgid "Encryption types to request" -msgstr "Type de chiffrement à demander" +msgid "Groups" +msgstr "Groupes" -msgid "Enctype comparison failed!\n" -msgstr "Échec de comparaison du « enctype » !\n" +#, fuzzy +#| msgid "User categories" +msgid "Group categories" +msgstr "Catégories d'utilisateurs" + +msgid "Change to external group" +msgstr "Transformer en groupe externe" + +msgid "Change to POSIX group" +msgstr "Transformer en groupe POSIX" + +#, fuzzy +#| msgid "POSIX" +msgid "Non-POSIX" +msgstr "POSIX" + +msgid "POSIX" +msgstr "POSIX" + +#, fuzzy +#| msgid "Member user group" +msgid "Remove user groups" +msgstr "Groupe d'utilisateurs membre" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "Supprimer des membres d'un groupe réseau." + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" +"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove services from user group '${primary_key}'" +msgstr "Ajouter des services et des groupes de services d'une règle HBAC." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a group." +msgid "Remove users from user group '${primary_key}'" +msgstr "Supprimer des membres d'un groupe." + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "Type de groupe" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Add HBAC rule" +msgstr "Règle HBAC" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Ajouter des utilisateurs et groupes à une règle HBAC." + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "HBAC service groups to remove" +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "Groupes de services HBAC à supprimer" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Ajouter des services à une règle HBAC." + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Ajouter des services à une règle HBAC." + +msgid "Accessing" +msgstr "Accédant à" + +#, fuzzy +#| msgid "HBAC rules" +msgid "Remove HBAC rules" +msgstr "Règles HBAC" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Ajouter des services et des groupes de services d'une règle HBAC." + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +msgid "Via Service" +msgstr "Via le service" + +msgid "Who" +msgstr "Qui" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add HBAC service" +msgstr "Service HBAC" + +#, fuzzy, python-brace-format +#| msgid "Add members to an HBAC service group." +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "Ajouter des membres à un groupe de services HBAC." + +#, fuzzy +#| msgid "Member HBAC service" +msgid "Remove HBAC services" +msgstr "Services HBAC membres" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "Supprimer des membres d'un groupe de services HBAC." + +#, fuzzy +#| msgid "HBAC service group" +msgid "Add HBAC service group" +msgstr "Groupe de services HBAC" + +#, fuzzy, python-brace-format +#| msgid "Add members to an HBAC service group." +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "Ajouter des membres à un groupe de services HBAC." + +#, fuzzy +#| msgid "Member HBAC service groups" +msgid "Remove HBAC service groups" +msgstr "Groupes de services HBAC membres" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Supprimer des membres d'un groupe de services HBAC." + +msgid "Access Denied" +msgstr "Accès interdit" + +msgid "Access Granted" +msgstr "Accès autorisé" + +msgid "Include Disabled" +msgstr "Inclusion désactivée" + +msgid "Include Enabled" +msgstr "Inclusion activée" + +msgid "HBAC Test" +msgstr "Test HBAC" + +msgid "Matched" +msgstr "Correspondance" + +msgid "Missing values: " +msgstr "Valeurs manquantes :" + +msgid "New Test" +msgstr "Nouveau test" + +msgid "Rules" +msgstr "Règles" + +msgid "Run Test" +msgstr "Lancer test" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "Définir un ${entity} externe" + +msgid "Unmatched" +msgstr "Pas de correspondance" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add host" +msgstr "Ajouter un nouvel hôte." + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Ajouter des services à une règle HBAC." + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} overrides:" +msgid "Add host '${primary_key}' into roles" +msgstr "Surcharges de ${primary_key} :" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "Certificat de l'hôte" + +msgid "Host Name" +msgstr "Nom d'hôte" + +msgid "Delete Key, Unprovision" +msgstr "Supprimer une clé, ôter les permissions" + +msgid "Host Settings" +msgstr "Paramètres d'hôte" msgid "Enrolled" msgstr "Enregistré" @@ -10238,23 +26618,187 @@ msgstr "Enregistré" msgid "Enrollment" msgstr "Inscription" -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Échec de l'enregistrement. %s\n" +msgid "Fully Qualified Host Name" +msgstr "Nom d'hôte pleinement qualifié" -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Entrer à nouveau %(label)s pour validation :" +msgid "Generate OTP" +msgstr "Créer un OTP" -msgid "Enter trusted group name." -msgstr "Saisir le nom du groupe approuvé." +msgid "Generated OTP" +msgstr "OTP créé" -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." +msgid "Kerberos Key" +msgstr "Clé Kerberos" + +msgid "Kerberos Key Not Present" +msgstr "Clé Kerberos absente" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Clé Kerberos présente, hôte muni de permissions" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password" +msgstr "Mots de passe à usage unique" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Not Present" +msgstr "Mots de passe à usage unique" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Present" +msgstr "Mots de passe à usage unique" + +msgid "Reset OTP" +msgstr "Remise à zéro OTP" + +#, fuzzy +#| msgid "One Time Password" +msgid "Reset One-Time Password" +msgstr "Mots de passe à usage unique" + +msgid "Set OTP" +msgstr "Paramétrer le mot de passe à usage unique" + +msgid "OTP set" +msgstr "OTP configuré" + +#, fuzzy +#| msgid "One Time Password" +msgid "Set One-Time Password" +msgstr "Mots de passe à usage unique" + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove hosts" +msgstr "Supprimer le blocage" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" msgstr "" -"Saisir le nom du groupe approuvé ou du groupe IPA. N.B. : la recherche " -"n'indique pas les groupes des domaines approuvés." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a hostgroup." +msgid "Remove host '${primary_key}' from host groups" +msgstr "Supprimer des membres d'un groupe d'hôtes." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove host '${primary_key}' from netgroups" +msgstr "Supprimer des membres d'un groupe réseau." + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove host '${primary_key}' from roles" +msgstr "Supprimer des privilèges d'un rôle." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, fuzzy, python-brace-format +#| msgid "Remove an option from Sudo Rule." +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "Retirer une option d'une règle sudo." + +msgid "Unprovision" +msgstr "Suppression des permissions" + +msgid "Are you sure you want to unprovision this host?" +msgstr "Êtes-vous sûr de vouloir supprimer les permissions à cet hôte ?" + +#, fuzzy +#| msgid "Unprovision" +msgid "Unprovisioning host" +msgstr "Suppression des permissions" + +msgid "Host unprovisioned" +msgstr "Permissions de l'hôte supprimées" + +#, fuzzy +#| msgid "host group" +msgid "Add host group" +msgstr "groupe d'hôtes" + +#, fuzzy, python-brace-format +#| msgid "%i hosts or hostgroups removed." +msgid "Add hosts into host group '${primary_key}'" +msgstr "%i hôtes ou groupes d'hôtes supprimés." + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "Paramètres des groupe d'hôtes" + +#, fuzzy +#| msgid "member host group" +msgid "Remove host groups" +msgstr "groupe d'hôte membre" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "Utilisateurs à surcharger" msgid "" "Enter trusted or IPA user login. Note: search doesn't list users from " @@ -10266,204 +26810,1668 @@ msgstr "" msgid "Enter trusted user login." msgstr "Saisir le nom de l'utilisateur approuvé." -msgid "Entry" -msgstr "Entrée" +#, fuzzy +#| msgid "Profiles" +msgid "Profile" +msgstr "Profils" -#, python-format -msgid "Entry %s does not exist" -msgstr "L'entrée %s n'existe pas" - -#, python-format -msgid "Entry %s not found" -msgstr "Entrée %s introuvable" - -msgid "Entry RDN is not 'uid'" -msgstr "Le RDN de l'entrée n'est pas l'attribut « uid »" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "L'entrée ne possède aucun attribut « %(attribute)s »" - -msgid "Enumerate all the hosts the view applies to." -msgstr "Énumérer tous les hôtes auxquels la vue s'applique." - -msgid "Error" -msgstr "Erreur" - -msgid "Error changing account status" -msgstr "Erreur lors du changement d'état du compte" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Erreur à l'obtention du royaume Kerberos par défaut : %s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Impossible d'obtenir les justificatifs d'identité initiaux : %s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Erreur à l'analyse de « %1$s » : %2$s.\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Erreur à la résolution du tableau de clés : %s.\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" -"Erreur lors du stockage des justificatifs d'identité dans le cache : %s.\n" +msgid "Group to override" +msgstr "Groupes à surcharger" msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." msgstr "" -"Établir une relation d'approbation bidirectionnelle. Par défaut, la relation " -"est unilatérale entrante uniquement." +"Saisir le nom du groupe approuvé ou du groupe IPA. N.B. : la recherche " +"n'indique pas les groupes des domaines approuvés." + +msgid "Enter trusted group name." +msgstr "Saisir le nom du groupe approuvé." + +#, fuzzy +#| msgid "Add a new ID View." +msgid "Add ID view" +msgstr "Ajouter une nouvelle vue d'identifiants" + +#, fuzzy +#| msgid "Group ID override" +msgid "Add group ID override" +msgstr "Surcharge d'identifiant de groupe" + +#, fuzzy +#| msgid "User ID override" +msgid "Add user ID override" +msgstr "Surcharge d'identifiant utilisateur" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key} s'applique à :" + +msgid "Applied to hosts" +msgstr "Appliquée aux hôtes" + +msgid "Apply to host groups" +msgstr "Appliquée aux groupes d'hôtes" + +#, fuzzy, python-brace-format +#| msgid "Un-apply ID Views from hosts of hostgroups" +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" +"Retire l'application de la vue d'identifiants des hôtes de groupes d'hôtes" + +msgid "Apply to hosts" +msgstr "Appliquer aux hôtes" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "Surcharges de ${primary_key} :" + +#, fuzzy +#| msgid "system ID View" +msgid "Remove ID views" +msgstr "Vue d'identifiants du système" + +#, fuzzy +#| msgid "User ID overrides" +msgid "Remove user ID overrides" +msgstr "Surcharges d'identifiants utilisateurs" + +#, fuzzy +#| msgid "Group ID overrides" +msgid "Remove group ID overrides" +msgstr "Surcharges d'identifiants de groupes" + +msgid "Un-apply from host groups" +msgstr "Ne plus appliquer aux groupes d'hôtes" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" +"Retire l'application de la vue d'identifiants des hôtes de groupes d'hôtes" + +msgid "Un-apply" +msgstr "Ne plus appliquer" + +msgid "Un-apply from hosts" +msgstr "Ne plus appliquer aux hôtes " + +msgid "Un-apply ID Views from hosts" +msgstr "Retirer l'application de la vue d'identifiants d'hôtes" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" +"Êtes-vous sûr(e) de retirer l'application de la vue d'identifiants des " +"entrées sélectionnées ?" + +#, fuzzy, python-brace-format +#| msgid "Un-apply ID Views from hosts" +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "Retirer l'application de la vue d'identifiants d'hôtes" + +#, fuzzy +#| msgid "netgroup" +msgid "Add netgroup" +msgstr "groupe réseau" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "Hôte" + +msgid "Netgroup Settings" +msgstr "Paramètres du groupe réseau" + +#, fuzzy +#| msgid "Member netgroups" +msgid "Remove netgroups" +msgstr "Groupes réseau membre" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "Supprimer des membres d'un groupe réseau." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "Supprimer des membres d'un groupe réseau." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove users from netgroup '${primary_key}'" +msgstr "Supprimer des membres d'un groupe réseau." + +#, fuzzy +#| msgid "OTP token" +msgid "Add OTP token" +msgstr "jeton OTP" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"Vous pouvez utiliser FreeOTP comme " +"application de jeton logiciel OTP." + +msgid "Configure your token" +msgstr "Configurer votre jeton" msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." msgstr "" -"Établit une relation d'approbation externe vers un domaine dans une autre " -"forêt. La relation n'est pas transitive au delà du domaine." +"Configurez le code QR en reconnaissant le code QR ci-dessous. Cliquez sur le " +"code QR si vous voyez ceci sur le périphérique que vous souhaitez configurer." + +msgid "OTP Token Settings" +msgstr "Paramètres de jetons OTP" + +msgid "Disable token" +msgstr "Désactiver un jeton" + +msgid "Enable token" +msgstr "Activer un jeton" + +#, fuzzy +#| msgid "OTP tokens" +msgid "Remove OTP tokens" +msgstr "jetons OTP" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "Montrer le code QR" + +msgid "Show configuration uri" +msgstr "Afficher l'uri de configuration" + +msgid "Counter-based (HOTP)" +msgstr "Basé sur un compteur (HOTP)" + +msgid "Time-based (TOTP)" +msgstr "Jetons temporels (TOTP)" + +msgid "Add Custom Attribute" +msgstr "Ajouter un attribut personnalisé" + +msgid "Permission settings" +msgstr "Réglages des permissions" + +msgid "Attribute breakdown" +msgstr "Répartition des attributs" + +msgid "Privilege Settings" +msgstr "Paramètres du privilège" + +#, fuzzy +#| msgid "Public key" +msgid "Public key:" +msgstr "Clé publique" + +#, fuzzy +#| msgid "SSH public key" +msgid "Set public key" +msgstr "Clé publique SSH" + +msgid "Show/Set key" +msgstr "Afficher/définir la clé" + +msgid "Modified: key not set" +msgstr "Modifié : clé non définie" + +msgid "Modified" +msgstr "Modifié" + +msgid "New: key not set" +msgstr "Ajout : clé non définie" + +msgid "New: key set" +msgstr "Ajout : clé définie" + +#, fuzzy +#| msgid "password policy" +msgid "Add password policy" +msgstr "politique de mots de passe" + +msgid "Password Policy" +msgstr "Politique de gestion des mots de passe" + +#, fuzzy +#| msgid "password policies" +msgid "Remove password policies" +msgstr "politiques de mot de passe" + +#, fuzzy +#| msgid "Modify ID range." +msgid "Add ID range" +msgstr "Modifier une plage." + +msgid "Range Settings" +msgstr "Configuration des plages" + +msgid "Base ID" +msgstr "ID de base" + +msgid "Primary RID base" +msgstr "Base de RID principale" + +msgid "Range size" +msgstr "Taille de la plage" + +msgid "Domain SID" +msgstr "SID du domaine" + +msgid "Secondary RID base" +msgstr "Base de RID secondaire" + +#, fuzzy +#| msgid "ID Ranges" +msgid "Remove ID ranges" +msgstr "Plages d'ID" + +msgid "Active Directory domain" +msgstr "Domaine Active Directory" + +msgid "Active Directory domain with POSIX attributes" +msgstr "Domaine Active Directory avec attributs POSIX" + +msgid "Detect" +msgstr "Détection" + +msgid "Local domain" +msgstr "Domaine local :" + +msgid "IPA trust" +msgstr "Relation d'approbation IPA" + +msgid "Active Directory winsync" +msgstr "Active Directory winsync" + +#, fuzzy +#| msgid "RADIUS Server" +msgid "Add RADIUS server" +msgstr "Serveur RADIUS" + +msgid "RADIUS Proxy Server Settings" +msgstr "Réglages du serveur mandataire RADIUS" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "Remove RADIUS servers" +msgstr "Serveurs RADIUS" + +msgid "Check DNS" +msgstr "Vérification DNS" + +msgid "Do you also want to perform DNS check?" +msgstr "Voulez-vous aussi faire une vérification DNS ?" + +msgid "Force Update" +msgstr "Forcer la mise à jour" + +#, fuzzy +#| msgid "SELinux User Map" +msgid "Add SELinux user map" +msgstr "Mappe d'utilisateurs SELinux" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an SELinux User Map rule." +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an SELinux User Map rule." +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an SELinux User Map rule." +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" + +msgid "Remove selinux user maps" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" +"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" +"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" +"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" +"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" + +msgid "Server Roles" +msgstr "Rôles serveur" + +msgid "Server Role" +msgstr "Rôle serveur" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "Supprimer le serveur" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add service" +msgstr "Service HBAC" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "Certificat de service" + +msgid "Service Settings" +msgstr "Paramètres de service" + +msgid "Provisioning" +msgstr "Mise en place des permissions" + +#, fuzzy +#| msgid "Member services" +msgid "Remove services" +msgstr "Services membres" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove service '${primary_key}' from roles" +msgstr "Supprimer des privilèges d'un rôle." + +#, fuzzy, python-brace-format +#| msgid "Remove hosts that can manage this service." +msgid "Remove hosts managing service '${primary_key}'" +msgstr "Supprimer des hôtes pouvant administrer ce service." + +msgid "Are you sure you want to unprovision this service?" +msgstr "Êtes-vous sûr de vouloir supprimer les permissions ce service ?" + +#, fuzzy +#| msgid "Unprovision" +msgid "Unprovisioning service" +msgstr "Suppression des permissions" + +msgid "Service unprovisioned" +msgstr "Permissions du service supprimées" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Clé Kerberos présente, permissions du service activées" + +msgid "SSH public keys" +msgstr "Clés publiques SSH" + +msgid "SSH public key:" +msgstr "Clé publique SSH :" + +msgid "Set SSH key" +msgstr "Définir la clé SSH" + +msgid "Are you sure you want to activate selected users?" +msgstr "Êtes-vous sûr de vouloir désactiver l'utilisateur sélectionné ?" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "Êtes-vous sûr(e) de vouloir activer ${object} ?" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "${count} utilisateur(s) activé(s)" + +#, fuzzy +#| msgid "stage user" +msgid "Add stage user" +msgstr "utilis" + +msgid "Stage users" +msgstr "Utilisateurs en attente" + +msgid "Preserved users" +msgstr "Utilisateurs préservés" + +#, fuzzy +#| msgid "Preserved users" +msgid "Remove preserved users" +msgstr "Utilisateurs préservés" + +#, fuzzy +#| msgid "stage users" +msgid "Remove stage users" +msgstr "utilisateurs en attente" + +msgid "Are you sure you want to stage selected users?" +msgstr "" +"Êtes-vous sûrs de vouloir mettre en attente les utilisateurs sélectionnés ?" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "${count} utilisateur(s) mis en attente" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "Êtes-vous sûr de vouloir mettre en attente l'objet ${object} ?" + +msgid "Are you sure you want to restore selected users?" +msgstr "Êtes-vous sûr de vouloir restaurer les utilisateurs sélectionnés ?" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "Êtes-vous sûr de vouloir supprimer l'objet ${object} ?" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "${count} utilisateur(s) restauré(s)" + +msgid "User categories" +msgstr "Catégories d'utilisateurs" + +#, fuzzy +#| msgid "sudo command" +msgid "Add sudo command" +msgstr "commande sudo" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "member sudo command" +msgid "Remove sudo commands" +msgstr "commande membre de règle sudo" + +#, fuzzy, python-brace-format +#| msgid "Remove members from Sudo Command Group." +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "Supprimer des membres d'un groupe de commandes sudo." + +#, fuzzy +#| msgid "sudo command group" +msgid "Add sudo command group" +msgstr "groupe de commandes sudo" + +#, fuzzy, python-brace-format +#| msgid "Add commands and sudo command groups affected by Sudo Rule." +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" +"Ajouter des commandes et groupes de commandes sudo affectés par la règle " +"sudo." + +#, fuzzy +#| msgid "sudo command groups" +msgid "Remove sudo command groups" +msgstr "groupes de commandes sudo" + +#, fuzzy, python-brace-format +#| msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" +"Retirer des commandes et groupes de commandes sudo affectés par la règle " +"sudo." + +#, fuzzy +#| msgid "sudo rule" +msgid "Add sudo rule" +msgstr "règle sudo" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Add sudo option" +msgstr "Option sudo" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add commands and sudo command groups affected by Sudo Rule." +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" +"Ajouter des commandes et groupes de commandes sudo affectés par la règle " +"sudo." + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Autoriser" + +msgid "Any Command" +msgstr "Toute commande" + +msgid "Any Group" +msgstr "Tout groupe" + +msgid "Run Commands" +msgstr "Exécute les commandes" + +msgid "Deny" +msgstr "Interdire" + +msgid "Access this host" +msgstr "A accès à cet hôte" + +msgid "Option added" +msgstr "Option ajoutée" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "${count} option(s) supprimée(s)" + +#, fuzzy +#| msgid "sudo rules" +msgid "Remove sudo rules" +msgstr "règles sudo" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" +"Retirer des commandes et groupes de commandes sudo affectés par la règle " +"sudo." + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" +"Retirer des commandes et groupes de commandes sudo affectés par la règle " +"sudo." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "Comme qui" + +msgid "Specified Commands and Groups" +msgstr "Commandes et groupes définis" + +msgid "Specified Groups" +msgstr "Groupes définis" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove sudo options" +msgstr "Supprimer une permission" + +msgid "Autogenerated" +msgstr "Autogénéré" + +msgid "Segment details" +msgstr "Information sur le segment" + +msgid "Replication configuration" +msgstr "Configuration de la réplication" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" +"La gestion de la topologie nécessite le niveau de domaine minimal " +"${domainlevel}" + +#, fuzzy +#| msgid "Add a new IPA location." +msgid "Add IPA location" +msgstr "Ajouter un nouvel emplacement IPA." + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA locations\n" +msgid "Remove IPA locations" +msgstr "" +"\n" +"Emplacements IPA\n" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Topology Segment" +msgid "Add topology segment" +msgstr "Segment de topologie" + +#, fuzzy +#| msgid "Search for topology segments." +msgid "Remove topology segments" +msgstr "Rechercher des segments de topologie." + +msgid "Account" +msgstr "Compte" + +#, fuzzy +#| msgid "IPA trust" +msgid "Add trust" +msgstr "Relation d'approbation IPA" + +msgid "Administrative account" +msgstr "Compte administrateur" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklists" +msgstr "Entrant dans liste noire de SID" + +msgid "Trust Settings" +msgstr "Configuration de la confiance" msgid "Establish using" msgstr "Établir en utilisant" -msgid "Established and verified" -msgstr "Établie et vérifiée" +msgid "Fetch domains" +msgstr "Récupérer les domaines" -msgid "Exchanger" -msgstr "Changeur" +msgid "Pre-shared password" +msgstr "Mot de passe pré-partagé" -msgid "Exclude from" -msgstr "Exclure de" +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove trusts" +msgstr "Supprimer une permission" -msgid "Excluded attributes" -msgstr "Attributs exclus" +#, fuzzy +#| msgid "Realm domains" +msgid "Remove domains" +msgstr "Domaines du royaume" -msgid "Exclusive" -msgstr "Exclusion" +msgid "Trust direction" +msgstr "Sens de la confiance" -msgid "Exclusive Regex" -msgstr "« Regex » d'exclusion" +msgid "Trust status" +msgstr "État de la confiance" -msgid "Expand All" -msgstr "Tout déplier" +msgid "Trust type" +msgstr "Type de confiance" -msgid "Expires On" -msgstr "Expire le" +msgid "Alternative UPN suffixes" +msgstr "Suffixes UPN alternatifs" -msgid "Export plugin meta-data for the webUI." -msgstr "Exporter les meta-données du greffons pour l'interface Web" +#, fuzzy +#| msgid "Search for HBAC services." +msgid "User attributes for SMB services" +msgstr "Rechercher des services HBAC." -msgid "Expression" -msgstr "Expression" - -msgid "External" -msgstr "Externe" - -msgid "External Group the commands can run as (sudorule-find only)" +msgid "Path to a script executed on a Windows system at logon" msgstr "" -"Groupe externe en tant que tel les commandes sont lancées (« sudorule-find » " -"uniquement)" -msgid "External Groups of RunAs Users" -msgstr "Groupes externes de « RunAs Users »" - -msgid "External Groups of users that the command can run as" +msgid "Path to a user profile, in UNC format \\\\server\\share\\" msgstr "" -"Groupes externes d'utilisateurs comme tel la commande peut être exécutée" -msgid "External User" -msgstr "Utilisateur externe" - -msgid "External User the commands can run as (sudorule-find only)" +msgid "Path to a user home directory, in UNC format" msgstr "" -"Utilisateur externe comme tel les commandes peuvent être lancées (« sudorule-" -"find » uniquement)" -msgid "External User the rule applies to (sudorule-find only)" +#, fuzzy +#| msgid "Default location of home directories" +msgid "Drive to mount a home directory" +msgstr "Emplacement par défaut des répertoires utilisateur" + +msgid "Account Settings" +msgstr "Paramètres de compte" + +msgid "Account Status" +msgstr "État du compte" + +msgid "Active users" +msgstr "Utilisateurs actifs" + +#, fuzzy +#| msgid "Add a new user." +msgid "Add user" +msgstr "Ajouter un nouvel utilisateur." + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" msgstr "" -"Utilisateur externe auquel la règle s'applique (« sudorule-find » uniquement)" -msgid "External host" -msgstr "Système externe" +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Ajouter des services à une règle HBAC." -msgid "External member" -msgstr "Membre externe" +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" -msgid "External trust" -msgstr "Relation d'approbation externe" +#, fuzzy, python-brace-format +#| msgid "${primary_key} overrides:" +msgid "Add user '${primary_key}' into roles" +msgstr "Surcharges de ${primary_key} :" -msgid "Extra hashes to generate in password plug-in" -msgstr "Hachages additionnels à générer dans le greffon mots de passe" +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" -msgid "Extra target filter" -msgstr "Filtre cible supplémentaire" +msgid "Contact Settings" +msgstr "Paramètres de contact" -msgid "Failed CAs" -msgstr "AC en échec" +msgid "Delete mode" +msgstr "Mode suppression" -msgid "Failed RunAs" -msgstr "Échec de « RunAs »" +msgid "Employee Information" +msgstr "Informations employé" -msgid "Failed RunAsGroup" -msgstr "Échec de « RunAsGroup »" +msgid "Error changing account status" +msgstr "Erreur lors du changement d'état du compte" -msgid "Failed allowed to create keytab" -msgstr "Échec de l'autorisation de création de tableaux de clés" +msgid "Password expiration" +msgstr "Expiration de mot de passe" -msgid "Failed allowed to retrieve keytab" -msgstr "Échec de l'autorisation de récupération des tableaux de clés" +msgid "Mailing Address" +msgstr "Adresse postale" -msgid "Failed hosts/hostgroups" -msgstr "Hôtes/groupes d'hôtes en échec" +msgid "Misc. Information" +msgstr "Informations diverses" -msgid "Failed logins" -msgstr "Connexions ayant échoué" +msgid "delete" +msgstr "supprimer" -msgid "Failed managedby" -msgstr "Échec de « managedby »" +msgid "preserve" +msgstr "préserver" -msgid "Failed members" -msgstr "Membres en échec" +msgid "No private group" +msgstr "Pas de groupe privé" -msgid "Failed owners" -msgstr "Propriétaires en échec" +#, fuzzy +#| msgid "Member users" +msgid "Remove users" +msgstr "Utilisateurs membres" -msgid "Failed profiles" -msgstr "Profils en échec" +#, fuzzy, python-brace-format +#| msgid "Remove members from a group." +msgid "Remove user '${primary_key}' from user groups" +msgstr "Supprimer des membres d'un groupe." -msgid "Failed service/service groups" -msgstr "Services/groupes de service en échec" +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove user '${primary_key}' from netgroups" +msgstr "Supprimer des membres d'un groupe réseau." -msgid "Failed source hosts/hostgroups" -msgstr "Hôtes/groupes d'hôtes source en échec" +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove user '${primary_key}' from roles" +msgstr "Supprimer des privilèges d'un rôle." -msgid "Failed targets" -msgstr "Échec de la cible" +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." -msgid "Failed to add" -msgstr "Échec lors de l'ajout" +#, fuzzy, python-brace-format +#| msgid "Remove an option from Sudo Rule." +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "Retirer une option d'une règle sudo." -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Échec lors de l'ajout de la clé au tableau\n" +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"Êtes-vous sûr de vouloir ${action} l'utilisateur ?
Le changement prendra " +"effet immédiatement." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Cliquer pour ${action}." + +msgid "Unlock" +msgstr "Déverrouiller" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Êtes-sous sûr de vouloir déverrouiller l'utilisateur ${object} ?" + +#, fuzzy +#| msgid "vault" +msgid "Add vault" +msgstr "coffre-fort" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." msgstr "" -"Échec à l'ajout de l'utilisateur dans le groupe par défaut. Utiliser la " -"commande « ipa group-add-member » pour l'ajouter manuellement." -msgid "Failed to authenticate to CA REST API" -msgstr "Échec de l'authentification auprès de l'API REST de l'AC" +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" -#, c-format -msgid "Failed to bind to server!\n" -msgstr "La liaison au serveur a échoué !\n" +msgid "Asymmetric" +msgstr "" + +#, fuzzy +#| msgid "Vault Container" +msgid "Vaults Config" +msgstr "Conteneur de coffres-forts" + +#, fuzzy +#| msgid "Member Host" +msgid "Members" +msgstr "Hôte membre" + +#, fuzzy +#| msgid "Vaults" +msgid "My User Vaults" +msgstr "Coffres-forts" + +#, fuzzy +#| msgid "Owner" +msgid "Owners" +msgstr "Propriétaire" + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove vaults" +msgstr "Supprimer le blocage" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "Services" + +#, fuzzy +#| msgid "Shared vault" +msgid "Shared" +msgstr "Coffre-fort partagé" + +#, fuzzy +#| msgid "Shared vault" +msgid "Shared Vaults" +msgstr "Coffre-fort partagé" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +#, fuzzy +#| msgid "Vault type" +msgid "Vault Type" +msgstr "Type de coffre-fort" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "Vaults" +msgid "User Vaults" +msgstr "Coffres-forts" + +msgid "Current password is required" +msgstr "Le mot de passe actuel est requis" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Votre mot de passe expire dans ${days} jours." + +msgid "First OTP" +msgstr "Premier OTP" + +msgid "New password is required" +msgstr "Un nouveau mot de passe est requis" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "Échec de synchronisation du jeton" + +msgid "The username, password or token codes are not correct" +msgstr "" +"Le nom d'utilisateur, mot de passe ou code du jeton ne sont pas corrects" + +msgid "Token was synchronized" +msgstr "Jeton synchronisé" + +msgid "Password change complete" +msgstr "Modification du mot de passe terminée" + +#, fuzzy +#| msgid "Your password expires in ${days} days." +msgid "Your password has expired. Please enter a new password." +msgstr "Votre mot de passe expire dans ${days} jours." + +msgid "Passwords must match" +msgstr "Les mots de passe doivent correspondre" + +msgid "Password reset was not successful." +msgstr "La réinitialisation du mot de passe a échoué." + +msgid "Reset your password." +msgstr "Réinitialiser votre mot de passe." + +msgid "Second OTP" +msgstr "Deuxième OTP" + +msgid "Verify Password" +msgstr "Vérifier le mot de passe" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Êtes-vous sûr de vouloir supprimer les entrées sélectionnées ?" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "${count} élément(s) supprimé(s)" + +msgid "Are you sure you want to disable selected entries?" +msgstr "Êtes-vous sûr de vouloir désactiver les entrées sélectionnées ?" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "${count} élément(s) désactivé(s)" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Êtes-vous sûr de vouloir activer les entrées sélectionnées ?" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "${count} élément(s) activé(s)" + +msgid "Some entries were not deleted" +msgstr "Certaines entrées n'ont pas été supprimées" + +msgid "Quick Links" +msgstr "Liens rapides" + +msgid "Select All" +msgstr "Tout sélectionner" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"La recherche a renvoyé plus de résultats que le nombre limite configuré. " +"Affichage des ${counter} premiers résultats." + +msgid "Unselect All" +msgstr "Tout désélectionner" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "Travail en cours" + +msgid "Audit" +msgstr "Audit" + +msgid "Authentication" +msgstr "Authentification" + +msgid "Automount" +msgstr "Montage automatique" + +msgid "DNS" +msgstr "DNS" + +#, fuzzy +#| msgid "Host-based access control commands" +msgid "Host-Based Access Control" +msgstr "Commandes de contrôle d'accès basé sur l'hôte" + +msgid "Identity" +msgstr "Identité" + +msgid "Network Services" +msgstr "Services réseau" + +msgid "Policy" +msgstr "Politique" + +#, fuzzy +#| msgid "Host-based access control commands" +msgid "Role-Based Access Control" +msgstr "Commandes de contrôle d'accès basé sur l'hôte" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "Topologie" + +msgid "Trusts" +msgstr "Confiances" + +msgid "True" +msgstr "Vrai" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "Navigateur de l'API" + +msgid "First" +msgstr "Premier" + +msgid "Last" +msgstr "Dernier" + +msgid "Next" +msgstr "Suivant(e)" + +msgid "Page" +msgstr "Page" + +msgid "Prev" +msgstr "Précédent(e)" + +msgid "Undo" +msgstr "Annuler" + +msgid "Undo this change." +msgstr "Annuler cette modification." + +msgid "Undo All" +msgstr "Tout annuler" + +msgid "Undo all changes in this field." +msgstr "Annuler toutes les modifications dans ce champ." + +msgid "Text does not match field pattern" +msgstr "Le texte ne correspond pas au motif du champ" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "Doit être une valeur d'horodatage UTC (ex. : « 2014-01-20 17:58:01Z »)" + +msgid "Must be a decimal number" +msgstr "Doit être un nombre décimal" + +msgid "Format error" +msgstr "Erreur de format" + +msgid "Must be an integer" +msgstr "Doit être un entier" + +msgid "Not a valid IP address" +msgstr "Adresse IP invalide" + +msgid "Not a valid IPv4 address" +msgstr "Adresse IPv4 invalide" + +msgid "Not a valid IPv6 address" +msgstr "Adresse IPv6 invalide" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "La valeur maximale est ${value}" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "La valeur minimale est ${value}" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "Adresse réseau invalide (exemples : 2001:db8::/64, 192.0.2.0/24)" + +msgid "Parse error" +msgstr "Erreur d'analyse" + +#, fuzzy +#| msgid "Must be a decimal number" +msgid "Must be a positive number" +msgstr "Doit être un nombre décimal" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "« ${port} » n'est pas un port valide" + +msgid "Required field" +msgstr "Champ requis" + +msgid "Unsupported value" +msgstr "Valeur non prise en charge" + +msgid "Role" +msgstr "Rôle" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rôle « %(value)s » ajouté" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Rôle « %(value)s » supprimé" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rôle « %(value)s » modifié" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d rôle correspondant" +msgstr[1] "%(count)d rôles correspondant" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"Serveurs IPA\n" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"Afficher les informations au sujet des serveurs IPA installés.\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Trouver tous les serveurs :\n" +" ipa server-find\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Afficher les informations d'un serveur en particulier :\n" +" ipa server-show ipa.example.com\n" + +msgid "server" +msgstr "serveur" + +msgid "servers" +msgstr "serveurs" + +msgid "IPA Servers" +msgstr "Serveurs IPA" + +msgid "Server location" +msgstr "Emplacement de serveur" + +msgid "Service weight" +msgstr "Poids du service" + +msgid "Weight for server services" +msgstr "Poids des services des serveurs" + +msgid "Service relative weight" +msgstr "Poids relatif du service" + +msgid "Relative weight for server services (counts per location)" +msgstr "Poids relatifs des services des serveurs (compte par emplacement)" + +msgid "Enabled server roles" +msgstr "Rôles serveur activés" + +msgid "List of enabled roles" +msgstr "Liste des rôles activés" + +msgid "Modify information about an IPA server." +msgstr "Modifier les informations d'un serveur IPA." + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Serveur IPA \"%(value)s\" modifié" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d serveur IPA correspondant" +msgstr[1] "%(count)d serveurs IPA correspondants" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Serveur IPA « %(value)s » supprimé" + +msgid "Ignore topology errors" +msgstr "Ignorer les erreurs de topologie" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" +"Ignorer les problèmes de connectivité dans la topologie après suppression" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "Ignorer la vérification de dernier serveur d'AC ou DNS" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Passer la vérification lorsque le dernier serveur DNS ou AC maître est " +"supprimé" + +msgid "Force server removal" +msgstr "Forcer la suppression du serveur" + +msgid "Force server removal even if it does not exist" +msgstr "Forcer la suppression du serveur même s'il n'existe pas" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"La réplique est un serveur de clés DNSSEC actif. Le désinstaller pourrait " +"casser votre système DNS. Merci de d'abord désactiver ou de remplacer votre " +"serveur de clés DNSSEC." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "La suppression de ce serveur laissera votre installation sans DNS." + +#, fuzzy +#| msgid "" +#| "Deleting this server is not allowed as it would leave your installation " +#| "without a CA." +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " +"installation sans AC." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " +"installation sans AC." + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "On ignore ces avertissements et lancement de la suppression" #, python-format msgid "" @@ -10478,1290 +28486,557 @@ msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" msgstr "" "Échec du nettoyage des entrées du nom d'hôte DNA pour %(master)s : %(err)s" -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Échec du nettoyage des entrées DNS de %(hostname)s : %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Échec du nettoyage du principal ou des clés du serveur : %(err)s" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Échec à la fermeture du tableau de clés\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Échec à la création du contrôle !\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Échec de création du contenu de la clé\n" - -msgid "Failed to create key!\n" -msgstr "Échec de création de la clé !\n" - -msgid "Failed to create random key!\n" -msgstr "Échec de création d'une clé aléatoire !\n" - -msgid "Failed to decode control reply!\n" -msgstr "Impossible de décoder la réponse de contrôle !\n" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "Échec à l'obtention du tableau de clés\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Échec d'obtention du tableau de clés !\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "Impossible d'obtenir le résultat : %s\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Échec à l'ouverture du tableau de clés\n" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "impossible d'ouvrir le fichier de configuration %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Impossible d'ouvrir le tableau de clés\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Échec de l'ouverture du tableau de clés « %1$s » : %2$s\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Impossible d'analyser le fichier de configuration %s\n" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Impossible d'analyser le résultat étendu : %s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "Impossible d'analyser le résultat : %s\n" - -msgid "Failed to remove" -msgstr "Échec à la suppression" - #, python-format msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "" "Échec de la suppression du serveur %(master)s de la liste de serveurs : " "%(err)s" -#, c-format -msgid "Failed to retrieve any keys" -msgstr "Échec lors de la récupération de toute clé" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "Échec lors de la récupération du type de chiffrement %1$s (#%2$d)\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Échec lors de la récupération du type de chiffrement #%d\n" - -msgid "Failed users/groups" -msgstr "Utilisateurs/groupes en échec" +#, fuzzy, python-format +#| msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" +"Échec du nettoyage des entrées du nom d'hôte DNA pour %(master)s : %(err)s" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Échec dans le décodage du « Certificate Signing Request » : %s" - -msgid "Failure reset interval" -msgstr "Délai de réinitialisation après échec" - -msgid "Fallback primary group" -msgstr "Groupe principal de repli" - -msgid "Fallback to AD DC LDAP" -msgstr "Repli sur l'annuaire LDAP du contrôleur de domaine AD" - -msgid "False" -msgstr "Faux" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" -"False si la migration échoue parce que le greffon « compat » est activé." - -msgid "False if migration mode was disabled." -msgstr "Faux si le mode de migration a été désactivé." - -msgid "Fax Number" -msgstr "Numéro de fax" - -msgid "Fetch domains" -msgstr "Récupérer les domaines" - -msgid "Fetching DNS zones." -msgstr "Récupération des zones DNS." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " -"informations détaillées dans le journal d'erreur." +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Échec du nettoyage du principal ou des clés du serveur : %(err)s" #, python-format -msgid "File %(file)s not found" -msgstr "Fichier %(file)s introuvable" +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Échec du nettoyage des entrées DNS de %(hostname)s : %(err)s" -msgid "File containing data to archive" -msgstr "Fichier contenant les données à archiver" - -msgid "File containing profile configuration" -msgstr "Fichier contenant la configuration du profil" - -msgid "File containing the new vault password" -msgstr "Fichier contenant le nouveau mot de passe du coffre-fort" - -msgid "File containing the new vault public key" -msgstr "Fichier contenant la nouvelle clé publique du coffre-fort" - -msgid "File containing the old vault password" -msgstr "Fichier contenant l'ancien mot de passe du coffre-fort" - -msgid "File containing the old vault private key" -msgstr "Fichier contenant l'ancienne clé privée du coffre-fort" - -msgid "File containing the vault password" -msgstr "Fichier contenant le mot de passe du coffre-fort" - -msgid "File containing the vault private key" -msgstr "Fichier contenant la clé privée du coffre-fort" - -msgid "File containing the vault public key" -msgstr "Fichier contenant la clé publique du coffre-fort" - -msgid "File to load the certificate from." -msgstr "Fichier depuis lequel charger le certificat." - -msgid "File to store retrieved data" -msgstr "Fichier duquel récupérer les données" - -msgid "File to store the certificate in." -msgstr "Fichier dans lequel stocker le certificat." - -msgid "Filename is empty" -msgstr "Le nom de fichier est vide" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "Nom de fichier du profil brut. Le format XML n'est pas pris en charge." - -msgid "Filter" -msgstr "Filtre" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "Filtre disponible ${other_entity}" - -msgid "Find" -msgstr "Rechercher" - -msgid "Find a server role on a server(s)" -msgstr "Trouver les rôles serveur de serveurs" - -msgid "Fingerprint" -msgstr "Empreinte" - -msgid "Fingerprint (SHA1)" -msgstr "Empreinte (SHA1)" - -msgid "Fingerprint Type" -msgstr "Type d'empreinte" - -msgid "Fingerprints" -msgstr "Empreintes" - -msgid "First" -msgstr "Premier" - -msgid "First Code" -msgstr "Premier code" - -msgid "First OTP" -msgstr "Premier OTP" - -msgid "First Posix ID of the range" -msgstr "Premier ID POSIX de la plage" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "Premier ID POSIX de la plage réservée au domaine approuvé" - -msgid "First RID of the corresponding RID range" -msgstr "Premier RID dans la plage de RID correspondante" - -msgid "First RID of the secondary RID range" -msgstr "Premier RID dans la plage de RID secondaire" - -msgid "First date/time the token can be used" -msgstr "Date et heure à partir desquels le jeton peut être utilisé" - -msgid "First name" -msgstr "Prénom" - -msgid "Flags" -msgstr "Marqueurs" - -msgid "Following segments were not deleted:" -msgstr "Les segments suivants n'ont pas été supprimés :" - -msgid "Force" -msgstr "Forcer" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" -"Forcer la création de la zone DNS même si elle recouvre une zone existante." - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" -"Forcer la création de la zone DNS même si le serveur de nom n'est pas " -"résoluble." - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" -"Forcer la création de la zone DNS même si le serveur de nom n'est pas " -"résoluble. (Obsolète)" - -msgid "Force Update" -msgstr "Forcer la mise à jour" - -msgid "Force adding domain even if not in DNS" -msgstr "Forcer l'ajout d'un domaine même si absent des DNS" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" -"Forcer un changement de serveur de nom même si le serveur de nom n'est pas " -"dans le DNS" - -msgid "Force server removal" -msgstr "Forcer la suppression du serveur" - -msgid "Force server removal even if it does not exist" -msgstr "Forcer la suppression du serveur même s'il n'existe pas" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" -"Forcer l'hôte à rejoindre le domaine. Rejoindre à nouveau même s'il a déjà " -"rejoint le domaine." +msgid "You may need to manually remove them from the tree" +msgstr "Vous pouvez avoir besoin de les supprimer manuellement de l'arbre" #, python-format msgid "Forcing removal of %(hostname)s" msgstr "On force la suppression de %(hostname)s" -msgid "Format error" -msgstr "Erreur de format" - -msgid "Forward first" -msgstr "Redirection prioritaire" - -msgid "Forward only" -msgstr "Redirection uniquement" - -msgid "Forward policy" -msgstr "Politique de redirection" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"La politique de redirection est définie pour lui dans le DNS d'IPA, peut-" -"être le redirecteur pointe-t'il vers un hôte incorrect ?" - -msgid "Forward to server instead of running locally" -msgstr "Rediriger vers le serveur au lieu d'exécuter localement" - -msgid "Forward zones only" -msgstr "Zones redirigées uniquement" - -msgid "Forwarders" -msgstr "Redirecteurs de zone" - -msgid "Forwarding disabled" -msgstr "Redirection désactivée" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"La politique de transfert entre en conflit avec certaines zones automatiques " -"vides. Les requêtes pour les zones spécifiées dans la RFC 6303 ignoreront le " -"transfert et la récursion et résulteront toujours en des réponses NXDOMAIN. " -"Pour surcharger ce comportement, utiliser la politique de transfert « only »." - -#, python-format -msgid "Found '%(value)s'" -msgstr "'%(value)s' trouvé." - -msgid "Full name" -msgstr "Nom complet" - -msgid "Fully Qualified Host Name" -msgstr "Nom d'hôte pleinement qualifié" - -msgid "GECOS" -msgstr "GECOS" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (utiliser cette option pour le définir manuellement)" - -msgid "General" -msgstr "Général" - -msgid "Generate OTP" -msgstr "Créer un OTP" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "Créer un mot de passe aléatoire utilisé pour l'inscription en masse" - -msgid "Generate a random user password" -msgstr "Créer un mot de passe aléatoire" - -msgid "Generate automount files for a specific location." -msgstr "Créer les fichiers « automount » pour un emplacement donné." - -msgid "Generated OTP" -msgstr "OTP créé" - -msgid "Get" -msgstr "Obtenir" - -msgid "Get Certificate" -msgstr "Obtenir le certificat" - -msgid "Global DNS configuration is empty" -msgstr "La configuration globale DNS est vide" - -msgid "Global Trust Configuration" -msgstr "Configuration globale des relations d'approbation" - -msgid "Global forwarders" -msgstr "Redirecteurs globaux" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Redirecteurs globaux. Un port personnalisé peut être indiqué pour chaque " -"redirecteur en utilisant le format standard « adresse_IP port PORT »" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" -"Politique globale de redirection. Mettre à « none » pour désactiver tout " -"redirecteur global configuré." - -msgid "Granted rights" -msgstr "Droits accordés" - -msgid "Granting privilege to roles" -msgstr "Privilèges accordés aux rôles" - -msgid "Group" -msgstr "Groupe" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Le groupe « %s » n'existe pas" - -msgid "Group ID Number" -msgstr "Numéro d'identifiant de groupe" - -msgid "Group ID override" -msgstr "Surcharge d'identifiant de groupe" - -msgid "Group ID overrides" -msgstr "Surcharges d'identifiants de groupes" - -msgid "Group Options" -msgstr "Options de groupe" - -msgid "Group Settings" -msgstr "Paramètres de groupe" - -msgid "Group Type" -msgstr "Type de groupe" - -msgid "Group container" -msgstr "Conteneur de groupes" - -msgid "Group description" -msgstr "Description du groupe" - -msgid "Group name" -msgstr "Nom du groupe" - -msgid "Group object class" -msgstr "Classe d'objets groupe" - -msgid "Group object overrides" -msgstr "Surcharges des objets groupes" - -msgid "Group search fields" -msgstr "Champs de recherche de groupe" - -msgid "Group to apply ACI to" -msgstr "Groupe auquel appliquer l'ACI" - -msgid "Group to override" -msgstr "Groupes à surcharger" - -msgid "Grouping Type" -msgstr "Type de groupe" - -msgid "Grouping to which the rule applies" -msgstr "Type de groupe auquel la règle s'applique" - -msgid "Groups" -msgstr "Groupes" - -msgid "Groups allowed to create keytab" -msgstr "Groupes autorisés à créer un tableau de clés" - -msgid "Groups allowed to retrieve keytab" -msgstr "Groupes autorisés à récupérer un tableau de clés" - -msgid "Groups of RunAs Users" -msgstr "Groupe de « RunAs Users »" - -msgid "HBAC Rule" -msgstr "Règle HBAC" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" -"Règle HBAC délimitant les utilisateurs, les groupes et les groupes d'hôtes" - -msgid "HBAC Rules" -msgstr "Règles HBAC" - -msgid "HBAC Service" -msgstr "Service HBAC" - -msgid "HBAC Service Group" -msgstr "Groupe de services HBAC" - -msgid "HBAC Service Groups" -msgstr "Groupes de services HBAC" - -msgid "HBAC Services" -msgstr "Services HBAC" - -msgid "HBAC Test" -msgstr "Test HBAC" - -msgid "HBAC rule" -msgstr "Règle HBAC" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Règle HBAC %(rule)s introuvable" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" -"Des membres locaux et des membres d'une règle HBAC ne peuvent pas être " -"définis simultanément" - -msgid "HBAC rules" -msgstr "Règles HBAC" - -msgid "HBAC service" -msgstr "Service HBAC" - -msgid "HBAC service description" -msgstr "Description de service HBAC" - -msgid "HBAC service group" -msgstr "Groupe de services HBAC" - -msgid "HBAC service group description" -msgstr "Description de groupe de services HBAC" - -msgid "HBAC service groups" -msgstr "Groupes de services HBAC" - -msgid "HBAC service groups to add" -msgstr "Groupes de services HBAC à ajouter" - -msgid "HBAC service groups to remove" -msgstr "Groupes de services HBAC à supprimer" - -msgid "HBAC services" -msgstr "Services HBAC" - -msgid "HBAC services to add" -msgstr "Services HBAC à ajouter" - -msgid "HBAC services to remove" -msgstr "Services HBAC à supprimer" - -msgid "HIP record" -msgstr "Enregistrement HIP" - -msgid "HOTP Authentication Window" -msgstr "Fenêtre d'authentification HOTP" - -msgid "HOTP Synchronization Window" -msgstr "Fenêtre de synchronisation HOTP" - -msgid "HOTP authentication skip-ahead" -msgstr "passage d'occurrence d'authentification HOTP" - -msgid "HOTP synchronization skip-ahead" -msgstr "passage d'occurrence de synchronisation HOTP" - -msgid "HTTP Error" -msgstr "Erreur HTTP" - -msgid "Hardware MAC address(es) on this host" -msgstr "Adresse(s) MAC du matériel sur cet hôte" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Plate-forme matérielle de l'hôte (par ex. Lenovo T61)" - -msgid "Help topic" -msgstr "Sujet de l'aide" - -msgid "Hide" -msgstr "Masquer" - -msgid "Hide details" -msgstr "Cacher les détails" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "Masquer les détails des règles satisfaites ou pas, ou invalides" - -msgid "History size" -msgstr "Taille de l'historique" - -msgid "Home directory" -msgstr "Répertoire personnel" - -msgid "Home directory base" -msgstr "Base du répertoire utilisateur" - -msgid "Horizontal Precision" -msgstr "Précision horizontale" - -msgid "Host" -msgstr "Hôte" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Hôte « %(host)s » introuvable" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" -"L'hôte « %(hostname)s » n'a pas d'enregistrement DNS de type A/" -"AAAA correspondant" - -msgid "Host Certificate" -msgstr "Certificat de l'hôte" - -msgid "Host Group" -msgstr "Groupe d'hôtes" - -msgid "Host Group Settings" -msgstr "Paramètres des groupe d'hôtes" - -msgid "Host Groups" -msgstr "Groupes d'hôtes" - -msgid "Host Groups allowed to create keytab" -msgstr "Groupes d'hôtes autorisés à créer un tableau de clés" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Groupes d'hôtes autorisés à récupérer un tableau de clés" - -msgid "Host Masks" -msgstr "Masques d'hôtes" - -msgid "Host Name" -msgstr "Nom d'hôte" - -msgid "Host Settings" -msgstr "Paramètres d'hôte" - -msgid "Host category" -msgstr "Catégorie de systèmes" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Catégorie d'hôte (les sémantiques associées à cet attribut vous sont propres)" - -msgid "Host category the ACL applies to" -msgstr "Catégorie d'hôte à laquelle la LCA s'applique" - -msgid "Host category the rule applies to" -msgstr "Catégorie d'hôtes à laquelle la règle s'applique" - -msgid "Host group rule" -msgstr "Règle de groupes d'hôtes" - -msgid "Host group rules" -msgstr "Règles de groupes d'hôtes" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Plate-forme matérielle de l'hôte (par ex. « Lenovo T61 »)" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Hôte déjà joint.\n" - -msgid "Host is not supported" -msgstr "L'hôte n'est pas pris en charge" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Localité de l'hôte (par ex. « Paris, IDF »)" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Emplacement de l'hôte (par ex. \"Lab 2\")" - -msgid "Host name" -msgstr "Nom d'hôte" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Système d'exploitation et version (par ex. « Fedora 9 »)" - -msgid "Host unprovisioned" -msgstr "Permissions de l'hôte supprimées" - -msgid "Host-based access control commands" -msgstr "Commandes de contrôle d'accès basé sur l'hôte" - -msgid "Host-group" -msgstr "Groupe d'hôtes" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" -"Groupes d'hôtes auxquels s'applique la vue d'identifiants. Veuillez noter " -"que cette vue ne s'applique pas automatiquement aux hôtes ajoutés au groupe " -"après l'exécution de la commande idview-apply." - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" -"Groupes d'hôtes dont les hôtes doivent se voir la vue d'identifiants " -"retirée. Veuillez noter que la vue n'est pas automatiquement retirée de tout " -"hôte ajouté au groupe d'hôte après l'exécution de la commande idview-unapply." - -msgid "Hostname" -msgstr "Nom d'hôte" - -msgid "Hostname (FQDN)" -msgstr "Nom d'hôte (FQDN)" - -msgid "Hostname of this server" -msgstr "Nom d'hôte de ce serveur" - -msgid "Hosts" -msgstr "Hôtes" - -msgid "Hosts allowed to create keytab" -msgstr "Hôtes autorisés à créer un tableau de clés" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Hôtes autorisés à récupérer un tableau de clés" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" -"Hôtes ou groupes d'hôtes dont la vue d'identifiants n'a pu être retirée." - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" -"Hôtes ou groupes d'hôtes auxquels cette vue d'identifiants ne pourra pas " -"être appliquée." - -msgid "Hosts that ID View was cleared from." -msgstr "Hôtes dont la vue d'identifiants a été retirée." - -msgid "Hosts that this ID View was applied to." -msgstr "Hôtes auxquels s'applique cette vue d'identifiants." - -msgid "Hosts the view applies to" -msgstr "Hôtes auxquels la vue s'applique" - -msgid "Hosts to apply the ID View to" -msgstr "Hôtes auxquels appliquer la vue" - -msgid "Hosts to clear (any) ID View from." -msgstr "Hôtes dont on va retirer toute vue d'identifiants." - -msgid "How long should negative responses be cached" -msgstr "Durée de maintien en cache des réponses négatives" - -msgid "ID Range" -msgstr "Plage d'ID" - -msgid "ID Ranges" -msgstr "Plages d'ID" - -msgid "ID View" -msgstr "Vue d'identifiants" - -msgid "ID View Name" -msgstr "Nom de la vue d'identifiants" - -msgid "ID View already applied" -msgstr "Vue d'identifiants déjà appliquée" - -#, python-format -msgid "ID View applied to %i host." -msgstr "Vue d'identifiants appliquée à %i hôte." - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "Vue d'identifiants appliquée à %i hôtes." - -#, python-format -msgid "ID View cleared from %i host." -msgstr "Vue d'identifiants retirée de %i hôte." - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "Vue d'identifiants retirée de %i hôtes." - -msgid "ID Views" -msgstr "Vues d'identifiants" - -msgid "ID override" -msgstr "Surcharge d'identifiants" - -msgid "ID overrides cannot be renamed" -msgstr "Les surchages d'identifiants ne peuvent être renommées" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"La plage ID existe déjà pour ce domaine approuvé, mais est d'un type " -"différent. Vous devez soit supprimer l'ancienne plage manuellement, soit ne " -"pas forcer le type via l'option « --range-type »." - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" -"Type de plage d'identifiants, doit être ipa-ad-trust-posix, ipa-ad-trust ou " -"ipa-local" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Une plage d'ID avec le même nom, mais pour un SID de domaine différent " -"existe déjà. La plage d'ID pour le nouveau domaine approuvé doit être créée " -"manuellement." - -msgid "IP Address" -msgstr "Adresse IP" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "L'adresse IP %(ip)s est déjà assignée au domaine %(domain)s." - -msgid "IP network to create reverse zone name from" -msgstr "Réseau IP pour lequel créer un nom de zone inverse" - -msgid "IPA AD trust agents" -msgstr "Agents IPA de relation d'approbation AD" - -msgid "IPA AD trust controllers" -msgstr "Contrôleurs IPA de relation d'approbation AD" - -msgid "IPA CA cannot be deleted" -msgstr "L'AC de IPA ne peut être supprimée" - -msgid "IPA CA renewal master" -msgstr "Maître de renouvellement d'AC IPA" - -msgid "IPA CA servers" -msgstr "Serveurs d'AC IPA" - -msgid "IPA DNS records" -msgstr "Enregistrements DNS IPA" - -msgid "IPA DNS servers" -msgstr "Serveurs DNS IPA" - -msgid "IPA DNS version" -msgstr "Version du DNS de IPA." - -msgid "IPA DNSSec key master" -msgstr "Maître des clés DNSSec IPA" - -msgid "IPA Error" -msgstr "Erreur IPA" - -msgid "IPA KRA servers" -msgstr "Serveurs KRA IPA" - -msgid "IPA Location" -msgstr "Emplacement IPA" - -msgid "IPA Location description" -msgstr "Description de l'emplacement IPA" - -msgid "IPA Locations" -msgstr "Emplacements IPA" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"Le type de plage IPA doit être « ipa-ad-trust » ou « ipa-ad-trust-posix » " -"lorsque le SID du domaine approuvé est indiqué." - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"Le type de plage IPA ne doit être ni « ipa-ad-trust », ni « ipa-ad-trust-" -"posix » lorsque le SID du domaine approuvé n'est pas indiqué." - -msgid "IPA Server" -msgstr "Serveur IPA" - -msgid "IPA Server Role" -msgstr "Rôle serveur IPA" - -msgid "IPA Server Roles" -msgstr "Rôles serveur IPA" - -msgid "IPA Server to use" -msgstr "Serveur IPA à utiliser" - -msgid "IPA Servers" -msgstr "Serveurs IPA" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA ne gère pas la zone %(zone)s, merci de modifier vos serveurs " -"DNS manuellement" - -msgid "IPA location name" -msgstr "Nom de l'emplacement IPA" - -msgid "IPA location records" -msgstr "Enregistrements du ou des emplacements IPA" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" -"Le maître IPA a refusé %(count)d fois les demandes de validation de " -"relation d'approbation du contrôleur de domaine AD. Cela est probablement dû " -"au fait que ce dernier a tenté de contacter une réplique où les informations " -"de relations d'approbation n'ont pas encore été répliquées. De plus, " -"vérifiez que le DNS AD est capable de résoudre les enregistrements SRV " -"%(records)s vers le serveur IPA adéquat." - -msgid "IPA masters" -msgstr "Maîtres IPA" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "« namingContext » d'IPA introuvable\n" - -msgid "IPA object" -msgstr "objet IPA" - -msgid "IPA role name" -msgstr "Nom du rôle IPA" - -msgid "IPA server configured as DNSSec key master" -msgstr "Serveur IPA configuré comme maître des clés DNSSec" - -msgid "IPA server domain cannot be deleted" -msgstr "Le domaine du serveur IPA ne peut être supprimé" - -msgid "IPA server domain cannot be omitted" -msgstr "Le domaine du serveur IPA ne peut être omis" - -msgid "IPA server hostname" -msgstr "Nom d'hôte du serveur IPA" - -msgid "IPA server role name" -msgstr "Nom du rôle serveur IPA" - -msgid "IPA servers configured as AD trust agents" -msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" - -msgid "IPA servers configured as AD trust controllers" -msgstr "Serveurs IPA configurés comme contrôleurs de relation d'approbation AD" - -msgid "IPA servers configured as certificate authority" -msgstr "Serveurs IPA configurés comme autorité de certification" - -msgid "IPA servers configured as key recovery agents" -msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" - -msgid "IPA trust" -msgstr "Relation d'approbation IPA" - -msgid "IPA unique ID" -msgstr "ID unique IPA" - -msgid "IPSECKEY record" -msgstr "Enregistrement IPSECKEY" - -msgid "Identity" -msgstr "Identité" - -msgid "Identity Settings" -msgstr "Paramètres d'identité" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" -"Si aucune AC n'est indiquée, les requêtes à l'autorité de certification par " -"défaut sont autorisées." - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"Si le problème persiste, veuillez contacter l'administrateur du système." - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "Ignorer la vérification de dernier serveur d'AC ou DNS" - -msgid "Ignore compat plugin" -msgstr "Ignorer le greffon « compat »" - -msgid "Ignore group attribute" -msgstr "Attribut groupe à ignorer" - -msgid "Ignore group object class" -msgstr "Classe d'objets groupe à ignorer" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" -"Ignorer les problèmes de connectivité dans la topologie après suppression" - -msgid "Ignore topology errors" -msgstr "Ignorer les erreurs de topologie" - -msgid "Ignore user attribute" -msgstr "Attribut utilisateur à ignorer" - -msgid "Ignore user object class" -msgstr "Classe d'objets utilisateur à ignorer" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "%(src)s ignoré pour %(dst)s" - -msgid "Ignored keys:" -msgstr "Clés ignorées :" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "On ignore ces avertissements et lancement de la suppression" - msgid "Ignoring topology connectivity errors." msgstr "On ignore les erreurs de connectivité de la topologie." -msgid "Import a Certificate Profile." -msgstr "Importer un profil de certificat." +msgid "Server has already been deleted" +msgstr "Le serveur a déjà été supprimé" -msgid "Import automount files for a specific location." -msgstr "Importer des fichiers « automount » pour un emplacement donné." +msgid "Agreements deleted" +msgstr "Agréments supprimés" -msgid "Imported keys:" -msgstr "Clés importées :" - -msgid "Imported maps:" -msgstr "Cartes importées :" +msgid "Following segments were not deleted:" +msgstr "Les segments suivants n'ont pas été supprimés :" #, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Profil « %(value)s » importé" +msgid "must be \"%s\"" +msgstr "doit être « %s »" -msgid "Include Disabled" -msgstr "Inclusion désactivée" +msgid "not allowed to perform server connection check" +msgstr "impossible d'effectuer la vérification de la connexion au serveur" -msgid "Include Enabled" -msgstr "Inclusion activée" +#, fuzzy +#| msgid "Show role status on a server" +msgid "Set enabled/hidden state of a server." +msgstr "Afficher l'état du rôle sur un serveur" -msgid "Include all disabled IPA rules into test" -msgstr "Inclure toutes les règles IPA inactives dans le test" +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "État" -msgid "Include all enabled IPA rules into test [default]" -msgstr "Inclure toutes les règles IPA actives dans le test [par défaut]" +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "Nom du serveur" -msgid "Include in" -msgstr "Inclure dans" +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Mot de passe modifié pour « %(value)s »" -msgid "Included attributes" -msgstr "Attributs inclus" +#, fuzzy +#| msgid "IPA CA renewal master" +msgid "Cannot hide CA renewal master." +msgstr "Maître de renouvellement d'AC IPA" -msgid "Inclusive" -msgstr "Inclusion" +#, fuzzy +#| msgid "IPA DNSSec key master" +msgid "Cannot hide DNSSec key master." +msgstr "Maître des clés DNSSec IPA" -msgid "Inclusive Regex" -msgstr "« Regex » d'inclusion" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "Options incompatibles indiquées (-r et -P)\n" - -msgid "Indirect" -msgstr "Indirect" - -msgid "Indirect Member HBAC service" -msgstr "Service HBAC de membre indirect" - -msgid "Indirect Member HBAC service group" -msgstr "Groupe de services de membre indirect" - -msgid "Indirect Member groups" -msgstr "Groupes membres indirects" - -msgid "Indirect Member host-groups" -msgstr "Groupes d'hôtes membres indirects" - -msgid "Indirect Member hosts" -msgstr "Hôtes membres indirects" - -msgid "Indirect Member netgroups" -msgstr "Groupes réseau de membres indirects" - -msgid "Indirect Member of host-group" -msgstr "Membre indirect des groupes d'hôtes" - -msgid "Indirect Member of roles" -msgstr "Membres indirect des rôles" - -msgid "Indirect Member permissions" -msgstr "Droits d'accès de membre indirect" - -msgid "Indirect Member users" -msgstr "Utilisateurs membres indirects" - -msgid "Indirect Membership" -msgstr "Adhésion indirecte" - -msgid "Inherited from server configuration" -msgstr "Hérité de la configuration du serveur" - -msgid "Initialize left node" -msgstr "Initialiser le nœud de gauche" - -msgid "Initialize right node" -msgstr "Initialiser le nœud de droite" - -msgid "Initials" -msgstr "Initiales" - -msgid "Input data specified multiple times" -msgstr "Les données en entrée ont été indiquées plusieurs fois" - -msgid "Input filename" -msgstr "Nom du fichier en entrée" - -msgid "Input form contains invalid or missing values." +#, python-format +msgid "Cannot hide last enabled %(name)s server." msgstr "" -"Le formulaire de saisie comporte des valeurs non-valides ou manquantes." -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Privilège « add » insuffisant pour l'entrée « %s »." - -#, python-format +#, fuzzy +#| msgid "" +#| "\n" +#| "Service Constrained Delegation\n" +#| "\n" +#| "Manage rules to allow constrained delegation of credentials so\n" +#| "that a service can impersonate a user when communicating with another\n" +#| "service without requiring the user to actually forward their TGT.\n" +#| "This makes for a much better method of delegating credentials as it\n" +#| "prevents exposure of the short term secret of the user.\n" +#| "\n" +#| "The naming convention is to append the word \"target\" or \"targets\" to\n" +#| "a matching rule name. This is not mandatory but helps conceptually\n" +#| "to associate rules and targets.\n" +#| "\n" +#| "A rule consists of two things:\n" +#| " - A list of targets the rule applies to\n" +#| " - A list of memberPrincipals that are allowed to delegate for\n" +#| " those targets\n" +#| "\n" +#| "A target consists of a list of principals that can be delegated.\n" +#| "\n" +#| "In English, a rule says that this principal can delegate as this\n" +#| "list of principals, as defined by these targets.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new constrained delegation rule:\n" +#| " ipa servicedelegationrule-add ftp-delegation\n" +#| "\n" +#| " Add a new constrained delegation target:\n" +#| " ipa servicedelegationtarget-add ftp-delegation-target\n" +#| "\n" +#| " Add a principal to the rule:\n" +#| " ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +#| "com ftp-delegation\n" +#| "\n" +#| " Add our target to the rule:\n" +#| " ipa servicedelegationrule-add-target --" +#| "servicedelegationtargets=ftp-delegation-target ftp-delegation\n" +#| "\n" +#| " Add a principal to the target:\n" +#| " ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +#| "com ftp-delegation-target\n" +#| "\n" +#| " Display information about a named delegation rule and target:\n" +#| " ipa servicedelegationrule_show ftp-delegation\n" +#| " ipa servicedelegationtarget_show ftp-delegation-target\n" +#| "\n" +#| " Remove a constrained delegation:\n" +#| " ipa servicedelegationrule-del ftp-delegation-target\n" +#| " ipa servicedelegationtarget-del ftp-delegation\n" +#| "\n" +#| "In this example the ftp service can get a TGT for the ldap service on\n" +#| "the bound user's behalf.\n" +#| "\n" +#| "It is strongly discouraged to modify the delegations that ship with\n" +#| "IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +#| "ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +#| "to delegate, causing the framework to stop functioning.\n" msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" msgstr "" -"Privilège « write » insuffisant pour l'attribut « krbLastPwdChange » de " -"l'entrée « %s »." +"\n" +"Délégation contrainte de services\n" +"\n" +"Gérez les règles permettant la délégation contrainte d'informations\n" +"d'authentification de façon à ce qu'un service puisse se faire passer\n" +"pour un utilisateur lors de la communication avec un service sans\n" +"que cela ne nécessite de la part de l'utilisateur de transmettre son TGT.\n" +"Cela constitue une méthode bien meilleure de délégation d'identification\n" +"car elle évite l'exposition du secret court terme de l'utilisateur.\n" +"\n" +"La convention de nommage est d'ajouter le mot « target » ou « targets »\n" +"au nom de la règle de correspondance. Ce poitn n'est pas obligatoire mais\n" +"aide à visualiser l'association entre règles et cibles.\n" +"\n" +"Une règle est constituée de deux choses :\n" +" - une liste de cibles auxquelles la règle s'applique,\n" +" - une liste de memberPrincipals qui sont autorisés à leur déléguer\n" +" leurs droits.\n" +"\n" +"Une cible consiste en une liste de principaux qui peuvent être délégués.\n" +"\n" +"En anglais, une règle que ce principal peut déléguer comme cette liste\n" +"de principaux, tels que définis par ces cibles.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une nouvelle règle de délégation contrainte :\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Ajouter une nouvelle cible de délégation contrainte :\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Ajouter un principal à la règle :\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Ajouter notre cible à la règle :\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add un principal à la cible :\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Afficher les informations au sujet d'une règle de délégation et sa cible :\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Supprimer une délégation contrainte :\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"Dans cet exemple, le service ftp peut obtenir un TGT pour le service ldap\n" +"au nom de l'utilisateur associé.\n" +"\n" +"Il est fortement découragé de modifier les délégations livrées avec IPA,\n" +"ipa-http-delegation et ses cibles ipa-cifs-delegation-targets et\n" +"ipa-ldap-delegation-targets. Des modifications erronées peuvent obérer\n" +"la capacité de délégation, en provoquant l'arrêt de fonctionnement du\n" +"moteur.\n" + +msgid "Allowed to Impersonate" +msgstr "Autorisé à prendre l'identité" + +msgid "Member principals" +msgstr "Principaux membres de" + +#, fuzzy, python-format +#| msgid "Malformed principal" +msgid "Malformed principal: %(error)s" +msgstr "Principal malformé" + +msgid "Add target to a named service delegation." +msgstr "Ajouter des cibles à une délégation de service nommé" #, python-format +msgid "member %s" +msgstr "%s membre" + +msgid "Remove member from a named service delegation." +msgstr "Retirer des membres d'une délégation de service nommé" + +msgid "service delegation rule" +msgstr "règle de délégation de service" + +msgid "service delegation rules" +msgstr "règles de délégation de service" + +msgid "Service delegation rules" +msgstr "Règles de délégation de service" + +msgid "Service delegation rule" +msgstr "Règle de délégation de service" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Règle de délégation de service « %(value)s » ajoutée" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Règle de délégation de service « %(value)s » supprimée" + +msgid "privileged service delegation rule" +msgstr "règle de délégation de service privilégié" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d règle de délégation de service correspondante" +msgstr[1] "%(count)d règles de délégation de service correspondantes" + +msgid "service delegation target" +msgstr "cible de délégation de service" + +msgid "service delegation targets" +msgstr "cibles de délégation de service" + +msgid "Service delegation targets" +msgstr "Cibles de délégation de service" + +msgid "Service delegation target" +msgstr "Cible de délégation de service" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Cible de délégation de service « %(value)s » ajoutée" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Cible de délégation de service « %(value)s » supprimée" + +msgid "privileged service delegation target" +msgstr "cible de délégation de service privilégiée" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d cible de délégation de service correspondante" +msgstr[1] "%(count)d cibles de délégation de service correspondantes" + msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" msgstr "" -"Privilège « write » insuffisant sur l'attribut « userCertificate » de " -"l'entrée « %s »." - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Accès insuffisant : %(info)s" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" -"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " -"alternatif." - -msgid "Internal Error" -msgstr "Erreur interne" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Requête JSON-RPC invalide : %(error)s" - -msgid "Invalid LDAP URI." -msgstr "URI LDAP invalide." - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Nom de principal de service invalide\n" - -msgid "Invalid credentials" -msgstr "Données d'authentification invalides" - -msgid "Invalid format. Should be name=value" -msgstr "Format invalide. Doit être nom=valeur" - -msgid "Invalid number of parts!" -msgstr "Nombre de parties invalide !" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Type invalide ou non pris en compte. Les valeurs autorisées sont : %s" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "Clé publique invalide ou non prise en charge : %s" - -msgid "Invalid vault type" -msgstr "Type de coffre-fort invalide" - -msgid "Is zone active?" -msgstr "La zone est-elle active ?" - -msgid "Issue" -msgstr "Émettre" - -msgid "Issued By" -msgstr "Émis par" - -msgid "Issued On" -msgstr "Émis le" - -msgid "Issued To" -msgstr "Émis pour" - -msgid "Issued on from" -msgstr "Émis à partir du" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "Émis à partir de cette date (AAAA-mm-jj)" - -msgid "Issued on to" -msgstr "Émis jusqu'au" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "Émis à cette date (AAAA-mm-jj)" - -msgid "Issuer" -msgstr "Émetteur" - -msgid "Issuer DN" -msgstr "DN de l'émetteur" - -msgid "Issuer Distinguished Name" -msgstr "Nom distinctif de l'émetteur" - -msgid "Issuing CA" -msgstr "AC émettrice" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "Ceci est uniquement utilisée pour définir l'attribut SOA MNAME." - -msgid "Job Title" -msgstr "Titre de poste" - -msgid "Join an IPA domain" -msgstr "Rejoindre un domaine IPA" - -msgid "KEY record" -msgstr "Enregistrement KEY" - -msgid "KRA service is not enabled" -msgstr "Le service KRA est désactivé" - -msgid "KX Exchanger" -msgstr "Échangeur KX" - -msgid "KX Preference" -msgstr "Préférence KX" - -msgid "KX record" -msgstr "Enregistrement KX" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" -"Cache des justificatifs d'identité Kerberos introuvable. Possédez-vous un " -"ticket Kerberos ?\n" - -msgid "Kerberos Key" -msgstr "Clé Kerberos" - -msgid "Kerberos Key Not Present" -msgstr "Clé Kerberos absente" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Clé Kerberos présente, hôte muni de permissions" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Clé Kerberos présente, permissions du service activées" - -msgid "Kerberos Service Principal Name" -msgstr "Nom de principal de service Kerberos" - -msgid "Kerberos Ticket Policy" -msgstr "Politique de tickets Kerberos" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" -"Principal d'utilisateur Kerberos introuvable. Avez-vous un cache de " -"justificatifs d'identité Kerberos ?\n" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Échec de l'initialisation du contexte Kerberos\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Échec de l'initialisation du contexte Kerberos : %1$s (%2$d)\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Erreur Kerberos : %(major)s/%(minor)s" - -msgid "Kerberos keys available" -msgstr "Clés Kerberos disponibles" - -msgid "Kerberos principal" -msgstr "Principal Kerberos" +"\n" +"Migration vers IPA\n" +"\n" +"Migration d'utilisateurs et de groupes d'un serveur LDAP vers IPA.\n" +"\n" +"Ceci réalise une requête LDAP sur le serveur distant pour rechercher\n" +"utilisateurs et groupes dans un conteneur. Pour faire migrer les mots de\n" +"passe, vous devez vous connecter en tant qu'utilisateur capable de lire\n" +"l'attribut « userPassword » sur le serveur distant : chose généralement\n" +"réservée aux administrateurs de haut niveau comme « cn=Directory Manager »\n" +"dans 389-ds (utilisateur de la connexion par défaut).\n" +"\n" +"Par défaut, le conteneur utilisateur est ou=People.\n" +"\n" +"Par défaut, le conteneur groupe est ou=Groups.\n" +"\n" +"Utilisateurs et groupes préexistants sur le serveur IPA ne sont pas " +"touchés.\n" +"\n" +"Deux schémas LDAP définissent comment les membres d'un groupe sont\n" +"enregistrés : RFC2307 et RFC2307bis. RFC2307bis utilise « member » et\n" +"« uniquemember » pour définir les membres d'un groupe, RFC2307 utilise\n" +"« memberUid ». Le schéma par défaut est RFC2307bis.\n" +"\n" +"La fonctionnalité « compat » du schéma autorise IPA à formater à nouveau\n" +"les données pour les systèmes ne prenant pas en charge RFC2307bis. Il est\n" +"recommandé de désactiver cette fonction pendant la migration pour éviter\n" +"de surcharger le système. Vous la réactiverez après migration. Pour faire\n" +"la migration avec la fonction activée,utilisez l'option « --with-compat ».\n" +"\n" +"Les utilisateurs migrés n'ont pas de référence Kerberos, ils n'ont que leur\n" +"mot de passe LDAP. Pour achever le processus de migration, les utilisateurs\n" +"doivent aller à la page http://ipa.example.com/ipa/migration et\n" +"s'authentifier en utilisant leur mot de passe LDAP pour générer leur\n" +"justificatif d'identité Kerberos.\n" +"\n" +"Par défaut, la migration est désactivée. Utilisez la commande\n" +"« ipa config-mod » pour l'activer :\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Si un DN de base n'est pas indiqué avec « --basedn », IPA utilise alors,\n" +"soit la valeur de « defaultNamingContext » si elle est définie, soit la\n" +"première valeur fixée dans « namingContexts » dans la racine du serveur " +"LDAP\n" +"distant.\n" +"\n" +"Les utilisateurs sont ajoutés comme membres du groupe utilisateur par " +"défaut.\n" +"Cela peut être une tâche demandant du temps, ainsi pendant la migration " +"cela\n" +"se fait en mode « batch » par tranches de 100 utilisateurs. Il y aura donc\n" +"une fenêtre dans laquelle les utilisateurs seront ajoutés à IPA, mais\n" +"ne seront pas encore membres du groupe d'utilisateurs par défaut.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Migration la plus simple, acceptant tous les paramètres par défaut :\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" En précisant le conteneur utilisateur et groupe. S'utilise pour migrer les\n" +"données utilisateur et groupe d'un serveur IPA v1 :\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Comme un serveur IPA v2 comporte déjà des groupes prédéfinis pouvant " +"entrer\n" +"en conflit avec des groupes du serveur (IPA v1) migré (par exemple admins,\n" +"ipausers), des utilisateurs dans un groupe en conflit comme groupe " +"principal\n" +"peuvent se voir rattachés à un groupe inconnu sur le nouveau serveur IPA " +"v2.\n" +" Utilisez l'option « --group-overwrite-gid » pour écraser le GID des " +"groupes\n" +"préexistants afin d'éviter ce problème :\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Utilisateurs ou groupes migrés peuvent avoir des classes d'objets et\n" +"attributs associés inconnus du serveur IPA v2. Ces classes d'objets et\n" +"attributs doivent être tenus en dehors du processus de migration :\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"JOURNALISATION\n" +"\n" +"La migration inscrit des avertissements et des erreurs sur le journal\n" +"d'erreurs Apache. Ce fichier devra être examiné après la migration pour\n" +"corriger ou enquêter sur tout problème qui serait mentionné.\n" +"\n" +"Tous les 100 utilisateurs migrés un message de niveau info est affiché\n" +"indiquant l'avancement en cours et la durée écoulée pour permettre un suivi\n" +"du processus de progression de la migration.\n" +"\n" +"Si le niveau de journalisation est « debug », en définissant « debug=True »\n" +"soit dans « /etc/ipa/default.conf », soit dans « /etc/ipa/server.conf »,\n" +"alors une entrée est inscrite pour chaque utilisateur ajouté, plus un\n" +"résumé quand le groupe utilisateur par défaut est mis à jour.\n" #, python-format msgid "" @@ -11770,4180 +29045,858 @@ msgstr "" "Le principal Kerberos %s existe déjà. Utiliser la commande « ipa user-mod » " "pour le définir manuellement." -msgid "Kerberos principal expiration" -msgstr "Expiration du principal Kerberos" - -msgid "Kerberos principal name for this host" -msgstr "Nom du principal Kerberos pour cet hôte" - -msgid "Key" -msgstr "Clé" - -msgid "Key Compromise" -msgstr "Clé compromise" - -msgid "Key Tag" -msgstr "Étiquette de clé" - -msgid "Keytab" -msgstr "Tableau de clés" - -msgid "Keytab File Name" -msgstr "Nom de fichier du tableau de clés" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Récupération du tableau de clés et stockage avec succès dans : %s\n" - -msgid "LDAP DN" -msgstr "DN LDAP" - -msgid "LDAP URI" -msgstr "URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "URI LDAP du serveur DS depuis lequel effectuer la migration" - -msgid "LDAP basedn" -msgstr "« basedn » de LDAP" - -msgid "LDAP password" -msgstr "Mot de passe LDAP" - -msgid "LDAP password (if not using Kerberos)" -msgstr "Mot de passe LDAP (hors utilisation de Kerberos)" - -msgid "LDAP schema" -msgstr "Schéma LDAP" +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Impossible de savoir si le principal Kerberos %s existe déjà. Utiliser la " +"commande 'ipa user-mod' pour le définir manuellement." msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." msgstr "" -"Portée de recherche LDAP pour les utilisateurs et les groupes : base, " -"onelevel, ou subtree. Valeur par défaut : onelevel" - -msgid "LDAP suffix to be managed" -msgstr "Suffixe LDAP qui sera géré" - -msgid "LDAP timeout" -msgstr "Délai d'expiration LDAP" - -msgid "LOC Altitude" -msgstr "Altitude LOC" - -msgid "LOC Degrees Latitude" -msgstr "Degrés de latitude LOC" - -msgid "LOC Degrees Longitude" -msgstr "Degrés de longitude LOC" - -msgid "LOC Direction Latitude" -msgstr "Direction de latitude LOC" - -msgid "LOC Direction Longitude" -msgstr "Direction de longitude LOC" - -msgid "LOC Horizontal Precision" -msgstr "Précision horizontale LOC" - -msgid "LOC Minutes Latitude" -msgstr "Minutes de latitude LOC" - -msgid "LOC Minutes Longitude" -msgstr "Minutes de longitude LOC" - -msgid "LOC Seconds Latitude" -msgstr "Secondes de latitude LOC" - -msgid "LOC Seconds Longitude" -msgstr "Secondes de longitude LOC" - -msgid "LOC Size" -msgstr "Taille LOC" - -msgid "LOC Vertical Precision" -msgstr "Précision verticale LOC" - -msgid "LOC record" -msgstr "Enregistrement LOC" - -msgid "Label" -msgstr "Étiquette" - -msgid "Last" -msgstr "Dernier" - -msgid "Last date/time the token can be used" -msgstr "Date et heure au delà desquels le jeton ne peut plus être utilisé" - -msgid "Last failed authentication" -msgstr "Dernière authentification ayant échoué" - -msgid "Last name" -msgstr "Nom" - -msgid "Last successful authentication" -msgstr "Dernière authentification réussie" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Les espaces de début et de fin ne sont pas autorisées" - -msgid "Left node" -msgstr "Nœud de gauche" - -msgid "Left replication node - an IPA server" -msgstr "Nœud de réplication à gauche - un serveur IPA" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Filtre LDAP valide (i.e. ou=Engineering)" - -msgid "Length of TOTP token code validity" -msgstr "Durée de validité du code du jeton TOTP" - -msgid "Level" -msgstr "Niveau" - -msgid "List all service vaults" -msgstr "Énumérer tous les coffres-forts de services" - -msgid "List all user vaults" -msgstr "Énumérer tous les coffres-forts d'utilisateurs" - -msgid "List of IPA masters configured as DNS servers" -msgstr "Liste des maîtres IPA configurés comme serveurs DNS" - -msgid "List of all IPA masters" -msgstr "Liste des maîtres IPA" - -msgid "List of deletions that failed" -msgstr "Liste des suppressions ayant échoué" - -msgid "List of enabled roles" -msgstr "Liste des rôles activés" - -msgid "List of servers which advertise the given location" -msgstr "Liste des serveurs qui publient un emplacement donné" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Liste des domaines approuvés rafraîchie avec succès. Utiliser la commande " -"« trustdomain-find » pour les énumérer." - -msgid "Lists of objects migrated; categorized by type." -msgstr "Liste des objets migrés, catégorisés par type." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "Liste des objets n'ayant pu être migrés, catégorisés par type." - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Charger le certificat de l'AC du serveur LDAP depuis FILE" - -msgid "Local domain" -msgstr "Domaine local :" - -msgid "Locality" -msgstr "Localité" - -msgid "Location" -msgstr "Emplacement" - -msgid "Location name" -msgstr "Nom de l'emplacement" - -msgid "Location of the ACI" -msgstr "Emplacement de l'ACI" - -msgid "Lockout duration" -msgstr "Durée du verrouillage" - -msgid "Logged In As" -msgstr "Connecté en tant que" - -msgid "Login shell" -msgstr "Interpréteur de commande" - -msgid "MAC address" -msgstr "Adresse MAC" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "MX Exchanger" -msgstr "Échangeur MX" - -msgid "MX Preference" -msgstr "Préférence MX" - -msgid "MX record" -msgstr "Enregistrement MX" - -msgid "Mailing Address" -msgstr "Adresse postale" - -msgid "Malformed DN" -msgstr "DN mal formé" - -msgid "Malformed principal" -msgstr "Principal malformé" - -msgid "Manage password policy for specific group" -msgstr "Gérer la politique de mots de passe d'un groupe spécifique" - -msgid "Manage ticket policy for specific user" -msgstr "Administrer la politique de ticket pour un utilisateur donné" - -msgid "Managed LDAP suffix DN" -msgstr "DN du suffixe LDAP administré" - -msgid "Managed by" -msgstr "Géré par" - -msgid "Managed suffix" -msgstr "Suffixe administré" - -msgid "Managed suffixes" -msgstr "Suffixes administrés" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" -"La gestion de la topologie nécessite le niveau de domaine minimal " -"${domainlevel}" - -msgid "Managedby permission" -msgstr "Permission « managedby »" - -msgid "Manager" -msgstr "Gestionnaire" - -msgid "Managing" -msgstr "Gérant" - -msgid "Map" -msgstr "Carte" - -msgid "Map Type" -msgstr "Type de mappe" - -msgid "Mark the token as disabled (default: false)" -msgstr "Marquer le jeton comme désactivé (par défaut : faux, false)" - -msgid "Master file" -msgstr "Fichier maître" - -msgid "Matched" -msgstr "Correspondance" - -msgid "Matched rules" -msgstr "Règles satisfaites" - -msgid "Matching Type" -msgstr "Type correspondant" - -msgid "Max domain level" -msgstr "Niveau de domaine maxi" - -msgid "Max failures" -msgstr "Nombre maximal d'échecs" - -msgid "Max life" -msgstr "Vie max." - -msgid "Max lifetime (days)" -msgstr "Durée de vie maximale (jours)" - -msgid "Max renew" -msgstr "Renouvellement max." - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "Durée maximale (secondes) pour une recherche (0 ou -1 pour illimitée)" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "Durée maximale (secondes) pour une recherche (> 0, -1 pour illimitée)" - -msgid "Maximum domain level" -msgstr "Niveau de domaine maximal" - -msgid "Maximum number of agreements per replica" -msgstr "Le nombre maximal d'agréments par réplique" - -msgid "Maximum number of certs returned" -msgstr "Nombre maximum de certificats renvoyés" - -msgid "Maximum number of entries returned" -msgstr "Nombre maximal d'entrées renvoyées" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Nombre maximal d'entrées renvoyées (0 pour illimité)" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Nombre maximum d'entrées à rechercher (-1 pour illimité)" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "Nombre maximum d'entrées à rechercher (-1 ou 0 pour illimité)" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "Nombre maximal de règles à traiter quand « --rules » n'est défini" - -msgid "Maximum password life must be greater than minimum." -msgstr "" -"La durée de vie maximale du mot de passe doit être supérieure au minimum." - -msgid "Maximum password lifetime (in days)" -msgstr "Durée de vie maximale d'un mot de passe (en jours)" - -msgid "Maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -msgid "Maximum serial number" -msgstr "Numéro de série maximum" - -msgid "Maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -msgid "Maximum username length" -msgstr "Longueur maximale du nom d'utilisateur" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "La valeur maximale est ${value}" - -msgid "May not be empty" -msgstr "Ne peut pas être vide" - -msgid "Member Group" -msgstr "Groupe membre" - -msgid "Member HBAC service" -msgstr "Services HBAC membres" - -msgid "Member HBAC service groups" -msgstr "Groupes de services HBAC membres" - -msgid "Member Host" -msgstr "Hôte membre" - -msgid "Member Hostgroup" -msgstr "Groupe d'hôtes membre" - -msgid "Member Sudo commands" -msgstr "Membres de commandes sudo" - -msgid "Member User" -msgstr "Utilisateur membre" - -msgid "Member groups" -msgstr "Groupes de membres" - -msgid "Member host-groups" -msgstr "Groupes d'hôtes membres" - -msgid "Member hosts" -msgstr "Hôtes membres" - -msgid "Member netgroups" -msgstr "Groupes réseau membre" - -msgid "Member of" -msgstr "Membre de" - -msgid "Member of HBAC rule" -msgstr "Membre de règle HBAC" - -msgid "Member of Sudo rule" -msgstr "Membre de règle Sudo" - -msgid "Member of a group" -msgstr "Membre d'un groupe" - -msgid "Member of group" -msgstr "Membre du groupe" - -msgid "Member of groups" -msgstr "Membre des groupes" - -msgid "Member of host-groups" -msgstr "Membre du groupe d'hôtes" - -msgid "Member of netgroups" -msgstr "Membre des groupes réseau" - -msgid "Member principals" -msgstr "Principaux membres de" - -msgid "Member service groups" -msgstr "Groupes de services membres" - -msgid "Member services" -msgstr "Services membres" - -msgid "Member user group" -msgstr "Groupe d'utilisateurs membre" - -msgid "Member users" -msgstr "Utilisateurs membres" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "Membres d'un domaine approuvé sous la forme DOM\\nom ou nom@domaine" - -msgid "Members that could not be added" -msgstr "Membres n'ayant pu être ajoutés" - -msgid "Members that could not be removed" -msgstr "Membres n'ayant pas pu être supprimés" - -msgid "Migrate users and groups from DS to IPA." -msgstr "Migrer les utilisateurs et groupes de DS vers IPA." - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"Mode migration désactivé.\n" -"Utiliser la commande « ipa config-mod --enable-migration=TRUE » pour " -"l'activer." +"Échec à l'ajout de l'utilisateur dans le groupe par défaut. Utiliser la " +"commande « ipa group-add-member » pour l'ajouter manuellement." msgid "Migration of LDAP search reference is not supported." msgstr "" "La migration des références des recherches LDAP n'est pas prise en charge." -msgid "Min domain level" -msgstr "Niveau de domaine mini" - -msgid "Min length" -msgstr "Longueur minimale" - -msgid "Min lifetime (hours)" -msgstr "Durée de vie minimale (jours)" - -msgid "Minimum domain level" -msgstr "Niveau de domaine minimal" - -msgid "Minimum length of password" -msgstr "Taille minimale d'un mot de passe" - -msgid "Minimum number of character classes" -msgstr "Nombre minimal de classes de caractères" - -msgid "Minimum password lifetime (in hours)" -msgstr "Durée de vie maximale d'un mot de passe (en jours)" - -msgid "Minimum serial number" -msgstr "Numéro de série minimum" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "La valeur minimale est ${value}" - -msgid "Minutes Latitude" -msgstr "Minutes de latitude" - -msgid "Minutes Longitude" -msgstr "Minutes de longitude" - -msgid "Misc. Information" -msgstr "Informations diverses" - -msgid "Missing new vault public key" -msgstr "Nouvelle clé publique du coffre-fort manquante" +msgid "Malformed DN" +msgstr "DN mal formé" #, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Référence HTTP manquante ou invalide, %(referer)s" +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s n'est pas un utilisateur POSIX" -#, c-format -msgid "Missing reply control list!\n" -msgstr "Absence de liste de contrôle des réponses !\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "Absence de contrôle de réponse !\n" - -msgid "Missing values: " -msgstr "Valeurs manquantes :" - -msgid "Missing vault private key" -msgstr "Clé privée du coffre-fort manquante" - -msgid "Missing vault public key" -msgstr "Clé publique du coffre-fort manquante" - -msgid "Mobile Telephone Number" -msgstr "Numéro de téléphone mobile" - -msgid "Model" -msgstr "Modèle" - -msgid "Modified" -msgstr "Modifié" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Configuration de la relation de confiance « %(value)s » modifiée." - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "ACI « %(value)s » modifiée" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "AC « %(value)s » modifiée" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » modifiée" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Profil de certificat « %(value)s » modifié" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Serveur DNS « %(value)s » modifié" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » modifiée" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Service HBAC « %(value)s » modifié" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Groupe de services HBAC « %(value)s » modifié" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Plage d'ID « %(value)s » modifiée" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Emplacement IPA « %(value)s » modifié" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Serveur IPA \"%(value)s\" modifié" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Jeton OTP « %(value)s » modifié" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » modifié" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » modifiée" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Commande sudo « %(value)s » modifiée" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Groupe de commandes sudo « %(value)s » modifié." - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Règle sudo « %(value)s » modifiée" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants de groupes « %(value)s » modifiée" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Vue d'identifiant « %(value)s » modifiée" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants « %(value)s » modifiée" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants utilisateurs « %(value)s » modifiée" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Règle d'auto-adhésion « %(value)s » modifiée" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Clé « automount » « %(value)s » modifiée" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Carte « automount » « %(value)s » modifiée" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Délégation « %(value)s » modifiée" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Groupe « %(value)s » modifié" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Hôte « %(value)s » modifié" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Groupe d'hôtes « %(value)s » modifié" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Groupe réseau « %(value)s » supprimé" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Permission « %(value)s » modifiée" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Privilège « %(value)s » supprimé" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rôle « %(value)s » modifié" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Segment « %(value)s » modifié" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Permission de libre service « %(value)s » modifiée" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Service « %(value)s » modifié" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Utilisateur en attente « %(value)s » modifié" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Suffixe de topologie « %(value)s » modifié" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" msgstr "" -"Relation de confiance « %(value)s » modifiée (la modification sera effective " -"dans 60 secondes)" +". Vérifier le GID du groupe existant. Utiliser l'option « --group-overwrite-" +"gid » pour surcharger le GID" + +msgid "Invalid LDAP URI." +msgstr "URI LDAP invalide." #, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » modifié" +msgid "%s to exclude from migration" +msgstr "%s à exclure de la migration" -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Coffre-fort « %(value)s » modifié" - -msgid "Modified: key not set" -msgstr "Modifié : clé non définie" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Modifier '%(value)s' pour %(name)s ?" - -msgid "Modify ACI." -msgstr "Modifier une ICA." - -msgid "Modify CA configuration." -msgstr "Modifier la configuration de l'AC" - -msgid "Modify Certificate Profile configuration." -msgstr "Modifier la configuration d'un profil de certificat." - -msgid "Modify DNS forward zone." -msgstr "Modifier une zone de redirection DNS." - -msgid "Modify DNS server configuration" -msgstr "Modifier la configuration du serveur DNS" - -msgid "Modify DNS zone (SOA record)." -msgstr "Modifier la zone DNS (enregistrement SOA)." - -msgid "Modify ID range." -msgstr "Modifier une plage." - -msgid "Modify Kerberos ticket policy." -msgstr "Modifier la politique de tickets Kerberos." - -msgid "Modify OTP configuration options." -msgstr "Modifier les options de configuration OTP." - -msgid "Modify Sudo Command Group." -msgstr "Modifier un groupe de commandes sudo." - -msgid "Modify Sudo Command." -msgstr "Modifier une commande sudo." - -msgid "Modify Sudo Rule." -msgstr "Modifier une règle sudo." - -msgid "Modify a CA ACL." -msgstr "Modifier une LCA d'AC." - -msgid "Modify a DNS resource record." -msgstr "Modifier un enregistrement de ressources DNS." - -msgid "Modify a OTP token." -msgstr "Modifier un jeton OTP" - -msgid "Modify a RADIUS proxy server." -msgstr "Modifier un serveur mandataire RADIUS" - -msgid "Modify a SELinux User Map." -msgstr "Modifier une mappe d'utilisateurs SELinux" - -msgid "Modify a delegation." -msgstr "Modifier une délégation." - -msgid "Modify a group password policy." -msgstr "Modifier une politique de mot de passe de groupe." - -msgid "Modify a group." -msgstr "Modifier un groupe." - -msgid "Modify a hostgroup." -msgstr "Modifier un groupe d'hôtes." - -msgid "Modify a netgroup." -msgstr "Modifier un groupe réseau." - -msgid "Modify a permission." -msgstr "Modifier une permission." - -msgid "Modify a privilege." -msgstr "Modifier un privilège." - -msgid "Modify a role." -msgstr "Modifier un rôle." - -msgid "Modify a segment." -msgstr "Modifier un segment." - -msgid "Modify a self-service permission." -msgstr "Modifier une permission de libre service." - -msgid "Modify a stage user." -msgstr "Modifier un utilisateur en attente." - -msgid "Modify a topology suffix." -msgstr "Modifier un suffixe de topologie." - -msgid "Modify a user." -msgstr "Modifier un utilisateur." - -msgid "Modify a vault." -msgstr "Modifier un coffre-fort." - -msgid "Modify an Group ID override." -msgstr "Modifier une surcharge d'identifiants de groupes." - -msgid "Modify an HBAC rule." -msgstr "Modifier une règle HBAC." - -msgid "Modify an HBAC service group." -msgstr "Supprimer un groupe de services HBAC." - -msgid "Modify an HBAC service." -msgstr "Modifier un service HBAC." - -msgid "Modify an ID View." -msgstr "Modifier une vue d'identifiants." - -msgid "Modify an ID override." -msgstr "Modifier une surcharge d'identifiants." - -msgid "Modify an User ID override." -msgstr "Modifier une surcharge d'identifiants utilisateurs." - -msgid "Modify an automember rule." +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" msgstr "" -"Modifier une règle d'auto-adhésion.\n" -" " - -msgid "Modify an automount key." -msgstr "Modifier une clé « automount »." - -msgid "Modify an automount map." -msgstr "Modifier une carte « automount »." - -msgid "Modify an existing IPA service." -msgstr "Modifier un service IPA." - -msgid "Modify configuration options." -msgstr "Modifier les options de configuration." - -msgid "Modify global DNS configuration." -msgstr "Modifier la configuration DNS globale." - -msgid "Modify global trust configuration." -msgstr "Modifier la configuration globale des relations d'approbation." - -msgid "Modify information about a host." -msgstr "Modifier les informations d'un hôte." - -msgid "Modify information about an IPA location." -msgstr "Modifier les informations d'un emplacement IPA." - -msgid "Modify information about an IPA server." -msgstr "Modifier les informations d'un serveur IPA." - -msgid "Modify realm domains." -msgstr "Modifier les domaines du royaume." - -msgid "Modify trustdomain of the trust" -msgstr "Modifier le domaine approuvé de la confiance" +"les résultats des recherches sur les objets\n" +"à migrer ont été tronquées par le serveur ;\n" +"le processus de migration peut être incomplet\n" #, python-format msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" msgstr "" -"Plus d'une entrée avec la clé %(key)s trouvée, utilisez --info pour " -"sélectionner l'entrée donnée." +"La recherche LDAP %(container)s ne renvoie aucun résultat (base de " +"recherche : %(search_base)s, classe d'objet : %(objectclass)s)" -msgid "Mount information" -msgstr "Information de montage" - -msgid "Mount point" -msgstr "Point de montage" - -msgid "Move deleted user into staged area" -msgstr "Déplacer l'utilisateur supprimé dans l'espace en attente" - -msgid "Multi-value" -msgstr "Multi-valué" - -msgid "Must be a decimal number" -msgstr "Doit être un nombre décimal" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "Doit être une valeur d'horodatage UTC (ex. : « 2014-01-20 17:58:01Z »)" - -msgid "Must be an integer" -msgstr "Doit être un entier" - -msgid "NAPTR Flags" -msgstr "Drapeaux NAPTR" - -msgid "NAPTR Order" -msgstr "Ordre NAPTR" - -msgid "NAPTR Preference" -msgstr "Préférence NAPTR" - -msgid "NAPTR Regular Expression" -msgstr "Expression rationnelle NAPTR" - -msgid "NAPTR Replacement" -msgstr "Remplacement NAPTR" - -msgid "NAPTR Service" -msgstr "Service NAPTR" - -msgid "NAPTR record" -msgstr "Enregistrement NAPTR" - -msgid "NIS domain name" -msgstr "Nom de domaine NIS" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "La valeur NONE ne peut être combinée avec d'autres types de PAC" - -msgid "NS Hostname" -msgstr "Nom d'hôte NS" - -msgid "NS record" -msgstr "Enregistrement NS" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"l'enregistrement NS n'est pas autorisé à coexister avec un enregistrement " -"%(type)s sauf quand ils sont situés dans enregistrement de zone racine (RFC " -"2181, section 6.1)" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" -"Les enregistrements NS peuvent être modifiés dans la somme sommet - '@'. " - -msgid "NSEC record" -msgstr "Enregistrement NSEC" - -msgid "NSEC3 record" -msgstr "Enregistrement NSEC3" - -msgid "NSEC3PARAM record" -msgstr "Enregistrement NSEC3PARAM" +msgid "Default group for new users not found" +msgstr "Groupe par défaut pour les nouveaux utilisateurs introuvable" msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" msgstr "" -"Enregistrement NSEC3PARAM pour une zone au format : algorithme_hachage " -"marqueurs itérations salt." - -msgid "Name" -msgstr "Nom" - -msgid "Name for referencing the CA" -msgstr "Nom de référencement de l'AC" - -msgid "Name of command to export" -msgstr "Nom de la commande à exporter" - -msgid "Name of host-group" -msgstr "Nom du groupe d'hôtes" - -msgid "Name of issuing CA" -msgstr "Nom de l'AC émettrice" - -msgid "Name of method to export" -msgstr "Nom de la méthode à exporter" - -msgid "Name of object to export" -msgstr "Nom de l'objet à exporter" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "Nom de la carte parente (par défaut : auto.master)." - -msgid "Name of the trusted domain" -msgstr "Nom du domaine approuvé" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" -"Le serveur de noms '%(host)s' n'a pas d'enregistrement A/AAAA correspondant" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "Le serveur de nom pour la zone inverse ne peut être un nom DNS relatif" +"\n" +"Hôtes/Machines\n" +"\n" +"Un hôte représente une machine. Il peut être utilisé dans de nombreux " +"contextes :\n" +"- les entrées de services sont associées à un hôte,\n" +"- un hôte stocke le principal des hôtes/des services,\n" +"- un hôte est utilisable dans les règles HBAC (Host-based Access Control),\n" +"- chaque client enregistré génère une entrée d'hôte.\n" msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" msgstr "" -"Ni « --del-all », ni aucune option de suppression d'enregistrement donné n'a " -"été indiqué.\n" -"Consulter l'aide pour connaître tous les types d'enregistrements pris en " -"charge." - -msgid "Nested Methods to execute" -msgstr "Commandes imbriquées à exécuter" - -msgid "NetBIOS name" -msgstr "Nom NetBIOS" - -msgid "Netgroup" -msgstr "Groupe réseau" - -msgid "Netgroup Settings" -msgstr "Paramètres du groupe réseau" - -msgid "Netgroup description" -msgstr "Description de groupe réseau" - -msgid "Netgroup name" -msgstr "Nom de groupe réseau" - -msgid "Netgroups" -msgstr "Groupes réseau" - -msgid "Network Services" -msgstr "Services réseau" - -msgid "New ACI name" -msgstr "Nouveau nom de l'ACI" - -msgid "New Certificate" -msgstr "Nouveau certificat" - -msgid "New Password" -msgstr "Nouveau mot de passe" - -msgid "New Principal Password" -msgstr "Nouveau mot de passe du principal" - -msgid "New Test" -msgstr "Nouveau test" - -msgid "New kerberos principal alias" -msgstr "Nouvel alias de principal Kerberos" - -msgid "New mount information" -msgstr "Nouvelle information de montage" - -msgid "New password is required" -msgstr "Un nouveau mot de passe est requis" - -msgid "New public key specified multiple times" -msgstr "Nouvelle clé publique indiquée plusieurs fois" - -msgid "New vault password" -msgstr "Nouveau mot de passe du coffre-fort" - -msgid "New: key not set" -msgstr "Ajout : clé non définie" - -msgid "New: key set" -msgstr "Ajout : clé définie" - -msgid "Next" -msgstr "Suivant(e)" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Aucun enregistrement A, AAAA, SSHFP ou PTR trouvé." - -msgid "No Common Name was found in subject of request." -msgstr "Aucun « Common Name » n'a été trouvé dans le sujet de cette demande." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"Aucun serveur DNS dans l'emplacement IPA %(location)s. Sans serveur DNS, " -"l'emplacement ne fonctionnera pas comme attendu." +"\n" +"INSCRIPTION :\n" +"\n" +"Trois scenarii d'inscriptions d'un nouveau client sont possibles :\n" +"\n" +"1. La machine est enregistrée par un administrateur de plein droit.\n" +" L'entrée système peut pré-exister ou non. Un administrateur de\n" +" plein droit est membre du rôle hostadmin ou du groupe admins\n" +"2. L'inscription est faite par un administrateur limité. L'hôte\n" +" doit avoir été préalablement créé. Un administrateur limité\n" +" possède le privilège Host Enrollment.\n" +"3. Le système a été créé avec un mot de passe à usage unique.\n" msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" msgstr "" -"Aucune clé maîtresse DNSSEC n'est installée. La signature de zone DNSSEC ne " -"pourra pas fonctionner tant qu'une clé maîtresse n'est installée." - -msgid "No Valid Certificate" -msgstr "Pas de certificat valide" - -msgid "No archived data." -msgstr "Aucune donnée archivée." - -msgid "No credentials cache found" -msgstr "Cache des justificatifs d'identité introuvable" - -msgid "No default (fallback) group set" -msgstr "Pas de groupe par défaut (repli) défini" - -msgid "No entries." -msgstr "Pas d'entrées." - -msgid "No file to read" -msgstr "Pas de fichier à lire" - -msgid "No free YubiKey slot!" -msgstr "Aucun connecteur YubiKey libre !" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Aucune clé acceptée par le KDC\n" - -msgid "No matching entries found" -msgstr "Aucune entrée correspondante trouvée" - -msgid "No option to delete specific record provided." -msgstr "Pas d'option fournie pour supprimer un enregistrement donné." - -msgid "No option to modify specific record provided." -msgstr "Aucune option fournie pour modifier un enregistrement donné." - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Pas d'autorisation pour joindre cet hôte dans le domaine IPA.\n" - -msgid "No private group" -msgstr "Pas de groupe privé" - -msgid "No response" -msgstr "Pas de réponse" - -msgid "No such attribute on this entry" -msgstr "Pas d'attribut de ce type sur cette entrée" - -msgid "No such virtual command" -msgstr "Commande virtuelle inconnue" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "Aucune préférence de type de chiffrement sur le système ?!\n" - -msgid "No trusted domain is not configured" -msgstr "Aucun domaine approuvé n'est pas configuré" - -#, c-format -msgid "No values for %s" -msgstr "Aucune valeur pour %s" - -msgid "No wait" -msgstr "Pas d'attente" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" -"Pas de permission en écriture sur le fichier « %s » du tableau de clés\n" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" -"Réponse non 2xx reçue de l'API REST de l'AC : %(status)d. %(explanation)s" - -msgid "Non-Active Directory domain" -msgstr "Domaine autre que Active Directory" - -msgid "Non-existent or invalid rules" -msgstr "Règles inexistantes ou invalides" +"\n" +"RÉINSCRIPTION :\n" +"\n" +"Un hôte déjà inscrit à un certain endroit ayant perdu sa configuration\n" +"(ex.: parce que sa VM a été supprimée), peut être réinscrit.\n" +"\n" +"Pour plus d'informations, consulter les pages « man » de ipa-client-" +"install.\n" +"\n" +"Un hôte peut facultativement stocker des informations complémentaires\n" +"comme sa localisation, le système d'exploitation qu'il exécute, etc.\n" msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" msgstr "" -"Relation d'approbation externe non transitive vers un domaine dans une autre " -"forêt Active Directory" - -msgid "Nonce" -msgstr "Usage unique" - -msgid "Not After" -msgstr "Pas après" - -msgid "Not Before" -msgstr "Pas avant" - -msgid "Not a managed group" -msgstr "Pas un groupe administré" - -msgid "Not a valid IP address" -msgstr "Adresse IP invalide" - -msgid "Not a valid IPv4 address" -msgstr "Adresse IPv4 invalide" - -msgid "Not a valid IPv6 address" -msgstr "Adresse IPv6 invalide" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "Adresse réseau invalide (exemples : 2001:db8::/64, 192.0.2.0/24)" - -msgid "Not allowed on non-leaf entry" -msgstr "Interdit sur une entrée qui n'est pas une feuille" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "Arguments insuffisants pour établir la relation de confiance" - -msgid "Not matched rules" -msgstr "Règles non satisfaites" - -msgid "Not registered yet" -msgstr "Pas encore enregistré" - -msgid "Note" -msgstr "Note" - -msgid "Number of IDs in the range" -msgstr "Nombre d'IDs dans la plage" - -msgid "Number of conditions added" -msgstr "Nombre de conditions ajoutées" - -msgid "Number of conditions removed" -msgstr "Nombre de conditions supprimées" - -msgid "Number of days's notice of impending password expiration" -msgstr "Nombre de jours de préavis d'expiration de mot de passe" - -msgid "Number of digits each token code will have" -msgstr "Nombre de chiffres des codes du jeton" - -msgid "Number of entries returned" -msgstr "Nombre d'entrées renvoyées" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "Nombre d'hôtes dont une vue d'identifiants a été retirée :" - -msgid "Number of hosts the ID View was applied to:" -msgstr "Nombre d'hôtes auxquels la vue d'identifiants a été appliquée :" - -msgid "Number of members added" -msgstr "Nombre de membres ajoutés" - -msgid "Number of members removed" -msgstr "Nombre de membres supprimés" - -msgid "Number of owners added" -msgstr "Nombre de propriétaires ajoutés" - -msgid "Number of owners removed" -msgstr "Nombre de propriétaires supprimés" - -msgid "Number of permissions added" -msgstr "Nombre de permissions ajoutées" - -msgid "Number of permissions removed" -msgstr "Nombre de permissions supprimées" - -msgid "Number of plugins loaded" -msgstr "Nombre de greffons chargés" - -msgid "Number of privileges added" -msgstr "Nombre de privilèges ajoutés" - -msgid "Number of privileges removed" -msgstr "Nombre de privilèges retirés" +"\n" +" Ajouter un nouvel hôte :\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" msgstr "" -"Durée en secondes à attendre le bon achèvement des requêtes LDAP sortantes " -"de la part d'un replica distant avant mise en échec" - -msgid "Number of variables returned (<= total)" -msgstr "Nombre de variables renvoyées (<= total)" - -msgid "OK" -msgstr "OK" - -msgid "OTP" -msgstr "OTP" - -msgid "OTP Configuration" -msgstr "Configuration pour les mots de passe à usage unique" - -msgid "OTP Token" -msgstr "Jeton OTP" - -msgid "OTP Token Settings" -msgstr "Paramètres de jetons OTP" - -msgid "OTP Tokens" -msgstr "Jetons OTP" - -msgid "OTP configuration options" -msgstr "Options de configuration pour les mots de passe à usage unique" - -msgid "OTP set" -msgstr "OTP configuré" - -msgid "OTP token" -msgstr "jeton OTP" - -msgid "OTP tokens" -msgstr "jetons OTP" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "Classes d'objets à ignorer pour les entrées groupe dans DS" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "Classes d'objets à ignorer pour des entrées utilisateur dans DS" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "Classes d'objets à utiliser pour la recherche d'entrées groupe dans DS" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" -"Classes d'objets à utiliser pour la recherche d'entrées utilisateurs dans DS" - -msgid "Old vault password" -msgstr "Ancien mot de passe du coffre-fort" - -msgid "Old vault private key" -msgstr "Ancienne clé privée du coffre-fort" - -msgid "One Time Password" -msgstr "Mots de passe à usage unique" - -msgid "One of group, permission or self is required" -msgstr "Un parmi « group », « permission » ou « self » est requis" - -msgid "One time password commands" -msgstr "Commandes mots de passe à usage unique (OTP)" - -msgid "Only one value is allowed" -msgstr "Une seule valeur est autorisée" - -msgid "Only one zone type is allowed per zone name" -msgstr "Un seul type de zone autorisé par nom de zone" +"\n" +" Supprimer un hôte :\n" +" ipa host-del test.example.com\n" msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" msgstr "" -"Seules les valeurs « ipa-ad-trust » et « ipa-ad-trust-posix » sont " -"autorisées pour « --range-type » lors de l'ajout d'une relation de confiance " -"AD." - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Système d'exploitation et version de l'hôte (par ex. Fedora 9)" - -msgid "Operating system" -msgstr "Système d'exploitation" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Opération échouée : %s\n" - -msgid "Operations Error" -msgstr "Erreur sur les opérations" - -msgid "Option added" -msgstr "Option ajoutée" - -msgid "Option group" -msgstr "Groupe d'options" +"\n" +" Ajouter un nouvel hôte à l'aide d'un mot de passe à usage unique :\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" msgstr "" -"L'option rid-base ne doit pas être utilisée lorsque le type de plage IPA est " -"ipa-ad-trust-posix" +"\n" +"Ajouter un nouvel hôte avec un mot de passe aléatoire :\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" msgstr "" -"Sous-arbre optionnel de DN dans lequel une entrée peut être déplacée (doit " -"être dans le sous-arbre, mais peut ne pas encore exister)" +"\n" +" Modifier les informations d'un hôte :\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" msgstr "" -"Sous-arbre optionnel de DN dans lequel une entrée peut être déplacée (doit " -"être dans le sous-arbre, mais peut ne pas encore exister)" +"\n" +" Supprimer les clés publiques SSH d'un hôte et modifier DNS en " +"conséquence :\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" msgstr "" -"DN optionnel auquel appliquer les permissions (doit être dans le sous-arbre, " -"mais peut ne pas encore exister)" - -msgid "Options" -msgstr "Options" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" -"Les options dom-sid et dom-name ne peuvent pas être utilisées simultanément" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" -"Les options « dom-sid » et « rid-base » doivent être utilisées simultanément" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" -"Les options « dom-sid » et « secondary-rid-base » ne peuvent pas être " -"utilisées simultanément" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" -"Les options « dom-sid/dom-name » et « rid-base » doivent être utilisées " -"simultanément" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Les options « dom-sid/dom-name » et « secondary-rid-base » ne peuvent pas " -"être utilisées simultanément" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" -"Les options « secondary-rid-base » et « rid-base » doivent être utilisées " -"simultanément" - -msgid "Order" -msgstr "Ordre" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" -"Ordre des utilisateurs SELinux par priorité croissante, délimités par $" - -msgid "Org. Unit" -msgstr "Unité organisationnelle" - -msgid "Organization" -msgstr "Organisation" - -msgid "Organizational Unit" -msgstr "Unité organisationnelle" - -msgid "Origin DN subtree" -msgstr "Sous-arbre des DN origines" - -msgid "Other Record Types" -msgstr "Autres types d'enregistrements" - -msgid "Our domain is not configured" -msgstr "Notre domaine n'est pas configuré" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Mémoire saturée !\n" - -msgid "Out of memory\n" -msgstr "Mémoire saturée\n" - -#, c-format -msgid "Out of memory \n" -msgstr "Mémoire saturée\n" - -#, c-format -msgid "Out of memory!" -msgstr "Mémoire saturée !" - -#, c-format -msgid "Out of memory!\n" -msgstr "Mémoire saturée !\n" - -msgid "Out of memory!?\n" -msgstr "Mémoire saturée !?\n" - -msgid "Output file to store the transport certificate" -msgstr "Fichier où stocker le certificat de transport" - -msgid "Output filename" -msgstr "Nom de fichier de sortie" - -msgid "Output only on errors" -msgstr "N'afficher que les erreurs" +"\n" +"Désactiver la clé Kerberos, les certificats SSL et tout service d'un hôte :\n" +" ipa host-disable test.example.com\n" msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" msgstr "" -"Surcharger la liste par défaut des types PAC pris en charge. Utiliser « NONE " -"» pour désactiver la prise en charge PAC pour ce service, ce qui peut être " -"nécessaire pour les services NFS par exemple." - -msgid "Override existing password" -msgstr "Réécrire le mot de passe existant" - -msgid "Override inherited settings" -msgstr "Surcharger la configuration héritée" - -msgid "Overwrite GID" -msgstr "Surcharger le GID" - -msgid "Owner" -msgstr "Propriétaire" - -#, python-format -msgid "Owner %s" -msgstr "%s propriétaire" - -msgid "Owner groups" -msgstr "Groupes propriétaires" - -msgid "Owner services" -msgstr "Services propriétaires" - -msgid "Owner users" -msgstr "Utilisateurs propriétaires" - -msgid "Owners that could not be added" -msgstr "Propriétaires n'ayant pu être ajoutés" - -msgid "Owners that could not be removed" -msgstr "Propriétaires n'ayant pu être supprimés" - -msgid "PAC type" -msgstr "type de PAC" - -msgid "PAD" -msgstr "PAD" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "POSIX" -msgstr "POSIX" - -msgid "PTR Hostname" -msgstr "Nom d'hôte PTR" - -msgid "PTR record" -msgstr "Enregistrement PTR" - -msgid "Page" -msgstr "Page" - -msgid "Pager Number" -msgstr "Numéro de téléavertisseur" - -msgid "Parameters" -msgstr "Paramètres" - -msgid "Parent map" -msgstr "Carte parente" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" -"Analyser tous les enregistrements DNS et les renvoyer sous forme structurée" - -msgid "Parse error" -msgstr "Erreur d'analyse" - -msgid "Password" -msgstr "Mot de passe" - -msgid "Password Expiration Notification (days)" -msgstr "Notification d'expiration de mot de passe (jours)" - -msgid "Password Policies" -msgstr "Politiques de mot de passe" - -msgid "Password Policy" -msgstr "Politique de gestion des mots de passe" - -msgid "Password can be specified only for symmetric vault" -msgstr "" -"Un mot de passe ne peut être indiqué que pour un coffre-fort symétrique" - -msgid "Password cannot be set on enrolled host." -msgstr "Le mot de passe ne peut être défini pour l'hôte enregistré." - -msgid "Password change complete" -msgstr "Modification du mot de passe terminée" - -msgid "Password expiration" -msgstr "Expiration de mot de passe" - -msgid "Password history size" -msgstr "Taille de l'historique des mots de passe" - -msgid "Password plugin features" -msgstr "Fonctionnalités du greffon mots de passe" - -msgid "Password reset was not successful." -msgstr "La réinitialisation du mot de passe a échoué." - -msgid "Password specified multiple times" -msgstr "Mot de passe indiqué plusieurs fois" - -msgid "Password used in bulk enrollment" -msgstr "Mot de passe utilisé pour les inscriptions en masse" - -msgid "Passwords do not match" -msgstr "Les mots de passe ne correspondent pas" - -msgid "Passwords do not match!" -msgstr "Les mots de passe ne correspondent pas !" +"\n" +" Ajouter un hôte pouvant gérer tableau de clés et certificat d'un hôte " +"donné :\n" +" ipa host-add-managedby --hosts=test2 test\n" msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" msgstr "" -"Les mots de passe ont été migrés dans un format chiffré.\n" -"IPA est incapable de créer des clés Kerberos sauf à\n" -"utiliser les mots de passe en clair. Tous les utilisateurs\n" -"migrés devront se connecter à https://your.domain/ipa/migration/\n" -"avant de pouvoir utiliser leur compte Kerberos." +"\n" +" Autoriser un utilisateur à créer un tableau de clé :\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgid "Passwords must match" -msgstr "Les mots de passe doivent correspondre" +msgid "Base-64 encoded host certificate" +msgstr "Certificat de l'hôte encodé en Base-64" -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Politique de redirection conditionnelle par serveur. Mettre à « none » pour " -"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " -"cas, les redirecteurs de zone conditionnels sont ignorés." - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Redirecteurs par serveur. Un port personnalisé peut être indiqué pour chaque " -"redirecteur avec le format standard « adresse_IP port PORT »" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Politique de redirection conditionnelle par zone. Mettre à « none » pour " -"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " -"cas, les redirecteurs de zone conditionnels sont ignorés." - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Redirecteurs par zone. Un port personnalisé peut être indiqué pour chaque " -"redirecteur avec le format standard « adresse_IP port PORT »" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "Temps après lequel le compteur d'échecs sera réinitialisé (secondes)" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Durée pendant laquelle le verrouillage est actif (secondes)" - -msgid "Permission" -msgstr "Permission" - -msgid "Permission ACI grants access to" -msgstr "L'ACI « permission » permet un accès à" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "Autorisation refusée : %(file)s" - -msgid "Permission flags" -msgstr "Marqueurs de permission" - -msgid "Permission name" -msgstr "Nom de permission" - -msgid "Permission settings" -msgstr "Réglages des permissions" - -msgid "Permission value" -msgstr "Valeur de permission" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" -"Une permission avec un marqueur inconnu %s ne peut pas être modifiée ou " -"supprimée" - -msgid "Permissions" -msgstr "Permissions" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "Permissions à accorder (« read », « write »). Par défaut : « write »." - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" -"Permissions à accorder (« read », « write », « add », « delete », « all »)" - -msgid "Permitted Encryption Types" -msgstr "Type de chiffrements autorisés" - -msgid "Permitted to have certificates issued" -msgstr "Autorisés à se voir émettre des certificats" - -msgid "Ping a remote server." -msgstr "« Ping » sur un serveur distant." - -msgid "Platform" -msgstr "Plate-forme" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Veuillez choisir un type d'enregistrement de ressource DNS à ajouter" - -msgid "Please specify forwarders." -msgstr "Veuillez indiquer les redirecteurs." - -msgid "Please try the following options:" -msgstr "Veuillez essayer les options suivantes :" - -msgid "Policy" -msgstr "Politique" - -msgid "Port" -msgstr "Port" - -msgid "Positional arguments" -msgstr "Arguments positionnels" - -msgid "Pre-authentication is required for the service" -msgstr "Une authentification préalable est requise pour le service" - -msgid "Pre-shared password" -msgstr "Mot de passe pré-partagé" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Le profil prédéfini « %(profile_id)s » ne peut être supprimé" - -msgid "Preference" -msgstr "Préférence" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" -"Préférence donnée à cet échangeur. Les plus petites valeurs sont les " -"premières choisies" - -msgid "Preferred Language" -msgstr "Langue préférée" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Préfixe utilisé pour distinguer les types d'ACI (« permission », " -"« delegation », « selfservice », « none »)" - -msgid "Preserved user" -msgstr "Utilisateurs préservés" - -msgid "Preserved users" -msgstr "Utilisateurs préservés" - -msgid "Prev" -msgstr "Précédent(e)" - -msgid "Primary RID base" -msgstr "Base de RID principale" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "Les plages de RID principales et secondaires ne peuvent se recouvrir" - -msgid "Primary key only" -msgstr "Clé principale uniquement" - -msgid "Principal" -msgstr "Principal" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "Le principal %(principal)s n'a pas pu être authentifié : %(message)s" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" -"Le principal '%(principal)s' n'est pas autorisé à utiliser l'AC '%(ca)s' " -"avec le profil '%(profile_id)s' pour l'émission de certificat." - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" -"Le principal « %s » du nom alternatif ne correspond pas au principal demandé" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Principal de ce certificate (par exemple : HTTP/test.example.com)" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "Le principal n'est pas de la forme user@REALM : « %(principal)s »" - -msgid "Principal name" +#, fuzzy +#| msgid "Principal name" +msgid "Principal alias" msgstr "Nom principal" -msgid "Print as little as possible" -msgstr "Afficher aussi peu que possible" +msgid "SSH public key fingerprint" +msgstr "Empreinte de clé publique SSH" -msgid "Print debugging information" -msgstr "Affiche les informations de débogage" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Afficher les entrées telles qu'enregistrées sur le serveur. Affecte " -"uniquement le format de sortie." - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Affiche la sortie XML-RPC brute en mode GSSAPI" - -msgid "Priority" -msgstr "Priorité" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Priorité de la politique (une valeur élevé indique une priorité basse)" - -msgid "Private key specified multiple times" -msgstr "Clé privée indiquée plusieurs fois" - -msgid "Privilege" -msgstr "Privilège" - -msgid "Privilege Settings" -msgstr "Paramètres du privilège" - -msgid "Privilege Withdrawn" -msgstr "Privilège retiré" - -msgid "Privilege description" -msgstr "Description du privilège" - -msgid "Privilege name" -msgstr "Nom du privilège" - -msgid "Privileges" -msgstr "Privilèges" - -msgid "Profile ID" -msgstr "ID de profil" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"L'identifiant de profil « %(cli_value)s » ne correspond pas aux données du " -"profil « %(file_value)s »" - -msgid "Profile ID for referring to this profile" -msgstr "Identifiant de profil" - -msgid "Profile category" -msgstr "Catégorie de profil" - -msgid "Profile category the ACL applies to" -msgstr "Catégorie de profil à laquelle la LCA s'applique" - -msgid "Profile configuration" -msgstr "Configuration de profil" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Profil de configuration enregistré dans le fichier « %(file)s »" - -msgid "Profile description" -msgstr "Description de profil" - -msgid "Profiles" -msgstr "Profils" - -msgid "Prompt to set the user password" -msgstr "Invite de définition du mot de passe utilisateur" - -msgid "Prospective" -msgstr "Possibilité future" - -msgid "Provisioning" -msgstr "Mise en place des permissions" - -msgid "Public key" -msgstr "Clé publique" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" -"Une clé publique ne peut être indiquée que pour un coffre-fort asymétrique" - -msgid "Public key specified multiple times" -msgstr "Clé publique indiquée plusieurs fois" +msgid "Authentication Indicators" +msgstr "Indicateurs d'authentification" msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." msgstr "" -"La largeur du code QR est supérieure à celle du terminal. Merci d'agrandir " -"votre fenêtre de terminal." - -msgid "Query current Domain Level." -msgstr "Interroger le niveau actuel du domaine." - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"La recherche a renvoyé plus de résultats que le nombre limite configuré. " -"Affichage des ${counter} premiers résultats." - -msgid "Quick Links" -msgstr "Liens rapides" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Mode discret. Seules les erreurs sont affichées." - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "RADIUS Proxy Server Settings" -msgstr "Réglages du serveur mandataire RADIUS" - -msgid "RADIUS Server" -msgstr "Serveur RADIUS" - -msgid "RADIUS Servers" -msgstr "Serveurs RADIUS" - -msgid "RADIUS proxy configuration" -msgstr "Configuration du serveur mandataire RADIUS" - -msgid "RADIUS proxy server" -msgstr "Serveur mandataire RADIUS" - -msgid "RADIUS proxy server name" -msgstr "Nom du serveur mandataire RADIUS" - -msgid "RADIUS proxy servers" -msgstr "Serveurs mandataires RADIUS" - -msgid "RADIUS proxy username" -msgstr "Nom d'utilisateur sur serveur mandataire RADIUS" - -msgid "REST API is not logged in." -msgstr "L'API REST n'est pas connectée." - -msgid "REVOKED" -msgstr "RÉVOQUÉ" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "Domaine Kerberos conforme à la RFC4120" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" -"L'attribut RFC822Name ne correspond à aucune des adresses email de " -"l'utilisateur" - -msgid "RP record" -msgstr "Enregistrement RP" - -msgid "RRSIG record" -msgstr "Enregistrement RRSIG" - -msgid "Random password" -msgstr "Mot de passe aléatoire" - -msgid "Range Settings" -msgstr "Configuration des plages" - -msgid "Range name" -msgstr "Nom de la plage" - -msgid "Range size" -msgstr "Taille de la plage" - -msgid "Range type" -msgstr "Type de plage" #, python-format -msgid "Raw %s records" -msgstr "Enregistrements %s bruts" - -msgid "Raw A records" -msgstr "Enregistrements A bruts" - -msgid "Raw A6 records" -msgstr "Enregistrements A6 bruts" - -msgid "Raw AAAA records" -msgstr "Enregistrements AAAA bruts" - -msgid "Raw AFSDB records" -msgstr "Enregistrements AFSDB bruts" - -msgid "Raw APL records" -msgstr "Enregistrements APL bruts" - -msgid "Raw CERT records" -msgstr "Enregistrements CERT bruts" - -msgid "Raw CNAME records" -msgstr "Enregistrements CNAME bruts" - -msgid "Raw DHCID records" -msgstr "Enregistrements DHCID bruts" - -msgid "Raw DLV records" -msgstr "Enregistrements DLV bruts" - -msgid "Raw DNAME records" -msgstr "Enregistrements DNAME bruts" - -msgid "Raw DNSKEY records" -msgstr "Enregistrements DNSKEY bruts" - -msgid "Raw DS records" -msgstr "Enregistrements DS bruts" - -msgid "Raw HIP records" -msgstr "Enregistrements HIP bruts" - -msgid "Raw IPSECKEY records" -msgstr "Enregistrements IPSECKEY bruts" - -msgid "Raw KEY records" -msgstr "Enregistrements KEY bruts" - -msgid "Raw KX records" -msgstr "Enregistrements KX bruts" - -msgid "Raw LOC records" -msgstr "Enregistrements LOC bruts" - -msgid "Raw MX records" -msgstr "Enregistrements MX bruts" - -msgid "Raw NAPTR records" -msgstr "Enregistrements NAPTR bruts" - -msgid "Raw NS records" -msgstr "Enregistrements NS bruts" - -msgid "Raw NSEC records" -msgstr "Enregistrements NSEC bruts" - -msgid "Raw NSEC3 records" -msgstr "Enregistrements NSEC3 bruts" - -msgid "Raw PTR records" -msgstr "Enregistrements PTR bruts" - -msgid "Raw RP records" -msgstr "Enregistrements RP bruts" - -msgid "Raw RRSIG records" -msgstr "Enregistrements RRSIG bruts" - -msgid "Raw SIG records" -msgstr "Enregistrements SIG bruts" - -msgid "Raw SPF records" -msgstr "Enregistrements SPF bruts" - -msgid "Raw SRV records" -msgstr "Enregistrements SRV bruts" - -msgid "Raw SSHFP records" -msgstr "Enregistrements SSHFP bruts" - -msgid "Raw TA records" -msgstr "Enregistrements TA bruts" - -msgid "Raw TKEY records" -msgstr "Enregistrements TKEY bruts" - -msgid "Raw TLSA records" -msgstr "Enregistrements TLSA bruts" - -msgid "Raw TSIG records" -msgstr "Enregistrements TSIG bruts" - -msgid "Raw target filter" -msgstr "Filtre cible brut" +msgid "Added host \"%(value)s\"" +msgstr "Hôte « %(value)s » ajouté" #, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" -"La valeur brute d'un enregistrement DNS a déjà été configurée avec l'option " -"« %(name)s »" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Rétablissement de la confiance pour le domaine « %(value)s »" - -msgid "Realm Domains" -msgstr "Domaines pour le royaume" - -msgid "Realm administrator password should be specified" -msgstr "Le mot de passe de l'administrateur du domaine doit être indiqué" - -msgid "Realm domains" -msgstr "Domaines du royaume" - -msgid "Realm name" -msgstr "Nom du royaume" - -msgid "Realm-domain mismatch" -msgstr "Incohérence domaine-royaume" - -msgid "Reason" -msgstr "Raison" - -msgid "Reason for Revocation" -msgstr "Raison de la révocation" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Raison de révocation du certificat (0-10)" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" -"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " -"pour plus d'informations sur les raisons de révocation." - -msgid "Rebuild auto membership" -msgstr "Reconstruction des adhésions automatiques" - -msgid "Rebuild auto membership." -msgstr "Reconstruire les appartenances automatiques." - -msgid "Rebuild membership for all members of a grouping" -msgstr "Reconstruire l'appartenance pour tous les membres d'un groupe" - -msgid "Rebuild membership for specified hosts" -msgstr "Reconstruire l'appartenance pour les hôtes indiqués" - -msgid "Rebuild membership for specified users" -msgstr "Reconstruire l'appartenance pour les utilisateurs indiqués " - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "Le nombre maximal d'agréments de réplication est dépassé" - -msgid "Record Type" -msgstr "Type d'enregistrement" - -msgid "Record creation failed." -msgstr "La création de l'enregistrement a échoué." - -msgid "Record data" -msgstr "Données d'enregistrement" - -msgid "Record name" -msgstr "Nom d'enregistrement" - -msgid "Record not found." -msgstr "Enregistrement non trouvé." - -msgid "Record type" -msgstr "Type d'enregistrement" - -msgid "Records" -msgstr "Enregistrements" - -msgid "Records for DNS Zone" -msgstr "Enregistrements pour la zone DNS" - -msgid "Redirection" -msgstr "Redirection" - -msgid "Redirection to PTR record" -msgstr "Redirection vers l'enregistrement PTR" - -msgid "Refresh" -msgstr "Rafraîchir" - -msgid "Refresh list of the domains associated with the trust" -msgstr "Rafraîchir la liste des domaines associés à la relation de confiance" - -msgid "Refresh the page." -msgstr "Rafraîchir la page." - -msgid "Regular Expression" -msgstr "Expression rationnelle" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"Le nom d'enregistrement relatif « %(record)s » contient le nom de la zone " -"« %(zone)s » comme suffixe, ce qui aboutit au FQDN « %(fqdn)s ». Cela " -"constitue généralement une erreur du fait du point final manquant à la fin " -"du nom indiqué." - -msgid "Relative weight for server services (counts per location)" -msgstr "Poids relatifs des services des serveurs (compte par emplacement)" - -msgid "Reload current settings from the server." -msgstr "Recharger la configuration actuelle depuis le serveur." - -msgid "Reload the browser." -msgstr "Recharger le navigateur." - -msgid "Remote IPA server hostname" -msgstr "Nom d'hôte du serveur IPA distant" - -msgid "Remote server name" -msgstr "Nom du serveur distant" +msgid "Deleted host \"%(value)s\"" +msgstr "Hôte « %(value)s » supprimé" msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" msgstr "" "Supprimer les enregistrements A, AAAA, SSHFP et PTR de l'hôte géré par le " "DNS de IPA." -msgid "Remove CAs from a CA ACL." -msgstr "Supprimer des AC d'une LCA d'AC" - -msgid "Remove Kerberos Alias" -msgstr "Supprimer un alias Kerberos" - -msgid "Remove Permission" -msgstr "Supprimer une permission" - -msgid "Remove a manager to the stage user entry" -msgstr "Supprimer un responsable de l'entrée de l'utilisateur en attente." - -msgid "Remove a manager to the user entry" -msgstr "Supprimer un responsable de l'entrée de l'utilisateur" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" -"Supprimer la permission pour une délégation d'accès de zone de redirection." - -msgid "Remove a permission for per-zone access delegation." -msgstr "Supprimer une permission pour une délégation d'accès par zone." - -msgid "Remove all principals in this realm" -msgstr "Supprimer tous les principaux de ce royaume" - -msgid "Remove an option from Sudo Rule." -msgstr "Retirer une option d'une règle sudo." - -msgid "Remove certificates from a service" -msgstr "Supprimer les certificats d'un service" - -msgid "Remove certificates from host entry" -msgstr "Supprimer les certificats de l'entrée de l'hôte" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" -"Retirer des commandes et groupes de commandes sudo affectés par la règle " -"sudo." - -msgid "Remove conditions from an automember rule." -msgstr "Supprimer des conditions d'une règle d'auto-adhésion. " - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" -"Supprimer le groupe par défaut (repli) pour toute entrée sans correspondance." - -msgid "Remove entries from DNS" -msgstr "Supprimer les entrées du DNS" - -msgid "Remove from CRL" -msgstr "Retrait de la LRC" - -msgid "Remove group for Sudo to execute as." -msgstr "Retirer un groupe de sudo pour exécution comme." - -msgid "Remove hold" -msgstr "Supprimer le blocage" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Retirer des hôtes et groupes d'hôtes affectés par la règle sudo." - -msgid "Remove hosts that can manage this host." -msgstr "Supprimer les hôtes qui peuvent gérer cet hôte." - -msgid "Remove hosts that can manage this service." -msgstr "Supprimer des hôtes pouvant administrer ce service." - -msgid "Remove member from a named service delegation rule." -msgstr "Supprimer un membre d'une règle nommée de délégation de service." - -msgid "Remove member from a named service delegation target." -msgstr "Supprimer un membre d'une cible de délégation de service." - -msgid "Remove member from a named service delegation." -msgstr "Retirer des membres d'une délégation de service nommé" - -msgid "Remove members from Sudo Command Group." -msgstr "Supprimer des membres d'un groupe de commandes sudo." - -msgid "Remove members from a group." -msgstr "Supprimer des membres d'un groupe." - -msgid "Remove members from a hostgroup." -msgstr "Supprimer des membres d'un groupe d'hôtes." - -msgid "Remove members from a netgroup." -msgstr "Supprimer des membres d'un groupe réseau." - -msgid "Remove members from a privilege" -msgstr "Supprimer les membres d'un privilège" - -msgid "Remove members from a role." -msgstr "Supprimer des membres d'un rôle." - -msgid "Remove members from a vault." -msgstr "Supprimer les membres d'un coffre-fort." - -msgid "Remove members from an HBAC service group." -msgstr "Supprimer des membres d'un groupe de services HBAC." - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Supprimer les certificats de l'entrée de l'utilisateur surchargé" - -msgid "Remove one or more certificates to the user entry" -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" - -msgid "Remove owners from a vault container." -msgstr "Supprimer des propriétaires d'un conteneur de coffre-fort." - -msgid "Remove owners from a vault." -msgstr "Supprimer les propriétaires d'un coffre-fort." - -msgid "Remove permissions from a privilege." -msgstr "Supprimer des permissions d'un privilège." - -msgid "Remove principal alias from a host entry" -msgstr "Supprimer un alias de principal de l'entrée d'un hôte" - -msgid "Remove principal alias from a service" -msgstr "Supprimer un alias de principal d'un service" - -msgid "Remove privileges from a role." -msgstr "Supprimer des privilèges d'un rôle." - -msgid "Remove profiles from a CA ACL." -msgstr "Retirer des profils d'une LCA d'AC." - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Ajouter des services et des groupes de services d'une règle HBAC." - -msgid "Remove services from a CA ACL." -msgstr "Retirer des services d'une LCA d'AC." - -msgid "Remove target from a named service delegation rule." -msgstr "Supprimer une cible d'une règle nommée de délégation de service." - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Retirer des hôtes et des groupes d'hôtes cibles d'une règle HBAC." - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" -"Supprimer des hôtes et groupes d'hôtes cibles d'une mappe d'utilisateurs " -"SELinux" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Retirer des utilisateurs et groupes affectés par la règle sudo." - -msgid "Remove users and groups for Sudo to execute as." -msgstr "Retirer des utilisateurs et groupes dans sudo pour exécution comme." - -msgid "Remove users and groups from a CA ACL." -msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." - -msgid "Remove users and groups from an HBAC rule." -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" -"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" - -msgid "Remove users that can manage this token." -msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Aucun enregistrement A, AAAA, SSHFP ou PTR trouvé." #, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Alias supprimés pour l'hôte « %(value)s »" +msgid "Modified host \"%(value)s\"" +msgstr "Hôte « %(value)s » modifié" + +msgid "Password cannot be set on enrolled host." +msgstr "Le mot de passe ne peut être défini pour l'hôte enregistré." + +msgid "cn is immutable" +msgstr "cn est immuable" #, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Alias supprimés du principal de service « %(value)s »" +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d hôte correspondant" +msgstr[1] "%(count)d hôtes correspondant" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Hôte « %(value)s » désactivé" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Certificats ajoutés à l'hôte « %(value)s »" #, python-format msgid "Removed certificates from host \"%(value)s\"" msgstr "Certificats supprimés pour l'hôte « %(value)s »" -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur surchargé « %(value)s »" +msgid "Add new principal alias to host entry" +msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Supprimer les certificats du principal de service « %(value)s »" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Alias ajoutés à l'hôte « %(value)s »" + +msgid "Remove principal alias from a host entry" +msgstr "Supprimer un alias de principal de l'entrée d'un hôte" #, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur « %(value)s »" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Alias supprimés pour l'hôte « %(value)s »" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" #, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Conditions supprimées de « %(value)s »" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Groupe « %(value)s » par défaut (repli) supprimé pour l'auto-adhésion" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Option « %(option)s » supprimée de la règle sudo « %(rule)s »" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Permission système « %(value)s » supprimée" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" msgstr "" -"Suppression de %(servers)s de la topologie de réplication, merci de " -"patienter..." +"la priorité doit être une valeur unique (%(prio)d est déjà utilisé par " +"%(gname)s)" -#, c-format -msgid "Removing principal %s\n" -msgstr "Suppression du principal %s\n" - -msgid "Rename" -msgstr "Renommer" - -msgid "Rename an ACI." -msgstr "Renommer une ICA." - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Renomme l'objet %(ldap_obj_name)s" - -msgid "Rename the Group ID override object" -msgstr "Renommer l'objet surcharge d'identifiant de groupe" - -msgid "Rename the ID View object" -msgstr "Renommer l'objet surcharge de vue d'identifiants" - -msgid "Rename the OTP token object" -msgstr "Renommer l'objet jeton OTP" - -msgid "Rename the User ID override object" -msgstr "Renommer l'objet surcharge d'identifiant d'utilisateur" - -msgid "Rename the automount key object" -msgstr "Renommer l'objet clé d'automontage" - -msgid "Rename the group object" -msgstr "Renommer l'objet groupe" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI renommée en « %(value)s »" - -msgid "Renewal master for IPA certificate authority" -msgstr "Maître en charge du renouvellement de l'autorité de certification" - -msgid "Replacement" -msgstr "Remplacement" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." +msgid "Add Class of Service entry" msgstr "" -"La réplique est un serveur de clés DNSSEC actif. Le désinstaller pourrait " -"casser votre système DNS. Merci de d'abord désactiver ou de remplacer votre " -"serveur de clés DNSSEC." -msgid "Replication agreement enabled" -msgstr "Agrément de réplication activé" +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete Class of Service entry" +msgstr "Supprimer un service IPA." -msgid "Replication configuration" -msgstr "Configuration de la réplication" +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify Class of Service entry" +msgstr "Supprimer un groupe de services HBAC." -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgid "Display Class of Service entry" msgstr "" -"Raffraichissement demandé pour la réplication via le segment « %(pkey)s »." -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" -"La topologie de réplication du suffixe « %(suffix)s » contient des erreurs." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "La topologie de réplication du suffixe « %(suffix)s » est en ordre." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" -"Demander une réinitialisation complète du nœud en récupérant les données " -"d'un autre nœud." - -msgid "Request id" -msgstr "Identifiant de la demande" - -msgid "Request is missing \"method\"" -msgstr "Il manque le paramètre « method » à la requête" - -msgid "Request is missing \"params\"" -msgstr "Il manque le paramètre « params » à la requête" - -msgid "Request must be a dict" -msgstr "La requête doit être un dictionnaire" - -msgid "Request status" -msgstr "État de la demande" - -msgid "Required" -msgstr "Requis" - -msgid "Required field" -msgstr "Champ requis" - -msgid "Requires pre-authentication" -msgstr "Nécessite une authentification préalable" - -msgid "Reset" -msgstr "Réinitialiser" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "Réinitialiser la politique de tickets Kerberos." - -msgid "Reset OTP" -msgstr "Remise à zéro OTP" - -msgid "Reset Password" -msgstr "Réinitialiser le mot de passe" - -msgid "Reset your password." -msgstr "Réinitialiser votre mot de passe." - -msgid "Resolve a host name in DNS." -msgstr "Résoudre un nom de système DNS." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "Résoudre un nom de système DNS. (Obsolète)" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" -"Résoudre les identifiants de sécurité des groupes et utilisateurs dans des " -"domaines approuvés" - -msgid "Response from CA was not valid JSON" -msgstr "La réponse de l'AC n'est pas dans un format JSON valide" - -msgid "Restore" -msgstr "Restaurer" - -msgid "Result" -msgstr "Résultat" - -msgid "Result of simulation" -msgstr "Résultat de la simulation" - -msgid "Result of the command" -msgstr "Résultat de la commande" - -msgid "Results are truncated, try a more specific search" -msgstr "Résultats tronqués, essayer un recherche plus précise" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« %s »)" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« anchor »)" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« cn »)" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« command »)" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale (« " -"group »)" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« group-name »)" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« hostname »)" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« id »)" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« location »)" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« map »)" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« name »)" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« sudocmdgroup-name »)" - -msgid "Retries" -msgstr "Tentatives" - -msgid "Retrieve a data from a vault." -msgstr "Récupérer une donnée depuis un coffre-fort" - -msgid "Retrieve an existing certificate." -msgstr "Récupérer un certificat existant." - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Récupérer et afficher tous les attributs à partir du serveur. Affecte la " -"sortie de la commande." - -msgid "Retrieve current keys without changing them" -msgstr "Retrouver les clés courantes sans les modifier" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Donnée récupérée depuis le coffre-fort « %(value)s »" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Échec de la récupération de la chaîne de certificat de l'AC : %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Échec de la récupération de l'état de l'AC avec l'état %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Échec de la récupération de l'état de l'AC : %s" - -msgid "Retry" -msgstr "Réessayer" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "Nouvelle tentative de récupération avec la méthode pre-4.0...\n" - -msgid "Return to the main page and retry the operation" -msgstr "Retourner à la page principale et tenter à nouveau l'opération" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" -"L'enregistrement inverse pour l'adresse IP %(ip)s existe déjà dans la zone " -"inverse %(zone)s." - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" -"La zone inverse %(name)s requiert exactement %(count)d composants d'adresses " -"IP, %(user_count)d donnés" - -msgid "Reverse zone IP network" -msgstr "Réseau IP de zone inverse" - -msgid "Revert" -msgstr "Rétablir" - -msgid "Revocation reason" -msgstr "Raison de la révocation" - -msgid "Revoke" -msgstr "Révoquer" - -msgid "Revoke a certificate." -msgstr "Révoquer un certificat." - -msgid "Revoked" -msgstr "Révoqué" - -msgid "Revoked on from" -msgstr "Révoqué à partir du" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "Révoqué à partir de cette date (AAAA-mm-jj)" - -msgid "Revoked on to" -msgstr "Révoqué jusqu'au" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "Révoqué à cette date (AAAA-mm-jj)" - -msgid "Right node" -msgstr "Nœud de droite" - -msgid "Right replication node - an IPA server" -msgstr "Nœud de réplication à droite - un serveur IPA" - -msgid "Rights" -msgstr "Droits" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "Droits à accorder (read, search, compare, write, add, delete, all)" - -msgid "Role" -msgstr "Rôle" - -msgid "Role Settings" -msgstr "Paramètres du rôle" - -msgid "Role name" -msgstr "Nom du rôle" - -msgid "Role status" -msgstr "État du rôle" - -msgid "Roles" -msgstr "Rôles" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"Le domaine racine de la relation de confiance est toujours activé pour la " -"confiance existante" - -msgid "Rule name" -msgstr "Nom de règle" - -msgid "Rule status" -msgstr "État de la règle" - -msgid "Rule type" -msgstr "Type de règle" - -msgid "Rule type (allow)" -msgstr "Type de règle (allow)" - -msgid "Rules" -msgstr "Règles" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "Règles à tester. Si non précisé, --enabled est implicite" - -msgid "Run Commands" -msgstr "Exécute les commandes" - -msgid "Run Test" -msgstr "Lancer test" - -msgid "Run as a user" -msgstr "Lancer en tant qu'un utilisateur donné" - -msgid "Run as any user within a specified group" -msgstr "Lancer en tant que n'importe quel utilisateur du groupe indiqué" - -msgid "Run with the gid of a specified POSIX group" -msgstr "Lancer avec le GID d'un groupe POSIX donné" - -msgid "RunAs External Group" -msgstr "Groupe « RunAs External »" - -msgid "RunAs External User" -msgstr "Utilisateur « RunAs External »" - -msgid "RunAs Group category" -msgstr "Catégorie « RunAs Group »" - -msgid "RunAs Group category the rule applies to" -msgstr "Catégorie « RunAs Group » à laquelle la règle s'applique" - -msgid "RunAs Groups" -msgstr "« RunAs Groups»" - -msgid "RunAs User category" -msgstr "Catégorie « RunAs User »" - -msgid "RunAs User category the rule applies to" -msgstr "Catégorie « RunAs User » à laquelle la règle s'applique" - -msgid "RunAs Users" -msgstr "« RunAs Users »" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "« RunAsGroup » n'accepte pas « %(name)s » comme nom de groupe" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom de groupe" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom d'utilisateur" - -msgid "SELinux Options" -msgstr "Options SELinux" - -msgid "SELinux User" -msgstr "Utilisateur SELinux" - -msgid "SELinux User Map" -msgstr "Mappe d'utilisateurs SELinux" - -msgid "SELinux User Map rule" -msgstr "Règle de mappe utilisateurs SELinux" - -msgid "SELinux User Map rules" -msgstr "Règles de mappes utilisateurs SELinux" - -msgid "SELinux User Maps" -msgstr "Mappes d'utilisateurs SELinux" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" -"Utilisateur SELinux %(user)s introuvable dans la liste ordonnée (dans la " -"configuration)" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "L'utilisateur SELinux « %(user)s » n'est pas valide : %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" -"L'utilisateur par défaut de la mappe utilisateur SELinux n'est pas dans la " -"liste d'ordre" - -msgid "SELinux user map list not found in configuration" -msgstr "" -"Liste de correspondance d'utilisateurs SELinux introuvable dans cette " -"configuration" - -msgid "SELinux user map order" -msgstr "Ordre de la mappe des utilisateurs SELinux" - -msgid "SHA1 Fingerprint" -msgstr "Empreinte SHA1" - -msgid "SHA256 Fingerprint" -msgstr "Empreinte SHA256" - -msgid "SID" -msgstr "SID" - -msgid "SID blacklist incoming" -msgstr "Entrant dans liste noire de SID" - -msgid "SID blacklist outgoing" -msgstr "Sortant de liste noire de SID" - -msgid "SID does not match any trusted domain" -msgstr "Le SID ne correspond à aucun domaine approuvé" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "Le SID ne correspond exactement à aucun SID du domaine approuvé" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"Impossible de trouver le SID du domaine approuvé désigné. Veuillez indiquer " -"directement le SID avec l'option « dom-sid »." - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" -"Le SID n'est pas reconnu en tant que SID valide pour un domaine approuvé" - -msgid "SID is not valid" -msgstr "Le SID n'est pas valide" - -msgid "SIG record" -msgstr "Enregistrement SIG" - -msgid "SOA class" -msgstr "Classe SOA" - -msgid "SOA expire" -msgstr "Expiration SOA" - -msgid "SOA minimum" -msgstr "Minimum SOA" - -msgid "SOA record class" -msgstr "Classe d'enregistrement SOA " - -msgid "SOA record expire time" -msgstr "Heure d'expiration de l'enregistrement SOA" - -msgid "SOA record refresh time" -msgstr "Durée d'actualisation de l'enregistrement SOA" - -msgid "SOA record retry time" -msgstr "Durée avant nouvel essai d'enregistrement SOA" - -msgid "SOA record serial number" -msgstr "Numéro de série de l'enregistrement SOA" - -msgid "SOA refresh" -msgstr "Actualisation SOA" - -msgid "SOA retry" -msgstr "Nouvel essai SOA" - -msgid "SOA serial" -msgstr "Numéro de série SOA" - -msgid "SPF record" -msgstr "Enregistrement SPF" - -msgid "SRV Port" -msgstr "Port SRV" - -msgid "SRV Priority" -msgstr "Priorité SRV" - -msgid "SRV Target" -msgstr "Cible SRV" - -msgid "SRV Weight" -msgstr "Poids SRV" - -msgid "SRV record" -msgstr "Enregistrement SRV" - -msgid "SSH public key" -msgstr "Clé publique SSH" - -msgid "SSH public key fingerprint" -msgstr "Empreinte de clé publique SSH" - -msgid "SSH public key:" -msgstr "Clé publique SSH :" - -msgid "SSH public keys" -msgstr "Clés publiques SSH" - -msgid "SSHFP Algorithm" -msgstr "Algorithme SSHFP" - -msgid "SSHFP Fingerprint" -msgstr "Empreinte SSHFP" - -msgid "SSHFP Fingerprint Type" -msgstr "Type d'empreinte SSHFP" - -msgid "SSHFP record" -msgstr "Enregistrement SSHFP" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "SSSD n'a pu résoudre l'objet en un SID valide" - -msgid "Salt" -msgstr "Sel" - -#, python-format -msgid "Same as --%s" -msgstr "Identique à --%s" - -msgid "Save" -msgstr "Enregistrer" - -msgid "Search" -msgstr "Rechercher" - -msgid "Search Options" -msgstr "Options de recherche" - -msgid "Search command parameters." -msgstr "Rechercher des paramètres de commandes." - -msgid "Search domains of the trust" -msgstr "Recherches dans les domaines approuvés" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" -"Recherche des %(searched_object)s avec ceux de %(ldap_object)s de " -"%(relationship)s." - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" -"Recherche des %(searched_object)s sans ceux de %(ldap_object)s de " -"%(relationship)s." - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "La recherche de %1$s sur « rootdse » a échoué avec l'erreur %2$d\n" - -msgid "Search for CA ACLs." -msgstr "Rechercher des LCA d'AC." - -msgid "Search for CAs." -msgstr "Rechercher des AC." - -msgid "Search for Certificate Profiles." -msgstr "Rechercher des profils de certificats." - -msgid "Search for DNS forward zones." -msgstr "Rechercher des zones de redirection DNS." - -msgid "Search for DNS resources." -msgstr "Rechercher des enregistrements de ressources DNS." - -msgid "Search for DNS servers." -msgstr "Rechercher des serveurs DNS." - -msgid "Search for DNS zones (SOA records)." -msgstr "Rechercher des zones DNS (enregistrements SOA)." - -msgid "Search for HBAC rules." -msgstr "Rechercher des règles HBAC." - -msgid "Search for HBAC services." -msgstr "Rechercher des services HBAC." - -msgid "Search for IPA locations." -msgstr "Rechercher des emplacements IPA." - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "La recherche du « namingContext » d'IPA a échoué avec l'erreur %d\n" - -msgid "Search for IPA servers." -msgstr "Rechercher des serveurs IPA." - -msgid "Search for IPA services." -msgstr "Rechercher des services IPA." - -msgid "Search for OTP token." -msgstr "Rechercher un jeton OTP" - -msgid "Search for RADIUS proxy servers." -msgstr "Rechercher des serveurs mandataires RADIUS." - -msgid "Search for SELinux User Maps." -msgstr "Rechercher des mappes d'utilisateurs SELinux" - -msgid "Search for Sudo Command Groups." -msgstr "Rechercher des groupes de commandes sudo." - -msgid "Search for Sudo Commands." -msgstr "Rechercher des commandes sudo." - -msgid "Search for Sudo Rule." -msgstr "Rechercher une règle sudo." - -msgid "Search for a netgroup." -msgstr "Rechercher un groupe réseau." - -msgid "Search for a self-service permission." -msgstr "Rechercher des permissions de libre service." - -msgid "Search for an Group ID override." -msgstr "Rechercher une surcharge d'identifiants de groupes" - -msgid "Search for an HBAC service group." +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for Class of Service entry" msgstr "Rechercher des groupes de services HBAC." -msgid "Search for an ID View." -msgstr "Rechercher une vue d'identifiants." +msgid "password policy" +msgstr "politique de mots de passe" -msgid "Search for an ID override." -msgstr "Rechercher une surcharge d'identifiants." +msgid "password policies" +msgstr "politiques de mot de passe" -msgid "Search for an User ID override." -msgstr "Rechercher une surcharge d'identifiants utilisateurs" +msgid "Password Policies" +msgstr "Politiques de mot de passe" -msgid "Search for an automount key." -msgstr "Rechercher une clé « automount »." +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "Renouvellement max." -msgid "Search for an automount location." -msgstr "Rechercher un emplacement « automount »." +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Nombre maximal d'entrées renvoyées" -msgid "Search for an automount map." -msgstr "Rechercher une carte « automount »." +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "Renouvellement max." -msgid "Search for automember rules." -msgstr "Rechercher des règles d'auto-adhésion." - -msgid "Search for command outputs." -msgstr "Rechercher des sorties de commande." - -msgid "Search for commands." -msgstr "Rechercher des commandes." - -msgid "Search for delegations." -msgstr "Rechercher des délégations." - -msgid "Search for existing certificates." -msgstr "Recherche de certificats existants." - -msgid "Search for forward zones only" -msgstr "Rechercher des zones redirigées uniquement" - -msgid "Search for group password policies." -msgstr "Rechercher des politiques de mot de passe de groupe." - -msgid "Search for groups." -msgstr "Rechercher des groupes." - -msgid "Search for help topics." -msgstr "Rechercher des sujets de l'aide." - -msgid "Search for hostgroups." -msgstr "Rechercher un groupe d'hôtes." - -msgid "Search for hosts with these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -msgid "Search for hosts with these member of host groups." -msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." - -msgid "Search for hosts without these member of host groups." -msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." - -msgid "Search for hosts without these member of roles." -msgstr "Rechercher des hôtes sans ces membres de rôles." - -msgid "Search for hosts without these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -msgid "Search for hosts." -msgstr "Rechercher des hôtes." - -msgid "Search for netgroups with these member groups." -msgstr "Rechercher des groupes réseaux dont les membres sont ces groupes." - -msgid "Search for netgroups with these member host groups." +msgid "The max. length of monotonic character sequences (abcd)" msgstr "" -"Rechercher des groupes réseaux dont les membres sont ces groupes d'hôtes." -msgid "Search for netgroups with these member hosts." -msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." - -msgid "Search for netgroups with these member netgroups." +msgid "Dictionary check" msgstr "" -"Rechercher des groupes réseaux dont les membres sont ces groupes réseau." -msgid "Search for netgroups with these member of netgroups." -msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." - -msgid "Search for netgroups with these member users." -msgstr "Rechercher des groupes réseaux dont les membres sont ces utilisateurs." - -msgid "Search for netgroups without these member groups." +msgid "Check if the password is a dictionary word" msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes." -msgid "Search for netgroups without these member host groups." +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Nom d'utilisateur" + +msgid "Check if the password contains the username" msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " -"d'hôtes." -msgid "Search for netgroups without these member hosts." -msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." - -msgid "Search for netgroups without these member netgroups." +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " -"réseau." -msgid "Search for netgroups without these member of netgroups." -msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." - -msgid "Search for netgroups without these member users." +msgid "Maximum password life must be greater than minimum." msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces utilisateurs." +"La durée de vie maximale du mot de passe doit être supérieure au minimum." -msgid "Search for permissions." -msgstr "Recherche des permissions." +msgid "cannot delete global password policy" +msgstr "impossible de supprimer une politique de mot de passe globale" -msgid "Search for privileges." -msgstr "Rechercher des privilèges." +msgid "priority cannot be set on global policy" +msgstr "la priorité ne peut être définie sur la politique globale" -msgid "Search for ranges." -msgstr "Rechercher des plages." - -msgid "Search for roles." -msgstr "Rechercher des rôles." - -msgid "Search for service delegation target." -msgstr "Rechercher des cibles de délégation de service" - -msgid "Search for service delegations rule." -msgstr "Rechercher des règle de délégation de service." - -msgid "Search for stage users." -msgstr "Rechercher des utilisateurs en attente." - -msgid "Search for topology segments." -msgstr "Rechercher des segments de topologie." - -msgid "Search for topology suffices." -msgstr "Rechercher des suffixes de topologie." - -msgid "Search for topology suffixes." -msgstr "Rechercher des suffixes de topologie." - -msgid "Search for trusts." -msgstr "Rechercher des confiances." - -msgid "Search for users." -msgstr "Rechercher des utilisateurs." - -msgid "Search for vaults." -msgstr "Rechercher des coffres-forts" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Les résultats de la recherche ont été tronqués : %(reason)s" - -msgid "Search scope" -msgstr "Étendue de la recherche" - -msgid "Search size limit" -msgstr "Limite de taille d'une recherche" - -msgid "Search time limit" -msgstr "Limite de temps d'une recherche" - -msgid "Second Code" -msgstr "Second code" - -msgid "Second OTP" -msgstr "Deuxième OTP" - -msgid "Secondary RID base" -msgstr "Base de RID secondaire" - -msgid "Seconds Latitude" -msgstr "Secondes de latitude" - -msgid "Seconds Longitude" -msgstr "Secondes de longitude" - -msgid "Secret" -msgstr "Secret" - -msgid "Security Identifier" -msgstr "Identifiant de sécurité" - -msgid "Security Identifiers (SIDs)" -msgstr "Identifiants de sécurité (SID)" - -msgid "Segment details" -msgstr "Information sur le segment" - -msgid "Segment name" -msgstr "Nom de segment" - -msgid "Select All" -msgstr "Tout sélectionner" - -msgid "Select entries to be removed." -msgstr "Sélectionner les entrées à supprimer." - -msgid "Selector" -msgstr "Sélecteur" - -msgid "Self" -msgstr "Moi-même" - -msgid "Self Service Permission" -msgstr "Permission de libre service" - -msgid "Self Service Permissions" -msgstr "Permissions de libre service" - -msgid "Self-service name" -msgstr "Nom de la permission de libre service" +#, fuzzy +#| msgid "" +#| "\n" +#| "Cross-realm trusts\n" +#| "\n" +#| "Manage trust relationship between IPA and Active Directory domains.\n" +#| "\n" +#| "In order to allow users from a remote domain to access resources in IPA\n" +#| "domain, trust relationship needs to be established. Currently IPA " +#| "supports\n" +#| "only trusts between IPA and Active Directory domains under control of " +#| "Windows\n" +#| "Server 2008 or later, with functional level 2008 or later.\n" +#| "\n" +#| "Please note that DNS on both IPA and Active Directory domain sides should " +#| "be\n" +#| "configured properly to discover each other. Trust relationship relies on\n" +#| "ability to discover special resources in the other domain via DNS " +#| "records.\n" +#| "\n" +#| "Examples:\n" +#| "\n" +#| "1. Establish cross-realm trust with Active Directory using AD " +#| "administrator\n" +#| " credentials:\n" +#| "\n" +#| " ipa trust-add --type=ad --admin " +#| "--password\n" +#| "\n" +#| "2. List all existing trust relationships:\n" +#| "\n" +#| " ipa trust-find\n" +#| "\n" +#| "3. Show details of the specific trust relationship:\n" +#| "\n" +#| " ipa trust-show \n" +#| "\n" +#| "4. Delete existing trust relationship:\n" +#| "\n" +#| " ipa trust-del \n" +#| "\n" +#| "Once trust relationship is established, remote users will need to be " +#| "mapped\n" +#| "to local POSIX groups in order to actually use IPA resources. The mapping " +#| "should\n" +#| "be done via use of external membership of non-POSIX group and then this " +#| "group\n" +#| "should be included into one of local POSIX groups.\n" +#| "\n" +#| "Example:\n" +#| "\n" +#| "1. Create group for the trusted domain admins' mapping and their local " +#| "POSIX group:\n" +#| "\n" +#| " ipa group-add --desc=' admins external map' " +#| "ad_admins_external --external\n" +#| " ipa group-add --desc=' admins' ad_admins\n" +#| "\n" +#| "2. Add security identifier of Domain Admins of the to the " +#| "ad_admins_external\n" +#| " group:\n" +#| "\n" +#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#| "Admins'\n" +#| "\n" +#| "3. Allow members of ad_admins_external group to be associated with " +#| "ad_admins POSIX group:\n" +#| "\n" +#| " ipa group-add-member ad_admins --groups ad_admins_external\n" +#| "\n" +#| "4. List members of external members of ad_admins_external group to see " +#| "their SIDs:\n" +#| "\n" +#| " ipa group-show ad_admins_external\n" +#| "\n" +#| "\n" +#| "GLOBAL TRUST CONFIGURATION\n" +#| "\n" +#| "When IPA AD trust subpackage is installed and ipa-adtrust-install is " +#| "run,\n" +#| "a local domain configuration (SID, GUID, NetBIOS name) is generated. " +#| "These\n" +#| "identifiers are then used when communicating with a trusted domain of " +#| "the\n" +#| "particular type.\n" +#| "\n" +#| "1. Show global trust configuration for Active Directory type of trusts:\n" +#| "\n" +#| " ipa trustconfig-show --type ad\n" +#| "\n" +#| "2. Modify global configuration for all trusts of Active Directory type " +#| "and set\n" +#| " a different fallback primary group (fallback primary group GID is used " +#| "as\n" +#| " a primary user GID if user authenticating to IPA domain does not have " +#| "any other\n" +#| " primary GID already set):\n" +#| "\n" +#| " ipa trustconfig-mod --type ad --fallback-primary-group \"alternative " +#| "AD group\"\n" +#| "\n" +#| "3. Change primary fallback group back to default hidden group (any group " +#| "with\n" +#| " posixGroup object class is allowed):\n" +#| "\n" +#| " ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +#| "Group\"\n" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Relations d'approbation entre domaines\n" +"\n" +"Gestion des relations d'approbation entre les domaines IPA et Active " +"Directory.\n" +"\n" +"Pour permettre aux utilisateurs d'un domaine distant l'accès aux ressources\n" +"d'un domaine IPA, des relations d'approbation doivent être établies.\n" +"Actuellement IPA ne prend en charge que les relations d'approbation entre " +"des\n" +"domaines IPA et Active Directory sous le contrôle de Windows Server 2008 ou\n" +"ultérieur, avec le niveau fonctionnel 2008 ou ultérieur.\n" +"\n" +"Veuillez noter que DNS doit être correctement configuré à la fois côté\n" +"domaine IPA et côté Active Directory pour une découverte mutuelle. La\n" +"relation de confiance repose sur la capacité à repérer des ressources\n" +"spéciales dans l'autre domaine via des enregistrements DNS.\n" +"\n" +"Exemples :\n" +"\n" +"1. Établir des relations d'approbation croisées entre royaumes avec Active\n" +"Directory avec les autorisations d'accès d'un administrateur AD :\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. Lister toutes les relations d'approbation existantes :\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Voir les détails d'une relation de confiance donnée :\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Supprimer une relation de confiance existante :\n" +"\n" +" ipa trust-del \n" +"\n" +"Une fois la relation de confiance établie, les utilisateurs distants " +"doivent\n" +"être mis en relation avec des groupes POSIX locaux pour utiliser réellement\n" +"des ressources IPA. La relation doit se faire via l'appartenance à un " +"groupe\n" +"non-POSIX externe, puis ce groupe doit être intégré dans l'un des groupes\n" +"POSIX locaux.\n" +"\n" +"Exemples :\n" +"\n" +"1. Créer un groupe pour la mise en relation avec le domaine approuvé\n" +" « admins » et leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter un identifiant de sécurité de de Domain Admins au\n" +" groupe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à s'associer\n" +" avec le groupe POSIX ad_admins :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe externe « ad_admins_external »\n" +" pour voir leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"CONFIGURATION D'UNE CONFIANCE GLOBALE\n" +"\n" +"Une fois le sous-paquet « IPA AD trust » installé et « ipa-adtrust-" +"install »\n" +"exécuté, une configuration de domaine local (SID, GUID, nom NetBIOS) est\n" +"créée. Ces identifiants sont alors utilisés lors de communications avec un\n" +"domaine approuvé de type particulier.\n" +"\n" +"1. Afficher la configuration de confiance globale pour les types de\n" +" confiance Active Directory :\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modifier la configuration globale de toutes les confiances de type\n" +" Active Directory et définir un groupe principal de recours (le GID du\n" +" groupe principal de recours est utilisé comme GID d'utilisateur " +"principal\n" +" si l'utilisateur s'authentifiant auprès du domaine IPA n'a pas d'autre\n" +" GID principal déjà défini) :\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Revenir au groupe caché par défaut comme groupe de recours principal\n" +" (tout groupe de la classe objet « posixGroup » est autorisé) :\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" #, python-format msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" msgstr "" -"La sémantique de %(label)s a changé. %(current_behavior)s\n" -"%(hint)s" +" De manière alternative, les serveurs suivants sont capables d'exécuter " +"cette commande : %(masters)s" + +msgid "AD Trust setup" +msgstr "Configuration de la confiance AD" msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." msgstr "" -"Liste séparée par des points-virgules d'adresses IP ou de réseaux autorisés " -"à émettre des requêtes" +"Impossible d'effectuer la commande sélectionnée sans installation de " +"Samba 4. Assurez-vous de bien avoir installé sur le serveur le paquet IPA " +"« server-trust-ad »." msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." msgstr "" -"Liste séparée par des points-virgules d'adresses IP ou de réseaux autorisés " -"à effectuer des transferts" - -msgid "Sensitive" -msgstr "Sensible" - -msgid "Serial" -msgstr "Numéro de série" - -msgid "Serial Number" -msgstr "Numéro de série" - -msgid "Serial Number (hex)" -msgstr "Numéro de série (hex)" - -msgid "Serial number" -msgstr "Numéro de série" - -msgid "Serial number (hex)" -msgstr "Numéro de série (hex)" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "Numéro de série en décimal (ou en hexadécimal avec le préfixe 0x)" - -msgid "Server" -msgstr "Serveur" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "Le serveur « %(srv)s » possède %(n)d agréments avec les serveurs :" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "Le serveur %(srv)s ne peut contacter les serveurs : %(replicas)s" - -msgid "Server Name" -msgstr "Nom du serveur" - -msgid "Server Role" -msgstr "Rôle serveur" - -msgid "Server Roles" -msgstr "Rôles serveur" - -msgid "Server has already been deleted" -msgstr "Le serveur a déjà été supprimé" - -msgid "Server location" -msgstr "Emplacement de serveur" - -msgid "Server name" -msgstr "Nom du serveur" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "Nom de serveur non fourni et indisponible\n" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Arrêt brutal de la suppression du serveur : %(reason)s." - -msgid "Server will check DNS forwarder(s)." -msgstr "Le serveur vérifiera le ou les serveurs de redirection DNS." - -msgid "Servers" -msgstr "Serveurs" - -msgid "Servers details:" -msgstr "Informations sur les serveurs :" - -msgid "Servers in location" -msgstr "Serveurs situés à l'emplacement" - -msgid "Servers that belongs to the IPA location" -msgstr "Serveurs appartenants à l'emplacement IPA" - -msgid "Service" -msgstr "Service" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"Le service %(service)s doit être redémarré sur le serveur IPA %(server)s " -"pour permettre la prise en compte de la nouvelle configuration." - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Service « %(service)s » introuvable dans la base de données Kerberos" - -msgid "Service Certificate" -msgstr "Certificat de service" - -msgid "Service Groups" -msgstr "Groupes de services" - -msgid "Service Options" -msgstr "Options du service" - -msgid "Service Settings" -msgstr "Paramètres de service" - -msgid "Service category" -msgstr "Catégorie de service" - -msgid "Service category the ACL applies to" -msgstr "Catégorie de service à laquelle la LCA s'applique" - -msgid "Service category the rule applies to" -msgstr "Catégorie de services à laquelle la règle s'applique" - -msgid "Service delegation rule" -msgstr "Règle de délégation de service" - -msgid "Service delegation rules" -msgstr "Règles de délégation de service" - -msgid "Service delegation target" -msgstr "Cible de délégation de service" - -msgid "Service delegation targets" -msgstr "Cibles de délégation de service" - -msgid "Service group name" -msgstr "Nom de groupe de services HBAC" - -msgid "Service name" -msgstr "Nom de service" - -msgid "Service name of the service vault" -msgstr "Nom de service du service coffre" - -msgid "Service principal" -msgstr "Principal du service" - -msgid "Service principal alias" -msgstr "Alias de principal de service" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Principal de service pour ce certificat (par ex.: HTTP/test.example.com)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Le principal de service n'est pas de la forme : service/fully-qualified host " -"name: %(reason)s" - -msgid "Service relative weight" -msgstr "Poids relatif du service" - -msgid "Service unprovisioned" -msgstr "Permissions du service supprimées" - -msgid "Service weight" -msgstr "Poids du service" +"Impossible d'effectuer la commande sélectionnée sans configuration de Samba " +"4. Assurez-vous de bien avoir configuré ce serveur avec la commande « ipa-" +"adtrust-install »." msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" msgstr "" -"Les options de service(s), d'utilisateur(s) ou de coffres-forts partagé(s) " -"ne peuvent être utilisées simultanément" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" -"Les options de service, d'utilisateur ou de coffre-fort partagé ne peuvent " -"être utilisées simultanément" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" -"Les options de service, de partage et d'utilisateur ne peuvent être " -"utilisées simultanément." - -msgid "Services" -msgstr "Services" - -msgid "Session error" -msgstr "Erreur de session" - -msgid "Session key wrapped with transport certificate" -msgstr "Clé de session emballée avec le certificat de transport" - -msgid "Session timeout" -msgstr "Délai d'expiration de la session" - -msgid "Set" -msgstr "Définir" - -msgid "Set Domain Level" -msgstr "Définir le niveau du domaine" - -msgid "Set OTP" -msgstr "Paramétrer le mot de passe à usage unique" - -msgid "Set SSH key" -msgstr "Définir la clé SSH" - -msgid "Set a user's password." -msgstr "Définir le mot de passe d'un utilisateur." +"Impossible d'effectuer une recherche sur les domaines approuvés sans avoir " +"au préalable configuré son propre domaine. Assurez-vous d'avoir au préalable " +"lancé « ipa-adtrust-install » sur le serveur" msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." +"Fetching domains from trusted forest failed. See details in the error_log" msgstr "" -"Modifie un attribut d'une paire nom/valeur. Le format est attribut=valeur.\n" -"Pour des attributs à valeurs multiples, la commande remplace les valeurs " -"déjà présentes." +"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " +"informations détaillées dans le journal d'erreur." -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" -"Définir un groupe par défaut (repli) pour toutes les entrées sans " -"correspondance." +msgid "trust" +msgstr "confiance" -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" -"Définir le groupe « %(value)s » par défaut (repli) pour l'auto-adhésion" +msgid "trusts" +msgstr "confiances" -msgid "Settings" -msgstr "Paramètres" +msgid "Trust" +msgstr "Confiance" -msgid "Shared secret for the trust" -msgstr "Secret partagé pour la confiance" +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklist incoming" +msgstr "Entrant dans liste noire de SID" -msgid "Shared vault" -msgstr "Coffre-fort partagé" +#, fuzzy +#| msgid "SID blacklist outgoing" +msgid "SID blocklist outgoing" +msgstr "Sortant de liste noire de SID" -msgid "Show" -msgstr "Afficher" +msgid "UPN suffixes" +msgstr "Suffixes UPN" -msgid "Show IPA server." -msgstr "Afficher les informations sur le serveur IPA." +#, fuzzy, python-brace-format +#| msgid "invalid Profile ID" +msgid "invalid SID: {SID}" +msgstr "Identifiant de profil invalide" -msgid "Show QR code" -msgstr "Montrer le code QR" - -msgid "Show Results" -msgstr "Afficher les résultats" - -msgid "Show all loaded plugins." -msgstr "Afficher tous les greffons chargés." - -msgid "Show configuration uri" -msgstr "Afficher l'uri de configuration" - -msgid "Show details" -msgstr "Afficher les détails" - -msgid "Show environment variables." -msgstr "Afficher les variables d'environnement." - -msgid "Show global trust configuration." -msgstr "Afficher la configuration globale des relations d'approbation." - -msgid "Show managed suffix." -msgstr "Afficher le suffixe géré." - -msgid "Show role status on a server" -msgstr "Afficher l'état du rôle sur un serveur" - -msgid "Show the current OTP configuration." -msgstr "Afficher la configuration OTP actuelle." - -msgid "Show the current configuration." -msgstr "Afficher la configuration actuelle." - -msgid "Show the current global DNS configuration." -msgstr "Afficher la configuration DNS globale." - -msgid "Show the list of permitted encryption types and exit" -msgstr "Affiche la liste des types de chiffrement autorisés, et sort." - -msgid "Show vault configuration." -msgstr "Afficher la configuration du coffre-fort." - -msgid "Show/Set key" -msgstr "Afficher/définir la clé" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Affichage des entrées ${start} à ${end} sur ${total}." - -msgid "Simple bind failed\n" -msgstr "Échec de la connexion simple\n" - -msgid "Simulate use of Host-based access controls" -msgstr "Simulation de l'utilisation des contrôles d'accès basées sur les hôtes" - -msgid "Size" -msgstr "Taille" - -msgid "Size Limit" -msgstr "Limitation de taille" - -#, python-format +#, fuzzy +#| msgid "" +#| "\n" +#| "Add new trust to use.\n" +#| "\n" +#| "This command establishes trust relationship to another domain\n" +#| "which becomes 'trusted'. As result, users of the trusted domain\n" +#| "may access resources of this domain.\n" +#| "\n" +#| "Only trusts to Active Directory domains are supported right now.\n" +#| "\n" +#| "The command can be safely run multiple times against the same domain,\n" +#| "this will cause change to trust relationship credentials on both\n" +#| "sides.\n" +#| " " msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " msgstr "" -"La taille des données excède la limite actuelle fixée à %(limit)d octets." +"\n" +"Ajout d'une nouvelle relation de confiance.\n" +"\n" +"Cette commande établit une relation de confiance avec un autre domaine\n" +"qui ainsi devient « de confiance ». En conséquence, des utilisateurs du\n" +"domaine approuvé peuvent avoir accès aux ressources de ce domaine.\n" +"\n" +"Actuellement, seules les relations d'approbation avec les domaines\n" +"Active Directory sont prises en charge.\n" +"\n" +"Cette commande peut être lancée plusieurs fois en toute sécurité à\n" +"l'encontre du même domaine, elle modifiera les références de la relation de\n" +"confiance des deux côtés.\n" +" " -msgid "Size of the ID range reserved for the trusted domain" -msgstr "Taille de la plage d'ID réservée au domaine approuvé" - -msgid "Skip DNS check" -msgstr "Passer la vérification DNS" - -msgid "Skip a check whether the last CA master or DNS server is removed" +msgid "Type of trusted domain ID range, one of allowed values" msgstr "" -"Passer la vérification lorsque le dernier serveur DNS ou AC maître est " -"supprimé" -msgid "Skip overlap check" -msgstr "Passer la vérification de recouvrement" - -#, python-format -msgid "Skipped %(key)s" -msgstr "%(key)s ignoré" - -#, python-format -msgid "Skipped %(map)s" -msgstr "%(map)s ignoré" - -msgid "Some entries were not deleted" -msgstr "Certaines entrées n'ont pas été supprimées" - -msgid "Some operations failed." -msgstr "Certaines opérations ont échoué." - -msgid "Source Host Groups" -msgstr "Groupes d'hôtes sources" - -msgid "Source Hosts" -msgstr "Hôtes sources" - -msgid "Source host" -msgstr "Hôte source" - -msgid "Source host category" -msgstr "Catégorie d'hôtes sources" - -msgid "Source host category the rule applies to" -msgstr "Catégorie d'hôtes sources à laquelle la règle s'applique" - -msgid "Specified CAs" -msgstr "AC indiquées" - -msgid "Specified Commands and Groups" -msgstr "Commandes et groupes définis" - -msgid "Specified Groups" -msgstr "Groupes définis" - -msgid "Specified Hosts and Groups" -msgstr "Hôtes et groupes indiqués" - -msgid "Specified Profiles" -msgstr "Prodils indiqués" - -msgid "Specified Services and Groups" -msgstr "Services et groupes indiqués" - -msgid "Specified Users and Groups" -msgstr "Utilisateurs et groupes indiqués" - -msgid "Specifies where to store keytab information." -msgstr "Indique où stocker l'information du tableau de clés." - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "Définir un ${entity} externe" - -msgid "Stage" -msgstr "Mette en attente" - -msgid "Stage User" -msgstr "Mettre en attente l'utilisateur" - -msgid "Stage Users" -msgstr "Mettre en attente les utilisateurs" - -#, python-format -msgid "Stage user %s activated" -msgstr "Utilisateur en attente %s activé" - -msgid "Stage users" -msgstr "Utilisateurs en attente" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Compte utilisateur en attente « %(value)s »" - -msgid "Standard Record Types" -msgstr "Types d'enregistrement standard" - -msgid "State/Province" -msgstr "État/Province" - -msgid "Status" -msgstr "État" - -msgid "Status of the role" -msgstr "État du rôle" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "Arrêter un rafraichissement en cours du ou des nœuds choisis." - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" -"Arrêt du raffraichissement demandé pour la réplication via le segment « " -"%(pkey)s »." - -msgid "Store issued certificates" -msgstr "Stocker les certificats émis" - -msgid "Street address" -msgstr "Adresse" - -msgid "Structured" -msgstr "Structuré" - -msgid "Subject" -msgstr "Sujet" - -msgid "Subject DN" -msgstr "DN de l'objet" - -msgid "Subject Distinguished Name" -msgstr "Nom distinctif de l'objet" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "Le type %s de nom alternatif de sujet est interdit" - -msgid "Submit a certificate signing request." -msgstr "Soumettre une demande de signature de certificat." - -msgid "Subtree" -msgstr "Sous-arbre" - -msgid "Subtree to apply ACI to" -msgstr "Sous-arbre auquel appliquer l'ACI" - -msgid "Subtree to apply permissions to" -msgstr "Branche à laquelle appliquer les permissions" - -msgid "Subtype" -msgstr "Sous-type" - -msgid "Success" -msgstr "Succès" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Sudo Allow Command Groups" -msgstr "Groupes de commandes « sudo allow »" - -msgid "Sudo Allow Commands" -msgstr "Commandes « sudo allow »" - -msgid "Sudo Command" -msgstr "Commande sudo" - -msgid "Sudo Command Group" -msgstr "Groupe de commandes sudo" - -msgid "Sudo Command Groups" -msgstr "Groupes de commandes sudo" - -msgid "Sudo Commands" -msgstr "Commandes sudo" - -msgid "Sudo Deny Command Groups" -msgstr "Groupes de commandes « sudo deny »" - -msgid "Sudo Deny Commands" -msgstr "Commande « sudo deny »" - -msgid "Sudo Option" -msgstr "Option sudo" - -msgid "Sudo Rule" -msgstr "Règle sudo" - -msgid "Sudo Rules" -msgstr "Règles sudo" - -msgid "Sudo order" -msgstr "Ordre sudo" - -msgid "Suffix name" -msgstr "Nom du suffixe" - -msgid "Superseded" -msgstr "Remplacé" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Type de chiffrements pris en charge :\n" - -msgid "Suppress processing of membership attributes." -msgstr "Suppression du traitement des attributs d'adhésion." - -msgid "Sync OTP Token" -msgstr "Synchroniser le jeton OTP" - -msgid "Synchronize an OTP token." -msgstr "Synchroniser un jeton OTP." - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Erreur de syntaxe : %(error)s" - -msgid "System DNS records updated" -msgstr "Enregistrements DNS du système mis à jour" - -msgid "TA record" -msgstr "Enregistrement TA" - -msgid "TKEY record" -msgstr "Enregistrement TKEY" - -msgid "TLSA Certificate Association Data" -msgstr "Donnée d'association du certificat TLSA" - -msgid "TLSA Certificate Usage" -msgstr "Utilisation du certificat TLSA" - -msgid "TLSA Matching Type" -msgstr "Type de correspondance TLSA" - -msgid "TLSA Selector" -msgstr "Sélecteur TLSA" - -msgid "TLSA record" -msgstr "Enregistrement TLSA" - -msgid "TOTP Synchronization Window" -msgstr "Fenêtre de synchronisation TOTP" - -msgid "TOTP authentication Window" -msgstr "Fenêtre d'authentification TOTP" - -msgid "TOTP authentication time variance (seconds)" -msgstr "Durée de la fenêtre d'authentification TOTP (secondes)" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "Variance temporelle de synchronisation TOTP (secondes)" - -msgid "TOTP token / IPA server time difference" -msgstr "Différence entre le jeton TOTP et le serveur IPA" - -msgid "TSIG record" -msgstr "Enregistrement TSIG" - -msgid "Take a revoked certificate off hold." -msgstr "Ôter un certificat révoqué en attente." - -msgid "Target" -msgstr "Cible" - -msgid "Target DN" -msgstr "DN cible" - -msgid "Target DN subtree" -msgstr "Sous-arbre des DN cibles" - -msgid "Target group" -msgstr "Groupe cible" - -msgid "Target host" -msgstr "Hôte cible" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "Membres cibles d'un groupe (définit « memberof » du filtre cible)" - -msgid "Target reverse zone not found." -msgstr "Zone inverse cible non trouvée." - -msgid "Target your own entry (self)" -msgstr "Cibler votre propre entrée (« self »)" - -msgid "Task DN" -msgstr "DN de la tâche" - -#, python-format -msgid "Task DN = '%s'" -msgstr "DN de la tâche = « %s »" - -msgid "Telephone Number" -msgstr "Numéro de téléphone" - -msgid "Test the ACI syntax but don't write anything" -msgstr "Tester la syntaxe de l'ACI, sans rien écrire" - -msgid "Text Data" -msgstr "Donnée texte" - -msgid "Text does not match field pattern" -msgstr "Le texte ne correspond pas au motif du champ" +msgid "External trust" +msgstr "Relation d'approbation externe" msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." msgstr "" -"L'option « --domain » ne peut être utilisée conjointement avec les options " -"« --add-domain » or « --del-domain ». Utilisez « --domain » pour indiquer " -"explicitement la liste complète des domaines du royaume, utilisez « --add-" -"domain » et « --del-domain » pour ajouter et supprimer les domaines de " -"manière individuelle." +"Établit une relation d'approbation externe vers un domaine dans une autre " +"forêt. La relation n'est pas transitive au delà du domaine." #, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "L'ACI de la permission %(name)s n'a pas été trouvée dans %(dn)s " - -msgid "The IPA realm" -msgstr "Le domaine IPA" +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Confiance Active Directory ajoutée pour le royaume « %(value)s »" #, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Rétablissement de la confiance pour le domaine « %(value)s »" + +msgid "missing base_id" +msgstr "« base_id » manquant" + +msgid "pysss_murmur is not available on the server and no base-id is given." msgstr "" -"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être créé " -"(%(error)s).\n" -"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de créer " -"manuellement l'enregistrement, qui doit contenir la valeur suivante : " -"« %(realm)s »" +"« pysss_murmur » non disponible sur le serveur et aucun « base-id » fourni." -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être supprimé " -"(%(error)s).\n" -"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de le supprimer " -"manuellement." +msgid "trust type" +msgstr "type de confiance" -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "La clé « automount » %(key)s avec l'info %(info)s n'existe pas" +msgid "only \"ad\" is supported" +msgstr "seul « ad » est pris en charge" -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "Le caractère « %(char)r » n'est pas autorisé." - -msgid "The default users group cannot be removed" -msgstr "Le groupe par défaut ne peut être supprimé" - -msgid "The deny type has been deprecated." -msgstr "Le type « deny » est obsolète." +msgid "domain" +msgstr "domaine" msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." msgstr "" -"Le nom de domaine de l'hôte cible ou '.' si le service n'est vraiment pas " -"disponible dans ce domaine" +"Impossible d'établir une relation d'approbation vers un AD déployé dans le " +"même domaine que IPA. Une telle configuration ne peut être prise en charge." -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" -"Les domaines suivants n'appartiennent pas à ce domaine Kerberos : %(domains)s" - -msgid "The group doesn't exist" -msgstr "Le groupe n'existe pas" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "L'hôte « %s » auquel ajouter un service n'existe pas." - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Le nom d'hôte doit être pleinement qualifié : %s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Le nom d'hôte ne doit pas être : %s\n" - -msgid "The hostname or IP (with or without port)" -msgstr "Nom d'hôte ou adresse IP (avec ou sans port)" - -msgid "The hostname this reverse record points to" -msgstr "Le nom d'hôte vers lequel cet enregistrement inverse pointe" - -msgid "The hostname to register as" -msgstr "Le nom d'hôte sous lequel enregistrer" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" -"La paire « key/info » doit être unique. Une clé nommée %(key)s avec l'info" -"%(info)s existe déjà." - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" -"Le fichier tableau de clés duquel il faut retirer le principal ou les " -"principaux." - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Les types les plus courants pour ce type de zone sont : %s\n" - -msgid "The number of times to retry authentication" -msgstr "Le nombre de fois autorisées pour tenter une authentification" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"La valeur de la clé principale de l'entrée, par ex. « jdoe » pour un " -"utilisateur" - -msgid "The principal for this request doesn't exist." -msgstr "Le principal pour cette demande n'existe pas." - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Le principal pour lequel obtenir un tableau de clés (par ex: ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Le principal à supprimer d'un tableau de clés (par ex. : ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Le domaine du principal ne correspond pas au domaine de ce serveur IPA" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"Le domaine Kerberos des domaines suivants ne peuvent être détectés : " -"%(domains)s. S'il existe des domaines appartenant à ce royaume, merci de " -"créer un enregistrement TXT kerberos contenant « %(realm)s » dans chacun " -"d'entre eux." - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"Le schéma utilisé sur le serveur LDAP. Les valeurs prises en charge sont " -"RFC2307 et RFC2307bis. La valeur par défaut est RFC2307bis" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"Le critère de recherche n'est pas suffisamment précis. Une valeur attendue, " -"mais %(found)d trouvées." - -msgid "The secret used to encrypt data" -msgstr "Secret utilisé pour chiffrer les données" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" -"Le principal du service pour le nom %s alternatif du sujet dans la demande " -"de certificat n'existe pas" - -msgid "The topic or command name." -msgstr "Le nom du thème ou de la commande." - -msgid "The total timeout across all retries (in seconds)" -msgstr "Délai d'expiration total pour toutes les tentatives (en secondes)" - -msgid "The username attribute on the user object" -msgstr "L'attribut de nom d'utilisateur de l'objet utilisateur" - -msgid "The username, password or token codes are not correct" -msgstr "" -"Le nom d'utilisateur, mot de passe ou code du jeton ne sont pas corrects" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Cette commande ne peut être utilisée que pour modifier l'allocation d'ID " -"pour le domaine local. Utilisez « ipa help idrange » pour plus " -"d'informations." - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Cette commande s'appuie sur l'existence du groupe « editors », mais ce " -"groupe n'a pas été trouvé." - -msgid "This command requires root access" -msgstr "Cette commande requiert un accès administrateur" - -msgid "This entry already exists" -msgstr "Cette entrée existe déjà" - -msgid "This entry cannot be enabled or disabled" -msgstr "Cette entrée ne peut être activée ou désactivée" - -msgid "This entry is already a member" -msgstr "Cette entrée est déjà membre" - -msgid "This entry is already disabled" -msgstr "Cette entrée est déjà désactivée" - -msgid "This entry is already enabled" -msgstr "Cette entrée est déjà activée" - -msgid "This entry is not a member" -msgstr "Cette entrée n'est pas un membre" - -msgid "This group already allows external members" -msgstr "Ce groupe autorise déjà des membres externes" - -msgid "This group cannot be posix because it is external" -msgstr "Ce groupe ne peut être de type POSIX car il est externe" - -msgid "This is already a posix group" -msgstr "Ce groupe est déjà de type POSIX" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" -"Ce groupe est déjà de type POSIX et ne peut être converti en groupe externe" - -msgid "This may take some time, please wait ..." -msgstr "Cela peut prendre un peu de temps, veuillez patienter..." - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" -"Cette page comporte des modifications non-sauvegardées. Veuillez les " -"enregistrer ou les annuler." - -msgid "Ticket expired" -msgstr "Ticket périmé" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "La politique de ticket pour %s ne peut pas être lue" - -msgid "Time Limit" -msgstr "Limitation de durée" - -msgid "Time limit of search in seconds" -msgstr "Limite de la durée de la recherche en secondes" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Limite de la durée de la recherche en secondes (0 pour illimité)" - -msgid "Time now" -msgstr "Heure actuelle" - -msgid "Time to live" -msgstr "Durée de vie" - -msgid "Time to live for records at zone apex" -msgstr "Durée de vie des enregistrements en sommet de zone" - -msgid "Time-based (TOTP)" -msgstr "Jetons temporels (TOTP)" - -msgid "Timeout" -msgstr "Délai d'expiration" - -#, c-format -msgid "Timeout exceeded." -msgstr "Délai d'attente dépassé." +msgid "Realm-domain mismatch" +msgstr "Incohérence domaine-royaume" msgid "" "To establish trust with Active Directory, the domain name and the realm name " @@ -15952,109 +29905,6 @@ msgstr "" "Pour établir la confiance avec Active Directory, le nom de domaine et le nom " "de royaume du serveur IPA doivent correspondre" -msgid "To get command help, use:" -msgstr "Pour obtenir de l'aide, utiliser :" - -msgid "Token ID" -msgstr "ID du jeton" - -msgid "Token description (informational only)" -msgstr "Description du jeton (à titre d'information)" - -msgid "Token hash algorithm" -msgstr "Algorithme de hachage du jeton" - -msgid "Token model (informational only)" -msgstr "Modèle du jeton (à titre d'information)" - -msgid "Token secret (Base32; default: random)" -msgstr "Secret du jeton (Base32 ; par défaut : aléatoire)" - -msgid "Token serial (informational only)" -msgstr "Numéro de série du jeton (à titre d'information)" - -msgid "Token synchronization failed" -msgstr "Échec de synchronisation du jeton" - -msgid "Token vendor name (informational only)" -msgstr "Nom du fabricant du jeton (à titre d'information)" - -msgid "Token was synchronized" -msgstr "Jeton synchronisé" - -msgid "Topic commands:" -msgstr "Commandes du thème :" - -msgid "Topic or Command" -msgstr "Thème ou commande" - -msgid "Topology" -msgstr "Topologie" - -msgid "Topology Segment" -msgstr "Segment de topologie" - -msgid "Topology Segments" -msgstr "Segments de topologie" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" -"La topologie ne permet pas au serveur %(server)s de se répliquer avec les " -"serveurs :" - -msgid "Topology is disconnected" -msgstr "La topologie est déconnectée" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "La gestion de la topologie nécessite le niveau de domaine minimal {0}" - -msgid "Topology suffix" -msgstr "Suffixe de topologie" - -msgid "Topology suffixes" -msgstr "Suffixes de topologie" - -msgid "Total number of variables env (>= count)" -msgstr "Nombre total de variables d'environnement (>= count)" - -msgid "Transport Certificate" -msgstr "Certificat de transport" - -msgid "True" -msgstr "Vrai" - -msgid "True if not all results were returned" -msgstr "Vrai si tous les résultats n'ont pas été renvoyés" - -msgid "True means the operation was successful" -msgstr "Vrai signifie que l'opération a réussi" - -msgid "Trust" -msgstr "Confiance" - -msgid "Trust Settings" -msgstr "Configuration de la confiance" - -msgid "Trust direction" -msgstr "Sens de la confiance" - -msgid "Trust setup" -msgstr "Configuration des relations d'approbation" - -msgid "Trust status" -msgstr "État de la confiance" - -msgid "Trust type" -msgstr "Type de confiance" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "Type de confiance (par défaut, ad pour Active Directory)" - -msgid "Trusted domain" -msgstr "domaine approuvé" - #, python-format msgid "" "Trusted domain %(domain)s is included among IPA realm domains. It needs to " @@ -16071,764 +29921,173 @@ msgstr "" "Le domaine approuvé et le compte administrateur utilisent des domaines " "différents" -msgid "Trusted domain did not return a unique object" -msgstr "Le domaine approuvé n'a pas renvoyé un objet unique" +msgid "Realm administrator password should be specified" +msgstr "Le mot de passe de l'administrateur du domaine doit être indiqué" -msgid "Trusted domain did not return a valid SID for the object" -msgstr "Le domaine approuvé n'a pas renvoyé un SID valide pour l'objet" - -msgid "Trusted domain partner" -msgstr "Partenaire de domaine approuvé" - -msgid "Trusted domains" -msgstr "domaines approuvés" - -msgid "Trusted for delegation" -msgstr "Approuvé pour délégation." - -msgid "Trusted forest" -msgstr "Forêt de confiance" - -msgid "Trusting forest" -msgstr "Forêt en cours de mise en confiance" - -msgid "Trusts" -msgstr "Confiances" - -msgid "Two factor authentication (password + OTP)" -msgstr "Authentification à deux-facteurs" - -msgid "Two-way trust" -msgstr "Confiance réciproque" - -msgid "Type" -msgstr "Type" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" -"Type d'objets IPA (définit le sous-arbre et le filtre cible de la classe " -"d'objets)" - -msgid "Type of the token" -msgstr "Type du jeton" - -msgid "Types of supported user authentication" -msgstr "Types d'authentification utilisateur pris en charge" - -msgid "UID" -msgstr "UID" - -msgid "UPN suffixes" -msgstr "Suffixes UPN" - -msgid "URI" -msgstr "URI" - -msgid "URL" -msgstr "URL" - -msgid "Un-apply" -msgstr "Ne plus appliquer" - -msgid "Un-apply ID Views from hosts" -msgstr "Retirer l'application de la vue d'identifiants d'hôtes" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" -"Retire l'application de la vue d'identifiants des hôtes de groupes d'hôtes" - -msgid "Un-apply from host groups" -msgstr "Ne plus appliquer aux groupes d'hôtes" - -msgid "Un-apply from hosts" -msgstr "Ne plus appliquer aux hôtes " - -msgid "Unable to communicate with CMS" -msgstr "Impossible de communiquer avec le CMS" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Impossible de communiquer avec le CMS (état %d)" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" -"Impossible de créer un groupe privé. Un groupe '%(group)s' existe déjà." - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "Impossible de déterminer le serveur IPA depuis %s\n" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Impossible de savoir si le principal Kerberos %s existe déjà. Utiliser la " -"commande 'ipa user-mod' pour le définir manuellement." - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Impossible de déterminer le DN racine de %s\n" +msgid "id range type" +msgstr "type de plage d'id" msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." msgstr "" -"Impossible d'afficher le code QR avec l'encodage configuré sur la sortie. " -"Merci d'utiliser l'URI du jeton pour configurer votre jeton OTP" +"Seules les valeurs « ipa-ad-trust » et « ipa-ad-trust-posix » sont " +"autorisées pour « --range-type » lors de l'ajout d'une relation de confiance " +"AD." -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Impossible d'activer SSL dans LDAP\n" +msgid "id range" +msgstr "plage id" -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Impossible de créer le cache des justificatifs d'identité Kerberos\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Impossible d'initialiser la bibliothèque LDAP !\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"Impossible de joindre l'hôte : cache des justificatifs d'identité Kerberos " -"introuvable\n" - -#, c-format msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." msgstr "" -"Impossible de joindre l'hôte : principal d'utilisateur Kerberos introuvable " -"et mot de passe non fourni.\n" +"Une plage d'identifiants existe déjà pour cette relation de confiance. Vous " +"devez soit supprimer l'ancienne plage, soit exclure les options « --base-" +"id » ou « --range-size » de la commande." -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" +msgid "range exists" +msgstr "la plage existe" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." msgstr "" -"Impossible de joindre l'hôte : l'initialisation du contexte Kerberos a " -"échoué\n" +"Une plage d'ID avec le même nom, mais pour un SID de domaine différent " +"existe déjà. La plage d'ID pour le nouveau domaine approuvé doit être créée " +"manuellement." -#, c-format -msgid "Unable to parse principal\n" -msgstr "Impossible d'analyser le principal\n" +msgid "range type change" +msgstr "modifier le type de plage" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Impossible d'analyser le nom du principal\n" +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"La plage ID existe déjà pour ce domaine approuvé, mais est d'un type " +"différent. Vous devez soit supprimer l'ancienne plage manuellement, soit ne " +"pas forcer le type via l'option « --range-type »." -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Impossible d'analyser le principal : %1$s (%2$d)\n" +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" -#, c-format -msgid "Unable to remove entry\n" -msgstr "Impossible de supprimer l'entrée\n" +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"La politique de redirection est définie pour lui dans le DNS d'IPA, peut-" +"être le redirecteur pointe-t'il vers un hôte incorrect ?" -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "Impossible de définir LDAP_OPT_PROTOCOL_VERSION\n" +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "Impossible de définir LDAP_OPT_X_SASL_NOCANON\n" +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" msgid "Unable to verify write permissions to the AD" msgstr "Impossible de vérifier les permissions en écriture vers AD" -msgid "Undelete a delete user account." -msgstr "Restaurer un compte utilisateur supprimé." +msgid "Not enough arguments specified to perform trust setup" +msgstr "Arguments insuffisants pour établir la relation de confiance" #, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » restauré" - -msgid "Undo" -msgstr "Annuler" - -msgid "Undo All" -msgstr "Tout annuler" - -msgid "Undo all changes in this field." -msgstr "Annuler toutes les modifications dans ce champ." - -msgid "Undo this change." -msgstr "Annuler cette modification." - -msgid "Unenroll this host from IPA server" -msgstr "Désinscrire cet hôte du serveur IPA" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Échec de la désinscription.\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Désinscription réussie.\n" - -msgid "Unique ID" -msgstr "ID unique" - -msgid "Unknown" -msgstr "Inconnu" - -msgid "Unknown Error" -msgstr "Erreur inconnue" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Option inconnue : %(option)s" - -msgid "Unlock" -msgstr "Déverrouiller" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » déverrouillé" - -msgid "Unmatched" -msgstr "Pas de correspondance" - -msgid "Unprovision" -msgstr "Suppression des permissions" - -msgid "Unresolved rules in --rules" -msgstr "Règles non résolues dans « --rules »" - -msgid "Unrevoked" -msgstr "Réintégré" - -msgid "Unsaved Changes" -msgstr "Modifications non sauvegardées" - -msgid "Unselect All" -msgstr "Tout désélectionner" - -msgid "Unspecified" -msgstr "Non-spécifié" - -msgid "Unsupported value" -msgstr "Valeur non prise en charge" - -msgid "Update" -msgstr "Modifier" - -msgid "Update DNS entries" -msgstr "Mettre à jour les entrées DNS" - -msgid "Update System DNS Records" -msgstr "Mettre à jour les enregistrements DNS du serveur" - -msgid "Update location and IPA server DNS records" -msgstr "Mettre à jour les enregistrements DNS des emplacements et serveurs IPA" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"Échec de la à jour de l'enregistrement du système « %(record)s », erreur : " -"%(error)s" - -msgid "User" -msgstr "Utilisateur" - -msgid "User Group" -msgstr "Groupe d'Utilisateurs" - -msgid "User Groups" -msgstr "Groupes d'utilisateurs" - -msgid "User ID" -msgstr "Identifiant utilisateur" - -msgid "User ID Number" -msgstr "Numéro d'identifiant utilisateur" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Numéro identifiant d'utilisateur (le système en assigne un si non défini)" - -msgid "User ID override" -msgstr "Surcharge d'identifiant utilisateur" - -msgid "User ID overrides" -msgstr "Surcharges d'identifiants utilisateurs" - -msgid "User Options" -msgstr "Options utilisateurs" - -msgid "User attribute" -msgstr "Attribut utilisateur" - -msgid "User authentication types" -msgstr "Types d'authentification utilisateur" - -msgid "User categories" -msgstr "Catégories d'utilisateurs" - -msgid "User category" -msgstr "Catégorie d'utilisateur" +msgid "Deleted trust \"%(value)s\"" +msgstr "Confiance « %(value)s » supprimée" msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " msgstr "" -"Catégorie d'utilisateurs (la sémantique associée à cet attribut est " -"interprétée localement)" +"\n" +" Modifier la confiance (pour utilisation future).\n" +"\n" +" Actuellement seule l'option par défaut pour modifier les attributs LDAP\n" +" est disponible. D'autres options particulières seront ajoutées\n" +" dans les versions à venir.\n" +" " -msgid "User category the ACL applies to" -msgstr "Catégorie d'utilisateur à laquelle la LCA s'applique" - -msgid "User category the rule applies to" -msgstr "Catégorie d'utilisateurs à laquelle la règle s'applique" - -msgid "User container" -msgstr "Conteneur d'utilisateur" - -msgid "User group" -msgstr "Groupe d'utilisateurs" - -msgid "User group ACI grants access to" -msgstr "L'ACI d'un groupe utilisateur permet un accès à" - -msgid "User group rule" -msgstr "Règle de groupe utilisateur" - -msgid "User group rules" -msgstr "Règles de groupes d'utilisateurs" - -msgid "User group to apply delegation to" -msgstr "Groupe d'utilisateur auquel s'applique la délégation" - -msgid "User group to apply permissions to (sets target)" +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" msgstr "" -"Groupe d'utilisateurs auquel appliquer les permissions (définit « target »)" +"Relation de confiance « %(value)s » modifiée (la modification sera effective " +"dans 60 secondes)" -msgid "User login" -msgstr "Identifiant de connexion" +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d confiance correspondante" +msgstr[1] "%(count)d confiances correspondantes" -msgid "User name" -msgstr "Nom d'utilisateur" +msgid "trust configuration" +msgstr "configuration des relations d'approbation" -msgid "User object class" -msgstr "Classe d'objets utilisateur" +msgid "Global Trust Configuration" +msgstr "Configuration globale des relations d'approbation" -msgid "User object overrides" -msgstr "Surcharges des objets utilisateurs" +msgid "IPA AD trust agents" +msgstr "Agents IPA de relation d'approbation AD" -msgid "User password" -msgstr "Mot de passe utilisateur" +msgid "IPA servers configured as AD trust agents" +msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" -msgid "User search fields" -msgstr "Champs de recherche utilisateur" +msgid "IPA AD trust controllers" +msgstr "Contrôleurs IPA de relation d'approbation AD" -msgid "User to override" -msgstr "Utilisateurs à surcharger" +msgid "IPA servers configured as AD trust controllers" +msgstr "Serveurs IPA configurés comme contrôleurs de relation d'approbation AD" -msgid "User-friendly description of action performed" -msgstr "Description intelligible de l'action effectuée" +msgid "unsupported trust type" +msgstr "type de relation de confiance non pris en charge" -msgid "User-specified attributes to which the permission applies" -msgstr "Attributs propres à un utilisateur auxquels la permission s'applique" +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Configuration de la relation de confiance « %(value)s » modifiée." + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "« sidgen_was_run »" msgid "" -"User-specified attributes to which the permission explicitly does not apply" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." msgstr "" -"Attributs propres à un utilisateur auxquels la permission ne s'applique " -"explicitement pas" +"Cette commande s'appuie sur l'existence du groupe « editors », mais ce " +"groupe n'a pas été trouvé." -msgid "Username" -msgstr "Nom d'utilisateur" +msgid "trust domain" +msgstr "domaine approuvé" -msgid "Username of the user vault" -msgstr "Nom d'utilisateur du coffre-fort personnel" +msgid "trust domains" +msgstr "domaines approuvés" -msgid "Users" -msgstr "Utilisateurs" +msgid "Trusted domains" +msgstr "domaines approuvés" -msgid "Users allowed to create keytab" -msgstr "Utilisateurs autorisés à créer un tableau de clés" +msgid "Trusted domain" +msgstr "domaine approuvé" -msgid "Users allowed to retrieve keytab" -msgstr "Utilisateurs autorisés à récupérer un tableau de clés" - -msgid "Valid Certificate Present" -msgstr "Certificat valide présent" - -msgid "Valid from" -msgstr "Valide à partir du" - -msgid "Valid not after from" -msgstr "Invalide après à partir du" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "Valide à partir de cette date (AAAA-mm-jj)" - -msgid "Valid not after to" -msgstr "Invalide après jusqu'au" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "Valide jusqu'à cette date (AAAA-mm-jj)" - -msgid "Valid not before from" -msgstr "Invalide avant à partir du" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "Valide à partir de cette date (AAAA-mm-jj), non valide avant" - -msgid "Valid not before to" -msgstr "Invalide avant jusqu'au" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "Valide à cette date (AAAA-mm-jj), non valide avant" - -msgid "Valid to" -msgstr "Valide jusqu'au" - -msgid "Validation error" -msgstr "Erreur de validation" - -msgid "Validity" -msgstr "Validité" - -msgid "Validity end" -msgstr "Fin de validation" - -msgid "Validity start" -msgstr "Départ de validation" - -msgid "Vault" -msgstr "Coffre-fort" - -msgid "Vault Container" -msgstr "Conteneur de coffres-forts" - -msgid "Vault Containers" -msgstr "Conteneurs de coffres-forts" - -msgid "Vault configuration" -msgstr "Configuration du coffre-fort" - -msgid "Vault data encrypted with session key" -msgstr "Les données du coffre-fort sont chiffrées avec la clé de session" - -msgid "Vault description" -msgstr "Description du coffre-fort" - -msgid "Vault name" -msgstr "Nom du coffre-fort" - -msgid "Vault password" -msgstr "Mot de passe du coffre-fort" - -msgid "Vault private key" -msgstr "Clé privée du coffre-fort" - -msgid "Vault public key" -msgstr "Clé publique du coffre-fort" - -msgid "Vault salt" -msgstr "Sel du coffre-fort" - -msgid "Vault service" -msgstr "Service du coffre-fort" - -msgid "Vault type" -msgstr "Type de coffre-fort" - -msgid "Vault user" -msgstr "Utilisateur du coffre-fort" - -msgid "Vaults" -msgstr "Coffres-forts" - -msgid "Vendor" -msgstr "Fournisseur" - -msgid "Verify Password" -msgstr "Vérifier le mot de passe" - -msgid "Verify Principal Password" -msgstr "Vérifier le mot de passe du principal" - -msgid "Version" -msgstr "Version" - -msgid "Vertical Precision" -msgstr "Précision verticale" - -msgid "Via Service" -msgstr "Via le service" - -msgid "View" -msgstr "Afficher" - -msgid "View Certificate" -msgstr "Afficher le certificat" - -msgid "Waiting for confirmation by remote side" -msgstr "En attente de confirmation par la partie distante" - -msgid "Warning" -msgstr "Attention" - -msgid "Warning unrecognized encryption type.\n" -msgstr "Avertissement, type de chiffrement inconnu.\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "Avertissement, type « salt » inconnu.\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Avertissement : échec de conversion de type (#%d)\n" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Avertissement : les types « salt » ne sont pas traités avec des mots de " -"passe aléatoires (cf. option -P)\n" - -msgid "Weight" -msgstr "Poids" - -msgid "Weight for server services" -msgstr "Poids des services des serveurs" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" -"Lors de la migration d'un groupe existant déjà dans le domaine IPA, " -"surcharger le GID du groupe et renvoyer un succès" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" -"Activation ou non d'un agrément de réplication, signifiant que la " -"réplication fonctionne par le biais de cet agrément" - -msgid "Whether to store certs issued using this profile" -msgstr "Stocker ou non les certificats émis à partir de ce profil" - -msgid "Who" -msgstr "Qui" - -msgid "Working" -msgstr "Travail en cours" - -msgid "Write profile configuration to file" -msgstr "Écrire le profil de configuration dans un fichier" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"Vous essayez de référencer un groupe privé magique qui ne peut être " -"surchargé. Essayez plutôt de surcharger l'attribut GID de l'utilisateur." - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" -"Vous pouvez utiliser FreeOTP comme " -"application de jeton logiciel OTP." - -msgid "You may need to manually remove them from the tree" -msgstr "Vous pouvez avoir besoin de les supprimer manuellement de l'arbre" - -msgid "You must enroll a host in order to create a host service" -msgstr "Vous devez enregistrer un hôte afin de créer un service" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Vous devez préciser les deux options « rid-base » et « secondary-rid-base », " -"car « ipa-adtrust-install » a déjà été exécuté." - -msgid "You will be redirected to DNS Zone." -msgstr "Vous allez être redirigé vers la zone DNS." - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Votre mot de passe expire dans ${days} jours." +msgid "Domain enabled" +msgstr "Domaine activé" #, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Votre relation d'approbation avec %(domain)s est cassée. Merci de la recréer " -"à l'aide de « ipa trust-add »." - -msgid "YubiKey slot" -msgstr "Connecteur YubiKey" - -msgid "ZIP" -msgstr "Code postal" - -msgid "Zone forwarders" -msgstr "Redirection de zone" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "Zone trouvée : ${zone}" - -msgid "Zone name" -msgstr "Nom de zone" - -msgid "Zone name (FQDN)" -msgstr "Nom de zone (FQDN)" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "L'enregistrement '%s' de zone ne peut être supprimé" - -msgid "Zone refresh interval" -msgstr "Intervalle de rafraîchissement de zone" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "Échec de « access() » sur %1$s : erreur n°= %2$d\n" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "L'utilisateur actif nommé « %(user)s » existe déjà" - -msgid "algorithm value: allowed interval 0-255" -msgstr "valeur de l'algorithme : intervalle autorisé 0-255" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "tous les maîtres doivent avoir le rôle %(role)s activé" - -msgid "an internal error has occurred" -msgstr "une erreur interne est survenue" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "une erreur interne est survenue sur le serveur à « %(server)s »" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" -"la réponse à la requête « %(owner)s %(rtype)s » ne comporte pas de " -"signatures DNSSEC (pas de données RRSIG)" - -msgid "any of the configured servers" -msgstr "n'importe quel serveur configuré" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "l'API n'a pas un tel espace de noms : « %(name)s »" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" -"au moins une des options « type », « users » ou « hosts » doit être indiquée" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"au moins un parmi « type », « filter », « subtree », « targetgroup », " -"« attrs » ou « memberof » est requis" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "l'attribut « %(attribute)s » n'est pas autorisé" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "attribut « %s » interdit" - -msgid "attribute is not configurable" -msgstr "l'attribut n'est pas configurable" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "« attrs » et attributs inclus s'excluent mutuellement" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "« attrs » et attributs inclus/exclus s'excluent mutuellement" - -msgid "automatically add the principal if it doesn't exist" -msgstr "ajoute automatiquement le principal s'il n'existe pas" - -msgid "automount key" -msgstr "clé « automount »" - -msgid "automount keys" -msgstr "clés « automount »" - -msgid "automount location" -msgstr "emplacement de montage automatique" - -msgid "automount locations" -msgstr "emplacements de montage automatique" - -msgid "automount map" -msgstr "carte « automount »" - -msgid "automount maps" -msgstr "cartes « automount »" - -msgid "basedn" -msgstr "« basedn »" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "Échec de « ber_init() », contrôle invalide ?!\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "échec de « ber_scanf() », « kvno » introuvable ?!\n" - -msgid "bind password" -msgstr "mot de passe de connexion" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "doit contenir au plus %(len)d caractères" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "peut être d'au plus %(maxlength)d octets" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "peut être d'au plus %(maxlength)d caractères" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "doit être inférieur ou égal à %(maxvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "doit valoir au plus %(maxvalue)s" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" -"impossible d'ajouter la permission « %(perm)s » avec le type de liaison " -"« %(bindtype)s » à un privilège" - -msgid "cannot be empty" -msgstr "ne peut pas être vide" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "impossible de se connecter à « %(uri)s » : %(error)s" - -msgid "cannot delete global password policy" -msgstr "impossible de supprimer une politique de mot de passe globale" - -msgid "cannot delete managed permissions" -msgstr "impossible de supprimer des permissions administrées" +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" msgid "" "cannot delete root domain of the trust, use trust-del to delete the trust " @@ -16837,6 +30096,39 @@ msgstr "" "impossible de supprimer le domaine racine de la relation de confiance, " "utiliser la commande « trust-del » pour supprimer la relation de confiance" +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Liste des domaines approuvés rafraîchie avec succès. Utiliser la commande " +"« trustdomain-find » pour les énumérer." + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Configure this server as a trust agent." +msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "modification des entrées d'un utilisateur interdite" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Activation du domaine approuvé « %(value)s »" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"Le domaine racine de la relation de confiance est toujours activé pour la " +"confiance existante" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "domaine approuvé « %(value)s » désactivé" + msgid "" "cannot disable root domain of the trust, use trust-del to delete the trust " "itself" @@ -16845,85 +30137,560 @@ msgstr "" "utiliser la commande « trust-del » pour supprimer la relation de confiance " "elle-même" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "impossible d'ouvrir le fichier de configuration %s\n" - -msgid "cannot rename managed permissions" -msgstr "impossible de renommer les permissions administrées" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" -"impossible de définir le type de liaison d'une permission assignée à un " -"privilège" - -msgid "cannot specify both raw certificate and file" -msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" +#, fuzzy +#| msgid "Certificate Authority" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "Autorité de certification" msgid "" -"cannot specify full target filter and extra target filter simultaneously" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" msgstr "" -"impossible de définir simultanément un filtre de cible totale et un filtre " -"de cible complémentaire" -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "impossible d'utiliser « stat() » sur le fichier de configuration %s\n" - -msgid "change collided with another change" -msgstr "la modification s'est heurtée à une autre" - -msgid "change to a POSIX group" -msgstr "Transformer en groupe POSIX" - -msgid "change to support external non-IPA members from trusted domains" +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" msgstr "" -"modifier afin de permettre une prise en charge des membres externes non-IPA " -"depuis des domaines approuvés" -#, c-format -msgid "child exited with %d\n" -msgstr "processus fils terminé avec %d\n" +#, fuzzy +#| msgid "" +#| "\n" +#| " Display vault configuration:\n" +#| " ipa vaultconfig-show\n" +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +" Afficher la configuration des coffres-forts :\n" +" ipa vaultconfig-show\n" -msgid "cn is immutable" -msgstr "cn est immuable" +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" -msgid "command" -msgstr "commande" +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +#, fuzzy +#| msgid "Display information about a named service delegation rule." +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"Afficher les informations au sujet d'une règle de délégation de service." + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" #, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "la commande « %(name)s » prend au plus %(count)d argument" -msgstr[1] "la commande « %(name)s » prend au plus %(count)d arguments" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "la commande « %(name)s » ne prend pas d'argument" - -msgid "commands" -msgstr "commandes" - -msgid "commands cannot be added when command category='all'" +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." msgstr "" -"des commandes ne peuvent pas être ajoutées quand la catégorie de commande " -"est « all »" -msgid "commands for controlling sudo configuration" -msgstr "commandes pour contrôler la configuration sudo" - -msgid "communication with CIFS server was unsuccessful" -msgstr "la communication avec le serveur CIFS a échoué" - -msgid "configuration options" -msgstr "options de configuration" +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" #, python-format -msgid "container entry (%(container)s) not found" -msgstr "entrée conteneur (%(container)s) introuvable" +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" -msgid "default CA ACL can be only disabled" -msgstr "La LCA d'AC par défaut ne peut qu'être désactivée" +#, fuzzy +#| msgid "Modify configuration options." +msgid "Certificate Identity Mapping configuration options" +msgstr "Modifier les options de configuration." + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Certificate Identity Mapping Global Configuration" +msgstr "Modifier la configuration d'un profil de certificat." + +#, fuzzy +#| msgid "Prompt to set the user password" +msgid "Prompt for the username" +msgstr "Invite de définition du mot de passe utilisateur" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Modifier la configuration d'un profil de certificat." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Afficher la configuration actuelle." + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Certificate Identity Mapping Rules" +msgstr "Autorités de certification" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rule" +msgstr "Type de certificat" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "Certificate Identity Mapping Rule name" +msgstr "Les profils de certificats ne peuvent être renommés" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Rule used to map the certificate with a user entry" +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" + +#, fuzzy +#| msgid "Matching Type" +msgid "Matching rule" +msgstr "Type correspondant" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +#, fuzzy +#| msgid "Priority of the policy (higher number means lower priority" +msgid "Priority of the rule (higher number means lower priority" +msgstr "Priorité de la politique (une valeur élevé indique une priorité basse)" + +#, fuzzy +#| msgid "Create a new service delegation rule." +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "Créer une nouvelle règle de délégation de service" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Modifier la configuration d'un profil de certificat." + +#, fuzzy, python-format +#| msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Profil de certificat « %(value)s » modifié" + +#, fuzzy +#| msgid "Search for Certificate Profiles." +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Rechercher des profils de certificats." + +#, fuzzy, python-format +#| msgid "%(count)d service delegation rule matched" +#| msgid_plural "%(count)d service delegation rules matched" +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "%(count)d règle de délégation de service correspondante" +msgstr[1] "%(count)d règles de délégation de service correspondantes" + +#, fuzzy +#| msgid "Display information about a named service delegation rule." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" +"Afficher les informations au sujet d'une règle de délégation de service." + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Supprimer un profil de certificat." + +#, fuzzy, python-format +#| msgid "Deleted service delegation target \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Cible de délégation de service « %(value)s » supprimée" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Supprimer un profil de certificat." + +#, fuzzy, python-format +#| msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Profil de certificat « %(value)s » modifié" + +#, fuzzy +#| msgid "" +#| "Fetching domains from trusted forest failed. See details in the error_log" +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" +"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " +"informations détaillées dans le journal d'erreur." + +#, fuzzy +#| msgid "" +#| "Fetching domains from trusted forest failed. See details in the error_log" +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " +"informations détaillées dans le journal d'erreur." + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Identifiant de connexion" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)d utilisateur correspondant" +msgstr[1] "%(count)d utilisateurs correspondant" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" +"impossible d'ajouter la permission « %(perm)s » avec le type de liaison " +"« %(bindtype)s » à un privilège" + +msgid "Privilege" +msgstr "Privilège" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Privilège « %(value)s » ajouté" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Privilège « %(value)s » supprimé" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Privilège « %(value)s » supprimé" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d privilège correspondant" +msgstr[1] "%(count)d privilèges correspondant" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" +"\n" +"Services\n" +"\n" +"Un service IPA représente un service qui s'exécute sur un hôte. " +"L'enregistrement du\n" +"service IPA peut contenir un principal Kerberos, un certificat SSL ou les " +"deux.\n" +"\n" +"Un service IPA peut être directement géré à partir d'une machine, pour\n" +"autant que des permissions adéquates aient été données à la machine. Ceci\n" +"est vrai même pour les machines autres que celle à laquelle le service est\n" +"associé. Par exemple, demander un certificat SSL en utilisant les\n" +"justificatifs d'identité du principal du service de l'hôte. Pour gérer un\n" +"service en utilisant les références de l'hôte, vous devrez exécuter\n" +"« kinit » en tant qu'hôte :\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Ajouter un service IPA permet au service associé de demander un certificat\n" +"SSL ou un tableau de clés, mais cela est réalisé dans une étape distincte ;\n" +"cela n'est pas le résultat de l'ajout du service.\n" +"\n" +"Seule la composante publique du certificat est stockée dans un\n" +"enregistrement de service ; la clé privée n'y est pas enregistrée.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau service IPA :\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Autoriser un hôte à gérer un certificat de service IPA :\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Écraser la liste par défaut des types PAC pris en charge pour le service :\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" NFS est un cas classique où la surcharge du type PAC est nécessaire.\n" +" Actuellement, le code relatif à cette fonction dans le noyau Linux ne " +"gère\n" +" les tickets Kerberos que jusqu'à une taille maximale donnée. Comme les\n" +" données PAC peuvent devenir bien plus grandes, il est recommandé de " +"fixer\n" +" « --pac-type=NONE » pour les services NFS.\n" +"\n" +" Supprimer un service IPA :\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Trouver tous les services IPA associés à un hôte :\n" +" ipa service-find web.example.com\n" +"\n" +" Trouver tous les service HTTP :\n" +" ipa service-find HTTP\n" +"\n" +" Désactiver la clé Kerberos et le certificat SSL d'un service :\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Demander un certificat pour un service IPA :\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" +"\n" +" Autoriser un utilisateur à créer un tableau de clé :\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" +"\n" +" Générer et récupérer un tableau de clés d'un service IPA :\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "Principal malformé" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "service" + +msgid "services" +msgstr "services" + +msgid "Service principal alias" +msgstr "Alias de principal de service" + +msgid "Base-64 encoded service certificate" +msgstr "Certificat du service encodé en Base-64" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "La valeur NONE ne peut être combinée avec d'autres types de PAC" + +msgid "Add a new IPA service." +msgstr "Ajouter un nouveau service IPA." + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Service « %(value)s » ajouté" + +#, fuzzy +#| msgid "force principal name even if not in DNS" +msgid "force principal name even if host not in DNS" +msgstr "forcer le nom du principal même si absent du DNS" + +#, fuzzy +#| msgid "Skip DNS check" +msgid "Skip host check" +msgstr "Passer la vérification DNS" + +#, fuzzy +#| msgid "Force server removal even if it does not exist" +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "Forcer la suppression du serveur même s'il n'existe pas" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "L'hôte « %s » auquel ajouter un service n'existe pas." + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new SMB service." +msgstr "Ajouter un nouveau service HBAC." + +#, fuzzy +#| msgid "NetBIOS name" +msgid "SMB service NetBIOS name" +msgstr "Nom NetBIOS" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Service « %(value)s » supprimé" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Service « %(value)s » modifié" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d service correspondant" +msgstr[1] "%(count)d services correspondant" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Service « %(value)s » désactivé" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Certificats ajoutés au principal de service « %(value)s »" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Supprimer les certificats du principal de service « %(value)s »" + +msgid "Add new principal alias to a service" +msgstr "Ajouter un nouvel alias de principal à un service" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Alias ajoutés au principal de service « %(value)s »" + +msgid "Remove principal alias from a service" +msgstr "Supprimer un alias de principal d'un service" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Alias supprimés du principal de service « %(value)s »" msgid "delegation" msgstr "délégation" @@ -16931,660 +30698,1346 @@ msgstr "délégation" msgid "delegations" msgstr "délégations" -msgid "delete" -msgstr "supprimer" +msgid "Delegations" +msgstr "Délégations" -msgid "description" -msgstr "description" - -msgid "did not receive Kerberos credentials" -msgstr "Justificatifs Kerberos non reçus" - -msgid "does not match any of accepted formats: " -msgstr "ne correspond à aucun des formats acceptés :" - -msgid "domain" -msgstr "domaine" - -msgid "domain is not configured" -msgstr "le domaine n'est pas configuré" - -msgid "domain is not trusted" -msgstr "le domaine n'est pas de confiance" +msgid "Delegation" +msgstr "Délégation" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" -"le nom de domaine « %(domain)s » doit être normalisé à : %(normalized)s" - -msgid "domain name cannot be longer than 255 characters" -msgstr "le nom de domaine ne peut pas dépasser 255 caractères" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "chaque élément de LCA doit se terminer par un point-virgule" - -msgid "empty DNS label" -msgstr "libellé DNS vide" - -msgid "empty filter" -msgstr "filtre vide" - -msgid "entries" -msgstr "entrées" - -msgid "entry" -msgstr "entrée" +msgid "Added delegation \"%(value)s\"" +msgstr "Délégation « %(value)s » ajoutée" #, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "erreur de conversion des données lors du transport XML-RPC : %(error)s" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Délégation « %(value)s » supprimée" #, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "erreur sur le serveur « %(server)s » : %(error)s" +msgid "Modified delegation \"%(value)s\"" +msgstr "Délégation « %(value)s » modifiée" -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "échec de l'exécution de « ipa-getkeytab », erreur n° %d\n" +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d délégation correspondante" +msgstr[1] "%(count)d délégations correspondantes" +msgid "The deny type has been deprecated." +msgstr "Le type « deny » est obsolète." + +msgid "HBAC rules" +msgstr "Règles HBAC" + +msgid "HBAC Rules" +msgstr "Règles HBAC" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » ajoutée" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » supprimée" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » modifiée" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d règle HBAC correspondante" +msgstr[1] "%(count)d règles HBAC correspondantes" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » activée" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » désactivée" + +msgid "Access time" +msgstr "Horaire d'accès" + +#, fuzzy +#| msgid "Add target hosts and hostgroups to an HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Simulate use of Host-based access controls\n" +#| "\n" +#| "HBAC rules control who can access what services on what hosts.\n" +#| "You can use HBAC to control which users or groups can access a service,\n" +#| "or group of services, on a target host.\n" +#| "\n" +#| "Since applying HBAC rules implies use of a production environment,\n" +#| "this plugin aims to provide simulation of HBAC rules evaluation without\n" +#| "having access to the production environment.\n" +#| "\n" +#| " Test user coming to a service on a named host against\n" +#| " existing enabled rules.\n" +#| "\n" +#| " ipa hbactest --user= --host= --service=\n" +#| " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +#| " [--sizelimit= ]\n" +#| "\n" +#| " --user, --host, and --service are mandatory, others are optional.\n" +#| "\n" +#| " If --rules is specified simulate enabling of the specified rules and " +#| "test\n" +#| " the login of the user using only these rules.\n" +#| "\n" +#| " If --enabled is specified, all enabled HBAC rules will be added to " +#| "simulation\n" +#| "\n" +#| " If --disabled is specified, all disabled HBAC rules will be added to " +#| "simulation\n" +#| "\n" +#| " If --nodetail is specified, do not return information about rules " +#| "matched/not matched.\n" +#| "\n" +#| " If both --rules and --enabled are specified, apply simulation to --rules " +#| "_and_\n" +#| " all IPA enabled rules.\n" +#| "\n" +#| " If no --rules specified, simulation is run against all IPA enabled " +#| "rules.\n" +#| " By default there is a IPA-wide limit to number of entries fetched, you " +#| "can change it\n" +#| " with --sizelimit option.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " 1. Use all enabled HBAC rules in IPA database to simulate:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Matched rules: allow_all\n" +#| "\n" +#| " 2. Disable detailed summary of how rules were applied:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| "\n" +#| " 3. Test explicitly specified HBAC rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: myrule\n" +#| "\n" +#| " 4. Use all enabled HBAC rules in IPA database + explicitly specified " +#| "rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule --enabled\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Matched rules: allow_all\n" +#| "\n" +#| " 5. Test all disabled HBAC rules in IPA database:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: new-rule\n" +#| "\n" +#| " 6. Test all disabled HBAC rules in IPA database + explicitly " +#| "specified rules:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --rules=myrule --rules=my-second-rule --disabled\n" +#| " ---------------------\n" +#| " Access granted: False\n" +#| " ---------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| "\n" +#| " 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +#| " $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +#| " --enabled --disabled\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Not matched rules: my-second-rule\n" +#| " Not matched rules: my-third-rule\n" +#| " Not matched rules: myrule\n" +#| " Not matched rules: new-rule\n" +#| " Matched rules: allow_all\n" +#| "\n" +#| "\n" +#| "HBACTEST AND TRUSTED DOMAINS\n" +#| "\n" +#| "When an external trusted domain is configured in IPA, HBAC rules are also " +#| "applied\n" +#| "on users accessing IPA resources from the trusted domain. Trusted domain " +#| "users and\n" +#| "groups (and their SIDs) can be then assigned to external groups which can " +#| "be\n" +#| "members of POSIX groups in IPA which can be used in HBAC rules and thus " +#| "allowing\n" +#| "access to resources protected by the HBAC system.\n" +#| "\n" +#| "hbactest plugin is capable of testing access for both local IPA users and " +#| "users\n" +#| "from the trusted domains, either by a fully qualified user name or by " +#| "user SID.\n" +#| "Such user names need to have a trusted domain specified as a short name\n" +#| "(DOMAIN\\Administrator) or with a user principal name (UPN), " +#| "Administrator@ad.test.\n" +#| "\n" +#| "Please note that hbactest executed with a trusted domain user as --user " +#| "parameter\n" +#| "can be only run by members of \"trust admins\" group.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " 1. Test if a user from a trusted domain specified by its shortname " +#| "matches any\n" +#| " rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +#| "service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" +#| "\n" +#| " 2. Test if a user from a trusted domain specified by its domain name " +#| "matches\n" +#| " any rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +#| "service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" +#| "\n" +#| " 3. Test if a user from a trusted domain specified by its SID matches " +#| "any rule:\n" +#| "\n" +#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 " +#| "\\\n" +#| " --host `hostname` --service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Matched rules: can_login\n" +#| "\n" +#| " 4. Test if other user from a trusted domain specified by its SID " +#| "matches any rule:\n" +#| "\n" +#| " $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 " +#| "\\\n" +#| " --host `hostname` --service sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Not matched rules: can_login\n" +#| "\n" +#| " 5. Test if other user from a trusted domain specified by its shortname " +#| "matches\n" +#| " any rule:\n" +#| "\n" +#| " $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +#| "sshd\n" +#| " --------------------\n" +#| " Access granted: True\n" +#| " --------------------\n" +#| " Matched rules: allow_all\n" +#| " Not matched rules: can_login\n" msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -"format attendu : <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen (nombre impair de chiffres hexadécimaux " -"ou tiret)" +"\n" +"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" +"\n" +"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" +"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " +"groupes\n" +"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" +"\n" +"L'application de règles HBAC présuppose un environnement de production ;\n" +"ce greffon a pour objet de fournir une simulation de l'évaluation des " +"règles\n" +"HBAC sans nécessiter d'accès à cet environnement.\n" +"\n" +" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" +" vis à vis des règles actives existantes.\n" +"\n" +"ipa hbactest --user= --host= --service=\\\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" +" [--sizelimit= ]\n" +"\n" +"--user, --host et --service sont obligatoires, les autres sont " +"optionnelles.\n" +"\n" +" Si --rules est défini, simule l'activation des règles « rules-list » et\n" +" teste la connexion de l'utilisateur uniquement sur ces règles.\n" +"\n" +" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" +" la simulation\n" +"\n" +" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" +" à la simulation\n" +"\n" +" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " +"règles satisfaites ou non satisfaites.\n" +"\n" +" Si --rules et --enabled sont définis tous deux, la simulation est " +"appliquée\n" +" à --rules _et_ à tous les règles IPA activées.\n" +"\n" +" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" +" les règles IPA activées.\n" +" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" +" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" +" pour la simulation :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Désactiver le résumé détaillé sur l'application des règles :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Tester explicitement les règles HBAC indiquées :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Tester toutes les règles HBAC désactivées de la base de données " +"IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" +" de données IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +"\n" +"\n" +"TEST HBAC ET domaines approuvés\n" +"\n" +"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" +"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" +"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" +"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" +"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" +"autorise un accès aux ressources protégées par le système HBAC.\n" +"\n" +"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" +"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" +"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " +"noms\n" +"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" +"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" +"Administrator@ad.test.\n" +"\n" +"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" +"confiance en tant que paramètre --user ne peut être lancé que par des\n" +"membres du groupe des « administrateurs de confiance ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom de domaine satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" +" par son SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" +" son nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" -msgid "file to store certificate in" -msgstr "fichier où stocker le certificat" - -msgid "filename" -msgstr "nom de fichier" - -msgid "filter and memberof are mutually exclusive" -msgstr "« filter » et « memberof » s'excluent mutuellement" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" -"les marqueurs doivent être une valeur parmi « S », « A », « U », ou « P »" - -msgid "flags value: allowed interval 0-255" -msgstr "valeur des marqueurs : intervalle autorisé 0-255" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" -"forcer la création d'un enregistrement NS même si le nom du système n'est " -"pas dans le DNS" - -msgid "force delete of SYSTEM permissions" -msgstr "forcer la suppression des permissions SYSTEM" - -msgid "force host name even if not in DNS" -msgstr "forcer le nom même si absent des DNS" - -msgid "force principal name even if not in DNS" -msgstr "forcer le nom du principal même si absent du DNS" - -#, c-format -msgid "fork() failed\n" -msgstr "echec de « fork() »\n" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" -"le format doit être définit sous la forme\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" où :\n" -" d1: [0 .. 90] (degrés de latitude)\n" -" d2: [0 .. 180] (degrés de longitude)\n" -" m1, m2: [0 .. 59] (minutes de latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (secondes de latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] PAR .01 (altitude en mètres)\n" -" siz, hp, vp: [0 .. 90000000.00] (taille/précision en mètres)\n" -" Cf. RFC 1876 plus de détails" +msgid "Unresolved rules in --rules" +msgstr "Règles non résolues dans « --rules »" #, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "le format doit être spécifié comme « %(format)s » %(rfcs)s" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"La zone redirigiée « %(fwzone)s » n'est pas en fonction car il lui manque " -"une délégation NS correcte dans la zone faisant autorité « %(authzone)s ». " -"Merci d'ajouter les enregistrement NS « %(ns_rec)s » à la zone " -"« %(authzone)s »." - -msgid "gid cannot be set for external group" -msgstr "l'identifiant de groupe ne peut être défini pour un groupe externe" - -msgid "givenname is required" -msgstr "givenname est requis" - -msgid "group" -msgstr "groupe" - -msgid "group runAs" -msgstr "groupe runAs" - -msgid "group, permission and self are mutually exclusive" -msgstr "« group », « permission » et « self » s'excluent mutuellement" - -msgid "groups" -msgstr "groupes" - -msgid "groups to add" -msgstr "groupes à ajouter" - -msgid "groups to exclude from migration" -msgstr "groupes à exclure de la migration" - -msgid "groups to remove" -msgstr "groupes à supprimer" - -msgid "host" -msgstr "hôte" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"une catégorie d'hôtes ne peut pas être définie à « all » tant qu'il reste " -"des hôtes autorisés" - -msgid "host group" -msgstr "groupe d'hôtes" - -msgid "host groups" -msgstr "groupes d'hôtes" - -msgid "host groups to add" -msgstr "groupes d'hôtes à ajouter" - -msgid "host groups to remove" -msgstr "groupes d'hôtes à supprimer" - -msgid "host masks of allowed hosts" -msgstr "masques d'hôtes des hôtes autorisés" - -msgid "hostgroup" -msgstr "groupe d'hôtes" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Un groupe d'hôtes nommé « %s » existe déjà. Les groupes d'hôtes et les " -"groupes réseau partagent le même espace de nommage" - -msgid "hostgroups" -msgstr "groupe d'hôtes" - -msgid "hostname" -msgstr "nom d'hôte" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "le nom d'hôte contient un libellé vide (plusieurs points consécutifs)" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" -"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " -"pas au nom d'hôte du principal « %(hostname)s »" - -msgid "hosts" -msgstr "hôtes" - -msgid "hosts cannot be added when host category='all'" -msgstr "" -"des hôtes ne peuvent pas être ajoutés quand la catégorie de l'hôte est " -"« all »" - -msgid "hosts cannot be set when type is 'group'" -msgstr "des hôtes ne peuvent pas être définis quand le type est « group »" - -msgid "hosts to add" -msgstr "hôtes à ajouter" - -msgid "hosts to remove" -msgstr "hôtes à supprimer" - -msgid "id range" -msgstr "plage id" - -msgid "id range type" -msgstr "type de plage d'id" - -msgid "incomplete time value" -msgstr "valeur de temps incomplète" - -msgid "incorrect type" -msgstr "type incorrect" - -msgid "integer to order the Sudo rules" -msgstr "entier pour ordonner les règles sudo" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "« %(name)s » invalide : %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "DN invalide (%s)" - -msgid "invalid IP address format" -msgstr "format d'adresse IP invalide" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"version d'adresse IP invalide (est %(value)d, doit être %(required_value)d) !" - -msgid "invalid IP network format" -msgstr "format de réseau IP invalide" - -msgid "invalid Profile ID" -msgstr "Identifiant de profil invalide" - -msgid "invalid SSH public key" -msgstr "clé publique SSH invalide" - -msgid "invalid address format" -msgstr "format d'adresse invalide" - -msgid "invalid attribute name" -msgstr "nom d'attribut invalide" - -msgid "invalid domain name" -msgstr "nom de domaine invalide" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "nom de domaine invalide : %s" - -msgid "invalid domain-name: not fully qualified" -msgstr "nom de domaine invalide : doit être pleinement qualifié" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "format d'e-mail invalide : %(email)s" - -msgid "invalid escape code in domain name" -msgstr "code d'échappement invalide dans le nom du domaine" - -msgid "invalid hostmask" -msgstr "masque d'hôte invalide" - -msgid "invalid port number" -msgstr "numéro de port invalide" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "« ipa-getkeytab » a des permissions incorrectes ?\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "« ipa-getkeytab » introuvable\n" - -msgid "is required" -msgstr "est requis" - -msgid "iterations value: allowed interval 0-65535" -msgstr "valeur des itérations : intervalle autorisé 0-65535" - -msgid "kerberos ticket policy settings" -msgstr "réglages de la politique de tickets Kerberos" - -#, python-format -msgid "key %(key)s already exists" -msgstr "La clé %(key)s existe déjà" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "la clé nommée %(key)s existe déjà" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "« krb5_kt_close » %1$d : %2$s\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "« krb5_kt_get_entry » %1$d : %2$s\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "« krb5_kt_remove_entry » %1$d : %2$s\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "« krb5_parse_name » %1$d : %2$s\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "« krb5_unparse_name » %1$d : %2$s\n" - -#, c-format -msgid "kvno %d\n" -msgstr "« kvno » %d\n" - -msgid "left node and right node must not be the same" -msgstr "les nœuds de gauche et de droite ne peuvent être identiques" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "le nœud de gauche n'est pas un nœud de la topologie : %(leftnode)s" - -msgid "left or right node has to be specified" -msgstr "le nœud de gauche ou de droite doit être indiqué" - -msgid "limits exceeded for this query" -msgstr "limites dépassées pour cette requête" - -msgid "local domain range" -msgstr "Plage pour domaine local" - -msgid "location" -msgstr "emplacement" - -msgid "locations" -msgstr "emplacements" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "responsable %(manager)s introuvable" - -#, python-format -msgid "map %(map)s already exists" -msgstr "La carte %(map)s existe déjà" - -msgid "maps not connected to /etc/auto.master:" -msgstr "cartes non connectées à « /etc/auto.master » :" - -msgid "match the common name exactly" -msgstr "correspond exactement au nom commun" - -msgid "maximum serial number" -msgstr "numéro de série plafond" - -#, python-format -msgid "member %s" -msgstr "%s membre" - -msgid "member HBAC service" -msgstr "Service HBAC membre" - -msgid "member HBAC service group" -msgstr "Groupe de services HBAC membre" - -msgid "member group" -msgstr "groupe membre" - -msgid "member host" -msgstr "hôte membre" - -msgid "member host group" -msgstr "groupe d'hôte membre" - -msgid "member netgroup" -msgstr "Groupe réseau membre" - -msgid "member sudo command" -msgstr "commande membre de règle sudo" - -msgid "minimum serial number" -msgstr "numéro de série plancher" - -msgid "missing base_id" -msgstr "« base_id » manquant" - -msgid "modifying primary key is not allowed" -msgstr "la modification de clé principale n'est pas autorisée" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" -"point de montage relatif à la carte parente, ne peut pas commencer par /" - -#, python-format -msgid "must be \"%s\"" -msgstr "doit être « %s »" - -#, python-format -msgid "must be '%(value)s'" -msgstr "doit être « %(value)s »" - -msgid "must be DNS name" -msgstr "doit être un nom de DNS" - -msgid "must be TRUE or FALSE" -msgstr "doit être « TRUE » ou « FALSE »" - -msgid "must be True or False" -msgstr "doit être « True » ou « False »" - -msgid "must be Unicode text" -msgstr "doit être un texte Unicode" - -msgid "must be a decimal number" -msgstr "doit être un nombre décimal" - -msgid "must be absolute" -msgstr "doit être absolu" - -msgid "must be an integer" -msgstr "doit être un nombre entier" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "doit être d'au moins %(minlength)d octets" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "doit être d'au moins %(minlength)d caractères" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "doit être supérieur ou égal à %(minvalue)d" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "doit valoir a minima %(minvalue)s" - -msgid "must be binary data" -msgstr "doivent être des données binaires" - -msgid "must be datetime value" -msgstr "doit être une valeur date/heure" - -msgid "must be dictionary" -msgstr "doit être un dictionnaire" - -msgid "must be enclosed in parentheses" -msgstr "doit être mis entre parenthèses" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "doit être d'exactement %(length)d octets" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "doit être d'exactement %(length)d caractères" - -#, python-format -msgid "must be one of %(values)s" -msgstr "doit être une valeur parmi %(values)s" - -msgid "must be relative" -msgstr "doit être relatif" - -msgid "must contain a tuple (list, dict)" -msgstr "doit contenir un tuple (liste, dict)" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "doit avoir le rôle %(role)s activé" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "doit correspondre au motif « %(pattern)s »" - -msgid "netgroup" -msgstr "groupe réseau" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Un groupe réseau nommé « %s » existe déjà. Les groupes d'hôtes et les " -"groupes réseau partagent un même espace de noms." - -msgid "netgroups" -msgstr "groupes réseau" - -msgid "netgroups to add" -msgstr "Groupes réseau à ajouter" - -msgid "netgroups to remove" -msgstr "Groupes réseau à supprimer" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "pas de commande ou de sujet d'aide pour « %(topic)s »" - -msgid "no modifications to be performed" -msgstr "pas de modification à effectuer" - -msgid "no trusted domain is configured" -msgstr "pas de relation de confiance configurée" - -msgid "no trusted domain matched the specified flat name" -msgstr "aucun domaine approuvé ne correspond au nom simple indiqué" - -msgid "not allowed to modify group entries" -msgstr "modification des entrées de groupe interdite" - -msgid "not allowed to modify user entries" -msgstr "modification des entrées d'un utilisateur interdite" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "non autorisé à effectuer l'opération : %s" - -msgid "not allowed to perform server connection check" -msgstr "impossible d'effectuer la vérification de la connexion au serveur" - -msgid "not found" -msgstr "introuvable" - -msgid "not fully qualified" -msgstr "pas pleinement qualifié" - -msgid "not modifiable on managed permissions" -msgstr "non modifiable sur les permissions administrées" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" -"La classe de nombres « %(cls)s » n'est pas dans la liste des classes de " -"nombres autorisées : %(allowed)s" - -msgid "number of passwords" -msgstr "nombre de mots de passe" - -#, python-format -msgid "objectclass %s not found" -msgstr "classe d'objet %s introuvable" - -msgid "one or more values to remove" -msgstr "une ou plusieurs valeurs à supprimer" - -msgid "only \"ad\" is supported" -msgstr "seul « ad » est pris en charge" - -msgid "only available on managed permissions" -msgstr "uniquement disponible sur les permissions administrées" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"uniquement lettres, nombres, %(chars)s sont autorisés. Les noms DNS ne " -"peuvent commencer ou se terminer par %(chars2)s" - -msgid "only master zones can contain records" -msgstr "seules les zones maître peuvent contenir des enregistrements" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" -"seul un unique enregistrement CNAME est autorisé par nom (RFC 2136, section " -"1.1.5)" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" -"un seul enregistrement DNAME est autorisé par nom (RFC 6672, section 2.4)" - -msgid "only one node can be specified" -msgstr "seul un nœud peut être indiqué" +msgid "Access granted: %s" +msgstr "Accès autorisé : %s" msgid "operation not defined" msgstr "opération non définie" #, python-format -msgid "option was renamed; use %s" -msgstr "option renommée ; utiliser %s" +msgid "not allowed to perform operation: %s" +msgstr "non autorisé à effectuer l'opération : %s" -msgid "options are not allowed" -msgstr "les options ne sont pas autorisées" +msgid "No such virtual command" +msgstr "Commande virtuelle inconnue" + +msgid "Member service groups" +msgstr "Groupes de services membres" + +msgid "Member HBAC service groups" +msgstr "Groupes de services HBAC membres" + +#, fuzzy +#| msgid "User ID overrides" +msgid "Member ID user overrides" +msgstr "Surcharges d'identifiants utilisateurs" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "Utilisateurs membres indirects" + +msgid "Indirect Member permissions" +msgstr "Droits d'accès de membre indirect" + +msgid "Indirect Member HBAC service" +msgstr "Service HBAC de membre indirect" + +msgid "Indirect Member HBAC service group" +msgstr "Groupe de services de membre indirect" + +msgid "Invalid format. Should be name=value" +msgstr "Format invalide. Doit être nom=valeur" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Un serveur maître IPA ne peut ni être supprimé ni désactivé" + +msgid "entry" +msgstr "entrée" + +msgid "entries" +msgstr "entrées" + +msgid "Entry" +msgstr "Entrée" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" -"le rang doit être une valeur unique (%(order)d déjà utilisée par %(rule)s)" - -#, c-format -msgid "out of memory\n" -msgstr "mémoire saturée\n" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" -"donnée hors zone : le nom de l'enregistrement doit être un sous-domaine de " -"la zone ou un nom relatif" +msgid "container entry (%(container)s) not found" +msgstr "entrée conteneur (%(container)s) introuvable" #, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "les arguments et options se chevauchent : %(names)s" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s : %(oname)s introuvable" #, python-format -msgid "owner %s" -msgstr "propriétaire %s" +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "L'objet %(oname)s avec le nom « %(pkey)s » existe déjà" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "l'attribut « %(attribute)s » n'est pas autorisé" + +#, fuzzy, python-format +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "attribut « %s » interdit" + +msgid "attribute is not configurable" +msgstr "l'attribut n'est pas configurable" + +msgid "No such attribute on this entry" +msgstr "Pas d'attribut de ce type sur cette entrée" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Renomme l'objet %(ldap_obj_name)s" + +msgid "the entry was deleted while being modified" +msgstr "cette entrée a été supprimée pendant sa modification" + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "%s à ajouter" + +#, python-format +msgid "%s to remove" +msgstr "%s à supprimer" #, python-format msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." msgstr "" -"le propriétaire des enregistrements %(types)s ne doit pas être un nom de " -"domaine comportant des jokers (RFC 4592 section 4)" +"Recherche des %(searched_object)s avec ceux de %(ldap_object)s de " +"%(relationship)s." + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" +"Recherche des %(searched_object)s sans ceux de %(ldap_object)s de " +"%(relationship)s." + +#, fuzzy, python-format +#| msgid "Added new aliases to host \"%(value)s\"" +msgid "added attribute value to entry %(value)s" +msgstr "Alias ajoutés à l'hôte « %(value)s »" + +#, fuzzy, python-format +#| msgid "Removed aliases from host \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" +msgstr "Alias supprimés pour l'hôte « %(value)s »" + +msgid "one or more values to remove" +msgstr "une ou plusieurs valeurs à supprimer" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"Utilisateur de base\n" +"\n" +"Ceci contient les définitions communes pour les utilisateurs et utilisateurs " +"en attente\n" + +msgid "must be TRUE or FALSE" +msgstr "doit être « TRUE » ou « FALSE »" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "Expiration de mot de passe" + +msgid "SMB logon script path" +msgstr "" + +#, fuzzy +#| msgid "%i profile added." +msgid "SMB profile path" +msgstr "%i profil ajouté." + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Répertoire personnel" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Base du répertoire utilisateur" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "format d'e-mail invalide : %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "responsable %(manager)s introuvable" + +#, fuzzy +#| msgid "file to store certificate in" +msgid "Issuer of the certificate" +msgstr "fichier où stocker le certificat" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Subject of the certificate" +msgstr "Fichier dans lequel stocker le certificat." + +#, fuzzy +#| msgid "cannot be empty" +msgid "cannot have an empty subject" +msgstr "ne peut pas être vide" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and certificate" +msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the user entry." +msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur « %(value)s »" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "doit contenir un tuple (liste, dict)" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Utilisateur « %(value)s » ajouté" + +msgid "Default group for new users is not POSIX" +msgstr "Le groupe par défaut des nouveaux utilisateurs n'est pas POSIX" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Utilisateur « %(value)s » supprimé" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s : l'utilisateur est déjà préservé" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Utilisateur « %(value)s » modifié" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » restauré" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "l'utilisateur « %s » est déjà actif" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Compte utilisateur en attente « %(value)s »" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » désactivé" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » activé" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +" Déverrouiller un compte utilisateur\n" +"\n" +" Un compte utilisateur peut se verrouiller si le mot de passe n'est pas\n" +" saisi correctement plusieurs fois de suite dans un laps de temps donné\n" +" défini par la politique du mot de passe. Le verrouillage d'un compte " +"est\n" +" un état temporaire ; il peut être déverrouillé par un administrateur." + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » déverrouillé" + +msgid "Failed logins" +msgstr "Connexions ayant échoué" + +msgid "Last successful authentication" +msgstr "Dernière authentification réussie" + +msgid "Last failed authentication" +msgstr "Dernière authentification ayant échoué" + +msgid "Time now" +msgstr "Heure actuelle" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +" État verrouillé d'un compte utilisateur\n" +"\n" +" Un compte peut être verrouillé si un mot de passe incorrect est entre à\n" +" plusieurs reprises dans un laps de temps donnée selon la politique de\n" +" contrôle des mots de passe. Le verrouillage du compte est un état\n" +" temporaire ; le compte peut être déverrouillé par un administrateur.\n" +"\n" +" Ce dernier se connecte sur l'IPA maître et affiche l'état du\n" +" verrouillage de chacun.\n" +"\n" +" Pour savoir si un compte est verrouillé sur un serveur donné, vous " +"devez\n" +" comparer le nombre d'échecs de connexion et l'heure du dernier échec.\n" +" Pour qu'un compte soit verrouillé, le nombre d'échecs doit dépasser le\n" +" maximum autorisé dans l'intervalle de temps donné tel que défini dans " +"la\n" +" politique de mot de passe propre à l'utilisateur.\n" +"\n" +" Le compteur d'échecs de connexion n'est incrémenté que lorsqu'un\n" +" utilisateur tente une connexion, il est donc possible qu'un compte\n" +" paraisse bloqué mais que la dernière tentative de connexion soit\n" +" antérieure à la durée de verrouillage de la règle. Cela\n" +" signifie que l'utilisateur peut tenter de se connecter à nouveau." + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "%(host)s en échec : %(error)s" + +#, python-format +msgid "%(host)s failed" +msgstr "%(host)s en échec" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Compte désactivé : %(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur « %(value)s »" + +#, fuzzy +#| msgid "Add new principal alias to host entry" +msgid "Add new principal alias to the user entry" +msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" + +#, fuzzy, python-format +#| msgid "Added new aliases to host \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Alias ajoutés à l'hôte « %(value)s »" + +#, fuzzy +#| msgid "Remove principal alias from a host entry" +msgid "Remove principal alias from the user entry" +msgstr "Supprimer un alias de principal de l'entrée d'un hôte" + +#, fuzzy, python-format +#| msgid "Removed aliases from host \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Alias supprimés pour l'hôte « %(value)s »" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "tous les maîtres doivent avoir le rôle %(role)s activé" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "doit avoir le rôle %(role)s activé" + +#, fuzzy +#| msgid "must be enclosed in parentheses" +msgid "must be enabled only on a single master" +msgstr "doit être mis entre parenthèses" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" +"\n" +"Classes pour gérer des jonctions de confiance avec des appels DCE-RPC\n" +"\n" +"Le code de ce module s'appuie pour l'essentiel sur le paquet\n" +"« samba4-python » et les liaisons python de Samba4.\n" + +msgid "CIFS server denied your credentials" +msgstr "Le serveur CIFS a refusé vos justificatifs d'identité" + +msgid "communication with CIFS server was unsuccessful" +msgstr "la communication avec le serveur CIFS a échoué" + +msgid "AD domain controller" +msgstr "Contrôleur de domaine AD" + +msgid "unsupported functional level" +msgstr "niveau de fonctionnalité non pris en charge" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" +"Le contrôleur de domaine AD se plaint à propos de la suite de mise en " +"communication. Cela peut signifier qu'il y a de mauvaises synchronisations " +"de l'un ou l'autre côté, par exemple." + +msgid "Cannot find specified domain or server name" +msgstr "Impossible de trouver le domaine ou le serveur indiqué" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" +"Le contrôleur de domaine AD n'a pas été en mesure aucun des contrôleurs de " +"domaine IPA. Cela est probablement dû à un problème DNS ou de pare-feu." + +msgid "At least the domain or IP address should be specified" +msgstr "Au moins un nom de domaine ou une adresse IP doit être indiqué" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "pas de relation de confiance configurée" + +msgid "domain is not configured" +msgstr "le domaine n'est pas configuré" + +msgid "SID is not valid" +msgstr "Le SID n'est pas valide" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "Le SID ne correspond exactement à aucun SID du domaine approuvé" + +msgid "SID does not match any trusted domain" +msgstr "Le SID ne correspond à aucun domaine approuvé" + +msgid "Trust setup" +msgstr "Configuration des relations d'approbation" + +msgid "Our domain is not configured" +msgstr "Notre domaine n'est pas configuré" + +msgid "No trusted domain is not configured" +msgstr "Aucun domaine approuvé n'est pas configuré" + +msgid "trusted domain object" +msgstr "objet domaine approuvé" + +msgid "domain is not trusted" +msgstr "le domaine n'est pas de confiance" + +msgid "no trusted domain matched the specified flat name" +msgstr "aucun domaine approuvé ne correspond au nom simple indiqué" + +msgid "trusted domain object not found" +msgstr "objet relation de confiance introuvable" + +#, fuzzy +#| msgid "SID does not match any trusted domain" +msgid "Object does not belong to a trusted domain" +msgstr "Le SID ne correspond à aucun domaine approuvé" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "SSSD n'a pu résoudre l'objet en un SID valide" + +msgid "Ambiguous search, user domain was not specified" +msgstr "Recherche ambiguë, le domaine utilisateur n'a pas été indiqué" + +msgid "Trusted domain did not return a unique object" +msgstr "Le domaine approuvé n'a pas renvoyé un objet unique" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "Le domaine approuvé n'a pas renvoyé un SID valide pour l'objet" + +msgid "trusted domain user not found" +msgstr "utilisateur de domaine approuvé introuvable" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "Impossible de récupérer la liste GC du domaine approuvé" + +msgid "CIFS credentials object" +msgstr "Objet justificatif d'identité de CIFS" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "Le serveur CIFS %(host)s a refusé vos justificatifs d'identité" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" +"Impossible d'établir la connexion LSA vers %(host)s. Le serveur CIFS est-il " +"en cours d'exécution ?" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" +"le serveur IPA et le domaine distant ne peuvent partager le même nom " +"NetBIOS : %s" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" +"Le maître IPA a refusé %(count)d fois les demandes de validation de " +"relation d'approbation du contrôleur de domaine AD. Cela est probablement dû " +"au fait que ce dernier a tenté de contacter une réplique où les informations " +"de relations d'approbation n'ont pas encore été répliquées. De plus, " +"vérifiez que le DNS AD est capable de résoudre les enregistrements SRV " +"%(records)s vers le serveur IPA adéquat." + +#, fuzzy +#| msgid "Invalid credentials" +msgid "Credentials" +msgstr "Données d'authentification invalides" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "Forêt en cours de mise en confiance" + +msgid "Trusted forest" +msgstr "Forêt de confiance" + +msgid "Established and verified" +msgstr "Établie et vérifiée" + +msgid "Waiting for confirmation by remote side" +msgstr "En attente de confirmation par la partie distante" + +msgid "Unknown" +msgstr "Inconnu" + +msgid "Non-Active Directory domain" +msgstr "Domaine autre que Active Directory" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "Domaine Kerberos conforme à la RFC4120" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" +"Relation d'approbation externe non transitive vers un domaine dans une autre " +"forêt Active Directory" + +#, fuzzy +#| msgid "" +#| "Non-transitive external trust to a domain in another Active Directory " +#| "forest" +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" +"Relation d'approbation externe non transitive vers un domaine dans une autre " +"forêt Active Directory" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" +"\n" +"La topologie de réplication dans le suffixe « %(suffix)s » est " +"déconnectée :\n" +"%(errors)s" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" +"\n" +"La suppression de « %(hostname)s » engendre une déconnexion de la topologie " +"de réplication pour le suffixe « %(suffix)s » :\n" +"%(errors)s" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" +"La topologie ne permet pas au serveur %(server)s de se répliquer avec les " +"serveurs :" + +msgid "Request must be a dict" +msgstr "La requête doit être un dictionnaire" + +msgid "Request is missing \"method\"" +msgstr "Il manque le paramètre « method » à la requête" + +msgid "Request is missing \"params\"" +msgstr "Il manque le paramètre « params » à la requête" msgid "params must be a list" msgstr "« params » doit être une liste" @@ -17598,460 +32051,93 @@ msgstr "« params[0] » (alias « args ») doit être une liste" msgid "params[1] (aka options) must be a dict" msgstr "« params[1] » (alias « options ») doit être un dictionnaire " -msgid "password" -msgstr "mot de passe" +#, fuzzy, python-format +#| msgid "must be \"%s\"" +msgid "must equal %r" +msgstr "doit être « %s »" -msgid "password policies" -msgstr "politiques de mot de passe" - -msgid "password policy" -msgstr "politique de mots de passe" - -msgid "password to use if not using kerberos" +msgid "Hello world" msgstr "" -"mot de passe à utiliser pour la connexion en cas de non-utilisation de " -"Kerberos" -msgid "permission" -msgstr "permission" +#, fuzzy, python-format +#| msgid "RADIUS proxy server name" +msgid "%s: RADIUS proxy server not found" +msgstr "Nom du serveur mandataire RADIUS" -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "la permisison « %(value)s » existe déjà" +#, fuzzy, python-format +#| msgid "active user with name \"%(user)s\" already exists" +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "L'utilisateur actif nommé « %(user)s » existe déjà" -msgid "permissions" -msgstr "permissions" +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 1" +msgstr "doit être supérieur ou égal à %(minvalue)d" -msgid "pkinit" -msgstr "« pkinit »" +msgid "Out of memory\n" +msgstr "Mémoire saturée\n" -msgid "preserve" -msgstr "préserver" +msgid "Warning unrecognized encryption type.\n" +msgstr "Avertissement, type de chiffrement inconnu.\n" -msgid "preserve and no-preserve cannot be both set" -msgstr "preserve et no-preserve ne peuvent être indiqués simultanément" +msgid "Warning unrecognized salt type.\n" +msgstr "Avertissement, type « salt » inconnu.\n" -#, c-format -msgid "principal not found\n" -msgstr "principal introuvable\n" +msgid "Out of memory!?\n" +msgstr "Mémoire saturée !?\n" -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "principal introuvable dans la réponse XML-RPC\n" +msgid "Enctype comparison failed!\n" +msgstr "Échec de comparaison du « enctype » !\n" -msgid "priority cannot be set on global policy" -msgstr "la priorité ne peut être définie sur la politique globale" +#, fuzzy +#| msgid "Password history size" +msgid "Password is too long!\n" +msgstr "Taille de l'historique des mots de passe" -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"la priorité doit être une valeur unique (%(prio)d est déjà utilisé par " -"%(gname)s)" +msgid "Failed to create random key!\n" +msgstr "Échec de création d'une clé aléatoire !\n" -msgid "privilege" -msgstr "privilège" +msgid "Failed to create key!\n" +msgstr "Échec de création de la clé !\n" -msgid "privileged group" -msgstr "groupe avec privilèges" +msgid "Bad or unsupported salt type.\n" +msgstr "Type « salt » non-conforme ou non pris en compte.\n" -msgid "privileged hostgroup" -msgstr "groupe d'hôtes privilégiés" +#, fuzzy, c-format +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "Impossible d'initialiser la bibliothèque LDAP !\n" -msgid "privileged service delegation rule" -msgstr "règle de délégation de service privilégié" +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "Impossible de définir LDAP_OPT_PROTOCOL_VERSION\n" -msgid "privileged service delegation target" -msgstr "cible de délégation de service privilégiée" +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "Impossible de définir LDAP_OPT_X_SASL_NOCANON\n" -msgid "privileges" -msgstr "privilèges" +#, fuzzy +#| msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "Impossible de définir LDAP_OPT_X_SASL_NOCANON\n" + +#, fuzzy +#| msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "Impossible de définir LDAP_OPT_X_SASL_NOCANON\n" + +#, fuzzy +#| msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "Impossible de définir LDAP_OPT_PROTOCOL_VERSION\n" msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" msgstr "" -"la catégorie de profil ne peut être positionnée à 'all' tant qu'il existe " -"des profils autorisés" -msgid "profiles cannot be added when profile category='all'" -msgstr "" -"des profils ne peuvent pas être ajoutés quand la catégorie de profil est " -"« all »" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" -"« pysss_murmur » non disponible sur le serveur et aucun « base-id » fourni." - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "requête « %(owner)s %(rtype)s » avec EDNS0: %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "requête « %(owner)s %(rtype)s » : %(error)s" - -msgid "range exists" -msgstr "la plage existe" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" -"une modification de plage laissant des objets avec un ID en dehors de la " -"plage définie n'est pas autorisée" - -msgid "range type change" -msgstr "modifier le type de plage" - -#, c-format -msgid "read error\n" -msgstr "erreur en lecture\n" - -#, c-format -msgid "realm not found\n" -msgstr "domaine introuvable\n" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"la validation DNSSEC de l'enregistrement « %(owner)s %(rtype)s » a échoué " -"sur le serveur %(ip)s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "échec de la requête avec le code état HTTP %d" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "résultat de la réponse XML-RPC introuvable\n" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" -"récupère et affiche tous les attributs du serveur. Modifie la sortie de la " -"commande." - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "le nœud de droite n'est pas un nœud de la topologie : %(rightnode)s" - -msgid "role" -msgstr "rôle" - -msgid "roles" -msgstr "rôles" - -msgid "roles to remove" -msgstr "rôles à supprimer" - -msgid "runAs groups" -msgstr "groupes runAs" - -msgid "runAs user" -msgstr "utilisateur runAs" - -msgid "runAs users" -msgstr "utilisateurs runAs" - -#, python-format -msgid "salt value: %(err)s" -msgstr "valeur « salt » : %(err)s" - -msgid "search for POSIX groups" -msgstr "rechercher des groupes POSIX" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" -"rechercher des groupes autorisant la prise en charge des membres externes " -"non-IPA depuis les domaines approuvés" - -msgid "search for managed groups" -msgstr "rechercher les groupes administrés" - -msgid "search for non-POSIX groups" -msgstr "rechercher des groupes non-POSIX" - -msgid "search for private groups" -msgstr "rechercher des groupes privés" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"les résultats des recherches sur les objets\n" -"à migrer ont été tronquées par le serveur ;\n" -"le processus de migration peut être incomplet\n" - -msgid "seconds" -msgstr "secondes" - -msgid "segment" -msgstr "segment" - -msgid "segments" -msgstr "segments" - -msgid "self service permission" -msgstr "permission de libre service" - -msgid "self service permissions" -msgstr "permissions de libre service" - -msgid "server" -msgstr "serveur" - -msgid "server role" -msgstr "rôle serveur" - -msgid "server roles" -msgstr "rôles serveur" - -msgid "servers" -msgstr "serveurs" - -msgid "service" -msgstr "service" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" -"une catégorie de services ne peut pas être définie à « all » tant qu'il " -"reste des services autorisés" - -msgid "service delegation rule" -msgstr "règle de délégation de service" - -msgid "service delegation rules" -msgstr "règles de délégation de service" - -msgid "service delegation target" -msgstr "cible de délégation de service" - -msgid "service delegation targets" -msgstr "cibles de délégation de service" - -msgid "services" -msgstr "services" - -msgid "services cannot be added when service category='all'" -msgstr "" -"aucun service ne peut être ajouté quand la catégorie de services est « all »" - -msgid "setting Authoritative nameserver" -msgstr "configuration du serveur de nom ayant autorité" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "ne doit pas être un nom de domaine avec joker (RFC 4592 section 4)" - -msgid "sidgen_was_run" -msgstr "« sidgen_was_run »" - -msgid "skip reverse DNS detection" -msgstr "sauter la détection du DNS inverse" - -msgid "sn is required" -msgstr "sn est requis" - -msgid "stage user" -msgstr "utilis" - -msgid "stage users" -msgstr "utilisateurs en attente" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" -"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " -"%s pour les principaux autres qu'utilisateurs." - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" -"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " -"%s pour les principaux d'utilisateurs." - -msgid "subtree and type are mutually exclusive" -msgstr "« subtree » et « type » s'excluent mutuellement" - -msgid "sudo command" -msgstr "commande sudo" - -msgid "sudo command group" -msgstr "groupe de commandes sudo" - -msgid "sudo command groups" -msgstr "groupes de commandes sudo" - -msgid "sudo commands" -msgstr "commandes sudo" - -msgid "sudo commands to add" -msgstr "commandes sudo à ajouter" - -msgid "sudo commands to remove" -msgstr "commandes sudo à supprimer" - -msgid "sudo rule" -msgstr "règle sudo" - -msgid "sudo rules" -msgstr "règles sudo" - -msgid "suffix" -msgstr "suffixe" - -msgid "suffixes" -msgstr "suffixes" - -msgid "system ID View" -msgstr "Vue d'identifiants du système" - -msgid "target and targetgroup are mutually exclusive" -msgstr "« target » et « targetgroup » s'excluent mutuellement" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" -"le serveur IPA et le domaine distant ne peuvent partager le même nom " -"NetBIOS : %s" - -msgid "the certificate with serial number " -msgstr "le certificat ayant le numéro de série " - -msgid "the entry was deleted while being modified" -msgstr "cette entrée a été supprimée pendant sa modification" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "la valeur ne suit pas le format d'horodatage « YYYYMMDDHHMMSS »" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" -"il doit y avoir au moins une définition d'entrée cible (ex. « target », " -"« targetfilter », « attrs »)" - -msgid "this option has been deprecated." -msgstr "cette option a été abandonnée." - -msgid "this option is deprecated" -msgstr "cette option est obsolète" - -msgid "too many '@' characters" -msgstr "trop de caractères « @ »" - -msgid "trust" -msgstr "confiance" - -msgid "trust configuration" -msgstr "configuration des relations d'approbation" - -msgid "trust domain" -msgstr "domaine approuvé" - -msgid "trust domains" -msgstr "domaines approuvés" - -msgid "trust type" -msgstr "type de confiance" - -msgid "trusted domain object" -msgstr "objet domaine approuvé" - -msgid "trusted domain object not found" -msgstr "objet relation de confiance introuvable" - -msgid "trusted domain user not found" -msgstr "utilisateur de domaine approuvé introuvable" - -msgid "trusts" -msgstr "confiances" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" -"type d'objet IPA (« user », « group », « host », « hostgroup », « service », " -"« netgroup »)" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"« type », « filter », « subtree » et « targetgroup » s'excluent mutuellement" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "commande « %(name)s » inconnue" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "Erreur %(code)d inconnue renvoyée par %(server)s : %(error)s" - -msgid "unsupported functional level" -msgstr "niveau de fonctionnalité non pris en charge" - -msgid "unsupported trust type" -msgstr "type de relation de confiance non pris en charge" - -msgid "user" -msgstr "utilisateur" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "l'utilisateur « %s » est déjà actif" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"une catégorie d'utilisateurs ne peut pas être définie à « all » tant qu'il " -"reste des utilisateurs autorisés" - -msgid "users" -msgstr "utilisateurs" - -msgid "users and hosts cannot both be set" -msgstr "impossible de définir à la fois des utilisateurs et des hôtes" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" -"des utilisateurs ne peuvent pas être ajoutés quand la catégorie « RunAs " -"User » ou « RunAs Group » est « all »" - -msgid "users cannot be added when user category='all'" -msgstr "" -"des utilisateurs ne peuvent pas être ajoutés quand la catégorie de " -"l'utilisateur est « all »" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "impossible de définir des utilisateurs quand le type est « hostgroup »" - -msgid "users to exclude from migration" -msgstr "utilisateurs à exclure de la migration" - -msgid "users to remove" -msgstr "utilisateurs à supprimer" - -msgid "value" -msgstr "valeur" - -msgid "vault" -msgstr "coffre-fort" - -msgid "vaultcontainer" -msgstr "vaultcontainer" - -msgid "vaultcontainers" -msgstr "vaultcontainers" - -msgid "vaults" -msgstr "coffres-forts" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr} : attribut introuvable" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role} : rôle introuvable" +#, fuzzy +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize STARTTLS session\n" +msgstr "Impossible d'initialiser la bibliothèque LDAP !\n" #~ msgid "Delete a CA." #~ msgstr "Supprimer une AC." diff --git a/po/hi.po b/po/hi.po index 19d89c2ee..fc33164be 100644 --- a/po/hi.po +++ b/po/hi.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Hindi\n" @@ -18,8 +18,11660 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid "A group may not be a member of itself" -msgstr "एक समूह खुद के ही सदस्य नहीं हो सकता" +#, c-format +msgid "Out of memory!\n" +msgstr "" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, c-format +msgid "Out of memory!" +msgstr "" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "did not receive Kerberos credentials" +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "कर्बेरॉस क्रेडेंशियल्स प्राप्त नहीं हुआ" + +#, fuzzy, c-format +#| msgid "Bad format in credentials cache" +msgid "Error storing creds in credential cache: %s.\n" +msgstr "क्रेडेंशियल्स कैश में बुरा प्रारूप" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +msgid "hostname" +msgstr "" + +msgid "IPA Server to use" +msgstr "" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +msgid "password" +msgstr "" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "पासवर्ड मेल नहीं खाते" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +msgid "Vault password" +msgstr "" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +msgid "Change password" +msgstr "" + +msgid "Old vault password" +msgstr "" + +msgid "File containing the old vault password" +msgstr "" + +msgid "New vault password" +msgstr "" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "" + +msgid "Permission" +msgstr "" + +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "" + +msgid "User group ACI grants access to" +msgstr "" + +msgid "Permissions" +msgstr "" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "" + +msgid "Type" +msgstr "" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +msgid "Member of a group" +msgstr "" + +msgid "Filter" +msgstr "" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +msgid "Delete ACI." +msgstr "" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +msgid "New ACI name" +msgstr "" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +msgid "description" +msgstr "" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +msgid "Default users group" +msgstr "" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +msgid "Zone name" +msgstr "" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Record name" +msgstr "" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Record type" +msgstr "गलत प्रकार" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +msgid "Service" +msgstr "" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +msgid "NS Hostname" +msgstr "" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "User Groups" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Host Groups" +msgstr "" + +msgid "Services" +msgstr "" + +msgid "Service Groups" +msgstr "" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "" + +msgid "HBAC service" +msgstr "" + +msgid "HBAC service description" +msgstr "" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "" + +msgid "Certificate" +msgstr "" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +msgid "hostgroups" +msgstr "" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "" + +msgid "Bind DN" +msgstr "" + +msgid "User container" +msgstr "" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +msgid "Netgroup description" +msgstr "" + +msgid "NIS domain name" +msgstr "" + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +msgid "Member Hostgroup" +msgstr "" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Bind rule type" +msgstr "गलत प्रकार" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +#, fuzzy +#| msgid "Credentials cache permissions incorrect" +msgid "Rename the permission object" +msgstr "क्रेडेंशियल्स कैश अनुमतियाँ गलत" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +msgid "permission" +msgstr "" + +msgid "permissions" +msgstr "" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +msgid "Server" +msgstr "" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal" +msgstr "" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "Commands" +msgstr "" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +msgid "Sudo Allow Commands" +msgstr "" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "ACL name" +msgstr "" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +msgid "Vault description" +msgstr "" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +msgid "Owner groups" +msgstr "" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +msgid "Transport Certificate" +msgstr "" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +msgid "owner group" +msgstr "" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "सत्यापित करने के लिए फिर से %(label)s दर्ज करें:" + +msgid "Passwords do not match!" +msgstr "पासवर्ड मेल नहीं खाते" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +msgid "Topic commands:" +msgstr "" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" msgid "A list of LDAP entries" msgstr "LDAP प्रविष्टियों की सूची" @@ -27,34 +11679,165 @@ msgstr "LDAP प्रविष्टियों की सूची" msgid "All commands should at least have a result" msgstr "सभी आदेशों का कम से कम परिणाम होना चाहिए" -msgid "Bad format in credentials cache" -msgstr "क्रेडेंशियल्स कैश में बुरा प्रारूप" +msgid "Results are truncated, try a more specific search" +msgstr "" #, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "बेस६४ डिकोडिंग विफल: %(reason)s" +msgid "Unknown option: %(option)s" +msgstr "" -msgid "Cannot resolve KDC for requested realm" -msgstr "अनुरोधित दायरे के लिए KDC हल नहीं कर सकता" - -msgid "Credentials cache permissions incorrect" -msgstr "क्रेडेंशियल्स कैश अनुमतियाँ गलत" +msgid "Client version. Used to determine if server will accept request." +msgstr "" #, python-format -msgid "Enter %(label)s again to verify: " -msgstr "सत्यापित करने के लिए फिर से %(label)s दर्ज करें:" +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "एक आंतरिक त्रुटि हुई है" + +#, fuzzy, python-format +#| msgid "an internal error has occurred" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "एक आंतरिक त्रुटि हुई है" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "कर्बेरॉस क्रेडेंशियल्स प्राप्त नहीं हुआ" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" msgid "No credentials cache found" msgstr "कैश क्रेडेंशियल्स नहीं मिली" -msgid "Only one value is allowed" -msgstr "केवल एक मान की अनुमति है" +msgid "Ticket expired" +msgstr "टिकट समाप्त" + +msgid "Credentials cache permissions incorrect" +msgstr "क्रेडेंशियल्स कैश अनुमतियाँ गलत" + +msgid "Bad format in credentials cache" +msgstr "क्रेडेंशियल्स कैश में बुरा प्रारूप" + +msgid "Cannot resolve KDC for requested realm" +msgstr "अनुरोधित दायरे के लिए KDC हल नहीं कर सकता" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" msgid "Passwords do not match" msgstr "पासवर्ड मेल नहीं खाते" -msgid "Passwords do not match!" -msgstr "पासवर्ड मेल नहीं खाते" +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" msgid "This command requires root access" msgstr "इस आदेश को रूट मूल अभिगम की आवश्यकता है" @@ -62,17 +11845,11446 @@ msgstr "इस आदेश को रूट मूल अभिगम की msgid "This is already a posix group" msgstr "यह पहले से ही एक पोसिक्स समूह है" -msgid "Ticket expired" -msgstr "टिकट समाप्त" +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" -msgid "an internal error has occurred" -msgstr "एक आंतरिक त्रुटि हुई है" +msgid "This entry is already enabled" +msgstr "" -msgid "did not receive Kerberos credentials" -msgstr "कर्बेरॉस क्रेडेंशियल्स प्राप्त नहीं हुआ" +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "एक समूह खुद के ही सदस्य नहीं हो सकता" + +#, fuzzy +#| msgid "This is already a posix group" +msgid "This entry is already a member" +msgstr "यह पहले से ही एक पोसिक्स समूह है" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "बेस६४ डिकोडिंग विफल: %(reason)s" + +#, fuzzy +#| msgid "A group may not be a member of itself" +msgid "A group may not be added as a member of itself" +msgstr "एक समूह खुद के ही सदस्य नहीं हो सकता" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, fuzzy, python-format +#| msgid "Only one value is allowed" +msgid "%(attr)s: Only one value allowed." +msgstr "केवल एक मान की अनुमति है" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" msgid "incorrect type" msgstr "गलत प्रकार" +msgid "Only one value is allowed" +msgstr "केवल एक मान की अनुमति है" + +msgid "this option is deprecated" +msgstr "" + msgid "must be True or False" msgstr "सही या गलत होना चाहिए" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be True or False" +msgid "must be one of %(values)s" +msgstr "सही या गलत होना चाहिए" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be datetime value" +msgstr "सही या गलत होना चाहिए" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be relative" +msgstr "सही या गलत होना चाहिए" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "केवल एक मान की अनुमति है" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "A list of LDAP entries" +msgid "A list of ACI values" +msgstr "LDAP प्रविष्टियों की सूची" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "एक आंतरिक त्रुटि हुई है" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +msgid "Common Name" +msgstr "" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "" + +msgid "Minimum serial number" +msgstr "" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Group Options" +msgstr "" + +msgid "Search Options" +msgstr "" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +msgid "Service Options" +msgstr "" + +msgid "User Options" +msgstr "" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +msgid "Permission settings" +msgstr "" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +msgid "Server Roles" +msgstr "" + +msgid "Server Role" +msgstr "" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "" + +msgid "Service Settings" +msgstr "" + +msgid "Provisioning" +msgstr "" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +msgid "Any Command" +msgstr "" + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +msgid "Service Vaults" +msgstr "" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "पासवर्ड मेल नहीं खाते" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +msgid "IPA Servers" +msgstr "" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "सही या गलत होना चाहिए" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Password is too long!\n" +msgstr "पासवर्ड मेल नहीं खाते" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/hu.po b/po/hu.po index 53679cd40..90b8a15f0 100644 --- a/po/hu.po +++ b/po/hu.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:31+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2021-01-04 18:36+0000\n" "Last-Translator: Thomas Dombradi \n" "Language-Team: Hungarian \".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +#, fuzzy +#| msgid "Description" +msgid "description" +msgstr "Leírás" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "Leírás" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Rename" +msgstr "Szabály neve" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" msgid "Default shell" msgstr "Alapértelmezett shell" +#, fuzzy +#| msgid "Default shell" +msgid "Default shell for new users" +msgstr "Alapértelmezett shell" + msgid "Default users group" msgstr "Alapértelmezett csoport" -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" +msgid "Default group for new users" +msgstr "" -msgid "Description" -msgstr "Leírás" +msgid "Default e-mail domain" +msgstr "" -msgid "Fingerprint (SHA1)" +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Subject base" +msgstr "Tanúsítvány" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default user objectclasses" +msgstr "Alapértelmezett csoport" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default SELinux user" +msgstr "Alapértelmezett csoport" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Default PAC types" +msgstr "Alapértelmezett shell" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member user group" +msgstr "Felhasználói csport" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Zone name (FQDN)" +msgid "Zone name" +msgstr "Zóna neve (FQDN)" + +msgid "Zone name (FQDN)" +msgstr "Zóna neve (FQDN)" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Record name" +msgstr "Szabály neve" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +msgid "Record type" +msgstr "" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate Type" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Type" +msgstr "Tanúsítvány" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate/CRL" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate/CRL" +msgstr "Tanúsítvány" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target" +msgstr "Célcsoport" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "NAPTR Service" +msgstr "Szolgáltatások" + +#, fuzzy +#| msgid "Services" +msgid "Service" +msgstr "Szolgáltatások" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +msgid "NS Hostname" +msgstr "" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "SSHFP Fingerprint Type" msgstr "Ujjlenyomat (SHA1)" -msgid "GID" -msgstr "GID" +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint Type" +msgstr "Ujjlenyomat (SHA1)" -msgid "GID (use this option to set it manually)" -msgstr "GID (kézzel történő beállításhoz)" +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "SSHFP Fingerprint" +msgstr "Ujjlenyomat (SHA1)" -#, python-format -msgid "Group '%s' does not exist" -msgstr "A '%s' csoport nem létezik" +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint" +msgstr "Ujjlenyomat (SHA1)" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "TLSA Certificate Usage" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Usage" +msgstr "Tanúsítvány" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "SOA sorozatszám" + +#, fuzzy +#| msgid "Serial number" +msgid "SOA record serial number" +msgstr "Sorozatszám" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +#, fuzzy +#| msgid "SOA serial" +msgid "SOA retry" +msgstr "SOA sorozatszám" + +msgid "SOA record retry time" +msgstr "" + +#, fuzzy +#| msgid "SOA serial" +msgid "SOA expire" +msgstr "SOA sorozatszám" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission value" +msgstr "Jogosultságok" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "Szabály neve" + +#, fuzzy +#| msgid "Rule name" +msgid "Rule type" +msgstr "Szabály neve" + +msgid "Rule type (allow)" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User category" +msgstr "Felhasználói csport" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service category" +msgstr "Szolgáltatás neve" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User Groups" +msgstr "Felhasználói csport" + +msgid "Hosts" +msgstr "" + +msgid "Host Groups" +msgstr "" + +msgid "Services" +msgstr "Szolgáltatások" + +msgid "Service Groups" +msgstr "Szolgáltatás-csoportok" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC services to add" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "member HBAC service group" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups to add" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "member group" +msgstr "Felhasználói csport" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC services to remove" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups to remove" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "Szolgáltatás neve" + +#, fuzzy +#| msgid "Services" +msgid "HBAC service" +msgstr "Szolgáltatások" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service description" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Member of HBAC service groups" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "Szolgáltatás-csoport neve" msgid "HBAC service group description" msgstr "HBAC szolgáltatás-csoport leírása" -msgid "Issuer" -msgstr "Kibocsátó" +msgid "Member HBAC service" +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Add a new HBAC service group." +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Add members to an HBAC service group." +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Delete an HBAC service group." +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Search for an HBAC service group." +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Modify an HBAC service group." +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "" + +msgid "Certificate" +msgstr "Tanúsítvány" + +msgid "Base-64 encoded server certificate" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Principal name" +msgstr "Szolgáltatás neve" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "host group" +msgstr "Felhasználói csport" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "netgroup" +msgstr "Célcsoport" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Host-group" +msgstr "Felhasználói csport" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Group name" +msgstr "Szolgáltatás-csoport neve" + +msgid "GID" +msgstr "GID" + +msgid "Group ID Number" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User login" +msgstr "Felhasználói csport" + +#, fuzzy +#| msgid "GID" +msgid "UID" +msgstr "GID" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "hostgroups" +msgstr "Felhasználói csport" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "User name" +msgstr "Szabály neve" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" msgid "LDAP URI" msgstr "LDAP URI" +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "" + +msgid "Bind DN" +msgstr "" + +msgid "User container" +msgstr "" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CA certificate" +msgstr "Tanúsítvány" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Netgroup name" +msgstr "Szolgáltatás-csoport neve" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Netgroup description" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "NIS domain name" +msgstr "" + +msgid "IPA unique ID" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member netgroups" +msgstr "Felhasználói csport" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member Group" +msgstr "Felhasználói csport" + +msgid "Member Host" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member Hostgroup" +msgstr "Felhasználói csport" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "member netgroup" +msgstr "Felhasználói csport" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "group" +msgstr "Felhasználói csport" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission name" +msgstr "Jogosultságok" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +msgid "Bind rule type" +msgstr "" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target DN" +msgstr "Célcsoport" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member of group" +msgstr "Felhasználói csport" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission flags" +msgstr "Jogosultságok" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Privilege name" +msgstr "Szolgáltatás neve" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Privilege description" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "permission" +msgstr "Jogosultságok" + +#, fuzzy +#| msgid "Permissions" +msgid "permissions" +msgstr "Jogosultságok" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + msgid "Max lifetime (days)" msgstr "Élettartam legfeljebb (nap)" @@ -89,81 +5003,18976 @@ msgstr "Minimális élettartam (óra)" msgid "Minimum password lifetime (in hours)" msgstr "Jelszó minimális élettartama (óra)" -msgid "Not After" -msgstr "Érvényesség vége" - -msgid "Not Before" -msgstr "Érvényesség kezdete" +#, fuzzy +#| msgid "Password history size" +msgid "History size" +msgstr "Megőrzött jelszavak (darab)" msgid "Password history size" msgstr "Megőrzött jelszavak (darab)" -msgid "Passwords do not match" -msgstr "A jelszavak nem egyeznek meg" +msgid "Character classes" +msgstr "Karakterosztályok" -#, c-format -msgid "Passwords do not match!\n" -msgstr "A jelszavak nem egyeznek!\n" +#, fuzzy +#| msgid "Character classes" +msgid "Minimum number of character classes" +msgstr "Karakterosztályok" -msgid "Permissions" -msgstr "Jogosultságok" +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Server" +msgstr "Szolgáltatások" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Role name" +msgstr "Szabály neve" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member groups" +msgstr "Felhasználói csport" + +msgid "Privileges" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Member services" +msgstr "Szolgáltatások" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "services to add" +msgstr "Szolgáltatások" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "services to remove" +msgstr "Szolgáltatás-csoport neve" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Self-service name" +msgstr "Szolgáltatás neve" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service principal" +msgstr "Szolgáltatás neve" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +#, fuzzy +#| msgid "Description" +msgid "Group description" +msgstr "Leírás" + +msgid "Commands" +msgstr "" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Full name" +msgstr "Szabály neve" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Pager Number" +msgstr "Sorozatszám" + +#, fuzzy +#| msgid "Serial number" +msgid "Fax Number" +msgstr "Sorozatszám" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member of groups" +msgstr "Felhasználói csport" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Don't create user private group" +msgstr "Alapértelmezett csoport" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default (fallback) Group" +msgstr "Alapértelmezett csoport" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" msgid "Reason" msgstr "Ok" -msgid "Request id" -msgstr "Igénylés azonosítója" +msgid "Reason for revoking the certificate (0-10)" +msgstr "" -msgid "Request status" -msgstr "Igénylés állapota" +#, fuzzy +#| msgid "Serial number" +msgid "minimum serial number" +msgstr "Sorozatszám" -msgid "Revocation reason" -msgstr "Visszavonás oka" +#, fuzzy +#| msgid "Serial number" +msgid "maximum serial number" +msgstr "Sorozatszám" -msgid "Revoked" -msgstr "Visszavont" +msgid "match the common name exactly" +msgstr "" -msgid "Rule name" -msgstr "Szabály neve" +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" -msgid "SOA serial" -msgstr "SOA sorozatszám" +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" msgid "Serial number" msgstr "Sorozatszám" -msgid "Service Groups" +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Revoke a certificate." +msgstr "Tanúsítvány" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "Igénylés azonosítója" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "GID (kézzel történő beállításhoz)" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +#, fuzzy +#| msgid "change to a POSIX group" +msgid "Create as a non-POSIX group" +msgstr "POSIX-csoportra módosít" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "External member" +msgstr "Sorozatszám" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Delete group." +msgstr "Alapértelmezett csoport" + +msgid "Detach a managed group from a user." +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Search for groups." msgstr "Szolgáltatás-csoportok" -msgid "Service group name" -msgstr "Szolgáltatás-csoport neve" +msgid "search for private groups" +msgstr "" -msgid "Service name" -msgstr "Szolgáltatás neve" +#, fuzzy +#| msgid "change to a POSIX group" +msgid "search for POSIX groups" +msgstr "POSIX-csoportra módosít" -msgid "Services" -msgstr "Szolgáltatások" +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" -msgid "Subject" -msgstr "Tárgy" +#, fuzzy +#| msgid "change to a POSIX group" +msgid "search for non-POSIX groups" +msgstr "POSIX-csoportra módosít" -msgid "Target group" +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "POSIX-csoportra módosít" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target host" msgstr "Célcsoport" -msgid "The default users group cannot be removed" +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Range name" +msgstr "Szabály neve" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +#| msgid "SOA serial" +msgid "Serial" +msgstr "SOA sorozatszám" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +msgid "Sudo Allow Commands" +msgstr "" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "ACL name" +msgstr "" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Add to default group" +msgstr "Alapértelmezett csoport" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server name" +msgstr "Szolgáltatás neve" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +#, fuzzy +#| msgid "Deleted service \"%(value)s\"" +msgid "Delete service delegation." +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Segment name" +msgstr "Szolgáltatás neve" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Suffix name" +msgstr "Szolgáltatás neve" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Vault name" +msgstr "Szabály neve" + +#, fuzzy +#| msgid "Description" +msgid "Vault description" +msgstr "Leírás" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Vault salt" +msgstr "Alapértelmezett shell" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Owner groups" +msgstr "Felhasználói csport" + +#, fuzzy +#| msgid "Services" +msgid "Owner services" +msgstr "Szolgáltatások" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Vault user" +msgstr "Alapértelmezett csoport" + +#, fuzzy +#| msgid "Certificate" +msgid "Transport Certificate" +msgstr "Tanúsítvány" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "owner group" +msgstr "Felhasználói csport" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +#, fuzzy +#| msgid "The default users group cannot be removed" +msgid "Owners that could not be removed" msgstr "Az alapértelmezett csoport nem távolítható el" +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "Description" +msgid "Profile description" +msgstr "Leírás" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +#, fuzzy +#| msgid "Zone name (FQDN)" +msgid "Hostname (FQDN)" +msgstr "Zóna neve (FQDN)" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Remote server name" +msgstr "Szolgáltatás neve" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Username" +msgstr "Szolgáltatás neve" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Source Host Groups" +msgstr "Szolgáltatás-csoportok" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target members of a group" +msgstr "Célcsoport" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission type" +msgstr "Jogosultságok" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!\n" +msgid "Passwords do not match!" +msgstr "A jelszavak nem egyeznek!\n" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +msgid "Topic commands:" +msgstr "" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "LDAP-bejegyzések listája" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "A jelszavak nem egyeznek meg" + +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Reason" +msgid "%(reason)s" +msgstr "Ok" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + msgid "This command requires root access" msgstr "Ez a parancs rendszergazdai jogosultságot igényel" msgid "This is already a posix group" msgstr "Ez egy létező POSIX csoport" -msgid "User group" +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "Egy csoport nem lehet tagja önmagának" + +#, fuzzy +#| msgid "This is already a posix group" +msgid "This entry is already a member" +msgstr "Ez egy létező POSIX csoport" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 kicsomagolás sikertelen: %(reason)s" + +#, fuzzy +#| msgid "A group may not be a member of itself" +msgid "A group may not be added as a member of itself" +msgstr "Egy csoport nem lehet tagja önmagának" + +msgid "The default users group cannot be removed" +msgstr "Az alapértelmezett csoport nem távolítható el" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Tanúsítványhiba: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Tanúsítványhiba: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "must be a certificate" +msgstr "Tanúsítvány" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profile" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profiles" +msgstr "Tanúsítvány" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy +#| msgid "The default users group cannot be removed" +msgid "Certificate profiles cannot be renamed" +msgstr "Az alapértelmezett csoport nem távolítható el" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i service added." +msgstr "Szolgáltatás neve" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i services added." +msgstr "Szolgáltatás neve" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed system permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Default time to live" +msgstr "Alapértelmezett shell" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted record \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "DNS Servers" +msgstr "Szolgáltatások" + +msgid "DNS Server" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "DNS Server name" +msgstr "Szolgáltatás neve" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "HBAC services" +msgstr "Szolgáltatások" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "Szolgáltatások" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Service" +msgstr "Szolgáltatások" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service group" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Groups" +msgstr "Szolgáltatás-csoportok" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Group" +msgstr "Szolgáltatás-csoportok" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "HBAC service group description" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "HBAC szolgáltatás-csoport leírása" +msgstr[1] "HBAC szolgáltatás-csoport leírása" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "host groups" msgstr "Felhasználói csport" -msgid "Zone name (FQDN)" -msgstr "Zóna neve (FQDN)" +#, fuzzy +#| msgid "User group" +msgid "Host Group" +msgstr "Felhasználói csport" -msgid "change to a POSIX group" +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy +#| msgid "User group" +msgid "hostgroup" +msgstr "Felhasználói csport" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "netgroups" +msgstr "Célcsoport" + +#, fuzzy +#| msgid "Target group" +msgid "Netgroups" +msgstr "Célcsoport" + +#, fuzzy +#| msgid "Target group" +msgid "Netgroup" +msgstr "Célcsoport" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Sorozatszám" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "A list of LDAP entries" +msgid "A list of ACI values" +msgstr "LDAP-bejegyzések listája" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "A '%s' csoport nem létezik" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Syntax Error: %(error)s" +msgstr "Tanúsítványhiba: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr "A '%s' csoport nem létezik" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "groups" +msgstr "Felhasználói csport" + +#, fuzzy +#| msgid "User group" +msgid "User Group" +msgstr "Felhasználói csport" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy +#| msgid "Target group" +msgid "privileged group" +msgstr "Célcsoport" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Permissions\n" +msgstr "Jogosultságok" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Managed permissions\n" +msgstr "Jogosultságok" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Group '%s' does not exist" +msgid "Entry %s does not exist" +msgstr "A '%s' csoport nem létezik" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified permission \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "runAs groups" +msgstr "Felhasználói csport" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "locations" +msgstr "Visszavonás oka" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "Location name" +msgstr "Visszavonás oka" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Servers" +msgstr "Szolgáltatások" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Version" +msgstr "Jogosultságok" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Method name" +msgstr "Szabály neve" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +#| msgid "Character classes" +msgid "Search for classes." +msgstr "Karakterosztályok" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +#, fuzzy +#| msgid "Request id" +msgid "Required" +msgstr "Igénylés azonosítója" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Alapértelmezett shell" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "Alapértelmezett csoport" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "self service permission" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Jogosultságok" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "IPA server role name" +msgstr "Szolgáltatás-csoport neve" + +#, fuzzy +#| msgid "Request status" +msgid "Role status" +msgstr "Igénylés állapota" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "IPA role name" +msgstr "Szabály neve" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Tanúsítvány" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "Tárgy" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Tárgy" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Tárgy" + +msgid "Subject IP Address" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Tárgy" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Tárgy" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "Kibocsátó" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Kibocsátó" + +msgid "Not Before" +msgstr "Érvényesség kezdete" + +msgid "Not After" +msgstr "Érvényesség vége" + +msgid "Fingerprint (SHA1)" +msgstr "Ujjlenyomat (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Ujjlenyomat (SHA1)" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Sorozatszám" + +msgid "Request status" +msgstr "Igénylés állapota" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "Visszavont" + +msgid "Revocation reason" +msgstr "Visszavonás oka" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "7 is not a valid revocation reason" +msgstr "Visszavonás oka" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Authority" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Authorities" +msgstr "Tanúsítvány" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DN" +msgstr "Tárgy" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Created CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +#, fuzzy +#| msgid "Issuer" +msgid "Issue" +msgstr "Kibocsátó" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoke" +msgstr "Visszavont" + +msgid "Save" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Set" +msgstr "Tárgy" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Log In Using Certificate" +msgstr "Tanúsítvány" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Add permission" +msgstr "Jogosultságok" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove permissions" +msgstr "Jogosultságok" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default host group" +msgstr "Alapértelmezett csoport" + +#, fuzzy +#| msgid "Default users group" +msgid "Default user group" +msgstr "Alapértelmezett csoport" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User group rule" +msgstr "Felhasználói csport" + +#, fuzzy +#| msgid "User group" +msgid "User group rules" +msgstr "Felhasználói csport" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Any Service" +msgstr "Szolgáltatások" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Rule status" +msgstr "Igénylés állapota" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Specified Services and Groups" +msgstr "Szolgáltatás-csoportok" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificates" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Hold" +msgstr "Tanúsítvány" + +msgid "Cessation of Operation" +msgstr "" + +msgid "Common Name" +msgstr "" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +#, fuzzy +#| msgid "Issuer" +msgid "Issued on from" +msgstr "Kibocsátó" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Maximum serial number" +msgstr "Sorozatszám" + +#, fuzzy +#| msgid "Serial number" +msgid "Minimum serial number" +msgstr "Sorozatszám" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on from" +msgstr "Visszavont" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on to" +msgstr "Visszavont" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprints" +msgstr "Ujjlenyomat (SHA1)" + +#, fuzzy +#| msgid "Certificate" +msgid "Get Certificate" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Hold Removed" +msgstr "Tanúsítvány" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Issue new certificate" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Issuer" +msgid "Issued By" +msgstr "Kibocsátó" + +#, fuzzy +#| msgid "Issuer" +msgid "Issued On" +msgstr "Kibocsátó" + +#, fuzzy +#| msgid "Issuer" +msgid "Issued To" +msgstr "Kibocsátó" + +msgid "Key Compromise" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "No Valid Certificate" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "New Certificate" +msgstr "Tanúsítvány" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate requested" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Revoke certificate" +msgstr "Tanúsítvány" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Revoked" +msgstr "Tanúsítvány" + +msgid "REVOKED" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number" +msgstr "Sorozatszám" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number (hex)" +msgstr "Sorozatszám" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "SHA1 Fingerprint" +msgstr "Ujjlenyomat (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "SHA256 Fingerprint" +msgstr "Ujjlenyomat (SHA1)" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Valid Certificate Present" +msgstr "Tanúsítvány" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "View Certificate" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate For Match" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Mapping Match" +msgstr "Tanúsítvány" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User Login" +msgstr "Felhasználói csport" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate mapping data" +msgstr "Tanúsítvány" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Group Options" +msgstr "" + +msgid "Search Options" +msgstr "" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Options" +msgstr "Szolgáltatások" + +#, fuzzy +#| msgid "Description" +msgid "User Options" +msgstr "Leírás" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove Permission" +msgstr "Jogosultságok" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "Felhasználói csport" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Groups" +msgstr "Szolgáltatás-csoportok" + +msgid "Group categories" +msgstr "" + +#, fuzzy +#| msgid "change to a POSIX group" +msgid "Change to external group" msgstr "POSIX-csoportra módosít" + +#, fuzzy +#| msgid "change to a POSIX group" +msgid "Change to POSIX group" +msgstr "POSIX-csoportra módosít" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Remove user groups" +msgstr "Alapértelmezett csoport" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Via Service" +msgstr "Szolgáltatások" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Add HBAC service group" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Remove HBAC service groups" +msgstr "HBAC szolgáltatás-csoport leírása" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Host Certificate" +msgstr "Tanúsítvány" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Enter trusted group name." +msgstr "Szolgáltatás-csoport neve" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Remove netgroups" +msgstr "Szolgáltatás-csoportok" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission settings" +msgstr "Jogosultságok" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +#, fuzzy +#| msgid "Password history size" +msgid "Password Policy" +msgstr "Megőrzött jelszavak (darab)" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Server Roles" +msgstr "Szolgáltatás-csoportok" + +#, fuzzy +#| msgid "Service name" +msgid "Server Role" +msgstr "Szolgáltatás neve" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Add service" +msgstr "Szolgáltatások" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Service Certificate" +msgstr "Tanúsítvány" + +#, fuzzy +#| msgid "Services" +msgid "Service Settings" +msgstr "Szolgáltatások" + +#, fuzzy +#| msgid "Permissions" +msgid "Provisioning" +msgstr "Jogosultságok" + +#, fuzzy +#| msgid "Services" +msgid "Remove services" +msgstr "Szolgáltatások" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Service unprovisioned" +msgstr "Szolgáltatás-csoportok" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +msgid "Any Command" +msgstr "" + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Specified Groups" +msgstr "Szolgáltatás-csoportok" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "Replication configuration" +msgstr "Visszavonás oka" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Trust status" +msgstr "Igénylés állapota" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +#, fuzzy +#| msgid "Password history size" +msgid "Password expiration" +msgstr "Megőrzött jelszavak (darab)" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "Szolgáltatások" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +msgid "Current password is required" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Maximum password lifetime (in days)" +msgid "Your password expires in ${days} days." +msgstr "Jelszó maximális élettartama (nap)" + +msgid "First OTP" +msgstr "" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "A jelszavak nem egyeznek meg" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Network Services" +msgstr "Szolgáltatások" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +#, fuzzy +#| msgid "Request id" +msgid "Required field" +msgstr "Igénylés azonosítója" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "IPA Servers" +msgstr "Szolgáltatások" + +msgid "Server location" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service weight" +msgstr "Szolgáltatás neve" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server state" +msgstr "Szolgáltatás neve" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Service delegation target" +msgstr "Szolgáltatás-csoport neve" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "LDAP URI" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +#, fuzzy +#| msgid "Password history size" +msgid "Password Policies" +msgstr "Megőrzött jelszavak (darab)" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +#, fuzzy +#| msgid "Maximum password lifetime (in days)" +msgid "Maximum password life must be greater than minimum." +msgstr "Jelszó maximális élettartama (nap)" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +#, fuzzy +#| msgid "GID" +msgid "SID" +msgstr "GID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "service" +msgstr "Szolgáltatások" + +#, fuzzy +#| msgid "Services" +msgid "services" +msgstr "Szolgáltatások" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "SMB service NetBIOS name" +msgstr "Szolgáltatás neve" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from a service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Member service groups" +msgstr "Szolgáltatás-csoportok" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Member HBAC service groups" +msgstr "HBAC szolgáltatás-csoport leírása" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Request must be a dict" +msgstr "Igénylés állapota" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!\n" +msgid "Password is too long!\n" +msgstr "A jelszavak nem egyeznek!\n" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/id.po b/po/id.po index ef2c5eb8e..5a0a611cf 100644 --- a/po/id.po +++ b/po/id.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2021-01-27 10:31+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2020-10-26 03:15+0000\n" "Last-Translator: Andika Triwidada \n" "Language-Team: Indonesian \".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +#, fuzzy +#| msgid "Print debugging information" +msgid "Mount information" +msgstr "Cetak informasi awakutu" + +#, fuzzy +#| msgid "Service Options" +msgid "description" +msgstr "Opsi Layanan" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Description" +msgstr "Opsi Layanan" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete an automount key." +msgstr "Menghapus suatu hostgroup." + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify an automount key." +msgstr "Memodifikasi suatu hostgroup." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +#, fuzzy +#| msgid "Print debugging information" +msgid "New mount information" +msgstr "Cetak informasi awakutu" + +#, fuzzy +#| msgid "Realm name" +msgid "Rename" +msgstr "Nama realm" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete an automount map." +msgstr "Menghapus suatu hostgroup." + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify an automount map." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "Maximum serial number" +msgid "Maximum username length" +msgstr "Nomor seri maksimum" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Default users group" +msgstr "Menghapus grup." + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Member user group" +msgstr "Menghapus grup." + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a delegation." +msgstr "Menghapus suatu hostgroup." + +msgid "Search for delegations." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a delegation." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +#, fuzzy +#| msgid "Forwarders" +msgid "Global forwarders" +msgstr "Forwarder" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Zone name" +msgstr "Nama perintah" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +#, fuzzy +#| msgid "Forwarders" +msgid "Zone forwarders" +msgstr "Forwarder" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "Record name" +msgstr "Tipe record" + +msgid "Time to live" +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "Records" +msgstr "Tipe record" + +msgid "Record type" +msgstr "Tipe record" + +#, fuzzy +#| msgid "Record type" +msgid "Record data" +msgstr "Tipe record" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +#, fuzzy +#| msgid "Mailing Address" +msgid "IP Address" +msgstr "Alamat Surat" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "A6 Record data" +msgstr "Tipe record" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "AFSDB Hostname" +msgstr "namahost" + +#, fuzzy +#| msgid "hostname" +msgid "Hostname" +msgstr "namahost" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "CNAME Hostname" +msgstr "namahost" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +#, fuzzy +#| msgid "DLV Digest" +msgid "DLV Digest Type" +msgstr "Digest DLV" + +#, fuzzy +#| msgid "DS Digest" +msgid "Digest Type" +msgstr "Digest DS" + +msgid "DLV Digest" +msgstr "Digest DLV" + +#, fuzzy +#| msgid "DS Digest" +msgid "Digest" +msgstr "Digest DS" + +#, fuzzy +#| msgid "DNAME Target" +msgid "DNAME record" +msgstr "Target DNAME" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "Target DNAME" + +msgid "Target" +msgstr "Target" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +#, fuzzy +#| msgid "DS Digest" +msgid "DS Digest Type" +msgstr "Digest DS" + +msgid "DS Digest" +msgstr "Digest DS" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Service" +msgstr "Opsi Layanan" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "NS Hostname" +msgstr "namahost" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "PTR Hostname" +msgstr "namahost" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "RP record" +msgstr "Tipe record" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +#, fuzzy +#| msgid "SRV Target" +msgid "SRV record" +msgstr "Target SRV" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +#, fuzzy +#| msgid "SRV Target" +msgid "SRV Weight" +msgstr "Target SRV" + +msgid "Weight" +msgstr "" + +#, fuzzy +#| msgid "SRV Target" +msgid "SRV Port" +msgstr "Target SRV" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "Target SRV" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +#, fuzzy +#| msgid "Serial" +msgid "SOA serial" +msgstr "Serial" + +#, fuzzy +#| msgid "Maximum serial number" +msgid "SOA record serial number" +msgstr "Nomor seri maksimum" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "Izinkan kuiri" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +#, fuzzy +#| msgid "Allow query" +msgid "Allow transfer" +msgstr "Izinkan kuiri" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Disable DNS Zone." +msgstr "harus berupa nama DNS" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +#, fuzzy +#| msgid "Forwarders" +msgid "Forward zones only" +msgstr "Forwarder" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Rule name" +msgstr "Nama realm" + +#, fuzzy +#| msgid "Record type" +msgid "Rule type" +msgstr "Tipe record" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Service category" +msgstr "Opsi Layanan" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "Users" +msgstr "pengguna" + +msgid "User Groups" +msgstr "" + +msgid "Hosts" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Host Groups" +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "Service Options" +msgid "Services" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Service Groups" +msgstr "Opsi Layanan" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "member host group" +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "%i hosts or hostgroups added." +msgid "host groups to add" +msgstr "%i hosts atau hostgroups ditambahkan." + +msgid "Members that could not be added" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of members added" +msgstr "Cacah pengaya yang dimuat" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "member group" +msgstr "Menghapus grup." + +msgid "groups to add" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete an HBAC rule." +msgstr "Menghapus suatu hostgroup." + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify an HBAC rule." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "%i host or hostgroup removed." +msgid "hosts to remove" +msgstr "%i host atau hostgroup dibuang." + +#, fuzzy +#| msgid "%i host or hostgroup removed." +msgid "host groups to remove" +msgstr "%i host atau hostgroup dibuang." + +msgid "Members that could not be removed" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of members removed" +msgstr "Cacah pengaya yang dimuat" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Service name" +msgstr "Nama Peladen" + +msgid "HBAC service" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "HBAC service description" +msgstr "Opsi Layanan" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Service group name" +msgstr "Nama Peladen" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete an HBAC service group." +msgstr "Menghapus suatu hostgroup." + +msgid "Search for an HBAC service group." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify an HBAC service group." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "Host name" +msgstr "namahost" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this host" +msgstr "Suatu penjelasan atas perintah ini" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "User password" +msgstr "kata sandi" + +#, fuzzy +#| msgid "Password cannot be set on enrolled host." +msgid "Password used in bulk enrollment" +msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Random password" +msgstr "kata sandi" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +#, fuzzy +#| msgid "Mailing Address" +msgid "MAC address" +msgstr "Alamat Surat" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +#, fuzzy +#| msgid "SSH public key:" +msgid "SSH public key" +msgstr "Kunci publik SSH:" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Member of host-groups" +msgstr "Menghapus suatu hostgroup." + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +#, fuzzy +#| msgid "Failed to retrieve any keys" +msgid "Users allowed to retrieve keytab" +msgstr "Gagal mengambil kunci apapun" + +#, fuzzy +#| msgid "Failed to retrieve any keys" +msgid "Groups allowed to retrieve keytab" +msgstr "Gagal mengambil kunci apapun" + +#, fuzzy +#| msgid "Failed to retrieve any keys" +msgid "Hosts allowed to retrieve keytab" +msgstr "Gagal mengambil kunci apapun" + +#, fuzzy +#| msgid "Failed to retrieve any keys" +msgid "Host Groups allowed to retrieve keytab" +msgstr "Gagal mengambil kunci apapun" + +#, fuzzy +#| msgid "Failed to open keytab\n" +msgid "Users allowed to create keytab" +msgstr "Gagal membuka keytab\n" + +#, fuzzy +#| msgid "Failed to open keytab\n" +msgid "Groups allowed to create keytab" +msgstr "Gagal membuka keytab\n" + +#, fuzzy +#| msgid "Failed to open keytab\n" +msgid "Hosts allowed to create keytab" +msgstr "Gagal membuka keytab\n" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a host." +msgstr "Menghapus suatu hostgroup." + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "host group" +msgstr "Tambah grup host" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "netgroup" +msgstr "Menghapus grup." + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "user" +msgstr "pengguna" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "host" +msgstr "namahost" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Kerberos principal name for this host" +msgstr "Nama Prisipal Layanan Kerberos" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "file to store certificate in" +msgstr "harus merupakan sebuah sertifikat" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Host-group" +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Name of host-group" +msgstr "Menghapus suatu hostgroup." + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this host-group" +msgstr "Suatu penjelasan atas perintah ini" + +msgid "Member hosts" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Member host-groups" +msgstr "Menghapus suatu hostgroup." + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Add a new hostgroup." +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Add members to a hostgroup." +msgstr "Menghapus suatu hostgroup." + +msgid "Delete a hostgroup." +msgstr "Menghapus suatu hostgroup." + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Search for hostgroups." +msgstr "Menghapus suatu hostgroup." + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "Memodifikasi suatu hostgroup." + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Remove members from a hostgroup." +msgstr "Menghapus suatu hostgroup." + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +#, fuzzy +#| msgid "must be dictionary" +msgid "Home directory" +msgstr "harus berupa kamus" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "hosts" +msgstr "namahost" + +msgid "Hosts to apply the ID View to" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "hostgroups" +msgstr "Tambah grup host" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +#, fuzzy +#| msgid "The hostname must not be: %s\n" +msgid "The hostname to register as" +msgstr "Nama host tidak boleh: %s\n" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "User name" +msgstr "Nama realm" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "bind password" +msgstr "kata sandi" + +msgid "Bind DN" +msgstr "" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "User container" +msgstr "vaultcontainer" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "Group container" +msgstr "vaultcontainer" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +#, fuzzy +#| msgid "{attr}: no such attribute" +msgid "Ignore user attribute" +msgstr "{attr}: tidak ada atribut seperti itu" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +#, fuzzy +#| msgid "LDAP basedn" +msgid "LDAP schema" +msgstr "basedn LDAP" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "CA certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "Cacah pengaya yang dimuat" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +msgid "Netgroup description" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "NIS domain name" +msgstr "Nama perintah" + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Member Hostgroup" +msgstr "Menghapus suatu hostgroup." + +#, fuzzy +#| msgid "Add host group" +msgid "Add a new netgroup." +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "Add host group" +msgid "Add members to a netgroup." +msgstr "Tambah grup host" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a netgroup." +msgstr "Menghapus suatu hostgroup." + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a netgroup." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "New Password" +msgstr "kata sandi" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +#, fuzzy +#| msgid "Confirm (password)" +msgid "One Time Password" +msgstr "Konfirmasi (kata sandi)" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +msgid "Bind rule type" +msgstr "Tipe aturan bind" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "DN Target" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use extratargetfilter" +msgstr "Usang; gunakan %s" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use ipapermlocation" +msgstr "Usang; gunakan %s" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use ipapermright" +msgstr "Usang; gunakan %s" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a permission." +msgstr "Menghapus suatu hostgroup." + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a permission." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Privilege name" +msgstr "namaberkas" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +msgid "permission" +msgstr "" + +msgid "permissions" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of permissions added" +msgstr "Cacah pengaya yang dimuat" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a privilege." +msgstr "Hapus semua?" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +#, fuzzy +#| msgid "Unable to remove entry\n" +msgid "roles to remove" +msgstr "Tak bisa menghapus entri\n" + +msgid "Remove permissions from a privilege." +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of permissions removed" +msgstr "Cacah pengaya yang dimuat" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +#, fuzzy +#| msgid "Password is too long!\n" +msgid "Password history size" +msgstr "Kata sandi terlalu panjang!\n" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a group password policy." +msgstr "Menghapus suatu hostgroup." + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a group password policy." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +#| msgid "DNS Server name" +msgid "RADIUS proxy server name" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this RADIUS proxy server" +msgstr "Suatu penjelasan atas perintah ini" + +#, fuzzy +#| msgid "Server Name" +msgid "Server" +msgstr "Nama Peladen" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "Domain" + +#, fuzzy +#| msgid "Domain" +msgid "Add domain" +msgstr "Domain" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete domain" +msgstr "Hapus semua?" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify realm domains." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Role name" +msgstr "Nama realm" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this role-group" +msgstr "Suatu penjelasan atas perintah ini" + +msgid "Member users" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Member groups" +msgstr "Menghapus grup." + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "services to add" +msgstr "Opsi Layanan" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of privileges added" +msgstr "Cacah pengaya yang dimuat" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a role." +msgstr "Menghapus grup." + +msgid "Search for roles." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a role." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of privileges removed" +msgstr "Cacah pengaya yang dimuat" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +#, fuzzy +#| msgid "DNS Server name" +msgid "Self-service name" +msgstr "Nama Server DNS" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Service principal" +msgstr "Opsi Layanan" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "" + +msgid "A description of this command" +msgstr "Suatu penjelasan atas perintah ini" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +msgid "Group description" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Commands" +msgstr "Nama perintah" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete Sudo Command Group." +msgstr "Menghapus suatu hostgroup." + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify Sudo Command Group." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "First name" +msgstr "namahost" + +#, fuzzy +#| msgid "hostname" +msgid "Last name" +msgstr "namahost" + +#, fuzzy +#| msgid "Realm name" +msgid "Full name" +msgstr "Nama realm" + +#, fuzzy +#| msgid "filename" +msgid "Display name" +msgstr "namaberkas" + +msgid "Initials" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Kerberos principal" +msgstr "Nama Prisipal Layanan Kerberos" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Kerberos principal expiration" +msgstr "Nama Prisipal Layanan Kerberos" + +#, fuzzy +#| msgid "Mailing Address" +msgid "Email address" +msgstr "Alamat Surat" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "Akun dinonaktifkan" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a user." +msgstr "Menghapus suatu hostgroup." + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a user." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this auto member rule" +msgstr "Suatu penjelasan atas perintah ini" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +#, fuzzy +#| msgid "Auto member rule: %s not found!" +msgid "Automember Rule" +msgstr "Aturan anggota otomatis: %s tidak ditemukan!" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of conditions added" +msgstr "Cacah pengaya yang dimuat" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of conditions removed" +msgstr "Cacah pengaya yang dimuat" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Alasan" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "nomor seri minimum" + +msgid "maximum serial number" +msgstr "nomor seri maksimum" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +#, fuzzy +#| msgid "Maximum serial number" +msgid "Serial number" +msgstr "Nomor seri maksimum" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "Mengirim sebuah permintan penandatanganan sertifikat." + +msgid "CSR" +msgstr "CSR" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Revoke a certificate." +msgstr "harus merupakan sebuah sertifikat" + +msgid "Retrieve an existing certificate." +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Output filename" +msgstr "namaberkas" + +msgid "File to store the certificate in." +msgstr "" + +#, fuzzy +#| msgid "Gather data for a certificate signing request." +msgid "Check the status of a certificate signing request." +msgstr "Mengumpulkan data untuk suatu permintaan penandatanganan sertifikat." + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Create a new group." +msgstr "Menghapus suatu hostgroup." + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Add members to a group." +msgstr "Tambah grup host" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "Menghapus grup." + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a group." +msgstr "Memodifikasi suatu hostgroup." + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Target host" +msgstr "Target" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "GUID Domain" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Domain name" +msgstr "Nama perintah" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain administrator" +msgstr "Domain Active Directory" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain administrator's password" +msgstr "Domain Active Directory" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "Range type" +msgstr "Tipe record" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a trust." +msgstr "Menghapus suatu hostgroup." + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Range name" +msgstr "Nama realm" + +msgid "First Posix ID of the range" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of IDs in the range" +msgstr "Cacah pengaya yang dimuat" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "Serial" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "(deprecated)" +msgstr "Usang; gunakan %s" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +#, fuzzy +#| msgid "Deleted OTP token \"%(value)s\"" +msgid "Delete an OTP token." +msgstr "Menghapus token OTP \"%(value)s\"" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a OTP token." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Command category" +msgstr "Nama perintah" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +msgid "Sudo Allow Commands" +msgstr "" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "RunAs Users" +msgstr "pengguna" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Sudo Option" +msgstr "Opsi Layanan" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +#, fuzzy +#| msgid "%i hosts or hostgroups added." +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "%i hosts atau hostgroups ditambahkan." + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete Sudo Rule." +msgstr "Menghapus grup." + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +#, fuzzy +#| msgid "%i hosts or hostgroups added." +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "%i hosts atau hostgroups ditambahkan." + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "ACL name" +msgstr "Nama perintah" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "Domain Level" +msgstr "Domain" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Add to default group" +msgstr "Tambah grup host" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +#, fuzzy +#| msgid "Target DN" +msgid "Target DN subtree" +msgstr "DN Target" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server name" +msgstr "Nama Peladen" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA server hostname" +msgstr "Server IPA yang akan digunakan" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#, fuzzy +#| msgid "DNAME Target" +msgid "Allowed Target" +msgstr "Target DNAME" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "Removing principal %s\n" +msgid "member principal" +msgstr "Menghapus prinsipal %s\n" + +#, fuzzy +#| msgid "principal not found\n" +msgid "principal to add" +msgstr "prinsipal tidak ditemukan\n" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "principal not found\n" +msgid "principal to remove" +msgstr "prinsipal tidak ditemukan\n" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a stage user." +msgstr "Menghapus suatu hostgroup." + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a stage user." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Segment name" +msgstr "Nama realm" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Suffix name" +msgstr "namaberkas" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete a segment." +msgstr "Menghapus suatu hostgroup." + +msgid "Search for topology segments." +msgstr "" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify a segment." +msgstr "Memodifikasi suatu hostgroup." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Vault name" +msgstr "Nama realm" + +msgid "Vault description" +msgstr "" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +#, fuzzy +#| msgid "Public key:" +msgid "Public key" +msgstr "Kunci publik:" + +#, fuzzy +#| msgid "SSH public key:" +msgid "Vault public key" +msgstr "Kunci publik SSH:" + +#, fuzzy +#| msgid "users" +msgid "Owner users" +msgstr "pengguna" + +msgid "Owner groups" +msgstr "" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Transport Certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Service name of the service vault" +msgstr "" + +#, fuzzy +#| msgid "Hostname of this server" +msgid "Username of the user vault" +msgstr "Nama host peladen ini" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +msgid "owner group" +msgstr "" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of owners added" +msgstr "Cacah pengaya yang dimuat" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "Nonce" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a vault." +msgstr "Hapus semua?" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of owners removed" +msgstr "Cacah pengaya yang dimuat" + +msgid "Display information about a vault." +msgstr "" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "Add owners to a vault container." +msgstr "vaultcontainer" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "Delete a vault container." +msgstr "vaultcontainer" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "Brief description of this profile" +msgstr "Suatu penjelasan atas perintah ini" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Store issued certificates" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Delete a Certificate Profile." +msgstr "harus merupakan sebuah sertifikat" + +msgid "Search for Certificate Profiles." +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Import a Certificate Profile." +msgstr "harus merupakan sebuah sertifikat" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +#, fuzzy +#| msgid "cannot open configuration file %s\n" +msgid "Write profile configuration to file" +msgstr "tidak dapat membuka berkas konfigurasi %s\n" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "Hostname (FQDN)" +msgstr "namahost" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "DNS Server name" +msgid "Remote server name" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "Remote IPA server hostname" +msgstr "Server IPA yang akan digunakan" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Public key:" +msgid "KEY Public Key" +msgstr "Kunci publik:" + +#, fuzzy +#| msgid "Public key:" +msgid "Public Key" +msgstr "Kunci publik:" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Signer's Name" +msgstr "Nama Peladen" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "Mengkonsumsi suatu hak." + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +#, fuzzy +#| msgid "Enrollment UUID (not implemented)" +msgid "Enrollment UUID" +msgstr "UUID pendaftaran (tidak diimplementasikan)" + +msgid "Register to the entitlement system." +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Username" +msgstr "namaberkas" + +msgid "Enrollment UUID (not implemented)" +msgstr "UUID pendaftaran (tidak diimplementasikan)" + +msgid "Registration password" +msgstr "" + +#, fuzzy +#| msgid "Consume an entitlement." +msgid "Display current entitlements." +msgstr "Mengkonsumsi suatu hak." + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +#, fuzzy +#| msgid "Comma separated encryption types list" +msgid "comma-separated list of permissions" +msgstr "Daftar tipe enkripsi yang dipisahkan koma" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active directory domain administrator's password" +msgstr "Domain Active Directory" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "Server DNS %(server)s: %(error)s." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d variabel" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d pengaya telah dimuat" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Masukkan %(label)s lagi untuk verifikasi: " + +msgid "Passwords do not match!" +msgstr "Kata sandi tidak cocok!" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +msgid "Topic commands:" +msgstr "" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "Nama perintah" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated options" +msgstr "Usang; gunakan %s" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "Hasil yang terpotong, coba cari dengan lebih spesifik" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "kesalahan %(code)d tidak dikenal dari %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "terjadi kesalahan internal" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "terjadi kesalahan internal pada server di '%(server)s'" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "galat pada server '%(server)s': %(error)s" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "galat pada server '%(server)s': %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Permintaan JSON-RPC tidak valid: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kesalahan kerberos: %(major)s/%(minor)s" + +#, fuzzy +#| msgid "Unable to generate Kerberos Credential Cache\n" +msgid "did not receive Kerberos credentials" +msgstr "Tidak dapat menghasilkan Kerberos Credential Cache\n" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "Tiket kedaluwarsa" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +#, fuzzy +#| msgid "Error storing creds in credential cache: %s.\n" +msgid "Bad format in credentials cache" +msgstr "Galat saat menyimpan kredensial dalam singgahan kredensial: %s.\n" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Hak akses tidak mencukupi: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "'%(name)s' tidak valid: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "Kata sandi tidak cocok" + +msgid "Command not implemented" +msgstr "Perintah tidak diimplementasikan" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Entri ini sudah ada" + +msgid "You must enroll a host in order to create a host service" +msgstr "Anda harus mendaftarkan sebuah host untuk membuat layanan host" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "Perintah ini memerlukan akses root" + +msgid "This is already a posix group" +msgstr "Ini sudah merupakan grup posix" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already enabled" +msgstr "Entri ini sudah ada" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already disabled" +msgstr "Entri ini sudah ada" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "Sebuah grup tidak mungkin menjadi anggota grup itu sendiri" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already a member" +msgstr "Entri ini sudah ada" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Penguraian Base64 gagal: %(reason)s" + +#, fuzzy +#| msgid "A group may not be a member of itself" +msgid "A group may not be added as a member of itself" +msgstr "Sebuah grup tidak mungkin menjadi anggota grup itu sendiri" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, fuzzy, python-format +#| msgid "must be a certificate" +msgid "'%(entry)s' doesn't have a certificate." +msgstr "harus merupakan sebuah sertifikat" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "perubahan bertabrakan dengan perubahan lain" + +msgid "no modifications to be performed" +msgstr "tidak ada modifikasi yang harus dilakukan" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" msgid "limits exceeded for this query" msgstr "query ini telah melampaui batas" #, python-format -msgid "map %(map)s already exists" -msgstr "peta %(map)s sudah ada" +msgid "%(info)s" +msgstr "%(info)s" -msgid "maximum serial number" -msgstr "nomor seri maksimum" - -msgid "minimum serial number" -msgstr "nomor seri minimum" +msgid "modifying primary key is not allowed" +msgstr "" #, python-format -msgid "must be '%(value)s'" -msgstr "harus '%(value)s'" +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Hanya satu nilai yang diperbolehkan." -msgid "must be DNS name" -msgstr "harus berupa nama DNS" +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" -msgid "must be TRUE or FALSE" -msgstr "harus TRUE atau FALSE" +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" + +#, fuzzy, python-format +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate format error: %(error)s" +msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "tipe salah" + +msgid "Only one value is allowed" +msgstr "Hanya satu nilai yang diperbolehkan" + +msgid "this option is deprecated" +msgstr "" msgid "must be True or False" msgstr "harus True atau False" -msgid "must be Unicode text" -msgstr "harus teks Unicode" +msgid "must be an integer" +msgstr "harus merupakan bilangan bulat" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "setidaknya harus %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "nilai maksimum yang diperbolehkan %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "harus merupakan angka desimal" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "setidaknya harus %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "boleh maksimum %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "harus cocok dengan pola \"%(pattern)s\"" + +msgid "must be binary data" +msgstr "harus merupakan data biner" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "panjang minimum yang diperbolehkan %(minlength)d byte" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "panjang maksimum yang diperbolehkan %(maxlength)d byte" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "harus tepat %(length)d byte" msgid "must be a certificate" msgstr "harus merupakan sebuah sertifikat" @@ -1077,121 +12664,2441 @@ msgstr "harus merupakan sebuah sertifikat" msgid "must be a certificate signing request" msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" -msgid "must be a decimal number" -msgstr "harus merupakan angka desimal" - -msgid "must be absolute" -msgstr "harus absolut" - -msgid "must be an integer" -msgstr "harus merupakan bilangan bulat" - #, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "panjang minimum yang diperbolehkan %(minlength)d byte" +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Gagal mengurai Permintaan Penandatanganan Sertifikat: %s" + +msgid "must be Unicode text" +msgstr "harus teks Unicode" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" #, python-format msgid "must be at least %(minlength)d characters" msgstr "setidaknya minimum harus %(minlength)d karakter" #, python-format -msgid "must be at least %(minvalue)d" -msgstr "setidaknya harus %(minvalue)d" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "setidaknya harus %(minvalue)s" - -msgid "must be at least 1" -msgstr "setidaknya harus 1" - -msgid "must be binary data" -msgstr "harus merupakan data biner" - -msgid "must be datetime value" -msgstr "harus berupa nilai datetime" - -msgid "must be dictionary" -msgstr "harus berupa kamus" - -msgid "must be enclosed in parentheses" -msgstr "mesti diapit kurung" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "harus tepat %(length)d byte" +msgid "can be at most %(maxlength)d characters" +msgstr "panjang maksimum yang diperbolehkan %(maxlength)d karakter" #, python-format msgid "must be exactly %(length)d characters" msgstr "harus tepat %(length)d karakter" +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "harus '%(value)s'" + #, python-format msgid "must be one of %(values)s" msgstr "harus satu dari %(values)s" +msgid "must be datetime value" +msgstr "harus berupa nilai datetime" + +msgid "does not match any of accepted formats: " +msgstr "" + +#, fuzzy +#| msgid "must be datetime value" +msgid "incomplete time value" +msgstr "harus berupa nilai datetime" + +msgid "must be DNS name" +msgstr "harus berupa nama DNS" + +msgid "must be absolute" +msgstr "harus absolut" + msgid "must be relative" msgstr "harus relatif" -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "harus cocok dengan pola \"%(pattern)s\"" +msgid "must be dictionary" +msgstr "harus berupa kamus" -msgid "no modifications to be performed" -msgstr "tidak ada modifikasi yang harus dilakukan" +msgid "must be Kerberos principal" +msgstr "" -#, c-format -msgid "out of memory\n" -msgstr "kehabisan memori!\n" +#, fuzzy, python-format +#| msgid "Modify %(name)s '%(value)s'?" +msgid "Malformed principal: '%(value)s'" +msgstr "Ubah '%(value)s' %(name)s?" -msgid "password" -msgstr "kata sandi" +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Service principal is required" +msgstr "Nama Prisipal Layanan Kerberos" + +#, fuzzy, python-format +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "%(filename)s: file not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "Tidak dapat mengurai prinsipal\n" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" #, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "izin \"%(value)s\" sudah ada" +msgid "Permission denied: %(file)s" +msgstr "" -msgid "pkinit" -msgstr "pkinit" +msgid "empty DNS label" +msgstr "" -#, c-format -msgid "principal not found\n" -msgstr "prinsipal tidak ditemukan\n" +msgid "DNS label cannot be longer that 63 characters" +msgstr "" -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "prinsipal tidak ditemukan dalam respons XML-RPC\n" +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" -msgid "priority cannot be set on global policy" -msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +#, fuzzy +#| msgid "can be at most %(maxlength)d characters" +msgid "cannot be longer that {} characters" +msgstr "panjang maksimum yang diperbolehkan %(maxlength)d karakter" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +#, fuzzy +#| msgid "SSH public key:" +msgid "invalid SSH public key" +msgstr "Kunci publik SSH:" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" #, python-format msgid "query '%(owner)s %(rtype)s': %(error)s" msgstr "kuiri '%(owner)s %(rtype)s': %(error)s" -#, c-format -msgid "read error\n" -msgstr "galat baca\n" +#, fuzzy, python-format +#| msgid "query '%(owner)s %(rtype)s': %(error)s" +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "kuiri '%(owner)s %(rtype)s': %(error)s" -#, c-format -msgid "realm not found\n" -msgstr "realm tidak ditemukan\n" +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "hasil tidak ditemukan dalam respons XML-RPC\n" +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "invalid domain-name: %s" +msgstr "'%(name)s' tidak valid: %(error)s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, fuzzy, python-format +#| msgid "Entry %s not found" +msgid "objectclass %s not found" +msgstr "Entri %s tidak ditemukan" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added OTP token \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d OTP token matched" +#| msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d token OTP cocok" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified automount map \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d grup cocok" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "kunci bernama %(key)s sudah ada" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added OTP token \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified OTP token \"%(value)s\"" +msgid "Modified automount key \"%(value)s\"" +msgstr "Mengubah token OTP \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d OTP token matched" +#| msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d token OTP cocok" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d grup cocok" + +#, fuzzy, python-format +#| msgid "Created CA \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "CA \"%(value)s\" dibuat" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted CA \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "CA \"%(value)s\" dihapus" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified CA \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "CA \"%(value)s\" diubah" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d CA matched" +#| msgid_plural "%(count)d CAs matched" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "%(count)d CA cocok" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +#| msgid "%i host or hostgroup added." +msgid "%i user or group added." +msgstr "%i host atau hostgroup ditambahkan." + +#, fuzzy, python-format +#| msgid "%i hosts or hostgroups added." +msgid "%i users or groups added." +msgstr "%i hosts atau hostgroups ditambahkan." + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%i host or hostgroup removed." +msgid "%i user or group removed." +msgstr "%i host atau hostgroup dibuang." + +#, fuzzy, python-format +#| msgid "%i host or hostgroup removed." +msgid "%i users or groups removed." +msgstr "%i host atau hostgroup dibuang." + +#, python-format +msgid "%i host or hostgroup added." +msgstr "%i host atau hostgroup ditambahkan." + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "%i hosts atau hostgroups ditambahkan." + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "%i host atau hostgroup dibuang." + +#, fuzzy, python-format +#| msgid "%i host or hostgroup removed." +msgid "%i hosts or hostgroups removed." +msgstr "%i host atau hostgroup dibuang." + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, fuzzy, python-format +#| msgid "%i host or hostgroup removed." +msgid "%i services removed." +msgstr "%i host atau hostgroup dibuang." + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, fuzzy, python-format +#| msgid "%i host or hostgroup removed." +msgid "%i profiles removed." +msgstr "%i host atau hostgroup dibuang." + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "DNS zone %(zone)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, fuzzy, python-format +#| msgid "Record type" +msgid "%s Record" +msgstr "Tipe record" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "Hanya satu nilai yang diperbolehkan" + +#, fuzzy, python-format +#| msgid "Added segment \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "izin \"%(value)s\" sudah ada" + +#, fuzzy, python-format +#| msgid "Deleted segment \"%(value)s\"" +msgid "Removed system permission \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +msgid "is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted record \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "Found '%(value)s'" +msgstr "harus '%(value)s'" + +#, fuzzy, python-format +#| msgid "Entry %s not found" +msgid "Host '%(host)s' not found" +msgstr "Entri %s tidak ditemukan" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS servers" +msgstr "Server IPA yang akan digunakan" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +#, fuzzy +#| msgid "Forwarders" +msgid "DNS Forward Zones" +msgstr "Forwarder" + +#, fuzzy +#| msgid "Forwarders" +msgid "DNS Forward Zone" +msgstr "Forwarder" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "Result of the command" +msgstr "Suatu penjelasan atas perintah ini" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "DNS Server name" +msgid "DNS server" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "DNS Server name" +msgid "DNS servers" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "DNS Server name" +msgid "DNS Servers" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "DNS Server name" +msgid "DNS Server" +msgstr "Nama Server DNS" + +msgid "DNS Server name" +msgstr "Nama Server DNS" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "Forwarder" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "Search for DNS servers." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)s server cocok" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Server IPA yang akan digunakan" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)s server cocok" + +msgid "HBAC service group" +msgstr "" + +#, fuzzy +#| msgid "Failed service/service groups" +msgid "HBAC service groups" +msgstr "Grup layanan/layanan gagal" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "HBAC Service Groups" +msgstr "Server IPA yang akan digunakan" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "stage users" +msgstr "pengguna" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "boleh maksimum %(len)d karakter" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d pengguna cocok" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy +#| msgid "Entry %s not found" +msgid "Entry RDN is not 'uid'" +msgstr "Entri %s tidak ditemukan" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "key named %(key)s already exists" +msgid "active user with name \"%(user)s\" already exists" +msgstr "kunci bernama %(key)s sudah ada" + +#, fuzzy, python-format +#| msgid "${count} user(s) activated" +msgid "Stage user %s activated" +msgstr "${count} pengguna diaktifkan" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" msgid "segment" msgstr "segmen" -msgid "sidgen_was_run" -msgstr "sidgen_was_run" +#, fuzzy +#| msgid "segment" +msgid "segments" +msgstr "segmen" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" #, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "kesalahan %(code)d tidak dikenal dari %(server)s: %(error)s" +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" -msgid "users" -msgstr "pengguna" +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d host sesuai" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "%(value)s" +msgstr "harus '%(value)s'" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d host sesuai" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "host groups" +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "Add host group" +msgid "Host Group" +msgstr "Tambah grup host" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" ditambahkan" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dihapus" + +#, fuzzy +#| msgid "Add host group" +msgid "hostgroup" +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "privileged hostgroup" +msgstr "Menghapus suatu hostgroup." + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dimodifikasi" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d hostgroup cocok" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" msgid "vaultcontainer" msgstr "vaultcontainer" @@ -1199,10 +15106,9431 @@ msgstr "vaultcontainer" msgid "vaultcontainers" msgstr "vaultcontainers" +#, fuzzy +#| msgid "vaultcontainers" +msgid "Vault Containers" +msgstr "vaultcontainers" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "Vault Container" +msgstr "vaultcontainer" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "Deleted vault container" +msgstr "vaultcontainer" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d host sesuai" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +#, fuzzy +#| msgid "vaultcontainer" +msgid "Vault configuration" +msgstr "vaultcontainer" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA KRA servers" +msgstr "Server IPA yang akan digunakan" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "netgroups" +msgstr "Menghapus grup." + +#, fuzzy +#| msgid "Delete group." +msgid "Netgroups" +msgstr "Menghapus grup." + +#, fuzzy +#| msgid "Delete group." +msgid "Netgroup" +msgstr "Menghapus grup." + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Changed server state of \"%(value)s\"." +msgid "Changed password for \"%(value)s\"" +msgstr "Mengubah keadaan server \"%(value)s\"." + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s server cocok" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Minimum serial number" +msgid "invalid port number" +msgstr "Nomor seri minimum" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +#| msgid "DNS Server name" +msgid "RADIUS Servers" +msgstr "Nama Server DNS" + +#, fuzzy +#| msgid "DNS Server name" +msgid "RADIUS Server" +msgstr "Nama Server DNS" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)s server cocok" + +#, fuzzy +#| msgid "Deleted ACI \"%(value)s\"" +msgid "A list of ACI values" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, fuzzy +#| msgid "" +#| "at least one of: type, filter, subtree, targetgroup, attrs or memberof " +#| "are required" +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " +"attrs atau memberof" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " +"attrs atau memberof" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Grup '%s' tidak ada" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI dengan nama \"%s\" tidak ditemukan" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dibuat" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI cocok" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dibuat" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least 1" +msgid "must be at least 10" +msgstr "setidaknya harus 1" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA CA servers" +msgstr "Server IPA yang akan digunakan" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "'%(name)s' tidak valid: %(error)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr "Grup '%s' tidak ada" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "galat pada server '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy +#| msgid "Password cannot be set on enrolled host." +msgid "gid cannot be set for external group" +msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy +#| msgid "Delete group." +msgid "privileged group" +msgstr "Menghapus grup." + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "ipa-getkeytab has bad permissions?\n" +msgid "" +"\n" +"Managed permissions\n" +msgstr "ipa-getkeytab memiliki izin yang buruk?\n" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "mesti diapit kurung" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Usang; gunakan %s" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "Entri %s tidak ditemukan" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deprecated; use %s" +msgid "option was renamed; use %s" +msgstr "Usang; gunakan %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Entry %s not found" +msgid "%s: group not found" +msgstr "Entri %s tidak ditemukan" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "Master file" +msgid "Bad search filter" +msgstr "Berkas induk" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Entri %s tidak ada" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "cannot delete managed permissions" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "ACI of permission %s was not found" +msgstr "ACI dengan nama \"%s\" tidak ditemukan" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified permission \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d pengguna cocok" + +#, fuzzy +#| msgid "OTP Token" +msgid "" +"\n" +"OTP Tokens\n" +msgstr "Token OTP" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP token" +msgstr "Token OTP" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP tokens" +msgstr "Token OTP" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP Tokens" +msgstr "Token OTP" + +msgid "OTP Token" +msgstr "Token OTP" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Mengubah token OTP \"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d token OTP cocok" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +#, fuzzy +#| msgid "Sudo" +msgid "Sudo Rule" +msgstr "Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "pengguna" + +#, fuzzy +#| msgid "Command name" +msgid "command" +msgstr "Nama perintah" + +#, fuzzy +#| msgid "Command name" +msgid "commands" +msgstr "Nama perintah" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "runAs users" +msgstr "pengguna" + +msgid "group runAs" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "runAs groups" +msgstr "Tambah grup host" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added OTP token \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted CA \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "CA \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified CA \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "CA \"%(value)s\" diubah" + +#, fuzzy, python-format +#| msgid "%(count)d CA matched" +#| msgid_plural "%(count)d CAs matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d CA cocok" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Realm domains" +msgstr "Nama realm" + +#, fuzzy +#| msgid "Domain" +msgid "Realm Domains" +msgstr "Domain" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Kerberos Ticket Policy" +msgstr "Nama Prisipal Layanan Kerberos" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Location name" +msgstr "Nama perintah" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Servers" +msgstr "Nama Peladen" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added OTP token \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Delete an IPA location." +msgstr "Menghapus suatu hostgroup." + +#, fuzzy, python-format +#| msgid "Deleted OTP token \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server" +msgstr "Server IPA yang akan digunakan" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified OTP token \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "Mengubah token OTP \"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d OTP token matched" +#| msgid_plural "%(count)d OTP tokens matched" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d token OTP cocok" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "Method name" +msgstr "namahost" + +#, fuzzy, python-format +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "CLI name" +msgstr "Nama perintah" + +msgid "Confirm (password)" +msgstr "Konfirmasi (kata sandi)" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +#, fuzzy +#| msgid "Hostname of this server" +msgid "Convert on server" +msgstr "Nama host peladen ini" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain range" +msgstr "Domain Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "self service permissions" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Self Service Permissions" +msgstr "Opsi Layanan" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)s server cocok" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Server IPA yang akan digunakan" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "server role" +msgstr "Nama Peladen" + +#, fuzzy +#| msgid "Server Name" +msgid "server roles" +msgstr "Nama Peladen" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Roles" +msgstr "Server IPA yang akan digunakan" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Role" +msgstr "Server IPA yang akan digunakan" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA server role name" +msgstr "Server IPA yang akan digunakan" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s peran server cocok" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Aturan HBAC %(rule)s tidak ditemukan" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d pengguna cocok" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-brace-format +#| msgid "realm not found\n" +msgid "{role}: role not found" +msgstr "realm tidak ditemukan\n" + #, python-brace-format msgid "{attr}: no such attribute" msgstr "{attr}: tidak ada atribut seperti itu" -#~ msgid "Gather data for a certificate signing request." -#~ msgstr "" -#~ "Mengumpulkan data untuk suatu permintaan penandatanganan sertifikat." +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid " * 6 - certificateHold\n" +msgid " * 0 - unspecified\n" +msgstr " * 6 - certificateHold\n" + +msgid " * 1 - keyCompromise\n" +msgstr " * 1 - keyCompromise\n" + +msgid " * 2 - cACompromise\n" +msgstr " * 2 - cACompromise\n" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +#, fuzzy +#| msgid " * 2 - cACompromise\n" +msgid " * 4 - superseded\n" +msgstr " * 2 - cACompromise\n" + +#, fuzzy +#| msgid " * 6 - certificateHold\n" +msgid " * 5 - cessationOfOperation\n" +msgstr " * 6 - certificateHold\n" + +msgid " * 6 - certificateHold\n" +msgstr " * 6 - certificateHold\n" + +#, fuzzy +#| msgid " * 1 - keyCompromise\n" +msgid " * 8 - removeFromCRL\n" +msgstr " * 1 - keyCompromise\n" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr " * 9 - privilegeWithdrawn\n" + +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded certificate." +msgstr "harus merupakan sebuah sertifikat" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Subject DNS name" +msgstr "harus berupa nama DNS" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Subject Kerberos principal name" +msgstr "Nama Prisipal Layanan Kerberos" + +#, fuzzy +#| msgid "Subject Distinguished Name" +msgid "Subject Other Name" +msgstr "Distinguished Name Subjek" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +#, fuzzy +#| msgid "Maximum serial number" +msgid "Serial number (hex)" +msgstr "Nomor seri maksimum" + +msgid "Request status" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Include certificate chain in output" +msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d pengguna cocok" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d ACI cocok" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#, fuzzy +#| msgid "realm not found\n" +msgid "not found" +msgstr "realm tidak ditemukan\n" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded user certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)s peran server cocok" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d grup cocok" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy +#| msgid "Auto member rule: %s not found!" +msgid "Auto Membership is not configured" +msgstr "Aturan anggota otomatis: %s tidak ditemukan!" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Aturan anggota otomatis: %s tidak ditemukan!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted hostgroup \"%(value)s\"" +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dihapus" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d pengguna cocok" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "Distinguished Name Subjek" + +#, fuzzy +#| msgid "Subject Distinguished Name" +msgid "Issuer Distinguished Name" +msgstr "Distinguished Name Subjek" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d CA cocok" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "CA \"%(value)s\" dibuat" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +#, fuzzy +#| msgid "Must be disabled first" +msgid "Delete a CA (must be disabled first)." +msgstr "Harus dinon-fungsikan terlebih dahulu" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "CA \"%(value)s\" dihapus" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "Harus dinon-fungsikan terlebih dahulu" + +#, fuzzy +#| msgid "Modify a hostgroup." +msgid "Modify CA configuration." +msgstr "Memodifikasi suatu hostgroup." + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "CA \"%(value)s\" diubah" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy +#| msgid "Account disabled" +msgid "IPA CA cannot be disabled" +msgstr "Akun dinonaktifkan" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#, fuzzy +#| msgid "%(exception)s" +msgid "Actions" +msgstr "%(exception)s" + +msgid "Add" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${count} users(s) staged" +msgid "${count} item(s) added" +msgstr "${count} pengguna digelar" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${count} user(s) activated" +msgid "${count} item(s) removed" +msgstr "${count} pengguna diaktifkan" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete" +msgstr "Hapus semua?" + +msgid "Remove hold" +msgstr "" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Reset" +msgstr "OTP Reset" + +#, fuzzy +#| msgid "password" +msgid "Reset Password" +msgstr "kata sandi" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "Record Settings" +msgstr "Tipe record" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +#| msgid "Added host \"%(value)s\"" +msgid "Add custom value" +msgstr "Host \"%(value)s\" ditambahkan" + +msgid "Available" +msgstr "" + +#, fuzzy +#| msgid "Operation failed: %s\n" +msgid "Some operations failed." +msgstr "Operasi gagal: %s\n" + +msgid "Operations Error" +msgstr "" + +#, fuzzy +#| msgid "Confirm (password)" +msgid "Confirmation" +msgstr "Konfirmasi (kata sandi)" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Sunting ${entity}" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Terjadi kesalahan internal (${error})" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +#, fuzzy +#| msgid "" +#| "JSON-RPC response:\n" +#| "%s\n" +msgid "No response" +msgstr "" +"Respon JSON-RPC:\n" +"%s\n" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Failed to open keytab\n" +msgid "Allowed to create keytab" +msgstr "Gagal membuka keytab\n" + +#, fuzzy +#| msgid "Failed to retrieve any keys" +msgid "Allowed to retrieve keytab" +msgstr "Gagal mengambil kunci apapun" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Add Kerberos Principal Alias" +msgstr "Nama Prisipal Layanan Kerberos" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "New kerberos principal alias" +msgstr "Nama Prisipal Layanan Kerberos" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Log in using personal certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +#, fuzzy +#| msgid "OTP Token" +msgid "Sync OTP Token" +msgstr "Token OTP" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "number of passwords" +msgstr "Cacah pengaya yang dimuat" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Removing principal %s\n" +msgid "Remove privileges" +msgstr "Menghapus prinsipal %s\n" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +#, fuzzy +#| msgid "Delete a hostgroup." +msgid "Default host group" +msgstr "Menghapus suatu hostgroup." + +#, fuzzy +#| msgid "Delete group." +msgid "Default user group" +msgstr "Menghapus grup." + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Host group rule" +msgstr "Tambah grup host" + +#, fuzzy +#| msgid "Add host group" +msgid "Host group rules" +msgstr "Tambah grup host" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +#, fuzzy +#| msgid " * 2 - cACompromise\n" +msgid "AA Compromise" +msgstr " * 2 - cACompromise\n" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +#, fuzzy +#| msgid " * 2 - cACompromise\n" +msgid "CA Compromise" +msgstr " * 2 - cACompromise\n" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Certificates" +msgstr "harus merupakan sebuah sertifikat" + +#, fuzzy +#| msgid " * 6 - certificateHold\n" +msgid "Certificate Hold" +msgstr " * 6 - certificateHold\n" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Common Name" +msgstr "Nama perintah" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "Kedaluwarsa Pada" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "Nomor seri maksimum" + +msgid "Minimum serial number" +msgstr "Nomor seri minimum" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Get Certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Issue new certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +#, fuzzy +#| msgid " * 1 - keyCompromise\n" +msgid "Key Compromise" +msgstr " * 1 - keyCompromise\n" + +#, fuzzy +#| msgid "must be a certificate" +msgid "No Valid Certificate" +msgstr "harus merupakan sebuah sertifikat" + +#, fuzzy +#| msgid "must be a certificate" +msgid "New Certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${count} users(s) staged" +msgid "${count} certificate(s) present" +msgstr "${count} pengguna digelar" + +#, fuzzy +#| msgid " * 9 - privilegeWithdrawn\n" +msgid "Privilege Withdrawn" +msgstr " * 9 - privilegeWithdrawn\n" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Remove certificate hold" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "Submit a certificate signing request." +msgid "Certificate requested" +msgstr "Mengirim sebuah permintan penandatanganan sertifikat." + +#, fuzzy +#| msgid "must be a certificate" +msgid "Revoke certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +#, fuzzy +#| msgid "Maximum serial number" +msgid "Serial Number" +msgstr "Nomor seri maksimum" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "View Certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Remove certificate identity mapping rules" +msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" + +#, fuzzy +#| msgid "Service Options" +msgid "Group Options" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Search Options" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "SELinux Options" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Server Options" +msgstr "Opsi Layanan" + +msgid "Service Options" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "User Options" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Forwarders" +msgid "Forward first" +msgstr "Forwarder" + +#, fuzzy +#| msgid "Account disabled" +msgid "Forwarding disabled" +msgstr "Akun dinonaktifkan" + +#, fuzzy +#| msgid "Forwarders" +msgid "Forward only" +msgstr "Forwarder" + +#, fuzzy +#| msgid "Service Options" +msgid "Options" +msgstr "Opsi Layanan" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "Other Record Types" +msgstr "Tipe record" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +#, fuzzy +#| msgid "Operation failed: %s\n" +msgid "Record creation failed." +msgstr "Operasi gagal: %s\n" + +msgid "Checking if record exists." +msgstr "" + +#, fuzzy +#| msgid "realm not found\n" +msgid "Record not found." +msgstr "realm tidak ditemukan\n" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "Standard Record Types" +msgstr "Tipe record" + +msgid "Records for DNS Zone" +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "Record Type" +msgstr "Tipe record" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Add user group" +msgstr "Tambah grup host" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "Non-POSIX" + +#, fuzzy +#| msgid "Non-POSIX" +msgid "POSIX" +msgstr "Non-POSIX" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Add HBAC service group" +msgstr "Tambah grup host" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Failed service/service groups" +msgid "Remove HBAC service groups" +msgstr "Grup layanan/layanan gagal" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +#, fuzzy +#| msgid "Account disabled" +msgid "Include Disabled" +msgstr "Akun dinonaktifkan" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Edit ${entity}" +msgid "Specify external ${entity}" +msgstr "Sunting ${entity}" + +msgid "Unmatched" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Add host" +msgstr "Tambah grup host" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Host Certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +#, fuzzy +#| msgid "Enrollment failed. %s\n" +msgid "Enrollment" +msgstr "Pendaftaran gagal. %s\n" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Generate OTP" +msgstr "OTP Reset" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Generated OTP" +msgstr "OTP Reset" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +#| msgid "Confirm (password)" +msgid "One-Time Password" +msgstr "Konfirmasi (kata sandi)" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "OTP Reset" + +msgid "Reset One-Time Password" +msgstr "" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Set OTP" +msgstr "OTP Reset" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP set" +msgstr "Token OTP" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "Tambah grup host" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Remove host groups" +msgstr "Tambah grup host" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Apply to host groups" +msgstr "Tambah grup host" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Add netgroup" +msgstr "Tambah grup host" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "OTP Token" +msgid "Add OTP token" +msgstr "Token OTP" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP Token Settings" +msgstr "Token OTP" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +#, fuzzy +#| msgid "OTP Token" +msgid "Remove OTP tokens" +msgstr "Token OTP" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +#| msgid "cannot open configuration file %s\n" +msgid "Show configuration uri" +msgstr "tidak dapat membuka berkas konfigurasi %s\n" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +msgid "Permission settings" +msgstr "" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "Kunci publik:" + +#, fuzzy +#| msgid "SSH public key:" +msgid "Set public key" +msgstr "Kunci publik SSH:" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Password Policy" +msgstr "kata sandi" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "SID Domain" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "Domain Active Directory" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain with POSIX attributes" +msgstr "Domain Active Directory" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory winsync" +msgstr "Domain Active Directory" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Roles" +msgstr "Nama Peladen" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Role" +msgstr "Nama Peladen" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete Server" +msgstr "Menghapus grup." + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Service Certificate" +msgstr "harus merupakan sebuah sertifikat" + +#, fuzzy +#| msgid "Service Options" +msgid "Service Settings" +msgstr "Opsi Layanan" + +msgid "Provisioning" +msgstr "" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Service unprovisioned" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Nama Prisipal Layanan Kerberos" + +#, fuzzy +#| msgid "SSH public key:" +msgid "SSH public keys" +msgstr "Kunci publik SSH:" + +msgid "SSH public key:" +msgstr "Kunci publik SSH:" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "${count} pengguna diaktifkan" + +msgid "Add stage user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "Stage users" +msgstr "pengguna" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "${count} pengguna digelar" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${count} users(s) staged" +msgid "${count} user(s) restored" +msgstr "${count} pengguna digelar" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "Add host group" +msgid "Add sudo command group" +msgstr "Tambah grup host" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Allow query" +msgid "Allow" +msgstr "Izinkan kuiri" + +#, fuzzy +#| msgid "Command name" +msgid "Any Command" +msgstr "Nama perintah" + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +#, fuzzy +#| msgid "Operation failed: %s\n" +msgid "Option added" +msgstr "Operasi gagal: %s\n" + +#, fuzzy, python-brace-format +#| msgid "${count} user(s) activated" +msgid "${count} option(s) removed" +msgstr "${count} pengguna diaktifkan" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +#| msgid "cannot open configuration file %s\n" +msgid "Replication configuration" +msgstr "tidak dapat membuka berkas konfigurasi %s\n" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +#, fuzzy +#| msgid "Account disabled" +msgid "Account" +msgstr "Akun dinonaktifkan" + +#, fuzzy +#| msgid "Add host group" +msgid "Add trust" +msgstr "Tambah grup host" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +#, fuzzy +#| msgid "must be dictionary" +msgid "Trust direction" +msgstr "harus berupa kamus" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +#, fuzzy +#| msgid "Account disabled" +msgid "Account Settings" +msgstr "Akun dinonaktifkan" + +#, fuzzy +#| msgid "Account disabled" +msgid "Account Status" +msgstr "Akun dinonaktifkan" + +msgid "Active users" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "Add user" +msgstr "pengguna" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete mode" +msgstr "Menghapus grup." + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +#, fuzzy +#| msgid "Password is too long!\n" +msgid "Password expiration" +msgstr "Kata sandi terlalu panjang!\n" + +msgid "Mailing Address" +msgstr "Alamat Surat" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Klik untuk ${action}" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Service Vaults" +msgstr "Opsi Layanan" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#, fuzzy +#| msgid "Reset OTP" +msgid "First OTP" +msgstr "OTP Reset" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "Kata sandi harus cocok" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Verify Password" +msgstr "kata sandi" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${count} users(s) staged" +msgid "${count} item(s) deleted" +msgstr "${count} pengguna digelar" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${count} users(s) staged" +msgid "${count} item(s) disabled" +msgstr "${count} pengguna digelar" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${count} users(s) staged" +msgid "${count} item(s) enabled" +msgstr "${count} pengguna digelar" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "Audit" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +#, fuzzy +#| msgid "Edit ${entity}" +msgid "Identity" +msgstr "Sunting ${entity}" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "Tak Jadi" + +msgid "Undo this change." +msgstr "" + +#, fuzzy +#| msgid "Undo" +msgid "Undo All" +msgstr "Tak Jadi" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Undo all changes in this field." +msgstr "Hapus semua prinsipal di realm ini" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "Harus angka desimal" + +#, fuzzy +#| msgid "read error\n" +msgid "Format error" +msgstr "galat baca\n" + +msgid "Must be an integer" +msgstr "Harus bilangan bulat" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Maximum serial number" +msgid "Maximum value is ${value}" +msgstr "Nomor seri maksimum" + +#, fuzzy, python-brace-format +#| msgid "Minimum serial number" +msgid "Minimum value is ${value}" +msgstr "Nomor seri minimum" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#, fuzzy +#| msgid "read error\n" +msgid "Parse error" +msgstr "galat baca\n" + +msgid "Must be a positive number" +msgstr "Harus angka positif" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d grup cocok" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA servers\n" +msgstr "Server IPA yang akan digunakan" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Servers" +msgstr "Server IPA yang akan digunakan" + +#, fuzzy +#| msgid "Service Options" +msgid "Server location" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Service weight" +msgstr "Opsi Layanan" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#, fuzzy +#| msgid "Failed service/service groups" +msgid "Enabled server roles" +msgstr "Grup layanan/layanan gagal" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)s server cocok" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "galat pada server '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "must be \"%s\"" +msgstr "harus '%(value)s'" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "Nama Peladen" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Mengubah keadaan server \"%(value)s\"." + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Removing principal %s\n" +msgid "Member principals" +msgstr "Menghapus prinsipal %s\n" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "service delegation rules" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation rules" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation rule" +msgstr "Opsi Layanan" + +#, fuzzy, python-format +#| msgid "Added segment \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)s peran server cocok" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation targets" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation target" +msgstr "Opsi Layanan" + +#, fuzzy, python-format +#| msgid "Added segment \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted segment \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)s peran server cocok" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "URI LDAP" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded host certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Principal alias" +msgstr "" + +#, fuzzy +#| msgid "SSH public key:" +msgid "SSH public key fingerprint" +msgstr "Kunci publik SSH:" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "Password cannot be set on enrolled host." +msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d host sesuai" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from a host entry" +msgstr "Hapus semua prinsipal di realm ini" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "password policy" +msgstr "kata sandi" + +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "kata sandi" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +#, fuzzy +#| msgid "priority cannot be set on global policy" +msgid "cannot delete global password policy" +msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" + +msgid "priority cannot be set on global policy" +msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted OTP token \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "domain" +msgstr "Domain" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +#, fuzzy +#| msgid "Bind rule type" +msgid "id range type" +msgstr "Tipe aturan bind" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d host sesuai" + +#, fuzzy +#| msgid "cannot stat() configuration file %s\n" +msgid "trust configuration" +msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified CA \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "CA \"%(value)s\" diubah" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "Domain enabled" +msgstr "Domain" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy +#| msgid "Unable to remove entry\n" +msgid "not allowed to remotely add agent" +msgstr "Tak bisa menghapus entri\n" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified segment \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted segment \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)s pengguna cocok" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added segment \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted segment \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified segment \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)s server cocok" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy +#| msgid "Unable to parse principal\n" +msgid "Malformed principal" +msgstr "Tidak dapat mengurai prinsipal\n" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "services" +msgstr "Opsi Layanan" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Service principal alias" +msgstr "Nama Prisipal Layanan Kerberos" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified service \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)s server cocok" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled service \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from a service" +msgstr "Hapus semua prinsipal di realm ini" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added segment \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted segment \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Modified segment \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d grup cocok" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d ACI cocok" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +#, fuzzy +#| msgid "Operation failed: %s\n" +msgid "operation not defined" +msgstr "Operasi gagal: %s\n" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +#, fuzzy +#| msgid "Failed service/service groups" +msgid "Member service groups" +msgstr "Grup layanan/layanan gagal" + +#, fuzzy +#| msgid "Failed service/service groups" +msgid "Member HBAC service groups" +msgstr "Grup layanan/layanan gagal" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "container entry (%(container)s) not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, fuzzy, python-format +#| msgid "%(otype)s \"%(oname)s\" not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, fuzzy, python-format +#| msgid "key named %(key)s already exists" +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "kunci bernama %(key)s sudah ada" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "harus TRUE atau FALSE" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Entry %s not found" +msgid "manager %(manager)s not found" +msgstr "Entri %s tidak ditemukan" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Issuer of the certificate" +msgstr "harus merupakan sebuah sertifikat" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Subject of the certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, fuzzy, python-format +#| msgid "Disabled CA \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +#, fuzzy, python-format +#| msgid "Enabled CA \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "fork() failed\n" +msgid "%(host)s failed" +msgstr "fork() gagal\n" + +#, fuzzy, python-format +#| msgid "Account disabled" +msgid "Account disabled: %(disabled)s" +msgstr "Akun dinonaktifkan" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from the user entry" +msgstr "Hapus semua prinsipal di realm ini" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +#, fuzzy +#| msgid "must be enclosed in parentheses" +msgid "must be enabled only on a single master" +msgstr "mesti diapit kurung" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Non-Active Directory domain" +msgstr "Domain Active Directory" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Request must be a dict" +msgstr "harus merupakan sebuah sertifikat" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +#, fuzzy +#| msgid "must be at least 1" +msgid "params must be a list" +msgstr "setidaknya harus 1" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "setidaknya harus 1" + +#, fuzzy +#| msgid "Out of memory \n" +msgid "Out of memory\n" +msgstr "Kehabisan memori \n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +#, fuzzy +#| msgid "Out of memory!\n" +msgid "Out of memory!?\n" +msgstr "Kehabisan memori!\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "Kata sandi terlalu panjang!\n" + +#, fuzzy +#| msgid "Failed to create control!\n" +msgid "Failed to create random key!\n" +msgstr "Gagal membuat kontrol!\n" + +#, fuzzy +#| msgid "Failed to create control!\n" +msgid "Failed to create key!\n" +msgstr "Gagal membuat kontrol!\n" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "Tak bisa menginisialisasi pustaka ldap!\n" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +#, fuzzy +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize STARTTLS session\n" +msgstr "Tak bisa menginisialisasi pustaka ldap!\n" diff --git a/po/ja.po b/po/ja.po index 44163ddce..efbcb4b14 100644 --- a/po/ja.po +++ b/po/ja.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Japanese\n" @@ -18,162 +18,14610 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" +#, fuzzy, c-format +#| msgid "Out of memory!?\n" +msgid "Out of memory!\n" +msgstr "メモリー不足!?\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory!?\n" +msgid "Out of memory!" +msgstr "メモリー不足!?\n" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "無効な JSON-RPC リクエスト: %(error)s" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +#, fuzzy +#| msgid "host" +msgid "hostname" +msgstr "ホスト" + +#, fuzzy +#| msgid "HBAC Service Groups" +msgid "IPA Server to use" +msgstr "HBAC サービスグループ" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +#, fuzzy +#| msgid "password policy" +msgid "password" +msgstr "パスワードポリシー" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "out of memory\n" +msgstr "メモリー不足\n" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "Out of memory \n" +msgstr "メモリー不足\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory!?\n" +msgid "Out of Memory!\n" +msgstr "メモリー不足!?\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "パスワードが違います。" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "IPA CA certificate" +msgstr "証明書" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Failed users/groups" +msgstr "標準のユーザーグループ" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "Failed service/service groups" +msgstr "HBAC サービスグループ" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key %(key)s already exists" +msgstr "このエントリーはすでに存在します" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "map %(map)s already exists" +msgstr "このエントリーはすでに存在します" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new YubiKey OTP token." +msgstr "新しい役割を追加します。" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, fuzzy, python-format +#| msgid "Sudo Rules" +msgid "Enabled Sudo Rule \"%s\"" +msgstr "sudo ルール" + +#, fuzzy, python-format +#| msgid "Sudo Rules" +msgid "Disabled Sudo Rule \"%s\"" +msgstr "sudo ルール" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +#| msgid "Delete a user." +msgid "Delete a user" +msgstr "ユーザーを削除します。" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete all?" +msgstr "役割を削除します。" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +#, fuzzy +#| msgid "Password Policies" +msgid "Password" +msgstr "パスワードポリシー" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new vault." +msgstr "新しいグループを作成します。" + +msgid "Vault password" +msgstr "" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Missing vault public key" +msgstr "無効な SSH 公開鍵" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a vault." +msgstr "役割を変更します。" + +msgid "Change password" +msgstr "" + +msgid "Old vault password" +msgstr "" + +msgid "File containing the old vault password" +msgstr "" + +msgid "New vault password" +msgstr "" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Missing new vault public key" +msgstr "無効な SSH 公開鍵" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +#, fuzzy +#| msgid "Text Data" +msgid "Data" +msgstr "テキストデータ" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +#, fuzzy +#| msgid "IPA Error" +msgid "Error" +msgstr "IPA エラー" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "ACI 名" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission" +msgstr "権限" + +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "ユーザーグループ" + +msgid "User group ACI grants access to" +msgstr "" + +msgid "Permissions" +msgstr "権限" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "" + +msgid "Type" +msgstr "" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of" +msgstr "グループのメンバー" + +msgid "Member of a group" +msgstr "グループのメンバー" + +msgid "Filter" +msgstr "フィルター" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Target group" +msgstr "グループを削除します。" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +#, fuzzy +#| msgid "Create a new HBAC rule." +msgid "Create new ACI." +msgstr "新しい HBAC ルールを作成します。" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete ACI." +msgstr "グループを削除します。" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +#, fuzzy +#| msgid "Modify an HBAC rule." +msgid "Modify ACI." +msgstr "HBAC ルールを変更します。" + +msgid "Rename an ACI." +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "New ACI name" +msgstr "ACI 名" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +#, fuzzy +#| msgid "User Options" +msgid "description" +msgstr "ユーザーオプション" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +#, fuzzy +#| msgid "User Options" +msgid "Description" +msgstr "ユーザーオプション" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new automount key." +msgstr "新しいグループを作成します。" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete an automount key." +msgstr "ホストを削除します。" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for an automount key." +msgstr "ホストを検索します。" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify an automount key." +msgstr "役割を変更します。" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display an automount key." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new automount location." +msgstr "新しいグループを作成します。" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display an automount location." +msgstr "役割に関する情報を表示します。" + +msgid "Generate automount files for a specific location." +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new automount map." +msgstr "新しいグループを作成します。" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new indirect mount point." +msgstr "新しいグループを作成します。" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete an automount map." +msgstr "ホストを削除します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for an automount map." +msgstr "グループを検索します。" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an automount map." +msgstr "グループを変更します。" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display an automount map." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Default shell" +msgstr "標準のユーザーグループ" + +msgid "Default shell for new users" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Default users group" +msgstr "標準のユーザーグループ" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Subject base" +msgstr "証明書" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Default user objectclasses" +msgstr "標準のユーザーグループ" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +#, fuzzy +#| msgid "Password Policies" +msgid "Password plugin features" +msgstr "パスワードポリシー" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Default SELinux user" +msgstr "標準のユーザーグループ" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member user group" +msgstr "グループのメンバー" + +msgid "User group to apply delegation to" +msgstr "" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new delegation." +msgstr "新しい役割を追加します。" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete a delegation." +msgstr "役割を削除します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for delegations." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a delegation." +msgstr "役割を変更します。" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a delegation." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +#, fuzzy +#| msgid "password policy" +msgid "Forward policy" +msgstr "パスワードポリシー" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +msgid "Zone name" +msgstr "" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "%s Record" +msgid "Record name" +msgstr "%s レコード" + +msgid "Time to live" +msgstr "" + +#, fuzzy +#| msgid "%s Record" +msgid "Records" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s Record" +msgid "Record type" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s Record" +msgid "Record data" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "A record" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "Raw A records" +msgstr "%s レコード" + +#, fuzzy +#| msgid "IP Address" +msgid "A IP Address" +msgstr "IP アドレス" + +msgid "IP Address" +msgstr "IP アドレス" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "AAAA record" +msgstr "%s レコード" + +msgid "Raw AAAA records" +msgstr "" + +#, fuzzy +#| msgid "IP Address" +msgid "AAAA IP Address" +msgstr "IP アドレス" + +msgid "AAAA Create reverse" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "A6 record" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "Raw A6 records" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s Record" +msgid "A6 Record data" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "AFSDB record" +msgstr "%s レコード" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +#, fuzzy +#| msgid "Host" +msgid "Hostname" +msgstr "ホスト" + +#, fuzzy +#| msgid "%s record" +msgid "APL record" +msgstr "%s レコード" + +msgid "Raw APL records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "CERT record" +msgstr "%s レコード" + +msgid "Raw CERT records" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "CERT Certificate Type" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Type" +msgstr "証明書" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "CERT Certificate/CRL" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate/CRL" +msgstr "証明書" + +#, fuzzy +#| msgid "%s record" +msgid "CNAME record" +msgstr "%s レコード" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "DHCID record" +msgstr "%s レコード" + +msgid "Raw DHCID records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "DLV record" +msgstr "%s レコード" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "DNAME record" +msgstr "%s レコード" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "DNSKEY record" +msgstr "%s レコード" + +msgid "Raw DNSKEY records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "DS record" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "Raw DS records" +msgstr "%s レコード" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "HIP record" +msgstr "%s レコード" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "KEY record" +msgstr "%s レコード" + +msgid "Raw KEY records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "KX record" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "Raw KX records" +msgstr "%s レコード" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "LOC record" +msgstr "%s レコード" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "MX record" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "Raw MX records" +msgstr "%s レコード" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "NAPTR record" +msgstr "%s レコード" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +#, fuzzy +#| msgid "HBAC Service" +msgid "NAPTR Service" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC Service" +msgid "Service" +msgstr "HBAC サービス" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "NS record" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "Raw NS records" +msgstr "%s レコード" + +msgid "NS Hostname" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "NSEC record" +msgstr "%s レコード" + +msgid "Raw NSEC records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "NSEC3 record" +msgstr "%s レコード" + +msgid "Raw NSEC3 records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "PTR record" +msgstr "%s レコード" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "RRSIG record" +msgstr "%s レコード" + +msgid "Raw RRSIG records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "RP record" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "Raw RP records" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "SIG record" +msgstr "%s レコード" + +msgid "Raw SIG records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "SPF record" +msgstr "%s レコード" + +msgid "Raw SPF records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "SRV record" +msgstr "%s レコード" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +#, fuzzy +#| msgid "Port" +msgid "SRV Port" +msgstr "ポート" + +msgid "Port" +msgstr "ポート" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "SSHFP record" +msgstr "%s レコード" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Fingerprint" +msgid "SSHFP Fingerprint Type" +msgstr "フィンガープリント" + +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprint Type" +msgstr "フィンガープリント" + +#, fuzzy +#| msgid "Fingerprint" +msgid "SSHFP Fingerprint" +msgstr "フィンガープリント" + +msgid "Fingerprint" +msgstr "フィンガープリント" + +#, fuzzy +#| msgid "%s record" +msgid "TA record" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "Raw TA records" +msgstr "%s レコード" + +#, fuzzy +#| msgid "%s record" +msgid "TLSA record" +msgstr "%s レコード" + +msgid "Raw TLSA records" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "TLSA Certificate Usage" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Usage" +msgstr "証明書" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Association Data" +msgstr "証明書" + +#, fuzzy +#| msgid "%s record" +msgid "TKEY record" +msgstr "%s レコード" + +msgid "Raw TKEY records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "TSIG record" +msgstr "%s レコード" + +msgid "Raw TSIG records" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "TXT record" +msgstr "%s レコード" + +msgid "Raw TXT records" +msgstr "" + +#, fuzzy +#| msgid "Text Data" +msgid "TXT Text Data" +msgstr "テキストデータ" + +msgid "Text Data" +msgstr "テキストデータ" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +#, fuzzy +#| msgid "Refresh" +msgid "SOA refresh" +msgstr "更新" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission value" +msgstr "権限" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete DNS forward zone." +msgstr "役割を削除します。" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for DNS forward zones." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify DNS forward zone." +msgstr "役割を変更します。" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a DNS forward zone." +msgstr "役割に関する情報を表示します。" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete DNS record entry." +msgstr "役割を削除します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for DNS resources." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify a DNS resource record." +msgstr "HBAC サービスグループを変更します。" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +#, fuzzy +#| msgid "Disable a user account." +msgid "Disable DNS Zone." +msgstr "ユーザーアカウントを無効化します。" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for forward zones only" +msgstr "役割を検索します。" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a DNS zone (SOA record)." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User category" +msgstr "ユーザーグループ" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "Users" +msgstr "ユーザー" + +#, fuzzy +#| msgid "User Group" +msgid "User Groups" +msgstr "ユーザーグループ" + +#, fuzzy +#| msgid "Host" +msgid "Hosts" +msgstr "ホスト" + +#, fuzzy +#| msgid "Host Group" +msgid "Host Groups" +msgstr "ホストグループ" + +#, fuzzy +#| msgid "HBAC Service" +msgid "Services" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC Service Groups" +msgid "Service Groups" +msgstr "HBAC サービスグループ" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "新しい HBAC ルールを作成します。" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "member host group" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "host groups" +msgid "host groups to add" +msgstr "ホストグループ" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC rule." +msgid "Add services to an HBAC rule." +msgstr "HBAC ルールを削除します。" + +#, fuzzy +#| msgid "HBAC services" +msgid "member HBAC service" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC services to add" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC service group" +msgid "member HBAC service group" +msgstr "HBAC サービスグループ" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "HBAC service groups to add" +msgstr "HBAC サービスグループ" + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Add users and groups to an HBAC rule." +msgstr "HBAC ルールのプロパティーを表示します。" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "member group" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "groups" +msgid "groups to add" +msgstr "グループ" + +msgid "Delete an HBAC rule." +msgstr "HBAC ルールを削除します。" + +msgid "Disable an HBAC rule." +msgstr "HBAC ルールを無効化します。" + +msgid "Enable an HBAC rule." +msgstr "HBAC ルールを有効化します。" + +msgid "Search for HBAC rules." +msgstr "HBAC ルールを検索します。" + +msgid "Modify an HBAC rule." +msgstr "HBAC ルールを変更します。" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +#, fuzzy +#| msgid "host groups" +msgid "host groups to remove" +msgstr "ホストグループ" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "HBAC service group" +msgid "HBAC services to remove" +msgstr "HBAC サービスグループ" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "HBAC service groups to remove" +msgstr "HBAC サービスグループ" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove users and groups from an HBAC rule." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "HBAC ルールのプロパティーを表示します。" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC service" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC service group" +msgid "HBAC service description" +msgstr "HBAC サービスグループ" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "Member of HBAC service groups" +msgstr "HBAC サービスグループ" + +msgid "Add a new HBAC service." +msgstr "新しい HBAC サービスを追加します。" + +msgid "Delete an existing HBAC service." +msgstr "既存の HBAC サービスを削除します。" + +msgid "Search for HBAC services." +msgstr "HBAC サービスを検索します。" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "HBAC サービスを変更します。" + +msgid "Display information about an HBAC service." +msgstr "HBAC サービスに関する情報を表示します。" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +#, fuzzy +#| msgid "HBAC service group" +msgid "Service group name" +msgstr "HBAC サービスグループ" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "HBAC service group description" +msgstr "HBAC サービスグループ" + +#, fuzzy +#| msgid "HBAC services" +msgid "Member HBAC service" +msgstr "HBAC サービス" + +msgid "Add a new HBAC service group." +msgstr "新しい HBAC サービスグループを追加します。" + +msgid "Add members to an HBAC service group." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "Delete an HBAC service group." +msgstr "HBAC サービスグループを削除します。" + +msgid "Search for an HBAC service group." +msgstr "HBAC サービスグループを検索します。" + +msgid "Modify an HBAC service group." +msgstr "HBAC サービスグループを変更します。" + +msgid "Remove members from an HBAC service group." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "Display information about an HBAC service group." +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Host" +msgid "Host name" +msgstr "ホスト" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate" +msgstr "証明書" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +#, fuzzy +#| msgid "IP Address" +msgid "MAC address" +msgstr "IP アドレス" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "SSH public key" +msgstr "無効な SSH 公開鍵" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of host-groups" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "roles" +msgid "Roles" +msgstr "役割" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of netgroups" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of Sudo rule" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of HBAC rule" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "Member of a group" +msgid "Indirect Member of netgroup" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "Member of a group" +msgid "Indirect Member of host-group" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "Member of a group" +msgid "Indirect Member of role" +msgstr "グループのメンバー" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "新しいホストを追加します。" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "ホストを削除します。" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "ホストを検索します。" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "ホストグループ" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "netgroup" +msgstr "グループ" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "役割" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +#, fuzzy +#| msgid "HBAC Service" +msgid "HBAC rule" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for hosts with these member of HBAC rules." +msgstr "HBAC ルールを検索します。" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "sudo ルール" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "ユーザー" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "ホスト" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Modify information about a host." +msgstr "役割に関する情報を表示します。" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a host." +msgstr "役割に関する情報を表示します。" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Host Group" +msgid "Host-group" +msgstr "ホストグループ" + +#, fuzzy +#| msgid "Default host group" +msgid "Name of host-group" +msgstr "標準のホストグループ" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member host-groups" +msgstr "グループのメンバー" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add a new hostgroup." +msgstr "新しいホストを追加します。" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add members to a hostgroup." +msgstr "HBAC サービスグループにメンバーを追加します。" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a hostgroup." +msgstr "ホストを削除します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for hostgroups." +msgstr "グループを検索します。" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a hostgroup." +msgstr "グループを変更します。" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove members from a hostgroup." +msgstr "HBAC サービスグループからメンバーを削除します。" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a hostgroup." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +#, fuzzy +#| msgid "Group Options" +msgid "Group name" +msgstr "グループオプション" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +#, fuzzy +#| msgid "User Options" +msgid "User login" +msgstr "ユーザーオプション" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new Group ID override." +msgstr "新しい役割を追加します。" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete an Group ID override." +msgstr "役割を削除します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for an Group ID override." +msgstr "グループを検索します。" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an Group ID override." +msgstr "グループを変更します。" + +msgid "Rename the Group ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about an Group ID override." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new User ID override." +msgstr "新しい HBAC サービスを追加します。" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete an User ID override." +msgstr "役割を削除します。" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for an User ID override." +msgstr "HBAC サービスを検索します。" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an User ID override." +msgstr "HBAC サービスを変更します。" + +msgid "Rename the User ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "Display information about an User ID override." +msgstr "HBAC サービスに関する情報を表示します。" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new ID View." +msgstr "新しい役割を追加します。" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "ホスト" + +msgid "Hosts to apply the ID View to" +msgstr "" + +#, fuzzy +#| msgid "host groups" +msgid "hostgroups" +msgstr "ホストグループ" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete an ID View." +msgstr "役割を削除します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for an ID View." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify an ID View." +msgstr "役割を変更します。" + +msgid "Rename the ID View object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about an ID View." +msgstr "役割に関する情報を表示します。" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "" + +msgid "Bind DN" +msgstr "" + +#, fuzzy +#| msgid "User Options" +msgid "User container" +msgstr "ユーザーオプション" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +#, fuzzy +#| msgid "Group Options" +msgid "Group container" +msgstr "グループオプション" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "CA certificate" +msgstr "証明書" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +#, fuzzy +#| msgid "Group Options" +msgid "Netgroup description" +msgstr "グループオプション" + +msgid "NIS domain name" +msgstr "" + +msgid "IPA unique ID" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member netgroups" +msgstr "グループのメンバー" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member Group" +msgstr "グループのメンバー" + +msgid "Member Host" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member Hostgroup" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new netgroup." +msgstr "新しい役割を追加します。" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add members to a netgroup." +msgstr "HBAC サービスグループにメンバーを追加します。" + +#, fuzzy +#| msgid "Member of a group" +msgid "member netgroup" +msgstr "グループのメンバー" + +msgid "netgroups to add" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a netgroup." +msgstr "グループを削除します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for a netgroup." +msgstr "グループを検索します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "search for managed groups" +msgstr "グループを検索します。" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "グループ" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for netgroups with these member groups." +msgstr "HBAC サービスグループを検索します。" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a netgroup." +msgstr "グループを変更します。" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove members from a netgroup." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "netgroups to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a netgroup." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission name" +msgstr "権限" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +#, fuzzy +#| msgid "Default host group" +msgid "Default attributes" +msgstr "標準のホストグループ" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +msgid "Bind rule type" +msgstr "" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of group" +msgstr "グループのメンバー" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new permission." +msgstr "新しい役割を追加します。" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add members to a permission." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission flags" +msgstr "権限" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete a permission." +msgstr "役割を削除します。" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for permissions." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a permission." +msgstr "役割を変更します。" + +msgid "Rename the permission object" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove members from a permission." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "privileges to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a permission." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new privilege." +msgstr "新しい役割を追加します。" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add members to a privilege." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "permission" +msgstr "権限" + +#, fuzzy +#| msgid "Permissions" +msgid "permissions" +msgstr "権限" + +msgid "Number of permissions added" +msgstr "" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete a privilege." +msgstr "役割を削除します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for privileges." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a privilege." +msgstr "役割を変更します。" + +msgid "Rename the privilege object" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove members from a privilege" +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "roles to remove" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove permissions from a privilege." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "Number of permissions removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a privilege." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "Group" +msgstr "グループ" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +#, fuzzy +#| msgid "Password Policies" +msgid "Password history size" +msgstr "パスワードポリシー" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +#, fuzzy +#| msgid "password policy" +msgid "Add a new group password policy." +msgstr "パスワードポリシー" + +#, fuzzy +#| msgid "password policy" +msgid "Delete a group password policy." +msgstr "パスワードポリシー" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for group password policies." +msgstr "グループを検索します。" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +#, fuzzy +#| msgid "password policy" +msgid "Modify a group password policy." +msgstr "パスワードポリシー" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about password policy." +msgstr "役割に関する情報を表示します。" + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +msgid "Server" +msgstr "" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new RADIUS proxy server." +msgstr "新しい HBAC サービスを追加します。" + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete a RADIUS proxy server." +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for RADIUS proxy servers." +msgstr "HBAC サービスを検索します。" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify a RADIUS proxy server." +msgstr "HBAC サービスを変更します。" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "Display information about a RADIUS proxy server." +msgstr "HBAC サービスに関する情報を表示します。" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete domain" +msgstr "グループを削除します。" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify realm domains." +msgstr "役割を変更します。" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member groups" +msgstr "グループのメンバー" + +msgid "Privileges" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "Member services" +msgstr "HBAC サービス" + +msgid "Add a new role." +msgstr "新しい役割を追加します。" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add members to a role." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "役割を削除します。" + +msgid "Search for roles." +msgstr "役割を検索します。" + +msgid "Modify a role." +msgstr "役割を変更します。" + +msgid "Rename the role object" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove members from a role." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "" + +msgid "Attributes to which the permission applies." +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service group." +msgid "Add a new self-service permission." +msgstr "新しい HBAC サービスグループを追加します。" + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete a self-service permission." +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for a self-service permission." +msgstr "HBAC サービスグループを検索します。" + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify a self-service permission." +msgstr "HBAC サービスグループを変更します。" + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "Display information about a self-service permission." +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new SELinux User Map." +msgstr "新しいグループを作成します。" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +#, fuzzy +#| msgid "Delete a user." +msgid "Delete a SELinux User Map." +msgstr "ユーザーを削除します。" + +#, fuzzy +#| msgid "Disable a user account." +msgid "Disable an SELinux User Map rule." +msgstr "ユーザーアカウントを無効化します。" + +#, fuzzy +#| msgid "Enable a user account." +msgid "Enable an SELinux User Map rule." +msgstr "ユーザーアカウントを有効化します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for SELinux User Maps." +msgstr "グループを検索します。" + +#, fuzzy +#| msgid "Modify a user." +msgid "Modify a SELinux User Map." +msgstr "ユーザーを変更します。" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Display the properties of a SELinux User Map rule." +msgstr "HBAC ルールのプロパティーを表示します。" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal" +msgstr "" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new IPA new service." +msgstr "新しい HBAC サービスを追加します。" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete an IPA service." +msgstr "HBAC サービスグループを削除します。" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for IPA services." +msgstr "HBAC サービスを検索します。" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an existing IPA service." +msgstr "HBAC サービスを変更します。" + +msgid "Remove hosts that can manage this service." +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "Display information about an IPA service." +msgstr "HBAC サービスに関する情報を表示します。" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "sudo コマンド" + +msgid "A description of this command" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Command Groups" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Create new Sudo Command." +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Delete Sudo Command." +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Search for Sudo Commands." +msgstr "sudo コマンド" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Modify Sudo Command." +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Display Sudo Command." +msgstr "sudo コマンド" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Sudo Command Group" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Group Options" +msgid "Group description" +msgstr "グループオプション" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Commands" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "sudo commands" +msgid "Member Sudo commands" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create new Sudo Command Group." +msgstr "新しいグループを作成します。" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add members to Sudo Command Group." +msgstr "HBAC サービスグループにメンバーを追加します。" + +#, fuzzy +#| msgid "sudo command" +msgid "member sudo command" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo commands to add" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Delete Sudo Command Group." +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for Sudo Command Groups." +msgstr "グループを検索します。" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify Sudo Command Group." +msgstr "グループを変更します。" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove members from Sudo Command Group." +msgstr "HBAC サービスグループからメンバーを削除します。" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo commands to remove" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Display Sudo Command Group." +msgstr "sudo コマンド" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Key" +msgid "Kerberos principal" +msgstr "Kerberos キー" + +msgid "Kerberos principal expiration" +msgstr "" + +#, fuzzy +#| msgid "IP Address" +msgid "Email address" +msgstr "IP アドレス" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +#| msgid "Account" +msgid "Account disabled" +msgstr "アカウント" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of groups" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "Member of a group" +msgid "Indirect Member of group" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "Kerberos Key" +msgid "Kerberos keys available" +msgstr "Kerberos キー" + +msgid "Add a new user." +msgstr "新しいユーザーを追加します。" + +#, fuzzy +#| msgid "Default user group" +msgid "Don't create user private group" +msgstr "標準のユーザーグループ" + +msgid "Delete a user." +msgstr "ユーザーを削除します。" + +msgid "Disable a user account." +msgstr "ユーザーアカウントを無効化します。" + +msgid "Enable a user account." +msgstr "ユーザーアカウントを有効化します。" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for users." +msgstr "ホストを検索します。" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for users with these member of HBAC rules." +msgstr "HBAC ルールを検索します。" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "ユーザーを変更します。" + +msgid "Rename the user object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a user." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +#, fuzzy +#| msgid "Default host group" +msgid "Default (fallback) Group" +msgstr "標準のホストグループ" + +msgid "Default group for entries to land" +msgstr "" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add an automember rule." +msgstr "新しい役割を追加します。" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "Display information about the default (fallback) automember groups." +msgstr "HBAC サービスグループに関する情報を表示します。" + +#, fuzzy +#| msgid "Delete an HBAC rule." +msgid "Delete an automember rule." +msgstr "HBAC ルールを削除します。" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for automember rules." +msgstr "HBAC ルールを検索します。" + +#, fuzzy +#| msgid "Modify an HBAC rule." +msgid "Modify an automember rule." +msgstr "HBAC ルールを変更します。" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about an automember rule." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for existing certificates." +msgstr "HBAC サービスを検索します。" + +msgid "Match cn attribute in subject" +msgstr "" + +#, fuzzy +#| msgid "%(reason)s" +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Revoke a certificate." +msgstr "証明書" + +#, fuzzy +#| msgid "Delete an existing HBAC service." +msgid "Retrieve an existing certificate." +msgstr "既存の HBAC サービスを削除します。" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Indirect Member groups" +msgstr "グループのメンバー" + +msgid "Create a new group." +msgstr "新しいグループを作成します。" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create as a non-POSIX group" +msgstr "新しいグループを作成します。" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add members to a group." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "グループを削除します。" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "グループを検索します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "search for private groups" +msgstr "グループを検索します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "search for POSIX groups" +msgstr "グループを検索します。" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "search for non-POSIX groups" +msgstr "グループを検索します。" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for groups with these member users." +msgstr "グループを検索します。" + +msgid "Search for groups without these member users." +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for groups with these member groups." +msgstr "HBAC サービスグループを検索します。" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for groups with these member of HBAC rules." +msgstr "HBAC ルールを検索します。" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "グループを変更します。" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove members from a group." +msgstr "HBAC サービスグループからメンバーを削除します。" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a named group." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +#, fuzzy +#| msgid "sudo rules" +msgid "Matched rules" +msgstr "sudo ルール" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "NetBIOS name" +msgstr "ACI 名" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a trust." +msgstr "ホストを削除します。" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for trusts." +msgstr "ホストを検索します。" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a trust." +msgstr "役割に関する情報を表示します。" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete an ID range." +msgstr "役割を削除します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for ranges." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify ID range." +msgstr "役割を変更します。" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a range." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add a new OTP token." +msgstr "新しい役割を追加します。" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete an OTP token." +msgstr "役割を削除します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for OTP token." +msgstr "役割を検索します。" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a OTP token." +msgstr "役割を変更します。" + +msgid "Rename the OTP token object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about an OTP token." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Sudo order" +msgstr "sudo コマンド" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Allow Commands" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Deny Commands" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Allow Command Groups" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Deny Command Groups" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "users" +msgid "RunAs Users" +msgstr "ユーザー" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +#, fuzzy +#| msgid "Host Group" +msgid "RunAs Groups" +msgstr "ホストグループ" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +#, fuzzy +#| msgid "User Group" +msgid "RunAs External Group" +msgstr "ユーザーグループ" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Group Options" +msgid "Sudo Option" +msgstr "グループオプション" + +#, fuzzy +#| msgid "Create a new HBAC rule." +msgid "Create new Sudo Rule." +msgstr "新しい HBAC ルールを作成します。" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "member sudo command group" +msgstr "グループのメンバー" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups to add" +msgstr "sudo コマンド" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete Sudo Rule." +msgstr "役割を削除します。" + +#, fuzzy +#| msgid "Disable an HBAC rule." +msgid "Disable a Sudo Rule." +msgstr "HBAC ルールを無効化します。" + +#, fuzzy +#| msgid "Enable an HBAC rule." +msgid "Enable a Sudo Rule." +msgstr "HBAC ルールを有効化します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for Sudo Rule." +msgstr "役割を検索します。" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify Sudo Rule." +msgstr "役割を変更します。" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups to remove" +msgstr "sudo コマンド" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Sudo Rule" +msgid "Display Sudo Rule." +msgstr "sudo ルール" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "ACL name" +msgstr "ACI 名" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +#, fuzzy +#| msgid "Create a new HBAC rule." +msgid "Create a new CA ACL." +msgstr "新しい HBAC ルールを作成します。" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Profiles to add" +msgstr "証明書" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a CA ACL." +msgstr "ホストを削除します。" + +#, fuzzy +#| msgid "Disable an HBAC rule." +msgid "Disable a CA ACL." +msgstr "HBAC ルールを無効化します。" + +#, fuzzy +#| msgid "Enable an HBAC rule." +msgid "Enable a CA ACL." +msgstr "HBAC ルールを有効化します。" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for CA ACLs." +msgstr "HBAC ルールを検索します。" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a CA ACL." +msgstr "役割を変更します。" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Display the properties of a CA ACL." +msgstr "HBAC ルールのプロパティーを表示します。" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +#, fuzzy +#| msgid "Default host group" +msgid "Add to default group" +msgstr "標準のホストグループ" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search scope" +msgstr "役割を検索します。" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +#, fuzzy +#| msgid "Delete a user." +msgid "Delete IPA server." +msgstr "ユーザーを削除します。" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for IPA servers." +msgstr "HBAC サービスを検索します。" + +msgid "Show IPA server." +msgstr "" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add new certificates to a service" +msgstr "HBAC サービスグループにメンバーを追加します。" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove certificates from a service" +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +#, fuzzy +#| msgid "Create a new HBAC rule." +msgid "Create a new service delegation rule." +msgstr "新しい HBAC ルールを作成します。" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add member to a named service delegation rule." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete service delegation." +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for service delegations rule." +msgstr "HBAC サービスグループを検索します。" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation rule." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "principal to remove" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove target from a named service delegation rule." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "service delegation targets to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "Display information about a named service delegation rule." +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "Create a new service delegation target." +msgstr "" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add member to a named service delegation target." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "Delete service delegation target." +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for service delegation target." +msgstr "HBAC サービスグループを検索します。" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation target." +msgstr "HBAC サービスグループからメンバーを削除します。" + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "Display information about a named service delegation target." +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +#, fuzzy +#| msgid "Add a new user." +msgid "Add a new stage user." +msgstr "新しいユーザーを追加します。" + +msgid "Create Stage user in from a delete user" +msgstr "" + +#, fuzzy +#| msgid "Delete a user." +msgid "Delete a stage user." +msgstr "ユーザーを削除します。" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for stage users." +msgstr "ホストを検索します。" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a user." +msgid "Modify a stage user." +msgstr "ユーザーを変更します。" + +msgid "Rename the stage user object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a stage user." +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add a new segment." +msgstr "新しいホストを追加します。" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a segment." +msgstr "ホストを削除します。" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for topology segments." +msgstr "ホストを検索します。" + +#, fuzzy +#| msgid "Modify a user." +msgid "Modify a segment." +msgstr "ユーザーを変更します。" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a topology suffix." +msgstr "ホストを削除します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for topology suffices." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Modify a role." +msgid "Modify a topology suffix." +msgstr "役割を変更します。" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +#, fuzzy +#| msgid "Enable a user account." +msgid "Undelete a delete user account." +msgstr "ユーザーアカウントを有効化します。" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +msgid "Vault description" +msgstr "" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Vault public key" +msgstr "無効な SSH 公開鍵" + +#, fuzzy +#| msgid "users" +msgid "Owner users" +msgstr "ユーザー" + +#, fuzzy +#| msgid "User group" +msgid "Owner groups" +msgstr "ユーザーグループ" + +#, fuzzy +#| msgid "HBAC services" +msgid "Owner services" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC services" +msgid "Vault service" +msgstr "HBAC サービス" + +msgid "Shared vault" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Vault user" +msgstr "標準のユーザーグループ" + +#, fuzzy +#| msgid "Certificates" +msgid "Transport Certificate" +msgstr "証明書" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Add members to a vault." +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "owner group" +msgstr "ユーザーグループ" + +#, fuzzy +#| msgid "HBAC services" +msgid "owner service" +msgstr "HBAC サービス" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +#, fuzzy +#| msgid "Delete a host." +msgid "Delete a vault." +msgstr "ホストを削除します。" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for vaults." +msgstr "ホストを検索します。" + +msgid "List all service vaults" +msgstr "" + +#, fuzzy +#| msgid "Disable a user account." +msgid "List all user vaults" +msgstr "ユーザーアカウントを無効化します。" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove members from a vault." +msgstr "HBAC サービスグループからメンバーを削除します。" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove owners from a vault." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a vault." +msgstr "役割に関する情報を表示します。" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +#, fuzzy +#| msgid "Delete a user." +msgid "Delete a vault container." +msgstr "ユーザーを削除します。" + +msgid "Remove owners from a vault container." +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a vault container." +msgstr "役割に関する情報を表示します。" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Profile to use" +msgstr "証明書" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete a Certificate Profile." +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for Certificate Profiles." +msgstr "役割を検索します。" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Display the properties of a Certificate Profile." +msgstr "HBAC ルールのプロパティーを表示します。" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for topology suffixes." +msgstr "役割を検索します。" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "コマンドが実装されていません" + +msgid "Quantity" +msgstr "" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for entitlement accounts." +msgstr "ホストを検索します。" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "コマンドが実装されていません" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +#, fuzzy +#| msgid "Host Group" +msgid "Source Host Groups" +msgstr "ホストグループ" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Target members of a group" +msgstr "グループのメンバー" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission type" +msgstr "権限" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "%(server)s から未知のエラー %(code)d: %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "確認のため再び %(label)s を入力してください: " + +msgid "Passwords do not match!" +msgstr "パスワードが違います。" + +msgid "No matching entries found" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Topic or Command" +msgstr "sudo コマンド" + +msgid "The topic or command name." +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Topic commands:" +msgstr "sudo コマンド" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Command name" +msgstr "コマンドが実装されていません" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +#, fuzzy +#| msgid "Search Options" +msgid "Deprecated options" +msgstr "検索オプション" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +#, fuzzy +#| msgid "A list of ACI values" +msgid "A list of LDAP entries" +msgstr "ACI 値の一覧" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s から未知のエラー %(code)d: %(error)s" + +msgid "an internal error has occurred" +msgstr "内部エラーが発生しました" + +#, fuzzy, python-format +#| msgid "an internal error has occurred" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "内部エラーが発生しました" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "error on server '%(server)s': %(error)s" +msgstr "%(server)s から未知のエラー %(code)d: %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "無効な JSON-RPC リクエスト: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos エラー: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +#, fuzzy +#| msgid "Validation error" +msgid "Session error" +msgstr "検証エラー" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "invalid '%(name)s': %(error)s" +msgstr "無効な JSON-RPC リクエスト: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "パスワードが違います" + +msgid "Command not implemented" +msgstr "コマンドが実装されていません" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "このエントリーはすでに存在します" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already enabled" +msgstr "このエントリーはすでに存在します" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already disabled" +msgstr "このエントリーはすでに存在します" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already a member" +msgstr "このエントリーはすでに存在します" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 形式のデコードに失敗: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + #, python-format msgid "%(desc)s: %(info)s" msgstr "%(desc)s: %(info)s" +msgid "limits exceeded for this query" +msgstr "" + #, python-format msgid "%(info)s" msgstr "%(info)s" +msgid "modifying primary key is not allowed" +msgstr "" + #, python-format -msgid "%(reason)s" +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(reason)s" +msgid "%(exception)s" msgstr "%(reason)s" +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "整数である必要があります" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "少なくとも %(minvalue)d である必要があります" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d bytes" +msgid "can be at most %(maxvalue)d" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be a decimal number" +msgstr "整数である必要があります" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minvalue)s" +msgstr "少なくとも %(minvalue)d である必要があります" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d bytes" +msgid "can be at most %(maxvalue)s" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "パターン \"%(pattern)s\" が一致する必要があります" + +msgid "must be binary data" +msgstr "バイナリーデータである必要があります" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "少なくとも %(minlength)d バイトである必要があります" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "ちょうど %(length)d バイトである必要があります" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be a certificate" +msgstr "整数である必要があります" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "Unicode テキストである必要があります" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "少なくとも %(minlength)d 文字である必要があります" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d bytes" +msgid "can be at most %(maxlength)d characters" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "ちょうど %(length)d 文字である必要があります" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be '%(value)s'" +msgstr "少なくとも %(minvalue)d である必要があります" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be one of %(values)s" +msgstr "少なくとも %(minvalue)d である必要があります" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be datetime value" +msgstr "少なくとも %(minvalue)d である必要があります" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be DNS name" +msgstr "整数である必要があります" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be absolute" +msgstr "整数である必要があります" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be relative" +msgstr "整数である必要があります" + +#, fuzzy +#| msgid "must be binary data" +msgid "must be dictionary" +msgstr "バイナリーデータである必要があります" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "無効な SSH 公開鍵" + +msgid "options are not allowed" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid hostmask" +msgstr "無効なドメイン名: %s" + +#, fuzzy, python-format +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "%(server)s から未知のエラー %(code)d: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid escape code in domain name" +msgstr "無効なドメイン名: %s" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid domain name" +msgstr "無効なドメイン名: %s" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "無効なドメイン名: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key named %(key)s already exists" +msgstr "このエントリーはすでに存在します" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Profile" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Profiles" +msgstr "証明書" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, fuzzy, python-format +#| msgid "Search for groups." +msgid "%i users or groups added." +msgstr "グループを検索します。" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid domain-name: not fully qualified" +msgstr "無効なドメイン名: %s" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "%s レコード" + +#, fuzzy, python-format +#| msgid "%s record" +msgid "Raw %s records" +msgstr "%s レコード" + #, python-format msgid "%s Record" msgstr "%s レコード" #, python-format -msgid "%s record" +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "permission \"%(value)s\" already exists" +msgstr "このエントリーはすでに存在します" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "is required" msgstr "%s レコード" -msgid "A list of ACI values" -msgstr "ACI 値の一覧" - -msgid "ACI name" -msgstr "ACI 名" +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" #, python-format -msgid "ACI with name \"%s\" not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" -msgid "ACIs" -msgstr "ACI" +msgid "DNS resource record" +msgstr "" -msgid "Account" -msgstr "アカウント" +msgid "DNS resource records" +msgstr "" -msgid "Account Status" -msgstr "アカウント状態" +msgid "DNS Resource Records" +msgstr "" -msgid "Add a new HBAC service group." -msgstr "新しい HBAC サービスグループを追加します。" +msgid "DNS Resource Record" +msgstr "" -msgid "Add a new HBAC service." -msgstr "新しい HBAC サービスを追加します。" +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" -msgid "Add a new host." -msgstr "新しいホストを追加します。" - -msgid "Add a new role." -msgstr "新しい役割を追加します。" - -msgid "Add a new user." -msgstr "新しいユーザーを追加します。" - -msgid "Add members to an HBAC service group." -msgstr "HBAC サービスグループにメンバーを追加します。" +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" #, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 形式のデコードに失敗: %(reason)s" +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" -msgid "Certificates" -msgstr "証明書" +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" -msgid "Command not implemented" -msgstr "コマンドが実装されていません" +msgid "only master zones can contain records" +msgstr "" -msgid "Create a new HBAC rule." -msgstr "新しい HBAC ルールを作成します。" +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" -msgid "Create a new group." -msgstr "新しいグループを作成します。" +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" -msgid "Default host group" -msgstr "標準のホストグループ" +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" -msgid "Default user group" -msgstr "標準のユーザーグループ" +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" -msgid "Delete a host." -msgstr "ホストを削除します。" +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" -msgid "Delete a role." -msgstr "役割を削除します。" +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" -msgid "Delete a user." -msgstr "ユーザーを削除します。" +msgid "DNS zone root record cannot be renamed" +msgstr "" -msgid "Delete an HBAC rule." -msgstr "HBAC ルールを削除します。" +msgid "DNS records can be only updated one at a time" +msgstr "" -msgid "Delete an HBAC service group." -msgstr "HBAC サービスグループを削除します。" +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" -msgid "Delete an existing HBAC service." -msgstr "既存の HBAC サービスを削除します。" +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" -msgid "Delete group." -msgstr "グループを削除します。" +#, python-format +msgid "Found '%(value)s'" +msgstr "" -msgid "Disable a user account." -msgstr "ユーザーアカウントを無効化します。" +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" -msgid "Disable an HBAC rule." -msgstr "HBAC ルールを無効化します。" +msgid "DNS configuration options" +msgstr "" -msgid "Display information about a role." -msgstr "役割に関する情報を表示します。" +msgid "DNS Global Configuration" +msgstr "" -msgid "Display information about an HBAC service group." -msgstr "HBAC サービスグループに関する情報を表示します。" +msgid "IPA DNS version" +msgstr "" -msgid "Display information about an HBAC service." +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "Result of the command" +msgstr "sudo コマンド" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for DNS servers." +msgstr "HBAC サービスを検索します。" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "Display configuration of a DNS server." msgstr "HBAC サービスに関する情報を表示します。" -msgid "Display the properties of an HBAC rule." -msgstr "HBAC ルールのプロパティーを表示します。" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "${entity} の編集" - -msgid "Enable a user account." -msgstr "ユーザーアカウントを有効化します。" - -msgid "Enable an HBAC rule." -msgstr "HBAC ルールを有効化します。" +#, fuzzy +#| msgid "Add a new user." +msgid "Add a new DNS server." +msgstr "新しいユーザーを追加します。" #, python-format -msgid "Enter %(label)s again to verify: " -msgstr "確認のため再び %(label)s を入力してください: " +msgid "Added new DNS server \"%(value)s\"" +msgstr "" -msgid "Filter" -msgstr "フィルター" - -msgid "Fingerprint" -msgstr "フィンガープリント" - -msgid "Fingerprint (SHA1)" -msgstr "フィンガープリント (SHA1)" +#, fuzzy +#| msgid "Delete a user." +msgid "Delete a DNS server" +msgstr "ユーザーを削除します。" #, python-format -msgid "Group '%s' does not exist" -msgstr "グループ '%s' が存在しません" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" -msgid "Group Options" -msgstr "グループオプション" +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC Service" +msgid "HBAC Services" +msgstr "HBAC サービス" msgid "HBAC Service" msgstr "HBAC サービス" -msgid "HBAC Service Group" -msgstr "HBAC サービスグループ" +#, fuzzy, python-format +#| msgid "Add a new HBAC service group." +msgid "Added HBAC service \"%(value)s\"" +msgstr "新しい HBAC サービスグループを追加します。" -msgid "HBAC Service Groups" -msgstr "HBAC サービスグループ" +#, fuzzy, python-format +#| msgid "Delete an HBAC service group." +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy, python-format +#| msgid "Modify an HBAC service group." +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC サービスグループを変更します。" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" msgid "HBAC service group" msgstr "HBAC サービスグループ" @@ -181,157 +14629,1013 @@ msgstr "HBAC サービスグループ" msgid "HBAC service groups" msgstr "HBAC サービスグループ" -msgid "HBAC services" -msgstr "HBAC サービス" +msgid "HBAC Service Groups" +msgstr "HBAC サービスグループ" -msgid "HTTP Error" -msgstr "HTTP エラー" +msgid "HBAC Service Group" +msgstr "HBAC サービスグループ" -msgid "Host" -msgstr "ホスト" +#, fuzzy, python-format +#| msgid "Add a new HBAC service group." +msgid "Added HBAC service group \"%(value)s\"" +msgstr "新しい HBAC サービスグループを追加します。" + +#, fuzzy, python-format +#| msgid "Delete an HBAC service group." +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy, python-format +#| msgid "Modify an HBAC service group." +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC サービスグループを変更します。" + +#, fuzzy, python-format +#| msgid "HBAC service group" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "HBAC サービスグループ" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "stage users" +msgstr "ユーザー" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d bytes" +msgid "can be at most %(len)d characters" +msgstr "大きくても %(maxlength)d バイトである必要があります" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "ホストグループ" msgid "Host Group" msgstr "ホストグループ" -msgid "IP Address" -msgstr "IP アドレス" - -msgid "IPA Error" -msgstr "IPA エラー" - -msgid "Internal Error" -msgstr "内部エラー" +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" #, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "無効な JSON-RPC リクエスト: %(error)s" - -msgid "Kerberos Key" -msgstr "Kerberos キー" +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" #, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos エラー: %(major)s/%(minor)s" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" -msgid "Member of a group" -msgstr "グループのメンバー" +#, fuzzy +#| msgid "host group" +msgid "hostgroup" +msgstr "ホストグループ" -msgid "Modify a group." -msgstr "グループを変更します。" +#, fuzzy +#| msgid "host group" +msgid "privileged hostgroup" +msgstr "ホストグループ" -msgid "Modify a role." -msgstr "役割を変更します。" +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" -msgid "Modify a user." -msgstr "ユーザーを変更します。" +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" -msgid "Modify an HBAC rule." -msgstr "HBAC ルールを変更します。" +msgid "Add users that can manage members of this hostgroup." +msgstr "" -msgid "Modify an HBAC service group." -msgstr "HBAC サービスグループを変更します。" +msgid "Remove users that can manage members of this hostgroup." +msgstr "" -msgid "Modify an HBAC service." -msgstr "HBAC サービスを変更します。" +msgid "" +"\n" +"Vaults\n" +msgstr "" -msgid "Options" -msgstr "オプション" +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" -msgid "Out of memory\n" -msgstr "メモリー不足\n" +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" -msgid "Out of memory!?\n" -msgstr "メモリー不足!?\n" +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" -msgid "Password Policies" -msgstr "パスワードポリシー" +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" -msgid "Passwords do not match" -msgstr "パスワードが違います" +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" -msgid "Passwords do not match!" -msgstr "パスワードが違います。" +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" -msgid "Permissions" -msgstr "権限" +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" -msgid "Port" -msgstr "ポート" +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" -msgid "Refresh" -msgstr "更新" +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" -msgid "Remove members from an HBAC service group." -msgstr "HBAC サービスグループからメンバーを削除します。" +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" -msgid "Reset OTP" -msgstr "OTP のリセット" +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" -msgid "Rules" -msgstr "ルール" +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" -msgid "Search Options" -msgstr "検索オプション" +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" -msgid "Search for HBAC rules." -msgstr "HBAC ルールを検索します。" +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" -msgid "Search for HBAC services." -msgstr "HBAC サービスを検索します。" +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" -msgid "Search for an HBAC service group." -msgstr "HBAC サービスグループを検索します。" +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" -msgid "Search for groups." -msgstr "グループを検索します。" +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" -msgid "Search for hosts." -msgstr "ホストを検索します。" +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" -msgid "Search for roles." -msgstr "役割を検索します。" +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" -msgid "Set" -msgstr "設定" +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" -msgid "Sudo Command" -msgstr "sudo コマンド" +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" -msgid "Sudo Commands" -msgstr "sudo コマンド" +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" -msgid "Sudo Rule" -msgstr "sudo ルール" +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" -msgid "Sudo Rules" -msgstr "sudo ルール" +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" -msgid "Text Data" -msgstr "テキストデータ" +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" -msgid "This entry already exists" -msgstr "このエントリーはすでに存在します" +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" -msgid "URL" -msgstr "URL" +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" -msgid "Unknown Error" -msgstr "未知のエラー" +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" -msgid "User Group" -msgstr "ユーザーグループ" +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" -msgid "User Options" -msgstr "ユーザーオプション" +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" -msgid "User group" -msgstr "ユーザーグループ" +msgid "vaultcontainer" +msgstr "" -msgid "Validation error" -msgstr "検証エラー" +msgid "vaultcontainers" +msgstr "" -msgid "an internal error has occurred" -msgstr "内部エラーが発生しました" +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "netgroups" +msgstr "グループ" + +#, fuzzy +#| msgid "groups" +msgid "Netgroups" +msgstr "グループ" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "グループ" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid attribute name" +msgstr "無効なドメイン名: %s" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" + +msgid "A list of ACI values" +msgstr "ACI 値の一覧" + +#, fuzzy +#| msgid "" +#| "at least one of: type, filter, subtree, targetgroup, attrs or memberof " +#| "are required" +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" +"が必要です" + +msgid "ACI prefix is required" +msgstr "" msgid "" "at least one of: type, filter, subtree, targetgroup, attrs or memberof are " @@ -340,79 +15644,925 @@ msgstr "" "少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" "が必要です" -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "大きくても %(maxlength)d バイトである必要があります" +msgid "filter and memberof are mutually exclusive" +msgstr "" -msgid "group" -msgstr "グループ" +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "グループ '%s' が存在しません" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACI" + +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "A list of ACI values" +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI 値の一覧" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "少なくとも %(minvalue)d である必要があります" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "IPA CA servers" +msgstr "HBAC サービス" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "無効なドメイン名: %s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr "グループ '%s' が存在しません" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" msgid "groups" msgstr "グループ" -msgid "host" -msgstr "ホスト" - -msgid "host group" -msgstr "ホストグループ" - -msgid "host groups" -msgstr "ホストグループ" - -msgid "hosts" -msgstr "ホスト" - -msgid "invalid SSH public key" -msgstr "無効な SSH 公開鍵" +msgid "User Group" +msgstr "ユーザーグループ" #, python-format -msgid "invalid domain-name: %s" -msgstr "無効なドメイン名: %s" +msgid "Added group \"%(value)s\"" +msgstr "" -msgid "must be Unicode text" -msgstr "Unicode テキストである必要があります" +msgid "gid cannot be set for external group" +msgstr "" -msgid "must be an integer" +#, fuzzy, python-format +#| msgid "Delete group." +msgid "Deleted group \"%(value)s\"" +msgstr "グループを削除します。" + +#, fuzzy +#| msgid "Delete group." +msgid "privileged group" +msgstr "グループを削除します。" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Not a managed group" +msgstr "新しいグループを作成します。" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Permissions\n" +msgstr "権限" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Managed permissions\n" +msgstr "権限" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be enclosed in parentheses" msgstr "整数である必要があります" #, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "少なくとも %(minlength)d バイトである必要があります" +msgid "\"%s\" is not an object type" +msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "少なくとも %(minlength)d 文字である必要があります" +msgid "\"%s\" is not a valid permission type" +msgstr "" #, python-format -msgid "must be at least %(minvalue)d" -msgstr "少なくとも %(minvalue)d である必要があります" - -msgid "must be binary data" -msgstr "バイナリーデータである必要があります" +msgid "Deprecated; use %s" +msgstr "" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "ちょうど %(length)d バイトである必要があります" +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "Entry %s not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" #, python-format -msgid "must be exactly %(length)d characters" -msgstr "ちょうど %(length)d 文字である必要があります" +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "パターン \"%(pattern)s\" が一致する必要があります" +msgid "option was renamed; use %s" +msgstr "" -msgid "password policies" -msgstr "パスワードポリシー" +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" -msgid "password policy" -msgstr "パスワードポリシー" +#, python-format +msgid "%s: group not found" +msgstr "" -msgid "role" -msgstr "役割" +msgid "target and targetgroup are mutually exclusive" +msgstr "" -msgid "roles" -msgstr "役割" +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Group '%s' does not exist" +msgid "Entry %s does not exist" +msgstr "グループ '%s' が存在しません" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "ACI of permission %s was not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "URL" +msgid "URI" +msgstr "URL" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "" +"\n" +"Sudo Rules\n" +msgstr "sudo ルール" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "sudo ルール" + +msgid "Sudo Rules" +msgstr "sudo ルール" + +msgid "Sudo Rule" +msgstr "sudo ルール" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "ユーザー" + +#, fuzzy +#| msgid "sudo command" +msgid "command" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "sudo commands" +msgid "commands" +msgstr "sudo コマンド" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "users" +msgid "runAs users" +msgstr "ユーザー" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "グループ" + +#, fuzzy +#| msgid "host groups" +msgid "runAs groups" +msgstr "ホストグループ" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" msgid "sudo command" msgstr "sudo コマンド" @@ -420,18 +16570,8047 @@ msgstr "sudo コマンド" msgid "sudo commands" msgstr "sudo コマンド" -msgid "sudo rule" -msgstr "sudo ルール" +msgid "Sudo Commands" +msgstr "sudo コマンド" -msgid "sudo rules" -msgstr "sudo ルール" +#, fuzzy, python-format +#| msgid "Sudo Commands" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "sudo コマンド" #, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s から未知のエラー %(code)d: %(error)s" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" -msgid "user" +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "sudo command group" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups" +msgstr "sudo コマンド" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Key" +msgid "Kerberos Ticket Policy" +msgstr "Kerberos キー" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +#, fuzzy +#| msgid "Options" +msgid "locations" +msgstr "オプション" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add a new IPA location." +msgstr "新しいホストを追加します。" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC rule." +msgid "Delete an IPA location." +msgstr "HBAC ルールを削除します。" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "HBAC Service" +msgid "IPA Server" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Modify information about an IPA location." +msgstr "役割に関する情報を表示します。" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for IPA locations." +msgstr "ホストを検索します。" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about an IPA location." +msgstr "役割に関する情報を表示します。" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Version" +msgstr "権限" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a command." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for commands." +msgstr "ホストを検索します。" + +msgid "Return command defaults" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a class." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search for classes." +msgstr "役割を検索します。" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a help topic." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for help topics." +msgstr "ホストを検索します。" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI 名" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +#, fuzzy +#| msgid "Default host group" +msgid "Default from" +msgstr "標準のホストグループ" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +#, fuzzy +#| msgid "host group" +msgid "Option group" +msgstr "ホストグループ" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a command parameter." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for roles." +msgid "Search command parameters." +msgstr "役割を検索します。" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "Display information about a command output." +msgstr "役割に関する情報を表示します。" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for command outputs." +msgstr "グループを検索します。" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Modify a role." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "役割を変更します。" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "権限" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "server roles" +msgstr "役割を検索します。" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "役割" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "HBAC rule %(rule)s not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate chain" +msgstr "証明書" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "IP アドレス" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "フィンガープリント (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "フィンガープリント (SHA1)" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +#, fuzzy +#| msgid "Account Status" +msgid "Status" +msgstr "アカウント状態" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new ID override." +msgstr "新しい HBAC サービスを追加します。" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC rule." +msgid "Delete an ID override." +msgstr "HBAC ルールを削除します。" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an ID override." +msgstr "HBAC サービスを変更します。" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for an ID override." +msgstr "HBAC サービスグループを検索します。" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "Display information about an ID override." +msgstr "HBAC サービスに関する情報を表示します。" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "Auto member rule: %s not found!" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "HBAC ルールを検索します。" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Display information about a role." +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "役割に関する情報を表示します。" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Authority" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Authorities" +msgstr "証明書" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +#, fuzzy +#| msgid "Search for hosts." +msgid "Search for CAs." +msgstr "ホストを検索します。" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Display the properties of an HBAC rule." +msgid "Display the properties of a CA." +msgstr "HBAC ルールのプロパティーを表示します。" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a CA." +msgstr "新しいグループを作成します。" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify CA configuration." +msgstr "グループを変更します。" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +#, fuzzy +#| msgid "Disable an HBAC rule." +msgid "Disable a CA." +msgstr "HBAC ルールを無効化します。" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +#, fuzzy +#| msgid "Enable an HBAC rule." +msgid "Enable a CA." +msgstr "HBAC ルールを有効化します。" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#, fuzzy +#| msgid "Options" +msgid "Actions" +msgstr "オプション" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add and Close" +msgstr "新しいホストを追加します。" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +#, fuzzy +#| msgid "Set" +msgid "Get" +msgstr "設定" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "更新" + +msgid "Reload current settings from the server." +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete" +msgstr "グループを削除します。" + +msgid "Remove hold" +msgstr "" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Reset" +msgstr "OTP のリセット" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Reset Password" +msgstr "OTP のリセット" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "設定" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +#| msgid "A list of ACI values" +msgid "Add custom value" +msgstr "ACI 値の一覧" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +#, fuzzy +#| msgid "Validation error" +msgid "Operations Error" +msgstr "検証エラー" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "${entity} の編集" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "検証エラー" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "内部エラーが発生しました" + +msgid "HTTP Error" +msgstr "HTTP エラー" + +msgid "Internal Error" +msgstr "内部エラー" + +msgid "IPA Error" +msgstr "IPA エラー" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "未知のエラー" + +msgid "URL" +msgstr "URL" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +#, fuzzy +#| msgid "Search Options" +msgid "Search" +msgstr "検索オプション" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Log In Using Certificate" +msgstr "証明書" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Add permission" +msgstr "権限" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove permissions" +msgstr "権限" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add role" +msgstr "新しい役割を追加します。" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +#, fuzzy +#| msgid "sudo rule" +msgid "Add rule" +msgstr "sudo ルール" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "標準のホストグループ" + +msgid "Default user group" +msgstr "標準のユーザーグループ" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +#, fuzzy +#| msgid "host group" +msgid "Host group rule" +msgstr "ホストグループ" + +#, fuzzy +#| msgid "host groups" +msgid "Host group rules" +msgstr "ホストグループ" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User group rule" +msgstr "ユーザーグループ" + +#, fuzzy +#| msgid "User group" +msgid "User group rules" +msgstr "ユーザーグループ" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +#, fuzzy +#| msgid "Host" +msgid "Any Host" +msgstr "ホスト" + +#, fuzzy +#| msgid "HBAC Service" +msgid "Any Service" +msgstr "HBAC サービス" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +#, fuzzy +#| msgid "Rules" +msgid "Rule status" +msgstr "ルール" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +#, fuzzy +#| msgid "HBAC Service Groups" +msgid "Specified Services and Groups" +msgstr "HBAC サービスグループ" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Hold" +msgstr "証明書" + +msgid "Cessation of Operation" +msgstr "" + +msgid "Common Name" +msgstr "" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "" + +msgid "Minimum serial number" +msgstr "" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +#, fuzzy +#| msgid "Validation error" +msgid "Valid not after from" +msgstr "検証エラー" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +#, fuzzy +#| msgid "Fingerprint" +msgid "Fingerprints" +msgstr "フィンガープリント" + +#, fuzzy +#| msgid "Certificates" +msgid "Get Certificate" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Hold Removed" +msgstr "証明書" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Issue new certificate" +msgstr "証明書" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "No Valid Certificate" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "New Certificate" +msgstr "証明書" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate requested" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Revoke certificate" +msgstr "証明書" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Revoked" +msgstr "証明書" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +#, fuzzy +#| msgid "Fingerprint" +msgid "SHA1 Fingerprint" +msgstr "フィンガープリント" + +#, fuzzy +#| msgid "Fingerprint" +msgid "SHA256 Fingerprint" +msgstr "フィンガープリント" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Valid Certificate Present" +msgstr "証明書" + +#, fuzzy +#| msgid "Validation error" +msgid "Valid from" +msgstr "検証エラー" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "View Certificate" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Data" +msgstr "証明書" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate For Match" +msgstr "証明書" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +#| msgid "User Options" +msgid "User Login" +msgstr "ユーザーオプション" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate mapping data" +msgstr "証明書" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Group Options" +msgstr "グループオプション" + +msgid "Search Options" +msgstr "検索オプション" + +#, fuzzy +#| msgid "Group Options" +msgid "SELinux Options" +msgstr "グループオプション" + +#, fuzzy +#| msgid "Search Options" +msgid "Server Options" +msgstr "検索オプション" + +#, fuzzy +#| msgid "Search Options" +msgid "Service Options" +msgstr "検索オプション" + +msgid "User Options" +msgstr "ユーザーオプション" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "オプション" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "Create dns record" +msgstr "%s レコード" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +#, fuzzy +#| msgid "%s Record" +msgid "Record Type" +msgstr "%s レコード" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove Permission" +msgstr "権限" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "ユーザーグループ" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group Options" +msgid "Group Settings" +msgstr "グループオプション" + +msgid "External" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "Groups" +msgstr "グループ" + +#, fuzzy +#| msgid "Group Options" +msgid "Group categories" +msgstr "グループオプション" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Remove user groups" +msgstr "標準のユーザーグループ" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group Options" +msgid "Group Type" +msgstr "グループオプション" + +#, fuzzy +#| msgid "Modify an HBAC rule." +msgid "Add HBAC rule" +msgstr "HBAC ルールを変更します。" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Remove HBAC rules" +msgstr "HBAC ルールを検索します。" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "HBAC Service" +msgid "Via Service" +msgstr "HBAC サービス" + +msgid "Who" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "Add HBAC service" +msgstr "HBAC サービス" + +#, fuzzy, python-brace-format +#| msgid "Add members to an HBAC service group." +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "HBAC サービスグループにメンバーを追加します。" + +#, fuzzy +#| msgid "HBAC services" +msgid "Remove HBAC services" +msgstr "HBAC サービス" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "HBAC サービスグループからメンバーを削除します。" + +#, fuzzy +#| msgid "HBAC service group" +msgid "Add HBAC service group" +msgstr "HBAC サービスグループ" + +#, fuzzy, python-brace-format +#| msgid "Add members to an HBAC service group." +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "HBAC サービスグループにメンバーを追加します。" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "Remove HBAC service groups" +msgstr "HBAC サービスグループ" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC Test" +msgstr "HBAC サービス" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "ルール" + +msgid "Run Test" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Edit ${entity}" +msgid "Specify external ${entity}" +msgstr "${entity} の編集" + +msgid "Unmatched" +msgstr "" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add host" +msgstr "新しいホストを追加します。" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Host Certificate" +msgstr "証明書" + +#, fuzzy +#| msgid "Host" +msgid "Host Name" +msgstr "ホスト" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Generate OTP" +msgstr "OTP のリセット" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Generated OTP" +msgstr "OTP のリセット" + +msgid "Kerberos Key" +msgstr "Kerberos キー" + +#, fuzzy +#| msgid "Kerberos Key" +msgid "Kerberos Key Not Present" +msgstr "Kerberos キー" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "OTP のリセット" + +msgid "Reset One-Time Password" +msgstr "" + +#, fuzzy +#| msgid "Reset OTP" +msgid "Set OTP" +msgstr "OTP のリセット" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +#| msgid "host group" +msgid "Add host group" +msgstr "ホストグループ" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Host Group" +msgid "Host Group Settings" +msgstr "ホストグループ" + +#, fuzzy +#| msgid "host groups" +msgid "Remove host groups" +msgstr "ホストグループ" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +#| msgid "host groups" +msgid "Apply to host groups" +msgstr "ホストグループ" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +#, fuzzy +#| msgid "host groups" +msgid "Un-apply from host groups" +msgstr "ホストグループ" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "ホスト" + +#, fuzzy +#| msgid "Group Options" +msgid "Netgroup Settings" +msgstr "グループオプション" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission settings" +msgstr "権限" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Set public key" +msgstr "無効な SSH 公開鍵" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +#| msgid "password policy" +msgid "Add password policy" +msgstr "パスワードポリシー" + +#, fuzzy +#| msgid "Password Policies" +msgid "Password Policy" +msgstr "パスワードポリシー" + +#, fuzzy +#| msgid "password policies" +msgid "Remove password policies" +msgstr "パスワードポリシー" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Search for roles." +msgid "Server Roles" +msgstr "役割を検索します。" + +msgid "Server Role" +msgstr "" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete Server" +msgstr "役割を削除します。" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "Add service" +msgstr "HBAC サービス" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "Certificates" +msgid "Service Certificate" +msgstr "証明書" + +msgid "Service Settings" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Provisioning" +msgstr "権限" + +#, fuzzy +#| msgid "HBAC services" +msgid "Remove services" +msgstr "HBAC サービス" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "SSH public keys" +msgstr "無効な SSH 公開鍵" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "SSH public key:" +msgstr "無効な SSH 公開鍵" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +#, fuzzy +#| msgid "Add a new user." +msgid "Add stage user" +msgstr "新しいユーザーを追加します。" + +#, fuzzy +#| msgid "users" +msgid "Stage users" msgstr "ユーザー" -msgid "users" -msgstr "ユーザー" +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "Add sudo command" +msgstr "sudo コマンド" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Remove sudo commands" +msgstr "sudo コマンド" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "Add sudo command group" +msgstr "sudo コマンド" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Remove sudo command groups" +msgstr "sudo コマンド" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "sudo rule" +msgid "Add sudo rule" +msgstr "sudo ルール" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Any Command" +msgstr "sudo コマンド" + +#, fuzzy +#| msgid "Host Group" +msgid "Any Group" +msgstr "ホストグループ" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Run Commands" +msgstr "sudo コマンド" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +#, fuzzy +#| msgid "Options" +msgid "Option added" +msgstr "オプション" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +#, fuzzy +#| msgid "sudo rules" +msgid "Remove sudo rules" +msgstr "sudo ルール" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +#, fuzzy +#| msgid "HBAC Service Groups" +msgid "Specified Groups" +msgstr "HBAC サービスグループ" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "アカウント" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +#, fuzzy +#| msgid "Account Status" +msgid "Trust status" +msgstr "アカウント状態" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "User attributes for SMB services" +msgstr "HBAC サービスを検索します。" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +#, fuzzy +#| msgid "Account Status" +msgid "Account Settings" +msgstr "アカウント状態" + +msgid "Account Status" +msgstr "アカウント状態" + +msgid "Active users" +msgstr "" + +#, fuzzy +#| msgid "Add a new user." +msgid "Add user" +msgstr "新しいユーザーを追加します。" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +#, fuzzy +#| msgid "Delete a role." +msgid "Delete mode" +msgstr "役割を削除します。" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +#, fuzzy +#| msgid "Password Policies" +msgid "Password expiration" +msgstr "パスワードポリシー" + +#, fuzzy +#| msgid "IP Address" +msgid "Mailing Address" +msgstr "IP アドレス" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +#, fuzzy +#| msgid "host group" +msgid "No private group" +msgstr "ホストグループ" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "HBAC Service Groups" +msgid "Service Vaults" +msgstr "HBAC サービスグループ" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "User Options" +msgid "User Vaults" +msgstr "ユーザーオプション" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#, fuzzy +#| msgid "Reset OTP" +msgid "First OTP" +msgstr "OTP のリセット" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "パスワードが違います" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +#, fuzzy +#| msgid "Account" +msgid "Automount" +msgstr "アカウント" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +#, fuzzy +#| msgid "Edit ${entity}" +msgid "Identity" +msgstr "${entity} の編集" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +#, fuzzy +#| msgid "Sudo Rule" +msgid "Sudo" +msgstr "sudo ルール" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "Must be a decimal number" +msgstr "整数である必要があります" + +msgid "Format error" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "Must be an integer" +msgstr "整数である必要があります" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#, fuzzy +#| msgid "IPA Error" +msgid "Parse error" +msgstr "IPA エラー" + +#, fuzzy +#| msgid "must be an integer" +msgid "Must be a positive number" +msgstr "整数である必要があります" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" + +#, fuzzy +#| msgid "HBAC services" +msgid "" +"\n" +"IPA servers\n" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "HBAC サービスに関する情報を表示します。" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "servers" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC Service" +msgid "IPA Servers" +msgstr "HBAC サービス" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Weight for server services" +msgstr "HBAC サービスを検索します。" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +#, fuzzy +#| msgid "Display information about an HBAC service." +msgid "Modify information about an IPA server." +msgstr "HBAC サービスに関する情報を表示します。" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove member from a named service delegation." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Delete an HBAC service group." +msgid "Delete Class of Service entry" +msgstr "HBAC サービスグループを削除します。" + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify Class of Service entry" +msgstr "HBAC サービスグループを変更します。" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for Class of Service entry" +msgstr "HBAC サービスグループを検索します。" + +msgid "password policy" +msgstr "パスワードポリシー" + +msgid "password policies" +msgstr "パスワードポリシー" + +msgid "Password Policies" +msgstr "パスワードポリシー" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Display information about an HBAC service group." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User Options" +msgid "User logins" +msgstr "ユーザーオプション" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "service" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "HBAC services" +msgid "services" +msgstr "HBAC サービス" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new IPA service." +msgstr "新しい HBAC サービスを追加します。" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new SMB service." +msgstr "新しい HBAC サービスを追加します。" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Remove members from an HBAC service group." +msgid "Remove principal alias from a service" +msgstr "HBAC サービスグループからメンバーを削除します。" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" + +msgid "The deny type has been deprecated." +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC rules" +msgstr "HBAC サービス" + +#, fuzzy +#| msgid "Rules" +msgid "HBAC Rules" +msgstr "ルール" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Delete an HBAC rule." +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを削除します。" + +#, fuzzy, python-format +#| msgid "Modify an HBAC rule." +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを変更します。" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" + +#, fuzzy, python-format +#| msgid "Enable an HBAC rule." +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを有効化します。" + +#, fuzzy, python-format +#| msgid "Disable an HBAC rule." +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "HBAC ルールを無効化します。" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "Member service groups" +msgstr "HBAC サービスグループ" + +#, fuzzy +#| msgid "HBAC service groups" +msgid "Member HBAC service groups" +msgstr "HBAC サービスグループ" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Indirect Member HBAC service" +msgstr "HBAC サービスを検索します。" + +#, fuzzy +#| msgid "Add members to an HBAC service group." +msgid "Indirect Member HBAC service group" +msgstr "HBAC サービスグループにメンバーを追加します。" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disable a user account." +msgid "Disabled user account \"%(value)s\"" +msgstr "ユーザーアカウントを無効化します。" + +#, fuzzy, python-format +#| msgid "Enable a user account." +msgid "Enabled user account \"%(value)s\"" +msgstr "ユーザーアカウントを有効化します。" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +#, fuzzy +#| msgid "Unknown Error" +msgid "Unknown" +msgstr "未知のエラー" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "Request must be a dict" +msgstr "整数である必要があります" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "params must be a list" +msgstr "整数である必要があります" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 1" +msgstr "少なくとも %(minvalue)d である必要があります" + +msgid "Out of memory\n" +msgstr "メモリー不足\n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "メモリー不足!?\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Password is too long!\n" +msgstr "パスワードが違います。" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/kn.po b/po/kn.po index 1c144f21d..5bc0bcb4c 100644 --- a/po/kn.po +++ b/po/kn.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Kannada\n" @@ -18,317 +18,1336 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n!=1)\n" "X-Generator: Zanata 4.6.2\n" -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +#, c-format +msgid "Out of memory!\n" +msgstr "" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" -msgid "A description of this host" -msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" -msgid "A description of this host-group" -msgstr "ಈ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" +#, c-format +msgid "Out of memory!" +msgstr "" -msgid "A description of this role-group" -msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" -msgid "A group may not be a member of itself" -msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯ ಆಗದಿರಬಹುದು" +msgid "SASL Bind failed\n" +msgstr "" -msgid "A group may not be added as a member of itself" -msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯನಂತೆ ಸೇರಿಸಲು ಆಗದಿರಬಹುದು" +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" -msgid "ACI name" -msgstr "ACI ಹೆಸರು" +#, c-format +msgid "No values for %s" +msgstr "" -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" -msgid "ACIs" -msgstr "ACIs" +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" -msgid "Access time" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +#, c-format +msgid "Host is already joined.\n" +msgstr "" -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" -msgid "Attributes" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" -msgid "Automount Keys" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" -msgid "Automount Maps" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" -msgid "BIND update policy" -msgstr "BIND update policy" +#, c-format +msgid "json_dumps() failed\n" +msgstr "" -msgid "Bad format in credentials cache" +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "did not receive Kerberos credentials" +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Kerberos ಯೋಗ್ಯತಾಪತ್ರಗಳನ್ನು ಪಡೆದಿಲ್ಲ" + +#, fuzzy, c-format +#| msgid "Bad format in credentials cache" +msgid "Error storing creds in credential cache: %s.\n" msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಜೋಡಣೆ ಸರಿಯಿಲ್ಲ" -msgid "Base-64 encoded server certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 ಡೆಕೋಡಿಂಗ್ ವಿಫಲಗೊಂಡಿದೆ: %(reason)s" +msgid "Quiet mode. Only errors are displayed." +msgstr "" -msgid "Bind DN" -msgstr "ಬೈಂಡ್ DN" +msgid "Unenroll this host from IPA server" +msgstr "" -msgid "Cannot resolve KDC for requested realm" -msgstr "ಕೋರಿದ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕಾಗಿ KDC ಯನ್ನು ಬಗೆಹರಿಸಲು ಆಗುತ್ತಿಲ್ಲ" +msgid "Hostname of this server" +msgstr "" -msgid "Certificate" +#, fuzzy +#| msgid "Host name" +msgid "hostname" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +msgid "IPA Server to use" +msgstr "" + +msgid "Specifies where to store keytab information." +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "filename" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "password" +msgstr "ಗುಪ್ತಪದ" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Service principal" +msgid "Removing principal %s\n" +msgstr "Service principal" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Kerberos principal" +msgid "Unable to parse principal\n" +msgstr "Kerberos principal" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "Print debugging information" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Kerberos Service Principal Name" +msgstr "Kerberos principal" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Realm name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server Name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "LDAP DN" +msgstr "LDAP URI" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "LDAP password" +msgstr "ಗುಪ್ತಪದ" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "IPA CA certificate" msgstr "ಪ್ರಮಾಣಪತ್ರ" -msgid "Certificate Subject base" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" +msgid "url" +msgstr "" -msgid "Character classes" -msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" -msgid "Class" -msgstr "ವರ್ಗ" +msgid "GSSAPI|EXTERNAL" +msgstr "" -msgid "Command not implemented" -msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" +msgid "Retrieve current keys without changing them" +msgstr "" -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" -msgid "Credentials cache permissions incorrect" -msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನ ಅನುಮತಿಗಳು ಸರಿಯಿಲ್ಲ" +#, c-format +msgid "Supported encryption types:\n" +msgstr "" -msgid "DNS" -msgstr "DNS" +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" -msgid "Data" -msgstr "ದತ್ತಾಂಶ" +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" -msgid "Default shell" -msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" +#, fuzzy +#| msgid "User password" +msgid "Enter LDAP password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" -msgid "Default users group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" +#, fuzzy +#| msgid "Principal name" +msgid "New Principal Password" +msgstr "Principal ಹೆಸರು" -msgid "Description" -msgstr "ವಿವರಣೆ" +msgid "Verify Principal Password" +msgstr "" -msgid "Email address" -msgstr "ಇಮೇಲ್ ವಿಳಾಸ" +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "ಮತ್ತೊಮ್ಮೆ ಪರಿಶೀಲಿಸಲು %(label)s ಎಂಟರ್ ಮಾಡಿ:" +#, fuzzy, c-format +#| msgid "Service principal" +msgid "Invalid Service Principal Name\n" +msgstr "Service principal" -msgid "Error" -msgstr "ದೋಷ" +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" -msgid "External host" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" msgid "Failed members" msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" +msgid "Failed source hosts/hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Failed hosts/hostgroups" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" + +#, fuzzy +#| msgid "Default users group" +msgid "Failed users/groups" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Failed service/service groups" +msgstr "" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed to remove" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed RunAs" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +msgid "Failed RunAsGroup" +msgstr "" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed profiles" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed CAs" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed member manager" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed managedby" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed targets" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed owners" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount master file." +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" +msgid "File %(file)s not found" +msgstr "" -msgid "Filter" -msgstr "ಶೋಧಕ (ಫಿಲ್ಟರ್)" +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key %(key)s already exists" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" -msgid "First name" +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "map %(map)s already exists" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +msgid "Imported maps:" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added %(map)s" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +#, fuzzy +#| msgid "Minimum number of character classes" +msgid "Maximum number of agreements per replica" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modify %(name)s '%(value)s'?" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Delete %(name)s '%(value)s'?" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +#| msgid "User" +msgid "User ID" +msgstr "ಬಳಕೆದಾರ" + +msgid "Password" +msgstr "ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "First name" +msgid "First Code" msgstr "ಮೊದಲ ಹೆಸರು" -msgid "GID" -msgstr "GID" +msgid "Second Code" +msgstr "" -msgid "GID (use this option to set it manually)" -msgstr "GID (ಇದನ್ನು ಮ್ಯಾನ್ಯೂವಲ್ ಆಗಿ ಸೆಟ್ ಮಾಡಲು ಈ ಆಯ್ಕೆಯನ್ನು ಬಳಸಿ)" - -msgid "Group" -msgstr "ಗುಂಪು" +msgid "Token ID" +msgstr "" #, python-format -msgid "Group '%s' does not exist" -msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" - -msgid "Group container" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -msgid "Group description" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -msgid "Group name" -msgstr "ಗುಂಪಿನ ಹೆಸರು" - -msgid "Group to apply ACI to" -msgstr "Group to apply ACI to" - -msgid "Groups" -msgstr "ಗುಂಪುಗಳು" - -msgid "History size" -msgstr "ಇತಿಹಾಸದ ಗಾತ್ರ" - -msgid "Home directory base" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -msgid "Host Groups" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -msgid "Host category" -msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "Host category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "ಹೋಸ್ಟ್ ಹಾರ್ಡ್‌ವೇರ್ ಪ್ಲ್ಯಾಟ್‌ಫಾರ್ಮ್ (e.g. \"Lenovo T61\")" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Baltimore, MD\")" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Lab 2\")" - -msgid "Host name" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "ಹೋಸ್ಟ್ ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ ಮತ್ತು ಆವೃತ್ತಿ (e.g. \"Fedora 9\")" - -msgid "Host-group" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" - -msgid "Hosts" -msgstr "ಹೋಸ್ಟ್‌ಗಳು" +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" #, python-format -msgid "Insufficient access: %(info)s" -msgstr "ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಸಾಲದಾಗಿದೆ: %(info)s" +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Vault password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" #, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Change password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Old vault password" +msgstr "" + +msgid "File containing the old vault password" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "New vault password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" #, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos ದೋಷ: %(major)s/%(minor)s" +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" -msgid "Kerberos principal" -msgstr "Kerberos principal" +msgid "Invalid vault type" +msgstr "" -msgid "Kerberos principal name for this host" -msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" +msgid "Retrieve a data from a vault." +msgstr "" -msgid "Key" -msgstr "ಕೀ" +msgid "File to store retrieved data" +msgstr "" -msgid "LDAP URI" -msgstr "LDAP URI" +msgid "Vault private key" +msgstr "" -msgid "LDAP URI of DS server to migrate from" -msgstr "LDAP URI of DS server to migrate from" +msgid "File containing the vault private key" +msgstr "" -msgid "Last name" -msgstr "ಕೊನೆಯ ಹೆಸರು" +msgid "Data" +msgstr "ದತ್ತಾಂಶ" -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Legal LDAP filter (e.g. ou=Engineering)" +msgid "Private key specified multiple times" +msgstr "" -msgid "Locality" -msgstr "ಪ್ರದೇಶ" +msgid "Missing vault private key" +msgstr "" -msgid "Location" -msgstr "ಸ್ಥಳ" +msgid "Unrevoked" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿಲ್ಲ" -msgid "Login shell" -msgstr "ಪ್ರವೇಶ ಶೆಲ್" +msgid "Error" +msgstr "ದೋಷ" -msgid "Manage ticket policy for specific user" -msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" +#, fuzzy +#| msgid "Rule name" +msgid "Input filename" +msgstr "ನಿಯಮದ ಹೆಸರು" -msgid "Map" -msgstr "ನಕ್ಷೆ" +msgid "File to load the certificate from." +msgstr "" -msgid "Max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" -msgid "Max lifetime (days)" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳು)" +msgid "ACI name" +msgstr "ACI ಹೆಸರು" -msgid "Max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" +#, fuzzy +#| msgid "Permissions" +msgid "Permission" +msgstr "ಅನುಮತಿಗಳು" -msgid "Maximum password lifetime (in days)" -msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" +#, fuzzy +#| msgid "User group ACI grants access to" +msgid "Permission ACI grants access to" +msgstr "User group ACI grants access to" -msgid "Member groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" +msgid "User group" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" -msgid "Member host-groups" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" +msgid "User group ACI grants access to" +msgstr "User group ACI grants access to" -msgid "Member hosts" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" +msgid "Permissions" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "Type" +msgstr "ಬಗೆ" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" msgid "Member of" msgstr "ಸದಸ್ಯ" @@ -336,189 +1355,11 @@ msgstr "ಸದಸ್ಯ" msgid "Member of a group" msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" -msgid "Member of host-groups" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" +msgid "Filter" +msgstr "ಶೋಧಕ (ಫಿಲ್ಟರ್)" -msgid "Member users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Min length" -msgstr "ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "Min lifetime (hours)" -msgstr "ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳು)" - -msgid "Minimum length of password" -msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "Minimum number of character classes" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Minimum password lifetime (in hours)" -msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳಲ್ಲಿ)" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Mount information" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Mount point" -msgstr "ಮೌಂಟ್ ಪಾಯಂಟ್" - -msgid "NIS domain name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "Name of host-group" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" - -msgid "Netgroup description" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" - -msgid "Netgroup name" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - -msgid "Netgroups" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -msgid "No credentials cache found" -msgstr "ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಯೋಗ್ಯತಾಪತ್ರಗಳು ಸಿಗುತ್ತಿಲ್ಲ" - -msgid "Only one value is allowed" -msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" - -msgid "Operating system" -msgstr "ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ" - -msgid "Parent map" -msgstr "Parent map" - -msgid "Password" -msgstr "ಗುಪ್ತಪದ" - -msgid "Password history size" -msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" - -msgid "Password used in bulk enrollment" -msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" - -msgid "Passwords do not match" -msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ" - -msgid "Passwords do not match!" -msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" - -msgid "Permissions" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Platform" -msgstr "ಪ್ಲಾಟ್‌ಫಾರ್ಮ್" - -msgid "Principal" -msgstr "Principal" - -msgid "Principal name" -msgstr "Principal ಹೆಸರು" - -msgid "Priority" -msgstr "ಆದ್ಯತೆ" - -msgid "Reason" -msgstr "ಕಾರಣ" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -msgid "Request id" -msgstr "ಬೇಡಿಕೆ ID" - -msgid "Request status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -msgid "Results are truncated, try a more specific search" -msgstr "ಫಲಿತಾಂಶಗಳು ಕತ್ತರಿಸಲ್ಪಟ್ಟಿವೆ, ಹೆಚ್ಚ್ಹು ನಿರ್ದಿಷ್ಟವಾದ ಶೋಧನೆ ಪ್ರಯತ್ನಿಸಿ" - -msgid "Revocation reason" -msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" - -msgid "Revoked" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" - -msgid "Rule name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "SOA class" -msgstr "SOA class" - -msgid "SOA expire" -msgstr "SOA expire" - -msgid "SOA minimum" -msgstr "SOA minimum" - -msgid "SOA refresh" -msgstr "SOA refresh" - -msgid "SOA retry" -msgstr "SOA retry" - -msgid "SOA serial" -msgstr "SOA serial" - -msgid "Search size limit" -msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" - -msgid "Search time limit" -msgstr "ಹುಡುಕು ಸಮಯ ಮಿತಿ" - -msgid "Serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "ಕ್ರಮ ಸಂಖ್ಯೆ ಡೆಸಿಮಲ್‌ನಲ್ಲಿ ಅಥವಾ 0x ಮೊದಲು ಸೇರಿಸಿದ್ದಲ್ಲಿ ಹೆಕ್ಸಾಡೆಸಿಮಲ್‌ನಲ್ಲಿ" - -msgid "Service name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "Service principal" -msgstr "Service principal" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Service principalನ ಸ್ವರೂಪ ಹೀಗಿಲ್ಲ: service/fully-qualified host name: " -"%(reason)s" - -msgid "Services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "Street address" -msgstr "ಕೇರಿ ವಿಳಾಸ" - -msgid "Subject" -msgstr "ವಿಷಯ" +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Legal LDAP filter (e.g. ou=Engineering)" msgid "Subtree" msgstr "ಉಪವೃಕ್ಷ" @@ -529,9 +1370,11029 @@ msgstr "Subtree to apply ACI to" msgid "Target group" msgstr "Target ಗುಂಪು" -msgid "The default users group cannot be removed" +msgid "Group to apply ACI to" +msgstr "Group to apply ACI to" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +msgid "Delete ACI." +msgstr "" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "New ACI name" +msgstr "ACI ಹೆಸರು" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "ಕೀ" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Automount key name." +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +msgid "Mount information" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "description" +msgstr "ವಿವರಣೆ" + +msgid "Location" +msgstr "ಸ್ಥಳ" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "ನಕ್ಷೆ" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount map name." +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +msgid "Description" +msgstr "ವಿವರಣೆ" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +#, fuzzy +#| msgid "Search size limit" +msgid "Size Limit" +msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "New mount information" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +#, fuzzy +#| msgid "Rule name" +msgid "Rename" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "ಮೌಂಟ್ ಪಾಯಂಟ್" + +msgid "Parent map" +msgstr "Parent map" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "Min length" +msgid "Maximum username length" +msgstr "ಕನಿಷ್ಟ ಉದ್ದ" + +msgid "Home directory base" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" + +#, fuzzy +#| msgid "Default shell" +msgid "Default shell for new users" +msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" + +msgid "Default users group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "ಹುಡುಕು ಸಮಯ ಮಿತಿ" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +#, fuzzy +#| msgid "User search fields" +msgid "Group search fields" +msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default user objectclasses" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default SELinux user" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Default PAC types" +msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "Member user group" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Group to apply ACI to" +msgid "User group to apply delegation to" +msgstr "Group to apply ACI to" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +msgid "Zone name" +msgstr "ವಲಯದ ಹೆಸರು" + +msgid "Zone name (FQDN)" +msgstr "ವಲಯದ ಹೆಸರು (FQDN)" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Record name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "Time to live" +msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" + +msgid "Records" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Record type" +msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "IP Address" +msgstr "ಇಮೇಲ್ ವಿಳಾಸ" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +#, fuzzy +#| msgid "Subtree" +msgid "Subtype" +msgstr "ಉಪವೃಕ್ಷ" + +#, fuzzy +#| msgid "Host name" +msgid "AFSDB Hostname" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +#, fuzzy +#| msgid "Host name" +msgid "Hostname" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate Type" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Type" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate/CRL" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate/CRL" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +#, fuzzy +#| msgid "Host name" +msgid "CNAME Hostname" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target" +msgstr "Target ಗುಂಪು" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "NAPTR Service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Services" +msgid "Service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +#, fuzzy +#| msgid "Host name" +msgid "NS Hostname" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +#, fuzzy +#| msgid "Host name" +msgid "PTR Hostname" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +#, fuzzy +#| msgid "Priority" +msgid "SRV Priority" +msgstr "ಆದ್ಯತೆ" + +msgid "Priority" +msgstr "ಆದ್ಯತೆ" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +#, fuzzy +#| msgid "SOA retry" +msgid "TLSA record" +msgstr "SOA retry" + +msgid "Raw TLSA records" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "TLSA Certificate Usage" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Usage" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +#, fuzzy +#| msgid "Certificate Subject base" +msgid "Certificate Association Data" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +#, fuzzy +#| msgid "Data" +msgid "Text Data" +msgstr "ದತ್ತಾಂಶ" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "SOA serial" + +#, fuzzy +#| msgid "Serial number" +msgid "SOA record serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "SOA refresh" +msgstr "SOA refresh" + +#, fuzzy +#| msgid "SOA refresh" +msgid "SOA record refresh time" +msgstr "SOA refresh" + +msgid "SOA retry" +msgstr "SOA retry" + +#, fuzzy +#| msgid "SOA retry" +msgid "SOA record retry time" +msgstr "SOA retry" + +msgid "SOA expire" +msgstr "SOA expire" + +#, fuzzy +#| msgid "SOA expire" +msgid "SOA record expire time" +msgstr "SOA expire" + +msgid "SOA minimum" +msgstr "SOA minimum" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "BIND update policy" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission value" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +#, fuzzy +#| msgid "Rule name" +msgid "Rule type" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "User category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "Host category" +msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" + +msgid "Host category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy +#| msgid "User category" +msgid "Service category" +msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Service category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "ಬಳಕೆದಾರರು" + +msgid "User Groups" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" + +msgid "Hosts" +msgstr "ಹೋಸ್ಟ್‌ಗಳು" + +msgid "Host Groups" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +msgid "Services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Services" +msgid "Service Groups" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "External host" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Member hosts" +msgid "member host" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" + +msgid "hosts to add" +msgstr "" + +#, fuzzy +#| msgid "Member host-groups" +msgid "member host group" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy +#| msgid "Host Groups" +msgid "host groups to add" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "member HBAC service group" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "member user" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "users to add" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "member group" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +#, fuzzy +#| msgid "Services" +msgid "HBAC service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Netgroup description" +msgid "HBAC service description" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of HBAC service groups" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service group name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +#, fuzzy +#| msgid "Netgroup description" +msgid "HBAC service group description" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" + +#, fuzzy +#| msgid "Member users" +msgid "Member HBAC service" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +msgid "A description of this host" +msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" + +msgid "Locality" +msgstr "ಪ್ರದೇಶ" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Baltimore, MD\")" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Lab 2\")" + +msgid "Platform" +msgstr "ಪ್ಲಾಟ್‌ಫಾರ್ಮ್" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "ಹೋಸ್ಟ್ ಹಾರ್ಡ್‌ವೇರ್ ಪ್ಲ್ಯಾಟ್‌ಫಾರ್ಮ್ (e.g. \"Lenovo T61\")" + +msgid "Operating system" +msgstr "ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "ಹೋಸ್ಟ್ ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ ಮತ್ತು ಆವೃತ್ತಿ (e.g. \"Fedora 9\")" + +msgid "User password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Password used in bulk enrollment" +msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "Password used in bulk enrollment" +msgid "Generate a random password to be used in bulk enrollment" +msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "User password" +msgid "Random password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +msgid "Principal name" +msgstr "Principal ಹೆಸರು" + +#, fuzzy +#| msgid "Email address" +msgid "MAC address" +msgstr "ಇಮೇಲ್ ವಿಳಾಸ" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "ವರ್ಗ" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Roles" +msgstr "" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Member of netgroups" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of Sudo rule" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of HBAC rule" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member of a group" +msgid "Indirect Member of netgroup" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Indirect Member of host-group" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member of a group" +msgid "Indirect Member of role" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "host group" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "netgroup" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "file to store certificate in" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" + +msgid "Name of host-group" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" + +msgid "A description of this host-group" +msgstr "ಈ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" + +msgid "Member hosts" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" + +msgid "Member host-groups" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy +#| msgid "Member hosts" +msgid "Indirect Member hosts" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" + +#, fuzzy +#| msgid "Member host-groups" +msgid "Indirect Member host-groups" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Add a new hostgroup." +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Add members to a hostgroup." +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Deleted hostgroup \"%(value)s\"" +msgid "Delete a hostgroup." +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Search for hostgroups." +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Modify a hostgroup." +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Remove members from a hostgroup." +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "ಗುಂಪಿನ ಹೆಸರು" + +msgid "GID" +msgstr "GID" + +#, fuzzy +#| msgid "Group name" +msgid "Group ID Number" +msgstr "ಗುಂಪಿನ ಹೆಸರು" + +msgid "User login" +msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" + +msgid "UID" +msgstr "UID" + +#, fuzzy +#| msgid "User name" +msgid "User ID Number" +msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" + +msgid "GECOS" +msgstr "" + +#, fuzzy +#| msgid "Home directory base" +msgid "Home directory" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +msgid "Login shell" +msgstr "ಪ್ರವೇಶ ಶೆಲ್" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "hosts" +msgstr "ಹೋಸ್ಟ್‌ಗಳು" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts to apply the ID View to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy +#| msgid "Host-group" +msgid "hostgroups" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts that this ID View was applied to." +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Enumerate all the hosts the view applies to." +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Name of method to export" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +#, fuzzy +#| msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "ಹೋಸ್ಟ್ ಹಾರ್ಡ್‌ವೇರ್ ಪ್ಲ್ಯಾಟ್‌ಫಾರ್ಮ್ (e.g. \"Lenovo T61\")" + +#, fuzzy +#| msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "ಹೋಸ್ಟ್ ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ ಮತ್ತು ಆವೃತ್ತಿ (e.g. \"Fedora 9\")" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" + +msgid "Manage ticket policy for specific user" +msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" + +msgid "Max life" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "LDAP URI" + +msgid "LDAP URI of DS server to migrate from" +msgstr "LDAP URI of DS server to migrate from" + +#, fuzzy +#| msgid "User password" +msgid "bind password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Bind DN" +msgstr "ಬೈಂಡ್ DN" + +msgid "User container" +msgstr "ಬಳಕೆದಾರನ ಕಂಟೇನರ್" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CA certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" + +msgid "Netgroup description" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" + +msgid "NIS domain name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +msgid "IPA unique ID" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "Member netgroups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Member groups" +msgid "Indirect Member netgroups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Member users" +msgid "Member User" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy +#| msgid "Member groups" +msgid "Member Group" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Member hosts" +msgid "Member Host" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" + +#, fuzzy +#| msgid "Member host-groups" +msgid "Member Hostgroup" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" + +msgid "Add a new netgroup." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Add members to a netgroup." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member groups" +msgid "member netgroup" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Netgroups" +msgid "netgroups to add" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +msgid "Delete a netgroup." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Search for a netgroup." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +#, fuzzy +#| msgid "Group" +msgid "group" +msgstr "ಗುಂಪು" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Modify a netgroup." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member of a group" +msgid "Remove members from a netgroup." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Netgroup name" +msgid "netgroups to remove" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Set a user's password." +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "Password" +msgid "New Password" +msgstr "ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "Password" +msgid "Current Password" +msgstr "ಗುಪ್ತಪದ" + +msgid "OTP" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "One Time Password" +msgstr "ಗುಪ್ತಪದ" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission name" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Effective attributes" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "All attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Included attributes" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Excluded attributes" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Default attributes" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Bind rule type" +msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" + +#, fuzzy +#| msgid "Subtree to apply ACI to" +msgid "Subtree to apply permissions to" +msgstr "Subtree to apply ACI to" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target DN" +msgstr "Target ಗುಂಪು" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of group" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission flags" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +#, fuzzy +#| msgid "Credentials cache permissions incorrect" +msgid "Rename the permission object" +msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನ ಅನುಮತಿಗಳು ಸರಿಯಿಲ್ಲ" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "Principal name" +msgid "Privilege name" +msgstr "Principal ಹೆಸರು" + +#, fuzzy +#| msgid "description" +msgid "Privilege description" +msgstr "ವಿವರಣೆ" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +#, fuzzy +#| msgid "Member of" +msgid "member role" +msgstr "ಸದಸ್ಯ" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "permission" +msgstr "ಅನುಮತಿಗಳು" + +#, fuzzy +#| msgid "Permissions" +msgid "permissions" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "ಗುಂಪು" + +#, fuzzy +#| msgid "Manage ticket policy for specific user" +msgid "Manage password policy for specific group" +msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" + +msgid "Max lifetime (days)" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳು)" + +msgid "Maximum password lifetime (in days)" +msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" + +msgid "Min lifetime (hours)" +msgstr "ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳು)" + +msgid "Minimum password lifetime (in hours)" +msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳಲ್ಲಿ)" + +msgid "History size" +msgstr "ಇತಿಹಾಸದ ಗಾತ್ರ" + +msgid "Password history size" +msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" + +msgid "Character classes" +msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Minimum number of character classes" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Min length" +msgstr "ಕನಿಷ್ಟ ಉದ್ದ" + +msgid "Minimum length of password" +msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಉದ್ದ" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +#, fuzzy +#| msgid "Max life" +msgid "Max failures" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Lockout duration" +msgstr "ಸ್ಥಳ" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "ಬಳಕೆದಾರ" + +#, fuzzy +#| msgid "Manage ticket policy for specific user" +msgid "Display effective policy for a specific user" +msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +#, fuzzy +#| msgid "A description of this host" +msgid "A description of this RADIUS proxy server" +msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" + +#, fuzzy +#| msgid "Services" +msgid "Server" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "User attribute" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Role name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "A description of this role-group" +msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" + +msgid "Member users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Member groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +msgid "Privileges" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Member services" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Add a new role." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Add members to a role." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member users" +msgid "member service" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy +#| msgid "Services" +msgid "services to add" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "services to remove" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Self-service name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "Principal" + +msgid "Service principal" +msgstr "Service principal" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal name for this host" +msgid "force principal name even if not in DNS" +msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "" + +#, fuzzy +#| msgid "A description of this host" +msgid "A description of this command" +msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +msgid "Group description" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +msgid "Commands" +msgstr "" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "ಮೊದಲ ಹೆಸರು" + +msgid "Last name" +msgstr "ಕೊನೆಯ ಹೆಸರು" + +#, fuzzy +#| msgid "Rule name" +msgid "Full name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +#, fuzzy +#| msgid "First name" +msgid "Display name" +msgstr "ಮೊದಲ ಹೆಸರು" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "Kerberos principal" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Kerberos principal expiration" +msgstr "Kerberos principal" + +msgid "Email address" +msgstr "ಇಮೇಲ್ ವಿಳಾಸ" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "ಕೇರಿ ವಿಳಾಸ" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Pager Number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +#, fuzzy +#| msgid "Serial number" +msgid "Fax Number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +#| msgid "%(count)d variables" +msgid "Account disabled" +msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of groups" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Member of a group" +msgid "Indirect Member of group" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Don't create user private group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "A description of this role-group" +msgid "A description of this auto member rule" +msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" + +#, fuzzy +#| msgid "Default users group" +msgid "Default (fallback) Group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Grouping Type" +msgstr "ಗುಂಪಿನ ಹೆಸರು" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Grouping to which the rule applies" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attribute Key" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "Search for existing certificates." +msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "ಕಾರಣ" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" + +#, fuzzy +#| msgid "Serial number" +msgid "minimum serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +#, fuzzy +#| msgid "Serial number" +msgid "maximum serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +#| msgid "Minimum number of character classes" +msgid "Maximum number of certs returned" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "ಕ್ರಮ ಸಂಖ್ಯೆ ಡೆಸಿಮಲ್‌ನಲ್ಲಿ ಅಥವಾ 0x ಮೊದಲು ಸೇರಿಸಿದ್ದಲ್ಲಿ ಹೆಕ್ಸಾಡೆಸಿಮಲ್‌ನಲ್ಲಿ" + +#, fuzzy +#| msgid "Failure decoding Certificate Signing Request: %s" +msgid "Submit a certificate signing request." +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" + +#, fuzzy +#| msgid "Certificate" +msgid "Revoke a certificate." +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "File to store the certificate in." +msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "ಬೇಡಿಕೆ ID" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "GID (ಇದನ್ನು ಮ್ಯಾನ್ಯೂವಲ್ ಆಗಿ ಸೆಟ್ ಮಾಡಲು ಈ ಆಯ್ಕೆಯನ್ನು ಬಳಸಿ)" + +#, fuzzy +#| msgid "Member users" +msgid "Indirect Member users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy +#| msgid "Member groups" +msgid "Indirect Member groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Add members to a group." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "External host" +msgid "External member" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Delete group." +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Modify a group." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Remove members from a group." +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Target host" +msgstr "Target ಗುಂಪು" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "NetBIOS name" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Range name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +#| msgid "SOA serial" +msgid "Serial" +msgstr "SOA serial" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "Command category" +msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Command category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy +#| msgid "User category" +msgid "RunAs User category" +msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "RunAs User category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" + +#, fuzzy +#| msgid "User category" +msgid "RunAs Group category" +msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "RunAs Group category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "External User" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host Masks" +msgstr "ಹೋಸ್ಟ್‌ಗಳು" + +msgid "Sudo Allow Commands" +msgstr "" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "RunAs Users" +msgstr "ಬಳಕೆದಾರರು" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "RunAs External User" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "RunAs Groups" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "RunAs External Group" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "member sudo command group" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "ACL name" +msgstr "ACI ಹೆಸರು" + +#, fuzzy +#| msgid "Host category" +msgid "Profile category" +msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Profile category the ACL applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "User category the ACL applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Host category the ACL applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Service category the ACL applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +#, fuzzy +#| msgid "Certificate Subject base" +msgid "Certificate Profiles to add" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Add to default group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +#, fuzzy +#| msgid "Search size limit" +msgid "Search scope" +msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "member principal" +msgstr "Kerberos principal" + +#, fuzzy +#| msgid "Principal name" +msgid "principal to add" +msgstr "Principal ಹೆಸರು" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +#, fuzzy +#| msgid "Deleted service \"%(value)s\"" +msgid "Delete service delegation." +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "Principal name" +msgid "principal to remove" +msgstr "Principal ಹೆಸರು" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Segment name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to strip" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to replicate" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Session timeout" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Suffix name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Preserved user" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Vault name" +msgstr "ಕೊನೆಯ ಹೆಸರು" + +#, fuzzy +#| msgid "description" +msgid "Vault description" +msgstr "ವಿವರಣೆ" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Vault salt" +msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Owner users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy +#| msgid "User group" +msgid "Owner groups" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +#, fuzzy +#| msgid "Services" +msgid "Owner services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Vault user" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +#, fuzzy +#| msgid "Certificate" +msgid "Transport Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Service name of the service vault" +msgstr "" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Username of the user vault" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "owner user" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy +#| msgid "User group" +msgid "owner group" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +#, fuzzy +#| msgid "The default users group cannot be removed" +msgid "Owners that could not be removed" msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪನ್ನು ತೆಗೆದುಹಾಕಲು ಆಗುವುದಿಲ್ಲ" +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +#, fuzzy +#| msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" + +msgid "Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate Subject base" +msgid "Certificate Profile to use" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Profile description" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +#, fuzzy +#| msgid "A description of this role-group" +msgid "Brief description of this profile" +msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +#, fuzzy +#| msgid "Zone name (FQDN)" +msgid "Hostname (FQDN)" +msgstr "ವಲಯದ ಹೆಸರು (FQDN)" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Remote server name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +#, fuzzy +#| msgid "SOA class" +msgid "DNS class" +msgstr "SOA class" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "NSEC Next Domain Name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Next Domain Name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +msgid "NSEC Type Map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "ಬಗೆ" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +#, fuzzy +#| msgid "Time to live" +msgid "SOA time to live" +msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" + +#, fuzzy +#| msgid "Time to live" +msgid "SOA record time to live" +msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" + +msgid "SOA class" +msgstr "SOA class" + +#, fuzzy +#| msgid "SOA class" +msgid "SOA record class" +msgstr "SOA class" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "Username" +msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" + +#, fuzzy +#| msgid "User password" +msgid "Registration password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "Source host category" +msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Source host category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +msgid "Source Hosts" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "Source Host Groups" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Target members of a group" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, fuzzy +#| msgid "Group to apply ACI to" +msgid "User group to apply permissions to" +msgstr "Group to apply ACI to" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission type" +msgstr "ಅನುಮತಿಗಳು" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "ಮತ್ತೊಮ್ಮೆ ಪರಿಶೀಲಿಸಲು %(label)s ಎಂಟರ್ ಮಾಡಿ:" + +msgid "Passwords do not match!" +msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +msgid "Topic commands:" +msgstr "" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Command name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "ಫಲಿತಾಂಶಗಳು ಕತ್ತರಿಸಲ್ಪಟ್ಟಿವೆ, ಹೆಚ್ಚ್ಹು ನಿರ್ದಿಷ್ಟವಾದ ಶೋಧನೆ ಪ್ರಯತ್ನಿಸಿ" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" + +msgid "an internal error has occurred" +msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "an internal error has occurred" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "error on server '%(server)s': %(error)s" +msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos ದೋಷ: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos ಯೋಗ್ಯತಾಪತ್ರಗಳನ್ನು ಪಡೆದಿಲ್ಲ" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಯೋಗ್ಯತಾಪತ್ರಗಳು ಸಿಗುತ್ತಿಲ್ಲ" + +msgid "Ticket expired" +msgstr "ಟಿಕೆಟ್‌ನ ಅವಧಿ ಮುಗಿದಿದೆ" + +msgid "Credentials cache permissions incorrect" +msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನ ಅನುಮತಿಗಳು ಸರಿಯಿಲ್ಲ" + +msgid "Bad format in credentials cache" +msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಜೋಡಣೆ ಸರಿಯಿಲ್ಲ" + +msgid "Cannot resolve KDC for requested realm" +msgstr "ಕೋರಿದ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕಾಗಿ KDC ಯನ್ನು ಬಗೆಹರಿಸಲು ಆಗುತ್ತಿಲ್ಲ" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಸಾಲದಾಗಿದೆ: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "invalid '%(name)s': %(error)s" +msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ" + +msgid "Command not implemented" +msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +msgid "You must enroll a host in order to create a host service" +msgstr "" +"ಒಂದು ಹೋಸ್ಟ್ ಸೇವೆ(ಸರ್ವಿಸ್)ಯನ್ನು ರಚಿಸುವ ಸಲುವಾಗಿ ನೀವು ಒಂದು ಹೋಸ್ಟ್ ಅನ್ನು ಸೇರಿಸಲೇಬೇಕಾಗಿದೆ" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Service principalನ ಸ್ವರೂಪ ಹೀಗಿಲ್ಲ: service/fully-qualified host name: " +"%(reason)s" + msgid "" "The realm for the principal does not match the realm for this IPA server" msgstr "principalನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ವು ಈ IPA ಸರ್ವರ್‌ನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕೆ ತಾಳೆಯಾಗುತ್ತಿಲ್ಲ" @@ -539,75 +12400,3059 @@ msgstr "principalನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ವು ಈ IPA ಸ msgid "This command requires root access" msgstr "ಈ ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್) ರೂಟ್(root) ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಕೋರುತ್ತದೆ" -msgid "This entry already exists" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - msgid "This is already a posix group" msgstr "ಇದು ಈಗಾಗಲೇ posix ಗುಂಪು" -msgid "Ticket expired" -msgstr "ಟಿಕೆಟ್‌ನ ಅವಧಿ ಮುಗಿದಿದೆ" +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" -msgid "Time to live" +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already enabled" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already disabled" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯ ಆಗದಿರಬಹುದು" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already a member" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 ಡೆಕೋಡಿಂಗ್ ವಿಫಲಗೊಂಡಿದೆ: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯನಂತೆ ಸೇರಿಸಲು ಆಗದಿರಬಹುದು" + +msgid "The default users group cannot be removed" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪನ್ನು ತೆಗೆದುಹಾಕಲು ಆಗುವುದಿಲ್ಲ" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "ಬದಲಾವಣೆ ಮತ್ತೊಂದು ಬದಲಾವಣೆಯೊಂದಿಗೆ ಡಿಕ್ಕಿಹೊಡೆದಿದೆ" + +msgid "no modifications to be performed" +msgstr "ಯಾವುದೇ ಬದಲಾವಣೆಗಳು ನಡೆಯಬಾರದು" + +#, fuzzy, python-format +#| msgid "%(info)s" +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" + +msgid "limits exceeded for this query" +msgstr "ಈ ಕ್ವೇರಿಗೆ ಮಿತಿಗಳು ಮೀರಿವೆ" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, fuzzy, python-format +#| msgid "Only one value is allowed" +msgid "%(attr)s: Only one value allowed." +msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" + +#, fuzzy, python-format +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate format error: %(error)s" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(reason)s" +msgid "%(exception)s" +msgstr "%(reason)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" + +msgid "Only one value is allowed" +msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" + +msgid "must be an integer" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" + +msgid "must be a decimal number" +msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minvalue)s" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(maxvalue)s" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "ನಮೂನೆ \"%(pattern)s\" ಹೊಂದಾಣಿಕೆಯಾಗಲೇಬೇಕು" + +msgid "must be binary data" +msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಬೈಟ್ಸ್ ಆಗಿರಬಹುದು" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "ನಿಖರವಾಗಿ %(length)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be a certificate" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "Failure decoding Certificate Signing Request: %s" +msgid "must be a certificate signing request" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" + +msgid "must be Unicode text" +msgstr "ಯುನಿಕೋಡ್ ಪಠ್ಯ ಆಗಿರಲೇಬೇಕು" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "ನಿಖರವಾಗಿ %(length)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be '%(value)s'" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be one of %(values)s" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be datetime value" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be DNS name" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be absolute" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be relative" +msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "must be binary data" +msgid "must be dictionary" +msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "must be Kerberos principal" +msgstr "Kerberos principal" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +#, fuzzy +#| msgid "Service principal" +msgid "Service principal is required" +msgstr "Service principal" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +#, fuzzy +#| msgid "can be at most %(maxlength)d characters" +msgid "cannot be longer that {} characters" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, fuzzy, python-format +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "invalid domain name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "automount location" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +#, fuzzy +#| msgid "Automount Maps" +msgid "automount locations" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount Locations" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount Location" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Automount Maps" +msgid "automount map" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Automount Maps" +msgid "automount maps" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +msgid "Automount Maps" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount Map" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified automount map \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Automount key object." +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Automount Keys" +msgid "automount key" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Automount Keys" +msgid "automount keys" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +msgid "Automount Keys" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Automount Key" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key named %(key)s already exists" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified automount key \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profile" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Profiles" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "CA category" +msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "CA category the ACL applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i service added." +msgstr "ಸೇವೆಯ ಹೆಸರು" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i services added." +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +#, fuzzy +#| msgid "Priority" +msgid "Priority (order)" +msgstr "ಆದ್ಯತೆ" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "permission \"%(value)s\" already exists" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed system permission \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +#, fuzzy +#| msgid "Time to live" +msgid "Default time to live" msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" -msgid "Type" -msgstr "ಬಗೆ" +msgid "Time to live for records without explicit TTL definition" +msgstr "" -msgid "UID" -msgstr "UID" +msgid "setting Authoritative nameserver" +msgstr "" -msgid "Unrevoked" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿಲ್ಲ" +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" -msgid "User" -msgstr "ಬಳಕೆದಾರ" +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" -msgid "User Groups" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" +msgid "" +msgstr "" -msgid "User category" -msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" -msgid "User category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" -msgid "User container" -msgstr "ಬಳಕೆದಾರನ ಕಂಟೇನರ್" +msgid "is required" +msgstr "" -msgid "User group" +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted record \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Found '%(value)s'" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "DNS Servers" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "DNS Server" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "DNS Server name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "HBAC services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "User group" +msgid "HBAC service group" msgstr "ಬಳಕೆದಾರ ಗುಂಪು" -msgid "User group ACI grants access to" -msgstr "User group ACI grants access to" +#, fuzzy +#| msgid "User group" +msgid "HBAC service groups" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" -msgid "User login" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" +#, fuzzy +#| msgid "User Groups" +msgid "HBAC Service Groups" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" -msgid "User name" -msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" +msgid "HBAC Service Group" +msgstr "" -msgid "User password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -msgid "User search fields" -msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" -msgid "Users" +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "Stage Users" msgstr "ಬಳಕೆದಾರರು" -msgid "You must enroll a host in order to create a host service" +msgid "Stage User" msgstr "" -"ಒಂದು ಹೋಸ್ಟ್ ಸೇವೆ(ಸರ್ವಿಸ್)ಯನ್ನು ರಚಿಸುವ ಸಲುವಾಗಿ ನೀವು ಒಂದು ಹೋಸ್ಟ್ ಅನ್ನು ಸೇರಿಸಲೇಬೇಕಾಗಿದೆ" -msgid "Zone name" -msgstr "ವಲಯದ ಹೆಸರು" +msgid "stage user" +msgstr "" -msgid "Zone name (FQDN)" -msgstr "ವಲಯದ ಹೆಸರು (FQDN)" +#, fuzzy +#| msgid "Member users" +msgid "stage users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" -msgid "an internal error has occurred" -msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d characters" +msgid "can be at most %(len)d characters" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "host groups" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host Group" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Host-group" +msgid "hostgroup" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" + +#, fuzzy +#| msgid "Member host-groups" +msgid "privileged hostgroup" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainer" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainers" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Containers" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Container" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Mount information" +msgid "Vault configuration" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "netgroups" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +msgid "Netgroups" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy +#| msgid "Netgroups" +msgid "Netgroup" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Changed password for \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Deleted ACI \"%(value)s\"" +msgid "A list of ACI values" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +msgid "ACI prefix is required" +msgstr "" msgid "" "at least one of: type, filter, subtree, targetgroup, attrs or memberof are " @@ -615,84 +15460,9180 @@ msgid "" msgstr "" "ಕನಿಷ್ಟ ಒಂದು : ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ, ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್, attrs ಅಥವಾ memberof ಗಳ ಅಗತ್ಯವಿದೆ" -msgid "automatically add the principal if it doesn't exist" -msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "filter and memberof are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "group, permission and self are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +msgid "One of group, permission or self is required" +msgstr "" #, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಬೈಟ್ಸ್ ಆಗಿರಬಹುದು" +msgid "Group '%s' does not exist" +msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" + +msgid "empty filter" +msgstr "" #, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" +msgid "Syntax Error: %(error)s" +msgstr "" #, python-format -msgid "can be at most %(maxvalue)d" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" +msgid "invalid DN (%s)" +msgstr "" -msgid "change collided with another change" -msgstr "ಬದಲಾವಣೆ ಮತ್ತೊಂದು ಬದಲಾವಣೆಯೊಂದಿಗೆ ಡಿಕ್ಕಿಹೊಡೆದಿದೆ" +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" -msgid "description" -msgstr "ವಿವರಣೆ" +msgid "ACI object." +msgstr "" -msgid "did not receive Kerberos credentials" -msgstr "Kerberos ಯೋಗ್ಯತಾಪತ್ರಗಳನ್ನು ಪಡೆದಿಲ್ಲ" +msgid "ACIs" +msgstr "ACIs" -msgid "incorrect type" -msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACIs" -msgid "limits exceeded for this query" -msgstr "ಈ ಕ್ವೇರಿಗೆ ಮಿತಿಗಳು ಮೀರಿವೆ" +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" -msgid "must be True or False" -msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" -msgid "must be Unicode text" -msgstr "ಯುನಿಕೋಡ್ ಪಠ್ಯ ಆಗಿರಲೇಬೇಕು" +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" -msgid "must be a decimal number" -msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgid "must be an integer" +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +msgid "configuration options" +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "Configuration" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +#, fuzzy +#| msgid "Min length" +msgid "Maximum hostname length" +msgstr "ಕನಿಷ್ಟ ಉದ್ದ" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "groups" +msgstr "ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "User Groups" +msgid "User Group" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Target group" +msgid "privileged group" +msgstr "Target ಗುಂಪು" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Permissions\n" +msgstr "ಅನುಮತಿಗಳು" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Managed permissions\n" +msgstr "ಅನುಮತಿಗಳು" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be enclosed in parentheses" msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" #, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" +msgid "\"%s\" is not an object type" +msgstr "" #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deprecated; use %s" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" #, python-format -msgid "must be at least %(minvalue)d" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" -msgid "must be binary data" -msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "Entry %s not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "ನಿಖರವಾಗಿ %(length)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" #, python-format -msgid "must be exactly %(length)d characters" -msgstr "ನಿಖರವಾಗಿ %(length)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" +msgid "option was renamed; use %s" +msgstr "" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "ನಮೂನೆ \"%(pattern)s\" ಹೊಂದಾಣಿಕೆಯಾಗಲೇಬೇಕು" +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" -msgid "no modifications to be performed" -msgstr "ಯಾವುದೇ ಬದಲಾವಣೆಗಳು ನಡೆಯಬಾರದು" +#, python-format +msgid "%s: group not found" +msgstr "" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "target and targetgroup are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "subtree and type are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +#, fuzzy +#| msgid "User search fields" +msgid "Bad search filter" +msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "Group '%s' does not exist" +msgid "Entry %s does not exist" +msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "attrs and included attributes are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "cannot delete managed permissions" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "ACI of permission %s was not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified permission \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "users" +msgstr "ಬಳಕೆದಾರರು" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "runAs users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy +#| msgid "Netgroups" +msgid "group runAs" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +#, fuzzy +#| msgid "Member groups" +msgid "runAs groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Kerberos Ticket Policy" +msgstr "Kerberos principal" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max renew" +msgid "RADIUS max renew" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "" +"\n" +"IPA locations\n" +msgstr "ಸ್ಥಳ" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "NIS domain name" +msgid "IPA location name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +#, fuzzy +#| msgid "Netgroup description" +msgid "IPA Location description" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" + +#, fuzzy +#| msgid "Services" +msgid "Servers" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Documentation" +msgstr "ಸ್ಥಳ" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Version" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Method name" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +#| msgid "Character classes" +msgid "Search for classes." +msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +#, fuzzy +#| msgid "Request id" +msgid "Required" +msgstr "ಬೇಡಿಕೆ ID" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI ಹೆಸರು" + +#, fuzzy +#| msgid "User password" +msgid "Confirm (password)" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "local domain range" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Role status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "IPA role name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "HBAC rule %(rule)s not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded certificate." +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "ವಿಷಯ" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "ಇಮೇಲ್ ವಿಳಾಸ" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "ವಿಷಯ" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "ಕೇರಿ ವಿಳಾಸ" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "ವಿಷಯ" + +#, fuzzy +#| msgid "Street address" +msgid "Subject IP Address" +msgstr "ಕೇರಿ ವಿಳಾಸ" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "ವಿಷಯ" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "ವಿಷಯ" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Kerberos principal" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "Request status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "The principal for this request doesn't exist." +msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" + +msgid "Revocation reason" +msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "7 is not a valid revocation reason" +msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded user certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "Auto member rule: %s not found!" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted hostgroup \"%(value)s\"" +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Authority" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Authorities" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Name for referencing the CA" +msgstr "" + +#, fuzzy +#| msgid "A description of this host" +msgid "Description of the purpose of the CA" +msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DN" +msgstr "ವಿಷಯ" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Created CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Actions" +msgstr "ಸ್ಥಳ" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +#, fuzzy +#| msgid "SOA refresh" +msgid "Refresh" +msgstr "SOA refresh" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Reset Password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoke" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" + +msgid "Save" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Set" +msgstr "ವಿಷಯ" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "Customization" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +#| msgid "Added host \"%(value)s\"" +msgid "Add custom value" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "Confirmation" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Redirection" +msgstr "ವಿವರಣೆ" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" + +#, fuzzy +#| msgid "Error" +msgid "HTTP Error" +msgstr "ದೋಷ" + +msgid "Internal Error" +msgstr "" + +#, fuzzy +#| msgid "Error" +msgid "IPA Error" +msgstr "ದೋಷ" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Add Kerberos Principal Alias" +msgstr "Kerberos principal" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "New kerberos principal alias" +msgstr "Kerberos principal" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal name for this host" +msgid "Kerberos Principal you entered is expired" +msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Log In Using Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +#| msgid "Minimum length of password" +msgid "number of passwords" +msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಉದ್ದ" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attribute" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Add permission" +msgstr "ಅನುಮತಿಗಳು" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove permissions" +msgstr "ಅನುಮತಿಗಳು" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default host group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +#, fuzzy +#| msgid "Default users group" +msgid "Default user group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "Host group rule" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host group rules" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User group rule" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +#, fuzzy +#| msgid "User group" +msgid "User group rules" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Add automount key" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Remove automount keys" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Add automount location" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Add automount map" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +#, fuzzy +#| msgid "Type" +msgid "Map Type" +msgstr "ಬಗೆ" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Remove automount maps" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Any Host" +msgstr "ಹೋಸ್ಟ್‌ಗಳು" + +#, fuzzy +#| msgid "Services" +msgid "Any Service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Rule status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +#, fuzzy +#| msgid "Principal" +msgid "Add principal" +msgstr "Principal" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificates" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Hold" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Cessation of Operation" +msgstr "" + +msgid "Common Name" +msgstr "" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Maximum serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +#, fuzzy +#| msgid "Serial number" +msgid "Minimum serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on from" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on to" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Get Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Hold Removed" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Issue new certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "No Valid Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "New Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "Certificate Subject base" +msgid "Certificate requested" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" + +#, fuzzy +#| msgid "Certificate" +msgid "Revoke certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Revoked" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "REVOKED" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number (hex)" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +#, fuzzy +#| msgid "Certificate Subject base" +msgid "Valid Certificate Present" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "View Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate For Match" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Mapping Match" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User Login" +msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate mapping data" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Group Options" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +msgid "Search Options" +msgstr "" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Options" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "User login" +msgid "User Options" +msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove Permission" +msgstr "ಅನುಮತಿಗಳು" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Group Settings" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +#, fuzzy +#| msgid "External host" +msgid "External" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "Groups" +msgstr "ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Group container" +msgid "Group categories" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +msgid "Change to external group" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Change to POSIX group" +msgstr "Target ಗುಂಪು" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "Remove user groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Group Type" +msgstr "ಗುಂಪಿನ ಹೆಸರು" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Accessing" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Via Service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Access Denied" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +#, fuzzy +#| msgid "Access time" +msgid "Access Granted" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Host Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Host name" +msgid "Host Name" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Kerberos Key" +msgstr "Kerberos principal" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "One-Time Password" +msgstr "ಗುಪ್ತಪದ" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +#, fuzzy +#| msgid "Member hosts" +msgid "Remove hosts" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "Add host group" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host Group Settings" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Member host-groups" +msgid "Remove host groups" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Enter trusted group name." +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Apply to host groups" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Un-apply from host groups" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "Add netgroup" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host" +msgstr "ಹೋಸ್ಟ್‌ಗಳು" + +#, fuzzy +#| msgid "Netgroup description" +msgid "Netgroup Settings" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" + +#, fuzzy +#| msgid "Member groups" +msgid "Remove netgroups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Add Custom Attribute" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission settings" +msgstr "ಅನುಮತಿಗಳು" + +#, fuzzy +#| msgid "Attributes" +msgid "Attribute breakdown" +msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "ಗುಪ್ತಪದ" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +#, fuzzy +#| msgid "Locality" +msgid "Local domain" +msgstr "ಪ್ರದೇಶ" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Server Roles" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Service name" +msgid "Server Role" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Add service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Service Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Services" +msgid "Service Settings" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Permissions" +msgid "Provisioning" +msgstr "ಅನುಮತಿಗಳು" + +#, fuzzy +#| msgid "Services" +msgid "Remove services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +#| msgid "Service principal" +msgid "Service unprovisioned" +msgstr "Service principal" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Stage users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, fuzzy +#| msgid "Member users" +msgid "Preserved users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Remove preserved users" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Remove stage users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +#, fuzzy +#| msgid "User category" +msgid "User categories" +msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Remove sudo command groups" +msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +msgid "Any Command" +msgstr "" + +#, fuzzy +#| msgid "Group" +msgid "Any Group" +msgstr "ಗುಂಪು" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Access this host" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "Replication configuration" +msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Pre-shared password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Trust direction" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +#, fuzzy +#| msgid "Request status" +msgid "Trust status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "Employee Information" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "Error changing account status" +msgstr "" + +#, fuzzy +#| msgid "Password history size" +msgid "Password expiration" +msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" + +#, fuzzy +#| msgid "Email address" +msgid "Mailing Address" +msgstr "ಇಮೇಲ್ ವಿಳಾಸ" + +#, fuzzy +#| msgid "Mount information" +msgid "Misc. Information" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Remove users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +#, fuzzy +#| msgid "Member of" +msgid "Members" +msgstr "ಸದಸ್ಯ" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "User Groups" +msgid "User Vaults" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" + +msgid "Current password is required" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Maximum password lifetime (in days)" +msgid "Your password expires in ${days} days." +msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" + +#, fuzzy +#| msgid "First name" +msgid "First OTP" +msgstr "ಮೊದಲ ಹೆಸರು" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Reset your password." +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Second OTP" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Verify Password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Automount" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Network Services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +#| msgid "First name" +msgid "First" +msgstr "ಮೊದಲ ಹೆಸರು" + +#, fuzzy +#| msgid "Last name" +msgid "Last" +msgstr "ಕೊನೆಯ ಹೆಸರು" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a decimal number" +msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" + +msgid "Format error" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "Must be an integer" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a positive number" +msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +#, fuzzy +#| msgid "Request id" +msgid "Required field" +msgstr "ಬೇಡಿಕೆ ID" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "IPA Servers" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Location" +msgid "Server location" +msgstr "ಸ್ಥಳ" + +#, fuzzy +#| msgid "Service name" +msgid "Service weight" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server state" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Member principals" +msgstr "Kerberos principal" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, fuzzy, python-format +#| msgid "Member hosts" +msgid "member %s" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "LDAP URI" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded host certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +#, fuzzy +#| msgid "Principal name" +msgid "Principal alias" +msgstr "Principal ಹೆಸರು" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Password used in bulk enrollment" +msgid "Password cannot be set on enrolled host." +msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "password policy" +msgstr "ಗುಪ್ತಪದ" + +msgid "password policies" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "ಗುಪ್ತಪದ" + +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +#, fuzzy +#| msgid "Minimum number of character classes" +msgid "Maximum number of same consecutive characters" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +#, fuzzy +#| msgid "Maximum password lifetime (in days)" +msgid "Maximum password life must be greater than minimum." +msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" + +#, fuzzy +#| msgid "priority cannot be set on global policy" +msgid "cannot delete global password policy" +msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" msgid "priority cannot be set on global policy" msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" #, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "External trust" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy +#| msgid "Mount information" +msgid "trust configuration" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "GID" +msgid "SID" +msgstr "GID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain enabled" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy +#| msgid "Service principal" +msgid "Malformed principal" +msgstr "Service principal" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "service" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Services" +msgid "services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +#, fuzzy +#| msgid "Service principal" +msgid "Service principal alias" +msgstr "Service principal" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded service certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "Kerberos principal name for this host" +msgid "force principal name even if host not in DNS" +msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "SMB service NetBIOS name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified service \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "%(count)d variables" +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from a service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Access time" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Access time" +msgid "Access granted: %s" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "Member service groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Member groups" +msgid "Member HBAC service groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +#, fuzzy +#| msgid "Member users" +msgid "Member ID user overrides" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "User password expiration" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Issuer of the certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, fuzzy +#| msgid "User login" +msgid "Failed logins" +msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +#, fuzzy +#| msgid "Time to live" +msgid "Time now" +msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Request must be a dict" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "params must be a list" +msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 1" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Password history size" +msgid "Password is too long!\n" +msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/mr.po b/po/mr.po index 15c4f88b2..7f3837b37 100644 --- a/po/mr.po +++ b/po/mr.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Marathi\n" @@ -14,42 +14,11674 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid " ipa --help" -msgstr " ipa --help" +#, c-format +msgid "Out of memory!\n" +msgstr "" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, c-format +msgid "Out of memory!" +msgstr "" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "अवैध JSON-RPC विनंती : %(error)s" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "did not receive Kerberos credentials" +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Kerberos credentials प्राप्त झाले नाहीत" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +msgid "hostname" +msgstr "" + +msgid "IPA Server to use" +msgstr "" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +msgid "password" +msgstr "" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "पासवर्ड जुळत नाही!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +#, fuzzy +#| msgid "No file to read" +msgid "Failed to add" +msgstr "कोणतीही फाइल वाचण्यासाठी नाही " + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "cannot connect to '%(uri)s': %(error)s" +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "'%(uri)s' ला जोडणी अपयशी : %(error)s" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +msgid "Vault password" +msgstr "" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +msgid "Change password" +msgstr "" + +msgid "Old vault password" +msgstr "" + +msgid "File containing the old vault password" +msgstr "" + +msgid "New vault password" +msgstr "" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "ACI name" +msgstr "आदेशाचे नाव " + +msgid "Permission" +msgstr "" + +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "" + +msgid "User group ACI grants access to" +msgstr "" + +msgid "Permissions" +msgstr "" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "" + +msgid "Type" +msgstr "" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +msgid "Member of a group" +msgstr "" + +msgid "Filter" +msgstr "" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +msgid "Delete ACI." +msgstr "" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" msgid "A string searched in all relevant object attributes" msgstr "एक शब्द सर्व संबंधित ऑब्जेक्ट गुणधर्मात शोधला" -msgid "Command name" +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +msgid "New ACI name" +msgstr "" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +msgid "description" +msgstr "" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +msgid "Default users group" +msgstr "" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Zone name" msgstr "आदेशाचे नाव " -msgid "Deprecated options" +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Record name" +msgstr "आदेशाचे नाव " + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +msgid "Record type" +msgstr "" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +msgid "Service" +msgstr "" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +msgid "NS Hostname" +msgstr "" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "User Groups" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Host Groups" +msgstr "" + +msgid "Services" +msgstr "" + +msgid "Service Groups" +msgstr "" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "" + +msgid "HBAC service" +msgstr "" + +msgid "HBAC service description" +msgstr "" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "" + +msgid "Certificate" +msgstr "" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +msgid "hostgroups" +msgstr "" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "" + +msgid "Bind DN" +msgstr "" + +msgid "User container" +msgstr "" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +msgid "Netgroup description" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "NIS domain name" +msgstr "आदेशाचे नाव " + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +msgid "Member Hostgroup" +msgstr "" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +msgid "Bind rule type" +msgstr "" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Deprecated; use ipapermlocation" msgstr "वापरात नसलेले पर्याय" +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +#, fuzzy +#| msgid "No file to read" +msgid "roles to add" +msgstr "कोणतीही फाइल वाचण्यासाठी नाही " + +msgid "Add permissions to a privilege." +msgstr "" + +msgid "permission" +msgstr "" + +msgid "permissions" +msgstr "" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +#, fuzzy +#| msgid "No file to read" +msgid "roles to remove" +msgstr "कोणतीही फाइल वाचण्यासाठी नाही " + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +msgid "Server" +msgstr "" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal" +msgstr "" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Sudo Command" +msgstr "विषय किंवा आदेश" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Modify Sudo Command." +msgstr "विषय किंवा आदेश" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +msgid "Group description" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Commands" +msgstr "आदेशाचे नाव " + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Domain name" +msgstr "आदेशाचे नाव " + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Range name" +msgstr "आदेशाचे नाव " + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "(deprecated)" +msgstr "वापरात नसलेले पर्याय" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Command category" +msgstr "आदेशाचे नाव " + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Sudo Allow Commands" +msgstr "विषय किंवा आदेश" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "ACL name" +msgstr "आदेशाचे नाव " + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +msgid "Vault description" +msgstr "" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +msgid "Owner groups" +msgstr "" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +msgid "Transport Certificate" +msgstr "" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +msgid "owner group" +msgstr "" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + #, python-format msgid "Enter %(label)s again to verify: " msgstr "सत्यापित करण्यासाठी आपण पुन्हा %(label)s प्रविष्ट करा:" -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "अवैध JSON-RPC विनंती : %(error)s" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos त्रुटी: %(major)s/%(minor)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "न आढळलेले किंवा अवैध HTTP Referer, %(referer)s" - -msgid "No file to read" -msgstr "कोणतीही फाइल वाचण्यासाठी नाही " +msgid "Passwords do not match!" +msgstr "पासवर्ड जुळत नाही!" msgid "No matching entries found" msgstr "कोणतेही जुळणारे नोंदी आढळले" -msgid "Passwords do not match!" -msgstr "पासवर्ड जुळत नाही!" +msgid "Topic or Command" +msgstr "विषय किंवा आदेश" + +msgid "The topic or command name." +msgstr "विषय किंवा आदेशाचे नाव" + +msgid "Topic commands:" +msgstr "विषय आदेश:" + +msgid "To get command help, use:" +msgstr "आदेशा संबधित मिळवण्यासाठी, वापरा:" + +msgid " ipa --help" +msgstr " ipa --help" + +msgid "Command name" +msgstr "आदेशाचे नाव " msgid "Positional arguments" msgstr "positional वितर्क" @@ -58,21 +11690,39 @@ msgstr "positional वितर्क" msgid "Same as --%s" msgstr "--%s सारखा" +msgid "Deprecated options" +msgstr "वापरात नसलेले पर्याय" + +msgid "No file to read" +msgstr "कोणतीही फाइल वाचण्यासाठी नाही " + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + #, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "सेवा '%(service)s' Kerberos माहितीकोष आढली नाही" +msgid "Unknown option: %(option)s" +msgstr "" -msgid "The topic or command name." -msgstr "विषय किंवा आदेशाचे नाव" +msgid "Client version. Used to determine if server will accept request." +msgstr "" -msgid "To get command help, use:" -msgstr "आदेशा संबधित मिळवण्यासाठी, वापरा:" +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" -msgid "Topic commands:" -msgstr "विषय आदेश:" - -msgid "Topic or Command" -msgstr "विषय किंवा आदेश" +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" msgid "an internal error has occurred" msgstr "एक अंतर्गत त्रुटी आली आहे" @@ -82,16 +11732,11616 @@ msgid "an internal error has occurred on server at '%(server)s'" msgstr "एक अंतर्गत त्रुटी '%(server)s' वरील सर्व्हर वर आली आहे " #, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "'%(uri)s' ला जोडणी अपयशी : %(error)s" - -msgid "did not receive Kerberos credentials" -msgstr "Kerberos credentials प्राप्त झाले नाहीत" +msgid "unknown command '%(name)s'" +msgstr "अनोळखी आदेश '%(name)s'" #, python-format msgid "error on server '%(server)s': %(error)s" msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" #, python-format -msgid "unknown command '%(name)s'" -msgstr "अनोळखी आदेश '%(name)s'" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "'%(uri)s' ला जोडणी अपयशी : %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "अवैध JSON-RPC विनंती : %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "न आढळलेले किंवा अवैध HTTP Referer, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos त्रुटी: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos credentials प्राप्त झाले नाहीत" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "सेवा '%(service)s' Kerberos माहितीकोष आढली नाही" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "invalid '%(name)s': %(error)s" +msgstr "अवैध JSON-RPC विनंती : %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Passwords do not match" +msgstr "पासवर्ड जुळत नाही!" + +#, fuzzy +#| msgid "Command name" +msgid "Command not implemented" +msgstr "आदेशाचे नाव " + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deprecated options" +msgid "Deprecated; use %s" +msgstr "वापरात नसलेले पर्याय" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "command" +msgstr "विषय आदेश:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "commands" +msgstr "विषय आदेश:" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo command" +msgstr "विषय आदेश:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo commands" +msgstr "विषय आदेश:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "Sudo Commands" +msgstr "विषय आदेश:" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Location name" +msgstr "आदेशाचे नाव " + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Method name" +msgstr "आदेशाचे नाव " + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Search for commands." +msgstr "विषय किंवा आदेश" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "CLI name" +msgstr "आदेशाचे नाव " + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "positional वितर्क" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "वापरात नसलेले पर्याय" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "वापरात नसलेले पर्याय" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "एक अंतर्गत त्रुटी आली आहे" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Common Name" +msgstr "आदेशाचे नाव " + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "" + +msgid "Minimum serial number" +msgstr "" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Group Options" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Search Options" +msgstr "वापरात नसलेले पर्याय" + +msgid "SELinux Options" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Server Options" +msgstr "वापरात नसलेले पर्याय" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Service Options" +msgstr "वापरात नसलेले पर्याय" + +#, fuzzy +#| msgid "Deprecated options" +msgid "User Options" +msgstr "वापरात नसलेले पर्याय" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +msgid "Permission settings" +msgstr "" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +msgid "Server Roles" +msgstr "" + +msgid "Server Role" +msgstr "" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "" + +msgid "Service Settings" +msgstr "" + +msgid "Provisioning" +msgstr "" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Any Command" +msgstr "आदेशाचे नाव " + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +msgid "Service Vaults" +msgstr "" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Passwords must match" +msgstr "पासवर्ड जुळत नाही!" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +msgid "IPA Servers" +msgstr "" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Delegations" +msgstr "वापरात नसलेले पर्याय" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Password is too long!\n" +msgstr "पासवर्ड जुळत नाही!" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/nl.po b/po/nl.po index 205239fe4..651d9ec9b 100644 --- a/po/nl.po +++ b/po/nl.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Dutch\n" @@ -14,5 +14,23249 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, c-format +msgid "Out of memory!" +msgstr "" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +msgid "hostname" +msgstr "" + +msgid "IPA Server to use" +msgstr "" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +msgid "password" +msgstr "" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Wachtwoorden komen niet overeen!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +msgid "Vault password" +msgstr "" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +msgid "Change password" +msgstr "" + +msgid "Old vault password" +msgstr "" + +msgid "File containing the old vault password" +msgstr "" + +msgid "New vault password" +msgstr "" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "" + +msgid "Permission" +msgstr "" + +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "" + +msgid "User group ACI grants access to" +msgstr "" + +msgid "Permissions" +msgstr "" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "" + +msgid "Type" +msgstr "" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +msgid "Member of a group" +msgstr "" + +msgid "Filter" +msgstr "" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +msgid "Delete ACI." +msgstr "" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +msgid "New ACI name" +msgstr "" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +msgid "description" +msgstr "" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +msgid "Default users group" +msgstr "" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +msgid "Zone name" +msgstr "" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Record name" +msgstr "" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +msgid "Record type" +msgstr "" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +msgid "Service" +msgstr "" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +msgid "NS Hostname" +msgstr "" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "User Groups" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Host Groups" +msgstr "" + +msgid "Services" +msgstr "" + +msgid "Service Groups" +msgstr "" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "" + +msgid "HBAC service" +msgstr "" + +msgid "HBAC service description" +msgstr "" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "" + +msgid "Certificate" +msgstr "" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +msgid "hostgroups" +msgstr "" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "" + +msgid "Bind DN" +msgstr "" + +msgid "User container" +msgstr "" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +msgid "Netgroup description" +msgstr "" + +msgid "NIS domain name" +msgstr "" + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +msgid "Member Hostgroup" +msgstr "" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +msgid "Bind rule type" +msgstr "" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +msgid "permission" +msgstr "" + +msgid "permissions" +msgstr "" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +msgid "Server" +msgstr "" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal" +msgstr "" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "Commands" +msgstr "" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +msgid "Sudo Allow Commands" +msgstr "" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "ACL name" +msgstr "" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +msgid "Vault description" +msgstr "" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +msgid "Owner groups" +msgstr "" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +msgid "Transport Certificate" +msgstr "" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +msgid "owner group" +msgstr "" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + msgid "Passwords do not match!" msgstr "Wachtwoorden komen niet overeen!" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +msgid "Topic commands:" +msgstr "" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Passwords do not match" +msgstr "Wachtwoorden komen niet overeen!" + +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +msgid "Common Name" +msgstr "" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "" + +msgid "Minimum serial number" +msgstr "" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Group Options" +msgstr "" + +msgid "Search Options" +msgstr "" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +msgid "Service Options" +msgstr "" + +msgid "User Options" +msgstr "" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +msgid "Permission settings" +msgstr "" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +msgid "Server Roles" +msgstr "" + +msgid "Server Role" +msgstr "" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "" + +msgid "Service Settings" +msgstr "" + +msgid "Provisioning" +msgstr "" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +msgid "Any Command" +msgstr "" + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +msgid "Service Vaults" +msgstr "" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Passwords must match" +msgstr "Wachtwoorden komen niet overeen!" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +msgid "IPA Servers" +msgstr "" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Password is too long!\n" +msgstr "Wachtwoorden komen niet overeen!" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/pa.po b/po/pa.po index 97bba4082..ba2e06695 100644 --- a/po/pa.po +++ b/po/pa.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Punjabi\n" @@ -14,55 +14,23391 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -msgid "AD domain controller" -msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" - -msgid "CIFS server denied your credentials" -msgstr "CIFS ਨੇ ਤੁਹਾਡੀ ਸਨਦ ਤੋਂ ਇਨਕਾਰ ਕੀਤਾ" - -msgid "Failed to create key!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -msgid "File containing the new vault password" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" - -msgid "Hello world" -msgstr "ਹੈਲੋ ਵਰਲਡ" - -msgid "Invalid vault type" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" - -msgid "New vault password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "Old vault private key" -msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" - -msgid "Our domain is not configured" -msgstr "ਸਾਡੀ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "Out of memory\n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" - #, c-format msgid "Out of memory!\n" msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" -msgid "Trust setup" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory!\n" +msgid "Out of memory!" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +msgid "hostname" +msgstr "" + +msgid "IPA Server to use" +msgstr "" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to open keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Unable to remove entry\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "out of memory\n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "Out of memory \n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to get result: %s\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to parse result: %s\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Out of memory!\n" +msgid "Out of Memory!\n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to create control!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to bind to server!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to get keytab!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to retrieve any keys" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed to decode control reply!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Warning unrecognized encryption type.\n" +msgid "Supported encryption types:\n" +msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ ਇੰਕ੍ਰਿਪਸ਼ਨ ਕਿਸਮ।\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "New Principal Password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to open Keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to create key material\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to get keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to add key to the keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to close the keytab\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed to remove" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed allowed to retrieve keytab" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed allowed to create keytab" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed targets" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "Failed owners" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed to add" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +msgid "Password" +msgstr "" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "Vault password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +#, fuzzy +#| msgid "File containing the new vault password" +msgid "File containing the vault password" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" + +#, fuzzy +#| msgid "File containing the new vault password" +msgid "File containing the vault public key" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "Change password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +#, fuzzy +#| msgid "New vault password" +msgid "Old vault password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +#, fuzzy +#| msgid "File containing the new vault password" +msgid "File containing the old vault password" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" + +msgid "New vault password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "File containing the new vault password" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" + +msgid "Old vault private key" +msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" + +#, fuzzy +#| msgid "File containing the new vault password" +msgid "File containing the old vault private key" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" + +#, fuzzy +#| msgid "File containing the new vault password" +msgid "File containing the new vault public key" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +#, fuzzy +#| msgid "File containing the new vault password" +msgid "File containing data to archive" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +#, fuzzy +#| msgid "Old vault private key" +msgid "Vault private key" +msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" + +#, fuzzy +#| msgid "File containing the new vault password" +msgid "File containing the vault private key" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" + +msgid "Data" +msgstr "" + +msgid "Private key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "Old vault private key" +msgid "Missing vault private key" +msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "" + +msgid "Permission" +msgstr "" + +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "" + +msgid "User group ACI grants access to" +msgstr "" + +msgid "Permissions" +msgstr "" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "" + +msgid "Type" +msgstr "" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +msgid "Member of a group" +msgstr "" + +msgid "Filter" +msgstr "" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +msgid "Delete ACI." +msgstr "" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +msgid "New ACI name" +msgstr "" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +msgid "description" +msgstr "" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +msgid "Default users group" +msgstr "" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +msgid "Zone name" +msgstr "" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Record name" +msgstr "" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +msgid "Record type" +msgstr "" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +msgid "Service" +msgstr "" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +msgid "NS Hostname" +msgstr "" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "User Groups" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Host Groups" +msgstr "" + +msgid "Services" +msgstr "" + +msgid "Service Groups" +msgstr "" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "" + +msgid "HBAC service" +msgstr "" + +msgid "HBAC service description" +msgstr "" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "User password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "Random password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "Certificate" +msgstr "" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Users allowed to create keytab" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Groups allowed to create keytab" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Hosts allowed to create keytab" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Host Groups allowed to create keytab" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +msgid "hostgroups" +msgstr "" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "" + +msgid "Bind DN" +msgstr "" + +msgid "User container" +msgstr "" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +msgid "Netgroup description" +msgstr "" + +msgid "NIS domain name" +msgstr "" + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +msgid "Member Hostgroup" +msgstr "" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "Set a user's password." +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +#, fuzzy +#| msgid "New vault password" +msgid "New Password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "Invalid vault type" +msgid "Bind rule type" +msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +msgid "permission" +msgstr "" + +msgid "permissions" +msgstr "" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +msgid "Server" +msgstr "" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal" +msgstr "" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +msgid "Group description" +msgstr "" + +msgid "Commands" +msgstr "" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "" + +#, fuzzy +#| msgid "no trusted domain is configured" +msgid "Trusted domain partner" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +msgid "Sudo Allow Commands" +msgstr "" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "ACL name" +msgstr "" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +msgid "Vault description" +msgstr "" + +#, fuzzy +#| msgid "Invalid vault type" +msgid "Vault type" +msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +msgid "Owner groups" +msgstr "" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +msgid "Transport Certificate" +msgstr "" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +msgid "owner group" +msgstr "" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "Registration password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +msgid "Passwords do not match!" +msgstr "" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +msgid "Topic commands:" +msgstr "" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" #, python-format msgid "Unknown option: %(option)s" msgstr "ਅਣਪਛਾਤੀ ਚੋਣ: %(option)s" +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "" + +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "any of the configured servers" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "CA is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "DNS is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +#| msgid "Invalid vault type" +msgid "invalid attribute name" +msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "Empty domain is not allowed" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "" + +msgid "commands" +msgstr "" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "" + +msgid "sudo commands" +msgstr "" + +msgid "Sudo Commands" +msgstr "" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +msgid "Location name" +msgstr "" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +msgid "Method name" +msgstr "" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +msgid "CLI name" +msgstr "" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "Auto Membership is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "Reset Password" +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Allowed to create keytab" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Allowed to retrieve keytab" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +msgid "Common Name" +msgstr "" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "" + +msgid "Minimum serial number" +msgstr "" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Group Options" +msgstr "" + +msgid "Search Options" +msgstr "" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +msgid "Service Options" +msgstr "" + +msgid "User Options" +msgstr "" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +msgid "Permission settings" +msgstr "" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +msgid "Server Roles" +msgstr "" + +msgid "Server Role" +msgstr "" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "" + +msgid "Service Settings" +msgstr "" + +msgid "Provisioning" +msgstr "" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +msgid "Any Command" +msgstr "" + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trust Settings" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trust direction" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trust status" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trust type" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +msgid "Service Vaults" +msgstr "" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "" + +msgid "New password is required" +msgstr "" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +#| msgid "New vault password" +msgid "Reset your password." +msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trusts" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +msgid "IPA Servers" +msgstr "" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "AD Trust setup" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trust" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "trust type" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +#, fuzzy +#| msgid "AD domain controller" +msgid "IPA AD trust controllers" +msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +#, fuzzy +#| msgid "no trusted domain is configured" +msgid "Trusted domains" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +#, fuzzy +#| msgid "domain is not configured" +msgid "attribute is not configurable" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "CIFS ਨੇ ਤੁਹਾਡੀ ਸਨਦ ਤੋਂ ਇਨਕਾਰ ਕੀਤਾ" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +msgid "domain is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "Our domain is not configured" +msgstr "ਸਾਡੀ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +#, fuzzy +#| msgid "no trusted domain is configured" +msgid "No trusted domain is not configured" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +#, fuzzy +#| msgid "no trusted domain is configured" +msgid "trusted domain object" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +#, fuzzy +#| msgid "domain is not configured" +msgid "domain is not trusted" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" + +#, fuzzy +#| msgid "no trusted domain is configured" +msgid "no trusted domain matched the specified flat name" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +#, fuzzy +#| msgid "no trusted domain is configured" +msgid "trusted domain object not found" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +#, fuzzy +#| msgid "no trusted domain is configured" +msgid "trusted domain user not found" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, fuzzy, python-format +#| msgid "CIFS server denied your credentials" +msgid "CIFS server %(host)s denied your credentials" +msgstr "CIFS ਨੇ ਤੁਹਾਡੀ ਸਨਦ ਤੋਂ ਇਨਕਾਰ ਕੀਤਾ" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trusting forest" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +#, fuzzy +#| msgid "Trust setup" +msgid "Trusted forest" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "ਹੈਲੋ ਵਰਲਡ" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" + msgid "Warning unrecognized encryption type.\n" msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ ਇੰਕ੍ਰਿਪਸ਼ਨ ਕਿਸਮ।\n" msgid "Warning unrecognized salt type.\n" msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ salt ਕਿਸਮ ਹੈ।\n" -msgid "domain is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" +#, fuzzy +#| msgid "Out of memory!\n" +msgid "Out of memory!?\n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" -msgid "no trusted domain is configured" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed to create random key!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +msgid "Failed to create key!\n" +msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" + +#, fuzzy +#| msgid "Warning unrecognized salt type.\n" +msgid "Bad or unsupported salt type.\n" +msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ salt ਕਿਸਮ ਹੈ।\n" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/pl.po b/po/pl.po index 7160c4520..37ef35b31 100644 --- a/po/pl.po +++ b/po/pl.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2020-09-27 10:31+0000\n" "Last-Translator: Piotr Drąg \n" "Language-Team: Polish =20) ? 1 : 2;\n" "X-Generator: Weblate 4.2.2\n" -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s nie zawiera „%(value)s”" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "Pasuje %(count)d grupa komputerów" -msgstr[1] "Pasują %(count)d grupy komputerów" -msgstr[2] "Pasuje %(count)d grup komputerów" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "Wczytano %(count)d wtyczkę" -msgstr[1] "Wczytano %(count)d wtyczki" -msgstr[2] "Wczytano %(count)d wtyczek" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d zmiennych" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: nie odnaleziono %(oname)s" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "A description of this command" -msgstr "Opis tego polecenia" - -msgid "A description of this host" -msgstr "Opis tego komputera" - -msgid "A description of this host-group" -msgstr "Opis tej grupy komputerów" - -msgid "A description of this role-group" -msgstr "Opis tej grupy rol" - -msgid "A dictionary representing an LDAP entry" -msgstr "Słownik reprezentujący wpis LDAP" - -msgid "A group may not be a member of itself" -msgstr "Grupa nie może być własnym elementem" - -msgid "A group may not be added as a member of itself" -msgstr "Nie można dodać grupy jako elementu jej samej" - -msgid "A list of ACI values" -msgstr "Lista wartości ACI" - -msgid "A list of LDAP entries" -msgstr "Lista wpisów LDAP" - -msgid "ACI name" -msgstr "Nazwa ACI" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "Nie odnaleziono ACI o nazwie „%s”" - -msgid "ACIs" -msgstr "ACI" - -msgid "Access time" -msgstr "Czas dostępu" - -msgid "Account Settings" -msgstr "Ustawienia konta" - -msgid "Active zone" -msgstr "Aktywna strefa" - -msgid "Add" -msgstr "Dodaj" - -msgid "Add and Close" -msgstr "Dodaj i zamknij" - -msgid "Add and Edit" -msgstr "Dodaj i edytuj" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Dodano grupę komputerów „%(value)s”" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Administrator e-mail address" -msgstr "Adres e-mail administratora" - -msgid "All commands should at least have a result" -msgstr "Wszystkie polecenia powinny powiadać przynajmniej wynik" - -msgid "Apply ACI to your own entry (self)" -msgstr "Zastosowanie ACI do własnego wpisu („self”)" - -msgid "Asks for a non-random password to use for the principal" -msgstr "Pyta o nielosowe hasło do użycia z naczelnikiem" - -msgid "Attribute" -msgstr "Atrybut" - -msgid "Attributes" -msgstr "Atrybuty" - -msgid "Automount" -msgstr "Automatyczne montowanie" - -msgid "Automount Keys" -msgstr "Automatyczne montowanie kluczy" - -msgid "Automount Maps" -msgstr "Automatyczne montowanie map" - -msgid "BIND update policy" -msgstr "Polityka aktualizacji BIND" - -msgid "Back to Top" -msgstr "Wróć na górę" - -msgid "Bad format in credentials cache" -msgstr "Błędny format w pamięci podręcznej danych uwierzytelniających" - -msgid "Base-64 encoded server certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Dekodowanie base64 się nie powiodło: %(reason)s" - -msgid "Bind DN" -msgstr "DN dowiązania" - -msgid "Cancel" -msgstr "Anuluj" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Nie można rozwiązać KDC dla żądanego obszaru" - -msgid "Certificate" -msgstr "Certyfikat" - -msgid "Certificate Revoked" -msgstr "Odrzucono certyfikat" - -msgid "Certificate Subject base" -msgstr "Podstawa tematu certyfikatu" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Błąd formatu certyfikatu: %(error)s" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Zmieniono hasło dla „%(value)s”" - -msgid "Character classes" -msgstr "Klasy znaków" - -msgid "City" -msgstr "Miasto" - -msgid "Class" -msgstr "Klasa" - -msgid "Close" -msgstr "Zamknij" - #, c-format -msgid "Closing keytab failed\n" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -msgid "Comma separated encryption types list" -msgstr "Lista typów szyfrowania oddzielonych przecinkami" - -msgid "Command not implemented" -msgstr "Polecenie nie jest zaimplementowane" - -msgid "Commands" -msgstr "Polecenia" - -msgid "Configuration" -msgstr "Konfiguracja" - -msgid "Contact this specific KDC Server" -msgstr "Kontaktuje się z konkretnym serwerem KDC" - -msgid "Continuous mode: Don't stop on errors." -msgstr "Tryb ciągły: bez zatrzymywania po błędach." - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" - -msgid "Credentials cache permissions incorrect" -msgstr "" -"Uprawnienia pamięci podręcznej danych uwierzytelniających są niepoprawne" - -msgid "DN to bind as if not using kerberos" -msgstr "DN do dowiązania, jeśli nie jest używany Kerberos" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS Zone Settings" -msgstr "Ustawienia strefy DNS" - -msgid "DNS is not configured" -msgstr "DNS nie jest skonfigurowany" - -msgid "Data" -msgstr "Dane" - -msgid "Debugging output" -msgstr "Wyjście debugowania" - -msgid "Default group for new users" -msgstr "Domyślna grupa dla nowych użytkowników" - -msgid "Default shell" -msgstr "Domyślna powłoka" - -msgid "Default shell for new users" -msgstr "Domyślna powłoka dla nowych użytkowników" - -msgid "Default users group" -msgstr "Domyślna grupa użytkowników" - -msgid "Delete" -msgstr "Usuń" - -msgid "Delete all associated records" -msgstr "Usuń wszystkie powiązane wpisy" - -msgid "Delete all?" -msgstr "Usunąć wszystko?" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Usunięto grupę komputerów „%(value)s”" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"Usuwanie zarządzanej grupy nie jest dozwolone. Musi zostać najpierw " -"odłączona." - -msgid "Description" -msgstr "Opis" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -msgid "Dict of I18N messages" -msgstr "Słownik komunikatów umiędzynaradawiania" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" - -msgid "Dictionary mapping variable name to value" -msgstr "Nazwa zmiennej mapowania słownika do ustawienia jako wartość" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "Display effective policy for a specific user" -msgstr "Wyświetlanie aktywnej polityki dla podanego użytkownika" - -msgid "Display user record for current Kerberos principal" -msgstr "Wyświetlenie wpisu użytkownika dla bieżącego naczelnika Kerberosa" - -msgid "Email address" -msgstr "Adres e-mail" - -msgid "Enabled" -msgstr "Włączone" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "Encryption types to request" -msgstr "Typy szyfrowania do zażądania" - -msgid "Enctype comparison failed!\n" -msgstr "Porównanie typów szyfrowania się nie powiodło.\n" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Proszę podać %(label)s ponownie, aby sprawdzić: " - -msgid "Error" -msgstr "Błąd" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" -"Błąd podczas uzyskiwania początkowych danych uwierzytelniających: %s.\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Błąd podczas rozwiązywania tablicy kluczy: %s.\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" -"Błąd podczas przechowywania danych uwierzytelniających w pamięci podręcznej: " -"%s.\n" - -msgid "External host" -msgstr "Zewnętrzny komputer" - -msgid "Failed members" -msgstr "Elementy, które się nie powiodły" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Dodanie klucza do tablicy kluczy się nie powiodło\n" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Dodanie użytkownika do domyślnej grupy się nie powiodło. Należy użyć " -"polecenia „ipa group-add-member”, aby dodać go ręcznie." - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Utworzenie kontroli się nie powiodło.\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Utworzenie materiału klucza się nie powiodło\n" - -msgid "Failed to create key!\n" -msgstr "Utworzenie klucza się nie powiodło.\n" - -msgid "Failed to create random key!\n" -msgstr "Utworzenie losowego klucza się nie powiodło.\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" - -msgid "False if migration mode was disabled." -msgstr "Fałsz, jeśli wyłączono tryb migracji" - -msgid "Fax Number" -msgstr "Numer faksu" - -#, python-format -msgid "File %(file)s not found" -msgstr "Nie odnaleziono pliku %(file)s" - -msgid "Filter" -msgstr "Filtr" - -msgid "Find" -msgstr "Znajdź" - -msgid "Fingerprint (SHA1)" -msgstr "Odcisk (SHA1)" - -msgid "First name" -msgstr "Imię" - -msgid "Forward to server instead of running locally" -msgstr "Przekazanie do serwera zamiast uruchamiania lokalnie" - -#, python-format -msgid "Found '%(value)s'" -msgstr "Odnaleziono „%(value)s”" - -msgid "Full name" -msgstr "Pełna nazwa" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (ta opcja umożliwia jego ręczne ustawienie)" - -msgid "Group" -msgstr "Grupa" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Grupa „%s” nie istnieje" - -msgid "Group container" -msgstr "Kontener grupy" - -msgid "Group description" -msgstr "Opis grupy" - -msgid "Group name" -msgstr "Nazwa grupy" - -msgid "Group to apply ACI to" -msgstr "Grupa, do której zastosować ACI" - -msgid "Groups" -msgstr "Grupy" - -msgid "HBAC service group description" -msgstr "Opis grupy usługi HBAC" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Platforma sprzętowa komputera (np. Lenovo T61)" - -msgid "History size" -msgstr "Rozmiar historii" - -msgid "Home directory" -msgstr "Katalog domowy" - -msgid "Home directory base" -msgstr "Podstawa katalogu domowego" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Nie odnaleziono komputera „%(host)s”" - -msgid "Host Groups" -msgstr "Grupy komputerów" - -msgid "Host Name" -msgstr "Nazwa komputera" - -msgid "Host category" -msgstr "Kategoria komputerów" - -msgid "Host category the rule applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Platforma sprzętowa komputera (np. „Lenovo T61”)" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Komputer jest już dołączony.\n" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Lokalizacja komputera (np. „Baltimore, MD”)" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Położenie komputera (np. „Laboratorium nr 2”)" - -msgid "Host name" -msgstr "Nazwa komputera" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "System operacyjny komputera i jego wersja (np. „Fedora 9”)" - -msgid "Host-group" -msgstr "Grupa komputerów" - -msgid "Hostname" -msgstr "Nazwa komputera" - -msgid "Hosts" -msgstr "Komputery" - -msgid "IPA Server to use" -msgstr "Serwer IPA do użycia" - -msgid "IPA unique ID" -msgstr "Unikalny identyfikator IPA" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Niewystarczający dostęp: %(info)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Nieprawidłowa nazwa naczelnika usługi\n" - -msgid "Issuer" -msgstr "Wydawca" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" -"Nie odnaleziono pamięci podręcznej danych uwierzytelniających. Istnieje " -"zgłoszenie Kerberosa?\n" - -msgid "Kerberos Service Principal Name" -msgstr "Nazwa naczelnika usługi Kerberos" - -msgid "Kerberos Ticket Policy" -msgstr "Polityka zgłoszeń Kerberosa" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" -"Nie odnaleziono naczelnika użytkownika Kerberosa. Istnieje prawidłowa pamięć " -"podręczna danych uwierzytelniających?\n" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Błąd Kerberosa: %(major)s/%(minor)s" - -msgid "Kerberos principal" -msgstr "Naczelnik Kerberosa" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " -"aby ustawić go ręcznie." - -msgid "Kerberos principal name for this host" -msgstr "Nazwa naczelnika Kerberosa dla tego komputera" - -msgid "Key" -msgstr "Klucz" - -msgid "Keytab" -msgstr "Tabela kluczy" - -msgid "Keytab File Name" -msgstr "Nazwa pliku tablicy kluczy" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Pomyślnie pobrano tablicę kluczy i przechowano ją w: %s\n" - -msgid "LDAP DN" -msgstr "DN LDAP" - -msgid "LDAP URI" -msgstr "Adres URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "Adres URI LDAP serwera DS, z którego migrować" - -msgid "LDAP password" -msgstr "Hasło LDAP" - -msgid "LDAP schema" -msgstr "Schemat LDAP" - -msgid "Last name" -msgstr "Nazwisko" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Dozwolony filtr LDAP (np. ou=Inżynieria)" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Lista migrowanych obiektów, ułożonych w kategorie według typu." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" -"Lista obiektów, które nie mogły zostać migrowane, ułożonych w kategorie " -"według typu." - -msgid "Locality" -msgstr "Lokalizacja" - -msgid "Location" -msgstr "Położenie" - -msgid "Logged In As" -msgstr "Zalogowano jako" - -msgid "Login shell" -msgstr "Powłoka logowania" - -msgid "Mailing Address" -msgstr "Adres pocztowy" - -msgid "Manage password policy for specific group" -msgstr "Zarządzanie polityką haseł dla podanej grupy" - -msgid "Manage ticket policy for specific user" -msgstr "Zarządzanie polityką zgłoszeń dla podanego użytkownika" - -msgid "Map" -msgstr "Mapa" - -msgid "Max life" -msgstr "Maksymalny czas życia" - -msgid "Max lifetime (days)" -msgstr "Maksymalny czas życia (w dniach)" - -msgid "Max renew" -msgstr "Maksymalne odnowienie" - -msgid "Maximum number of entries returned" -msgstr "Maksymalna liczba zwróconych wpisów" - -msgid "Maximum password life must be greater than minimum." -msgstr "Maksymalny czas życia hasła musi być wyższy niż minimalny." - -msgid "Maximum password lifetime (in days)" -msgstr "Maksymalny czas życia hasła (w dniach)" - -msgid "Maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -msgid "Maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -msgid "Member Host" -msgstr "Komputer elementu" - -msgid "Member groups" -msgstr "Elementy grupy" - -msgid "Member host-groups" -msgstr "Element grupy komputerów" - -msgid "Member hosts" -msgstr "Element komputerów" - -msgid "Member of" -msgstr "Element" - -msgid "Member of a group" -msgstr "Element grupy" - -msgid "Member of group" -msgstr "Członek grupy" - -msgid "Member of groups" -msgstr "Członek grup" - -msgid "Member of host-groups" -msgstr "Element grupy komputerów" - -msgid "Member service groups" -msgstr "Grupy usługi elementów" - -msgid "Member services" -msgstr "Usługi elementów" - -msgid "Member users" -msgstr "Elementy użytkowników" - -msgid "Members that could not be added" -msgstr "Elementy, które nie mogły zostać dodane" - -msgid "Members that could not be removed" -msgstr "Liczba elementów, które nie mogły zostać usunięte" - -msgid "Min length" -msgstr "Minimalna długość" - -msgid "Min lifetime (hours)" -msgstr "Minimalny czas życia (w godzinach)" - -msgid "Minimum length of password" -msgstr "Minimalna długość hasła" - -msgid "Minimum number of character classes" -msgstr "Minimalna liczba klas znaków" - -msgid "Minimum password lifetime (in hours)" -msgstr "Minimalny czas życia hasła (w godzinach)" - -msgid "Misc. Information" -msgstr "Różne informacje" - -#, c-format -msgid "Missing reply control!\n" -msgstr "Brak kontroli odpowiedzi.\n" - -msgid "Mobile Telephone Number" -msgstr "Numer telefonu komórkowego" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Zmodyfikowano grupę komputerów „%(value)s”" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "Mount information" -msgstr "Informacje o montowaniu" - -msgid "Mount point" -msgstr "Punkt montowania" - -msgid "NIS domain name" -msgstr "Nazwa domeny NIS" - -msgid "Name of host-group" -msgstr "Nazwa grupy komputerów" - -msgid "Name of object to export" -msgstr "Nazwa obiektu do wyeksportowania" - -msgid "Netgroup description" -msgstr "Opis grupy sieciowej" - -msgid "Netgroup name" -msgstr "Nazwa grupy sieciowej" - -msgid "Netgroups" -msgstr "Grupy sieciowe" - -msgid "New Certificate" -msgstr "Nowy certyfikat" - -msgid "New Password" -msgstr "Nowe hasło" - -msgid "New Principal Password" -msgstr "Nowe hasło naczelnika" - -msgid "No credentials cache found" -msgstr "Nie odnaleziono pamięci podręcznej danych uwierzytelniających" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Żadne klucze nie zostały zaakceptowane przez KDC\n" +msgid "Out of memory!\n" +msgstr "Brak pamięci.\n" #, c-format msgid "No permission to join this host to the IPA domain.\n" msgstr "Brak uprawnienia do dołączenia do tego komputera w domenie IPA.\n" -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "Brak typów szyfrowania preferowanych przez system?\n" - -#, c-format -msgid "No values for %s" -msgstr "Brak wartości dla %s" - #, c-format msgid "No write permissions on keytab file '%s'\n" msgstr "Brak uprawnień do zapisu pliku tablicy kluczy „%s”\n" -msgid "Not After" -msgstr "Nie po" - -msgid "Not Before" -msgstr "Nie wcześniej" - -msgid "Not a managed group" -msgstr "Nie jest zarządzaną grupą" - -msgid "Number of members added" -msgstr "Liczba dodanych elementów" - -msgid "Number of members removed" -msgstr "Liczba usuniętych elementów" - -msgid "Number of plugins loaded" -msgstr "Liczba wczytanych wtyczek" - -msgid "Number of variables returned (<= total)" -msgstr "Liczba zwróconych zmiennych (<= razem)" - -msgid "Only one value is allowed" -msgstr "Dozwolona jest tylko jedna wartość" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "System operacyjny komputera i jego wersja (np. Fedora 9)" - -msgid "Operating system" -msgstr "System operacyjny" - #, c-format -msgid "Out of Memory!\n" -msgstr "Brak pamięci.\n" - -msgid "Out of memory\n" -msgstr "Brak pamięci\n" - -#, c-format -msgid "Out of memory \n" -msgstr "Brak pamięci \n" +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" #, c-format msgid "Out of memory!" msgstr "Brak pamięci." #, c-format -msgid "Out of memory!\n" -msgstr "Brak pamięci.\n" +msgid "Unable to enable SSL in LDAP\n" +msgstr "Nie można włączyć SSL w LDAP\n" -msgid "Out of memory!?\n" -msgstr "Brak pamięci?\n" - -msgid "Output only on errors" -msgstr "Wyświetla tylko błędy" - -msgid "Pager Number" -msgstr "Numer pagera" - -msgid "Parent map" -msgstr "Mapa nadrzędna" - -msgid "Password" -msgstr "Hasło" - -msgid "Password Policy" -msgstr "Polityka haseł" - -msgid "Password change complete" -msgstr "Ukończono zmianę hasła" - -msgid "Password history size" -msgstr "Rozmiar historii haseł" - -msgid "Password used in bulk enrollment" -msgstr "Hasło używane w zapisywaniu większej części" - -msgid "Passwords do not match" -msgstr "Hasła się nie zgadzają" - -msgid "Passwords do not match!" -msgstr "Hasła się nie zgadzają." - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"Hasła zostały migrowane w formacie sprzed mieszania.\n" -"Program IPA nie może utworzyć kluczy Kerberosa, chyba\n" -"że zostały podane z hasłami w zwykłym tekście. Wszyscy\n" -"migrowani użytkownicy muszą zalogować się na stronie\n" -"https://twoja.domena/ipa/migration/, zanim będą mogli\n" -"używać swoich kont Kerberosa." - -msgid "Passwords must match" -msgstr "Hasła muszą się zgadzać" - -msgid "Permissions" -msgstr "Uprawnienia" - -msgid "Permitted Encryption Types" -msgstr "Dozwolone typy szyfrowania" - -msgid "Platform" -msgstr "Platforma" - -msgid "Principal" -msgstr "Naczelnik" - -msgid "Principal name" -msgstr "Nazwa naczelnika" - -msgid "Print as little as possible" -msgstr "Wyświetla tak mało, jak to możliwe" - -msgid "Print debugging information" -msgstr "Wyświetlanie informacji o debugowaniu" - -msgid "Priority" -msgstr "Priorytet" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" - -msgid "Quick Links" -msgstr "Szybkie odnośniki" - -msgid "Realm name" -msgstr "Nazwa obszaru" - -msgid "Reason" -msgstr "Przyczyna" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Przyczyna unieważnienia certyfikatu (0-10)" - -msgid "Remove all principals in this realm" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Usuwanie naczelnika %s\n" - -msgid "Request id" -msgstr "Identyfikator żądania" - -msgid "Request status" -msgstr "Stan żądania" - -msgid "Reset" -msgstr "Przywróć" - -msgid "Restore" -msgstr "Przywróć" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Wyniki zostały obcięte, proszę spróbować bardziej konkretnego wyszukiwania" - -msgid "Retry" -msgstr "Ponów" - -msgid "Revocation reason" -msgstr "Przyczyna unieważnienia" - -msgid "Revoke a certificate." -msgstr "Odrzuć certyfikat." - -msgid "Revoked" -msgstr "Unieważniono" - -msgid "Rights" -msgstr "Uprawnienia" - -msgid "Roles" -msgstr "Role" - -msgid "Rule name" -msgstr "Nazwa reguły" - -msgid "Rule type" -msgstr "Typ reguły" - -msgid "SOA class" -msgstr "Klasa SOA" - -msgid "SOA expire" -msgstr "Wygaszenie SOA" - -msgid "SOA minimum" -msgstr "Minimalne SOA" - -msgid "SOA refresh" -msgstr "Odświeżenie SOA" - -msgid "SOA retry" -msgstr "Ponowienie SOA" - -msgid "SOA serial" -msgstr "Numer seryjny SOA" - -msgid "Search" -msgstr "Wyszukaj" - -msgid "Search size limit" -msgstr "Ograniczenie rozmiaru wyszukiwania" - -msgid "Search time limit" -msgstr "Ograniczenie czasu wyszukiwania" - -msgid "Select All" -msgstr "Zaznacz wszystko" - -msgid "Self" -msgstr "Własny" - -msgid "Serial number" -msgstr "Numer seryjny" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" -"Numer seryjny w formie dziesiętnej lub szesnastkowej, jeśli poprzedzone 0x" - -msgid "Server Name" -msgstr "Nazwa serwera" - -msgid "Service Groups" -msgstr "Grupy usług" - -msgid "Service category" -msgstr "Kategoria usług" - -msgid "Service category the rule applies to" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -msgid "Service group name" -msgstr "Nazwa grupy usługi" - -msgid "Service name" -msgstr "Nazwa usługi" - -msgid "Service principal" -msgstr "Naczelnik usługi" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Naczelnik usługi nie jest w formacie: usługa/w pełni kwalifikowana nazwa " -"komputera: %(reason)s" - -msgid "Services" -msgstr "Usługi" - -msgid "Set OTP" -msgstr "Ustaw OTP" - -msgid "Settings" -msgstr "Ustawienia" - -msgid "Show the list of permitted encryption types and exit" -msgstr "Wyświetla listę dozwolonych typów szyfrowania i kończy działanie" - -msgid "Simple bind failed\n" +#, fuzzy +#| msgid "Simple bind failed\n" +msgid "SASL Bind failed\n" msgstr "Proste dowiązanie się nie powiodło\n" -msgid "Size Limit" -msgstr "Ograniczenie rozmiaru" - -msgid "Status" -msgstr "Stan" - -msgid "Street address" -msgstr "Adres zamieszkania" - -msgid "Subject" -msgstr "Temat" - -msgid "Subtree" -msgstr "Poddrzewo" - -msgid "Subtree to apply ACI to" -msgstr "Poddrzewo, do którego zastosować ACI" - -msgid "Sudo Allow Commands" -msgstr "Polecenia zezwolone sudo" - -msgid "Sudo Command" -msgstr "Polecenie sudo" - -msgid "Sudo Command Groups" -msgstr "Grupy polecenia sudo" - -msgid "Sudo Deny Commands" -msgstr "Polecenia zabronione sudo" - #, c-format -msgid "Supported encryption types:\n" -msgstr "Obsługiwane typy szyfrowania:\n" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Błąd składni: %(error)s" - -msgid "Target" -msgstr "Cel" - -msgid "Target group" -msgstr "Grupa docelowa" - -msgid "Target your own entry (self)" -msgstr "Cel własnego wpisu („self”)" - -msgid "Telephone Number" -msgstr "Numer telefonu" - -msgid "The IPA realm" -msgstr "Obszar IPA" - -msgid "The default users group cannot be removed" -msgstr "Nie można usunąć domyślnej grupy użytkowników" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" - -msgid "The hostname to register as" -msgstr "Nazwa komputera, pod jaką zarejestrować" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgid "Search for %1$s on rootdse failed with error %2$d\n" msgstr "" -"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." -"com@EXAMPLE.COM)" +#, c-format +msgid "No values for %s" +msgstr "Brak wartości dla %s" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "ipa-getkeytab not found\n" +msgid "IPA namingContext not found\n" +msgstr "nie odnaleziono ipa-getkeytab\n" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "Nie można ustalić głównego DN %s\n" + +#, fuzzy, c-format +#| msgid "Unenrollment failed.\n" +msgid "Enrollment failed. %s\n" +msgstr "Wypisanie się nie powiodło.\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "nie odnaleziono naczelnika w odpowiedzi XML-RPC\n" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Komputer jest już dołączony.\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_dumps() failed\n" +msgstr "fork() się nie powiodło\n" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Obszar naczelnika nie zgadza się z obszarem dla tego serwera IPA" +"JSON-RPC request:\n" +"%s\n" +msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" -msgid "This command requires root access" -msgstr "To polecenie wymaga dostępu roota" +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" -msgid "This entry already exists" -msgstr "Ten wpis już istnieje" +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" -msgid "This is already a posix group" -msgstr "To jest już grupa POSIX" +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" -msgid "Ticket expired" -msgstr "Zgłoszenie wygasło" +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" -msgid "Time Limit" -msgstr "Ograniczenie czasu" +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" -msgid "Time limit of search in seconds" -msgstr "Ograniczenie czasu wyszukiwania w sekundach" +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" -msgid "Time to live" -msgstr "Czas życia" +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" -msgid "Total number of variables env (>= count)" -msgstr "Całkowita liczba zmiennych środowiskowych (>= licznik)" +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" -msgid "Type" -msgstr "Typ" +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_pack_ex() failed: %s\n" +msgstr "fork() się nie powiodło\n" -msgid "UID" -msgstr "UID" +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Pomyślnie wypisano.\n" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Wypisanie się nie powiodło.\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "nie odnaleziono wyniku w odpowiedzi XML-RPC\n" #, c-format msgid "Unable to determine IPA server from %s\n" msgstr "Nie można ustalić serwera IPA z %s\n" #, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Nie można ustalić głównego DN %s\n" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Nie można włączyć SSL w LDAP\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" +msgid "Unable to join host: Kerberos context initialization failed\n" msgstr "" -"Nie można utworzyć pamięci podręcznej danych uwierzytelniających Kerberosa\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Nie można zainicjować biblioteki LDAP.\n" +"Nie można dołączyć do komputera: zainicjowanie kontekstu Kerberosa się nie " +"powiodło\n" #, c-format msgid "Unable to join host: Kerberos Credential Cache not found\n" @@ -1285,138 +187,216 @@ msgstr "" "Kerberosa oraz nie podano hasła komputera.\n" #, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"Nie można dołączyć do komputera: zainicjowanie kontekstu Kerberosa się nie " -"powiodło\n" +msgid "fork() failed\n" +msgstr "fork() się nie powiodło\n" #, c-format -msgid "Unable to parse principal\n" -msgstr "Nie można przetworzyć naczelnika\n" +msgid "ipa-getkeytab not found\n" +msgstr "nie odnaleziono ipa-getkeytab\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytab ma błędne uprawnienia?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "wykonanie ipa-getkeytab się nie powiodło, errno %d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "potomek został zakończony z %d\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Błąd podczas rozwiązywania tablicy kluczy: %s.\n" + +#, fuzzy, c-format +#| msgid "Error obtaining initial credentials: %s.\n" +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" +"Błąd podczas uzyskiwania początkowych danych uwierzytelniających: %s.\n" + +#, fuzzy, c-format +#| msgid "Error resolving keytab: %s.\n" +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Błąd podczas rozwiązywania tablicy kluczy: %s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" +"Błąd podczas uzyskiwania początkowych danych uwierzytelniających: %s.\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" +"Nie można utworzyć pamięci podręcznej danych uwierzytelniających Kerberosa\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Błąd podczas przechowywania danych uwierzytelniających w pamięci podręcznej: " +"%s.\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "Wypisuje ten komputer z serwera IPA" + +msgid "Hostname of this server" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "hostname" +msgstr "Nazwa komputera" + +msgid "IPA Server to use" +msgstr "Serwer IPA do użycia" + +msgid "Specifies where to store keytab information." +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "filename" +msgstr "Nazwa reguły" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +#, fuzzy +#| msgid "password to use if not using kerberos" +msgid "LDAP password (if not using Kerberos)" +msgstr "hasło do użycia, jeśli nie jest używany Kerberos" + +msgid "password" +msgstr "hasło" + +#, fuzzy +#| msgid "LDAP password" +msgid "LDAP basedn" +msgstr "Hasło LDAP" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" + +#, fuzzy, c-format +#| msgid "The hostname must be fully-qualified: %s\n" +msgid "The hostname must not be: %s\n" +msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" #, c-format msgid "Unable to parse principal name\n" msgstr "Nie można przetworzyć nazwy naczelnika\n" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Usuwanie naczelnika %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "principal not found\n" +msgstr "nie odnaleziono naczelnika\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + #, c-format msgid "Unable to remove entry\n" msgstr "Nie można usunąć wpisu\n" -msgid "Unenroll this host from IPA server" -msgstr "Wypisuje ten komputer z serwera IPA" +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" #, c-format -msgid "Unenrollment failed.\n" -msgstr "Wypisanie się nie powiodło.\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Pomyślnie wypisano.\n" - -msgid "Unrevoked" -msgstr "Cofnięto unieważnienie" - -msgid "Unselect All" -msgstr "Odznacz wszystko" - -msgid "Update" -msgstr "Zaktualizuj" - -msgid "User" -msgstr "Użytkownik" - -msgid "User Groups" -msgstr "Grupy użytkowników" - -msgid "User ID Number (system will assign one if not provided)" +msgid "krb5_kt_remove_entry %1$d: %2$s\n" msgstr "" -"Numer identyfikacyjny użytkownika (system go przydzieli, jeśli nie zostanie " -"podany)" -msgid "User category" -msgstr "Kategoria użytkowników" - -msgid "User category the rule applies to" -msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" - -msgid "User container" -msgstr "Kontener użytkownika" - -msgid "User group" -msgstr "Grupa użytkowników" - -msgid "User group ACI grants access to" -msgstr "Grupa użytkowników, do której ACI zapewnia dostęp" - -msgid "User login" -msgstr "Login użytkownika" - -msgid "User name" -msgstr "Nazwa użytkownika" - -msgid "User password" -msgstr "Hasło użytkownika" - -msgid "User search fields" -msgstr "Pola wyszukiwania użytkowników" - -msgid "Users" -msgstr "Użytkownicy" - -msgid "Verify Principal Password" -msgstr "Sprawdzenie hasła naczelnika" +#, fuzzy, c-format +#| msgid "Failed to create control!\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "Utworzenie kontroli się nie powiodło.\n" #, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Ostrzeżenie: przekonwertowanie typu (#%d) się nie powiodło\n" +msgid "Unable to parse principal\n" +msgstr "Nie można przetworzyć naczelnika\n" #, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "principal not found\n" +msgid "realm not found\n" +msgstr "nie odnaleziono naczelnika\n" + +msgid "Print debugging information" +msgstr "Wyświetlanie informacji o debugowaniu" + +msgid "Debugging output" +msgstr "Wyjście debugowania" + +#, fuzzy +#| msgid "" +#| "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" -"Ostrzeżenie: typy salt nie są uwzględniane z losowymi hasłami (proszę " -"zobaczyć opcję -P)\n" +"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." +"com@EXAMPLE.COM)" -msgid "You must enroll a host in order to create a host service" -msgstr "Należy zapisać się do komputera, aby utworzyć jego usługę" +msgid "Kerberos Service Principal Name" +msgstr "Nazwa naczelnika usługi Kerberos" -msgid "Zone name" -msgstr "Nazwa strefy" - -msgid "Zone name (FQDN)" -msgstr "Nazwa strefy (FQDN)" - -msgid "an internal error has occurred" -msgstr "wystąpił wewnętrzny błąd" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" +msgid "The keytab file to remove the principcal(s) from" msgstr "" -"co najmniej jedna z wartości: „type”, „filter”, „subtree”, „targetgroup”, " -"„attrs” lub „memberof” jest wymagana" -msgid "automatically add the principal if it doesn't exist" -msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" +msgid "Keytab File Name" +msgstr "Nazwa pliku tablicy kluczy" + +msgid "Remove all principals in this realm" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +msgid "Realm name" +msgstr "Nazwa obszaru" #, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" +msgid "Kerberos context initialization failed\n" +msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" -msgid "bind password" -msgstr "hasło Bind" +#, fuzzy, c-format +#| msgid "Failed to open keytab\n" +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "może wynosić co najwyżej %(maxlength)d bajtów" +#, c-format +msgid "Closing keytab failed\n" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "może wynosić co najwyżej %(maxlength)d znaków" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "może wynosić co najwyżej %(maxvalue)d" +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" #, c-format msgid "cannot open configuration file %s\n" @@ -1426,126 +406,23051 @@ msgstr "nie można otworzyć pliku konfiguracji %s\n" msgid "cannot stat() configuration file %s\n" msgstr "nie można wykonać stat() na pliku konfiguracji %s\n" -msgid "change collided with another change" -msgstr "zmiana koliduje z inną zmianą" - -msgid "change to a POSIX group" -msgstr "zmiana na grupę POSIX" +#, fuzzy, c-format +#| msgid "Out of memory\n" +msgid "out of memory\n" +msgstr "Brak pamięci\n" #, c-format -msgid "child exited with %d\n" -msgstr "potomek został zakończony z %d\n" +msgid "read error\n" +msgstr "błąd odczytu\n" + +#, fuzzy, c-format +#| msgid "Kerberos context initialization failed\n" +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" + +#, fuzzy, c-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Nie można przetworzyć naczelnika\n" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Żadne klucze nie zostały zaakceptowane przez KDC\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Brak pamięci \n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Nie można zainicjować biblioteki LDAP.\n" + +msgid "Simple bind failed\n" +msgstr "Proste dowiązanie się nie powiodło\n" + +#, fuzzy, c-format +#| msgid "cannot open configuration file %s\n" +msgid "Operation failed: %s\n" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to get result: %s\n" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to close the keytab\n" +msgid "Failed to parse extended result: %s\n" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +#, fuzzy, c-format +#| msgid "Failed to open Keytab\n" +msgid "Failed to parse result: %s\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, fuzzy, c-format +#| msgid "Missing reply control!\n" +msgid "Missing reply control list!\n" +msgstr "Brak kontroli odpowiedzi.\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Brak kontroli odpowiedzi.\n" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Brak pamięci.\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Utworzenie kontroli się nie powiodło.\n" + +#, fuzzy, c-format +#| msgid "Failed to create key!\n" +msgid "Failed to bind to server!\n" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy, c-format +#| msgid "Failed to open keytab\n" +msgid "Failed to get keytab!\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" + +#, fuzzy, c-format +#| msgid "ber_init() failed, Invalid control ?!\n" +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to create random key!\n" +msgid "Failed to retrieve any keys" +msgstr "Utworzenie losowego klucza się nie powiodło.\n" + +#, fuzzy +#| msgid "Failed to create control!\n" +msgid "Failed to decode control reply!\n" +msgstr "Utworzenie kontroli się nie powiodło.\n" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Hasła się nie zgadzają." + +#, fuzzy, c-format +#| msgid "cannot open configuration file %s\n" +msgid "Failed to open config file %s\n" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +#, fuzzy, c-format +#| msgid "cannot open configuration file %s\n" +msgid "Failed to parse config file %s\n" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +#, fuzzy +#| msgid "Failed to open keytab\n" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "Wyświetla tak mało, jak to możliwe" + +msgid "Output only on errors" +msgstr "Wyświetla tylko błędy" + +msgid "Contact this specific KDC Server" +msgstr "Kontaktuje się z konkretnym serwerem KDC" + +msgid "Server Name" +msgstr "Nazwa serwera" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "Typy szyfrowania do zażądania" + +msgid "Comma separated encryption types list" +msgstr "Lista typów szyfrowania oddzielonych przecinkami" + +msgid "Show the list of permitted encryption types and exit" +msgstr "Wyświetla listę dozwolonych typów szyfrowania i kończy działanie" + +msgid "Permitted Encryption Types" +msgstr "Dozwolone typy szyfrowania" + +msgid "Asks for a non-random password to use for the principal" +msgstr "Pyta o nielosowe hasło do użycia z naczelnikiem" + +msgid "LDAP DN" +msgstr "DN LDAP" + +msgid "DN to bind as if not using kerberos" +msgstr "DN do dowiązania, jeśli nie jest używany Kerberos" + +msgid "LDAP password" +msgstr "Hasło LDAP" + +msgid "password to use if not using kerberos" +msgstr "hasło do użycia, jeśli nie jest używany Kerberos" + +#, fuzzy +#| msgid "LDAP password" +msgid "Prompt for LDAP password" +msgstr "Hasło LDAP" + +msgid "Path to the IPA CA certificate" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "IPA CA certificate" +msgstr "Certyfikat" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "Brak typów szyfrowania preferowanych przez system?\n" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Obsługiwane typy szyfrowania:\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Ostrzeżenie: przekonwertowanie typu (#%d) się nie powiodło\n" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Enter LDAP password" +msgstr "Hasło LDAP" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "Nowe hasło naczelnika" + +msgid "Verify Principal Password" +msgstr "Sprawdzenie hasła naczelnika" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Ostrzeżenie: typy salt nie są uwzględniane z losowymi hasłami (proszę " +"zobaczyć opcję -P)\n" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Nieprawidłowa nazwa naczelnika usługi\n" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" +"Nie odnaleziono pamięci podręcznej danych uwierzytelniających. Istnieje " +"zgłoszenie Kerberosa?\n" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" +"Nie odnaleziono naczelnika użytkownika Kerberosa. Istnieje prawidłowa pamięć " +"podręczna danych uwierzytelniających?\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Utworzenie materiału klucza się nie powiodło\n" + +#, fuzzy, c-format +#| msgid "Failed to open keytab\n" +msgid "Failed to get keytab\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Dodanie klucza do tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Pomyślnie pobrano tablicę kluczy i przechowano ją w: %s\n" + +msgid "Failed members" +msgstr "Elementy, które się nie powiodły" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Failed hosts/hostgroups" +msgstr "Nazwa grupy komputerów" + +#, fuzzy +#| msgid "Default users group" +msgid "Failed users/groups" +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +#| msgid "Member service groups" +msgid "Failed service/service groups" +msgstr "Grupy usługi elementów" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed to remove" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed RunAs" +msgstr "Elementy, które się nie powiodły" + +msgid "Failed RunAsGroup" +msgstr "" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed profiles" +msgstr "Elementy, które się nie powiodły" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed CAs" +msgstr "Elementy, które się nie powiodły" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed member manager" +msgstr "Elementy, które się nie powiodły" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed managedby" +msgstr "Elementy, które się nie powiodły" + +#, fuzzy +#| msgid "Failed to add key to the keytab\n" +msgid "Failed allowed to retrieve keytab" +msgstr "Dodanie klucza do tablicy kluczy się nie powiodło\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed allowed to create keytab" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed targets" +msgstr "Elementy, które się nie powiodły" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed owners" +msgstr "Elementy, które się nie powiodły" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Failed to add" +msgstr "Utworzenie klucza się nie powiodło.\n" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount master file." +msgstr "Automatyczne montowanie map" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" #, python-format -msgid "container entry (%(container)s) not found" -msgstr "nie odnaleziono wpisu kontenera (%(container)s)" +msgid "File %(file)s not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key %(key)s already exists" +msgstr "Ten wpis już istnieje" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "map %(map)s already exists" +msgstr "Ten wpis już istnieje" + +msgid "Imported maps:" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added %(map)s" +msgstr "Dodano komputer „%(value)s”" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +#, fuzzy +#| msgid "Failed to close the keytab\n" +msgid "File to load the certificate from" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Hasła zostały migrowane w formacie sprzed mieszania.\n" +"Program IPA nie może utworzyć kluczy Kerberosa, chyba\n" +"że zostały podane z hasłami w zwykłym tekście. Wszyscy\n" +"migrowani użytkownicy muszą zalogować się na stronie\n" +"https://twoja.domena/ipa/migration/, zanim będą mogli\n" +"używać swoich kont Kerberosa." + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of agreements per replica" +msgstr "Maksymalna liczba zwróconych wpisów" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a user" +msgstr "Usunąć wszystko?" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modify %(name)s '%(value)s'?" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "Usunąć wszystko?" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Delete %(name)s '%(value)s'?" +msgstr "Usunięto komputer „%(value)s”" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +#| msgid "User" +msgid "User ID" +msgstr "Użytkownik" + +msgid "Password" +msgstr "Hasło" + +#, fuzzy +#| msgid "First name" +msgid "First Code" +msgstr "Imię" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Vault password" +msgstr "hasło" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +#, fuzzy +#| msgid "Password change complete" +msgid "Password specified multiple times" +msgstr "Ukończono zmianę hasła" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Change password" +msgstr "Hasło użytkownika" + +#, fuzzy +#| msgid "bind password" +msgid "Old vault password" +msgstr "hasło Bind" + +msgid "File containing the old vault password" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New vault password" +msgstr "Nowe hasło" + +msgid "File containing the new vault password" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Old vault private key" +msgstr "Utworzenie klucza się nie powiodło.\n" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Vault private key" +msgstr "Utworzenie klucza się nie powiodło.\n" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "Dane" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "Cofnięto unieważnienie" + +msgid "Error" +msgstr "Błąd" + +#, fuzzy +#| msgid "Rule name" +msgid "Input filename" +msgstr "Nazwa reguły" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "File to load the certificate from." +msgstr "Odrzuć certyfikat." + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "Nazwa ACI" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission" +msgstr "Uprawnienia" + +#, fuzzy +#| msgid "User group ACI grants access to" +msgid "Permission ACI grants access to" +msgstr "Grupa użytkowników, do której ACI zapewnia dostęp" + +msgid "User group" +msgstr "Grupa użytkowników" + +msgid "User group ACI grants access to" +msgstr "Grupa użytkowników, do której ACI zapewnia dostęp" + +msgid "Permissions" +msgstr "Uprawnienia" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "Atrybuty" + +msgid "Type" +msgstr "Typ" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "Element" + +msgid "Member of a group" +msgstr "Element grupy" + +msgid "Filter" +msgstr "Filtr" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Dozwolony filtr LDAP (np. ou=Inżynieria)" + +msgid "Subtree" +msgstr "Poddrzewo" + +msgid "Subtree to apply ACI to" +msgstr "Poddrzewo, do którego zastosować ACI" + +msgid "Target group" +msgstr "Grupa docelowa" + +msgid "Group to apply ACI to" +msgstr "Grupa, do której zastosować ACI" + +msgid "Target your own entry (self)" +msgstr "Cel własnego wpisu („self”)" + +msgid "Apply ACI to your own entry (self)" +msgstr "Zastosowanie ACI do własnego wpisu („self”)" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete ACI." +msgstr "Usuń" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Number of entries returned" +msgstr "Maksymalna liczba zwróconych wpisów" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "New ACI name" +msgstr "Nazwa ACI" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "Klucz" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Automount key name." +msgstr "Automatyczne montowanie kluczy" + +msgid "Mount information" +msgstr "Informacje o montowaniu" msgid "description" msgstr "opis" -msgid "did not receive Kerberos credentials" -msgstr "nie otrzymano danych uwierzytelniających Kerberosa" +msgid "Location" +msgstr "Położenie" -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "wykonanie ipa-getkeytab się nie powiodło, errno %d\n" +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "Mapa" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount map name." +msgstr "Automatyczne montowanie map" + +msgid "Description" +msgstr "Opis" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "Tryb ciągły: bez zatrzymywania po błędach." + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "Ograniczenie czasu" + +msgid "Time limit of search in seconds" +msgstr "Ograniczenie czasu wyszukiwania w sekundach" + +msgid "Size Limit" +msgstr "Ograniczenie rozmiaru" + +msgid "Maximum number of entries returned" +msgstr "Maksymalna liczba zwróconych wpisów" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "Uprawnienia" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "New mount information" +msgstr "Informacje o montowaniu" + +#, fuzzy +#| msgid "Rule name" +msgid "Rename" +msgstr "Nazwa reguły" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "Punkt montowania" + +msgid "Parent map" +msgstr "Mapa nadrzędna" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "Min length" +msgid "Maximum username length" +msgstr "Minimalna długość" + +msgid "Home directory base" +msgstr "Podstawa katalogu domowego" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "Domyślna powłoka" + +msgid "Default shell for new users" +msgstr "Domyślna powłoka dla nowych użytkowników" + +msgid "Default users group" +msgstr "Domyślna grupa użytkowników" + +msgid "Default group for new users" +msgstr "Domyślna grupa dla nowych użytkowników" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "Ograniczenie czasu wyszukiwania" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "Ograniczenie rozmiaru wyszukiwania" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Maksymalna liczba zwróconych wpisów" + +msgid "User search fields" +msgstr "Pola wyszukiwania użytkowników" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +#, fuzzy +#| msgid "User search fields" +msgid "Group search fields" +msgstr "Pola wyszukiwania użytkowników" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +#, fuzzy +#| msgid "False if migration mode was disabled." +msgid "Enable migration mode" +msgstr "Fałsz, jeśli wyłączono tryb migracji" + +msgid "Certificate Subject base" +msgstr "Podstawa tematu certyfikatu" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group objectclasses" +msgstr "Domyślna grupa dla nowych użytkowników" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default user objectclasses" +msgstr "Domyślna grupa użytkowników" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default SELinux user" +msgstr "Domyślna grupa użytkowników" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Default PAC types" +msgstr "Domyślna powłoka" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +#, fuzzy +#| msgid "Member service groups" +msgid "Member user group" +msgstr "Grupy usługi elementów" + +#, fuzzy +#| msgid "Group to apply ACI to" +msgid "User group to apply delegation to" +msgstr "Grupa, do której zastosować ACI" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +#, fuzzy +#| msgid "Password Policy" +msgid "Forward policy" +msgstr "Polityka haseł" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +msgid "Zone name" +msgstr "Nazwa strefy" + +msgid "Zone name (FQDN)" +msgstr "Nazwa strefy (FQDN)" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "Aktywna strefa" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Record name" +msgstr "Nazwa reguły" + +msgid "Time to live" +msgstr "Czas życia" + +msgid "Records" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Record type" +msgstr "Typ reguły" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +#, fuzzy +#| msgid "Mailing Address" +msgid "IP Address" +msgstr "Adres pocztowy" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +#, fuzzy +#| msgid "Subtree" +msgid "Subtype" +msgstr "Poddrzewo" + +#, fuzzy +#| msgid "Hostname" +msgid "AFSDB Hostname" +msgstr "Nazwa komputera" + +msgid "Hostname" +msgstr "Nazwa komputera" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate Type" +msgstr "Certyfikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Type" +msgstr "Certyfikat" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate/CRL" +msgstr "Certyfikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate/CRL" +msgstr "Certyfikat" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "CNAME Hostname" +msgstr "Nazwa komputera" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "DNAME Target" +msgstr "Cel" + +msgid "Target" +msgstr "Cel" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "NAPTR Service" +msgstr "Usługi" + +#, fuzzy +#| msgid "Services" +msgid "Service" +msgstr "Usługi" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "NS Hostname" +msgstr "Nazwa komputera" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "PTR Hostname" +msgstr "Nazwa komputera" + +#, fuzzy +#| msgid "The hostname to register as" +msgid "The hostname this reverse record points to" +msgstr "Nazwa komputera, pod jaką zarejestrować" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +#, fuzzy +#| msgid "Priority" +msgid "SRV Priority" +msgstr "Priorytet" + +msgid "Priority" +msgstr "Priorytet" + +#, fuzzy +#| msgid "Rights" +msgid "SRV Weight" +msgstr "Uprawnienia" + +#, fuzzy +#| msgid "Rights" +msgid "Weight" +msgstr "Uprawnienia" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "SRV Target" +msgstr "Cel" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "SSHFP Fingerprint Type" +msgstr "Odcisk (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint Type" +msgstr "Odcisk (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "SSHFP Fingerprint" +msgstr "Odcisk (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint" +msgstr "Odcisk (SHA1)" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +#, fuzzy +#| msgid "SOA retry" +msgid "TLSA record" +msgstr "Ponowienie SOA" + +msgid "Raw TLSA records" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "TLSA Certificate Usage" +msgstr "Certyfikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Usage" +msgstr "Certyfikat" + +msgid "TLSA Selector" +msgstr "" + +#, fuzzy +#| msgid "Select All" +msgid "Selector" +msgstr "Zaznacz wszystko" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +#, fuzzy +#| msgid "Certificate Subject base" +msgid "Certificate Association Data" +msgstr "Podstawa tematu certyfikatu" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +#, fuzzy +#| msgid "Data" +msgid "Text Data" +msgstr "Dane" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "Adres e-mail administratora" + +msgid "SOA serial" +msgstr "Numer seryjny SOA" + +#, fuzzy +#| msgid "Serial number" +msgid "SOA record serial number" +msgstr "Numer seryjny" + +msgid "SOA refresh" +msgstr "Odświeżenie SOA" + +#, fuzzy +#| msgid "SOA refresh" +msgid "SOA record refresh time" +msgstr "Odświeżenie SOA" + +msgid "SOA retry" +msgstr "Ponowienie SOA" + +#, fuzzy +#| msgid "SOA retry" +msgid "SOA record retry time" +msgstr "Ponowienie SOA" + +msgid "SOA expire" +msgstr "Wygaszenie SOA" + +#, fuzzy +#| msgid "SOA expire" +msgid "SOA record expire time" +msgstr "Wygaszenie SOA" + +msgid "SOA minimum" +msgstr "Minimalne SOA" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "Polityka aktualizacji BIND" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +#, fuzzy +#| msgid "force host name even if not in DNS" +msgid "Resolve a host name in DNS." +msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission value" +msgstr "Uprawnienia" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +#, fuzzy +#| msgid "force host name even if not in DNS" +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +#, fuzzy +#| msgid "Delete all associated records" +msgid "Delete DNS resource record." +msgstr "Usuń wszystkie powiązane wpisy" + +msgid "Delete all associated records" +msgstr "Usuń wszystkie powiązane wpisy" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +#, fuzzy +#| msgid "force host name even if not in DNS" +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "Nazwa reguły" + +msgid "Rule type" +msgstr "Typ reguły" + +#, fuzzy +#| msgid "Rule type" +msgid "Rule type (allow)" +msgstr "Typ reguły" + +msgid "User category" +msgstr "Kategoria użytkowników" + +msgid "User category the rule applies to" +msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" + +msgid "Host category" +msgstr "Kategoria komputerów" + +msgid "Host category the rule applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +msgid "Service category" +msgstr "Kategoria usług" + +msgid "Service category the rule applies to" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +msgid "Enabled" +msgstr "Włączone" + +msgid "Users" +msgstr "Użytkownicy" + +msgid "User Groups" +msgstr "Grupy użytkowników" + +msgid "Hosts" +msgstr "Komputery" + +msgid "Host Groups" +msgstr "Grupy komputerów" + +msgid "Services" +msgstr "Usługi" + +msgid "Service Groups" +msgstr "Grupy usług" + +msgid "External host" +msgstr "Zewnętrzny komputer" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Member hosts" +msgid "member host" +msgstr "Element komputerów" + +msgid "hosts to add" +msgstr "" + +#, fuzzy +#| msgid "Member host-groups" +msgid "member host group" +msgstr "Element grupy komputerów" + +#, fuzzy +#| msgid "Host Groups" +msgid "host groups to add" +msgstr "Grupy komputerów" + +msgid "Members that could not be added" +msgstr "Elementy, które nie mogły zostać dodane" + +msgid "Number of members added" +msgstr "Liczba dodanych elementów" + +msgid "Add services to an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Member services" +msgid "member HBAC service" +msgstr "Usługi elementów" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC services to add" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "Member service groups" +msgid "member HBAC service group" +msgstr "Grupy usługi elementów" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups to add" +msgstr "Opis grupy usługi HBAC" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "member user" +msgstr "Elementy użytkowników" + +msgid "users to add" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "member group" +msgstr "Elementy grupy" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "Liczba elementów, które nie mogły zostać usunięte" + +msgid "Number of members removed" +msgstr "Liczba usuniętych elementów" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC services to remove" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups to remove" +msgstr "Opis grupy usługi HBAC" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Number of members removed" +msgid "users to remove" +msgstr "Liczba usuniętych elementów" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "Nazwa usługi" + +#, fuzzy +#| msgid "Services" +msgid "HBAC service" +msgstr "Usługi" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service description" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "Member service groups" +msgid "Member of HBAC service groups" +msgstr "Grupy usługi elementów" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "Nazwa grupy usługi" + +msgid "HBAC service group description" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "Member services" +msgid "Member HBAC service" +msgstr "Usługi elementów" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Add a new HBAC service group." +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "Member service groups" +msgid "Add members to an HBAC service group." +msgstr "Grupy usługi elementów" + +#, fuzzy +#| msgid "Member service groups" +msgid "Delete an HBAC service group." +msgstr "Grupy usługi elementów" + +msgid "Search for an HBAC service group." +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Modify an HBAC service group." +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "Member service groups" +msgid "Remove members from an HBAC service group." +msgstr "Grupy usługi elementów" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "Nazwa komputera" + +msgid "A description of this host" +msgstr "Opis tego komputera" + +msgid "Locality" +msgstr "Lokalizacja" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Lokalizacja komputera (np. „Baltimore, MD”)" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Położenie komputera (np. „Laboratorium nr 2”)" + +msgid "Platform" +msgstr "Platforma" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Platforma sprzętowa komputera (np. „Lenovo T61”)" + +msgid "Operating system" +msgstr "System operacyjny" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "System operacyjny komputera i jego wersja (np. „Fedora 9”)" + +msgid "User password" +msgstr "Hasło użytkownika" + +msgid "Password used in bulk enrollment" +msgstr "Hasło używane w zapisywaniu większej części" + +#, fuzzy +#| msgid "Password used in bulk enrollment" +msgid "Generate a random password to be used in bulk enrollment" +msgstr "Hasło używane w zapisywaniu większej części" + +#, fuzzy +#| msgid "bind password" +msgid "Random password" +msgstr "hasło Bind" + +msgid "Certificate" +msgstr "Certyfikat" + +msgid "Base-64 encoded server certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +msgid "Principal name" +msgstr "Nazwa naczelnika" + +#, fuzzy +#| msgid "Email address" +msgid "MAC address" +msgstr "Adres e-mail" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "Klasa" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "Element grupy komputerów" + +msgid "Roles" +msgstr "Role" + +#, fuzzy +#| msgid "Member of groups" +msgid "Member of netgroups" +msgstr "Członek grup" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of Sudo rule" +msgstr "Element grupy" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of HBAC rule" +msgstr "Element grupy" + +#, fuzzy +#| msgid "Member of group" +msgid "Indirect Member of netgroup" +msgstr "Członek grupy" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Indirect Member of host-group" +msgstr "Element grupy komputerów" + +#, fuzzy +#| msgid "Member of group" +msgid "Indirect Member of role" +msgstr "Członek grupy" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "Tabela kluczy" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +#, fuzzy +#| msgid "Failed to close the keytab\n" +msgid "Users allowed to retrieve keytab" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +#, fuzzy +#| msgid "Failed to close the keytab\n" +msgid "Groups allowed to retrieve keytab" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +#, fuzzy +#| msgid "Failed to close the keytab\n" +msgid "Hosts allowed to retrieve keytab" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Users allowed to create keytab" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Groups allowed to create keytab" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Hosts allowed to create keytab" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Host Groups allowed to create keytab" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy +#| msgid "Add and Close" +msgid "Add a new host." +msgstr "Dodaj i zamknij" msgid "force host name even if not in DNS" msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a host." +msgstr "Usunąć wszystko?" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "host group" +msgstr "Grupa komputerów" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "netgroup" +msgstr "Grupy sieciowe" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "Nazwa naczelnika Kerberosa dla tego komputera" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "file to store certificate in" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "Grupa komputerów" + +msgid "Name of host-group" +msgstr "Nazwa grupy komputerów" + +msgid "A description of this host-group" +msgstr "Opis tej grupy komputerów" + +msgid "Member hosts" +msgstr "Element komputerów" + +msgid "Member host-groups" +msgstr "Element grupy komputerów" + +#, fuzzy +#| msgid "Member hosts" +msgid "Indirect Member hosts" +msgstr "Element komputerów" + +#, fuzzy +#| msgid "Member host-groups" +msgid "Indirect Member host-groups" +msgstr "Element grupy komputerów" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Add a new hostgroup." +msgstr "Nazwa grupy komputerów" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Add members to a hostgroup." +msgstr "Element grupy komputerów" + +#, fuzzy +#| msgid "Deleted hostgroup \"%(value)s\"" +msgid "Delete a hostgroup." +msgstr "Usunięto grupę komputerów „%(value)s”" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Search for hostgroups." +msgstr "Element grupy komputerów" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Modify a hostgroup." +msgstr "Element grupy komputerów" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Remove members from a hostgroup." +msgstr "Element grupy komputerów" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "Nazwa grupy" + +msgid "GID" +msgstr "GID" + +#, fuzzy +#| msgid "Group name" +msgid "Group ID Number" +msgstr "Nazwa grupy" + +msgid "User login" +msgstr "Login użytkownika" + +msgid "UID" +msgstr "UID" + +#, fuzzy +#| msgid "Pager Number" +msgid "User ID Number" +msgstr "Numer pagera" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "Katalog domowy" + +msgid "Login shell" +msgstr "Powłoka logowania" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "hosts" +msgstr "Komputery" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts to apply the ID View to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +#, fuzzy +#| msgid "Host-group" +msgid "hostgroups" +msgstr "Grupa komputerów" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts that this ID View was applied to." +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +#, fuzzy +#| msgid "Service category the rule applies to" +msgid "Enumerate all the hosts the view applies to." +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "Słownik komunikatów umiędzynaradawiania" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "Nazwa obiektu do wyeksportowania" + +#, fuzzy +#| msgid "Name of object to export" +msgid "Name of method to export" +msgstr "Nazwa obiektu do wyeksportowania" + +#, fuzzy +#| msgid "Name of object to export" +msgid "Name of command to export" +msgstr "Nazwa obiektu do wyeksportowania" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" + +#, fuzzy +#| msgid "Dict of JSON encoded IPA Objects" +msgid "Dict of JSON encoded IPA Methods" +msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" + +#, fuzzy +#| msgid "Dict of JSON encoded IPA Objects" +msgid "Dict of JSON encoded IPA Commands" +msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "Nazwa komputera, pod jaką zarejestrować" + +msgid "The IPA realm" +msgstr "Obszar IPA" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Platforma sprzętowa komputera (np. Lenovo T61)" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "System operacyjny komputera i jego wersja (np. Fedora 9)" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "Nazwa użytkownika" + +msgid "Manage ticket policy for specific user" +msgstr "Zarządzanie polityką zgłoszeń dla podanego użytkownika" + +msgid "Max life" +msgstr "Maksymalny czas życia" + +msgid "Maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +msgid "Max renew" +msgstr "Maksymalne odnowienie" + +msgid "Maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, fuzzy +#| msgid "Kerberos Ticket Policy" +msgid "Modify Kerberos ticket policy." +msgstr "Polityka zgłoszeń Kerberosa" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +#, fuzzy +#| msgid "Display user record for current Kerberos principal" +msgid "Display the current Kerberos ticket policy." +msgstr "Wyświetlenie wpisu użytkownika dla bieżącego naczelnika Kerberosa" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "Adres URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "Adres URI LDAP serwera DS, z którego migrować" + +msgid "bind password" +msgstr "hasło Bind" + +msgid "Bind DN" +msgstr "DN dowiązania" + +msgid "User container" +msgstr "Kontener użytkownika" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "Kontener grupy" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "Schemat LDAP" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CA certificate" +msgstr "Certyfikat" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "Lista migrowanych obiektów, ułożonych w kategorie według typu." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" +"Lista obiektów, które nie mogły zostać migrowane, ułożonych w kategorie " +"według typu." + +msgid "False if migration mode was disabled." +msgstr "Fałsz, jeśli wyłączono tryb migracji" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "Przekazanie do serwera zamiast uruchamiania lokalnie" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "Nazwa zmiennej mapowania słownika do ustawienia jako wartość" + +msgid "Total number of variables env (>= count)" +msgstr "Całkowita liczba zmiennych środowiskowych (>= licznik)" + +msgid "Number of variables returned (<= total)" +msgstr "Liczba zwróconych zmiennych (<= razem)" + +msgid "Show all loaded plugins." +msgstr "" + +#, fuzzy +#| msgid "Dictionary mapping variable name to value" +msgid "Dictionary mapping plugin names to bases" +msgstr "Nazwa zmiennej mapowania słownika do ustawienia jako wartość" + +msgid "Number of plugins loaded" +msgstr "Liczba wczytanych wtyczek" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "Nazwa grupy sieciowej" + +msgid "Netgroup description" +msgstr "Opis grupy sieciowej" + +msgid "NIS domain name" +msgstr "Nazwa domeny NIS" + +msgid "IPA unique ID" +msgstr "Unikalny identyfikator IPA" + +#, fuzzy +#| msgid "Member groups" +msgid "Member netgroups" +msgstr "Elementy grupy" + +#, fuzzy +#| msgid "Member groups" +msgid "Indirect Member netgroups" +msgstr "Elementy grupy" + +#, fuzzy +#| msgid "Member users" +msgid "Member User" +msgstr "Elementy użytkowników" + +#, fuzzy +#| msgid "Member groups" +msgid "Member Group" +msgstr "Elementy grupy" + +msgid "Member Host" +msgstr "Komputer elementu" + +#, fuzzy +#| msgid "Member host-groups" +msgid "Member Hostgroup" +msgstr "Element grupy komputerów" + +msgid "Add a new netgroup." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Add members to a netgroup." +msgstr "Element grupy" + +#, fuzzy +#| msgid "Member groups" +msgid "member netgroup" +msgstr "Elementy grupy" + +#, fuzzy +#| msgid "Netgroups" +msgid "netgroups to add" +msgstr "Grupy sieciowe" + +msgid "Delete a netgroup." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Search for a netgroup." +msgstr "Element grupy" + +#, fuzzy +#| msgid "Not a managed group" +msgid "search for managed groups" +msgstr "Nie jest zarządzaną grupą" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +#, fuzzy +#| msgid "Group" +msgid "group" +msgstr "Grupa" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Modify a netgroup." +msgstr "Element grupy" + +#, fuzzy +#| msgid "Member of a group" +msgid "Remove members from a netgroup." +msgstr "Element grupy" + +#, fuzzy +#| msgid "Netgroup name" +msgid "netgroups to remove" +msgstr "Nazwa grupy sieciowej" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Set a user's password." +msgstr "Hasło użytkownika" + +msgid "New Password" +msgstr "Nowe hasło" + +#, fuzzy +#| msgid "New Password" +msgid "Current Password" +msgstr "Nowe hasło" + +#, fuzzy +#| msgid "Set OTP" +msgid "OTP" +msgstr "Ustaw OTP" + +#, fuzzy +#| msgid "New Password" +msgid "One Time Password" +msgstr "Nowe hasło" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission name" +msgstr "Uprawnienia" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Effective attributes" +msgstr "Atrybuty" + +msgid "All attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Included attributes" +msgstr "Atrybuty" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Excluded attributes" +msgstr "Atrybuty" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Default attributes" +msgstr "Atrybuty" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Bind rule type" +msgstr "Typ reguły" + +#, fuzzy +#| msgid "Subtree to apply ACI to" +msgid "Subtree to apply permissions to" +msgstr "Poddrzewo, do którego zastosować ACI" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Target DN" +msgstr "Cel" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "Członek grupy" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +#, fuzzy +#| msgid "Member of groups" +msgid "Indirect Member of roles" +msgstr "Członek grup" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +#, fuzzy +#| msgid "Member services" +msgid "member privilege" +msgstr "Usługi elementów" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission flags" +msgstr "Uprawnienia" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +msgid "Modify a permission." +msgstr "" + +#, fuzzy +#| msgid "Credentials cache permissions incorrect" +msgid "Rename the permission object" +msgstr "" +"Uprawnienia pamięci podręcznej danych uwierzytelniających są niepoprawne" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "Principal name" +msgid "Privilege name" +msgstr "Nazwa naczelnika" + +#, fuzzy +#| msgid "description" +msgid "Privilege description" +msgstr "opis" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +#, fuzzy +#| msgid "member %s" +msgid "member role" +msgstr "członek %s" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "permission" +msgstr "Uprawnienia" + +#, fuzzy +#| msgid "Permissions" +msgid "permissions" +msgstr "Uprawnienia" + +#, fuzzy +#| msgid "Number of members added" +msgid "Number of permissions added" +msgstr "Liczba dodanych elementów" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a privilege." +msgstr "Usunąć wszystko?" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +#, fuzzy +#| msgid "Unable to remove entry\n" +msgid "roles to remove" +msgstr "Nie można usunąć wpisu\n" + +msgid "Remove permissions from a privilege." +msgstr "" + +#, fuzzy +#| msgid "Number of members removed" +msgid "Number of permissions removed" +msgstr "Liczba usuniętych elementów" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "Grupa" + +msgid "Manage password policy for specific group" +msgstr "Zarządzanie polityką haseł dla podanej grupy" + +msgid "Max lifetime (days)" +msgstr "Maksymalny czas życia (w dniach)" + +msgid "Maximum password lifetime (in days)" +msgstr "Maksymalny czas życia hasła (w dniach)" + +msgid "Min lifetime (hours)" +msgstr "Minimalny czas życia (w godzinach)" + +msgid "Minimum password lifetime (in hours)" +msgstr "Minimalny czas życia hasła (w godzinach)" + +msgid "History size" +msgstr "Rozmiar historii" + +msgid "Password history size" +msgstr "Rozmiar historii haseł" + +msgid "Character classes" +msgstr "Klasy znaków" + +msgid "Minimum number of character classes" +msgstr "Minimalna liczba klas znaków" + +msgid "Min length" +msgstr "Minimalna długość" + +msgid "Minimum length of password" +msgstr "Minimalna długość hasła" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" + +#, fuzzy +#| msgid "Max life" +msgid "Max failures" +msgstr "Maksymalny czas życia" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Lockout duration" +msgstr "Położenie" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "Użytkownik" + +msgid "Display effective policy for a specific user" +msgstr "Wyświetlanie aktywnej polityki dla podanego użytkownika" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +#, fuzzy +#| msgid "A description of this host" +msgid "A description of this RADIUS proxy server" +msgstr "Opis tego komputera" + +#, fuzzy +#| msgid "Services" +msgid "Server" +msgstr "Usługi" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +#, fuzzy +#| msgid "Retry" +msgid "Retries" +msgstr "Ponów" + +msgid "The number of times to retry authentication" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "User attribute" +msgstr "Atrybut" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete domain" +msgstr "Usunąć wszystko?" + +msgid "Modify realm domains." +msgstr "" + +#, fuzzy +#| msgid "force principal name even if not in DNS" +msgid "Force adding domain even if not in DNS" +msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Role name" +msgstr "Nazwa reguły" + +msgid "A description of this role-group" +msgstr "Opis tej grupy rol" + +msgid "Member users" +msgstr "Elementy użytkowników" + +msgid "Member groups" +msgstr "Elementy grupy" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "Usługi elementów" + +#, fuzzy +#| msgid "Add and Close" +msgid "Add a new role." +msgstr "Dodaj i zamknij" + +#, fuzzy +#| msgid "Member of a group" +msgid "Add members to a role." +msgstr "Element grupy" + +#, fuzzy +#| msgid "Member services" +msgid "member service" +msgstr "Usługi elementów" + +#, fuzzy +#| msgid "Services" +msgid "services to add" +msgstr "Usługi" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +#, fuzzy +#| msgid "Number of members added" +msgid "Number of privileges added" +msgstr "Liczba dodanych elementów" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a role." +msgstr "Usunąć wszystko?" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "services to remove" +msgstr "Nazwa grupy usługi" + +msgid "Remove privileges from a role." +msgstr "" + +#, fuzzy +#| msgid "Number of members removed" +msgid "Number of privileges removed" +msgstr "Liczba usuniętych elementów" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Self-service name" +msgstr "Nazwa usługi" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "Naczelnik" + +msgid "Service principal" +msgstr "Naczelnik usługi" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + msgid "force principal name even if not in DNS" msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" -#, c-format -msgid "fork() failed\n" -msgstr "fork() się nie powiodło\n" +msgid "Add hosts that can manage this service." +msgstr "" -msgid "incorrect type" -msgstr "niepoprawny typ" +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab ma błędne uprawnienia?\n" +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "nie odnaleziono ipa-getkeytab\n" +msgid "Delete an IPA service." +msgstr "" -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "Polecenie sudo" + +msgid "A description of this command" +msgstr "Opis tego polecenia" + +msgid "Sudo Command Groups" +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Create new Sudo Command." +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Delete Sudo Command." +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Search for Sudo Commands." +msgstr "Polecenie sudo" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Modify Sudo Command." +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Display Sudo Command." +msgstr "Polecenie sudo" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Sudo Command Group" +msgstr "Grupy polecenia sudo" + +msgid "Group description" +msgstr "Opis grupy" + +msgid "Commands" +msgstr "Polecenia" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Member Sudo commands" +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Create new Sudo Command Group." +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Add members to Sudo Command Group." +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "member sudo command" +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "sudo commands to add" +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Delete Sudo Command Group." +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Search for Sudo Command Groups." +msgstr "Grupy polecenia sudo" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Modify Sudo Command Group." +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Remove members from Sudo Command Group." +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "sudo commands to remove" +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Display Sudo Command Group." +msgstr "Grupy polecenia sudo" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Imię" + +msgid "Last name" +msgstr "Nazwisko" + +msgid "Full name" +msgstr "Pełna nazwa" + +#, fuzzy +#| msgid "First name" +msgid "Display name" +msgstr "Imię" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "Naczelnik Kerberosa" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Kerberos principal expiration" +msgstr "Naczelnik Kerberosa" + +msgid "Email address" +msgstr "Adres e-mail" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Numer identyfikacyjny użytkownika (system go przydzieli, jeśli nie zostanie " +"podany)" + +msgid "Street address" +msgstr "Adres zamieszkania" + +msgid "City" +msgstr "Miasto" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "Numer telefonu" + +msgid "Mobile Telephone Number" +msgstr "Numer telefonu komórkowego" + +msgid "Pager Number" +msgstr "Numer pagera" + +msgid "Fax Number" +msgstr "Numer faksu" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +#| msgid "%(count)d variables" +msgid "Account disabled" +msgstr "%(count)d zmiennych" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "RADIUS proxy configuration" +msgstr "Konfiguracja" + +msgid "RADIUS proxy username" +msgstr "" + +#, fuzzy +#| msgid "Pager Number" +msgid "Department Number" +msgstr "Numer pagera" + +#, fuzzy +#| msgid "Telephone Number" +msgid "Employee Number" +msgstr "Numer telefonu" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "Członek grup" + +#, fuzzy +#| msgid "Member of group" +msgid "Indirect Member of group" +msgstr "Członek grupy" + +msgid "Kerberos keys available" +msgstr "" + +#, fuzzy +#| msgid "Add and Close" +msgid "Add a new user." +msgstr "Dodaj i zamknij" + +#, fuzzy +#| msgid "Default users group" +msgid "Don't create user private group" +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a user." +msgstr "Usunąć wszystko?" + +#, fuzzy +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disable a user account." +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, fuzzy +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enable a user account." +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "Własny" + +msgid "Display user record for current Kerberos principal" +msgstr "Wyświetlenie wpisu użytkownika dla bieżącego naczelnika Kerberosa" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this auto member rule" +msgstr "Opis tego polecenia" + +#, fuzzy +#| msgid "Default users group" +msgid "Default (fallback) Group" +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for entries to land" +msgstr "Domyślna grupa dla nowych użytkowników" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Grouping Type" +msgstr "Nazwa grupy" + +#, fuzzy +#| msgid "Service category the rule applies to" +msgid "Grouping to which the rule applies" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "Attribute Key" +msgstr "Atrybut" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +#, fuzzy +#| msgid "Members that could not be added" +msgid "Conditions that could not be added" +msgstr "Elementy, które nie mogły zostać dodane" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of conditions added" +msgstr "Liczba wczytanych wtyczek" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +#, fuzzy +#| msgid "Members that could not be removed" +msgid "Conditions that could not be removed" +msgstr "Liczba elementów, które nie mogły zostać usunięte" + +#, fuzzy +#| msgid "Number of members removed" +msgid "Number of conditions removed" +msgstr "Liczba usuniętych elementów" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "Search for existing certificates." +msgstr "Przyczyna unieważnienia certyfikatu (0-10)" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "Przyczyna" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Przyczyna unieważnienia certyfikatu (0-10)" + +#, fuzzy +#| msgid "Serial number" +msgid "minimum serial number" +msgstr "Numer seryjny" + +#, fuzzy +#| msgid "Serial number" +msgid "maximum serial number" +msgstr "Numer seryjny" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of certs returned" +msgstr "Maksymalna liczba zwróconych wpisów" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Take a revoked certificate off hold." +msgstr "Odrzuć certyfikat." + +msgid "Serial number" +msgstr "Numer seryjny" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" +"Numer seryjny w formie dziesiętnej lub szesnastkowej, jeśli poprzedzone 0x" + +#, fuzzy +#| msgid "Failure decoding Certificate Signing Request: %s" +msgid "Submit a certificate signing request." +msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" + +msgid "Revoke a certificate." +msgstr "Odrzuć certyfikat." + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Retrieve an existing certificate." +msgstr "Odrzuć certyfikat." + +msgid "Output filename" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "File to store the certificate in." +msgstr "Odrzuć certyfikat." + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "Identyfikator żądania" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "GID (ta opcja umożliwia jego ręczne ustawienie)" + +#, fuzzy +#| msgid "Member users" +msgid "Indirect Member users" +msgstr "Elementy użytkowników" + +#, fuzzy +#| msgid "Member groups" +msgid "Indirect Member groups" +msgstr "Elementy grupy" + +#, fuzzy +#| msgid "Not a managed group" +msgid "Create a new group." +msgstr "Nie jest zarządzaną grupą" + +#, fuzzy +#| msgid "change to a POSIX group" +msgid "Create as a non-POSIX group" +msgstr "zmiana na grupę POSIX" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Add members to a group." +msgstr "Element grupy" + +#, fuzzy +#| msgid "External host" +msgid "External member" +msgstr "Zewnętrzny komputer" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Delete group." +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +#| msgid "Not a managed group" +msgid "Detach a managed group from a user." +msgstr "Nie jest zarządzaną grupą" + +#, fuzzy +#| msgid "Member of groups" +msgid "Search for groups." +msgstr "Członek grup" + +msgid "search for private groups" +msgstr "" + +#, fuzzy +#| msgid "change to a POSIX group" +msgid "search for POSIX groups" +msgstr "zmiana na grupę POSIX" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +#| msgid "change to a POSIX group" +msgid "search for non-POSIX groups" +msgstr "zmiana na grupę POSIX" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Modify a group." +msgstr "Element grupy" + +msgid "change to a POSIX group" +msgstr "zmiana na grupę POSIX" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Remove members from a group." +msgstr "Element grupy" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Target host" +msgstr "Cel" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +#, fuzzy +#| msgid "Not a managed group" +msgid "Not matched rules" +msgstr "Nie jest zarządzaną grupą" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "NetBIOS name" +msgstr "Nazwa grupy sieciowej" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain name" +msgstr "Nazwa domeny NIS" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "Range type" +msgstr "Typ reguły" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a trust." +msgstr "Usunąć wszystko?" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Rule name" +msgid "Range name" +msgstr "Nazwa reguły" + +msgid "First Posix ID of the range" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of IDs in the range" +msgstr "Liczba wczytanych wtyczek" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#, fuzzy +#| msgid "IPA unique ID" +msgid "Unique ID" +msgstr "Unikalny identyfikator IPA" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Disabled" +msgstr "Włączone" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +#| msgid "SOA serial" +msgid "Serial" +msgstr "Numer seryjny SOA" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "Command category" +msgstr "Kategoria komputerów" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Command category the rule applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +#, fuzzy +#| msgid "User category" +msgid "RunAs User category" +msgstr "Kategoria użytkowników" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "RunAs User category the rule applies to" +msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" + +#, fuzzy +#| msgid "User category" +msgid "RunAs Group category" +msgstr "Kategoria użytkowników" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "RunAs Group category the rule applies to" +msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Sudo order" +msgstr "Polecenie sudo" + +msgid "integer to order the Sudo rules" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "External User" +msgstr "Zewnętrzny komputer" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host Masks" +msgstr "Komputery" + +msgid "Sudo Allow Commands" +msgstr "Polecenia zezwolone sudo" + +msgid "Sudo Deny Commands" +msgstr "Polecenia zabronione sudo" + +#, fuzzy +#| msgid "Sudo Allow Commands" +msgid "Sudo Allow Command Groups" +msgstr "Polecenia zezwolone sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Sudo Deny Command Groups" +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Users" +msgid "RunAs Users" +msgstr "Użytkownicy" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "RunAs External User" +msgstr "Zewnętrzny komputer" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "RunAs Groups" +msgstr "Grupy komputerów" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "RunAs External Group" +msgstr "Zewnętrzny komputer" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Sudo Option" +msgstr "Polecenie sudo" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "member sudo command group" +msgstr "Element grupy" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "sudo command groups to add" +msgstr "Grupy polecenia sudo" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "sudo command groups to remove" +msgstr "Grupy polecenia sudo" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Time limit of search in seconds" +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Ograniczenie czasu wyszukiwania w sekundach" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Maksymalna liczba zwróconych wpisów" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "ACL name" +msgstr "Nazwa ACI" + +#, fuzzy +#| msgid "Service category" +msgid "Profile category" +msgstr "Kategoria usług" + +#, fuzzy +#| msgid "Service category the rule applies to" +msgid "Profile category the ACL applies to" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "User category the ACL applies to" +msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Host category the ACL applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +#, fuzzy +#| msgid "Service category the rule applies to" +msgid "Service category the ACL applies to" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "member Certificate Profile" +msgstr "Nowy certyfikat" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate Profiles to add" +msgstr "Odrzucono certyfikat" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate Profiles to remove" +msgstr "Odrzucono certyfikat" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "Maksymalna liczba zwróconych wpisów" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Add to default group" +msgstr "Domyślna grupa użytkowników" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +#, fuzzy +#| msgid "Search" +msgid "Search scope" +msgstr "Wyszukaj" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server name" +msgstr "Nazwa serwera" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA server hostname" +msgstr "Serwer IPA do użycia" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +msgid "Search for IPA servers." +msgstr "" + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Allowed Target" +msgstr "Cel" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "member principal" +msgstr "Naczelnik Kerberosa" + +#, fuzzy +#| msgid "principal not found\n" +msgid "principal to add" +msgstr "nie odnaleziono naczelnika\n" + +msgid "Add target to a named service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "Member service groups" +msgid "member service delegation target" +msgstr "Grupy usługi elementów" + +msgid "service delegation targets to add" +msgstr "" + +#, fuzzy +#| msgid "Deleted service \"%(value)s\"" +msgid "Delete service delegation." +msgstr "Usunięto usługę „%(value)s”" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "principal not found\n" +msgid "principal to remove" +msgstr "nie odnaleziono naczelnika\n" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +#, fuzzy +#| msgid "Delete all associated records" +msgid "Delete a stage user." +msgstr "Usuń wszystkie powiązane wpisy" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Search for stage users." +msgstr "Domyślna grupa dla nowych użytkowników" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Segment name" +msgstr "Nazwa usługi" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +#, fuzzy +#| msgid "Rights" +msgid "Right node" +msgstr "Uprawnienia" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to strip" +msgstr "Atrybuty" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to replicate" +msgstr "Atrybuty" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Session timeout" +msgstr "Czas dostępu" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Suffix name" +msgstr "Nazwa usługi" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Preserved user" +msgstr "Elementy użytkowników" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Vault name" +msgstr "Nazwisko" + +#, fuzzy +#| msgid "description" +msgid "Vault description" +msgstr "opis" + +#, fuzzy +#| msgid "Rule type" +msgid "Vault type" +msgstr "Typ reguły" + +msgid "Salt" +msgstr "" + +#, fuzzy +#| msgid "Default shell" +msgid "Vault salt" +msgstr "Domyślna powłoka" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Owner users" +msgstr "Elementy użytkowników" + +#, fuzzy +#| msgid "User group" +msgid "Owner groups" +msgstr "Grupa użytkowników" + +#, fuzzy +#| msgid "Member services" +msgid "Owner services" +msgstr "Usługi elementów" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Vault user" +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +#| msgid "Certificate" +msgid "Transport Certificate" +msgstr "Certyfikat" + +#, fuzzy +#| msgid "Service category the rule applies to" +msgid "Service name of the service vault" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Username of the user vault" +msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "owner user" +msgstr "Elementy użytkowników" + +#, fuzzy +#| msgid "User group" +msgid "owner group" +msgstr "Grupa użytkowników" + +#, fuzzy +#| msgid "Member services" +msgid "owner service" +msgstr "Usługi elementów" + +#, fuzzy +#| msgid "Members that could not be added" +msgid "Owners that could not be added" +msgstr "Elementy, które nie mogły zostać dodane" + +#, fuzzy +#| msgid "Number of members added" +msgid "Number of owners added" +msgstr "Liczba dodanych elementów" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a vault." +msgstr "Usunąć wszystko?" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +#, fuzzy +#| msgid "Members that could not be removed" +msgid "Owners that could not be removed" +msgstr "Liczba elementów, które nie mogły zostać usunięte" + +#, fuzzy +#| msgid "Number of members removed" +msgid "Number of owners removed" +msgstr "Liczba usuniętych elementów" + +msgid "Display information about a vault." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Show vault configuration." +msgstr "Konfiguracja" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +#, fuzzy +#| msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" + +msgid "Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate Subject base" +msgid "Certificate Profile to use" +msgstr "Podstawa tematu certyfikatu" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Profile description" +msgstr "Opis grupy" + +#, fuzzy +#| msgid "A description of this role-group" +msgid "Brief description of this profile" +msgstr "Opis tej grupy rol" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Store issued certificates" +msgstr "Odrzuć certyfikat." + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Delete a Certificate Profile." +msgstr "Odrzuć certyfikat." + +msgid "Search for Certificate Profiles." +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Import a Certificate Profile." +msgstr "Odrzuć certyfikat." + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +#, fuzzy +#| msgid "cannot open configuration file %s\n" +msgid "Write profile configuration to file" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +#, fuzzy +#| msgid "Zone name (FQDN)" +msgid "Hostname (FQDN)" +msgstr "Nazwa strefy (FQDN)" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Remote server name" +msgstr "Nazwa serwera" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "Remote IPA server hostname" +msgstr "Serwer IPA do użycia" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +#, fuzzy +#| msgid "SOA class" +msgid "DNS class" +msgstr "Klasa SOA" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "NSEC Next Domain Name" +msgstr "Nazwa domeny NIS" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Next Domain Name" +msgstr "Nazwa domeny NIS" + +msgid "NSEC Type Map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "Typ" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Signer's Name" +msgstr "Nazwa serwera" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +#, fuzzy +#| msgid "Time to live" +msgid "SOA time to live" +msgstr "Czas życia" + +#, fuzzy +#| msgid "Time to live" +msgid "SOA record time to live" +msgstr "Czas życia" + +msgid "SOA class" +msgstr "Klasa SOA" + +#, fuzzy +#| msgid "SOA class" +msgid "SOA record class" +msgstr "Klasa SOA" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "Polecenie nie jest zaimplementowane" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "Username" +msgstr "Nazwa użytkownika" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "Polecenie nie jest zaimplementowane" + +#, fuzzy +#| msgid "User password" +msgid "Registration password" +msgstr "Hasło użytkownika" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "Source host category" +msgstr "Kategoria komputerów" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Source host category the rule applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +msgid "Source Hosts" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "Source Host Groups" +msgstr "Grupy komputerów" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Target members of a group" +msgstr "Element grupy" + +#, fuzzy +#| msgid "Group to apply ACI to" +msgid "User group to apply permissions to" +msgstr "Grupa, do której zastosować ACI" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission type" +msgstr "Uprawnienia" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +#, fuzzy +#| msgid "Comma separated encryption types list" +msgid "comma-separated list of permissions" +msgstr "Lista typów szyfrowania oddzielonych przecinkami" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d zmiennych" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "Wczytano %(count)d wtyczkę" +msgstr[1] "Wczytano %(count)d wtyczki" +msgstr[2] "Wczytano %(count)d wtyczek" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Proszę podać %(label)s ponownie, aby sprawdzić: " + +msgid "Passwords do not match!" +msgstr "Hasła się nie zgadzają." + +msgid "No matching entries found" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Topic or Command" +msgstr "Polecenie sudo" + +msgid "The topic or command name." +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Topic commands:" +msgstr "Polecenia" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Command name" +msgstr "Polecenia" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "Słownik reprezentujący wpis LDAP" + +msgid "A list of LDAP entries" +msgstr "Lista wpisów LDAP" + +msgid "All commands should at least have a result" +msgstr "Wszystkie polecenia powinny powiadać przynajmniej wynik" + +msgid "Results are truncated, try a more specific search" +msgstr "" +"Wyniki zostały obcięte, proszę spróbować bardziej konkretnego wyszukiwania" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "wystąpił wewnętrzny błąd" + +#, fuzzy, python-format +#| msgid "an internal error has occurred" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "wystąpił wewnętrzny błąd" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "error on server '%(server)s': %(error)s" +msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Błąd Kerberosa: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "nie otrzymano danych uwierzytelniających Kerberosa" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "Nie odnaleziono pamięci podręcznej danych uwierzytelniających" + +msgid "Ticket expired" +msgstr "Zgłoszenie wygasło" + +msgid "Credentials cache permissions incorrect" +msgstr "" +"Uprawnienia pamięci podręcznej danych uwierzytelniających są niepoprawne" + +msgid "Bad format in credentials cache" +msgstr "Błędny format w pamięci podręcznej danych uwierzytelniających" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Nie można rozwiązać KDC dla żądanego obszaru" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Niewystarczający dostęp: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "invalid '%(name)s': %(error)s" +msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "Hasła się nie zgadzają" + +msgid "Command not implemented" +msgstr "Polecenie nie jest zaimplementowane" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Ten wpis już istnieje" + +msgid "You must enroll a host in order to create a host service" +msgstr "Należy zapisać się do komputera, aby utworzyć jego usługę" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Naczelnik usługi nie jest w formacie: usługa/w pełni kwalifikowana nazwa " +"komputera: %(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Obszar naczelnika nie zgadza się z obszarem dla tego serwera IPA" + +msgid "This command requires root access" +msgstr "To polecenie wymaga dostępu roota" + +msgid "This is already a posix group" +msgstr "To jest już grupa POSIX" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already enabled" +msgstr "Ten wpis już istnieje" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already disabled" +msgstr "Ten wpis już istnieje" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "Grupa nie może być własnym elementem" + +#, fuzzy +#| msgid "This entry already exists" +msgid "This entry is already a member" +msgstr "Ten wpis już istnieje" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Dekodowanie base64 się nie powiodło: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Nie można dodać grupy jako elementu jej samej" + +msgid "The default users group cannot be removed" +msgstr "Nie można usunąć domyślnej grupy użytkowników" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"Usuwanie zarządzanej grupy nie jest dozwolone. Musi zostać najpierw " +"odłączona." + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, fuzzy, python-format +#| msgid "Revoke a certificate." +msgid "'%(entry)s' doesn't have a certificate." +msgstr "Odrzuć certyfikat." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s nie zawiera „%(value)s”" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(attr)s does not contain '%(value)s'" +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s nie zawiera „%(value)s”" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "zmiana koliduje z inną zmianą" + +msgid "no modifications to be performed" +msgstr "żadne modyfikacje nie zostaną wykonane" + +#, fuzzy, python-format +#| msgid "%(info)s" +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" msgid "limits exceeded for this query" msgstr "przekroczono ograniczenia dla tego zapytania" #, python-format -msgid "member %s" -msgstr "członek %s" +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, fuzzy, python-format +#| msgid "Only one value is allowed" +msgid "%(attr)s: Only one value allowed." +msgstr "Dozwolona jest tylko jedna wartość" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "Not allowed on non-leaf entry" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Błąd formatu certyfikatu: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(reason)s" +msgid "%(exception)s" +msgstr "%(reason)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "niepoprawny typ" + +msgid "Only one value is allowed" +msgstr "Dozwolona jest tylko jedna wartość" + +msgid "this option is deprecated" +msgstr "" msgid "must be True or False" msgstr "musi być prawdą lub fałszem" -msgid "must be Unicode text" -msgstr "musi być tekstem w unikodzie" +msgid "must be an integer" +msgstr "musi być liczba całkowitą" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "może wynosić co najwyżej %(maxvalue)d" msgid "must be a decimal number" msgstr "musi być liczbą dziesiętną" -msgid "must be an integer" -msgstr "musi być liczba całkowitą" +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minvalue)s" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(maxvalue)s" +msgstr "może wynosić co najwyżej %(maxvalue)d" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "musi pasować do wzorca „%(pattern)s”" + +msgid "must be binary data" +msgstr "musi być danymi binarnymi" #, python-format msgid "must be at least %(minlength)d bytes" msgstr "musi wynosić co najmniej %(minlength)d bajtów" #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "musi wynosić co najmniej %(minlength)d znaków" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "musi wynosić co najmniej %(minvalue)d" - -msgid "must be binary data" -msgstr "musi być danymi binarnymi" +msgid "can be at most %(maxlength)d bytes" +msgstr "może wynosić co najwyżej %(maxlength)d bajtów" #, python-format msgid "must be exactly %(length)d bytes" msgstr "musi wynosić dokładnie %(length)d bajtów" +#, fuzzy +#| msgid "Revoke a certificate." +msgid "must be a certificate" +msgstr "Odrzuć certyfikat." + +#, fuzzy +#| msgid "Failure decoding Certificate Signing Request: %s" +msgid "must be a certificate signing request" +msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" + +msgid "must be Unicode text" +msgstr "musi być tekstem w unikodzie" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "musi wynosić co najmniej %(minlength)d znaków" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "może wynosić co najwyżej %(maxlength)d znaków" + #, python-format msgid "must be exactly %(length)d characters" msgstr "musi wynosić dokładnie %(length)d znaków" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "musi pasować do wzorca „%(pattern)s”" +msgid "The character %(char)r is not allowed." +msgstr "" -msgid "no modifications to be performed" -msgstr "żadne modyfikacje nie zostaną wykonane" +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "must be '%(value)s'" +msgstr "Odnaleziono „%(value)s”" -msgid "not allowed to modify group entries" -msgstr "modyfikowanie wpisów grup nie jest dozwolone" +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be one of %(values)s" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be datetime value" +msgstr "musi wynosić co najmniej %(minvalue)d" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be DNS name" +msgstr "musi być liczba całkowitą" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be absolute" +msgstr "musi być liczba całkowitą" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be relative" +msgstr "musi być prawdą lub fałszem" + +#, fuzzy +#| msgid "must be binary data" +msgid "must be dictionary" +msgstr "musi być danymi binarnymi" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "must be Kerberos principal" +msgstr "Naczelnik Kerberosa" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Malformed principal: '%(value)s'" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy +#| msgid "Service principal" +msgid "Service principal is required" +msgstr "Naczelnik usługi" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(filename)s: file not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "Nie można przetworzyć naczelnika\n" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +#, fuzzy +#| msgid "can be at most %(maxlength)d characters" +msgid "cannot be longer that {} characters" +msgstr "może wynosić co najwyżej %(maxlength)d znaków" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, fuzzy, python-format +#| msgid "unknown error %(code)d from %(server)s: %(error)s" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "invalid domain name" +msgstr "Nazwa domeny NIS" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "objectclass %s not found" +msgstr "Nie odnaleziono komputera „%(host)s”" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "Replication agreement for %(hostname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +#, fuzzy +#| msgid "Mount information" +msgid "automount location" +msgstr "Informacje o montowaniu" + +#, fuzzy +#| msgid "Automount Maps" +msgid "automount locations" +msgstr "Automatyczne montowanie map" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount Locations" +msgstr "Automatyczne montowanie map" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount Location" +msgstr "Automatyczne montowanie map" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy +#| msgid "Automount Maps" +msgid "automount map" +msgstr "Automatyczne montowanie map" + +#, fuzzy +#| msgid "Automount Maps" +msgid "automount maps" +msgstr "Automatyczne montowanie map" + +msgid "Automount Maps" +msgstr "Automatyczne montowanie map" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Automount Map" +msgstr "Automatyczne montowanie map" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified automount map \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Automount key object." +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +#| msgid "Automount Keys" +msgid "automount key" +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +#| msgid "Automount Keys" +msgid "automount keys" +msgstr "Automatyczne montowanie kluczy" + +msgid "Automount Keys" +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Automount Key" +msgstr "Automatyczne montowanie kluczy" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key named %(key)s already exists" +msgstr "Ten wpis już istnieje" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified automount key \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "DNS is not configured" +msgid "CA is not configured" +msgstr "DNS nie jest skonfigurowany" + +msgid "invalid Profile ID" +msgstr "" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate Profile" +msgstr "Odrzucono certyfikat" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate Profiles" +msgstr "Odrzucono certyfikat" + +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Konfiguracja" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "CA category" +msgstr "Kategoria komputerów" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "CA category the ACL applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Number of members removed" +msgid "%i user or group removed." +msgstr "Liczba usuniętych elementów" + +#, fuzzy, python-format +#| msgid "Number of members removed" +msgid "%i users or groups removed." +msgstr "Liczba usuniętych elementów" + +#, fuzzy, python-format +#| msgid "%(count)d hostgroup matched" +#| msgid_plural "%(count)d hostgroups matched" +msgid "%i host or hostgroup added." +msgstr "Pasuje %(count)d grupa komputerów" + +#, fuzzy, python-format +#| msgid "%(count)d hostgroup matched" +#| msgid_plural "%(count)d hostgroups matched" +msgid "%i hosts or hostgroups added." +msgstr "Pasuje %(count)d grupa komputerów" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d hostgroup matched" +#| msgid_plural "%(count)d hostgroups matched" +msgid "%i host or hostgroup removed." +msgstr "Pasuje %(count)d grupa komputerów" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i service added." +msgstr "Nazwa usługi" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%i services added." +msgstr "Pasuje %(count)d usługa" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "DNS zone %(zone)s not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +#, fuzzy +#| msgid "Priority" +msgid "Priority (order)" +msgstr "Priorytet" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "DNS nie jest skonfigurowany" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "Dozwolona jest tylko jedna wartość" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "permission \"%(value)s\" already exists" +msgstr "Ten wpis już istnieje" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed system permission \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "DNS zone" +msgstr "" + +#, fuzzy +#| msgid "DNS Zone Settings" +msgid "DNS zones" +msgstr "Ustawienia strefy DNS" + +#, fuzzy +#| msgid "DNS Zone Settings" +msgid "DNS Zones" +msgstr "Ustawienia strefy DNS" + +#, fuzzy +#| msgid "DNS Zone Settings" +msgid "DNS Zone" +msgstr "Ustawienia strefy DNS" + +#, fuzzy +#| msgid "Time to live" +msgid "Default time to live" +msgstr "Czas życia" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +msgid "is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted record \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "Odnaleziono „%(value)s”" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Nie odnaleziono komputera „%(host)s”" + +#, fuzzy +#| msgid "Configuration" +msgid "DNS configuration options" +msgstr "Konfiguracja" + +#, fuzzy +#| msgid "Configuration" +msgid "DNS Global Configuration" +msgstr "Konfiguracja" + +msgid "IPA DNS version" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS servers" +msgstr "Serwer IPA do użycia" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "Result of the command" +msgstr "Opis tego polecenia" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Konfiguracja" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "DNS Servers" +msgstr "Usługi" + +msgid "DNS Server" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "DNS Server name" +msgstr "Nazwa serwera" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "Search for DNS servers." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA DNS Server is not installed" +msgstr "Serwer IPA do użycia" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "HBAC services" +msgstr "Usługi" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Services" +msgstr "Usługi" + +#, fuzzy +#| msgid "Services" +msgid "HBAC Service" +msgstr "Usługi" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service group" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "HBAC service groups" +msgstr "Opis grupy usługi HBAC" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Groups" +msgstr "Grupy usług" + +#, fuzzy +#| msgid "Service Groups" +msgid "HBAC Service Group" +msgstr "Grupy usług" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "Stage Users" +msgstr "Użytkownicy" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "stage users" +msgstr "Elementy użytkowników" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d characters" +msgid "can be at most %(len)d characters" +msgstr "może wynosić co najwyżej %(maxlength)d znaków" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "%(value)s" +msgstr "Odnaleziono „%(value)s”" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "host groups" +msgstr "Grupy komputerów" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host Group" +msgstr "Grupy komputerów" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Dodano grupę komputerów „%(value)s”" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Usunięto grupę komputerów „%(value)s”" + +#, fuzzy +#| msgid "Host-group" +msgid "hostgroup" +msgstr "Grupa komputerów" + +#, fuzzy +#| msgid "Member host-groups" +msgid "privileged hostgroup" +msgstr "Element grupy komputerów" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Zmodyfikowano grupę komputerów „%(value)s”" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "Pasuje %(count)d grupa komputerów" +msgstr[1] "Pasują %(count)d grupy komputerów" +msgstr[2] "Pasuje %(count)d grup komputerów" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainer" +msgstr "Kontener grupy" + +#, fuzzy +#| msgid "Group container" +msgid "vaultcontainers" +msgstr "Kontener grupy" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Containers" +msgstr "Kontener grupy" + +#, fuzzy +#| msgid "Group container" +msgid "Vault Container" +msgstr "Kontener grupy" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Konfiguracja" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA KRA servers" +msgstr "Serwer IPA do użycia" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "netgroups" +msgstr "Grupy sieciowe" + +msgid "Netgroups" +msgstr "Grupy sieciowe" + +#, fuzzy +#| msgid "Netgroups" +msgid "Netgroup" +msgstr "Grupy sieciowe" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Konfiguracja" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Konfiguracja" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Zmieniono hasło dla „%(value)s”" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Numer seryjny" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "A list of ACI values" +msgstr "Lista wartości ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"co najmniej jedna z wartości: „type”, „filter”, „subtree”, „targetgroup”, " +"„attrs” lub „memberof” jest wymagana" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "filter and memberof are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "group, permission and self are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Grupa „%s” nie istnieje" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Błąd składni: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "Nie odnaleziono ACI o nazwie „%s”" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACI" + +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "musi wynosić co najmniej %(minvalue)d" + +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Konfiguracja" + +msgid "Configuration" +msgstr "Konfiguracja" + +#, fuzzy +#| msgid "Min length" +msgid "Maximum hostname length" +msgstr "Minimalna długość" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA CA servers" +msgstr "Serwer IPA do użycia" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Group '%s' does not exist" +msgid "The group doesn't exist" +msgstr "Grupa „%s” nie istnieje" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "groups" +msgstr "Grupy" + +#, fuzzy +#| msgid "User Groups" +msgid "User Group" +msgstr "Grupy użytkowników" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy +#| msgid "Target group" +msgid "privileged group" +msgstr "Grupa docelowa" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" msgid "not allowed to modify user entries" msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" -msgid "password" -msgstr "hasło" +msgid "not allowed to modify group entries" +msgstr "modyfikowanie wpisów grup nie jest dozwolone" -msgid "password to use if not using kerberos" -msgstr "hasło do użycia, jeśli nie jest używany Kerberos" +msgid "Not a managed group" +msgstr "Nie jest zarządzaną grupą" -#, c-format -msgid "principal not found\n" +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Permissions\n" +msgstr "Uprawnienia" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Managed permissions\n" +msgstr "Uprawnienia" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be enclosed in parentheses" +msgstr "musi być liczba całkowitą" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deprecated; use %s" +msgstr "Usunięto użytkownika „%(value)s”" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Entry %s not found" +msgstr "Nie odnaleziono komputera „%(host)s”" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(pkey)s: %(oname)s not found" +msgid "%s: group not found" +msgstr "%(pkey)s: nie odnaleziono %(oname)s" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "target and targetgroup are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "subtree and type are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +#, fuzzy +#| msgid "User search fields" +msgid "Bad search filter" +msgstr "Pola wyszukiwania użytkowników" + +#, fuzzy, python-format +#| msgid "Group '%s' does not exist" +msgid "Entry %s does not exist" +msgstr "Grupa „%s” nie istnieje" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +#| msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgid "attrs and included attributes are mutually exclusive" +msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +msgid "cannot delete managed permissions" +msgstr "" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "ACI of permission %s was not found" +msgstr "Nie odnaleziono ACI o nazwie „%s”" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified permission \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " +"%(gname)s)" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "users" +msgstr "Użytkownicy" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Polecenia" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Polecenia" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "runAs users" +msgstr "Elementy użytkowników" + +#, fuzzy +#| msgid "Netgroups" +msgid "group runAs" +msgstr "Grupy sieciowe" + +#, fuzzy +#| msgid "Member groups" +msgid "runAs groups" +msgstr "Elementy grupy" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "sudo command" +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "sudo commands" +msgstr "Polecenie sudo" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Sudo Commands" +msgstr "Polecenie sudo" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "sudo command group" +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "sudo command groups" +msgstr "Grupy polecenia sudo" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Realm name" +msgid "Realm domains" +msgstr "Nazwa obszaru" + +#, fuzzy +#| msgid "Realm name" +msgid "Realm Domains" +msgstr "Nazwa obszaru" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +#, fuzzy +#| msgid "Kerberos Ticket Policy" +msgid "kerberos ticket policy settings" +msgstr "Polityka zgłoszeń Kerberosa" + +msgid "Kerberos Ticket Policy" +msgstr "Polityka zgłoszeń Kerberosa" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "Maksymalny czas życia" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "Maksymalne odnowienie" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "Maksymalny czas życia" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +#, fuzzy +#| msgid "Max renew" +msgid "RADIUS max renew" +msgstr "Maksymalne odnowienie" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "Maksymalny czas życia" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "Maksymalne odnowienie" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +msgid "Hardened max renew" +msgstr "" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "" +"\n" +"IPA locations\n" +msgstr "Położenie" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Położenie" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Położenie" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Położenie" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Położenie" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Położenie" + +#, fuzzy +#| msgid "NIS domain name" +msgid "IPA location name" +msgstr "Nazwa domeny NIS" + +#, fuzzy +#| msgid "Netgroup description" +msgid "IPA Location description" +msgstr "Opis grupy sieciowej" + +#, fuzzy +#| msgid "Services" +msgid "Servers" +msgstr "Usługi" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server" +msgstr "Serwer IPA do użycia" + +msgid "Modify information about an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "Search for IPA locations." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +#, fuzzy +#| msgid "LDAP schema" +msgid "" +"\n" +"API Schema\n" +msgstr "Schemat LDAP" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Nazwa komputera" + +#, fuzzy +#| msgid "Location" +msgid "Documentation" +msgstr "Położenie" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Version" +msgstr "Uprawnienia" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Method name" +msgstr "Nazwa grupy sieciowej" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: nie odnaleziono %(oname)s" + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +#, fuzzy +#| msgid "Character classes" +msgid "Search for classes." +msgstr "Klasy znaków" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +#, fuzzy +#| msgid "Request id" +msgid "Required" +msgstr "Identyfikator żądania" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "Nazwa ACI" + +#, fuzzy +#| msgid "User password" +msgid "Confirm (password)" +msgstr "Hasło użytkownika" + +#, fuzzy +#| msgid "Default shell" +msgid "Default" +msgstr "Domyślna powłoka" + +#, fuzzy +#| msgid "Default users group" +msgid "Default from" +msgstr "Domyślna grupa użytkowników" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +msgid "Display information about a command output." +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Search for command outputs." +msgstr "Grupy polecenia sudo" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "local domain range" +msgstr "Nazwa domeny NIS" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "self service permission" +msgstr "Opis grupy usługi HBAC" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Uprawnienia" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Serwer IPA do użycia" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "server role" +msgstr "Nazwa serwera" + +#, fuzzy +#| msgid "Server Name" +msgid "server roles" +msgstr "Nazwa serwera" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Roles" +msgstr "Serwer IPA do użycia" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Server Role" +msgstr "Serwer IPA do użycia" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA server role name" +msgstr "Serwer IPA do użycia" + +#, fuzzy +#| msgid "Request status" +msgid "Role status" +msgstr "Stan żądania" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Include IPA master entries" +msgstr "" + +#, fuzzy +#| msgid "Roles" +msgid "roles" +msgstr "Role" + +#, fuzzy +#| msgid "Rule name" +msgid "IPA role name" +msgstr "Nazwa reguły" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "HBAC rule %(rule)s not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, fuzzy, python-brace-format +#| msgid "File %(file)s not found" +msgid "{role}: role not found" +msgstr "Nie odnaleziono pliku %(file)s" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Nie odnaleziono komputera „%(host)s”" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded certificate." +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Certyfikat" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "Temat" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "Adres e-mail" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Temat" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Adres zamieszkania" + +#, fuzzy +#| msgid "Home directory base" +msgid "Subject directory name" +msgstr "Podstawa katalogu domowego" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Temat" + +#, fuzzy +#| msgid "Street address" +msgid "Subject IP Address" +msgstr "Adres zamieszkania" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Temat" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Temat" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Naczelnik Kerberosa" + +#, fuzzy +#| msgid "Server Name" +msgid "Subject Other Name" +msgstr "Nazwa serwera" + +msgid "Issuer" +msgstr "Wydawca" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Wydawca" + +msgid "Not Before" +msgstr "Nie wcześniej" + +msgid "Not After" +msgstr "Nie po" + +msgid "Fingerprint (SHA1)" +msgstr "Odcisk (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "Odcisk (SHA1)" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Numer seryjny" + +msgid "Request status" +msgstr "Stan żądania" + +msgid "Include certificate chain in output" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +#, fuzzy +#| msgid "automatically add the principal if it doesn't exist" +msgid "The principal for this request doesn't exist." +msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Stan" + +msgid "Revoked" +msgstr "Unieważniono" + +msgid "Revocation reason" +msgstr "Przyczyna unieważnienia" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "Przyczyna unieważnienia certyfikatu (0-10)" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#, fuzzy +#| msgid "Revocation reason" +msgid "7 is not a valid revocation reason" +msgstr "Przyczyna unieważnienia" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +#, fuzzy +#| msgid "principal not found\n" +msgid "not found" msgstr "nie odnaleziono naczelnika\n" -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "nie odnaleziono naczelnika w odpowiedzi XML-RPC\n" +msgid "ID View cannot be applied to IPA master" +msgstr "" -msgid "priority cannot be set on global policy" -msgstr "nie można ustawiać priorytetu dla globalnej polityki" +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, fuzzy, python-format +#| msgid "Members that could not be removed" +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Liczba elementów, które nie mogły zostać usunięte" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Modify an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded user certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(pkey)s: %(oname)s not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(pkey)s: nie odnaleziono %(oname)s" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +#| msgid "DNS is not configured" +msgid "Auto Membership is not configured" +msgstr "DNS nie jest skonfigurowany" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "ACI with name \"%s\" not found" +msgid "Auto member rule: %s not found!" +msgstr "Nie odnaleziono ACI o nazwie „%s”" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted hostgroup \"%(value)s\"" +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Usunięto grupę komputerów „%(value)s”" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted user \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +#, fuzzy +#| msgid "member %s" +msgid "Automember" +msgstr "członek %s" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Authority" +msgstr "Certyfikat" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate Authorities" +msgstr "Odrzucono certyfikat" + +msgid "Name for referencing the CA" +msgstr "" + +#, fuzzy +#| msgid "A description of this host" +msgid "Description of the purpose of the CA" +msgstr "Opis tego komputera" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DN" +msgstr "Temat" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Created CA \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Modify CA configuration." +msgstr "Konfiguracja" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +msgid "IPA CA cannot be disabled" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Enable a CA." +msgstr "Włączone" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#, fuzzy +#| msgid "Active zone" +msgid "Actions" +msgstr "Aktywna strefa" + +msgid "Add" +msgstr "Dodaj" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +#, fuzzy +#| msgid "Active zone" +msgid "Activate" +msgstr "Aktywna strefa" + +#, fuzzy +#| msgid "Add and Edit" +msgid "Add and Add Another" +msgstr "Dodaj i edytuj" + +msgid "Add and Close" +msgstr "Dodaj i zamknij" + +msgid "Add and Edit" +msgstr "Dodaj i edytuj" + +#, fuzzy +#| msgid "Add and Edit" +msgid "Add Many" +msgstr "Dodaj i edytuj" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "Anuluj" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "Zamknij" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Enable" +msgstr "Włączone" + +msgid "Find" +msgstr "Znajdź" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +#, fuzzy +#| msgid "Issuer" +msgid "Issue" +msgstr "Wydawca" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +#, fuzzy +#| msgid "SOA refresh" +msgid "Refresh" +msgstr "Odświeżenie SOA" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "Usuń" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "Przywróć" + +#, fuzzy +#| msgid "New Password" +msgid "Reset Password" +msgstr "Nowe hasło" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "Przywróć" + +msgid "Retry" +msgstr "Ponów" + +msgid "Revert" +msgstr "" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoke" +msgstr "Unieważniono" + +msgid "Save" +msgstr "" + +#, fuzzy +#| msgid "Set OTP" +msgid "Set" +msgstr "Ustaw OTP" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "Zaktualizuj" + +msgid "View" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Customization" +msgstr "Konfiguracja" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Identity Settings" +msgstr "Ustawienia konta" + +#, fuzzy +#| msgid "Account Settings" +msgid "Record Settings" +msgstr "Ustawienia konta" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "Wróć na górę" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +#| msgid "Added host \"%(value)s\"" +msgid "Add custom value" +msgstr "Dodano komputer „%(value)s”" + +msgid "Available" +msgstr "" + +#, fuzzy +#| msgid "Simple bind failed\n" +msgid "Some operations failed." +msgstr "Proste dowiązanie się nie powiodło\n" + +msgid "Operations Error" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Confirmation" +msgstr "Konfiguracja" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "Redirection" +msgstr "Katalog domowy" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "wystąpił wewnętrzny błąd" + +#, fuzzy +#| msgid "Error" +msgid "HTTP Error" +msgstr "Błąd" + +msgid "Internal Error" +msgstr "" + +#, fuzzy +#| msgid "Error" +msgid "IPA Error" +msgstr "Błąd" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "Ustawienia" + +msgid "Search" +msgstr "Wyszukaj" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Failed to create key!\n" +msgid "Allowed to create keytab" +msgstr "Utworzenie klucza się nie powiodło.\n" + +#, fuzzy +#| msgid "Failed to close the keytab\n" +msgid "Allowed to retrieve keytab" +msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Add Kerberos Principal Alias" +msgstr "Naczelnik Kerberosa" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "New kerberos principal alias" +msgstr "Naczelnik Kerberosa" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Authenticating" +msgstr "Ustawienia konta" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "Zalogowano jako" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal name for this host" +msgid "Kerberos Principal you entered is expired" +msgstr "Nazwa naczelnika Kerberosa dla tego komputera" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Log In Using Certificate" +msgstr "Certyfikat" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +#| msgid "Minimum length of password" +msgid "number of passwords" +msgstr "Minimalna długość hasła" + +msgid "seconds" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Migrating" +msgstr "Konfiguracja" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "Atrybut" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Add permission" +msgstr "Uprawnienia" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove permissions" +msgstr "Uprawnienia" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Removing principal %s\n" +msgid "Remove privileges" +msgstr "Usuwanie naczelnika %s\n" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Role Settings" +msgstr "Ustawienia" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +#, fuzzy +#| msgid "Default users group" +msgid "Default host group" +msgstr "Domyślna grupa użytkowników" + +#, fuzzy +#| msgid "Default users group" +msgid "Default user group" +msgstr "Domyślna grupa użytkowników" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "Host group rule" +msgstr "Grupa komputerów" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host group rules" +msgstr "Grupy komputerów" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User group rule" +msgstr "Grupa użytkowników" + +#, fuzzy +#| msgid "User group" +msgid "User group rules" +msgstr "Grupa użytkowników" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Add automount key" +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +#| msgid "Automount Keys" +msgid "Remove automount keys" +msgstr "Automatyczne montowanie kluczy" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Add automount location" +msgstr "Automatyczne montowanie map" + +#, fuzzy +#| msgid "Account Settings" +msgid "Automount Location Settings" +msgstr "Ustawienia konta" + +msgid "Remove automount locations" +msgstr "" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Add automount map" +msgstr "Automatyczne montowanie map" + +#, fuzzy +#| msgid "Type" +msgid "Map Type" +msgstr "Typ" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +#, fuzzy +#| msgid "Automount Maps" +msgid "Remove automount maps" +msgstr "Automatyczne montowanie map" + +msgid "Add certificate authority" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate authorities" +msgstr "Odrzuć certyfikat." + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Any Host" +msgstr "Komputery" + +#, fuzzy +#| msgid "Services" +msgid "Any Service" +msgstr "Usługi" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Rule status" +msgstr "Stan żądania" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Specified Hosts and Groups" +msgstr "Grupy polecenia sudo" + +msgid "Specified Profiles" +msgstr "" + +#, fuzzy +#| msgid "Service Groups" +msgid "Specified Services and Groups" +msgstr "Grupy usług" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate profiles" +msgstr "Odrzuć certyfikat." + +msgid "AA Compromise" +msgstr "" + +#, fuzzy +#| msgid "Principal" +msgid "Add principal" +msgstr "Naczelnik" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificates" +msgstr "Certyfikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Hold" +msgstr "Certyfikat" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Common Name" +msgstr "Nazwa komputera" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +#, fuzzy +#| msgid "Issuer" +msgid "Issued on from" +msgstr "Wydawca" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Maximum serial number" +msgstr "Numer seryjny" + +#, fuzzy +#| msgid "Serial number" +msgid "Minimum serial number" +msgstr "Numer seryjny" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on from" +msgstr "Unieważniono" + +#, fuzzy +#| msgid "Revoked" +msgid "Revoked on to" +msgstr "Unieważniono" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprints" +msgstr "Odcisk (SHA1)" + +#, fuzzy +#| msgid "New Certificate" +msgid "Get Certificate" +msgstr "Nowy certyfikat" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate Hold Removed" +msgstr "Odrzucono certyfikat" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Issue new certificate" +msgstr "Nowy certyfikat" + +#, fuzzy +#| msgid "Issuer" +msgid "Issued By" +msgstr "Wydawca" + +#, fuzzy +#| msgid "Issuer" +msgid "Issued On" +msgstr "Wydawca" + +#, fuzzy +#| msgid "Issuer" +msgid "Issued To" +msgstr "Wydawca" + +msgid "Key Compromise" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "No Valid Certificate" +msgstr "Nowy certyfikat" + +msgid "New Certificate" +msgstr "Nowy certyfikat" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate hold" +msgstr "Odrzuć certyfikat." + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Certificate requested" +msgstr "Odrzucono certyfikat" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Revoke certificate" +msgstr "Odrzuć certyfikat." + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "Odrzucono certyfikat" + +msgid "REVOKED" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number" +msgstr "Numer seryjny" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial Number (hex)" +msgstr "Numer seryjny" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "SHA1 Fingerprint" +msgstr "Odcisk (SHA1)" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "SHA256 Fingerprint" +msgstr "Odcisk (SHA1)" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +#, fuzzy +#| msgid "Certificate Revoked" +msgid "Valid Certificate Present" +msgstr "Odrzucono certyfikat" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "View Certificate" +msgstr "Nowy certyfikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "Certyfikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate For Match" +msgstr "Certyfikat" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Mapping Match" +msgstr "Certyfikat" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User Login" +msgstr "Login użytkownika" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate mapping data" +msgstr "Certyfikat" + +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "Konfiguracja" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate mapping data" +msgstr "Odrzuć certyfikat." + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Group Options" +msgstr "Opis grupy" + +#, fuzzy +#| msgid "Search" +msgid "Search Options" +msgstr "Wyszukaj" + +msgid "SELinux Options" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "Server Options" +msgstr "Serwer IPA do użycia" + +#, fuzzy +#| msgid "Services" +msgid "Service Options" +msgstr "Usługi" + +#, fuzzy +#| msgid "User login" +msgid "User Options" +msgstr "Login użytkownika" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +#, fuzzy +#| msgid "%(parent)s: %(oname)s not found" +msgid "Target reverse zone not found." +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "Ustawienia strefy DNS" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove Permission" +msgstr "Uprawnienia" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "Grupa użytkowników" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Group Settings" +msgstr "Ustawienia konta" + +#, fuzzy +#| msgid "External host" +msgid "External" +msgstr "Zewnętrzny komputer" + +msgid "Groups" +msgstr "Grupy" + +#, fuzzy +#| msgid "Group container" +msgid "Group categories" +msgstr "Kontener grupy" + +#, fuzzy +#| msgid "change to a POSIX group" +msgid "Change to external group" +msgstr "zmiana na grupę POSIX" + +#, fuzzy +#| msgid "change to a POSIX group" +msgid "Change to POSIX group" +msgstr "zmiana na grupę POSIX" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +#| msgid "Member service groups" +msgid "Remove user groups" +msgstr "Grupy usługi elementów" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Group Type" +msgstr "Nazwa grupy" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Accessing" +msgstr "Czas dostępu" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Via Service" +msgstr "Usługi" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +#, fuzzy +#| msgid "Member services" +msgid "Remove HBAC services" +msgstr "Usługi elementów" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#, fuzzy +#| msgid "HBAC service group description" +msgid "Add HBAC service group" +msgstr "Opis grupy usługi HBAC" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Member service groups" +msgid "Remove HBAC service groups" +msgstr "Grupy usługi elementów" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Access Denied" +msgstr "Czas dostępu" + +#, fuzzy +#| msgid "Access time" +msgid "Access Granted" +msgstr "Czas dostępu" + +msgid "Include Disabled" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Include Enabled" +msgstr "Włączone" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "Host Certificate" +msgstr "Certyfikat" + +msgid "Host Name" +msgstr "Nazwa komputera" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Host Settings" +msgstr "Ustawienia" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +#| msgid "Set OTP" +msgid "Generate OTP" +msgstr "Ustaw OTP" + +#, fuzzy +#| msgid "Set OTP" +msgid "Generated OTP" +msgstr "Ustaw OTP" + +#, fuzzy +#| msgid "Kerberos Ticket Policy" +msgid "Kerberos Key" +msgstr "Polityka zgłoszeń Kerberosa" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "One-Time Password" +msgstr "Nowe hasło" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +#, fuzzy +#| msgid "Set OTP" +msgid "Reset OTP" +msgstr "Ustaw OTP" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "Ustaw OTP" + +msgid "OTP set" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "Set One-Time Password" +msgstr "Nowe hasło" + +#, fuzzy +#| msgid "Member hosts" +msgid "Remove hosts" +msgstr "Element komputerów" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +#| msgid "Host-group" +msgid "Add host group" +msgstr "Grupa komputerów" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Host Groups" +msgid "Host Group Settings" +msgstr "Grupy komputerów" + +#, fuzzy +#| msgid "Member host-groups" +msgid "Remove host groups" +msgstr "Element grupy komputerów" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Enter trusted group name." +msgstr "Nazwa grupy usługi" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +#| msgid "Member of host-groups" +msgid "Apply to host groups" +msgstr "Element grupy komputerów" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +#, fuzzy +#| msgid "Name of host-group" +msgid "Un-apply from host groups" +msgstr "Nazwa grupy komputerów" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "Add netgroup" +msgstr "Grupy sieciowe" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Hosts" +msgid "Host" +msgstr "Komputery" + +#, fuzzy +#| msgid "Netgroup description" +msgid "Netgroup Settings" +msgstr "Opis grupy sieciowej" + +#, fuzzy +#| msgid "Member groups" +msgid "Remove netgroups" +msgstr "Elementy grupy" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Configure your token" +msgstr "Konfiguracja" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +#| msgid "DNS Zone Settings" +msgid "OTP Token Settings" +msgstr "Ustawienia strefy DNS" + +msgid "Disable token" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Enable token" +msgstr "Włączone" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Show configuration uri" +msgstr "Konfiguracja" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "Add Custom Attribute" +msgstr "Atrybut" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission settings" +msgstr "Uprawnienia" + +#, fuzzy +#| msgid "Attribute" +msgid "Attribute breakdown" +msgstr "Atrybut" + +#, fuzzy +#| msgid "Settings" +msgid "Privilege Settings" +msgstr "Ustawienia" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +#| msgid "Password Policy" +msgid "Add password policy" +msgstr "Polityka haseł" + +msgid "Password Policy" +msgstr "Polityka haseł" + +#, fuzzy +#| msgid "Password Policy" +msgid "Remove password policies" +msgstr "Polityka haseł" + +msgid "Add ID range" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Range Settings" +msgstr "Ustawienia" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +#, fuzzy +#| msgid "Locality" +msgid "Local domain" +msgstr "Lokalizacja" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +#, fuzzy +#| msgid "DNS Zone Settings" +msgid "RADIUS Proxy Server Settings" +msgstr "Ustawienia strefy DNS" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +#, fuzzy +#| msgid "Update" +msgid "Force Update" +msgstr "Zaktualizuj" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Roles" +msgstr "Nazwa serwera" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Role" +msgstr "Nazwa serwera" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete Server" +msgstr "Usuń" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Add service" +msgstr "Usługi" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "New Certificate" +msgid "Service Certificate" +msgstr "Nowy certyfikat" + +#, fuzzy +#| msgid "DNS Zone Settings" +msgid "Service Settings" +msgstr "Ustawienia strefy DNS" + +#, fuzzy +#| msgid "Permissions" +msgid "Provisioning" +msgstr "Uprawnienia" + +#, fuzzy +#| msgid "Member services" +msgid "Remove services" +msgstr "Usługi elementów" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +#| msgid "Service principal" +msgid "Service unprovisioned" +msgstr "Naczelnik usługi" + +#, fuzzy +#| msgid "Kerberos Service Principal Name" +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Nazwa naczelnika usługi Kerberos" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "${count} user(s) activated" +msgstr "Pasuje %(count)d użytkownik" + +msgid "Add stage user" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Stage users" +msgstr "Elementy użytkowników" + +#, fuzzy +#| msgid "Member users" +msgid "Preserved users" +msgstr "Elementy użytkowników" + +msgid "Remove preserved users" +msgstr "" + +#, fuzzy +#| msgid "Member users" +msgid "Remove stage users" +msgstr "Elementy użytkowników" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "${count} users(s) staged" +msgstr "Pasuje %(count)d użytkownik" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +#, fuzzy +#| msgid "User category" +msgid "User categories" +msgstr "Kategoria użytkowników" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Add sudo command" +msgstr "Polecenie sudo" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command" +msgid "Remove sudo commands" +msgstr "Polecenie sudo" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Add sudo command group" +msgstr "Grupy polecenia sudo" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Remove sudo command groups" +msgstr "Grupy polecenia sudo" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Add and Close" +msgid "Add sudo rule" +msgstr "Dodaj i zamknij" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Any Command" +msgstr "Polecenia" + +#, fuzzy +#| msgid "Group" +msgid "Any Group" +msgstr "Grupa" + +#, fuzzy +#| msgid "Commands" +msgid "Run Commands" +msgstr "Polecenia" + +msgid "Deny" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Access this host" +msgstr "Czas dostępu" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +#, fuzzy +#| msgid "Sudo Command Groups" +msgid "Specified Commands and Groups" +msgstr "Grupy polecenia sudo" + +#, fuzzy +#| msgid "Service Groups" +msgid "Specified Groups" +msgstr "Grupy usług" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +#| msgid "cannot open configuration file %s\n" +msgid "Replication configuration" +msgstr "nie można otworzyć pliku konfiguracji %s\n" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +#, fuzzy +#| msgid "Automount" +msgid "Account" +msgstr "Automatyczne montowanie" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Trust Settings" +msgstr "Ustawienia konta" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Pre-shared password" +msgstr "Hasło użytkownika" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Trust direction" +msgstr "Opis grupy" + +#, fuzzy +#| msgid "Request status" +msgid "Trust status" +msgstr "Stan żądania" + +#, fuzzy +#| msgid "Rule type" +msgid "Trust type" +msgstr "Typ reguły" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "Ustawienia konta" + +#, fuzzy +#| msgid "Account Settings" +msgid "Account Status" +msgstr "Ustawienia konta" + +#, fuzzy +#| msgid "Active zone" +msgid "Active users" +msgstr "Aktywna strefa" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Account Settings" +msgid "Contact Settings" +msgstr "Ustawienia konta" + +#, fuzzy +#| msgid "Delete" +msgid "Delete mode" +msgstr "Usuń" + +#, fuzzy +#| msgid "Misc. Information" +msgid "Employee Information" +msgstr "Różne informacje" + +msgid "Error changing account status" +msgstr "" + +#, fuzzy +#| msgid "Password history size" +msgid "Password expiration" +msgstr "Rozmiar historii haseł" + +msgid "Mailing Address" +msgstr "Adres pocztowy" + +msgid "Misc. Information" +msgstr "Różne informacje" + +#, fuzzy +#| msgid "Delete" +msgid "delete" +msgstr "Usuń" + +msgid "preserve" +msgstr "" + +#, fuzzy +#| msgid "Not a managed group" +msgid "No private group" +msgstr "Nie jest zarządzaną grupą" + +#, fuzzy +#| msgid "Member users" +msgid "Remove users" +msgstr "Elementy użytkowników" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +#, fuzzy +#| msgid "Member Host" +msgid "Members" +msgstr "Komputer elementu" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "Usługi" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "User Groups" +msgid "User Vaults" +msgstr "Grupy użytkowników" + +msgid "Current password is required" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Maximum password lifetime (in days)" +msgid "Your password expires in ${days} days." +msgstr "Maksymalny czas życia hasła (w dniach)" + +#, fuzzy +#| msgid "First name" +msgid "First OTP" +msgstr "Imię" + +#, fuzzy +#| msgid "New Password" +msgid "New password is required" +msgstr "Nowe hasło" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "Ukończono zmianę hasła" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "Hasła muszą się zgadzać" + +msgid "Password reset was not successful." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Reset your password." +msgstr "Hasło użytkownika" + +#, fuzzy +#| msgid "Set OTP" +msgid "Second OTP" +msgstr "Ustaw OTP" + +#, fuzzy +#| msgid "Verify Principal Password" +msgid "Verify Password" +msgstr "Sprawdzenie hasła naczelnika" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "Szybkie odnośniki" + +msgid "Select All" +msgstr "Zaznacz wszystko" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "Odznacz wszystko" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "Automatyczne montowanie" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Network Services" +msgstr "Usługi" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +#| msgid "First name" +msgid "First" +msgstr "Imię" + +#, fuzzy +#| msgid "Last name" +msgid "Last" +msgstr "Nazwisko" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +#, fuzzy +#| msgid "Unselect All" +msgid "Undo All" +msgstr "Odznacz wszystko" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Undo all changes in this field." +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a decimal number" +msgstr "musi być liczbą dziesiętną" + +#, fuzzy +#| msgid "read error\n" +msgid "Format error" +msgstr "błąd odczytu\n" + +#, fuzzy +#| msgid "must be an integer" +msgid "Must be an integer" +msgstr "musi być liczba całkowitą" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#, fuzzy +#| msgid "read error\n" +msgid "Parse error" +msgstr "błąd odczytu\n" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a positive number" +msgstr "musi być liczbą dziesiętną" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +#, fuzzy +#| msgid "Request id" +msgid "Required field" +msgstr "Identyfikator żądania" + +msgid "Unsupported value" +msgstr "" + +#, fuzzy +#| msgid "Roles" +msgid "Role" +msgstr "Role" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "" +"\n" +"IPA servers\n" +msgstr "Serwer IPA do użycia" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server to use" +msgid "IPA Servers" +msgstr "Serwer IPA do użycia" + +#, fuzzy +#| msgid "Service category" +msgid "Server location" +msgstr "Kategoria usług" + +#, fuzzy +#| msgid "Service name" +msgid "Service weight" +msgstr "Nazwa usługi" + +msgid "Weight for server services" +msgstr "" + +#, fuzzy +#| msgid "Service category" +msgid "Service relative weight" +msgstr "Kategoria usług" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +#, fuzzy +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled server roles" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to perform server connection check" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "Stan" + +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "Nazwa serwera" + +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Zmieniono hasło dla „%(value)s”" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal" +msgid "Member principals" +msgstr "Naczelnik Kerberosa" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "członek %s" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +#, fuzzy +#| msgid "Service category" +msgid "Service delegation rules" +msgstr "Kategoria usług" + +#, fuzzy +#| msgid "Service category" +msgid "Service delegation rule" +msgstr "Kategoria usług" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +#, fuzzy +#| msgid "Service group name" +msgid "Service delegation target" +msgstr "Nazwa grupy usługi" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " +"aby ustawić go ręcznie." + +#, fuzzy, python-format +#| msgid "" +#| "Kerberos principal %s already exists. Use 'ipa user-mod' to set it " +#| "manually." +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " +"aby ustawić go ręcznie." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Dodanie użytkownika do domyślnej grupy się nie powiodło. Należy użyć " +"polecenia „ipa group-add-member”, aby dodać go ręcznie." + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "Invalid LDAP URI." +msgstr "Adres URI LDAP" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users not found" +msgstr "Domyślna grupa dla nowych użytkowników" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded host certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +#, fuzzy +#| msgid "Principal name" +msgid "Principal alias" +msgstr "Nazwa naczelnika" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, fuzzy +#| msgid "Password used in bulk enrollment" +msgid "Password cannot be set on enrolled host." +msgstr "Hasło używane w zapisywaniu większej części" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added host \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from a host entry" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +#, fuzzy, python-format +#| msgid "Modified host \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" #, python-format msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" @@ -1553,21 +23458,1952 @@ msgstr "" "priorytet musi być unikalną wartością (%(prio)d jest już używane przez " "%(gname)s)" -#, c-format -msgid "read error\n" -msgstr "błąd odczytu\n" +msgid "Add Class of Service entry" +msgstr "" -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "nie odnaleziono wyniku w odpowiedzi XML-RPC\n" +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Password Policy" +msgid "password policy" +msgstr "Polityka haseł" + +#, fuzzy +#| msgid "Password Policy" +msgid "password policies" +msgstr "Polityka haseł" + +#, fuzzy +#| msgid "Password Policy" +msgid "Password Policies" +msgstr "Polityka haseł" + +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "Maksymalne odnowienie" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Maksymalna liczba zwróconych wpisów" + +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "Maksymalne odnowienie" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Nazwa użytkownika" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "Maksymalny czas życia hasła musi być wyższy niż minimalny." + +#, fuzzy +#| msgid "priority cannot be set on global policy" +msgid "cannot delete global password policy" +msgstr "nie można ustawiać priorytetu dla globalnej polityki" + +msgid "priority cannot be set on global policy" +msgstr "nie można ustawiać priorytetu dla globalnej polityki" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +#, fuzzy +#| msgid "External host" +msgid "External trust" +msgstr "Zewnętrzny komputer" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +#| msgid "Rule type" +msgid "trust type" +msgstr "Typ reguły" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted host \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d host matched" +#| msgid_plural "%(count)d hosts matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Konfiguracja" + +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Konfiguracja" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +#, fuzzy +#| msgid "Supported encryption types:\n" +msgid "unsupported trust type" +msgstr "Obsługiwane typy szyfrowania:\n" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, fuzzy +#| msgid "GID" +msgid "SID" +msgstr "GID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain enabled" +msgstr "Nazwa domeny NIS" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +#, fuzzy +#| msgid "Priority of the policy (higher number means lower priority" +msgid "Priority of the rule (higher number means lower priority" +msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Login użytkownika" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d service matched" +#| msgid_plural "%(count)d services matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy +#| msgid "Service principal" +msgid "Malformed principal" +msgstr "Naczelnik usługi" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "service" +msgstr "Usługi" + +#, fuzzy +#| msgid "Services" +msgid "services" +msgstr "Usługi" + +#, fuzzy +#| msgid "Service principal" +msgid "Service principal alias" +msgstr "Naczelnik usługi" + +#, fuzzy +#| msgid "Base-64 encoded server certificate" +msgid "Base-64 encoded service certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy +#| msgid "force principal name even if not in DNS" +msgid "force principal name even if host not in DNS" +msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "SMB service NetBIOS name" +msgstr "Nazwa usługi" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Disabled service \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified service \"%(value)s\"" +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from a service" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +#, fuzzy, python-format +#| msgid "Deleted service \"%(value)s\"" +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delegation" +msgstr "Usuń" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d group matched" +#| msgid_plural "%(count)d groups matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, fuzzy, python-format +#| msgid "%(count)d ACI matched" +#| msgid_plural "%(count)d ACIs matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +msgid "Access time" +msgstr "Czas dostępu" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Access time" +msgid "Access granted: %s" +msgstr "Czas dostępu" + +msgid "operation not defined" +msgstr "" + +#, fuzzy, python-format +#| msgid "not allowed to modify group entries" +msgid "not allowed to perform operation: %s" +msgstr "modyfikowanie wpisów grup nie jest dozwolone" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "Grupy usługi elementów" + +#, fuzzy +#| msgid "Member service groups" +msgid "Member HBAC service groups" +msgstr "Grupy usługi elementów" + +#, fuzzy +#| msgid "Member services" +msgid "Member ID user overrides" +msgstr "Usługi elementów" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +#, fuzzy +#| msgid "Member services" +msgid "Indirect Member HBAC service" +msgstr "Usługi elementów" + +#, fuzzy +#| msgid "Member service groups" +msgid "Indirect Member HBAC service group" +msgstr "Grupy usługi elementów" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "nie odnaleziono wpisu kontenera (%(container)s)" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +#, fuzzy +#| msgid "DNS is not configured" +msgid "attribute is not configurable" +msgstr "DNS nie jest skonfigurowany" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" msgid "the entry was deleted while being modified" msgstr "wpis został usunięty podczas modyfikowania" -msgid "type, filter, subtree and targetgroup are mutually exclusive" +#, python-format +msgid "%s" msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" #, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, fuzzy, python-format +#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "added attribute value to entry %(value)s" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "musi być prawdą lub fałszem" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "User password expiration" +msgstr "Hasło użytkownika" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Katalog domowy" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "Podstawa katalogu domowego" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "manager %(manager)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Issuer of the certificate" +msgstr "Odrzuć certyfikat." + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Subject of the certificate" +msgstr "Odrzuć certyfikat." + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added service \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +#| msgid "Default group for new users" +msgid "Default group for new users is not POSIX" +msgstr "Domyślna grupa dla nowych użytkowników" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +#, fuzzy +#| msgid "User login" +msgid "Failed logins" +msgstr "Login użytkownika" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +#, fuzzy +#| msgid "Time to live" +msgid "Time now" +msgstr "Czas życia" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "fork() failed\n" +msgid "%(host)s failed" +msgstr "fork() się nie powiodło\n" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy, python-format +#| msgid "Modified user \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +#, fuzzy +#| msgid "Remove all principals in this realm" +msgid "Remove principal alias from the user entry" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +#, fuzzy, python-format +#| msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +#, fuzzy +#| msgid "Supported encryption types:\n" +msgid "unsupported functional level" +msgstr "Obsługiwane typy szyfrowania:\n" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +#, fuzzy +#| msgid "DNS is not configured" +msgid "domain is not configured" +msgstr "DNS nie jest skonfigurowany" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +#, fuzzy +#| msgid "DNS is not configured" +msgid "Our domain is not configured" +msgstr "DNS nie jest skonfigurowany" + +#, fuzzy +#| msgid "DNS is not configured" +msgid "No trusted domain is not configured" +msgstr "DNS nie jest skonfigurowany" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +#, fuzzy +#| msgid "Request status" +msgid "Request must be a dict" +msgstr "Stan żądania" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "params must be a list" +msgstr "musi być liczba całkowitą" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 1" +msgstr "musi wynosić co najmniej %(minvalue)d" + +msgid "Out of memory\n" +msgstr "Brak pamięci\n" + +#, fuzzy +#| msgid "Supported encryption types:\n" +msgid "Warning unrecognized encryption type.\n" +msgstr "Obsługiwane typy szyfrowania:\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "Brak pamięci?\n" + +msgid "Enctype comparison failed!\n" +msgstr "Porównanie typów szyfrowania się nie powiodło.\n" + +#, fuzzy +#| msgid "Password history size" +msgid "Password is too long!\n" +msgstr "Rozmiar historii haseł" + +msgid "Failed to create random key!\n" +msgstr "Utworzenie losowego klucza się nie powiodło.\n" + +msgid "Failed to create key!\n" +msgstr "Utworzenie klucza się nie powiodło.\n" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "Nie można zainicjować biblioteki LDAP.\n" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +#, fuzzy +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize STARTTLS session\n" +msgstr "Nie można zainicjować biblioteki LDAP.\n" diff --git a/po/pt.po b/po/pt.po index 3a3f09970..ce6da16a4 100644 --- a/po/pt.po +++ b/po/pt.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:25+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Portuguese\n" @@ -14,6 +14,17882 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, c-format +msgid "Out of memory!" +msgstr "" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "This entry is already enabled" +msgid "Host is already joined.\n" +msgstr "Esta entrada já está ativada" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "Pedido JSON-RPC inválido: %(error)s" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +msgid "hostname" +msgstr "" + +msgid "IPA Server to use" +msgstr "" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +#, fuzzy +#| msgid "password policy" +msgid "password" +msgstr "política de palavra-passe" + +msgid "LDAP basedn" +msgstr "" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, c-format +msgid "principal not found\n" +msgstr "" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +msgid "Realm name" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, c-format +msgid "read error\n" +msgstr "" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match" +msgid "Passwords do not match!\n" +msgstr "As palavras-passe não correspondem" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +#, fuzzy +#| msgid "Add password policy" +msgid "LDAP password" +msgstr "Adicionar política de palavra-passe" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +msgid "Enter LDAP password" +msgstr "" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +msgid "New Principal Password" +msgstr "" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key %(key)s already exists" +msgstr "Esta entrada já existe" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "map %(map)s already exists" +msgstr "Esta entrada já existe" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +msgid "User ID" +msgstr "" + +#, fuzzy +#| msgid "Password Policy" +msgid "Password" +msgstr "Política de Palavra-passe" + +msgid "First Code" +msgstr "" + +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "'%(name)s' inválido: %(error)s" + +#, fuzzy, python-format +#| msgid "cannot connect to '%(uri)s': %(error)s" +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "não é possível ligar a '%(uri)s': %(error)s" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +msgid "Vault password" +msgstr "" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Missing vault public key" +msgstr "chave SSh pública inválida" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +msgid "Change password" +msgstr "" + +msgid "Old vault password" +msgstr "" + +msgid "File containing the old vault password" +msgstr "" + +msgid "New vault password" +msgstr "" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Missing new vault public key" +msgstr "chave SSh pública inválida" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "" + +msgid "Input filename" +msgstr "" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "ACI name" +msgstr "Nome do comando" + +#, fuzzy +#| msgid "Permission type" +msgid "Permission" +msgstr "Tipo de permissão" + +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "" + +msgid "User group ACI grants access to" +msgstr "" + +#, fuzzy +#| msgid "Permission type" +msgid "Permissions" +msgstr "Tipo de permissão" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "" + +msgid "Type" +msgstr "" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +msgid "Member of a group" +msgstr "" + +msgid "Filter" +msgstr "" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +msgid "Delete ACI." +msgstr "" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +msgid "Rename an ACI." +msgstr "" + +msgid "New ACI name" +msgstr "" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +msgid "description" +msgstr "" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for an automount key." +msgstr "Pesquisar por interligações." + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display an automount key." +msgstr "Exibir informação acerca de um utilizador." + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display an automount location." +msgstr "Exibir informação acerca de uma localização IPA" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for an automount map." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display an automount map." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +msgid "Default users group" +msgstr "" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +#, fuzzy +#| msgid "Modify information about an IPA location." +msgid "Modify configuration options." +msgstr "Modificar informação acerca de uma localização IPA" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for delegations." +msgstr "Pesquisar por interligações." + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "Exibir informação acerca de uma delegação." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "Política de reencaminhamento" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Zone name" +msgstr "Nome do comando" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Record name" +msgstr "Nome do comando" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Record type" +msgstr "tipo incorreto" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +msgid "Service" +msgstr "" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +msgid "NS Hostname" +msgstr "" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Create new DNS forward zone." +msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permission type" +msgid "Permission value" +msgstr "Tipo de permissão" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Delete DNS forward zone." +msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Disable DNS Forward Zone." +msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." + +msgid "Enable DNS Forward Zone." +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Search for DNS forward zones." +msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for DNS resources." +msgstr "Pesquisar por interligações." + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS zone (SOA record)." +msgid "Create new DNS zone (SOA record)." +msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS zone (SOA record)." +msgid "Delete DNS zone (SOA record)." +msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS zone (SOA record)." +msgid "Search for DNS zones (SOA records)." +msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." + +#, fuzzy +#| msgid "Forward policy" +msgid "Forward zones only" +msgstr "Política de reencaminhamento" + +msgid "Search for forward zones only" +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS zone (SOA record)." +msgid "Modify DNS zone (SOA record)." +msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "User Groups" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Host Groups" +msgstr "" + +msgid "Services" +msgstr "" + +msgid "Service Groups" +msgstr "" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for HBAC rules." +msgstr "Pesquisar por interligações." + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "" + +msgid "HBAC service" +msgstr "" + +msgid "HBAC service description" +msgstr "" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for HBAC services." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about an HBAC service." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about an HBAC service group." +msgstr "Exibir informação acerca de um grupo nomeado." + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "" + +msgid "Certificate" +msgstr "" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "SSH public key" +msgstr "chave SSh pública inválida" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for hosts." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +#, fuzzy +#| msgid "Modify information about an IPA location." +msgid "Modify information about a host." +msgstr "Modificar informação acerca de uma localização IPA" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a host." +msgstr "Exibir informação acerca de um utilizador." + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for hostgroups." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a hostgroup." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +#, fuzzy +#| msgid "GECOS field" +msgid "GECOS" +msgstr "campo GECOS" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about an Group ID override." +msgstr "Exibir informação acerca de um utilizador." + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about an User ID override." +msgstr "Exibir informação acerca de um utilizador." + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +msgid "hostgroups" +msgstr "" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for an ID View." +msgstr "Pesquisar por interligações." + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about an ID View." +msgstr "Exibir informação acerca de um utilizador." + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +#, fuzzy +#| msgid "Add password policy" +msgid "bind password" +msgstr "Adicionar política de palavra-passe" + +msgid "Bind DN" +msgstr "" + +msgid "User container" +msgstr "" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +msgid "Netgroup description" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "NIS domain name" +msgstr "Nome do comando" + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +msgid "Member Hostgroup" +msgstr "" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for a netgroup." +msgstr "Pesquisar por interligações." + +#, fuzzy +#| msgid "Search for trusts." +msgid "search for managed groups" +msgstr "Pesquisar por interligações." + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a netgroup." +msgstr "Exibir informação acerca de um grupo nomeado." + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permission type" +msgid "Permission name" +msgstr "Tipo de permissão" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Bind rule type" +msgstr "tipo incorreto" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permission type" +msgid "Permission flags" +msgstr "Tipo de permissão" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for permissions." +msgstr "Pesquisar por interligações." + +msgid "Modify a permission." +msgstr "" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a permission." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +#, fuzzy +#| msgid "Permission type" +msgid "permission" +msgstr "Tipo de permissão" + +#, fuzzy +#| msgid "Permission type" +msgid "permissions" +msgstr "Tipo de permissão" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for privileges." +msgstr "Pesquisar por interligações." + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a privilege." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +#, fuzzy +#| msgid "Password Policy" +msgid "Password history size" +msgstr "Política de Palavra-passe" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +#, fuzzy +#| msgid "Add password policy" +msgid "Add a new group password policy." +msgstr "Adicionar política de palavra-passe" + +#, fuzzy +#| msgid "Display information about password policy." +msgid "Delete a group password policy." +msgstr "Exibir informação acerca da política de palavra-passe." + +#, fuzzy +#| msgid "Display information about password policy." +msgid "Search for group password policies." +msgstr "Exibir informação acerca da política de palavra-passe." + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +#, fuzzy +#| msgid "Add password policy" +msgid "Modify a group password policy." +msgstr "Adicionar política de palavra-passe" + +msgid "Display information about password policy." +msgstr "Exibir informação acerca da política de palavra-passe." + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "A description of this RADIUS proxy server" +msgstr "Exibir informação acerca do servidor proxy RADIUS." + +msgid "Server" +msgstr "" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Add a new RADIUS proxy server." +msgstr "Exibir informação acerca do servidor proxy RADIUS." + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Delete a RADIUS proxy server." +msgstr "Exibir informação acerca do servidor proxy RADIUS." + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Search for RADIUS proxy servers." +msgstr "Exibir informação acerca do servidor proxy RADIUS." + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Modify a RADIUS proxy server." +msgstr "Exibir informação acerca do servidor proxy RADIUS." + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "Exibir informação acerca do servidor proxy RADIUS." + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for roles." +msgstr "Pesquisar por interligações." + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a role." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "" + +msgid "Attributes to which the permission applies." +msgstr "" + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Add a new self-service permission." +msgstr "Exibir informação acerca de uma permissão de serviço automático." + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Delete a self-service permission." +msgstr "Exibir informação acerca de uma permissão de serviço automático." + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Search for a self-service permission." +msgstr "Exibir informação acerca de uma permissão de serviço automático." + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Modify a self-service permission." +msgstr "Exibir informação acerca de uma permissão de serviço automático." + +msgid "Display information about a self-service permission." +msgstr "Exibir informação acerca de uma permissão de serviço automático." + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for SELinux User Maps." +msgstr "Pesquisar por interligações." + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +msgid "Service principal" +msgstr "" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for IPA services." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +#, fuzzy +#| msgid "Modify information about an IPA server." +msgid "Modify an existing IPA service." +msgstr "Modificar informação acerca de um servidor IPA" + +msgid "Remove hosts that can manage this service." +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about an IPA service." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Sudo Command" +msgstr "Tópico ou Comando" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for Sudo Commands." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Modify Sudo Command." +msgstr "Tópico ou Comando" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +msgid "Group description" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Commands" +msgstr "Nome do comando" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for Sudo Command Groups." +msgstr "Pesquisar por interligações." + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for users." +msgstr "Pesquisar por interligações." + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "Add conditions to an automember rule." +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about the default (fallback) automember groups." +msgstr "Exibir informação acerca de um grupo nomeado." + +msgid "Delete an automember rule." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for automember rules." +msgstr "Pesquisar por interligações." + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "Display information about an automember rule." +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for existing certificates." +msgstr "Pesquisar por interligações." + +msgid "Match cn attribute in subject" +msgstr "" + +#, fuzzy +#| msgid "%(reason)s" +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +msgid "minimum serial number" +msgstr "" + +msgid "maximum serial number" +msgstr "" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for groups." +msgstr "Pesquisar por interligações." + +#, fuzzy +#| msgid "Search for trusts." +msgid "search for private groups" +msgstr "Pesquisar por interligações." + +#, fuzzy +#| msgid "Search for trusts." +msgid "search for POSIX groups" +msgstr "Pesquisar por interligações." + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "Exibir informação acerca de um grupo nomeado." + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Domain name" +msgstr "Nome do comando" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Shared secret for the trust" +msgstr "Pesquisar por interligações." + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a trust." +msgstr "Exibir informação acerca de um utilizador." + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search domains of the trust" +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Range name" +msgstr "Nome do comando" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for ranges." +msgstr "Pesquisar por interligações." + +msgid "Modify ID range." +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a range." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for OTP token." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about an OTP token." +msgstr "Exibir informação acerca de uma localização IPA" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Command category" +msgstr "Nome do comando" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Sudo Allow Commands" +msgstr "Tópico ou Comando" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for Sudo Rule." +msgstr "Pesquisar por interligações." + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "ACL name" +msgstr "Nome do comando" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for CA ACLs." +msgstr "Pesquisar por interligações." + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for IPA servers." +msgstr "Pesquisar por interligações." + +msgid "Show IPA server." +msgstr "" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a delegation." +msgid "Display information about a named service delegation rule." +msgstr "Exibir informação acerca de uma delegação." + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +#, fuzzy +#| msgid "Display information about a delegation." +msgid "Display information about a named service delegation target." +msgstr "Exibir informação acerca de uma delegação." + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for stage users." +msgstr "Pesquisar por interligações." + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a stage user." +msgstr "Exibir informação acerca de um utilizador." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +#, fuzzy +#| msgid "Modify information about an IPA server." +msgid "Left replication node - an IPA server" +msgstr "Modificar informação acerca de um servidor IPA" + +msgid "Right node" +msgstr "" + +#, fuzzy +#| msgid "Modify information about an IPA server." +msgid "Right replication node - an IPA server" +msgstr "Modificar informação acerca de um servidor IPA" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Session timeout" +msgstr "Erro de sessão" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Replication agreement enabled" +msgstr "não são pertimidas opções" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for topology segments." +msgstr "Pesquisar por interligações." + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for topology suffices." +msgstr "Pesquisar por interligações." + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +msgid "Vault description" +msgstr "" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Vault public key" +msgstr "chave SSh pública inválida" + +msgid "Owner users" +msgstr "" + +msgid "Owner groups" +msgstr "" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +msgid "Transport Certificate" +msgstr "" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +msgid "owner group" +msgstr "" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for vaults." +msgstr "Pesquisar por interligações." + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a vault." +msgstr "Exibir informação acerca de um utilizador." + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a vault container." +msgstr "Exibir informação acerca de um utilizador." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for Certificate Profiles." +msgstr "Pesquisar por interligações." + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for topology suffixes." +msgstr "Pesquisar por interligações." + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "Comando não implementado" + +#, fuzzy +#| msgid "Identity" +msgid "Quantity" +msgstr "Identidade" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for entitlement accounts." +msgstr "Pesquisar por interligações." + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "Comando não implementado" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "Tipo de permissão" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "campo GECOS" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "erro no servidor '%(server)s': %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords do not match!" +msgstr "As palavras-passe não correspondem" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "Tópico ou Comando" + +msgid "The topic or command name." +msgstr "O nome do tópico ou do comando" + +msgid "Topic commands:" +msgstr "Comandos do tópico:" + +msgid "To get command help, use:" +msgstr "Para obter ajuda do comando, utilize:" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "Nome do comando" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "Uma lista de entradas LDAP" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "Cliente %(cver)s incompatível com servidor %(sver)s no '%(server)s'" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "erro no servidor '%(server)s': %(error)s" + +msgid "an internal error has occurred" +msgstr "ocorreu um erro interno " + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "ocorreu um erro interno no servidor em '%(server)s'" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "comando desconhecido '%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "erro no servidor '%(server)s': %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "não é possível ligar a '%(uri)s': %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Pedido JSON-RPC inválido: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Referenciador HTTP ausente ou inválido,%(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Erro Kerberos: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "Pedido expirado" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "Erro de sessão" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Acesso insuficiente: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' é obrigatório" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "'%(name)s' inválido: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "As palavras-passe não correspondem" + +msgid "Command not implemented" +msgstr "Comando não implementado" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Esta entrada já existe" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "Este comando requer acesso \"root\"" + +#, fuzzy +#| msgid "This entry is already a member" +msgid "This is already a posix group" +msgstr "Esta entrada já é um membro" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "Esta entrada já está ativada" + +msgid "This entry is already disabled" +msgstr "Esta entrada já está desativada" + +msgid "This entry cannot be enabled or disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" + +msgid "This entry is not a member" +msgstr "Esta entrada não é um membro" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "Esta entrada já é um membro" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +#, fuzzy +#| msgid "This entry is already a member" +msgid "This group already allows external members" +msgstr "Esta entrada já é um membro" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(info)s" +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, fuzzy +#| msgid "options are not allowed" +msgid "modifying primary key is not allowed" +msgstr "não são pertimidas opções" + +#, fuzzy, python-format +#| msgid "Only one value is allowed" +msgid "%(attr)s: Only one value allowed." +msgstr "Só é permitido um valor" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "" + +msgid "Already registered" +msgstr "Já registado" + +msgid "Not registered yet" +msgstr "Ainda não registado" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "tipo incorreto" + +msgid "Only one value is allowed" +msgstr "Só é permitido um valor" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Leading and trailing spaces are not allowed" +msgstr "não são pertimidas opções" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "O nome de ficheiro está em branco" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "chave SSh pública inválida" + +msgid "options are not allowed" +msgstr "não são pertimidas opções" + +msgid "invalid hostmask" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "erro no servidor '%(server)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "invalid domain-name: %s" +msgstr "'%(name)s' inválido: %(error)s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key named %(key)s already exists" +msgstr "Esta entrada já existe" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "Só é permitido um valor" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "permission \"%(value)s\" already exists" +msgstr "Esta entrada já existe" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "is required" +msgstr "'%(name)s' é obrigatório" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +#, fuzzy +#| msgid "Forward policy" +msgid "DNS Forward Zone" +msgstr "Política de reencaminhamento" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for DNS servers." +msgstr "Pesquisar por interligações." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Display configuration of a DNS server." +msgstr "Exibir informação acerca do servidor proxy RADIUS." + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "givenname is required" +msgstr "'%(name)s' é obrigatório" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "sn is required" +msgstr "'%(name)s' é obrigatório" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "A list of LDAP entries" +msgid "A list of ACI values" +msgstr "Uma lista de entradas LDAP" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +msgid "ACI prefix is required" +msgstr "" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "não são pertimidas opções" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "'%(name)s' inválido: %(error)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%s\" not allowed" +msgstr "não são pertimidas opções" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "erro no servidor '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Permission type" +msgid "" +"\n" +"Permissions\n" +msgstr "Tipo de permissão" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "command" +msgstr "Comandos do tópico:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "commands" +msgstr "Comandos do tópico:" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo command" +msgstr "Comandos do tópico:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo commands" +msgstr "Comandos do tópico:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "Sudo Commands" +msgstr "Comandos do tópico:" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Location name" +msgstr "Nome do comando" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Delete an IPA location." +msgstr "Exibir informação acerca de uma localização IPA" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "" + +msgid "Modify information about an IPA location." +msgstr "Modificar informação acerca de uma localização IPA" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for IPA locations." +msgstr "Pesquisar por interligações." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display information about an IPA location." +msgstr "Exibir informação acerca de uma localização IPA" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Method name" +msgstr "Nome do comando" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a command." +msgstr "Exibir informação acerca de um utilizador." + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for commands." +msgstr "Pesquisar por interligações." + +msgid "Return command defaults" +msgstr "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about a class." +msgstr "Exibir informação acerca de um utilizador." + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for classes." +msgstr "Pesquisar por interligações." + +#, fuzzy +#| msgid "Display information about a delegation." +msgid "Display information about a help topic." +msgstr "Exibir informação acerca de uma delegação." + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for help topics." +msgstr "Pesquisar por interligações." + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "CLI name" +msgstr "Nome do comando" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a command parameter." +msgstr "Exibir informação acerca de um grupo nomeado." + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a command output." +msgstr "Exibir informação acerca de um grupo nomeado." + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for command outputs." +msgstr "Pesquisar por interligações." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +msgid "Subject DNS name" +msgstr "" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a user." +msgid "Display information about an ID override." +msgstr "Exibir informação acerca de um utilizador." + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + msgid "" "\n" " Display information about an automember rule.\n" @@ -23,6 +17899,3452 @@ msgstr "" " Exibir informação acerca de uma regra de membro automática.\n" " " +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Display information about an automember rule.\n" +#| " " +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Exibir informação acerca de uma regra de membro automática.\n" +" " + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +#, fuzzy +#| msgid "Search for trusts." +msgid "Search for CAs." +msgstr "Pesquisar por interligações." + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "IPA CA cannot be disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" + +msgid "Enable a CA." +msgstr "" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#, fuzzy +#| msgid "%(exception)s" +msgid "Actions" +msgstr "%(exception)s" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove" +msgstr "Remover interligações" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "Configurações de Identidade" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Record Settings" +msgstr "Configurações de Identidade" + +#, fuzzy, python-brace-format +#| msgid "Identity Settings" +msgid "${entity} ${primary_key} Settings" +msgstr "Configurações de Identidade" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Operations Error" +msgstr "Erro de sessão" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Identity" +msgid "Edit ${entity}" +msgstr "Identidade" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Validation error" +msgstr "Erro de sessão" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "ocorreu um erro interno " + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Settings" +msgstr "Configurações de Identidade" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +#| msgid "Permission type" +msgid "Add permission" +msgstr "Tipo de permissão" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove permissions" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove privileges" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Role Settings" +msgstr "Configurações de Identidade" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove roles" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Remove self service permissions" +msgstr "Exibir informação acerca de uma permissão de serviço automático." + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove automount keys" +msgstr "Remover interligações" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove automount maps" +msgstr "Remover interligações" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Common Name" +msgstr "Nome do comando" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "" + +msgid "Minimum serial number" +msgstr "" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +msgid "View Certificate" +msgstr "" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +msgid "Group Options" +msgstr "" + +msgid "Search Options" +msgstr "" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +#, fuzzy +#| msgid "%(exception)s" +msgid "Service Options" +msgstr "%(exception)s" + +msgid "User Options" +msgstr "" + +#, fuzzy +#| msgid "Forward policy" +msgid "Forward first" +msgstr "Política de reencaminhamento" + +msgid "Forwarding disabled" +msgstr "" + +#, fuzzy +#| msgid "Forward policy" +msgid "Forward only" +msgstr "Política de reencaminhamento" + +#, fuzzy +#| msgid "%(exception)s" +msgid "Options" +msgstr "%(exception)s" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove Permission" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove user groups" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove HBAC rules" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Host Settings" +msgstr "Configurações de Identidade" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove hosts" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove host groups" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Netgroup Settings" +msgstr "Configurações de Identidade" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove netgroups" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "OTP Token Settings" +msgstr "Configurações de Identidade" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove OTP tokens" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +#, fuzzy +#| msgid "Permission type" +msgid "Permission settings" +msgstr "Tipo de permissão" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Set public key" +msgstr "chave SSh pública inválida" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "Adicionar política de palavra-passe" + +msgid "Password Policy" +msgstr "Política de Palavra-passe" + +#, fuzzy +#| msgid "password policy" +msgid "Remove password policies" +msgstr "política de palavra-passe" + +msgid "Add ID range" +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Range Settings" +msgstr "Configurações de Identidade" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove ID ranges" +msgstr "Remover interligações" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "IPA trust" +msgstr "interligações" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +msgid "Server Roles" +msgstr "" + +msgid "Server Role" +msgstr "" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Service Settings" +msgstr "Configurações de Identidade" + +msgid "Provisioning" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove services" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "SSH public keys" +msgstr "chave SSh pública inválida" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "SSH public key:" +msgstr "chave SSh pública inválida" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove preserved users" +msgstr "Remover interligações" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove stage users" +msgstr "Remover interligações" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Any Command" +msgstr "Nome do comando" + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove sudo rules" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove sudo options" +msgstr "Remover interligações" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "Add trust" +msgstr "interligações" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Trust Settings" +msgstr "Configurações de Identidade" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "Remover interligações" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +#, fuzzy +#| msgid "Trusts" +msgid "Trust status" +msgstr "Interligações" + +#, fuzzy +#| msgid "Trusts" +msgid "Trust type" +msgstr "Interligações" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Account Settings" +msgstr "Configurações de Identidade" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Identity Settings" +msgid "Contact Settings" +msgstr "Configurações de Identidade" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove users" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +#, fuzzy +#| msgid "Remove trusts" +msgid "Remove vaults" +msgstr "Remover interligações" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +msgid "Service Vaults" +msgstr "" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "Current password is required" +msgstr "'%(name)s' é obrigatório" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "New password is required" +msgstr "'%(name)s' é obrigatório" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "As palavras-passe não correspondem" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "Identidade" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "Política" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "Interligações" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +msgid "Format error" +msgstr "" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + msgid "" "\n" "Get information about installed IPA servers.\n" @@ -30,209 +21352,2471 @@ msgstr "" "\n" "Obter informação acerca dos servidores IPA.\n" -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "Cliente %(cver)s incompatível com servidor %(sver)s no '%(server)s'" +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +msgid "server" +msgstr "" -#, python-format -msgid "%(line)s" -msgstr "%(line)s" +msgid "servers" +msgstr "" -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" +msgid "IPA Servers" +msgstr "" -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' é obrigatório" +msgid "Server location" +msgstr "" -msgid "A list of LDAP entries" -msgstr "Uma lista de entradas LDAP" +msgid "Service weight" +msgstr "" -msgid "Add password policy" -msgstr "Adicionar política de palavra-passe" +msgid "Weight for server services" +msgstr "" -msgid "Already registered" -msgstr "Já registado" +msgid "Service relative weight" +msgstr "" -msgid "Command name" -msgstr "Nome do comando" +msgid "Relative weight for server services (counts per location)" +msgstr "" -msgid "Command not implemented" -msgstr "Comando não implementado" +msgid "Enabled server roles" +msgstr "" -msgid "Display information about a DNS forward zone." -msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." - -msgid "Display information about a DNS zone (SOA record)." -msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." - -msgid "Display information about a RADIUS proxy server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -msgid "Display information about a delegation." -msgstr "Exibir informação acerca de uma delegação." - -msgid "Display information about a named group." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "Display information about a self-service permission." -msgstr "Exibir informação acerca de uma permissão de serviço automático." - -msgid "Display information about a user." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Display information about an IPA location." -msgstr "Exibir informação acerca de uma localização IPA" - -msgid "Display information about password policy." -msgstr "Exibir informação acerca da política de palavra-passe." - -msgid "Filename is empty" -msgstr "O nome de ficheiro está em branco" - -msgid "Forward policy" -msgstr "Política de reencaminhamento" - -msgid "GECOS field" -msgstr "campo GECOS" - -msgid "Identity" -msgstr "Identidade" - -msgid "Identity Settings" -msgstr "Configurações de Identidade" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Acesso insuficiente: %(info)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Pedido JSON-RPC inválido: %(error)s" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Erro Kerberos: %(major)s/%(minor)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Referenciador HTTP ausente ou inválido,%(referer)s" - -msgid "Modify information about an IPA location." -msgstr "Modificar informação acerca de uma localização IPA" +msgid "List of enabled roles" +msgstr "" msgid "Modify information about an IPA server." msgstr "Modificar informação acerca de um servidor IPA" -msgid "Not registered yet" -msgstr "Ainda não registado" - -msgid "Only one value is allowed" -msgstr "Só é permitido um valor" - -msgid "Password Policy" -msgstr "Política de Palavra-passe" - -msgid "Passwords do not match" -msgstr "As palavras-passe não correspondem" - -msgid "Permission type" -msgstr "Tipo de permissão" - -msgid "Policy" -msgstr "Política" - -msgid "Remove trusts" -msgstr "Remover interligações" - -msgid "Search for trusts." -msgstr "Pesquisar por interligações." - -msgid "Session error" -msgstr "Erro de sessão" - -msgid "The topic or command name." -msgstr "O nome do tópico ou do comando" - -msgid "This command requires root access" -msgstr "Este comando requer acesso \"root\"" - -msgid "This entry already exists" -msgstr "Esta entrada já existe" - -msgid "This entry cannot be enabled or disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" - -msgid "This entry is already a member" -msgstr "Esta entrada já é um membro" - -msgid "This entry is already disabled" -msgstr "Esta entrada já está desativada" - -msgid "This entry is already enabled" -msgstr "Esta entrada já está ativada" - -msgid "This entry is not a member" -msgstr "Esta entrada não é um membro" - -msgid "Ticket expired" -msgstr "Pedido expirado" - -msgid "To get command help, use:" -msgstr "Para obter ajuda do comando, utilize:" - -msgid "Topic commands:" -msgstr "Comandos do tópico:" - -msgid "Topic or Command" -msgstr "Tópico ou Comando" - -msgid "Trusts" -msgstr "Interligações" - -msgid "an internal error has occurred" -msgstr "ocorreu um erro interno " +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" #, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "ocorreu um erro interno no servidor em '%(server)s'" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" #, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "não é possível ligar a '%(uri)s': %(error)s" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" #, python-format -msgid "error on server '%(server)s': %(error)s" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" msgstr "erro no servidor '%(server)s': %(error)s" -msgid "incorrect type" -msgstr "tipo incorreto" +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" #, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "'%(name)s' inválido: %(error)s" +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" -msgid "invalid SSH public key" -msgstr "chave SSh pública inválida" +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" -msgid "options are not allowed" -msgstr "não são pertimidas opções" +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, fuzzy +#| msgid "This entry is already enabled" +msgid "Server has already been deleted" +msgstr "Esta entrada já está ativada" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +msgid "Member principals" +msgstr "" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" msgid "password policy" msgstr "política de palavra-passe" +#, fuzzy +#| msgid "password policy" +msgid "password policies" +msgstr "política de palavra-passe" + +#, fuzzy +#| msgid "Password Policy" +msgid "Password Policies" +msgstr "Política de Palavra-passe" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +#, fuzzy +#| msgid "Add password policy" +msgid "cannot delete global password policy" +msgstr "Adicionar política de palavra-passe" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +#, fuzzy +#| msgid "Trusts" +msgid "AD Trust setup" +msgstr "Interligações" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "trust" +msgstr "interligações" + msgid "trusts" msgstr "interligações" +#, fuzzy +#| msgid "Trusts" +msgid "Trust" +msgstr "Interligações" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + #, python-format -msgid "unknown command '%(name)s'" -msgstr "comando desconhecido '%(name)s'" +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "trust type" +msgstr "interligações" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +#, fuzzy +#| msgid "trusts" +msgid "trust domains" +msgstr "interligações" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a named group." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Exibir informação acerca de um grupo nomeado." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +msgid "Delegation" +msgstr "" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "não são pertimidas opções" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "%s: user is already preserved" +msgstr "Esta entrada já está ativada" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "user \"%s\" is already active" +msgstr "Esta entrada já está ativada" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already disabled" +msgid "Account disabled: %(disabled)s" +msgstr "Esta entrada já está desativada" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Trusts" +msgid "Trust setup" +msgstr "Interligações" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +#, fuzzy +#| msgid "Trusts" +msgid "Trusted forest" +msgstr "Interligações" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/pt_BR.po b/po/pt_BR.po index bb3c76e96..b996eee89 100644 --- a/po/pt_BR.po +++ b/po/pt_BR.po @@ -5,7 +5,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2020-08-25 16:29+0000\n" "Last-Translator: Daniel Lara Souza \n" "Language-Team: Portuguese (Brazil) \".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +msgid "description" +msgstr "" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create a new automount key." +msgstr "Cria um novo comando sudo." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for an automount key." +msgstr "Pesquisa por comandos." + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create a new automount location." +msgstr "Cria um novo comando sudo." + +msgid "Delete an automount location." +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for an automount location." +msgstr "Pesquisa por comandos." + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display an automount location." +msgstr "Exibe informações sobre um comando." + +msgid "Generate automount files for a specific location." +msgstr "" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create a new automount map." +msgstr "Cria um novo comando sudo." + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for an automount map." +msgstr "Pesquisa por comandos." + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display an automount map." +msgstr "Exibe informações sobre um comando." + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +#, fuzzy +#| msgid "Default" +msgid "Default shell" +msgstr "Padrão" + +msgid "Default shell for new users" +msgstr "" + +#, fuzzy +#| msgid "The default users group cannot be removed" +msgid "Default users group" +msgstr "O grupo de usuários padrão não pode ser removido" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +#, fuzzy +#| msgid "Search for help topics." +msgid "Search for delegations." +msgstr "Pesquisa por tópicos de ajuda." + +msgid "Modify a delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a delegation." +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Zone name" +msgstr "Nome do comando" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Record name" +msgstr "Nome do comando" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Record type" +msgstr "tipo incorreto" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +msgid "Service" +msgstr "" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +msgid "NS Hostname" +msgstr "" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "TLSA Certificate Association Data" msgstr "" "\n" "Operações de certificado IPA\n" -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s não contém \"%(value)s\"" +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "Certificate Association Data" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create new DNS forward zone." +msgstr "Cria um novo comando sudo." + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +msgid "Permission value" +msgstr "" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for DNS forward zones." +msgstr "Pesquisa por comandos." + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about a DNS forward zone." +msgstr "Exibe informações sobre um comando." + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for DNS resources." +msgstr "Pesquisa por classes." + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Disable DNS Zone." +msgstr "deve ser um nome de DNS" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for forward zones only" +msgstr "Pesquisa por comandos." + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about a DNS zone (SOA record)." +msgstr "Exibe informações sobre um comando." + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "" + +msgid "User category the rule applies to" +msgstr "" + +msgid "Host category" +msgstr "" + +msgid "Host category the rule applies to" +msgstr "" + +msgid "Service category" +msgstr "" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +msgid "User Groups" +msgstr "" + +msgid "Hosts" +msgstr "" + +msgid "Host Groups" +msgstr "" + +msgid "Services" +msgstr "" + +msgid "Service Groups" +msgstr "" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +msgid "member group" +msgstr "" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for HBAC rules." +msgstr "Pesquisa por classes." + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "" + +msgid "HBAC service" +msgstr "" + +msgid "HBAC service description" +msgstr "" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for HBAC services." +msgstr "Pesquisa por classes." + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about an HBAC service." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about an HBAC service group." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this host" +msgstr "Uma descrição deste comando" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +#, fuzzy +#| msgid "Confirm (password)" +msgid "User password" +msgstr "Confirmar (senha)" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +#, fuzzy +#| msgid "Confirm (password)" +msgid "Random password" +msgstr "Confirmar (senha)" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Certificate" +msgstr "deve ser um certificado" + +msgid "Base-64 encoded server certificate" +msgstr "" + +msgid "Principal name" +msgstr "" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "Hosts allowed to create keytab" +msgstr "Não permitido em uma entrada não-folha" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +msgid "Delete a host." +msgstr "" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for hosts." +msgstr "Pesquisa por classes." + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +msgid "host group" +msgstr "" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +msgid "netgroup" +msgstr "" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Modify information about a host." +msgstr "Exibe informações sobre uma classe." + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a host." +msgstr "Exibe informações sobre uma classe." + +#, fuzzy +#| msgid "must be a certificate" +msgid "file to store certificate in" +msgstr "deve ser um certificado" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "Host-group" +msgstr "" + +msgid "Name of host-group" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this host-group" +msgstr "Uma descrição deste comando" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +#, fuzzy +#| msgid "Search for help topics." +msgid "Search for hostgroups." +msgstr "Pesquisa por tópicos de ajuda." + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about a hostgroup." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +#, fuzzy +#| msgid "must be dictionary" +msgid "Home directory" +msgstr "deve ser um dicionário" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about an Group ID override." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for an User ID override." +msgstr "Pesquisa por classes." + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about an User ID override." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +msgid "hostgroups" +msgstr "" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for an ID View." +msgstr "Pesquisa por classes." + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about an ID View." +msgstr "Exibe informações sobre uma classe." + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +#, fuzzy +#| msgid "Confirm (password)" +msgid "bind password" +msgstr "Confirmar (senha)" + +msgid "Bind DN" +msgstr "" + +msgid "User container" +msgstr "" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "CA certificate" +msgstr "deve ser um certificado" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "Netgroup name" +msgstr "" + +msgid "Netgroup description" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "NIS domain name" +msgstr "Nome do comando" + +msgid "IPA unique ID" +msgstr "" + +msgid "Member netgroups" +msgstr "" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +msgid "Member Group" +msgstr "" + +msgid "Member Host" +msgstr "" + +msgid "Member Hostgroup" +msgstr "" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +msgid "member netgroup" +msgstr "" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +#, fuzzy +#| msgid "Search for help topics." +msgid "Search for a netgroup." +msgstr "Pesquisa por tópicos de ajuda." + +#, fuzzy +#| msgid "Search for commands." +msgid "search for managed groups" +msgstr "Pesquisa por comandos." + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about a netgroup." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +#, fuzzy +#| msgid "Confirm (password)" +msgid "One Time Password" +msgstr "Confirmar (senha)" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +msgid "Effective attributes" +msgstr "" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Bind rule type" +msgstr "tipo incorreto" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use extratargetfilter" +msgstr "Descontinuado; use %s" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use ipapermlocation" +msgstr "Descontinuado; use %s" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use ipapermright" +msgstr "Descontinuado; use %s" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "" + +msgid "Delete a permission." +msgstr "" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for permissions." +msgstr "Pesquisa por classes." + +msgid "Modify a permission." +msgstr "" + +#, fuzzy +#| msgid "Credentials cache permissions incorrect" +msgid "Rename the permission object" +msgstr "Permissões incorretas de cache de credenciais" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a permission." +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "" + +msgid "Privilege description" +msgstr "" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +#, fuzzy +#| msgid "No file to read" +msgid "roles to add" +msgstr "Nenhum arquivo para ler" + +msgid "Add permissions to a privilege." +msgstr "" + +msgid "permission" +msgstr "" + +msgid "permissions" +msgstr "" + +msgid "Number of permissions added" +msgstr "" + +msgid "Delete a privilege." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for privileges." +msgstr "Pesquisa por classes." + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +#, fuzzy +#| msgid "No file to read" +msgid "roles to remove" +msgstr "Nenhum arquivo para ler" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a privilege." +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +#, fuzzy +#| msgid "Password is too long!\n" +msgid "Password history size" +msgstr "A senha é longa demais!\n" + +#, fuzzy +#| msgid "Search for classes." +msgid "Character classes" +msgstr "Pesquisa por classes." + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "Add a new group password policy." +msgstr "Um grupo gerenciado não pode ter uma política de senhas." + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "Delete a group password policy." +msgstr "Um grupo gerenciado não pode ter uma política de senhas." + +#, fuzzy +#| msgid "Search for help topics." +msgid "Search for group password policies." +msgstr "Pesquisa por tópicos de ajuda." + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "Modify a group password policy." +msgstr "Um grupo gerenciado não pode ter uma política de senhas." + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about password policy." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this RADIUS proxy server" +msgstr "Uma descrição deste comando" + +msgid "Server" +msgstr "" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +msgid "Retries" +msgstr "" + +msgid "The number of times to retry authentication" +msgstr "" + +msgid "User attribute" +msgstr "" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a RADIUS proxy server." +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +#, fuzzy +#| msgid "Delete Sudo Command." +msgid "Delete domain" +msgstr "Exclui comando sudo." + +#, fuzzy +#| msgid "Modify Sudo Command." +msgid "Modify realm domains." +msgstr "Modifica comando sudo." + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this role-group" +msgstr "Uma descrição deste comando" + +msgid "Member users" +msgstr "" + +msgid "Member groups" +msgstr "" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +msgid "Delete a role." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for roles." +msgstr "Pesquisa por classes." + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a role." +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for a self-service permission." +msgstr "Pesquisa por classes." + +msgid "Modify a self-service permission." +msgstr "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about a self-service permission." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for SELinux User Maps." +msgstr "Pesquisa por classes." + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Service principal" +msgstr "O principal do serviço é necessário" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for IPA services." +msgstr "Pesquisa por classes." + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about an IPA service." +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Command" +msgstr "Comandos sudo" + +msgid "A description of this command" +msgstr "Uma descrição deste comando" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Command Groups" +msgstr "Comandos sudo" + +msgid "Create new Sudo Command." +msgstr "Cria um novo comando sudo." + +msgid "Delete Sudo Command." +msgstr "Exclui comando sudo." + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for Sudo Commands." +msgstr "Pesquisa por comandos." + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "Modifica comando sudo." + +#, fuzzy +#| msgid "Modify Sudo Command." +msgid "Display Sudo Command." +msgstr "Modifica comando sudo." + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Command Group" +msgstr "Comandos sudo" + +msgid "Group description" +msgstr "" + +#, fuzzy +#| msgid "commands" +msgid "Commands" +msgstr "comandos" + +#, fuzzy +#| msgid "sudo commands" +msgid "Member Sudo commands" +msgstr "comandos sudo" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create new Sudo Command Group." +msgstr "Cria um novo comando sudo." + +#, fuzzy +#| msgid "Delete Sudo Command." +msgid "Add members to Sudo Command Group." +msgstr "Exclui comando sudo." + +#, fuzzy +#| msgid "sudo command" +msgid "member sudo command" +msgstr "comando sudo" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo commands to add" +msgstr "comandos sudo" + +#, fuzzy +#| msgid "Delete Sudo Command." +msgid "Delete Sudo Command Group." +msgstr "Exclui comando sudo." + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for Sudo Command Groups." +msgstr "Pesquisa por comandos." + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify Sudo Command." +msgid "Modify Sudo Command Group." +msgstr "Modifica comando sudo." + +msgid "Remove members from Sudo Command Group." +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo commands to remove" +msgstr "comandos sudo" + +#, fuzzy +#| msgid "Modify Sudo Command." +msgid "Display Sudo Command Group." +msgstr "Modifica comando sudo." + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +#, fuzzy +#| msgid "CLI name" +msgid "Last name" +msgstr "Nome de CLI" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Kerberos principal" +msgstr "deve ser um principal de Kerberos" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Kerberos principal expiration" +msgstr "deve ser um principal de Kerberos" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "" + +msgid "RADIUS proxy username" +msgstr "" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +msgid "Member of groups" +msgstr "" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +msgid "Delete a user." +msgstr "" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for users." +msgstr "Pesquisa por classes." + +msgid "Self" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Display user record for current Kerberos principal" +msgstr "deve ser um principal de Kerberos" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a user." +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "A description of this auto member rule" +msgstr "Uma descrição deste comando" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +msgid "Attribute Key" +msgstr "" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about the default (fallback) automember groups." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "Delete an automember rule." +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for automember rules." +msgstr "Pesquisa por comandos." + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about an automember rule." +msgstr "Exibe informações sobre um comando." + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +#, fuzzy +#| msgid "Search for help topics." +msgid "Search for existing certificates." +msgstr "Pesquisa por tópicos de ajuda." + +msgid "Match cn attribute in subject" +msgstr "" + +#, fuzzy +#| msgid "%(reason)s" +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "minimum serial number" +msgstr "deve ser um número decimal" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "maximum serial number" +msgstr "deve ser um número decimal" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Submit a certificate signing request." +msgstr "deve ser uma solicitação de assinatura de certificado" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Revoke a certificate." +msgstr "deve ser um certificado" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Check the status of a certificate signing request." +msgstr "deve ser uma solicitação de assinatura de certificado" + +#, fuzzy +#| msgid "Required" +msgid "Request id" +msgstr "Obrigatório" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create a new group." +msgstr "Cria um novo comando sudo." + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "" + +msgid "Detach a managed group from a user." +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for groups." +msgstr "Pesquisa por comandos." + +#, fuzzy +#| msgid "Search for help topics." +msgid "search for private groups" +msgstr "Pesquisa por tópicos de ajuda." + +#, fuzzy +#| msgid "Search for help topics." +msgid "search for POSIX groups" +msgstr "Pesquisa por tópicos de ajuda." + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about a named group." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +#| msgid "CLI name" +msgid "NetBIOS name" +msgstr "Nome de CLI" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Domain name" +msgstr "Nome do comando" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +msgid "Delete a trust." +msgstr "" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for trusts." +msgstr "Pesquisa por classes." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a trust." +msgstr "Exibe informações sobre uma classe." + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Range name" +msgstr "Nome do comando" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for ranges." +msgstr "Pesquisa por classes." + +#, fuzzy +#| msgid "Modify Sudo Command." +msgid "Modify ID range." +msgstr "Modifica comando sudo." + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about a range." +msgstr "Exibe informações sobre um comando." + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "(deprecated)" +msgstr "Opções obsoletas" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for OTP token." +msgstr "Pesquisa por comandos." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about an OTP token." +msgstr "Exibe informações sobre um comando." + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Command category" +msgstr "Nome do comando" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo order" +msgstr "Comandos sudo" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Allow Commands" +msgstr "Comandos sudo" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Deny Commands" +msgstr "Comandos sudo" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Allow Command Groups" +msgstr "Comandos sudo" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Deny Command Groups" +msgstr "Comandos sudo" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create new Sudo Rule." +msgstr "Cria um novo comando sudo." + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "member sudo command group" +msgstr "comando sudo" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups to add" +msgstr "comandos sudo" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Delete Sudo Command." +msgid "Delete Sudo Rule." +msgstr "Exclui comando sudo." + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for Sudo Rule." +msgstr "Pesquisa por classes." + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify Sudo Command." +msgid "Modify Sudo Rule." +msgstr "Modifica comando sudo." + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups to remove" +msgstr "comandos sudo" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "CLI name" +msgid "ACL name" +msgstr "Nome de CLI" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +#, fuzzy +#| msgid "Create new Sudo Command." +msgid "Create a new CA ACL." +msgstr "Cria um novo comando sudo." + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +#, fuzzy +#| msgid "%(name)s certificate is not valid" +msgid "Certificate Profiles to add" +msgstr "%(name)s certificado não é válido" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for CA ACLs." +msgstr "Pesquisa por classes." + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "" + +msgid "IPA server hostname" +msgstr "" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +msgid "Delete IPA server." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for IPA servers." +msgstr "Pesquisa por classes." + +msgid "Show IPA server." +msgstr "" + +#, fuzzy +#| msgid "%(name)s certificate is not valid" +msgid "Add new certificates to a service" +msgstr "%(name)s certificado não é válido" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "member principal" +msgstr "deve ser um principal de Kerberos" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for service delegations rule." +msgstr "Pesquisa por classes." + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a named service delegation rule." +msgstr "Exibe informações sobre uma classe." + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a named service delegation target." +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for stage users." +msgstr "Pesquisa por classes." + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a stage user." +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +msgid "Attributes to strip" +msgstr "" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +msgid "Attributes to replicate" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Session timeout" +msgstr "Erro de sessão" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for topology segments." +msgstr "Pesquisa por classes." + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +#, fuzzy +#| msgid "Search for help topics." +msgid "Search for topology suffices." +msgstr "Pesquisa por tópicos de ajuda." + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +msgid "Vault description" +msgstr "" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +msgid "Owner groups" +msgstr "" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Transport Certificate" +msgstr "deve ser um certificado" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +msgid "owner group" +msgstr "" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +msgid "Delete a vault." +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for vaults." +msgstr "Pesquisa por classes." + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +#, fuzzy +#| msgid "The default users group cannot be removed" +msgid "Owners that could not be removed" +msgstr "O grupo de usuários padrão não pode ser removido" + +msgid "Number of owners removed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display information about a vault." +msgstr "Exibe informações sobre uma classe." + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about a vault container." +msgstr "Exibe informações sobre um comando." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +msgid "Profile description" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "Brief description of this profile" +msgstr "Uma descrição deste comando" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Store issued certificates" +msgstr "deve ser um certificado" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Delete a Certificate Profile." +msgstr "deve ser um certificado" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for Certificate Profiles." +msgstr "Pesquisa por classes." + +#, fuzzy +#| msgid "must be a certificate" +msgid "Import a Certificate Profile." +msgstr "deve ser um certificado" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +msgid "Remote server name" +msgstr "" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for topology suffixes." +msgstr "Pesquisa por classes." + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "SOA record class" +msgstr "Pesquisa por classes." + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "Comando não implementado" + +msgid "Quantity" +msgstr "" + +#, fuzzy +#| msgid "Search for help topics." +msgid "Search for entitlement accounts." +msgstr "Pesquisa por tópicos de ajuda." + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "Comando não implementado" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +msgid "Permission type" +msgstr "" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" #, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Sintaxe inválida." +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" #, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Apenas um valor permitido." +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "this option is deprecated" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "esta opção foi descontinuada" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "DNS server %(server)s: %(error)s." +msgstr "erro no servidor \"%(server)s\": %(error)s" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Server removal aborted: %(reason)s." +msgid "Search result has been truncated: %(reason)s" +msgstr "Remoção do servidor abortada: %(reason)s." + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "The character %(char)r is not allowed." +msgid "The certificate for %(ca)s is not available on this server." +msgstr "O caractere %(char)r não é permitido." + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +msgid "Passwords do not match!" +msgstr "As senhas não coincidem!" + +msgid "No matching entries found" +msgstr "Não foram encontradas entradas coincidentes" + +msgid "Topic or Command" +msgstr "Tópico ou comando" + +msgid "The topic or command name." +msgstr "O nome do tópico ou comando." + +msgid "Topic commands:" +msgstr "Comandos do tópico:" + +msgid "To get command help, use:" +msgstr "Para obter ajuda do comando, use:" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "Nome do comando" + +msgid "Positional arguments" +msgstr "Argumentos posicionais" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "Opções obsoletas" + +msgid "No file to read" +msgstr "Nenhum arquivo para ler" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" "Cliente %(cver)s incompatível com o servidor %(sver)s em \"%(server)s\"" +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "erro desconhecido %(code)d de %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "ocorreu um erro interno" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "ocorreu um erro interno no servidor em \"%(server)s\"" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "comando desconhecido \"%(name)s\"" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "erro no servidor \"%(server)s\": %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "não foi possível se conectar a \"%(uri)s\": %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Solicitação JSON-RPC inválida: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "erro ao ordenar dados para transporte XML-RPC: %(error)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "HTTP Referer faltando ou inválido, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" +"O sistema de codificação deve ser UTF-8, não tendo suporte a \"%(encoding)s" +"\". Defina LC_ALL=\"C.UTF-8\", ou LC_ALL=\"\" e LC_CTYPE=\"C.UTF-8\"." + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Erro de Kerberos: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "não foram recebidas as credenciais de Kerberos" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" +"O serviço \"%(service)s\" não foi encontrado no banco de dados de Kerberos" + +msgid "No credentials cache found" +msgstr "Nenhum cache de credenciais encontrado" + +msgid "Ticket expired" +msgstr "Tíquete expirado" + +msgid "Credentials cache permissions incorrect" +msgstr "Permissões incorretas de cache de credenciais" + +msgid "Bad format in credentials cache" +msgstr "Formato inválido no cache de credenciais" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Não foi possível resolver KDC para o reino solicitado" + +msgid "Session error" +msgstr "Erro de sessão" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "O principal %(principal)s não conseguiu ser autenticado: %(message)s" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Acesso insuficiente: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "o comando \"%(name)s\" leva nenhum argumento" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "o comando \"%(name)s\" leva no máximo %(count)d argumento" +msgstr[1] "o comando \"%(name)s\" leva no máximo %(count)d argumentos" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "sobreposição de argumentos e opções: %(names)s" + +#, python-format +msgid "'%(name)s' is required" +msgstr "\"%(name)s\" é necessário" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "\"%(name)s\" inválido: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "a api não possui tal espaço de nomes: \"%(name)s\"" + +msgid "Passwords do not match" +msgstr "As senhas não coincidem" + +msgid "Command not implemented" +msgstr "Comando não implementado" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "O cliente não está configurado. Execute ipa-client-install." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Não foi possível obter %(name)s interativamente" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "O comando \"%(name)s\" foi descontinuado" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" +"O domínio \"%(domain)s\" não é um domínio raiz para a floresta \"%(forest)s\"" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Esta entrada já existe" + +msgid "You must enroll a host in order to create a host service" +msgstr "Você deve registrar um host para criar um serviço de host" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"O principal do serviço não é da forma: serviço/nome de host totalmente " +"qualificado: %(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" +"O reino para o principal não corresponde ao reino para este servidor IPA" + +msgid "This command requires root access" +msgstr "Este comando requer acesso de root" + +msgid "This is already a posix group" +msgstr "Este já é um grupo posix" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "O principal não é da forma usuário@REINO: \"%(principal)s\"" + +msgid "This entry is already enabled" +msgstr "Esta entrada já está habilitada" + +msgid "This entry is already disabled" +msgstr "Esta entrada já está desabilitada" + +msgid "This entry cannot be enabled or disabled" +msgstr "Esta entrada não pode ser habilitada ou desabilitada" + +msgid "This entry is not a member" +msgstr "Esta entrada não é um membro" + +msgid "A group may not be a member of itself" +msgstr "Um grupo não pode ser um membro de si próprio" + +msgid "This entry is already a member" +msgstr "Esta entrada já é um membro" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Decodificação base64 falhou: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Um grupo não pode ser adicionado como um membro de si próprio" + +msgid "The default users group cannot be removed" +msgstr "O grupo de usuários padrão não pode ser removido" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"A exclusão de um grupo gerenciado não é permitida. Ele deve ser desassociado " +"primeiro." + +msgid "A managed group cannot have a password policy." +msgstr "Um grupo gerenciado não pode ter uma política de senhas." + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "\"%(entry)s\" não tem um certificado." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" +"Não foi possível criar um grupo privado. Um grupo \"%(group)s\" já existe." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Um problema foi encontrado ao verificar se todos os membros eram %(verb)s: " +"%(exc)s" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s não contém \"%(value)s\"" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"O critério de pesquisa não foi específico o suficiente. Esperava 1 e " +"encontrou %(found)d." + +msgid "This group already allows external members" +msgstr "Este grupo já permite membros externos" + +msgid "This group cannot be posix because it is external" +msgstr "Este grupo não pode ser posix porque é externo" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "Este já é um grupo posix e não pode ser convertido para um externo" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Remoção do servidor abortada: %(reason)s." + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s não é suportado para principais %(principal_type)s" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "A solicitação falhou com status %(status)s: %(reason)s" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" +"O conjunto de regras de mapeamento \"%(ruleset)s\" tem mais de uma regra " +"para o auxiliar %(helper)s" + +#, fuzzy, python-format +#| msgid "%(attr)s does not contain '%(value)s'" +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s não contém \"%(value)s\"" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "Nenhum comando nem tópico de ajuda \"%(topic)s\"" + +msgid "change collided with another change" +msgstr "a alteração colidiu com outra alteração" + +msgid "no modifications to be performed" +msgstr "nenhuma modificação para ser realizada" + #, python-format msgid "%(desc)s: %(info)s" msgstr "%(desc)s: %(info)s" -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: arquivo não encontrado" +msgid "limits exceeded for this query" +msgstr "limites excedidos para esta consulta" #, python-format msgid "%(info)s" msgstr "%(info)s" +msgid "modifying primary key is not allowed" +msgstr "a modificação da chave primária não é permitida" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Apenas um valor permitido." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Sintaxe inválida." + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Filtro de pesquisa inválido %(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "Não permitido em uma entrada não-folha" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "%(task)s Tempo limite da tarefa LDAP, DN da tarefa: '%(task_dn)s'" + +msgid "Configured time limit exceeded" +msgstr "Limite de tempo configurado excedido" + +msgid "Configured size limit exceeded" +msgstr "Limite de tamanho configurado excedido" + +msgid "Configured administrative server limit exceeded" +msgstr "Limite de servidor administrativo configurado excedido" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "A operação do certificado não pode ser concluída: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Erro de formato de certificado: %(error)s" + +msgid "Already registered" +msgstr "Já registrado" + +msgid "Not registered yet" +msgstr "Não registrado ainda" + #, python-format msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" msgstr "" @@ -75,532 +12433,61 @@ msgid "%(name)s certificate is not valid" msgstr "%(name)s certificado não é válido" #, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s não é suportado para principais %(principal_type)s" +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" #, python-format -msgid "%(reason)s" +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(reason)s" +msgid "%(exception)s" msgstr "%(reason)s" -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "%(task)s Tempo limite da tarefa LDAP, DN da tarefa: '%(task_dn)s'" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "\"%(entry)s\" não tem um certificado." - -#, python-format -msgid "'%(name)s' is required" -msgstr "\"%(name)s\" é necessário" - -msgid "A description of this command" -msgstr "Uma descrição deste comando" - -msgid "A group may not be a member of itself" -msgstr "Um grupo não pode ser um membro de si próprio" - -msgid "A group may not be added as a member of itself" -msgstr "Um grupo não pode ser adicionado como um membro de si próprio" - -msgid "A managed group cannot have a password policy." -msgstr "Um grupo gerenciado não pode ter uma política de senhas." - #, python-format msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" msgstr "" -"Um problema foi encontrado ao verificar se todos os membros eram %(verb)s: " -"%(exc)s" - -msgid "A string searched in all relevant object attributes" -msgstr "Uma string buscada em todos os atributos de objeto relevantes" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Already registered" -msgstr "Já registrado" - -msgid "Always ask" -msgstr "Sempre perguntar" - -msgid "Bad format in credentials cache" -msgstr "Formato inválido no cache de credenciais" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Filtro de pesquisa inválido %(info)s" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Decodificação base64 falhou: %(reason)s" - -msgid "CLI metavar" -msgstr "Metavar de CLI" - -msgid "CLI name" -msgstr "Nome de CLI" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Não foi possível resolver KDC para o reino solicitado" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Erro de formato de certificado: %(error)s" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "A operação do certificado não pode ser concluída: %(error)s" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "O cliente não está configurado. Execute ipa-client-install." - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "O comando \"%(name)s\" foi descontinuado" - -msgid "Command name" -msgstr "Nome do comando" - -msgid "Command not implemented" -msgstr "Comando não implementado" - -msgid "Configured administrative server limit exceeded" -msgstr "Limite de servidor administrativo configurado excedido" - -msgid "Configured size limit exceeded" -msgstr "Limite de tamanho configurado excedido" - -msgid "Configured time limit exceeded" -msgstr "Limite de tempo configurado excedido" - -msgid "Confirm (password)" -msgstr "Confirmar (senha)" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Não foi possível obter %(name)s interativamente" - -msgid "Create new Sudo Command." -msgstr "Cria um novo comando sudo." - -msgid "Credentials cache permissions incorrect" -msgstr "Permissões incorretas de cache de credenciais" - -msgid "Default" -msgstr "Padrão" - -msgid "Delete Sudo Command." -msgstr "Exclui comando sudo." - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"A exclusão de um grupo gerenciado não é permitida. Ele deve ser desassociado " -"primeiro." - -msgid "Deprecated options" -msgstr "Opções obsoletas" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Descontinuado; use %s" - -msgid "Display information about a class." -msgstr "Exibe informações sobre uma classe." - -msgid "Display information about a command." -msgstr "Exibe informações sobre um comando." - -msgid "Display information about a help topic." -msgstr "Exibe informações sobre um tópico de ajuda." - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" -"O domínio \"%(domain)s\" não é um domínio raiz para a floresta \"%(forest)s\"" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Falha ao decodificar Certificate Signing Request: %s" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Acesso insuficiente: %(info)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Solicitação JSON-RPC inválida: %(error)s" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Erro de Kerberos: %(major)s/%(minor)s" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Espaços no início ou fim não são permitidos" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Principal malformado: \"%(value)s\"" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"O conjunto de regras de mapeamento \"%(ruleset)s\" tem mais de uma regra " -"para o auxiliar %(helper)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "HTTP Referer faltando ou inválido, %(referer)s" - -msgid "Modify Sudo Command." -msgstr "Modifica comando sudo." - -msgid "Multi-value" -msgstr "Multivalor" - -msgid "No credentials cache found" -msgstr "Nenhum cache de credenciais encontrado" - -msgid "No file to read" -msgstr "Nenhum arquivo para ler" - -msgid "No matching entries found" -msgstr "Não foram encontradas entradas coincidentes" - -msgid "Not allowed on non-leaf entry" -msgstr "Não permitido em uma entrada não-folha" - -msgid "Not registered yet" -msgstr "Não registrado ainda" - -msgid "Only one value is allowed" -msgstr "Apenas um valor é permitido" - -msgid "Password is too long!\n" -msgstr "A senha é longa demais!\n" - -msgid "Passwords do not match" -msgstr "As senhas não coincidem" - -msgid "Passwords do not match!" -msgstr "As senhas não coincidem!" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "As senhas não coincidem!\n" - -msgid "Passwords must match" -msgstr "As senhas devem coincidir" - -msgid "Positional arguments" -msgstr "Argumentos posicionais" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "O principal %(principal)s não conseguiu ser autenticado: %(message)s" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "O principal não é da forma usuário@REINO: \"%(principal)s\"" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "A solicitação falhou com status %(status)s: %(reason)s" - -msgid "Required" -msgstr "Obrigatório" - -msgid "Return command defaults" -msgstr "Retorna o padrão do comando" - -msgid "Search for classes." -msgstr "Pesquisa por classes." - -msgid "Search for commands." -msgstr "Pesquisa por comandos." - -msgid "Search for help topics." -msgstr "Pesquisa por tópicos de ajuda." - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Remoção do servidor abortada: %(reason)s." - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" -"O serviço \"%(service)s\" não foi encontrado no banco de dados de Kerberos" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"O principal do serviço não é da forma: serviço/nome de host totalmente " -"qualificado: %(reason)s" - -msgid "Service principal is required" -msgstr "O principal do serviço é necessário" - -msgid "Session error" -msgstr "Erro de sessão" - -msgid "Sudo Commands" -msgstr "Comandos sudo" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"O sistema de codificação deve ser UTF-8, não tendo suporte a \"%(encoding)s" -"\". Defina LC_ALL=\"C.UTF-8\", ou LC_ALL=\"\" e LC_CTYPE=\"C.UTF-8\"." - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "O caractere %(char)r não é permitido." - -msgid "The default users group cannot be removed" -msgstr "O grupo de usuários padrão não pode ser removido" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" -"O reino para o principal não corresponde ao reino para este servidor IPA" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"O critério de pesquisa não foi específico o suficiente. Esperava 1 e " -"encontrou %(found)d." - -msgid "The topic or command name." -msgstr "O nome do tópico ou comando." - -msgid "This command requires root access" -msgstr "Este comando requer acesso de root" - -msgid "This entry already exists" -msgstr "Esta entrada já existe" - -msgid "This entry cannot be enabled or disabled" -msgstr "Esta entrada não pode ser habilitada ou desabilitada" - -msgid "This entry is already a member" -msgstr "Esta entrada já é um membro" - -msgid "This entry is already disabled" -msgstr "Esta entrada já está desabilitada" - -msgid "This entry is already enabled" -msgstr "Esta entrada já está habilitada" - -msgid "This entry is not a member" -msgstr "Esta entrada não é um membro" - -msgid "This group already allows external members" -msgstr "Este grupo já permite membros externos" - -msgid "This group cannot be posix because it is external" -msgstr "Este grupo não pode ser posix porque é externo" - -msgid "This is already a posix group" -msgstr "Este já é um grupo posix" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "Este já é um grupo posix e não pode ser convertido para um externo" - -msgid "Ticket expired" -msgstr "Tíquete expirado" - -msgid "To get command help, use:" -msgstr "Para obter ajuda do comando, use:" - -msgid "Topic commands:" -msgstr "Comandos do tópico:" - -msgid "Topic or Command" -msgstr "Tópico ou comando" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" -"Não foi possível criar um grupo privado. Um grupo \"%(group)s\" já existe." - -msgid "You must enroll a host in order to create a host service" -msgstr "Você deve registrar um host para criar um serviço de host" - -msgid "an internal error has occurred" -msgstr "ocorreu um erro interno" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "ocorreu um erro interno no servidor em \"%(server)s\"" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "a api não possui tal espaço de nomes: \"%(name)s\"" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "pode ser no máximo %(maxlength)d bytes" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "pode ser no máximo %(maxlength)d caracteres" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "pode ser no máximo %(maxvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "pode ser no máximo %(maxvalue)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "não foi possível se conectar a \"%(uri)s\": %(error)s" - -msgid "change collided with another change" -msgstr "a alteração colidiu com outra alteração" - -msgid "command" -msgstr "comando" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "o comando \"%(name)s\" leva no máximo %(count)d argumento" -msgstr[1] "o comando \"%(name)s\" leva no máximo %(count)d argumentos" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "o comando \"%(name)s\" leva nenhum argumento" - -msgid "commands" -msgstr "comandos" - -msgid "did not receive Kerberos credentials" -msgstr "não foram recebidas as credenciais de Kerberos" - -msgid "does not match any of accepted formats: " -msgstr "não corresponde a nenhum dos formatos aceitos: " - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "erro ao ordenar dados para transporte XML-RPC: %(error)s" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "erro no servidor \"%(server)s\": %(error)s" - -msgid "incomplete time value" -msgstr "valor de hora incompleto" msgid "incorrect type" msgstr "tipo incorreto" -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "\"%(name)s\" inválido: %(error)s" +msgid "Only one value is allowed" +msgstr "Apenas um valor é permitido" -msgid "limits exceeded for this query" -msgstr "limites excedidos para esta consulta" - -msgid "modifying primary key is not allowed" -msgstr "a modificação da chave primária não é permitida" - -#, python-format -msgid "must be '%(value)s'" -msgstr "deve ser \"%(value)s\"" - -msgid "must be DNS name" -msgstr "deve ser um nome de DNS" - -msgid "must be Kerberos principal" -msgstr "deve ser um principal de Kerberos" +msgid "this option is deprecated" +msgstr "esta opção foi descontinuada" msgid "must be True or False" msgstr "deve ser True ou False" -msgid "must be Unicode text" -msgstr "deve ser um texto Unicode" - -msgid "must be a certificate" -msgstr "deve ser um certificado" - -msgid "must be a certificate signing request" -msgstr "deve ser uma solicitação de assinatura de certificado" - -msgid "must be a decimal number" -msgstr "deve ser um número decimal" - -msgid "must be absolute" -msgstr "deve ser absoluto" - msgid "must be an integer" msgstr "deve ser um inteiro" -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "deve ser pelo menos %(minlength)d bytes" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "deve ser pelo menos %(minlength)d caracteres" - #, python-format msgid "must be at least %(minvalue)d" msgstr "deve ser pelo menos %(minvalue)d" +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "pode ser no máximo %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "deve ser um número decimal" + #, python-format msgid "must be at least %(minvalue)s" msgstr "deve ser pelo menos %(minvalue)s" -msgid "must be binary data" -msgstr "deve ser um dado binário" - -msgid "must be datetime value" -msgstr "deve ser um valor de data e hora" - -msgid "must be dictionary" -msgstr "deve ser um dicionário" - #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "deve ser exatamente %(length)d bytes" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "deve ser exatamente %(length)d caracteres" - -#, python-format -msgid "must be one of %(values)s" -msgstr "deve ser um de %(values)s" - -msgid "must be relative" -msgstr "deve ser relativo" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "deve corresponder ao padrão \"%(pattern)s\"" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "Nenhum comando nem tópico de ajuda \"%(topic)s\"" - -msgid "no modifications to be performed" -msgstr "nenhuma modificação para ser realizada" +msgid "can be at most %(maxvalue)s" +msgstr "pode ser no máximo %(maxvalue)s" #, python-format msgid "" @@ -611,8 +12498,3639 @@ msgstr "" "número: %(allowed)s" #, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "sobreposição de argumentos e opções: %(names)s" +msgid "must match pattern \"%(pattern)s\"" +msgstr "deve corresponder ao padrão \"%(pattern)s\"" + +msgid "must be binary data" +msgstr "deve ser um dado binário" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "deve ser pelo menos %(minlength)d bytes" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "pode ser no máximo %(maxlength)d bytes" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "deve ser exatamente %(length)d bytes" + +msgid "must be a certificate" +msgstr "deve ser um certificado" + +msgid "must be a certificate signing request" +msgstr "deve ser uma solicitação de assinatura de certificado" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Falha ao decodificar Certificate Signing Request: %s" + +msgid "must be Unicode text" +msgstr "deve ser um texto Unicode" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Espaços no início ou fim não são permitidos" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "deve ser pelo menos %(minlength)d caracteres" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "pode ser no máximo %(maxlength)d caracteres" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "deve ser exatamente %(length)d caracteres" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "O caractere %(char)r não é permitido." + +#, python-format +msgid "must be '%(value)s'" +msgstr "deve ser \"%(value)s\"" + +#, python-format +msgid "must be one of %(values)s" +msgstr "deve ser um de %(values)s" + +msgid "must be datetime value" +msgstr "deve ser um valor de data e hora" + +msgid "does not match any of accepted formats: " +msgstr "não corresponde a nenhum dos formatos aceitos: " + +msgid "incomplete time value" +msgstr "valor de hora incompleto" + +msgid "must be DNS name" +msgstr "deve ser um nome de DNS" + +msgid "must be absolute" +msgstr "deve ser absoluto" + +msgid "must be relative" +msgstr "deve ser relativo" + +msgid "must be dictionary" +msgstr "deve ser um dicionário" + +msgid "must be Kerberos principal" +msgstr "deve ser um principal de Kerberos" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Principal malformado: \"%(value)s\"" + +msgid "Service principal is required" +msgstr "O principal do serviço é necessário" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: arquivo não encontrado" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +#, fuzzy +#| msgid "can be at most %(maxlength)d characters" +msgid "cannot be longer that {} characters" +msgstr "pode ser no máximo %(maxlength)d caracteres" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +#, fuzzy +#| msgid "modifying primary key is not allowed" +msgid "options are not allowed" +msgstr "a modificação da chave primária não é permitida" + +msgid "invalid hostmask" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "erro no servidor \"%(server)s\": %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "invalid domain-name: %s" +msgstr "\"%(name)s\" inválido: %(error)s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Request failed with status %(status)s: %(reason)s" +msgid "request failed with HTTP status %d" +msgstr "A solicitação falhou com status %(status)s: %(reason)s" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" +msgstr[1] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified automount map \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key named %(key)s already exists" +msgstr "Esta entrada já existe" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified automount key \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Imported profile \"%(value)s\"" +msgstr "Principal malformado: \"%(value)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "A operação do certificado não pode ser concluída: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +msgid "Managedby permission" +msgstr "" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "Apenas um valor é permitido" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "permission \"%(value)s\" already exists" +msgstr "Esta entrada já existe" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy +#| msgid "Required" +msgid "is required" +msgstr "Obrigatório" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted record \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "Found '%(value)s'" +msgstr "deve ser \"%(value)s\"" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +msgid "IPA DNS servers" +msgstr "" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +#, fuzzy +#| msgid "A description of this command" +msgid "Result of the command" +msgstr "Uma descrição deste comando" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "" + +msgid "DNS servers" +msgstr "" + +msgid "DNS Servers" +msgstr "" + +msgid "DNS Server" +msgstr "" + +msgid "DNS Server name" +msgstr "" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for DNS servers." +msgstr "Pesquisa por classes." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Display configuration of a DNS server." +msgstr "Exibe informações sobre uma classe." + +msgid "Add a new DNS server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Delete a DNS server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" +msgstr[1] "" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "givenname is required" +msgstr "\"%(name)s\" é necessário" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "sn is required" +msgstr "\"%(name)s\" é necessário" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d characters" +msgid "can be at most %(len)d characters" +msgstr "pode ser no máximo %(maxlength)d caracteres" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)s" +msgid "Activate a stage user \"%(value)s\"" +msgstr "pode ser no máximo %(maxvalue)s" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "%(value)s" +msgstr "deve ser \"%(value)s\"" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "" + +msgid "Host Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "hostgroup" +msgstr "" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Default" +msgid "vault" +msgstr "Padrão" + +#, fuzzy +#| msgid "Default" +msgid "vaults" +msgstr "Padrão" + +#, fuzzy +#| msgid "Default" +msgid "Vaults" +msgstr "Padrão" + +#, fuzzy +#| msgid "Default" +msgid "Vault" +msgstr "Padrão" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Vault configuration" +msgstr "" + +msgid "IPA KRA servers" +msgstr "" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "netgroups" +msgstr "" + +msgid "Netgroups" +msgstr "" + +msgid "Netgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Esta entrada não pode ser habilitada ou desabilitada" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +msgid "invalid port number" +msgstr "" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +msgid "RADIUS Servers" +msgstr "" + +msgid "RADIUS Server" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" +msgstr[1] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "ACI prefix is required" +msgstr "O principal do serviço é necessário" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Syntax Error: %(error)s" +msgstr "Erro de formato de certificado: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "deve ser pelo menos %(minvalue)d" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "modifying primary key is not allowed" +msgid "Empty domain is not allowed" +msgstr "a modificação da chave primária não é permitida" + +#, fuzzy, python-format +#| msgid "invalid '%(name)s': %(error)s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "\"%(name)s\" inválido: %(error)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "erro no servidor \"%(server)s\": %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "" + +msgid "User Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "privileged group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to modify user entries" +msgstr "Não permitido em uma entrada não-folha" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to modify group entries" +msgstr "Não permitido em uma entrada não-folha" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be enclosed in parentheses" +msgstr "deve ser um inteiro" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Descontinuado; use %s" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, python-format +msgid "Entry %s not found" +msgstr "" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deprecated; use %s" +msgid "option was renamed; use %s" +msgstr "Descontinuado; use %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "Bad search filter %(info)s" +msgid "Bad search filter" +msgstr "Filtro de pesquisa inválido %(info)s" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Modified permission \"%(value)s\"" +msgstr "Principal malformado: \"%(value)s\"" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +#, fuzzy +#| msgid "this option is deprecated" +msgid "this option has been deprecated." +msgstr "esta opção foi descontinuada" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +msgid "command" +msgstr "comando" + +msgid "commands" +msgstr "comandos" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +msgid "runAs groups" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" msgid "sudo command" msgstr "comando sudo" @@ -620,13 +16138,7998 @@ msgstr "comando sudo" msgid "sudo commands" msgstr "comandos sudo" -msgid "this option is deprecated" -msgstr "esta opção foi descontinuada" +msgid "Sudo Commands" +msgstr "Comandos sudo" #, python-format -msgid "unknown command '%(name)s'" -msgstr "comando desconhecido \"%(name)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" #, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "erro desconhecido %(code)d de %(server)s: %(error)s" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modify Sudo Command." +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "Modifica comando sudo." +msgstr[1] "Modifica comando sudo." + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "sudo command group" +msgstr "comando sudo" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups" +msgstr "comandos sudo" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Location name" +msgstr "Nome do comando" + +msgid "IPA location name" +msgstr "" + +msgid "IPA Location description" +msgstr "" + +msgid "Servers" +msgstr "" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "IPA Server" +msgstr "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Modify information about an IPA location." +msgstr "Exibe informações sobre um comando." + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for IPA locations." +msgstr "Pesquisa por comandos." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about an IPA location." +msgstr "Exibe informações sobre um comando." + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +msgid "Version" +msgstr "" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Method name" +msgstr "Nome do comando" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(filename)s: arquivo não encontrado" + +msgid "Display information about a command." +msgstr "Exibe informações sobre um comando." + +msgid "Search for commands." +msgstr "Pesquisa por comandos." + +msgid "Return command defaults" +msgstr "Retorna o padrão do comando" + +msgid "Display information about a class." +msgstr "Exibe informações sobre uma classe." + +msgid "Search for classes." +msgstr "Pesquisa por classes." + +msgid "Display information about a help topic." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "Search for help topics." +msgstr "Pesquisa por tópicos de ajuda." + +msgid "Required" +msgstr "Obrigatório" + +msgid "Multi-value" +msgstr "Multivalor" + +msgid "Always ask" +msgstr "Sempre perguntar" + +msgid "CLI metavar" +msgstr "Metavar de CLI" + +msgid "CLI name" +msgstr "Nome de CLI" + +msgid "Confirm (password)" +msgstr "Confirmar (senha)" + +msgid "Default" +msgstr "Padrão" + +#, fuzzy +#| msgid "Default" +msgid "Default from" +msgstr "Padrão" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Argumentos posicionais" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(filename)s: arquivo não encontrado" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about a command parameter." +msgstr "Exibe informações sobre um comando." + +#, fuzzy +#| msgid "Search for commands." +msgid "Search command parameters." +msgstr "Pesquisa por comandos." + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(filename)s: arquivo não encontrado" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about a command output." +msgstr "Exibe informações sobre um comando." + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for command outputs." +msgstr "Pesquisa por comandos." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +msgid "Self Service Permissions" +msgstr "" + +msgid "Self Service Permission" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "" + +msgid "server roles" +msgstr "" + +msgid "IPA Server Roles" +msgstr "" + +msgid "IPA Server Role" +msgstr "" + +msgid "IPA server role name" +msgstr "" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-brace-format +#| msgid "%(filename)s: file not found" +msgid "{role}: role not found" +msgstr "%(filename)s: arquivo não encontrado" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded certificate." +msgstr "deve ser um certificado" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "Certificate chain" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "X.509 certificate chain" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Subject DNS name" +msgstr "deve ser um nome de DNS" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "deve ser um principal de Kerberos" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Include certificate chain in output" +msgstr "deve ser uma solicitação de assinatura de certificado" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "Opções obsoletas" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(name)s certificate is not valid" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(name)s certificado não é válido" +msgstr[1] "%(name)s certificado não é válido" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +#, fuzzy +#| msgid "Multi-value" +msgid "value" +msgstr "Multivalor" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Delete an ID override." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +#, fuzzy +#| msgid "Search for commands." +msgid "Search for an ID override." +msgstr "Pesquisa por comandos." + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "Display information about an ID override." +msgstr "Exibe informações sobre um comando." + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded user certificate" +msgstr "deve ser um certificado" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(filename)s: arquivo não encontrado" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a command." +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "Exibe informações sobre um comando." + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "Certificate Authorities" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for CAs." +msgstr "Pesquisa por classes." + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" +msgstr[1] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Created CA \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "IPA CA cannot be disabled" +msgstr "Esta entrada não pode ser habilitada ou desabilitada" + +msgid "Enable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +msgid "Actions" +msgstr "" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +msgid "Set" +msgstr "" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Operations Error" +msgstr "Erro de sessão" + +#, fuzzy +#| msgid "Confirm (password)" +msgid "Confirmation" +msgstr "Confirmar (senha)" + +#, fuzzy +#| msgid "Multi-value" +msgid "Custom value" +msgstr "Multivalor" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Validation error" +msgstr "Erro de sessão" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "ocorreu um erro interno" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Add Kerberos Principal Alias" +msgstr "deve ser um principal de Kerberos" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "New kerberos principal alias" +msgstr "deve ser um principal de Kerberos" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Kerberos Principal you entered is expired" +msgstr "O principal do serviço é necessário" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Log in using personal certificate" +msgstr "deve ser um certificado" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +msgid "Add permission" +msgstr "" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +msgid "Remove permissions" +msgstr "" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +msgid "Default user group" +msgstr "" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "Add certificate authority" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "Remove certificate authorities" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "Remove certificate profiles" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Certificates" +msgstr "deve ser um certificado" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Common Name" +msgstr "Nome do comando" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Maximum serial number" +msgstr "deve ser um número decimal" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Minimum serial number" +msgstr "deve ser um número decimal" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Get Certificate" +msgstr "deve ser um certificado" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Issue new certificate" +msgstr "deve ser um certificado" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "No Valid Certificate" +msgstr "deve ser um certificado" + +#, fuzzy +#| msgid "must be a certificate" +msgid "New Certificate" +msgstr "deve ser um certificado" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +#| msgid "%(name)s certificate is not valid" +msgid "Remove certificate hold" +msgstr "%(name)s certificado não é válido" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Certificate requested" +msgstr "deve ser uma solicitação de assinatura de certificado" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Revoke certificate" +msgstr "deve ser um certificado" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "View Certificate" +msgstr "deve ser um certificado" + +msgid "Certificate Data" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "Certificate For Match" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA certificate operations\n" +msgid "Add certificate mapping data" +msgstr "" +"\n" +"Operações de certificado IPA\n" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Remove certificate identity mapping rules" +msgstr "deve ser uma solicitação de assinatura de certificado" + +msgid "Group Options" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Search Options" +msgstr "Opções obsoletas" + +msgid "SELinux Options" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Server Options" +msgstr "Opções obsoletas" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Service Options" +msgstr "Opções obsoletas" + +#, fuzzy +#| msgid "Deprecated options" +msgid "User Options" +msgstr "Opções obsoletas" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +msgid "Remove Permission" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +msgid "Add user group" +msgstr "" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +msgid "Remove user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Host Certificate" +msgstr "deve ser um certificado" + +msgid "Host Name" +msgstr "" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +#| msgid "Confirm (password)" +msgid "One-Time Password" +msgstr "Confirmar (senha)" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +msgid "Add Custom Attribute" +msgstr "" + +msgid "Permission settings" +msgstr "" + +msgid "Attribute breakdown" +msgstr "" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +msgid "Server Roles" +msgstr "" + +msgid "Server Role" +msgstr "" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Service Certificate" +msgstr "deve ser um certificado" + +msgid "Service Settings" +msgstr "" + +msgid "Provisioning" +msgstr "" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Service unprovisioned" +msgstr "O principal do serviço é necessário" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "Add sudo command" +msgstr "comando sudo" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Remove sudo commands" +msgstr "comandos sudo" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "sudo command" +msgid "Add sudo command group" +msgstr "comando sudo" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Remove sudo command groups" +msgstr "comandos sudo" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Any Command" +msgstr "Comandos sudo" + +msgid "Any Group" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Run Commands" +msgstr "Comandos sudo" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +#, fuzzy +#| msgid "must be dictionary" +msgid "Trust direction" +msgstr "deve ser um dicionário" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +#, fuzzy +#| msgid "Password is too long!\n" +msgid "Password expiration" +msgstr "A senha é longa demais!\n" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +msgid "Service Vaults" +msgstr "" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +msgid "User Vaults" +msgstr "" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "Current password is required" +msgstr "\"%(name)s\" é necessário" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "New password is required" +msgstr "\"%(name)s\" é necessário" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "As senhas devem coincidir" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a decimal number" +msgstr "deve ser um número decimal" + +msgid "Format error" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "Must be an integer" +msgstr "deve ser um inteiro" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a positive number" +msgstr "deve ser um número decimal" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +#, fuzzy +#| msgid "Required" +msgid "Required field" +msgstr "Obrigatório" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "Exibe informações sobre uma classe." + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "" + +msgid "servers" +msgstr "" + +msgid "IPA Servers" +msgstr "" + +msgid "Server location" +msgstr "" + +msgid "Service weight" +msgstr "" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +#, fuzzy +#| msgid "Display information about a class." +msgid "Modify information about an IPA server." +msgstr "Exibe informações sobre uma classe." + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "erro no servidor \"%(server)s\": %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, fuzzy +#| msgid "This entry is already enabled" +msgid "Server has already been deleted" +msgstr "Esta entrada já está habilitada" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "must be \"%s\"" +msgstr "deve ser \"%(value)s\"" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +msgid "Server state" +msgstr "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)s" +msgid "Changed server state of \"%(value)s\"." +msgstr "pode ser no máximo %(maxvalue)s" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Member principals" +msgstr "deve ser um principal de Kerberos" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "Principal malformado: \"%(value)s\"" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" +msgstr[1] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded host certificate" +msgstr "deve ser um certificado" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)s" +msgid "Disabled host \"%(value)s\"" +msgstr "pode ser no máximo %(maxvalue)s" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for classes." +msgid "Search for Class of Service entry" +msgstr "Pesquisa por classes." + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +msgid "User check" +msgstr "" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "cannot delete global password policy" +msgstr "Um grupo gerenciado não pode ter uma política de senhas." + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" +msgstr[1] "" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to remotely add agent" +msgstr "Não permitido em uma entrada não-folha" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a help topic." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Exibe informações sobre um tópico de ajuda." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Modified privilege \"%(value)s\"" +msgstr "Principal malformado: \"%(value)s\"" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" +msgstr[1] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal" +msgstr "Principal malformado: \"%(value)s\"" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Service principal alias" +msgstr "O principal do serviço é necessário" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added service \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted service \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Modified service \"%(value)s\"" +msgstr "Principal malformado: \"%(value)s\"" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Disabled service \"%(value)s\"" +msgstr "Principal malformado: \"%(value)s\"" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Remove principal alias from a service" +msgstr "O principal do serviço é necessário" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Delegations" +msgstr "Opções obsoletas" + +msgid "Delegation" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Command '%(name)s' has been deprecated" +msgid "The deny type has been deprecated." +msgstr "O comando \"%(name)s\" foi descontinuado" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" +msgstr[1] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Esta entrada não pode ser habilitada ou desabilitada" + +msgid "entry" +msgstr "" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(filename)s: arquivo não encontrado" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "The character %(char)r is not allowed." +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "O caractere %(char)r não é permitido." + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "deve ser True ou False" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Issuer of the certificate" +msgstr "deve ser um certificado" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Subject of the certificate" +msgstr "deve ser um certificado" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Added user \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "%s: user is already preserved" +msgstr "Esta entrada já está habilitada" + +#, fuzzy, python-format +#| msgid "Added Sudo Command \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "user \"%s\" is already active" +msgstr "Esta entrada já está habilitada" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted Sudo Command \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already disabled" +msgid "Account disabled: %(disabled)s" +msgstr "Esta entrada já está desabilitada" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Remove principal alias from the user entry" +msgstr "O principal do serviço é necessário" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +#, fuzzy +#| msgid "does not match any of accepted formats: " +msgid "SID does not match any trusted domain" +msgstr "não corresponde a nenhum dos formatos aceitos: " + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Request must be a dict" +msgstr "deve ser um certificado" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "params must be a list" +msgstr "deve ser um inteiro" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 1" +msgstr "deve ser pelo menos %(minvalue)d" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +msgid "Password is too long!\n" +msgstr "A senha é longa demais!\n" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/ru.po b/po/ru.po index aefa47201..ac9985323 100644 --- a/po/ru.po +++ b/po/ru.po @@ -18,675 +18,870 @@ msgstr "" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "Недостаточно памяти!\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Отсутствует разрешение на присоединение этого узла к домену IPA.\n" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "Отсутствуют разрешения на запись в файл таблицы ключей \"%s\"\n" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "не удалось выполнить access() для %1$s: номер ошибки = %2$d\n" + +#, c-format +msgid "Out of memory!" +msgstr "Недостаточно памяти!" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "Не удалось включить SSL в LDAP\n" + +#, fuzzy +#| msgid "Simple bind failed\n" +msgid "SASL Bind failed\n" +msgstr "Не удалось выполнить простую привязку\n" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "Не удалось выполнить поиск %1$s на rootdse. Ошибка: %2$d\n" + +#, c-format +msgid "No values for %s" +msgstr "Отсутствуют значения для %s" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "Не удалось выполнить поиск namingContext IPA. Ошибка: %d\n" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "namingContext IPA не найдено\n" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "Не удалось определить корневое DN %s\n" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Не удалось выполнить регистрацию. %s\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "учётная запись не найдена в ответе XML-RPC\n" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Узел уже присоединён.\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_dumps() failed\n" +msgstr "не удалось выполнить fork()\n" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "Неверный JSON-RPC запрос: %(error)s" + +#, fuzzy, c-format +#| msgid "Operation failed: %s\n" +msgid "JSON-RPC call failed: %s\n" +msgstr "Не удалось выполнить операцию: %s\n" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "No response" +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "Нет ответа" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_pack_ex() failed: %s\n" +msgstr "не удалось выполнить fork()\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Отмена регистрации выполнена успешно.\n" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Не удалось отменить регистрацию.\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "результат не найден в ответе XML-RPC\n" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "Не удалось найти IPA-сервер, используя %s\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"Не удалось присоединить узел: ошибка инициализации Kerberos-контекста\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "Не удалось присоединить узел: кэш учётных данных Kerberos не найден\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"Не удалось присоединить узел: учётная запись пользователя Kerberos не " +"найдена, пароль узла не указан.\n" + +#, c-format +msgid "fork() failed\n" +msgstr "не удалось выполнить fork()\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "команда ipa-getkeytab не найдена \n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "неправильные разрешения команды ipa-getkeytab?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "не удалось выполнить команду ipa-getkeytab, номер ошибки %d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "дочерний процесс завершился с сообщением %d\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Ошибка обработки файла таблицы ключей: %s.\n" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Ошибка получения области (realm) Kerberos по умолчанию: %s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Ошибка обработки \"%1$s\": %2$s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Ошибка получения начальных учётных данных: %s.\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Не удалось создать кэш учётных данных Kerberos\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "Ошибка сохранения учётных данных в кэше: %s.\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Вывести данные XML-RPC без обработки в режиме GSSAPI" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Тихий режим. Отображаются только ошибки." + +msgid "Unenroll this host from IPA server" +msgstr "Отменить регистрацию этого узла на IPA-сервере" + +msgid "Hostname of this server" +msgstr "Имя узла этого сервера" + +msgid "hostname" +msgstr "имя узла" + +msgid "IPA Server to use" +msgstr "IPA-сервер, который следует использовать" + +msgid "Specifies where to store keytab information." +msgstr "Указывает место сохранения данных таблицы ключей." + +msgid "filename" +msgstr "имя файла" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" +"Принудительно присоединить узел. Повторить присоединение, даже если оно уже " +"выполнено." + +msgid "LDAP password (if not using Kerberos)" +msgstr "LDAP-пароль (если не используется Kerberos)" + +msgid "password" +msgstr "пароль" + +msgid "LDAP basedn" +msgstr "базовое расширяемое имя (DN) LDAP" + +msgid "basedn" +msgstr "базовое расширяемое имя (DN)" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Имя узла должно быть полным: %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Имя узла не должно быть следующим: %s\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Не удалось обработать имя учётной записи\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Удаление учётной записи %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Не удалось открыть файл таблицы ключей\n" + +#, c-format +msgid "principal not found\n" +msgstr "учётная запись не найдена\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Не удалось удалить запись\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, fuzzy, c-format +#| msgid "Failed to get result: %s\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "Не удалось получить результат: %s\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Не удалось обработать учётную запись\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, c-format +msgid "realm not found\n" +msgstr "область (realm) не найдена\n" + +msgid "Print debugging information" +msgstr "Вывести отладочные данные" + +msgid "Debugging output" +msgstr "Отладочный вывод" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Учётная запись, которую следует удалить из файла таблицы ключей (пример: ftp/" +"ftp.example.com@EXAMPLE.COM)" + +msgid "Kerberos Service Principal Name" +msgstr "Имя учётной записи службы Kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" +"Файл таблицы ключей, из которого следует удалить учётную запись (записи)" + +msgid "Keytab File Name" +msgstr "Имя файла таблицы ключей" + +msgid "Remove all principals in this realm" +msgstr "Удалить все учётные записи в этой области (realm)" + +msgid "Realm name" +msgstr "Имя области (realm)" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Не удалось инициализировать Kerberos-контекст\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Не удалось открыть файл таблицы ключей \"%1$s\": %2$s\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Не удалось закрыть файл таблицы ключей\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "не удалось открыть файл конфигурации %s\n" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "не удалось обработать файл конфигурации %s функцией stat()\n" + +#, c-format +msgid "out of memory\n" +msgstr "недостаточно памяти\n" + +#, c-format +msgid "read error\n" +msgstr "ошибка чтения\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Не удалось инициализировать Kerberos-контекст: %1$s (%2$d)\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Не удалось обработать учётную запись: %1$s (%2$d)\n" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Отсутствуют принятые KDC ключи\n" + +#, c-format +msgid "Out of memory \n" +msgstr "" +"Недостаточно памяти\n" +"\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Не удалось инициализировать библиотеку ldap!\n" + +msgid "Simple bind failed\n" +msgstr "Не удалось выполнить простую привязку\n" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Не удалось выполнить операцию: %s\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "Не удалось получить результат: %s\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "Превышено время ожидания." + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "Не удалось обработать расширенный результат: %s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "Не удалось обработать результат: %s\n" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Отсутствует список элементов управления ответами!\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Отсутствует элемент управления ответами!\n" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Недостаточно памяти!\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Не удалось создать элемент управления!\n" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "Не удалось задать привязку к серверу!\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Не удалось получить файл таблицы ключей!\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "Не удалось выполнить ber_init(), недопустимый элемент управления?!\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "Ошибка ber_scanf(), не удалось найти kvno?!\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Не удалось получить данные о типе шифрования №%d\n" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "Не удалось получить данные о типе шифрования %1$s (№%2$d)\n" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "Не удалось получить ни одного ключа" + +msgid "Failed to decode control reply!\n" +msgstr "" +"Не удалось расшифровать контрольный ответ!\n" +"\n" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Пароли не совпадают!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "Не удалось открыть файл конфигурации %s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Не удалось обработать файл конфигурации %s\n" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Не удалось разрешить символическую ссылку на файл таблицы ключей.\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" +"таблица ключей является оборванной символической ссылкой и принадлежит " +"другому пользователю.\n" + +msgid "Print as little as possible" +msgstr "Выводить минимум данных" + +msgid "Output only on errors" +msgstr "Выводить только ошибки" + +msgid "Contact this specific KDC Server" +msgstr "Установить связь с указанным KDC-сервером" + +msgid "Server Name" +msgstr "Имя сервера" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Учётная запись, для которой следует получить файл таблицы ключей (пример: " +"ftp/ftp.example.com@EXAMPLE.COM)" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" +"Файл таблицы ключей, в который следует добавить новый ключ (файл будет " +"создан, если не существует)." + +msgid "Encryption types to request" +msgstr "Типы шифрования для запрашивания" + +msgid "Comma separated encryption types list" +msgstr "Список типов шифрования, разделённых запятыми" + +msgid "Show the list of permitted encryption types and exit" +msgstr "Показать список разрешённых типов шифрования и завершить работу" + +msgid "Permitted Encryption Types" +msgstr "Разрешённые типы шифрования" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" +"Запросить неслучайный пароль, который следует использовать для учётной записи" + +msgid "LDAP DN" +msgstr " DN LDAP" + +msgid "DN to bind as if not using kerberos" +msgstr "" +"DN, к которому следует установить привязку, если не используется Kerberos" + +msgid "LDAP password" +msgstr "Пароль LDAP" + +msgid "password to use if not using kerberos" +msgstr "пароль, который следует использовать, если не используется Kerberos" + +msgid "Prompt for LDAP password" +msgstr "Запрос пароля LDAP" + +msgid "Path to the IPA CA certificate" +msgstr "Путь к сертификату CA IPA" + +msgid "IPA CA certificate" +msgstr "Сертификат CA IPA" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" +"Адрес LDAP, с которым следует установить соединение. Несовместимо с --server" + +msgid "url" +msgstr "адрес" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "Механизм привязки LDAP SASL, если отсутствует bindd/bindpw" + +msgid "GSSAPI|EXTERNAL" +msgstr "GSSAPI|EXTERNAL" + +msgid "Retrieve current keys without changing them" +msgstr "Получать текущие ключи без внесения в них изменений" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "Отсутствуют установленные в системе типы шифрования?!\n" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Поддерживаемые типы шифрования:\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Предупреждение: не удалось преобразовать тип (№%d)\n" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "Привязка пароля уже предоставлена (-w).\n" + +msgid "Enter LDAP password" +msgstr "Введите пароль LDAP" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" +"При использовании DN привязки (-w или -W) необходима привязка пароля.\n" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "Невозможно одновременно указать механизм SASL и DN привязки\n" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "Некорректный механизм привязки SASL\n" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "Невозможно одновременно указать сервер и адрес LDAP\n" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "Не указано имя сервера, сервер недоступен\n" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "Указаны несовместимые параметры (-r и -P)\n" + +msgid "New Principal Password" +msgstr "Новый пароль учётной записи" + +msgid "Verify Principal Password" +msgstr "Проверка пароля учётной записи" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Предупреждение: случайные пароли не поддерживают типы соли (см. параметр -" +"P)\n" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Недопустимое имя учётной записи службы\n" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" +"Кэш учётных данных Kerberos не найден. Имеется ли у вас билет Kerberos?\n" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" +"Учётная запись пользователя Kerberos не найдена. Имеется ли у вас корректный " +"кэш учётных данных?\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Не удалось открыть файл таблицы ключей\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" +"Повтор попытки с использованием метода получения таблицы ключей, который " +"применялся до версии 4.0\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Не удалось создать ключ\n" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "Не удалось получить файл таблицы ключей\n" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Не удалось добавить ключ в таблицу ключей\n" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "Не удалось закрыть файл таблицы ключей\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Таблица ключей успешно получена и сохранена в: %s\n" + +msgid "Failed members" +msgstr "Ошибка участников" + +msgid "Failed source hosts/hostgroups" +msgstr "Ошибка узлов-источников или групп узлов — источников" + +msgid "Failed hosts/hostgroups" +msgstr "Ошибка узлов или групп узлов" + +msgid "Failed users/groups" +msgstr "Ошибка пользователей или групп" + +msgid "Failed service/service groups" +msgstr "Ошибка службы или групп служб" + +msgid "Failed to remove" +msgstr "Ошибка при удалении" + +msgid "Failed RunAs" +msgstr "Ошибка запуска от имени" + +msgid "Failed RunAsGroup" +msgstr "Ошибка запуска от имени группы" + +msgid "Failed profiles" +msgstr "Ошибка профилей" + +msgid "Failed CAs" +msgstr "Ошибка центров сертификации (CA)" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed member manager" +msgstr "Ошибка участников" + +msgid "Failed managedby" +msgstr "Ошибка managedby" + +msgid "Failed allowed to retrieve keytab" +msgstr "Не удалось разрешить получать таблицу ключей" + +msgid "Failed allowed to create keytab" +msgstr "Не удалось разрешить создавать таблицу ключей" + +msgid "Failed targets" +msgstr "Ошибка целей" + +msgid "Failed owners" +msgstr "Записи владельцев с ошибками" + +msgid "Failed to add" +msgstr "Ошибка при добавлении" + +msgid "maps not connected to /etc/auto.master:" +msgstr "списки соответствия, которые не подключены к /etc/auto.master:" + +msgid "Import automount files for a specific location." +msgstr "Импортировать файлы автомонтирования для определённого расположения." + +msgid "Master file" +msgstr "Главный файл" + +msgid "Automount master file." +msgstr "Главный файл автомонтирования." + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" +"Непрерывный режим работы. Сообщения об ошибках выводятся, но процесс " +"продолжается." + +#, python-format +msgid "File %(file)s not found" +msgstr "Файл %(file)s не найден" + +#, python-format +msgid "key %(key)s already exists" +msgstr "ключ %(key)s уже существует" + +#, python-format +msgid "map %(map)s already exists" +msgstr "список соответствия %(map)s уже существует" + +msgid "Imported maps:" +msgstr "Импортированные списки соответствия:" + +#, python-format +msgid "Added %(map)s" +msgstr "Добавлено %(map)s" + +msgid "Imported keys:" +msgstr "Импортированные ключи:" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Добавлено %(src)s в %(dst)s" + +msgid "Ignored keys:" +msgstr "Пропущенные ключи:" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "Пропущено %(src)s в %(dst)s" + +msgid "Duplicate maps skipped:" +msgstr "Пропущенные списки соответствия — дубликаты:" + +#, python-format +msgid "Skipped %(map)s" +msgstr "Пропущено %(map)s" + +msgid "Duplicate keys skipped:" +msgstr "Пропущенные ключи-дубликаты:" + +#, python-format +msgid "Skipped %(key)s" +msgstr "Пропущено %(key)s" + +msgid "Input file" +msgstr "Входной файл" + +msgid "File to load the certificate from" +msgstr "Файл, из которого следует загрузить сертификат" + +msgid "cannot specify both raw certificate and file" +msgstr "невозможно одновременно указать код сертификата и файл с сертификатом" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Конфигурация профиля, которая хранится в файле \"%(file)s\"" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Сертификат (сертификаты), которые хранятся в файле \"%(file)s\"" + +msgid "Servers details:" +msgstr "Сведения о серверах:" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"Режим миграции отключён. Используйте команду \"ipa config-mod --enable-" +"migration=TRUE\", чтобы включить его." + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Миграция записей паролей выполнена в формате до хеширования. IPA не удастся " +"создать ключи Kerberos, если не будут предоставлены текстовые пароли. Всем " +"пользователям с перенесёнными записями придётся выполнить вход на https://" +"your.domain/ipa/migration/ до того, как они смогут использовать свои учётные " +"записи Kerberos." + +msgid "python-yubico is not installed." +msgstr "python-yubico не установлен." + msgid "" "\n" +"YubiKey Tokens\n" +msgstr "" +"\n" +"Токены YubiKey\n" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"Управление токенами YubiKey.\n" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" +"\n" +"Этот код является расширением подключаемого модуля otptoken и предоставляет " +"поддержку прямого чтения или записи токенов YubiKey.\n" + +msgid "" "\n" "EXAMPLES:\n" msgstr "" "\n" -"\n" "ПРИМЕРЫ:\n" -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -"\n" -"Примеры:\n" -" Найти все IPA-серверы:\n" -" ipa server-find\n" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" -"\n" -"\n" -"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ DNS\n" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Переопределить это, чтобы получить возможность добавить данные об " -"успехе или неудаче в возвращаемое сообщение.\n" -" " - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Переопределить это, чтобы получить возможность указать состояния " -"успеха или неудачи.\n" -" " - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Добавить правило автоучастия.\n" -" " - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Добавить условия в правило автоучастия.\n" -" " - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" -"\n" -"Добавление нового диапазона идентификаторов.\n" -"\n" -" Для добавления нового диапазона идентификаторов всегда необходимо " -"указывать\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Кроме того,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" могут указываться для нового диапазона идентификаторов для локального " -"домена, в то время как\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" должны быть указаны для добавления нового диапазона для доверенного " -"домена AD.\n" -"\n" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Удалить правило автоучастия.\n" -" " - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -"Показать сведения о правиле автоучастия." - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Показать сведения о группах автоучастия по умолчанию (резервных).\n" -" " - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -"Состояние блокировки учётной записи пользователя.\n" -"\n" -" Учётная запись может быть заблокирована, если в течение определённого " -"периода времени слишком большое количество раз был введён неверный пароль " -"(соответствующие ограничения регулируются политикой паролей). Запись " -"блокируется временно, она может быть разблокирована администратором.\n" -"\n" -" Эта программа соединяется с каждым главным IPA-сервером и показывает " -"состояние блокировки на каждом из них.\n" -"\n" -" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " -"потребуется сравнить количество неудачных попыток входа и время последней " -"неудачной попытки с эталонными значениями. Для блокировки учётной записи " -"количество неудачных попыток входа должно превысить значение maxfail в " -"течение временного интервала failinterval в соответствии с политикой " -"паролей, связанной с пользователем.\n" -"\n" -" Счётчик неудачных попыток изменяется только тогда, когда пользователь " -"выполняет попытку войти, поэтому учётная запись может казаться " -"заблокированной, но время, прошедшее с последней неудачной попытки входа, " -"превышает время блокировки (lockouttime), установленное политикой паролей. " -"Это означает, что пользователь может войти в систему снова.\n" -" " - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Изменить отношение доверия (для будущего использования).\n" -"\n" -" В текущей версии для изменения атрибутов LDAP доступен только параметр " -"по умолчанию. В последующих версиях будут добавлены более специфичные " -"параметры.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Изменить правило автоучастия.\n" -" " - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" -"\n" -" Изменение доменов области (realm).\n" -"\n" -" Проверка DNS: при ручном добавлении домена в список по умолчанию " -"выполняется проверка DNS. Она устанавливает, связан ли домен с областью " -"(realm) IPA, проверяя, есть ли у домена запись TXT _kerberos, которая " -"содержит имя области (realm) IPA. Эту проверку можно пропустить, указав " -"параметр --force.\n" -"\n" -" Удаление: при удалении домена области (realm), у которого имеется " -"соответствующая находящаяся под управлением IPA зона DNS, также " -"автоматически удаляется и соответствующая запись TXT _kerberos в этой зоне. " -"Другие записи в этой зоне и сама зона остаются.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Удалить условия из правила автоучастия.\n" -" " - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Удалить группу по умолчанию (резервную) для всех несоответствующих " -"записей.\n" -" " - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -"Поиск правил автоучастия." - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" -"\n" -" Поиск неиспользуемых правил автоучастия. Чтобы найти все неиспользуемые " -"правила, может потребоваться выполнить команду с правами привилегированного " -"пользователя.\n" -" " - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" -"\n" -" Поиск пользователей, соответствующих предоставленному сертификату.\n" -"\n" -" Чтобы получить список соответствующих пользователей, эта команда " -"использует данные SSSD, следовательно, она может возвращать кэшированные " -"данные. Подробнее об очистке кэша SSSD можно узнать из документации к " -"sss_cache.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Установить группу по умолчанию (резервную) для всех несоответствующих " -"записей.\n" -" " - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -"Разблокировка учётной записи пользователя.\n" -" \n" -"Учётная запись может быть заблокирована, если в течение определённого " -"периода времени слишком большое количество раз был введён неверный пароль " -"(соответствующие ограничения регулируются политикой паролей). Запись " -"блокируется временно, она может быть разблокирована администратором." - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" Объект контейнера хранилищ.\n" -" " - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Объект хранилища.\n" -" " - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" -"\n" -" Эта команда эквивалентна следующим командам:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Добавить расположение:\n" -" ipa location-add location --description 'My location'\n" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Добавить сегмент топологии в суффикс \"ca\":\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Добавить сегмент топологии к суффиксу \"domain\":\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Удалить расположение:\n" -" ipa location-del location\n" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" -"\n" -" Удалить сегмент топологии в суффиксе \"ca\":\n" -" ipa topologysegment-del ca segment_name\n" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" -"\n" -" Удалить сегмент топологии в суффиксе \"domain\":\n" -" ipa topologysegment-del domain segment_name\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Найти все расположения:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Найти все серверы:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Найти все суффиксы:\n" -" ipa topologysuffix-find\n" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" -" ipa topologysegment-find ca\n" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" -" ipa topologysegment-find domain\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -" Показать конфигурацию определённого DNS-сервера:\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" -"\n" -" Показать неявную роль главного IPA-сервера:\n" -" ipa server-role-find --include-master\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Показать определённое расположение:\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Показать определённый сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Показать состояние роли \"DNS server\" на сервере:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Показать состояние всех настроенных ролей на сервере:\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Показать состояние всех ролей, которые содержат \"AD\", на сервере:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Обновить конфигурацию определённого DNS-сервера:\n" -" ipa dnsserver-mod\n" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -" Проверить топологию суффикса \"ca\":\n" -" ipa topologysuffix-verify ca\n" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" -"\n" -" Проверить топологию суффикса \"domain\":\n" -" ipa topologysuffix-verify domain\n" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" -"\n" -" Добавить запись LOC для example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" -"\n" -" Добавить в правило условие:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -" Добавить узел, который может управлять таблицей ключей и сертификатом этого " -"узла:\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" -"\n" -" Добавить узел в правило:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -"Добавить узел:\n" -" ipa host-add web1.example.com\n" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" -"\n" -" Добавить почтовый сервер для example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Добавить новый узел с одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -" Добавить новый узел со случайным одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -" Добавить новый узел:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Добавить новый сервер:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Добавить новый токен:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - msgid "" "\n" " Add a new token:\n" @@ -696,3048 +891,315 @@ msgstr "" " Добавить новый токен:\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -" Добавить разрешение на управление участием в группе:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +msgid "Add a new YubiKey OTP token." +msgstr "Добавить новый токен OTP YubiKey." -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" -"\n" -" Добавить разрешение на создание пользователей:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgid "YubiKey slot" +msgstr "Слот YubiKey" -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" -"\n" -" Добавить специальное правило Sudo для конфигурации сервера Sudo по " -"умолчанию:\n" -" ipa sudorule-add defaults\n" +msgid "No free YubiKey slot!" +msgstr "Нет свободных слотов YubiKey!" -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." msgstr "" -"\n" -" Добавить стандартное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type standard\n" +"Выполняется удаление %(servers)s из топологии репликации; пожалуйста, " +"подождите..." -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Добавить симметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type symmetric --password-file password.txt\n" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Включено правило Sudo \"%s\"" -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" -"\n" -" Добавить пользователя в правило:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Отключено правило Sudo \"%s\"" -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" -"\n" -" Добавить пользователя:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "В правило Sudo \"%(rule)s\" добавлен параметр \"%(option)s\"" -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Добавить асимметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file public.pem\n" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Из правила Sudo \"%(rule)s\" удалён параметр \"%(option)s\"" -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." msgstr "" -"\n" -" Добавить в правило исключительное условие, чтобы предотвратить " -"автоназначение:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" +"Топология репликации суффикса \"%(suffix)s\" соответствует требованиям." -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" -"\n" -" Добавить другую запись с помощью специальных параметров записи MX:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "Топология репликации суффикса \"%(suffix)s\" содержит ошибки." -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" -"\n" -"Добавить другую запись с помощью интерактивного режима (в который программа " -"переходит в ответ на команды dnsrecord-add, dnsrecord-mod или dnsrecord-del " -"без параметров):\n" -" ipa dnsrecord-add example.com @\n" -" Выберите тип записи ресурса DNS, который следует добавить\n" -" Наиболее распространённые типы для этого типа зон: NS, MX, LOC\n" -"\n" -" Тип записи ресурса DNS: MX\n" -" Приоритет MX: 30\n" -" Обменник MX: mail3\n" -" Имя записи: example.com\n" -" Запись MX: 10 mail1, 20 mail2, 30 mail3\n" -" Запись NS: nameserver.example.com., nameserver2.example.com.\n" +msgid "Topology is disconnected" +msgstr "Топология отключена" -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" -"\n" -" Добавить новую запись A для www.example.com. Также создать обратную запись " -"в соответствующей обратной зоне. В этом случае запись PTR \"2\", которая " -"указывает на www.example.com, будет создана в зоне 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "Сервер %(srv)s не может связаться с серверами: %(replicas)s" -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgid "Recommended maximum number of agreements per replica exceeded" msgstr "" -"\n" -" Добавить новую запись PTR для www.example.com:\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"Превышено рекомендованное максимальное количество соглашений для реплики" -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" -"\n" -" Добавить новые записи SRV для LDAP-серверов. Три четверти запросов должны " -"отправляться на fast.example.com, одна четверть — на slow.example.com. Если " -"обе службы недоступны, переключиться на backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" +msgid "Maximum number of agreements per replica" +msgstr " Максимальное количество соглашений для реплики" -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" -"\n" -" Добавить новую обратную зону, указанную с помощью сетевого IP-адреса:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "У сервера \"%(srv)s\" имеется %(n)d соглашений с серверами:" -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgid "Delete a user, keeping the entry available for future use" msgstr "" -"\n" -"Добавить новую зону:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"Удалить пользователя, сохраняя запись доступной для будущего использования" -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" -"\n" -" Добавить другой сервер имён для example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgid "Delete a user" +msgstr "Удалить пользователя" -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" -"\n" -" Добавить объект команды Sudo и добавить его в правило в качестве " -"разрешённой команды:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgid "preserve and no-preserve cannot be both set" +msgstr "невозможно одновременно указать сохранение и отсутствие сохранения" -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" +msgid "Write certificate (chain if --chain used) to file" msgstr "" -"\n" -" Добавить общесистемные права доступа, которыми можно воспользоваться для " -"делегирования привилегий для отдельных зон:\n" -" ipa dnszone-add-permission example.com\n" +"Записать сертификат (цепочку сертификатов, если использовано --chain) в файл" -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" -"\n" -" Добавить начальную группу или группу узлов:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" +msgid "Split DNS record to parts" +msgstr "Разделить запись DNS на части" -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" -"\n" -" Добавить начальное правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" +msgid "Please choose a type of DNS resource record to be added" +msgstr "Выберите тип записи ресурса DNS, который следует добавить" -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Добавить участников хранилища:\n" -" ipa vault-add-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Наиболее распространённые типы для этого типа зон: %s\n" -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Добавить владельцев хранилища:\n" -" ipa vault-add-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +msgid "DNS resource record type" +msgstr "Тип записи ресурса DNS" -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" -"\n" -" После внесения этих изменений три пятых запросов должны направляться на " -"fast.example.com, а две пятых — на slow.example.com.\n" +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Тип недействителен или не поддерживается. Разрешённые значения: %s" -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Разрешить пользователю создавать таблицу ключей:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgid "No option to modify specific record provided." +msgstr "Возможность изменения определённой записи не предусмотрена." -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" -"\n" -" Разрешить пользователю создавать таблицу ключей:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgid "Current DNS record contents:\n" +msgstr "Текущее содержание записи DNS:\n" -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" -"\n" -"Пример интерактивного режима для команды dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" Не указан параметр удаления определённой записи.\n" -" Удалить все? Да/Нет (по умолчанию \"Нет\"): (не удалять все записи)\n" -" Текущее содержание записи DNS:\n" -"\n" -" Запись A: 192.0.2.2, 192.0.2.3\n" -"\n" -" Удалить запись A '192.0.2.2'? Да/Нет (по умолчанию \"Нет\"):\n" -" Удалить запись A '192.0.2.3'? Да/Нет (по умолчанию \"Нет\"): y\n" -" Имя записи: www\n" -" Запись A: 192.0.2.2 (запись A 192.0.2.3 удалена)\n" +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Изменить значения \"%(value)s\" %(name)s?" +#, python-format msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архивировать данные в асимметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +"Пропущена %(count)d %(type)s запись. Одновременно можно изменить только одно " +"значение на тип записи DNS." +msgstr[1] "" +"Пропущено %(count)d %(type)s записей. Одновременно можно изменить только " +"одно значение на тип записи DNS." +msgstr[2] "" +"Пропущено %(count)d %(type)s записей. Одновременно можно изменить только " +"одно значение на тип записи DNS." msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." msgstr "" -"\n" -" Архивировать данные в стандартное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" +"Не предоставлено ни --del-all, ни параметров удаления определённой записи.\n" +"Все поддерживаемые типы записей можно посмотреть с помощью команды help." -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Архивировать данные в симметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" -" --password-file password.txt\n" +msgid "No option to delete specific record provided." +msgstr "Возможность удаления определённой записи не предусмотрена." -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" -"\n" -" Изменить политику перенаправления (параметр forward-policy) для external." -"example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgid "Delete all?" +msgstr "Удалить все?" -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Изменить секрет:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Удалить значения \"%(value)s\" %(name)s?" -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Изменить поставщика:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" +msgid "Server will check DNS forwarder(s)." +msgstr "Сервер проверит DNS-перенаправитель (перенаправители)." -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" -"\n" -"Проверить состояние запроса подписи:\n" -" ipa cert-status 10\n" +msgid "This may take some time, please wait ..." +msgstr "Это может занять некоторое время; пожалуйста, подождите..." -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" -"\n" -" Создать новое правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" +msgid "DNS forwarder" +msgstr "DNS-перенаправитель" -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" -"\n" -" Создать новое правило:\n" -" ipa sudorule-add readfiles\n" +msgid "file to store DNS records in nsupdate format" +msgstr "файл для сохранения записей DNS в формате nsupdate" msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" msgstr "" -"\n" -" Делегировать зону sub.example другому серверу имён:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"Не удалось показать QR-код с помощью настроенного шифрования вывода. " +"Используйте URI токена для настройки вашего устройства OTP" msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." msgstr "" -"\n" -" Удалить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-del rule1\n" +"Ширина QR-кода превышает ширину, заданную параметром \"tty\" для вывода. " +"Измените размер терминала." -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Удалить конфигурацию:\n" -" ipa radiusproxy-del MyRADIUS\n" +msgid "Synchronize an OTP token." +msgstr "Синхронизировать токен OTP." -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Удалить узел:\n" -" ipa host-del test.example.com\n" +msgid "User ID" +msgstr "ID пользователя" -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Удалить токен:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "Password" +msgstr "Пароль" -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Удалить хранилище:\n" -" ipa vault-del <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" +msgid "First Code" +msgstr "Первый код" -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -" Удалить правило автоучастия:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" +msgid "Second Code" +msgstr "Другой код" -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" -"\n" -" Удалить зону перенаправления external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" +msgid "Token ID" +msgstr "ID токена" -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" -"\n" -" Удалить добавленный ранее сервер имён из example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Не удалось прочитать файл \"%(filename)s\": %(exc)s" -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Удалить участников хранилища:\n" -" ipa vault-remove-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Не удалось расшифровать файл \"%(filename)s\": %(exc)s" -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Удалить владельцев хранилища:\n" -" ipa vault-remove-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +msgid "Invalid credentials" +msgstr "Недействительные учётные данные" -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" -"\n" -" Удалить зону example.com вместе со всеми записями ресурсов:\n" -" ipa dnszone-del example.com\n" +msgid "Create a new vault." +msgstr "Создать новое хранилище." -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" -"\n" -" Отключить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-disable rule1\n" +msgid "Vault password" +msgstr "Пароль хранилища" -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" -"\n" -" Отключить глобальное перенаправление для указанного поддерева:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" +msgid "File containing the vault password" +msgstr "Файл, который содержит пароль хранилища" -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" -" ipa host-disable test.example.com\n" +msgid "File containing the vault public key" +msgstr "Файл, который содержит открытый ключ хранилища" -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" -"\n" -" Показать правило автоучастия:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" +msgid "Password can be specified only for symmetric vault" +msgstr "Пароль можно указать только для симметричного хранилища" -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"\n" -" Показать сведения о правиле сопоставления сертификатов с записями " -"пользователей:\n" -" ipa certmaprule-show rule1\n" +msgid "Public key can be specified only for asymmetric vault" +msgstr "Открытый ключ можно указать только для асимметричного хранилища" -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -"Показать глобальную конфигурацию сопоставления сертификатов с записями " -"пользователей:\n" -" ipa certmapconfig-show\n" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Показать конфигурацию хранилища:\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" -"\n" -" Включить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-enable rule1\n" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" -"\n" -" Проверить сертификат:\n" -" ipa cert-find --file=cert.pem --all\n" +msgid "Password specified multiple times" +msgstr "Пароль указан несколько раз" -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Проверить конфигурацию:\n" -" ipa radiusproxy-show MyRADIUS\n" +msgid "Public key specified multiple times" +msgstr "Открытый ключ указан несколько раз" -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Проверить токен:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "Missing vault public key" +msgstr "Отсутствует открытый ключ хранилища" -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" -"\n" -" Найти записи A со значением 192.0.2.2 в зоне example.com:\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "Открытый ключ хранилища недействителен или не поддерживается: %s" -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" -"\n" -" Найти все правила сопоставления сертификатов с записями пользователей в " -"указанном домене:\n" -" ipa certmaprule-find --domain example.com\n" +msgid "Modify a vault." +msgstr "Изменить хранилище." -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Найти все правила автоучастия:\n" -" ipa automember-find\n" +msgid "Change password" +msgstr "Изменить пароль" -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" -"\n" -" Найти все неиспользуемые правила автоучастия:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Найти все неиспользуемые правила автоучастия и удалить их:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" +msgid "Old vault password" +msgstr "Старый пароль хранилища" -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Найти все серверы, записи которых содержат строку \"example.com\":\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" -"\n" -" Найти записи для ресурсов с \"www\" в имени в зоне example.com:\n" -" ipa dnsrecord-find example.com www\n" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Найти параметры user-find:\n" -" ipa param-find user-find\n" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" -"\n" -" Найти зону со словом \"example\" в имени домена:\n" -" ipa dnszone-find example\n" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" -"\n" -" Перенаправлять все запросы для зоны external.example.com на другой " -"перенаправитель с помощью политики \"first\" (запросы будут направлены на " -"выбранный перенаправитель, а если он не ответит, будут использованы " -"глобальные корневые серверы):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" -"\n" -"Создать и получить таблицу ключей для службы IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" -"\n" -"Если настроен глобальный перенаправитель, все запросы, для которых этот " -"сервер не является полномочным (например, sub.example.com), будут " -"перенаправлены на глобальный перенаправитель. Конфигурацию глобального " -"перенаправления можно переопределить для отдельных зон.\n" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" -"\n" -" Вывести список всех зон перенаправления:\n" -" ipa dnsforwardzone-find\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Вывести список хранилищ:\n" -" ipa vault-find\n" -" [--user <пользователь>|--service <служба>|--shared]\n" +msgid "File containing the old vault password" +msgstr "Файл, который содержит старый пароль хранилища" -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" -"\n" -" Изменить глобальную конфигурацию сопоставления сертификатов с записями " -"пользователей:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" +msgid "New vault password" +msgstr "Новый пароль хранилища" -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" -"\n" -" Изменить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgid "File containing the new vault password" +msgstr "Файл, который содержит новый пароль хранилища" -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" -"\n" -" Изменить ключи асимметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закрытого ключа>\n" -" --public-key-file <файл нового открытого ключа>\n" +msgid "Old vault private key" +msgstr "Старый закрытый ключ хранилища" -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" -"\n" -"Изменить глобальную конфигурацию DNS и установить список глобальных " -"перенаправителей:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgid "File containing the old vault private key" +msgstr "Файл, который содержит старый закрытый ключ хранилища" -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Изменить сведения об узле:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" +msgid "File containing the new vault public key" +msgstr "Файл, который содержит новый открытый ключ хранилища" -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" -"\n" -" Изменить пароль симметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password <старый пароль>\n" -" --new-password <новый пароль>\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" +msgid "New public key specified multiple times" +msgstr "Новый открытый ключ указан несколько раз" -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Изменить правило автоучастия:\n" -" ipa automember-mod\n" +msgid "Missing new vault public key" +msgstr "Отсутствует новый открытый ключ хранилища" -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" -"\n" -" Изменить зону, чтобы разрешить динамическое обновление для собственных " -"записей узлов в области (realm) EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgid "Archive data into a vault." +msgstr "Архивировать данные в хранилище." -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" -"\n" -" Изменить зону, чтобы разрешить перенос зоны только для локальной сети:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgid "Binary data to archive" +msgstr "Двоичные данные, которые следует архивировать" -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Изменить описание хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --desc <описание>\n" +msgid "File containing data to archive" +msgstr "Файл, содержащий данные, которые следует архивировать" -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" -"\n" -" Изменить тип хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старый пароль / закрытый ключ]\n" -" [новый пароль / открытый ключ]\n" +msgid "Override existing password" +msgstr "Переопределить существующий пароль" -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"\n" -" Перестроить участие для всех узлов:\n" -" ipa automember-rebuild --type=hostgroup\n" +msgid "Input data specified multiple times" +msgstr "Входные данные указаны несколько раз" +#, python-format msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" msgstr "" -"\n" -" Перестроить участие для всех пользователей:\n" -" ipa automember-rebuild --type=group\n" +"Размер данных превышает ограничение. Текущее ограничение размера хранилища: " +"%(limit)d Б" -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -" Перестроить участие для указанных узлов:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" +msgid "Invalid vault type" +msgstr "Недопустимый тип хранилища" -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" -"\n" -" Перестроить участие для указанных пользователей:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgid "Retrieve a data from a vault." +msgstr "Получить данные из хранилища." -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -"Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgid "File to store retrieved data" +msgstr "Файл, в который следует сохранить полученные данные" -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" -"\n" -"Удалить сертификат из списка отзыва:\n" -" ipa cert-remove-hold 1032\n" +msgid "Vault private key" +msgstr "Закрытый ключ хранилища" -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" -"\n" -" Удалить условие из правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" +msgid "File containing the vault private key" +msgstr "Файл, который содержит закрытый ключ хранилища" -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" -"\n" -" Удалить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" +msgid "Data" +msgstr "Данные" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" -"\n" -"Запросить новый сертификат и добавить учётную запись:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgid "Private key specified multiple times" +msgstr "Закрытый ключ указан несколько раз" -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" -"\n" -"Определить адрес по имени узла, чтобы узнать, существует ли он (будет " -"добавлен стандартный домен IPA, если он не включён):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" +msgid "Missing vault private key" +msgstr "Отсутствует закрытый ключ хранилища" -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" -"\n" -"Получить существующий сертификат:\n" -" ipa cert-show 1032\n" +msgid "Unrevoked" +msgstr "Отзыв отменён" -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Получить данные из асимметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных> --private-key-file private.pem\n" +msgid "Error" +msgstr "Ошибка" -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Получить данные из стандартного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" +msgid "Input filename" +msgstr "Имя файла входных данных" -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Получить данные из симметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" -" --password-file password.txt\n" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" -"\n" -"Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" -"\n" -"Поиск сертификатов по дате выдачи:\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" -"\n" -"Поиск сертификатов по имени узла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" -"\n" -" Поиск сертификатов, владельцем которых является определённый пользователь:\n" -" ipa cert-find --user=user\n" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"\n" -"Поиск отозванных сертификатов по причине отзыва:\n" -" ipa cert-find --revocation-reason=5\n" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" -"\n" -" Семантика перенаправления в IPA соответствует семантике BIND и зависит от " -"типа зоны:\n" -" * Главная зона: локальный BIND предоставляет надёжные ответы на запросы " -"данных в указанной зоне (включая надёжные ответы NXDOMAIN), а " -"перенаправление применяется только для запросов имён за пределами отрезков " -"(записи NS) зон, которые обслуживаются локально.\n" -"\n" -" * Зона перенаправления: зона перенаправления не содержит надёжные данные. " -"BIND перенаправляет запросы, на которые не удалось получить ответы из " -"локального кэша, на настроенные перенаправители.\n" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" -"\n" -" Семантика параметра --forward-policy:\n" -" * none - отключить перенаправление для указанной зоны.\n" -" * first - перенаправить все запросы на настроенные перенаправители. Если " -"они не сработают,\n" -" выполнить разрешение с помощью корневых серверов DNS.\n" -" * only - перенаправить все запросы на настроенные перенаправители и " -"вернуть сообщение об ошибке, если они не сработают.\n" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" -"\n" -" Указать преобразования типа и роли SELinux в правиле:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -" Указать параметр Sudo по умолчанию:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" -"\n" -"Установить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Показать хранилище:\n" -" ipa vault-show <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" -"\n" -" Показать зону перенаправления external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" -"\n" -" Показать глобальную конфигурацию DNS:\n" -" ipa dnsconfig-show\n" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" -"\n" -" Показать записи для ресурса www в зоне example.com:\n" -" ipa dnsrecord-show example.com www\n" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" -"\n" -" Показать целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Показать сведения о user-find:\n" -" ipa command-show user-find\n" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" -"\n" -" Показать зону example.com:\n" -" ipa dnszone-show example.com\n" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" -"\n" -"Для облегчения внесения изменений можно воспользоваться интерактивным " -"режимом:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" Возможность внесения изменений в определённую запись не предусмотрена.\n" -" Текущее содержание записи DNS:\n" -"\n" -" Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" -"\"):\n" -" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" -"\"): y\n" -" Приоритет SRV [0]: (сохранить значение по умолчанию)\n" -" Вес SRV [1]: 2 (изменённое значение)\n" -" Порт SRV [389]: (сохранить значение по умолчанию)\n" -" Цель SRV [slow.example.com]: (сохранить значение по умолчанию)\n" -" Пропущена 1 запись SRV. Одновременно можно изменять только одно значение " -"на тип записи DNS.\n" -" Имя записи: _ldap._tcp\n" -" Запись SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" -"\n" -" Эта конфигурация перенаправляет все запросы имён за пределами поддерева " -"example.com на глобальные перенаправители. Для имён в пределах поддерева " -"example.com используется обычный рекурсивный процесс разрешения (то есть с " -"переходом по записям NS и так далее).\n" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" -"\n" -"Проверить автоучастие:\n" -" ipa hostgroup-show webservers\n" -" Группа узлов: webservers\n" -" Описание: Web Servers\n" -" Узлы-участники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Имя группы: devel\n" -" Описание: Developers\n" -" GID: 1004200000\n" -" Пользователи-участники: tuser\n" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" -"\n" -" Проверить, что владельцем сертификата является определённый пользователь:\n" -" ipa cert-find --file=cert.pem --user=user\n" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* Разрешение даёт доступ для чтения, записи, добавления, удаления, поиска " -"или сравнения.\n" -"* Привилегия объединяет схожие разрешения (например, все разрешения, которые " -"требуются для добавления пользователя).\n" -"* Роль даёт набор привилегий пользователям, группам, узлам или группам " -"узлов.\n" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" -"\n" -"* Должен существовать узел\n" -"* Должна существовать служба (либо следует использовать параметр --add для " -"её автоматического добавления)\n" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" -"\n" -"Сертификат хранится в учётной записи службы, а учётной записи службы " -"требуется узел.\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Условие является регулярным выражением, используется 389-ds для установления " -"соответствия новой входящей записи правилу автоучастия. Если имеется " -"соответствие правилу включения, запись добавляется в соответствующую группу " -"или группу узлов.\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Можно указать группу или группу узлов по умолчанию, которая будет " -"использоваться для записей, не соответствующих ни одному правилу. В случае " -"записей пользователей эта группа будет резервной группой, поскольку все " -"пользователи по умолчанию являются участниками группы, указанной в " -"настройках IPA.\n" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" -"\n" -"С помощью разрешений можно очень точно делегировать права доступа. " -"Разрешение представляет собой удобную для восприятия форму 389-ds ACI " -"(правила управления доступом).\n" -"Разрешение даёт право выполнять определённую задачу, например, добавлять " -"пользователей, изменять группы и так далее.\n" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"Разрешение состоит из нескольких разных частей:\n" -"\n" -"1. Имя разрешения.\n" -"2. Цель разрешения.\n" -"3. Права, предоставленные разрешением.\n" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"Разрешение не может содержать другие разрешения.\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Правило непосредственно связывается с группой по имени, следовательно, вы не " -"можете создать правило без определения группы или группы узлов.\n" - -msgid "" -"\n" -"API Schema\n" -msgstr "" -"\n" -"Схема API\n" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -"Добавление нового диапазона идентификаторов.\n" -"\n" -" Для добавления нового диапазона идентификаторов всегда необходимо " -"указывать\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Кроме того,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" могут указываться для нового диапазона идентификаторов для локального " -"домена, в то время как\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" должны быть указаны для добавления нового диапазона для доверенного " -"домена AD.\n" -"\n" -" ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -" " - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -"Добавление нового диапазона идентификаторов.\n" -"\n" -" Для добавления нового диапазона идентификаторов всегда необходимо " -"указывать\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Кроме того,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" могут указываться для нового диапазона идентификаторов для локального " -"домена, в то время как\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" должны быть указаны для добавления нового диапазона для доверенного " -"домена AD.\n" -"\n" -" ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -" " - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Добавление нового диапазона идентификаторов.\n" -"\n" -" Для добавления нового диапазона идентификаторов всегда необходимо " -"указывать\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Кроме того,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" могут указываться для нового диапазона идентификаторов для локального " -"домена, в то время как\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" должны быть указаны для добавления нового диапазона для доверенного " -"домена AD.\n" -"\n" -"======= \n" -"ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -"=======" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Добавление нового отношения доверия, которое следует использовать.\n" -"\n" -"Эта команда устанавливает отношение доверия с другим доменом, который " -"становится \"доверенным\". В результате пользователи доверенного домена " -"получают доступ к ресурсам этого домена.\n" -"\n" -"В текущей версии поддерживаются только отношения доверия с доменами Active " -"Directory.\n" -"\n" -"Команду можно безопасно запускать несколько раз для одного и того же домена, " -"такой запуск приводит к изменению учётных данных отношения доверия на обеих " -"сторонах.\n" -"\n" -"Если команда уже выполнялась с определённым типом диапазона или с " -"автоматическим определением типа диапазона, а теперь необходимо настроить " -"другой тип диапазона, возможно, потребуется сначала удалить диапазон " -"идентификаторов с помощью команды ipa idrange-del. Затем повторите команду с " -"необходимым типом диапазона.\n" -"\n" -" " - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" -"\n" -"Добавление нового отношения доверия, которое следует использовать.\n" -"\n" -"Эта команда устанавливает отношение доверия с другим доменом, который " -"становится \"доверенным\". В результате пользователи доверенного домена " -"получают доступ к ресурсам этого домена.\n" -"\n" -"В текущей версии поддерживаются только отношения доверия с доменами Active " -"Directory.\n" -"\n" -"Команду можно безопасно запускать несколько раз для одного и того же домена, " -"такой запуск приводит к изменению учётных данных отношения доверия на обеих " -"сторонах.\n" -" " - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"Кроме того, имеются следующие удобные параметры. Установка одного из них " -"установит соответствующий атрибут (атрибуты).\n" -"1. type: тип объекта (пользователь, группа и так далее); устанавливает " -"поддерево и фильтр целей.\n" -"2. memberof: применить к участникам группы; устанавливает фильтр целей.\n" -"3. targetgroup: предоставить доступ для изменения определённой группы " -"(например, предоставить права доступа для управления участием в группе); " -"устанавливает цель.\n" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" -"\n" -"Соглашения представляются сегментами топологии. По умолчанию сегмент " -"топологии представляет 2 соглашения о репликации: по одному для каждого " -"направления, например, от A до B и от B до A. Создание однонаправленных " -"сегментов запрещено.\n" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" -"\n" -"Все службы сертификации, кроме службы сертификации \"IPA\", можно отключать " -"и включать повторно. Отключение службы сертификации приводит к тому, что ей " -"запрещается выдавать сертификаты, но не влияет на действительность её " -"сертификата.\n" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"Правилу Sudo можно добавить порядок, который будет руководить порядком " -"обработки записей (если такой порядок предусмотрен на клиентской стороне). " -"Порядок определяется числовым индексом (целое число), который не должен " -"повторяться.\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " -"можно получить только с помощью закрытого ключа.\n" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Правило автоучастия.\n" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -"Правило автоучастия.\n" -"\n" -"Внося ясные правила о принадлежности узлов и пользователей к группам " -"посредством настройки включающих и исключающих шаблонов регулярных " -"выражений, вы можете автоматически связывать новые записи с группой или " -"группой узлов на основе данных атрибутов.\n" -"\n" -"Правило непосредственно связывается с группой по имени, следовательно, вы не " -"можете создать правило без определения группы или группы узлов. \n" -"\n" -"Условие является регулярным выражением, используется 389-ds для установления " -"соответствия новой входящей записи правилу автоучастия. Если имеется " -"соответствие правилу включения, запись добавляется в соответствующую группу " -"или группу узлов.\n" -"\n" -"Можно указать группу или группу узлов по умолчанию, которая будет " -"использоваться для записей, не соответствующих ни одному правилу. В случае " -"записей пользователей эта группа будет резервной группой, поскольку все " -"пользователи по умолчанию являются участниками группы, указанной в " -"настройках IPA.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"Добавить начальную группу или группу узлов :\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Добавить начальное правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Добавить в правило условие:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Добавить в правило исключительное условие, чтобы предотвратить " -"автоназначение:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Добавить узел:\n" -" ipa host-add web1.example.com\n" -"\n" -" Добавить пользователя:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -"Проверить автоучастие:\n" -" ipa hostgroup-show webservers\n" -" Группа узлов: webservers\n" -" Описание: Web Servers\n" -" Узлы-участники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Имя группы: devel\n" -" Описание: Developers\n" -" GID: 1004200000\n" -" Пользователи-участники: tuser\n" -"\n" -" Удалить условие из правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Изменить правило автоучастия:\n" -" ipa automember-mod\n" -"\n" -" Установить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Удалить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Показать целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Найти все правила автоучастия:\n" -" ipa automember-find\n" -"\n" -" Показать правило автоучастия:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Удалить правило автоучастия:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -"Правило автоучастия.\n" -"\n" -"Внося ясные правила о принадлежности узлов и пользователей к группам " -"посредством настройки включающих и исключающих шаблонов регулярных " -"выражений, вы можете автоматически связывать новые записи с группой или " -"группой узлов на основе данных атрибутов.\n" -"\n" -"Правило непосредственно связывается с группой по имени, следовательно, вы не " -"можете создать правило без определения группы или группы узлов. \n" -"\n" -"Условие является регулярным выражением, используется 389-ds для установления " -"соответствия новой входящей записи правилу автоучастия. Если имеется " -"соответствие правилу включения, запись добавляется в соответствующую группу " -"или группу узлов.\n" -"\n" -"Можно указать группу или группу узлов по умолчанию, которая будет " -"использоваться для записей, не соответствующих ни одному правилу. В случае " -"записей пользователей эта группа будет резервной группой, поскольку все " -"пользователи по умолчанию являются участниками группы, указанной в " -"настройках IPA.\n" -"\n" -"Команду automember-rebuild можно использовать, чтобы задним числом применить " -"правила автоучастия в отношении уже существующих записей; это перестроит их " -"участие.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"Добавить начальную группу или группу узлов :\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Добавить начальное правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Добавить в правило условие:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Добавить в правило исключительное условие, чтобы предотвратить " -"автоназначение:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Добавить узел:\n" -" ipa host-add web1.example.com\n" -"\n" -" Добавить пользователя:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -"Проверить автоучастие:\n" -" ipa hostgroup-show webservers\n" -" Группа узлов: webservers\n" -" Описание: Web Servers\n" -" Узлы-участники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Имя группы: devel\n" -" Описание: Developers\n" -" GID: 1004200000\n" -" Пользователи-участники: tuser\n" -"\n" -" Удалить условие из правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Изменить правило автоучастия:\n" -" ipa automember-mod\n" -"\n" -" Установить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Удалить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Показать целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Найти все правила автоучастия:\n" -" ipa automember-find\n" -"\n" -" Показать правило автоучастия:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Удалить правило автоучастия:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -"Перестроить участие для всех пользователей:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Перестроить участие для всех узлов:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Перестроить участие для указанных пользователей:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Перестроить участие для указанных узлов:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" -"\n" -"Автомонтирование\n" -"\n" -"Сохраняет конфигурацию automount(8) для autofs(8) в IPA.\n" -"\n" -"Основой конфигурации автомонтирования является файл конфигурации auto." -"master.\n" -"Это также базовое расположение в IPA. Несколько конфигураций auto.master " -"могут храниться в отдельных расположениях. Расположение зависит от " -"реализации, расположением по умолчанию является расположение с именем " -"\"default\". Например, можно создать расположения для географических " -"областей, этажей, типов и так далее.\n" -"\n" -"В автомонтировании имеется три основных типа объектов: расположения, списки " -"соответствия и ключи.\n" -"\n" -"Расположение определяет набор списков соответствия, привязанных в auto." -"master. Это позволяет хранить несколько конфигураций автомонтирования. " -"Расположение само по себе не представляет особого интереса, оно просто " -"является началом нового списка соответствия автомонтирования.\n" -"\n" -"Грубо говоря, список соответствия является отдельным файлом автомонтирования " -"и обеспечивает хранение ключей.\n" -"\n" -"Ключ — это связанная со списком соответствия точка автомонтирования.\n" -"\n" -"Когда создаётся новое расположение, для него автоматически создаются два " -"списка соответствия: auto.master и auto.direct. Список соответствия auto." -"master — это корневой список соответствия для всех списков соответствия " -"автомонтирования расположения. Список соответствия auto.direct — это список " -"соответствия по умолчанию для прямых монтирований, он монтируется на /-.\n" -"\n" -"Список соответствия автомонтирования может содержать ключ подмонтирования. " -"Этот ключ определяет расположение монтирования в списке соответствия, " -"который ссылается на другой список соответствия. Такой ключ можно добавить с " -"помощью команды automountmap-add-indirect --parentmap или вручную, с помощью " -"automountkey-add и установки info на значение \"-type=autofs :<имя списка " -"соответствия>\".\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"Расположения:\n" -"\n" -" Создать новое именованное расположение, \"Moskva\":\n" -" ipa automountlocation-add moskva\n" -"\n" -" Показать новое расположение:\n" -" ipa automountlocation-show moskva\n" -"\n" -" Поиск доступных расположений:\n" -" ipa automountlocation-find\n" -"\n" -" Удалить именованное расположение автомонтирования:\n" -" ipa automountlocation-del moskva\n" -"\n" -" Показать, как выглядели бы списки соответствия автомонтирования, если бы " -"находились в файловой системе:\n" -" ipa automountlocation-tofiles moskva\n" -"\n" -" Импортировать существующую конфигурацию в расположение:\n" -" ipa automountlocation-import moskva /etc/auto.master\n" -"\n" -" Импорт не удастся выполнить, если будут найдены дублирующиеся записи. " -"Чтобы обеспечить непрерывное выполнение, при котором ошибки игнорируются, " -"используйте параметр --continue.\n" -"\n" -"Списки соответствия:\n" -"\n" -" Создать новый список соответствия с именем \"auto.share\":\n" -" ipa automountmap-add moskva auto.share\n" -"\n" -" Показать новый список соответствия:\n" -" ipa automountmap-show moskva auto.share\n" -"\n" -" Найти списки соответствия в расположении moskva:\n" -" ipa automountmap-find moskva\n" -"\n" -" Создать непрямой список соответствия с auto.share в качестве точки " -"подмонтирования:\n" -" ipa automountmap-add-indirect moskva --parentmap=auto.share --mount=sub " -"auto.man\n" -"\n" -" Эта команда эквивалентна следующим командам:\n" -"\n" -" ipa automountmap-add-indirect moskva --mount=/man auto.man\n" -" ipa automountkey-add moskva auto.man --key=sub --info=\"-fstype=autofs " -"ldap:auto.share\"\n" -"\n" -" Удалить список соответствия auto.share:\n" -" ipa automountmap-del moskva auto.share\n" -"\n" -"Ключи:\n" -"\n" -" Создать новый ключ для списка соответствия auto.share в расположении " -"moskva. Это привяжет ранее созданный список соответствия к auto.master:\n" -" ipa automountkey-add moskva auto.master --key=/share --info=auto.share\n" -"\n" -" Создать новый ключ для списка соответствия auto.share, смонтированного " -"ресурса NFS для страниц man:\n" -" ipa automountkey-add moskva auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Найти все ключи для списка соответствия auto.share:\n" -" ipa automountkey-find moskva auto.share\n" -"\n" -" Найти все ключи прямого автомонтирования:\n" -" ipa automountkey-find moskva --key=/-\n" -"\n" -" Удалить ключ man из списка соответствия auto.share:\n" -" ipa automountkey-del moskva auto.share --key=man\n" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"В зависимости от владения хранилища подразделяются на три категории:\n" -"* хранилища пользователей или личные хранилища\n" -"* хранилища служб\n" -"* хранилища совместного использования\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"В зависимости от механизма обеспечения безопасности выделяют три типа " -"хранилищ:\n" -"* стандартные хранилища\n" -"* симметричные хранилища\n" -"* асимметричные хранилища\n" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"Основной пользователь\n" -"\n" -"Содержит общие определения для пользователя или неподтверждённого " -"пользователя\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Внося ясные правила о принадлежности узлов и пользователей к группам " -"посредством настройки включающих и исключающих шаблонов регулярных " -"выражений, вы можете автоматически связывать новые записи с группой или " -"группой узлов на основе данных атрибутов.\n" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" -"\n" -"Службы сертификации (все, кроме службы сертификации \"IPA\") можно удалять. " -"Удаление службы сертификации приводит к отзыву её сертификата для подписи и " -"удалению её закрытого ключа.\n" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" -"\n" -"Службы сертификации включаются при создании, но их использование " -"регулируется ACL служб сертификации, если у оператора нет разрешения " -"обходить ACL служб сертификации (CA).\n" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" -"\n" -"Сопоставление сертификатов с записями пользователей\n" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"Запросы сертификатов существуют в виде запроса подписи сертификата " -"(Certificate Signing Request, CSR) в формате PEM.\n" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" -"\n" -"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " -"датам действия и дате выдачи.\n" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" -"\n" -"Классы для управления доверенными присоединениями с помощью вызовов DCE-RPC\n" -"\n" -"Код в этом модуле жёстко зависит от содержания пакета samba4-python и " -"привязок для языка Python в Samba4.\n" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Отношения доверия между областями (realm)\n" -"\n" -"Управление отношениями доверия между доменами IPA и Active Directory.\n" -"\n" -"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " -"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " -"поддерживает только отношения доверия между доменами IPA и Active Directory " -"под управлением Windows Server 2008 или более поздней версии с " -"функциональными возможностями уровня 2008 или более поздней версии.\n" -"\n" -"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " -"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " -"Работоспособность отношения доверия зависит от возможности обнаруживать " -"специальные ресурсы в другом домене с помощью записей DNS.\n" -"\n" -"Примеры:\n" -"\n" -"1. Установить отношение доверия между областями (realm) с Active Directory с " -"помощью учётных данных администратора AD:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. Вывести список всех существующих отношений доверия:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показать подробные сведения об определённом отношении доверия:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Удалить существующее отношение доверия:\n" -"\n" -" ipa trust-del \n" -"\n" -"Как только отношение доверия будет установлено, удалённых пользователей " -"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " -"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" -"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " -"POSIX-групп.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список участников внешних участников группы ad_admins_external, " -"чтобы определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" -"\n" -"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " -"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " -"идентификаторы затем используются для связи с доверенным доменом конкретного " -"типа.\n" -"\n" -"1. Показать глобальную конфигурацию отношений доверия для типа отношений " -"доверия Active Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " -"Directory и указать другую резервную основную группу (GID резервной основной " -"группы используется в качестве GID основного пользователя, если для " -"пользователя, который выполняет аутентификацию в домене IPA, не был " -"установлен другой основной GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " -"(разрешена любая группа с классом объекта posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Отношения доверия между областями (realm)\n" -"\n" -"Управление отношениями доверия между доменами IPA и Active Directory.\n" -"\n" -"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " -"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " -"поддерживает только отношения доверия между доменами IPA и Active Directory " -"под управлением Windows Server 2008 или более поздней версии с " -"функциональными возможностями уровня 2008 или более поздней версии.\n" -"\n" -"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " -"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " -"Работоспособность отношения доверия зависит от возможности обнаруживать " -"специальные ресурсы в другом домене с помощью записей DNS.\n" -"\n" -"Примеры:\n" -"\n" -"1. Установить отношение доверия между областями (realm) с Active Directory с " -"помощью учётных данных администратора AD:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. Вывести список всех существующих отношений доверия:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показать подробные сведения об определённом отношении доверия:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Удалить существующее отношение доверия:\n" -"\n" -" ipa trust-del \n" -"\n" -"Как только отношение доверия будет установлено, удалённых пользователей " -"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " -"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" -"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " -"POSIX-групп.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список участников внешних участников группы ad_admins_external, " -"чтобы определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" -"\n" -"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " -"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " -"идентификаторы затем используются для связи с доверенным доменом конкретного " -"типа.\n" -"\n" -"1. Показать глобальную конфигурацию отношений доверия для типа отношений " -"доверия Active Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " -"Directory и указать другую резервную основную группу (GID резервной основной " -"группы используется в качестве GID основного пользователя, если для " -"пользователя, который выполняет аутентификацию в домене IPA, не был " -"установлен другой основной GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " -"(разрешена любая группа с классом объекта posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" -"\n" -"Конфигурация DNS, которая передаётся сценарию командной строки для " -"установки, хранится в локальном файле конфигурации на каждом IPA-сервере, " -"где настроена служба DNS. Эти локальные настройки могут быть переопределены " -"с помощью общей конфигурации, которая хранится на LDAP-сервере:\n" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" -"\n" -"Конфигурация DNS-сервера\n" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" -"\n" -"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" -"серверы. Способ репликации определяется соглашениями о репликации. " -"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " -"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " -"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " -"выполняется централизованно с помощью команд \"ipa topology*\".\n" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" -"\n" -"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " -"датами, определёнными в в сертификатах.\n" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"Запрещено удалять или переименовывать управляемое разрешение, а также " -"изменять его цель.\n" +msgid "File to load the certificate from." +msgstr "Файл, из которого следует загрузить сертификат." msgid "" "\n" @@ -3983,671 +1445,933 @@ msgstr "" "включить все существующие атрибуты. Когда выполняется aci-mod, targetattr " "ЗАМЕНЯЕТ текущие атрибуты, а не добавляет к ним другие.\n" +msgid "ACI name" +msgstr "Имя ACI" + +msgid "Permission" +msgstr "Разрешение" + +msgid "Permission ACI grants access to" +msgstr "Разрешение, доступ к которому предоставляет ACI" + +msgid "User group" +msgstr "Группа пользователей" + +msgid "User group ACI grants access to" +msgstr "Группа пользователей, доступ к которой предоставляет ACI" + +msgid "Permissions" +msgstr "Разрешения" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" +"Разрешения, которые следует предоставить (read, write, add, delete, all)" + +msgid "Attributes to which the permission applies" +msgstr "Атрибуты, к которым применяется разрешение" + +msgid "Attributes" +msgstr "Атрибуты" + +msgid "Type" +msgstr "Тип" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" +"Тип объекта IPA (user (пользователь), group (группа), host (узел), hostgroup " +"(группа узлов), service (служба), netgroup (сетевая группа))" + +msgid "Member of" +msgstr "Участник" + +msgid "Member of a group" +msgstr "Участник группы" + +msgid "Filter" +msgstr "Фильтр" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Допустимый фильтр LDAP (например, ou=Engineering)" + +msgid "Subtree" +msgstr "Поддерево" + +msgid "Subtree to apply ACI to" +msgstr "Поддерево, к которому следует применить ACI" + +msgid "Target group" +msgstr "Целевая группа" + +msgid "Group to apply ACI to" +msgstr "Группа, к которой следует применить ACI" + +msgid "Target your own entry (self)" +msgstr "Выполнить над своей собственной записью (self)" + +msgid "Apply ACI to your own entry (self)" +msgstr "Применить ACI к своей собственной записи (self)" + +msgid "Create new ACI." +msgstr "Создать новую запись ACI." + +msgid "ACI prefix" +msgstr "Префикс ACI" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" +"Префикс, который используется для различения типов ACI (permission, " +"delegation, selfservice, none)" + +msgid "Test the ACI syntax but don't write anything" +msgstr "Проверить синтаксис ACI, но никуда не записывать" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Получить и вывести все атрибуты, возвращаемые сервером. Влияет на содержимое " +"результата исполнения команды." + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Вывести записи в том виде, в котором они хранятся на сервере. Влияет только " +"на формат вывода данных." + +msgid "User-friendly description of action performed" +msgstr "Понятное пользователю описание выполненного действия" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" +"Значение primary_key (основного ключа) записи, например \"ииванов\" для " +"пользователя" + +msgid "Delete ACI." +msgstr "Удалить запись ACI." + +msgid "True means the operation was successful" +msgstr "Значение True означает, что операция выполнена успешно" + msgid "" "\n" -"Directory Server Access Control Instructions (ACIs)\n" +"Search for ACIs.\n" "\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" +" Returns a list of ACIs\n" "\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" +" EXAMPLES:\n" "\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" "\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" "\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" "\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" +"Поиск записей ACI.\n" "\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" +" Возвращает список записей ACI.\n" "\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" +" ПРИМЕРЫ:\n" "\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" +" Чтобы найти все записи ACI, которые применяются непосредственно к " +"участникам группы ipausers:\n" +" ipa aci-find --memberof=ipausers\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" +" Чтобы найти все записи ACI, которые предоставляют доступ для добавления " +"(add):\n" +" ipa aci-find --permissions=add\n" "\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" +" Следует учитывать, что с помощью команды find выполняется только поиск " +"указанного текста в наборе записей ACI; при поиске записи ACI не оцениваются " +"по критерию применимости.\n" +" Например, при поиске по тексту memberof=ipausers будут найдены все " +"записи ACI, в которых memberof содержат ipausers. Но могут иметься другие " +"записи ACI, которые применяются к участникам этой группы опосредованно.\n" +" " + +msgid "A string searched in all relevant object attributes" +msgstr "" +"Строка, поиск которой выполняется во всех соответствующих атрибутах объекта" + +msgid "Primary key only" +msgstr "Только главный ключ" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"name\")" + +msgid "Number of entries returned" +msgstr "Количество возвращённых записей" + +msgid "True if not all results were returned" +msgstr "Значение True, если были возвращены не все результаты" + +msgid "Modify ACI." +msgstr "Изменить запись ACI." + +msgid "Rename an ACI." +msgstr "Переименовать запись ACI." + +msgid "New ACI name" +msgstr "Новое имя ACI" + +msgid "Display a single ACI given an ACI name." +msgstr "Показать отдельную запись ACI по указанному имени ACI." + +msgid "Location of the ACI" +msgstr "Расположение ACI" + +msgid "" "\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" "\n" "EXAMPLES:\n" "\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" +"Locations:\n" "\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" "\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" "\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" "\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" "\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" "\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" "\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" "\n" +"Maps:\n" "\n" -"The show command shows the raw 389-ds ACI.\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" "\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" "\n" -"Инструкции управления доступом к серверу каталогов (ACI)\n" +"Автомонтирование\n" "\n" -"ACI используются, чтобы разрешить или запретить доступ к информации. Текущая " -"версия модуля предназначена для предоставления, а не запрета доступа. \n" +"Сохраняет конфигурацию automount(8) для autofs(8) в IPA.\n" "\n" -"Команды aci позволяют предоставить разрешения, благодаря которым можно " -"обновлять существующие записи, а также добавлять или удалять новые. Задача " -"ACI, поставляемых вместе с IPA: предоставить набор низкоуровневых " -"разрешений, которые дают доступ к специальным группам. Такие группы " -"называются группами задач. Данные низкоуровневые разрешения можно сочетать " -"между собой, формируя роли, чтобы предоставить больший объём доступа. Эти " -"роли представляют собой ещё один тип групп: группы ролей.\n" +"Основой конфигурации автомонтирования является файл конфигурации auto." +"master.\n" +"Это также базовое расположение в IPA. Несколько конфигураций auto.master " +"могут храниться в отдельных расположениях. Расположение зависит от " +"реализации, расположением по умолчанию является расположение с именем " +"\"default\". Например, можно создать расположения для географических " +"областей, этажей, типов и так далее.\n" "\n" -"Например, если имеются группы задач, которые разрешают добавлять и изменять " -"данные пользователей, то можно создать роль администратора пользователей " -"(useradmin). Если назначить пользователям роль useradmin, им будет разрешено " -"выполнять операции, определённые группами задач.\n" +"В автомонтировании имеется три основных типа объектов: расположения, списки " +"соответствия и ключи.\n" "\n" -"Можно создавать ACI, которые будут предоставлять разрешения таким образом, " -"что пользователи группы A смогут записывать атрибуты для группы B.\n" +"Расположение определяет набор списков соответствия, привязанных в auto." +"master. Это позволяет хранить несколько конфигураций автомонтирования. " +"Расположение само по себе не представляет особого интереса, оно просто " +"является началом нового списка соответствия автомонтирования.\n" "\n" -"Параметр \"тип\" (type) — это список, который применяется ко всем записям " -"пользователей, записям групп или расположению узла. Он предназначен в " -"основном для предоставления прав доступа для добавления (создание новых " -"записей).\n" +"Грубо говоря, список соответствия является отдельным файлом автомонтирования " +"и обеспечивает хранение ключей.\n" "\n" -"Запись ACI состоит из трёх частей:\n" -"1. цель\n" -"2. разрешения\n" -"3. правила привязки\n" +"Ключ — это связанная со списком соответствия точка автомонтирования.\n" "\n" -"Цель — это набор правил, которые определяют, какие объекты LDAP являются " -"целевыми. Это может быть список атрибутов, область этого дерева LDAP или " -"фильтр LDAP.\n" +"Когда создаётся новое расположение, для него автоматически создаются два " +"списка соответствия: auto.master и auto.direct. Список соответствия auto." +"master — это корневой список соответствия для всех списков соответствия " +"автомонтирования расположения. Список соответствия auto.direct — это список " +"соответствия по умолчанию для прямых монтирований, он монтируется на /-.\n" "\n" -"Цели содержат:\n" -"- attrs: список атрибутов, которых касается цель\n" -"- type: тип объектов (пользователь, группа, узел, служба и так далее)\n" -"- memberof: участники группы\n" -"- targetgroup: предоставить доступ к изменению определённой группы. Эта " -"часть в основном разработана для предоставления пользователям разрешения на " -"добавление или удаление участников определённой группы.\n" -"- filter: действующий фильтр LDAP, используемый для сужения цели.\n" -"- subtree: используется для применения правила к целому набору объектов. " -"Например, чтобы разрешить добавление пользователей, следует предоставить " -"разрешение \"add\" для поддерева ldap://uid=*,cn=users,cn=accounts," -"dc=example,dc=com. Параметр subtree подходит для объектов, которые не " -"подпадают под действие параметра type.\n" -"\n" -"Разрешения определяют, какие действия разрешены для ACI, и могут быть одними " -"из следующих (или сочетать в себе несколько вариантов):\n" -"1. write - записать один или несколько атрибутов.\n" -"2. read - прочитать один или несколько атрибутов.\n" -"3. add - добавить в дерево новую запись.\n" -"4. delete - удалить существующую запись.\n" -"5. all - предоставляются все разрешения.\n" -"\n" -"Обратите внимание на разницу между атрибутами и записями. Разрешения " -"являются независимыми, поэтому возможность добавить пользователя не означает " -"возможность изменять запись добавленного пользователя.\n" -"\n" -"Правило привязки определяет, кому предоставляет разрешения ACI. LDAP-сервер " -"позволяет сделать это для любой действительной записи LDAP, но мы " -"рекомендуем использовать группы задач, чтобы можно было легко обеспечить " -"общий доступ к правам с помощью ролей.\n" -"\n" -"Более подробные сведения об управлении доступом:\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" +"Список соответствия автомонтирования может содержать ключ подмонтирования. " +"Этот ключ определяет расположение монтирования в списке соответствия, " +"который ссылается на другой список соответствия. Такой ключ можно добавить с " +"помощью команды automountmap-add-indirect --parentmap или вручную, с помощью " +"automountkey-add и установки info на значение \"-type=autofs :<имя списка " +"соответствия>\".\n" "\n" "ПРИМЕРЫ:\n" "\n" -"ПРИМЕЧАНИЕ: в текущей версии записи записи ACI добавляются через " -"подключаемый модуль разрешений. Следующие примеры показывают, как работают " -"различные параметры, но сейчас это выполняется через командную строку (см. " -"последний пример).\n" +"Расположения:\n" "\n" -" Добавить запись ACI, чтобы группа \"secretaries\" могла обновлять адрес " -"любого пользователя:\n" -" ipa group-add --desc=\"Офисные секретари\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Секретари записывают адреса\"\n" +" Создать новое именованное расположение, \"Moskva\":\n" +" ipa automountlocation-add moskva\n" "\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Секретари записывают адреса\"\n" +" Показать новое расположение:\n" +" ipa automountlocation-show moskva\n" "\n" -" Добавить запись ACI, которая разрешает участникам разрешения \"addusers\" " -"добавлять новых пользователей:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Добавление пользователей\"\n" +" Поиск доступных расположений:\n" +" ipa automountlocation-find\n" "\n" -" Добавить запись ACI, которая разрешает участникам группы \"editors\" " -"управлять записями участников группы \"admins\":\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Редакторы управляют администраторами\"\n" +" Удалить именованное расположение автомонтирования:\n" +" ipa automountlocation-del moskva\n" "\n" -" Добавить запись ACI, которая разрешает участникам группы \"admins\" " -"изменять название улицы и почтовый индекс участников группы \"editors\":\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"администраторы редактируют адрес " -"редакторов\"\n" +" Показать, как выглядели бы списки соответствия автомонтирования, если бы " +"находились в файловой системе:\n" +" ipa automountlocation-tofiles moskva\n" "\n" -" Добавить запись ACI, которая разрешает участникам группы \"admins\" " -"изменять название улицы и почтовый индекс тех, кто работает под руководством " -"начальника:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Редактировать адрес тех, кто работает под руководством " -"начальника\"\n" +" Импортировать существующую конфигурацию в расположение:\n" +" ipa automountlocation-import moskva /etc/auto.master\n" "\n" -" Добавить в IPA совершенно новый вид записи, который не предусмотрен ни " -"одним из параметров \"--type\", путём создания разрешения:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Добавление оранжевых записей\" " -"add_orange\n" +" Импорт не удастся выполнить, если будут найдены дублирующиеся записи. " +"Чтобы обеспечить непрерывное выполнение, при котором ошибки игнорируются, " +"используйте параметр --continue.\n" "\n" +"Списки соответствия:\n" "\n" -"Команда show показывает необработанную запись ACI 389-ds.\n" +" Создать новый список соответствия с именем \"auto.share\":\n" +" ipa automountmap-add moskva auto.share\n" "\n" -"ВАЖНО: при изменении атрибутов цели существующей записи ACI необходимо также " -"включить все существующие атрибуты. Когда выполняется aci-mod, targetattr " -"ЗАМЕНЯЕТ текущие атрибуты, а не добавляет к ним другие.\n" +" Показать новый список соответствия:\n" +" ipa automountmap-show moskva auto.share\n" +"\n" +" Найти списки соответствия в расположении moskva:\n" +" ipa automountmap-find moskva\n" +"\n" +" Создать непрямой список соответствия с auto.share в качестве точки " +"подмонтирования:\n" +" ipa automountmap-add-indirect moskva --parentmap=auto.share --mount=sub " +"auto.man\n" +"\n" +" Эта команда эквивалентна следующим командам:\n" +"\n" +" ipa automountmap-add-indirect moskva --mount=/man auto.man\n" +" ipa automountkey-add moskva auto.man --key=sub --info=\"-fstype=autofs " +"ldap:auto.share\"\n" +"\n" +" Удалить список соответствия auto.share:\n" +" ipa automountmap-del moskva auto.share\n" +"\n" +"Ключи:\n" +"\n" +" Создать новый ключ для списка соответствия auto.share в расположении " +"moskva. Это привяжет ранее созданный список соответствия к auto.master:\n" +" ipa automountkey-add moskva auto.master --key=/share --info=auto.share\n" +"\n" +" Создать новый ключ для списка соответствия auto.share, смонтированного " +"ресурса NFS для страниц man:\n" +" ipa automountkey-add moskva auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Найти все ключи для списка соответствия auto.share:\n" +" ipa automountkey-find moskva auto.share\n" +"\n" +" Найти все ключи прямого автомонтирования:\n" +" ipa automountkey-find moskva --key=/-\n" +"\n" +" Удалить ключ man из списка соответствия auto.share:\n" +" ipa automountkey-del moskva auto.share --key=man\n" + +msgid "Key" +msgstr "Ключ" + +msgid "Automount key name." +msgstr "Имя ключа автомонтирования" + +msgid "Mount information" +msgstr "Сведения монтирования" + +msgid "description" +msgstr "описание" + +msgid "Location" +msgstr "Расположение" + +msgid "Automount location name." +msgstr "Имя расположения автомонтирования" + +msgid "Map" +msgstr "Список соответствия" + +msgid "Automount map name." +msgstr "Имя списка соответствия автомонтирования" + +msgid "Description" +msgstr "Описание" + +msgid "Create a new automount key." +msgstr "Создать новый ключ автомонтирования." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Установить атрибут для пары имя/значение. Формат: атрибут=значение.\n" +"Если атрибут многозначный, команда заменяет уже присутствующие значения." + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Добавить пару атрибут/значение. Формат: атрибут=значение. Атрибут\n" +"должен быть частью схемы." + +msgid "Delete an automount key." +msgstr "Удалить ключ автомонтирования." + +msgid "Continuous mode: Don't stop on errors." +msgstr "Режим непрерывной работы: не останавливаться в случае ошибок" + +msgid "List of deletions that failed" +msgstr "Список удалений, которые не удалось выполнить" + +msgid "Search for an automount key." +msgstr "Поиск ключа автомонтирования." + +msgid "Time Limit" +msgstr "Ограничение по времени" + +msgid "Time limit of search in seconds" +msgstr "Ограничение времени поиска в секундах" + +msgid "Size Limit" +msgstr "Ограничение по размеру" + +msgid "Maximum number of entries returned" +msgstr "Максимальное количество возвращённых записей" + +msgid "Modify an automount key." +msgstr "Изменить ключ автомонтирования." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Удалить пару атрибут/значение. Параметр будет использован последним, после " +"всех установок и добавлений." + +msgid "Rights" +msgstr "Права" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Показать права доступа этой записи (требуется --all). Подробные сведения " +"приводятся на странице справочника (man) по IPA." + +msgid "New mount information" +msgstr "Сведения о новом монтировании" + +msgid "Rename" +msgstr "Переименовать" + +msgid "Rename the automount key object" +msgstr "Переименовать объект ключа автомонтирования" + +msgid "Display an automount key." +msgstr "Показать ключ автомонтирования." + +msgid "Create a new automount location." +msgstr "Создать новое расположение автомонтирования." + +msgid "Delete an automount location." +msgstr "Удалить расположение автомонтирования." + +msgid "Search for an automount location." +msgstr "Поиск расположения автомонтирования." + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"location\")" + +msgid "Display an automount location." +msgstr "Показать расположение автомонтирования." + +msgid "Generate automount files for a specific location." +msgstr "Создать файлы автомонтирования для определённого расположения." + +msgid "Create a new automount map." +msgstr "Создать новый список соответствия автомонтирования." + +msgid "Create a new indirect mount point." +msgstr "Создать новую непрямую точку монтирования." + +msgid "Mount point" +msgstr "Точка монтирования" + +msgid "Parent map" +msgstr "Родительский список соответствия" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" +"Имя родительского списка соответствия автомонтирования (по умолчанию: auto." +"master)" + +msgid "Delete an automount map." +msgstr "Удалить список соответствия автомонтирования." + +msgid "Search for an automount map." +msgstr "Поиск списка соответствия автомонтирования." + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"map\")" + +msgid "Modify an automount map." +msgstr "Изменить список соответствия автомонтирования." + +msgid "Display an automount map." +msgstr "Показать список соответствия автомонтирования." msgid "" "\n" -"Domain Name System (DNS)\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" msgstr "" "\n" -"Система доменных имён (DNS)\n" +"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " +"удалённого вызова процедур \n" +"\n" +"Чтобы запустить этот код на легком сервере (lite-server), выполните " +"следующие команды:\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"где содержимое файла batch_request.json соответствует следующему примеру\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " +"уровне:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далее находится вложенный ответ для каждого метода команды IPA, " +"отправленного в запросе\n" + +msgid "Nested Methods to execute" +msgstr "Вложенные методы для выполнения" msgid "" "\n" -"Domain Name System (DNS)\n" +"Server configuration\n" "\n" -"Manage DNS zone and resource records.\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" "\n" +"NOTES:\n" "\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" "\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " +"Some attributes are read-only, provided only for information purposes. " "These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" +"include:\n" "\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" "\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" msgstr "" "\n" -"Система доменных имён (DNS)\n" +"Конфигурация сервера\n" "\n" -"Управление записями зон и ресурсов DNS.\n" +"Управление значениями по умолчанию, которые используются IPA, и некоторыми " +"параметрами их настройки.\n" "\n" +"ПРИМЕЧАНИЯ:\n" "\n" -"ИСПОЛЬЗОВАНИЕ СТРУКТУРИРОВАННЫХ ПАРАМЕТРОВ ДЛЯ ОТДЕЛЬНЫХ ТИПОВ\n" +"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " +"будет реплицировано. В текущей версии оно не используется для " +"заблаговременного уведомления пользователей об окончании срока действия " +"пароля.\n" "\n" -"Существует много структурированных типов записей ресурсов DNS, для которых " -"данные DNS, хранящиеся на сервере LDAP, являются не просто скалярным " -"значением, например IP-адрес или имя домена, а структурой данных, которая " -"часто может быть сложной. Примером может быть запись LOC [RFC1876], которая " -"состоит из многих обязательных и необязательных частей (градусов, минут, " -"секунд широты и долготы, высоты и погрешности).\n" +"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " +"для чтения. Среди них:\n" "\n" -"При работе с такими записями DNS может быть сложно не допустить ошибок и " -"ввести корректное значение. Модуль DNS предоставляет в ваше распоряжение " -"абстракцию над этими необработанными записями и позволяет управлять каждым " -"из типов записей ресурсов с помощью определённых параметров. Для каждого из " -"поддерживаемых типов записей ресурсов в модуле DNS предусмотрен стандартный " -"параметр для работы с необработанными записями с помощью формата ---" -"rec, например --mx-rec, и специальные параметры для каждой из частей " -"структуры записи ресурса с помощью формата ---, например --" -"mx-preference и --mx-exchanger.\n" -"\n" -"При добавлении записи можно воспользоваться параметрами, специально " -"предназначенными для записей ресурсов, или стандартным параметром для " -"необработанного значения (сочетать эти варианты в одном действии по " -"добавлению нельзя). При внесении изменений в существующую запись можно " -"воспользоваться для изменения одной части записи DNS новыми специальными " -"параметрами записей ресурсов, причём для определения изменённого значения " -"будет использован стандартный вариант необработанного значения. В " -"приведенном ниже примере показано изменение приоритета записи MX с 0 на 1 в " -"записи без внесения изменений в обменник:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"Основа субъекта сертификата: настроенная основа субъекта сертификата, " +"например O=EXAMPLE.COM. Настраивается только во время установки.\n" +"Возможности подключаемого модуля паролей: в текущей версии он определяет " +"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " +"условия).\n" "\n" +"При установке приоритета сопоставления пользователей SELinux, возможно, " +"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " +"оболочкой.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Добавить новую зону:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" +" Показать базовую конфигурацию сервера:\n" +" ipa config-show\n" "\n" -" Добавить общесистемные права доступа, которыми можно воспользоваться для " -"делегирования привилегий для отдельных зон:\n" -" ipa dnszone-add-permission example.com\n" +" Показать все параметры конфигурации:\n" +" ipa config-show --all\n" "\n" -" Изменить зону, чтобы разрешить динамическое обновление для собственных " -"записей узлов в области (realm) EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +" Изменить максимальную длину имени пользователя на 99 символов:\n" +" ipa config-mod --maxusername=99\n" "\n" -" Эта команда эквивалентна следующим командам:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" +" Увеличить установленные по умолчанию ограничения времени и размера поиска " +"IPA-сервера:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" "\n" -" Изменить зону, чтобы разрешить перенос зоны только для локальной сети:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +" Указать почтовый домен пользователей по умолчанию:\n" +" ipa config-mod --emaildomain=example.com\n" "\n" -" Добавить новую обратную зону, указанную с помощью сетевого IP-адреса:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" +" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " +"migrate-ds\":\n" +" ipa config-mod --enable-migration=TRUE\n" "\n" -" Добавить другой сервер имён для example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +" Определить порядок списка пользователей SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "Maximum username length" +msgstr "Максимальная длина имени пользователя" + +msgid "Home directory base" +msgstr "Основа домашних каталогов" + +msgid "Default location of home directories" +msgstr "Расположение домашних каталогов по умолчанию" + +msgid "Default shell" +msgstr "Оболочка по умолчанию" + +msgid "Default shell for new users" +msgstr "Оболочка по умолчанию для новых пользователей" + +msgid "Default users group" +msgstr "Группа пользователей по умолчанию" + +msgid "Default group for new users" +msgstr "Группа по умолчанию для новых пользователей" + +msgid "Default e-mail domain" +msgstr "Почтовый домен по умолчанию" + +msgid "Search time limit" +msgstr "Ограничение времени поиска" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" +"Максимальное количество времени (в секундах) для поиска (> 0 или -1 означает " +"отсутствие ограничения)" + +msgid "Search size limit" +msgstr "Ограничение размера поиска" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" +"Максимальное количество записей результатов поиска (-1 означает отсутствие " +"ограничения)" + +msgid "User search fields" +msgstr "Поля поиска пользователей" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" +"Разделённый запятыми список полей, по которым следует выполнять поиск при " +"поиске пользователей" + +msgid "Group search fields" +msgstr "Поля поиска групп" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Разделённый запятыми список полей, по которым следует выполнять поиск при " +"поиске групп" + +msgid "Enable migration mode" +msgstr "Включить режим миграции" + +msgid "Certificate Subject base" +msgstr "Основа субъекта сертификата" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "Основа для субъектов сертификатов (OU=Test,O=Example)" + +msgid "Default group objectclasses" +msgstr "Классы объектов для групп по умолчанию" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Классы объектов для групп по умолчанию (через запятую)" + +msgid "Default user objectclasses" +msgstr "Классы объектов для пользователей по умолчанию" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "Классы объектов для пользователей по умолчанию (через запятую)" + +msgid "Password Expiration Notification (days)" +msgstr "Уведомление об окончании действия пароля (в днях)" + +msgid "Number of days's notice of impending password expiration" +msgstr "Уведомление о количестве дней, оставшихся до окончания действия пароля" + +msgid "Password plugin features" +msgstr "Возможности подключаемого модуля паролей" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Дополнительные хеши для создания в подключаемом модуле паролей" + +msgid "SELinux user map order" +msgstr "Порядок применения списка пользователей SELinux" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" +"В порядке увеличения приоритета пользователей SELinux, с разделителем $" + +msgid "Default SELinux user" +msgstr "Пользователь SELinux по умолчанию" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" +"Пользователь SELinux по умолчанию, когда в правиле списка SELinux не найдено " +"соответствие" + +msgid "Default PAC types" +msgstr "Типы PAC по умолчанию" + +msgid "Default types of PAC supported for services" +msgstr "Типы PAC по умолчанию, которые поддерживаются для служб" + +msgid "Default user authentication types" +msgstr "Стандартные типы аутентификации пользователей" + +msgid "Default types of supported user authentication" +msgstr "Стандартные типы поддерживаемой аутентификации пользователей" + +msgid "Modify configuration options." +msgstr "Изменить параметры конфигурации." + +msgid "Show the current configuration." +msgstr "Показать текущую конфигурацию." + +msgid "" "\n" -" Добавить почтовый сервер для example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"Group to Group Delegation\n" "\n" -" Добавить другую запись с помощью специальных параметров записи MX:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" "\n" -" Добавить другую запись с помощью интерактивного режима (в который программа " -"переходит в ответ на команды dnsrecord-add, dnsrecord-mod или dnsrecord-del " -"без параметров):\n" -" ipa dnsrecord-add example.com @\n" -" Выберите тип записи ресурса DNS, который следует добавить\n" -" Наиболее распространённые типы для этого типа зон: NS, MX, LOC\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" "\n" -" Тип записи ресурса DNS: MX\n" -" Приоритет MX: 30\n" -" Обменник MX: mail3\n" -" Имя записи: example.com\n" -" Запись MX: 10 mail1, 20 mail2, 30 mail3\n" -" Запись NS: nameserver.example.com., nameserver2.example.com.\n" +"EXAMPLES:\n" "\n" -" Удалить добавленный ранее сервер имён из example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" -" Добавить запись LOC для example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" -" Добавить новую запись A для www.example.com. Также создать обратную запись " -"в соответствующей обратной зоне. В этом случае запись PTR \"2\", которая " -"указывает на www.example.com, будет создана в зоне 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" "\n" -" Добавить новую запись PTR для www.example.com:\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" "\n" -" Добавить новые записи SRV для LDAP-серверов. Три четверти запросов должны " -"отправляться на fast.example.com, одна четверть — на slow.example.com. Если " -"обе службы недоступны, переключиться на backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" +"Межгрупповое делегирование\n" "\n" -" Для облегчения внесения изменений можно воспользоваться интерактивным " -"режимом:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" Возможность внесения изменений в определённую запись не предусмотрена.\n" -" Текущее содержание записи DNS:\n" +"С помощью разрешений самообслуживания можно очень точно делегировать " +"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " +"разрешениям разрешение на выполнение конкретных задач, таких как добавление " +"пользователя, изменение группы и так далее.\n" "\n" -" Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" +"Межгрупповое делегирование предоставляет участникам одной группы возможность " +"обновлять набор атрибутов участников другой группы. \n" "\n" -" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" -"\"):\n" -" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" -"\"): y\n" -" Приоритет SRV [0]: (сохранить значение по умолчанию)\n" -" Вес SRV [1]: 2 (изменённое значение)\n" -" Порт SRV [389]: (сохранить значение по умолчанию)\n" -" Цель SRV [slow.example.com]: (сохранить значение по умолчанию)\n" -" Пропущена 1 запись SRV. Одновременно можно изменять только одно значение " -"на тип записи DNS.\n" -" Имя записи: _ldap._tcp\n" -" Запись SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" +"ПРИМЕРЫ:\n" "\n" -" После внесения этих изменений три пятых запросов должны направляться на\n" -" fast.example.com, а две пятых — на slow.example.com.\n" +" Добавить правило делегирования, чтобы разрешить руководителям редактировать " +"адреса сотрудников:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees\" street\"\n" "\n" -" Пример интерактивного режима для команды dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" Не указан параметр удаления определённой записи.\n" -" Удалить все? Да/Нет (по умолчанию \"Нет\"): (не удалять все записи)\n" -" Текущее содержание записи DNS:\n" +"В список атрибутов необходимо включить все атрибуты, в том числе уже " +"существующие. Добавить postalCode в список:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees\" street\"\n" "\n" -" Запись A: 1.2.3.4, 11.22.33.44\n" +" Показать обновлённое правило:\n" +" ipa delegation-show \"managers edit employees\" street\"\n" "\n" -" Удалить запись A '1.2.3.4'? Да/Нет (по умолчанию \"Нет\"):\n" -" Удалить запись A '11.22.33.44'? Да/Нет (по умолчанию \"Нет\"): y\n" -" Имя записи: www\n" -" Запись A: 1.2.3.4 (запись A 11.22.33.44 удалена)\n" -"\n" -" Показать зону example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Найти зону со словом \"example\" в имени домена:\n" -" ipa dnszone-find example\n" -"\n" -" Найти записи для ресурсов с \"www\" в имени в зоне example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Найти записи A со значением 10.10.0.1 в зоне example.com:\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Показать записи для ресурса www в зоне example.com:\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Делегировать зону sub.example другому серверу имён:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Если настроены глобальные перенаправители, все запросы на sub.example.com " -"будут идти через глобальный перенаправитель. Чтобы изменить это поведение " -"только для зоны example.com и перенаправлять запрос прямо на ns.sub.example." -"com., можно отключить глобальное перенаправление для отдельной зоны:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Перенаправлять все запросы для зоны external.com на другой сервер имён с " -"помощью политики \"first\" (запросы будет отправляться на выбранный " -"перенаправитель; если он не отвечает, будут использоваться глобальные " -"сопоставители):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Удалить зону example.com вместе со всеми записями ресурсов:\n" -" ipa dnszone-del example.com\n" -"\n" -" Определить адрес по имени узла, чтобы узнать, существует ли он (будет " -"добавлен стандартный домен IPA, если он не включён):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ DNS\n" -"\n" -"Конфигурация DNS, которая передаётся сценарию командной строки для " -"установки, хранится в локальном файле конфигурации на каждом IPA-сервере, " -"где настроена служба DNS. Эти локальные настройки могут быть переопределены " -"с помощью общей конфигурации, которая хранится на LDAP-сервере:\n" -"\n" -" Показать глобальную конфигурацию DNS:\n" -" ipa dnsconfig-show\n" -"\n" -" Изменить глобальную конфигурацию DNS и установить список глобальных " -"перенаправителей:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +" Удалить правило:\n" +" ipa delegation-del \"managers edit employees\" street\"\n" + +msgid "Delegation name" +msgstr "Имя делегирования" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" +"Разрешения, которые следует предоставить (read, write). По умолчанию " +"предоставляется разрешение \"write\" (запись)." + +msgid "Attributes to which the delegation applies" +msgstr "Атрибуты, к которым применяется делегирование" + +msgid "Member user group" +msgstr "Группа пользователей — участник" + +msgid "User group to apply delegation to" +msgstr "Группа пользователей, к которой следует применить делегирование" + +msgid "Add a new delegation." +msgstr "Добавить новое делегирование." + +msgid "Delete a delegation." +msgstr "Удалить делегирование." + +msgid "Search for delegations." +msgstr "Поиск делегирований." + +msgid "Modify a delegation." +msgstr "Изменить делегирование." + +msgid "Display information about a delegation." +msgstr "Показать сведения о делегировании." msgid "" "\n" @@ -5147,1297 +2871,821 @@ msgstr "" " ipa dnsconfig-mod --forwarder=203.0.113.113\n" "\n" -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"РЕГИСТРАЦИЯ:\n" -"\n" -"Существует три сценария регистрации нового клиента:\n" -"\n" -"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " -"существовать или отсутствовать. Полноправный администратор выполняет роль " -"hostadmin или является участником группы admins.\n" -"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " -"должен существовать. Администратор с ограниченными правами выполняет роль с " -"привилегией Host Enrollment.\n" -"3. Узел создан с одноразовым паролем.\n" +msgid "Global forwarders" +msgstr "Глобальные перенаправители" msgid "" -"\n" -"EXAMPLES:\n" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" msgstr "" -"\n" -"ПРИМЕРЫ:\n" +"Глобальные перенаправители. Для каждого перенаправителя можно указать " +"отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"." + +msgid "Forward policy" +msgstr "Политика перенаправления" msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." msgstr "" -"\n" -"Права\n" -"\n" -"Управление правами для клиентских компьютеров\n" -"\n" -"Правами можно управлять либо путём регистрации на сервере прав с именем " -"пользователя и паролем, либо путём импорта сертификатов прав вручную. " -"Сертификат прав содержит сведения о продукте, на который выдано разрешение, " -"количестве использований прав и сроке действия.\n" -"\n" -"Сервер прав управляет количеством доступных клиентских прав.\n" -"Чтобы отметить эти права как использованные IPA-сервером, следует указать " -"количество, и они будут отмечены, как использованные на сервере прав.\n" -"\n" -" Зарегистрироваться на сервере прав:\n" -" ipa entitle-register consumer\n" -"\n" -" Импортировать сертификат прав:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Показать текущие права:\n" -" ipa entitle-status\n" -"\n" -" Получить сведения о сертификатах прав:\n" -" ipa entitle-get\n" -"\n" -" Использовать некоторые права с сервера прав:\n" -" ipa entitle-consume 50\n" -"\n" -"Регистрационный идентификатор является уникальным идентификатором (UUID). " -"Этот идентификатор будет ИМПОРТИРОВАН, если использована команда entitle-" -"import.\n" -"\n" -"Для применения изменений к /etc/rhsm/rhsm.conf необходимо перезапустить " -"службу httpd.\n" +"Глобальная политика перенаправления. Чтобы отключить все настроенные " +"глобальные перенаправители, установите значение \"none\"." + +msgid "Allow PTR sync" +msgstr "Разрешить PTR-синхронизацию" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "Разрешить синхронизацию прямых (A, AAAA) и обратных (PTR) записей" + +msgid "Zone refresh interval" +msgstr "Интервал между обновлениями данных зоны" + +msgid "Zone name" +msgstr "Имя зоны" + +msgid "Zone name (FQDN)" +msgstr "Имя зоны (FQDN)" + +msgid "Reverse zone IP network" +msgstr "IP-сеть обратной зоны" + +msgid "IP network to create reverse zone name from" +msgstr "IP-сеть для создания имени обратной зоны" + +msgid "Active zone" +msgstr "Активная зона" + +msgid "Is zone active?" +msgstr "Зона активна?" + +msgid "Zone forwarders" +msgstr "Перенаправители зон" msgid "" -"\n" -"Get information about installed IPA servers.\n" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" msgstr "" -"\n" -"Получить сведения об установленных IPA-серверах.\n" +"Перенаправители для отдельных зон. Для каждого перенаправителя можно указать " +"отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." msgstr "" -"\n" -"Получить состояние ролей (DNS-сервер, CA и так далее), предоставленное " -"главными IPA-серверами.\n" +"Условная политика перенаправления для отдельных зон. Чтобы отключить для " +"этой зоны перенаправление на глобальный перенаправитель, установите значение " +"\"none\". В этом случае условные перенаправители зон не будут приниматься во " +"внимание." + +msgid "Record name" +msgstr "Имя записи" + +msgid "Time to live" +msgstr "Срок жизни" + +msgid "Records" +msgstr "Записи" + +msgid "Record type" +msgstr "Тип записи" + +msgid "Record data" +msgstr "Данные записи" + +msgid "A record" +msgstr "Запись" + +msgid "Raw A records" +msgstr "Необработанные записи A" + +msgid "A IP Address" +msgstr "IP-адрес" + +msgid "IP Address" +msgstr "IP-адрес" + +msgid "A Create reverse" +msgstr "Создать обратную запись A" + +msgid "Create reverse record for this IP Address" +msgstr "Создать обратную запись для этого IP-адреса" + +msgid "AAAA record" +msgstr "Запись AAAA" + +msgid "Raw AAAA records" +msgstr "Необработанные записи AAAA" + +msgid "AAAA IP Address" +msgstr "IP-адрес AAAA" + +msgid "AAAA Create reverse" +msgstr "Создать обратную запись AAAA" + +msgid "A6 record" +msgstr "Запись A6" + +msgid "Raw A6 records" +msgstr "Необработанные записи A6" + +msgid "A6 Record data" +msgstr "Данные записи A6" + +msgid "AFSDB record" +msgstr "Запись AFSDB" + +msgid "Raw AFSDB records" +msgstr "Необработанные записи AFSDB" + +msgid "AFSDB Subtype" +msgstr "Подтип AFSDB" + +msgid "Subtype" +msgstr "Подтип" + +msgid "AFSDB Hostname" +msgstr "Имя узла AFSDB" + +msgid "Hostname" +msgstr "Имя узла" + +msgid "APL record" +msgstr "Запись APL" + +msgid "Raw APL records" +msgstr "Необработанные записи APL" + +msgid "CERT record" +msgstr "Запись CERT" + +msgid "Raw CERT records" +msgstr "Необработанные записи CERT" + +msgid "CERT Certificate Type" +msgstr "Тип сертификата CERT" + +msgid "Certificate Type" +msgstr "Тип сертификата" + +msgid "CERT Key Tag" +msgstr "Тег ключа CERT" + +msgid "Key Tag" +msgstr "Тег ключа" + +msgid "CERT Algorithm" +msgstr "Алгоритм CERT" + +msgid "Algorithm" +msgstr "Алгоритм" + +msgid "CERT Certificate/CRL" +msgstr "Сертификат или список отзыва сертификатов (CRL) CERT" + +msgid "Certificate/CRL" +msgstr "Сертификат или список отзыва сертификатов (CRL)" + +msgid "CNAME record" +msgstr "Запись CNAME" + +msgid "Raw CNAME records" +msgstr "Необработанные записи CNAME" + +msgid "CNAME Hostname" +msgstr "Имя узла CNAME" + +msgid "A hostname which this alias hostname points to" +msgstr "Имя узла, на который указывает этот псевдоним узла" + +msgid "DHCID record" +msgstr "Запись DHCID" + +msgid "Raw DHCID records" +msgstr "Необработанные записи DHCID" + +msgid "DLV record" +msgstr "Запись DLV" + +msgid "Raw DLV records" +msgstr "Raw DLV records" + +msgid "DLV Key Tag" +msgstr "Тег ключа DLV" + +msgid "DLV Algorithm" +msgstr "Алгоритм DLV" + +msgid "DLV Digest Type" +msgstr "Тип дайджеста DLV" + +msgid "Digest Type" +msgstr "Тип дайджеста" + +msgid "DLV Digest" +msgstr "Дайджест DLV" + +msgid "Digest" +msgstr "Дайджест" + +msgid "DNAME record" +msgstr "Запись DNAME" + +msgid "Raw DNAME records" +msgstr "Необработанные записи DNAME" + +msgid "DNAME Target" +msgstr "Цель DNAME" + +msgid "Target" +msgstr "Цель" + +msgid "DNSKEY record" +msgstr "Запись DNSKEY" + +msgid "Raw DNSKEY records" +msgstr "Необработанные записи DNSKEY" + +msgid "DS record" +msgstr "Запись DS" + +msgid "Raw DS records" +msgstr "Необработанные записи DS" + +msgid "DS Key Tag" +msgstr "Тег ключа DS" + +msgid "DS Algorithm" +msgstr "Алгоритм DS" + +msgid "DS Digest Type" +msgstr "Тип дайджеста DS" + +msgid "DS Digest" +msgstr "Дайджест DS" + +msgid "HIP record" +msgstr "Запись HIP" + +msgid "Raw HIP records" +msgstr "Необработанные записи HIP" + +msgid "IPSECKEY record" +msgstr "Запись IPSECKEY" + +msgid "Raw IPSECKEY records" +msgstr "Необработанные записи IPSECKEY" + +msgid "KEY record" +msgstr "Запись KEY" + +msgid "Raw KEY records" +msgstr "Необработанные записи KEY" + +msgid "KX record" +msgstr "Запись KX" + +msgid "Raw KX records" +msgstr "Необработанные записи KX" + +msgid "KX Preference" +msgstr "Приоритет KX" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" +"Приоритет, указанный для этого обменника. Чем ниже значение, тем выше " +"приоритет." + +msgid "KX Exchanger" +msgstr "Обменник KX" + +msgid "A host willing to act as a key exchanger" +msgstr "Узел, который может работать как обменник ключей" + +msgid "LOC record" +msgstr "Запись LOC" + +msgid "Raw LOC records" +msgstr "Необработанные записи LOC" + +msgid "LOC Degrees Latitude" +msgstr "Градусы широты LOC" + +msgid "Degrees Latitude" +msgstr "Градусы широты" + +msgid "LOC Minutes Latitude" +msgstr "Минуты широты LOC" + +msgid "Minutes Latitude" +msgstr "Минуты широты" + +msgid "LOC Seconds Latitude" +msgstr "Секунды широты LOC" + +msgid "Seconds Latitude" +msgstr "Секунды широты" + +msgid "LOC Direction Latitude" +msgstr "Направление широты LOC" + +msgid "Direction Latitude" +msgstr "Направление широты" + +msgid "LOC Degrees Longitude" +msgstr "Градусы долготы LOC" + +msgid "Degrees Longitude" +msgstr "Градусы долготы" + +msgid "LOC Minutes Longitude" +msgstr "Минуты долготы LOC" + +msgid "Minutes Longitude" +msgstr "Минуты долготы" + +msgid "LOC Seconds Longitude" +msgstr "Секунды долготы LOC" + +msgid "Seconds Longitude" +msgstr "Секунды долготы" + +msgid "LOC Direction Longitude" +msgstr "Направление долготы LOC" + +msgid "Direction Longitude" +msgstr "Направление долготы" + +msgid "LOC Altitude" +msgstr "Высота над уровнем моря LOC" + +msgid "Altitude" +msgstr "Высота над уровнем моря" + +msgid "LOC Size" +msgstr "Размер LOC" + +msgid "Size" +msgstr "Размер" + +msgid "LOC Horizontal Precision" +msgstr "Горизонтальная точность LOC" + +msgid "Horizontal Precision" +msgstr "Горизонтальная точность" + +msgid "LOC Vertical Precision" +msgstr "Вертикальная точность LOC" + +msgid "Vertical Precision" +msgstr "Вертикальная точность" + +msgid "MX record" +msgstr "Запись MX" + +msgid "Raw MX records" +msgstr "Необработанные записи MX" + +msgid "MX Preference" +msgstr "Приоритет MX" + +msgid "MX Exchanger" +msgstr "Обменник MX" + +msgid "A host willing to act as a mail exchanger" +msgstr "Узел, который может работать как почтовый обменник" + +msgid "NAPTR record" +msgstr "Запись NAPTR" + +msgid "Raw NAPTR records" +msgstr "Необработанные записи NAPTR" + +msgid "NAPTR Order" +msgstr "Порядок NAPTR" + +msgid "Order" +msgstr "Порядок" + +msgid "NAPTR Preference" +msgstr "Приоритет NAPTR" + +msgid "Preference" +msgstr "Приоритет" + +msgid "NAPTR Flags" +msgstr "Флаги NAPTR" + +msgid "Flags" +msgstr "Флаги" + +msgid "NAPTR Service" +msgstr "Служба NAPTR" + +msgid "Service" +msgstr "Служба" + +msgid "NAPTR Regular Expression" +msgstr "Регулярное выражение NAPTR" + +msgid "Regular Expression" +msgstr "Регулярное выражение" + +msgid "NAPTR Replacement" +msgstr "Замена NAPTR" + +msgid "Replacement" +msgstr "Замена" + +msgid "NS record" +msgstr "Запись NS" + +msgid "Raw NS records" +msgstr "Необработанные записи NS" + +msgid "NS Hostname" +msgstr "Имя узла NS" + +msgid "NSEC record" +msgstr "Запись NSEC" + +msgid "Raw NSEC records" +msgstr "Необработанные записи NSEC" + +msgid "NSEC3 record" +msgstr "Запись NSEC3" + +msgid "Raw NSEC3 records" +msgstr "Необработанные записи NSEC3" + +msgid "PTR record" +msgstr "Запись PTR" + +msgid "Raw PTR records" +msgstr "Необработанные записи PTR" + +msgid "PTR Hostname" +msgstr "Имя узла PTR" + +msgid "The hostname this reverse record points to" +msgstr "Имя узла, на которое указывает эта обратная запись" + +msgid "RRSIG record" +msgstr "Запись RRSIG" + +msgid "Raw RRSIG records" +msgstr "Необработанные записи RRSIG" + +msgid "RP record" +msgstr "Запись RP" + +msgid "Raw RP records" +msgstr "Необработанные записи RP" + +msgid "SIG record" +msgstr "Запись SIG" + +msgid "Raw SIG records" +msgstr "Необработанные записи SIG" + +msgid "SPF record" +msgstr "Запись SPF" + +msgid "Raw SPF records" +msgstr "Необработанные записи SPF" + +msgid "SRV record" +msgstr "Запись SRV" + +msgid "Raw SRV records" +msgstr "Необработанные записи SRV" + +msgid "SRV Priority" +msgstr "Приоритет SRV" + +msgid "Priority" +msgstr "Приоритет" + +msgid "SRV Weight" +msgstr "Вес SRV" + +msgid "Weight" +msgstr "Вес" + +msgid "SRV Port" +msgstr "Порт SRV" + +msgid "Port" +msgstr "Порт" + +msgid "SRV Target" +msgstr "Цель SRV" msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" msgstr "" -"\n" -"Межгрупповое делегирование\n" -"\n" -"С помощью разрешений самообслуживания можно очень точно делегировать " -"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " -"разрешениям разрешение на выполнение конкретных задач, таких как добавление " -"пользователя, изменение группы и так далее.\n" -"\n" -"Межгрупповое делегирование предоставляет участникам одной группы возможность " -"обновлять набор атрибутов участников другой группы. \n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить правило делегирования, чтобы разрешить руководителям редактировать " -"адреса сотрудников:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees\" street\"\n" -"\n" -"В список атрибутов необходимо включить все атрибуты, в том числе уже " -"существующие. Добавить postalCode в список:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees\" street\"\n" -"\n" -" Показать обновлённое правило:\n" -" ipa delegation-show \"managers edit employees\" street\"\n" -"\n" -" Удалить правило:\n" -" ipa delegation-del \"managers edit employees\" street\"\n" +"Имя домена целевого узла или \".\", если служба явно недоступна на этом " +"домене" + +msgid "SSHFP record" +msgstr "Запись SSHFP" + +msgid "Raw SSHFP records" +msgstr "Необработанные записи SSHFP" + +msgid "SSHFP Algorithm" +msgstr "Алгоритм SSHFP" + +msgid "SSHFP Fingerprint Type" +msgstr "Тип отпечатка SSHFP" + +msgid "Fingerprint Type" +msgstr "Тип отпечатка" + +msgid "SSHFP Fingerprint" +msgstr "Отпечаток SSHFP" + +msgid "Fingerprint" +msgstr "Отпечаток" + +msgid "TA record" +msgstr "Запись TA" + +msgid "Raw TA records" +msgstr "Необработанные записи TA" + +msgid "TLSA record" +msgstr "Запись TLSA" + +msgid "Raw TLSA records" +msgstr "Необработанные записи TLSA" + +msgid "TLSA Certificate Usage" +msgstr "Использование сертификата TLSA" + +msgid "Certificate Usage" +msgstr "Использование сертификата" + +msgid "TLSA Selector" +msgstr "Селектор TLSA" + +msgid "Selector" +msgstr "Селектор" + +msgid "TLSA Matching Type" +msgstr "Тип соответствия TLSA" + +msgid "Matching Type" +msgstr "Тип соответствия" + +msgid "TLSA Certificate Association Data" +msgstr "Данные сопоставления сертификата TLSA" + +msgid "Certificate Association Data" +msgstr "Данные сопоставления сертификата " + +msgid "TKEY record" +msgstr "Запись TKEY" + +msgid "Raw TKEY records" +msgstr "Необработанные записи TKEY" + +msgid "TSIG record" +msgstr "Запись TSIG" + +msgid "Raw TSIG records" +msgstr "Необработанные записи TSIG" + +msgid "TXT record" +msgstr "Запись TXT" + +msgid "Raw TXT records" +msgstr "Необработанные записи TXT" + +msgid "TXT Text Data" +msgstr "Текстовые данные TXT" + +msgid "Text Data" +msgstr "Текстовые данные" + +msgid "Authoritative nameserver" +msgstr "Полномочный сервер имён" + +msgid "Authoritative nameserver domain name" +msgstr "Имя домена полномочного сервера имён" + +msgid "Administrator e-mail address" +msgstr "Адрес электронной почты администратора" + +msgid "SOA serial" +msgstr "Номер SOA" + +msgid "SOA record serial number" +msgstr "Серийный номер записи SOA" + +msgid "SOA refresh" +msgstr "Обновление SOA" + +msgid "SOA record refresh time" +msgstr "Время обновления записи SOA" + +msgid "SOA retry" +msgstr "Повторный запрос SOA" + +msgid "SOA record retry time" +msgstr "Интервал между повторными запросами записи SOA" + +msgid "SOA expire" +msgstr "Окончание действия SOA" + +msgid "SOA record expire time" +msgstr "Срок окончания действия записи SOA" + +msgid "SOA minimum" +msgstr "Минимальный срок жизни SOA" + +msgid "How long should negative responses be cached" +msgstr "Как долго следует кэшировать отрицательные ответы" + +msgid "Time to live for records at zone apex" +msgstr "Срок жизни записей в начале зоны" + +msgid "BIND update policy" +msgstr "Политика обновления BIND" + +msgid "Dynamic update" +msgstr "Динамическое обновление" + +msgid "Allow dynamic updates." +msgstr "Разрешить динамические обновления" + +msgid "Allow query" +msgstr "Разрешить запрос" msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" msgstr "" -"\n" -"Межгрупповое делегирование\n" -"\n" -"С помощью разрешений самообслуживания можно очень точно делегировать " -"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " -"разрешениям разрешение на выполнение конкретных задач, таких как добавление " -"пользователя, изменение группы и так далее.\n" -"\n" -"Межгрупповое делегирование предоставляет участникам одной группы возможность " -"обновлять набор атрибутов участников другой группы. \n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить правило делегирования, чтобы разрешить руководителям редактировать " -"адреса сотрудников:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees\" street\"\n" -"\n" -"В список атрибутов необходимо включить все атрибуты, в том числе уже " -"существующие. Добавить postalCode в список:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees\" street\"\n" -"\n" -" Показать обновлённое правило:\n" -" ipa delegation-show \"managers edit employees\" street\"\n" -"\n" -" Удалить правило:\n" -" ipa delegation-del \"managers edit employees\" street\"\n" +"Разделённый точками с запятой список IP-адресов или сетей, которым разрешено " +"выдавать запросы" + +msgid "Allow transfer" +msgstr "Разрешить перенос" msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" msgstr "" -"\n" -"Группы команд Sudo\n" -"\n" -"Управление группами команд Sudo.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу команд Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Удалить группу команд Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показать группу команд Sudo:\n" -" ipa group-show localadmins\n" +"Разделённый точками с запятой список IP-адресов или сетей, которым разрешено " +"переносить зону" msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" msgstr "" -"\n" -"Группы команд Sudo\n" -"\n" -"Управление группами команд Sudo.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу команд Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Удалить группу команд Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показать группу команд Sudo:\n" -" ipa sudocmdgroup-show admincmds\n" +"Разрешить синхронизацию прямых (A, AAAA) и обратных (PTR) записей в зоне" + +msgid "Allow in-line DNSSEC signing" +msgstr "Разрешить линейную подпись DNSSEC" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "Разрешить линейную подпись DNSSEC записей в зоне" + +msgid "NSEC3PARAM record" +msgstr "Запись NSEC3PARAM" msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" msgstr "" -"\n" -"Группы команд Sudo\n" -"\n" -"Управление группами команд Sudo.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу команд Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Удалить группу команд Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показать группу команд Sudo:\n" -" ipa group-show localadmins\n" +"Запись NSEC3PARAM для зоны в формате: алгоритм_хеширования флаги итерации " +"соль" -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Группы узлов.\n" -"\n" -"Управление группами узлов. Оно полезно при применении управления доступом к " -"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Добавить другую новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Добавить участников в группу узлов (с использованием выражения Bash в " -"фигурных скобках):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Добавить группу узлов как участника другой группы узлов:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Удалить узел из группы узлов:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показать группу узлов:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Удалить группу узлов:\n" -" ipa hostgroup-del baltimore\n" +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "Проверяет, включена ли служба DNS на каких-либо серверах." -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Группы узлов.\n" -"\n" -"Управление группами узлов. Оно полезно при применении управления доступом к " -"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Добавить другую новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Добавить участников в группу узлов:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Добавить группу узлов как участника другой группы узлов:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Удалить узел из группы узлов:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показать группу узлов:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Удалить группу узлов:\n" -" ipa hostgroup-del baltimore\n" +msgid "Resolve a host name in DNS." +msgstr "Определить адрес по имени узла в DNS." -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Группы пользователей\n" -"\n" -"Управление группами пользователей. По умолчанию все новые группы являются " -"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " -"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " -"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " -"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" -"\n" -"У каждой группы должно быть описание.\n" -"\n" -"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " -"поддерживается, но может повлиять на разрешения для файлов. При создании " -"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " -"создаст его автоматически.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Добавить новую не-POSIX-группу:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Преобразовать не-POSIX-группу в posix-группу:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Добавить новую POSIX-группу с определённым ID группы:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Удалить группу:\n" -" ipa group-del unixadmins\n" -"\n" -" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Добавить список пользователей в группу \"localadmins\":\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Удалить пользователя из группы \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa group-show localadmins\n" -"\n" -"Участие внешних групп создано для того, чтобы сделать возможной привязку " -"пользователей из доверенных доменов к локальным POSIX-группам с целью " -"использования ресурсов IPA. Внешние участники должны быть добавлены в " -"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " -"затем должна быть включена в одну из групп POSIX.\n" -"\n" -"В текущей версии участник внешней группы является идентификатором " -"безопасности (Security Identifier или SID), определённым доверенным доменом. " -"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " -"или имя@домен. IPA попытается определить SID по переданному имени путём " -"использования общего каталога доверенного домена.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список внешних участников группы ad_admins_external, чтобы " -"определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" +msgid "Modify global DNS configuration." +msgstr "Изменить глобальную конфигурацию DNS." -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Группы пользователей\n" -"\n" -"Управление группами пользователей. По умолчанию все новые группы являются " -"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " -"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " -"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " -"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" -"\n" -"У каждой группы должно быть описание.\n" -"\n" -"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " -"поддерживается, но может повлиять на разрешения для файлов. При создании " -"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " -"создаст его автоматически.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Добавить новую не-POSIX-группу:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Преобразовать не-POSIX-группу в posix-группу:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Добавить новую POSIX-группу с определённым ID группы:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Удалить группу:\n" -" ipa group-del unixadmins\n" -"\n" -" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Добавить нескольких пользователей в группу \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Удалить пользователя из группы \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa group-show localadmins\n" -"\n" -"Участие внешних групп создано для того, чтобы сделать возможной привязку " -"пользователей из доверенных доменов к локальным POSIX-группам с целью " -"использования ресурсов IPA. Внешние участники должны быть добавлены в " -"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " -"затем должна быть включена в одну из групп POSIX.\n" -"\n" -"В текущей версии участник внешней группы является идентификатором " -"безопасности (Security Identifier или SID), определённым доверенным доменом. " -"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " -"или имя@домен. IPA попытается определить SID по переданному имени путём " -"использования общего каталога доверенного домена.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список внешних участников группы ad_admins_external, чтобы " -"определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" +msgid "Show the current global DNS configuration." +msgstr "Показать текущую глобальную конфигурацию DNS." -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Группы пользователей\n" -"\n" -"Управление группами пользователей. По умолчанию все новые группы являются " -"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " -"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " -"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " -"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" -"\n" -"У каждой группы должно быть описание.\n" -"\n" -"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " -"поддерживается, но может повлиять на разрешения для файлов. При создании " -"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " -"создаст его автоматически.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Добавить новую не-POSIX-группу:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Преобразовать не-POSIX-группу в posix-группу:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Добавить новую POSIX-группу с определённым ID группы:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Удалить группу:\n" -" ipa group-del unixadmins\n" -"\n" -" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Добавить нескольких пользователей в группу \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Удалить пользователя из группы \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa group-show localadmins\n" -"\n" -"Участие внешних групп создано для того, чтобы сделать возможной привязку " -"пользователей из доверенных доменов к локальным POSIX-группам с целью " -"использования ресурсов IPA. Внешние участники должны быть добавлены в " -"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " -"затем должна быть включена в одну из групп POSIX.\n" -"\n" -"В текущей версии участник внешней группы является идентификатором " -"безопасности (Security Identifier или SID), определённым доверенным доменом. " -"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " -"или имя@домен. IPA попытается определить SID по переданному имени путём " -"использования общего каталога доверенного домена.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список внешних участников группы ad_admins_external, чтобы " -"определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" +msgid "Create new DNS forward zone." +msgstr "Создать новую зону перенаправления DNS." -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" +msgid "Add a permission for per-forward zone access delegation." msgstr "" -"\n" -"Группы служб HBAC\n" -"\n" -"Группы служб HBAC могут содержать любое количество отдельных служб (так " -"называемых \"участников\"). У каждой группы должно быть описание.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу служб HBAC:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Добавить участников в группу служб HBAC:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Удалить группу служб HBAC:\n" -" ipa hbacsvcgroup-del login\n" +"Добавить разрешение для делегирования прав доступа для отдельных зон " +"перенаправления." -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" -"\n" -"Группы служб HBAC\n" -"\n" -"Группы служб HBAC могут содержать любое количество отдельных служб (так " -"называемых \"участников\"). У каждой группы должно быть описание.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу служб HBAC:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Добавить участников в группу служб HBAC:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Добавить новую группу в группу \"login\":\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Удалить группу служб HBAC:\n" -" ipa hbacsvcgroup-del login\n" +msgid "Permission value" +msgstr "Значение разрешения" -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" -"\n" -"Службы HBAC\n" -"\n" -"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " -"соответствовать имени службы, которую оценивает PAM.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую службу HBAC:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Изменить существующую службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " -"FTP\n" -" и добавленная выше служба tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Удалить службу HBAC:\n" -" ipa hbacsvc-del tftp\n" +msgid "Delete DNS forward zone." +msgstr "Удалить зону перенаправления DNS." -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" -"\n" -"Службы HBAC\n" -"\n" -"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " -"соответствовать имени службы, которую оценивает PAM.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую службу HBAC:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Изменить существующую службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " -"FTP\n" -" и добавленная выше служба tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Удалить службу HBAC:\n" -" ipa hbacsvc-del tftp\n" +msgid "Disable DNS Forward Zone." +msgstr "Отключить зону перенаправления DNS." -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" +msgid "Enable DNS Forward Zone." +msgstr "Включить зону перенаправления DNS." + +msgid "Search for DNS forward zones." +msgstr "Поиск зон перенаправления DNS." + +msgid "Modify DNS forward zone." +msgstr "Изменить зону перенаправления DNS." + +msgid "Remove a permission for per-forward zone access delegation." msgstr "" -"\n" -"Управление доступом на основе узла\n" -"\n" -"Управляйте тем, кто, на каких узлах и из каких узлов сможет получать доступ " -"к определённым службам. Вы можете воспользоваться HBAC для определения тех " -"пользователей и групп на узле происхождения запроса, которые будут иметь " -"доступ к определённой службе или группе служб на целевом узле.\n" -"\n" -"Также можно указать категорию пользователей, целевых узлов и узлов " -"происхождения запроса. В текущей версии доступен только вариант \"all\", но " -"в будущих версиях, возможно, появятся и другие варианты.\n" -"\n" -"Целевые узлы и узлы происхождения запроса в правилах HBAC должны быть узлами " -"под управлением IPA.\n" -"\n" -"Доступные службы и группы служб управляются, соответственно, с помощью " -"подключаемых модулей hbacsvc и hbacsvcgroup.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать правило, \"test1\", которое предоставляет всем пользователям доступ " -"на узел \"server\" отовсюду:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Показать свойства именованного правила HBAC:\n" -" ipa hbacrule-show test1\n" -"\n" -" Создать правило для определённой службы. Это правило предоставит " -"пользователю john доступ к службе sshd на любом компьютере с любого " -"компьютера:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Создать правило для новой группы служб. Это правило предоставит " -"пользователю john доступ к службе FTP на любом компьютере с любого " -"компьютера:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Отключить именованное правило HBAC:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Удалить именованное правило HBAC:\n" -" ipa hbacrule-del allow_server\n" +"Удалить разрешение для делегирования прав доступа для отдельных зон " +"перенаправления." + +msgid "Display information about a DNS forward zone." +msgstr "Показать сведения о зоне перенаправления DNS." + +msgid "Add new DNS resource record." +msgstr "Добавить новую запись ресурса DNS." + +msgid "Force" +msgstr "Принудительно" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" +"Принудительно создать запись NS, даже если соответствующее имя узла " +"отсутствует в DNS" + +msgid "Structured" +msgstr "Структурировано" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" +"Проанализировать все необработанные записи DNS и вернуть их в " +"структурированном виде" + +msgid "Delete DNS resource record." +msgstr "Удалить запись ресурса DNS." + +msgid "Delete all associated records" +msgstr "Удалить все связанные записи" + +msgid "Delete DNS record entry." +msgstr "Удалить пункт записи DNS." + +msgid "Search for DNS resources." +msgstr "Поиск ресурсов DNS." + +msgid "Modify a DNS resource record." +msgstr "Изменить запись ресурса DNS." + +msgid "Rename the DNS resource record object" +msgstr "Переименовать объект записи ресурса DNS" + +msgid "Display DNS resource." +msgstr "Показать ресурс DNS." + +msgid "Create new DNS zone (SOA record)." +msgstr "Создать новую зону DNS (запись SOA)." + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" +"Принудительно создать зону DNS, даже если не удаётся определить сервер имён" + +msgid "Add a permission for per-zone access delegation." +msgstr "Добавить разрешение для делегирования прав доступа для отдельных зон." + +msgid "Delete DNS zone (SOA record)." +msgstr "Удалить зону DNS (запись SOA)." + +msgid "Disable DNS Zone." +msgstr "Отключить зону DNS." + +msgid "Enable DNS Zone." +msgstr "Включить зону DNS." + +msgid "Search for DNS zones (SOA records)." +msgstr "Поиск зон DNS (записей SOA)." + +msgid "Forward zones only" +msgstr "Только зоны перенаправления" + +msgid "Search for forward zones only" +msgstr "Поиск только зон перенаправления" + +msgid "Modify DNS zone (SOA record)." +msgstr "Изменить зону DNS (запись SOA)." + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "Принудительно изменить сервер имён, даже если он отсутствует в DNS" + +msgid "Remove a permission for per-zone access delegation." +msgstr "Удалить разрешение для делегирования прав доступа для отдельных зон." + +msgid "Display information about a DNS zone (SOA record)." +msgstr "Показать сведения о зоне DNS (записи SOA)." msgid "" "\n" @@ -6538,143 +3786,310 @@ msgstr "" " Удалить именованное правило HBAC:\n" " ipa hbacrule-del allow_server\n" -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Узлы/Компьютеры\n" -"\n" -"Узел представляет собой отдельный компьютер. Термин может использоваться в " -"нескольких контекстах:\n" -"- записи служб, связанные с определённым узлом \n" -"- узел сохраняет учётную запись узла / службы\n" -"- узел может использоваться в правилах управления доступом на основе узла " -"(Host-based Access Control, HBAC)\n" -"- каждый зарегистрированный клиент создаёт запись узла\n" +msgid "Rule name" +msgstr "Имя правила" + +msgid "Rule type" +msgstr "Тип правила" + +msgid "Rule type (allow)" +msgstr "Тип правила (allow)" + +msgid "User category" +msgstr "Категория пользователей" + +msgid "User category the rule applies to" +msgstr "Категория пользователей, к которой применяется правило" + +msgid "Host category" +msgstr "Категория узлов" + +msgid "Host category the rule applies to" +msgstr "Категория узлов, к которой применяется правило" + +msgid "Service category" +msgstr "Категория служб" + +msgid "Service category the rule applies to" +msgstr "Категория служб, к которой применяется правило" + +msgid "Enabled" +msgstr "Включено" + +msgid "Users" +msgstr "Пользователи" + +msgid "User Groups" +msgstr "Группы пользователей" + +msgid "Hosts" +msgstr "Узлы" + +msgid "Host Groups" +msgstr "Группы узлов" + +msgid "Services" +msgstr "Службы" + +msgid "Service Groups" +msgstr "Группы служб" + +msgid "External host" +msgstr "Внешний узел" + +msgid "Create a new HBAC rule." +msgstr "Создать новое правило HBAC." + +msgid "Suppress processing of membership attributes." +msgstr "Подавить обработку атрибутов участия." + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Добавить целевые узлы и группы узлов в правило HBAC." + +msgid "member host" +msgstr "узел-участник" + +msgid "hosts to add" +msgstr "узлы, которые следует добавить" + +msgid "member host group" +msgstr "группа узлов — участник" + +msgid "host groups to add" +msgstr "группы узлов, которые следует добавить" + +msgid "Members that could not be added" +msgstr "Участники, которых не удалось добавить" + +msgid "Number of members added" +msgstr "Количество добавленных участников" + +msgid "Add services to an HBAC rule." +msgstr "Добавить службы в правило HBAC." + +msgid "member HBAC service" +msgstr "служба-участник HBAC" + +msgid "HBAC services to add" +msgstr "cлужбы HBAC, которые следует добавить" + +msgid "member HBAC service group" +msgstr "участник группа служб HBAC" + +msgid "HBAC service groups to add" +msgstr "группы служб HBAC, которые следует добавить" + +msgid "Add users and groups to an HBAC rule." +msgstr "Добавить пользователей и группы в правило HBAC." + +msgid "member user" +msgstr "пользователь-участник" + +msgid "users to add" +msgstr "пользователи, которых следует добавить" + +msgid "member group" +msgstr "группа-участник" + +msgid "groups to add" +msgstr "группы, которые следует добавить" + +msgid "Delete an HBAC rule." +msgstr "Удалить правило HBAC." + +msgid "Disable an HBAC rule." +msgstr "Отключить правило HBAC." + +msgid "Enable an HBAC rule." +msgstr "Включить правило HBAC." + +msgid "Search for HBAC rules." +msgstr "Поиск правил HBAC." + +msgid "Modify an HBAC rule." +msgstr "Изменить правило HBAC." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Удалить целевые узлы и группы узлов из правила HBAC." + +msgid "hosts to remove" +msgstr "узлы, которые следует удалить" + +msgid "host groups to remove" +msgstr "группы узлов, которые следует удалить" + +msgid "Members that could not be removed" +msgstr "Участники, которых не удалось удалить" + +msgid "Number of members removed" +msgstr "Количество удалённых участников" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Удалить службы и группы служб из правила HBAC." + +msgid "HBAC services to remove" +msgstr "службы HBAC, которые следует удалить" + +msgid "HBAC service groups to remove" +msgstr "группы служб HBAC, которые следует удалить" + +msgid "Remove users and groups from an HBAC rule." +msgstr "Удалить пользователей и группы из правила HBAC." + +msgid "users to remove" +msgstr "пользователи, которых следует удалить" + +msgid "groups to remove" +msgstr "группы, которые следует удалить" + +msgid "Display the properties of an HBAC rule." +msgstr "Показать свойства правила HBAC." msgid "" "\n" -"Hosts/Machines\n" +"HBAC Services\n" "\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" msgstr "" "\n" -"Узлы/Компьютеры\n" +"Службы HBAC\n" "\n" -"Узел представляет собой отдельный компьютер. Термин может использоваться в " -"нескольких контекстах:\n" -"- записи служб, связанные с определённым узлом \n" -"- узел сохраняет учётную запись узла / службы\n" -"- узел может использоваться в правилах управления доступом на основе узла " -"(Host-based Access Control, HBAC)\n" -"- каждый зарегистрированный клиент создаёт запись узла\n" -"\n" -"РЕГИСТРАЦИЯ:\n" -"Существует три сценария регистрации нового клиента:\n" -"\n" -"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " -"существовать или отсутствовать. Полноправный администратор выполняет роль " -"hostadmin или является участником группы admins.\n" -"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " -"должен существовать. Администратор с ограниченными правами выполняет роль с " -"привилегией Host Enrollment.\n" -"3. Узел создан с одноразовым паролем.\n" -"\n" -"Узлу можно назначить роль только один раз. Если клиенту уже назначена роль и " -"эту роль требуется изменить, запись узла должна быть удалена и создана " -"повторно. Обратите внимание, что повторное создание записи узла приведет к " -"удалению всех служб узла и отзыву всех связанных с этими службами SSL-" -"сертификатов.\n" -"\n" -"В запись узла при необходимости можно включить данные о его расположении, " -"типе используемой операционной системы и так далее.\n" +"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " +"соответствовать имени службы, которую оценивает PAM.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Добавить новый узел:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" +" Добавить новую службу HBAC:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Удалить узел:\n" -" ipa host-del test.example.com\n" +" Изменить существующую службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Добавить новый узел с одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " +"FTP\n" +" и добавленная выше служба tftp:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Добавить новый узел со случайным одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" +" Удалить службу HBAC:\n" +" ipa hbacsvc-del tftp\n" + +msgid "Service name" +msgstr "Имя службы" + +msgid "HBAC service" +msgstr "Служба HBAC" + +msgid "HBAC service description" +msgstr "Описание службы HBAC" + +msgid "Member of HBAC service groups" +msgstr "Участник групп служб HBAC" + +msgid "Add a new HBAC service." +msgstr "Добавить новую службу HBAC." + +msgid "Delete an existing HBAC service." +msgstr "Удалить существующую службу HBAC." + +msgid "Search for HBAC services." +msgstr "Поиск служб HBAC." + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"service\")" + +msgid "Modify an HBAC service." +msgstr "Изменить службу HBAC." + +msgid "Display information about an HBAC service." +msgstr "Показать сведения о службе HBAC." + +msgid "" "\n" -" Изменить сведения об узле:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" +"HBAC Service Groups\n" "\n" -" Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" "\n" -" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" -" ipa host-disable test.example.com\n" +"EXAMPLES:\n" "\n" -" Добавить узел, который может управлять таблицей ключей и сертификатом этого " -"узла:\n" -" ipa host-add-managedby --hosts=test2 test\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" +"\n" +"Группы служб HBAC\n" +"\n" +"Группы служб HBAC могут содержать любое количество отдельных служб (так " +"называемых \"участников\"). У каждой группы должно быть описание.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу служб HBAC:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Добавить участников в группу служб HBAC:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Удалить группу служб HBAC:\n" +" ipa hbacsvcgroup-del login\n" + +msgid "Service group name" +msgstr "Имя группы служб" + +msgid "HBAC service group description" +msgstr "Описание группы служб HBAC" + +msgid "Member HBAC service" +msgstr "Служба-участник HBAC" + +msgid "Add a new HBAC service group." +msgstr "Добавить новую группу служб HBAC." + +msgid "Add members to an HBAC service group." +msgstr "Добавить участников в группу служб HBAC." + +msgid "Delete an HBAC service group." +msgstr "Удалить группу служб HBAC." + +msgid "Search for an HBAC service group." +msgstr "Поиск группы служб HBAC." + +msgid "Modify an HBAC service group." +msgstr "Изменить группу служб HBAC." + +msgid "Remove members from an HBAC service group." +msgstr "Удалить участников из группы служб HBAC." + +msgid "Display information about an HBAC service group." +msgstr "Показать сведения о группе служб HBAC." msgid "" "\n" @@ -6804,6 +4219,439 @@ msgstr "" " Разрешить пользователю создавать таблицу ключей:\n" " ipa host-allow-create-keytab test2 --users=tuser1\n" +msgid "Host name" +msgstr "Имя узла" + +msgid "A description of this host" +msgstr "Описание этого узла" + +msgid "Locality" +msgstr "Адрес местонахождения" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Адрес местонахождения узла (например, \"Москва, Россия\")" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Расположение узла (например, \"Lab 2\")" + +msgid "Platform" +msgstr "Платформа" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Аппаратная платформа узла (например, \"Lenovo T61\")" + +msgid "Operating system" +msgstr "Операционная система" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Операционная система узла и её версия (например, \"Fedora 9\")" + +msgid "User password" +msgstr "Пароль пользователя" + +msgid "Password used in bulk enrollment" +msgstr "Пароль для массовой регистрации" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "Создать случайный пароль для массовой регистрации" + +msgid "Random password" +msgstr "Случайный пароль" + +msgid "Certificate" +msgstr "Сертификат" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64 шифрованный сертификат сервера" + +msgid "Principal name" +msgstr "Имя учётной записи" + +msgid "MAC address" +msgstr "MAC-адрес" + +msgid "Hardware MAC address(es) on this host" +msgstr "MAC-адрес(а) данного узла" + +msgid "SSH public key" +msgstr "Открытый ключ SSH" + +msgid "Class" +msgstr "Класс" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Категория узлов (семантика этого атрибута предназначена для локального " +"разбора)" + +msgid "Assigned ID View" +msgstr "Назначенное представление ID" + +msgid "Requires pre-authentication" +msgstr "Требуется предварительная аутентификация" + +msgid "Pre-authentication is required for the service" +msgstr "Для службы требуется предварительная аутентификация" + +msgid "Trusted for delegation" +msgstr "Доверено для делегирования" + +msgid "Client credentials may be delegated to the service" +msgstr "Учётные данные клиента можно делегировать службе" + +msgid "Member of host-groups" +msgstr "Участник групп узлов" + +msgid "Roles" +msgstr "Роли" + +msgid "Member of netgroups" +msgstr "Участник сетевых групп" + +msgid "Member of Sudo rule" +msgstr "Участник правила Sudo" + +msgid "Member of HBAC rule" +msgstr "Участник правила HBAC" + +msgid "Indirect Member of netgroup" +msgstr "Участник сетевой группы с непрямым участием" + +msgid "Indirect Member of host-group" +msgstr "Участник группы узлов с непрямым участием" + +msgid "Indirect Member of role" +msgstr "Участник роли с непрямым участием" + +msgid "Indirect Member of Sudo rule" +msgstr "Участник правила Sudo с непрямым участием" + +msgid "Indirect Member of HBAC rule" +msgstr "Участник правила HBAC с непрямым участием" + +msgid "Keytab" +msgstr "Таблица ключей" + +msgid "Managed by" +msgstr "Управляется" + +msgid "Managing" +msgstr "Управление" + +msgid "Users allowed to retrieve keytab" +msgstr "Пользователи, которым разрешено получать таблицу ключей" + +msgid "Groups allowed to retrieve keytab" +msgstr "Группы, которым разрешено получать таблицу ключей" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Узлы, которым разрешено получать таблицу ключей" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Группы узлов, которым разрешено получать таблицу ключей" + +msgid "Users allowed to create keytab" +msgstr "Пользователи, которым разрешено создавать таблицу ключей" + +msgid "Groups allowed to create keytab" +msgstr "Группы, которым разрешено создавать таблицу ключей" + +msgid "Hosts allowed to create keytab" +msgstr "Узлы, которым разрешено создавать таблицу ключей" + +msgid "Host Groups allowed to create keytab" +msgstr "Группы узлов, которым разрешено создавать таблицу ключей" + +msgid "Add a new host." +msgstr "Добавить новый узел." + +msgid "force host name even if not in DNS" +msgstr "" +"Принудительно установить значение имени узла, даже если имени нет в DNS" + +msgid "skip reverse DNS detection" +msgstr "Игнорировать обратное определение DNS" + +msgid "Add the host to DNS with this IP address" +msgstr "Добавить узел в DNS с этим IP-адресом" + +msgid "Add hosts that can manage this host." +msgstr "Добавить узлы, которые могут управлять этим узлом." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Разрешить пользователям, группам, узлам или группам узлов создавать таблицу " +"ключей этого узла." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Разрешить пользователям, группам, узлам или группам узлов получать таблицу " +"ключей этого узла." + +msgid "Delete a host." +msgstr "Удалить узел." + +msgid "Remove entries from DNS" +msgstr "Удалить записи из DNS" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "Отключить ключ Kerberos, SSL-сертификат и все службы узла." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Запретить пользователям, группам, узлам или группам узлов создавать таблицу " +"ключей этого узла." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"Запретить пользователям, группам, узлам или группам узлов получать таблицу " +"ключей этого узла." + +msgid "Search for hosts." +msgstr "Поиск узлов." + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"hostname\")" + +msgid "host group" +msgstr "группа узлов" + +msgid "Search for hosts with these member of host groups." +msgstr "Поиск узлов, которые являются участниками этой группы узлов." + +msgid "Search for hosts without these member of host groups." +msgstr "Поиск узлов, которые не являются участниками этой группы узлов." + +msgid "netgroup" +msgstr "сетевая группа" + +msgid "Search for hosts with these member of netgroups." +msgstr "Поиск узлов, которые являются участниками этой сетевой группы." + +msgid "Search for hosts without these member of netgroups." +msgstr "Поиск узлов, которые не являются участниками этой сетевой группы." + +msgid "role" +msgstr "Роль" + +msgid "Search for hosts with these member of roles." +msgstr "Поиск узлов, которые являются участниками этой роли." + +msgid "Search for hosts without these member of roles." +msgstr "Поиск узлов, которые не являются участниками этой роли." + +msgid "HBAC rule" +msgstr "правило HBAC" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "Поиск узлов, которые являются участниками этого правила HBAC." + +msgid "Search for hosts without these member of HBAC rules." +msgstr "Поиск узлов, которые не являются участниками этого правила HBAC." + +msgid "sudo rule" +msgstr "правило Sudo" + +msgid "Search for hosts with these member of sudo rules." +msgstr "Поиск узлов, которые являются участниками этого правила Sudo." + +msgid "Search for hosts without these member of sudo rules." +msgstr "Поиск узлов, которые не являются участниками этого правила Sudo." + +msgid "user" +msgstr "пользователь" + +msgid "Search for hosts with these enrolled by users." +msgstr "Поиск узлов, которые зарегистрированы пользователями." + +msgid "Search for hosts without these enrolled by users." +msgstr "Поиск узлов, которые не зарегистрированы пользователями." + +msgid "host" +msgstr "узел" + +msgid "Search for hosts with these managed by hosts." +msgstr "Поиск узлов, которые управляются узлами." + +msgid "Search for hosts without these managed by hosts." +msgstr "Поиск узлов, которые не управляются узлами." + +msgid "Search for hosts with these managing hosts." +msgstr "Поиск узлов, включая узлы, управляющие узлами." + +msgid "Search for hosts without these managing hosts." +msgstr "Поиск узлов, не включая узлы, управляющие узлами." + +msgid "Modify information about a host." +msgstr "Изменить сведения об узле." + +msgid "Kerberos principal name for this host" +msgstr "Имя учётной записи Kerberos для этого узла" + +msgid "Update DNS entries" +msgstr "Обновить записи DNS" + +msgid "Remove hosts that can manage this host." +msgstr "Удалить узлы, которые могут управлять этим узлом." + +msgid "Display information about a host." +msgstr "Показать сведения об узле." + +msgid "file to store certificate in" +msgstr "Файл для сохранения сертификата" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Группы узлов.\n" +"\n" +"Управление группами узлов. Оно полезно при применении управления доступом к " +"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Добавить другую новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Добавить участников в группу узлов (с использованием выражения Bash в " +"фигурных скобках):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Добавить группу узлов как участника другой группы узлов:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Удалить узел из группы узлов:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показать группу узлов:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Удалить группу узлов:\n" +" ipa hostgroup-del baltimore\n" + +msgid "Host-group" +msgstr "Группа узлов" + +msgid "Name of host-group" +msgstr "Имя группы узлов" + +msgid "A description of this host-group" +msgstr "Описание этой группы узлов" + +msgid "Member hosts" +msgstr "Узлы-участники" + +msgid "Member host-groups" +msgstr "Группы узлов — участники" + +msgid "Indirect Member hosts" +msgstr "Узлы с непрямым участием" + +msgid "Indirect Member host-groups" +msgstr "Группы узлов с непрямым участием" + +msgid "Add a new hostgroup." +msgstr "Добавить новую группу узлов." + +msgid "Add members to a hostgroup." +msgstr "Добавить участников в группу узлов." + +msgid "Delete a hostgroup." +msgstr "Удалить группу узлов." + +msgid "Search for hostgroups." +msgstr "Поиск групп узлов." + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"hostgroup-name" +"\")" + +msgid "Search for host groups with these member hosts." +msgstr "Поиск групп узлов с этими узлами-участниками." + +msgid "Search for host groups without these member hosts." +msgstr "Поиск групп узлов без этих узлов-участников." + +msgid "Search for host groups with these member host groups." +msgstr "Поиск групп узлов с этими группами узлов — участниками." + +msgid "Search for host groups without these member host groups." +msgstr "Поиск групп узлов без этих групп узлов — участников." + +msgid "Search for host groups with these member of host groups." +msgstr "Поиск групп узлов, которые являются участниками этой группы узлов." + +msgid "Search for host groups without these member of host groups." +msgstr "Поиск групп узлов, которые не являются участниками этой группы узлов." + +msgid "Search for host groups with these member of netgroups." +msgstr "Поиск групп узлов, которые являются участниками этой сетевой группы." + +msgid "Search for host groups without these member of netgroups." +msgstr "" +"Поиск групп узлов, которые не являются участниками этой сетевой группы." + +msgid "Search for host groups with these member of HBAC rules." +msgstr "Поиск групп узлов, которые являются участниками этого правила HBAC." + +msgid "Search for host groups without these member of HBAC rules." +msgstr "Поиск групп узлов, которые не являются участниками этого правила HBAC." + +msgid "Search for host groups with these member of sudo rules." +msgstr "Поиск групп узлов, которые являются участниками этого правила Sudo." + +msgid "Search for host groups without these member of sudo rules." +msgstr "Поиск групп узлов, которые не являются участниками этого правила Sudo." + +msgid "Modify a hostgroup." +msgstr "Изменить группу узлов." + +msgid "Remove members from a hostgroup." +msgstr "Удалить участников из группы узлов." + +msgid "Display information about a hostgroup." +msgstr "Показать сведения о группе узлов." + msgid "" "\n" "ID Views\n" @@ -6826,491 +4674,195 @@ msgstr "" "переноса данных из устаревших систем или других решений для управления " "идентификацией и учётными записями пользователей.\n" +msgid "Anchor to override" +msgstr "Привязка, которую следует переопределить" + +msgid "Group name" +msgstr "Имя группы" + +msgid "GID" +msgstr "ID группы" + +msgid "Group ID Number" +msgstr "ID группы" + +msgid "User login" +msgstr "Имя учётной записи пользователя" + +msgid "UID" +msgstr "UID" + +msgid "User ID Number" +msgstr "Номер ID пользователя" + +msgid "GECOS" +msgstr "GECOS" + +msgid "Home directory" +msgstr "Домашний каталог" + +msgid "Login shell" +msgstr "Оболочка входа" + +msgid "ID View Name" +msgstr "Имя представления ID" + +msgid "Add a new Group ID override." +msgstr "Добавить новое переопределение ID группы." + +msgid "Delete an Group ID override." +msgstr "Удалить переопределение ID группы." + +msgid "Search for an Group ID override." +msgstr "Поиск переопределения ID группы." + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"anchor\")" + +msgid "Modify an Group ID override." +msgstr "Изменить переопределение ID группы." + +msgid "Rename the Group ID override object" +msgstr "Переименовать объект переопределения ID группы" + +msgid "Display information about an Group ID override." +msgstr "Показать сведения о переопределении ID группы." + +msgid "Add a new User ID override." +msgstr "Добавить новое переопределение ID пользователя." + +msgid "Delete an User ID override." +msgstr "Удалить переопределение ID пользователя." + +msgid "Search for an User ID override." +msgstr "Поиск переопределения ID пользователя." + +msgid "Modify an User ID override." +msgstr "Изменить переопределение ID пользователя." + +msgid "Rename the User ID override object" +msgstr "Переименовать объект переопределения ID пользователя" + +msgid "Display information about an User ID override." +msgstr "Показать сведения о переопределении ID пользователя." + +msgid "Add a new ID View." +msgstr "Добавить новое представление ID." + msgid "" -"\n" -"IPA certificate operations\n" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." msgstr "" -"\n" -"Операции с сертификатами IPA\n" +"Применяет представление ID к указанным узлам или текущим участникам " +"указанных групп узлов. Если к узлу применяется другое представление ID, оно " +"будет переопределено." + +msgid "hosts" +msgstr "узлы" + +msgid "Hosts to apply the ID View to" +msgstr "Узлы, к которым следует применить представление ID" + +msgid "hostgroups" +msgstr "группы узлов" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" +"Группы узлов, к узлам которых следует применить представление ID. Обратите " +"внимание, что представление не применяется автоматически к узлам, " +"добавленным в группу узлов после выполнения команды idview-apply." + +msgid "Hosts that this ID View was applied to." +msgstr "Узлы, к которым было применено это представление ID." + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" +"Узлы или группы узлов, к которым не удалось применить это представление ID." + +msgid "Number of hosts the ID View was applied to:" +msgstr "Количество узлов, к которым было применено представление ID:" + +msgid "Delete an ID View." +msgstr "Удалить представление ID." + +msgid "Search for an ID View." +msgstr "Поиск представления ID." + +msgid "Modify an ID View." +msgstr "Изменить представление ID." + +msgid "Rename the ID View object" +msgstr "Переименовать объект представления ID" + +msgid "Display information about an ID View." +msgstr "Показать сведения о представлении ID." + +msgid "Enumerate all the hosts the view applies to." +msgstr "Пронумеровать все узлы, к которым применяется представление" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" +"Очищает представление ID для указанных узлов или текущих участников " +"указанных групп узлов." + +msgid "Hosts to clear (any) ID View from." +msgstr "Узлы, для которых следует очистить (любое) представление ID." + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" +"Группы узлов, для узлов которых следует очистить представления ID. Обратите " +"внимание, что представление не очищается автоматически для узлов, " +"добавленных в группу узлов после выполнения команды idview-unapply. " + +msgid "Hosts that ID View was cleared from." +msgstr "Узлы, для которых было очищено представление ID." + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" +"Узлы или группы узлов, для которых не удалось очистить представление ID." + +msgid "Number of hosts that had a ID View was unset:" +msgstr "Количество узлов, с которых снято представление ID: " msgid "" "\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +"Plugins not accessible directly through the CLI, commands used internally\n" msgstr "" "\n" -"Операции с сертификатами IPA \n" -"\n" -"Применение набора команд для управления сертификатами SSL-серверов.\n" -"\n" -"Запросы сертификатов существуют в виде запроса подписи сертификата " -"(Certificate Signing Request, CSR) в формате PEM.\n" -"\n" -"Если используется бэкенд с самоподписанным сертификатом, субъект в CSR " -"должен соответствовать субъекту, настроенному на сервере. Система выдачи " -"сертификатов Dogtag Certificate System использует только значение CN в CSR и " -"принудительно устанавливает остальные параметры субъекта.\n" -"\n" -"Сертификат хранится в учётной записи службы, а учётной записи службы " -"требуется узел.\n" -"\n" -"Чтобы запросить сертификат:\n" -"\n" -"* Должен существовать узел\n" -"* Должна существовать служба (либо следует использовать параметр --add для " -"её автоматического добавления)\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Запросить новый сертификат и добавить учётную запись:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Получить существующий сертификат:\n" -" ipa cert-show 1032\n" -"\n" -" Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Удалить сертификат из списка отзыва:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Проверить состояние запроса подписи:\n" -" ipa cert-status 10\n" -"\n" -"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " -"сертификатов, следовательно, данные о состоянии запроса не являются " -"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " -"если CA не сразу выдаёт сертификат.\n" -"\n" -"Поддерживаются следующие причины отзыва:\n" -"\n" -" * 0 - не указано\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Обратите внимание, что код причины 7 не используется. Подробные сведения в " -"RFC 5280:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +"Интерфейс командной строки не позволяет получить прямой доступ к " +"подключаемым модулям, команды используются для внутренней обработки\n" -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" -"\n" -"Операции с сертификатами IPA \n" -"\n" -"Применение набора команд для управления сертификатами SSL-серверов.\n" -"\n" -"Запросы сертификатов существуют в виде запроса подписи сертификата " -"(Certificate Signing Request, CSR) в формате PEM.\n" -"\n" -"Система выдачи сертификатов Dogtag Certificate System использует только " -"значение CN в CSR и принудительно устанавливает остальные параметры субъекта " -"в соответствии со значениями, настроенными на сервере.\n" -"\n" -"Сертификат хранится в учётной записи службы, а учётной записи службы " -"требуется узел.\n" -"\n" -"Чтобы запросить сертификат:\n" -"\n" -"* Должен существовать узел\n" -"* Должна существовать служба (либо следует использовать параметр --add для " -"её автоматического добавления)\n" -"\n" -"ПОИСК:\n" -"\n" -"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " -"датам действия и дате выдачи.\n" -"\n" -"Если поиск выполняется по дате _с, используется сравнение >=, а если " -"выполняется поиск _до — сравнение <=. Сочетание обоих видов поиска приводит " -"к поиску с логической операцией И.\n" -"\n" -"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " -"датами, определёнными в в сертификатах.\n" -"\n" -"Формат даты: ГГГГ-мм-дд.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Запросить новый сертификат и добавить учётную запись:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Получить существующий сертификат:\n" -" ipa cert-show 1032\n" -"\n" -" Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Удалить сертификат из списка отзыва:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Проверить состояние запроса подписи:\n" -" ipa cert-status 10\n" -"\n" -" Поиск сертификатов по имени узла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Поиск отозванных сертификатов по причине отзыва:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Поиск сертификатов по дате выдачи:\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " -"сертификатов, следовательно, данные о состоянии запроса не являются " -"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " -"если CA не сразу выдаёт сертификат.\n" -"\n" -"Поддерживаются следующие причины отзыва:\n" -"\n" -" * 0 - не указано\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Обратите внимание, что код причины 7 не используется. Подробные сведения в " -"RFC 5280:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +msgid "Dict of I18N messages" +msgstr "Словарь переведённых сообщений (I18N)" -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" -"\n" -"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " -"сертификатов, следовательно, данные о состоянии запроса не являются " -"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " -"если CA не сразу выдаёт сертификат.\n" +msgid "Export plugin meta-data for the webUI." +msgstr "Экспортировать метаданные подключаемого модуля для веб-интерфейса." -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"расположения IPA\n" +msgid "Name of object to export" +msgstr "Имя объекта, который следует экспортировать" -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" -"\n" -"IPA предусматривает специальную привязку DN (binddn) для использования с " -"Sudo:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgid "Name of method to export" +msgstr "Имя метода, который следует экспортировать" -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"IPA предоставляет возможности настройки различных аспектов Sudo:\n" -" Users: пользователь (пользователи) или группа (группы), которые могут " -"вызывать Sudo.\n" -" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " -"вызывать Sudo.\n" -" Allow Command: конкретная команда (команды), которые разрешены для " -"выполнения с помощью Sudo. \n" -" Deny Command: конкретная команда (команды), которые запрещены для " -"выполнения с помощью Sudo.\n" -" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " -"от имени которых Sudo будет выполнять команды.\n" -" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -"команды.\n" -" Options: различные параметры sudoers (участники Sudo), которые могут " -"изменить поведение Sudo.\n" +msgid "Name of command to export" +msgstr "Имя команды, которую следует экспортировать" -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Роли IPA-сервера\n" +msgid "Dict of JSON encoded IPA Objects" +msgstr "Словарь объектов IPA, зашифрованных JSON" -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" -"\n" -"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" -"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " -"связанные с доменом данные\n" -"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " -"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" +msgid "Dict of JSON encoded IPA Methods" +msgstr "Словарь методов IPA, зашифрованных JSON" -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA-серверы\n" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -"IPA-серверы\n" -"\n" -"Получение сведений об установленных IPA-серверах.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Найти все серверы:\n" -" ipa server-find\n" -"\n" -" Показать определённый сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"В IPA реализована поддержка использования токенов OTP для многофакторной " -"аутентификации. Этот код позволяет управлять токенами OTP.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"В IPA поддерживается использование внешнего прокси-сервера RADIUS для " -"выполнения аутентификации с помощью одноразового пароля krb5. Эта поддержка " -"обеспечивает значительную гибкость при интеграции со сторонними службами " -"аутентификации.\n" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" -"\n" -"В IPA предусмотрена поддержка использования сертификатов для аутентификации. " -"Сертификаты могут храниться или в записи пользователя (весь сертификат в " -"атрибуте usercertificate), или просто привязываться к записи пользователя " -"путём сопоставления. С помощью этого кода можно управлять правилами, которые " -"позволяют связывать сертификат с записью пользователя.\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" -"\n" -"Применение набора команд для управления сертификатами SSL-серверов.\n" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" -"\n" -"Чтобы запросить сертификат:\n" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" -"\n" -"При работе с такими записями DNS может быть сложно не допустить ошибок и " -"ввести корректное значение. Модуль DNS предоставляет в ваше распоряжение " -"абстракцию над этими необработанными записями и позволяет управлять каждым " -"из типов записей ресурсов с помощью определённых параметров. Для каждого из " -"поддерживаемых типов записей ресурсов в модуле DNS предусмотрен стандартный " -"параметр для работы с необработанными записями с помощью формата ---" -"rec, например --mx-rec, и специальные параметры для каждой из частей " -"структуры записи ресурса с помощью формата ---, например --" -"mx-preference и --mx-exchanger.\n" -"\n" -"\n" +msgid "Dict of JSON encoded IPA Commands" +msgstr "Словарь команд IPA, зашифрованных JSON" msgid "" "\n" @@ -7319,87 +4871,20 @@ msgstr "" "\n" "Присоединение к домену IPA\n" -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Средства отчётности о состоянии функции пре-аутентификации (PKINIT) " -"Kerberos.\n" -"\n" -"Отчёт о том, включена или отключена пре-аутентификация (PKINIT) Kerberos на " -"главных IPA-серверах \n" -"\n" -"ПРИМЕРЫ:\n" -" Вывести список состояний PKINIT на всех главных серверах:\n" -" ipa pkinit-status\n" -"\n" -" Проверить состояние PKINIT на \"ipa.example.com\":\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" Вывести список всех главных IPA-серверов с отключённой PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"Дополнительные сведения о поддержке PKINIT:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgid "Join an IPA domain" +msgstr "Присоединиться к домену IPA." -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" -"\n" -"Параметры команды pkinit Kerberos\n" -"\n" -"Включить или отключить использование \"анонимного пользователя\" для пре-" -"аутентификации с помощью сертификатов (pkinit) путём использования учётной " -"записи WELLKNOWN/ANONYMOUS@REALM. Сервер должен быть установлен с " -"поддержкой pkinit.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Включить использование \"анонимного пользователя\" для pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Включить использование \"анонимного пользователя\" для pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"Более подробные сведения об использовании \"анонимного пользователя\" для " -"pkinit:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgid "The hostname to register as" +msgstr "Имя узла для регистрации" + +msgid "The IPA realm" +msgstr "Область (realm) IPA" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Аппаратная платформа узла (например, Lenovo T61)" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Операционная система и версия узла (например, Fedora 9)" msgid "" "\n" @@ -7478,533 +4963,32 @@ msgstr "" " Изменить политику для пользователя \"admin\":\n" " ipa krbtpolicy-mod admin --maxlife=3600\n" -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" -"\n" -"Состояние блокировки учётной записи пользователя.\n" -"\n" -" Учётная запись может быть заблокирована, если в течение определённого " -"периода времени слишком большое количество раз был введён неверный пароль " -"(соответствующие ограничения регулируются политикой паролей). Запись " -"блокируется временно, она может быть разблокирована администратором.\n" -"\n" -" Эта программа соединяется с каждым главным IPA-сервером и показывает " -"состояние блокировки на каждом из них.\n" -"\n" -" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " -"потребуется сравнить количество неудачных попыток входа и время последней " -"неудачной попытки с эталонными значениями. Для блокировки учётной записи " -"количество неудачных попыток входа должно превысить значение maxfail в " -"течение временного интервала failinterval в соответствии с политикой " -"паролей, связанной с пользователем.\n" -"\n" -" Счётчик неудачных попыток изменяется только тогда, когда пользователь " -"выполняет попытку войти, поэтому учётная запись может казаться " -"заблокированной, но время, прошедшее с последней неудачной попытки входа, " -"превышает время блокировки (lockouttime), установленное политикой паролей. " -"Это означает, что пользователь может войти в систему снова.\n" -" " +msgid "User name" +msgstr "Имя пользователя" -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" -"\n" -"Управление правилами CA ACL.\n" -"\n" -"Этот подключаемый модуль используется для определения правил, которые " -"управляют тем, какие службы сертификации и профили можно использовать для " -"выдачи сертификатов конкретным учётным записям или группам учётных записей.\n" -"\n" -"ОБЛАСТЬ ДЕЙСТВИЯ УЧЁТНОЙ ЗАПИСИ СУБЪЕКТА:\n" -"\n" -"Чтобы разрешить запрос сертификата, учётная запись (записи), которая " -"является субъектом запроса сертификата (это не обязательно должна быть та " -"учётная запись, которая фактически запрашивает сертификат), должна быть " -"включена в область действия ACL службы сертификации, которая также включает " -"целевые службу сертификации и профиль.\n" -"\n" -"Пользователей можно включить по имени, группе или категорией \"все " -"пользователи\". Узлы можно включить по имени, группе узлов или категорией " -"\"все узлы\". Службы можно включить по имени службы или категорией \"все " -"службы\". ACL служб сертификации могут быть связаны с одним типом учётных " -"записей или с несколькими типами.\n" -"\n" -"ОБЛАСТЬ ДЕЙСТВИЯ СЛУЖБЫ СЕРТИФИКАЦИИ:\n" -"\n" -"ACL службы сертификации может быть связана с одной или несколькими службами " -"сертификации по имени или по категории \"все CA\". По соображениям " -"совместимости ACL службы сертификации без привязки к службе сертификации " -"считается связанной со службой сертификации \"ipa\" (и только с этой службой " -"сертификации).\n" -"\n" -"ОБЛАСТЬ ДЕЙСТВИЯ ПРОФИЛЯ:\n" -"\n" -"ACL службы сертификации может быть связана с одним или несколькими профилями " -"по идентификатору профиля. Идентификатор профиля — это строка без пробелов и " -"знаков препинания, она начинается с буквы, за которой следуют другие буквы, " -"цифры или символы подчёркивания (\"_\").\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать ACL службы сертификации \"test\", которая предоставляет всем " -"пользователям доступ к профилю \"UserCert\":\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Показать свойства именованной ACL службы сертификации:\n" -" ipa caacl-show test\n" -"\n" -" Создать ACL службы сертификации, чтобы разрешить пользователю \"alice\" " -"использовать профиль \"DNP3\":\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Отключить ACL службы сертификации:\n" -" ipa caacl-disable test\n" -"\n" -" Удалить ACL службы сертификации:\n" -" ipa caacl-del test\n" +msgid "Manage ticket policy for specific user" +msgstr "Управление политикой билетов для определённого пользователя" -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" -"\n" -"Управление правилами CA ACL.\n" -"\n" -"Этот подключаемый модуль используется для определения правил, которые " -"управляют тем, для каких учётных записей разрешено выдавать сертификаты с " -"помощью конкретного профиля сертификатов.\n" -"\n" -"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" -"\n" -"Идентификатор профиля — это строка без пробелов и знаков препинания, она " -"начинается с буквы, за которой следуют другие буквы, цифры или символы " -"подчёркивания (\"_\").\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать ACL службы сертификации \"test\", которая предоставляет всем " -"пользователям доступ к профилю \"UserCert\":\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Показать свойства именованной ACL службы сертификации:\n" -" ipa caacl-show test\n" -"\n" -" Создать ACL службы сертификации, чтобы разрешить пользователю \"alice\" " -"использовать профиль \"DNP3\":\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Отключить ACL службы сертификации:\n" -" ipa caacl-disable test\n" -"\n" -" Удалить ACL службы сертификации:\n" -" ipa caacl-del test\n" +msgid "Max life" +msgstr "Максимальный срок жизни" -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" -"\n" -"Управление службами сертификации\n" +msgid "Maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" -"\n" -"Управление конфигурацией и правилами сопоставления сертификатов с записями " -"пользователей.\n" +msgid "Max renew" +msgstr "Максимальный срок для обновления" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" -"\n" -"Управление профилями сертификатов\n" -"\n" -"Профили сертификатов используются центром сертификации (Certificate " -"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " -"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " -"если это так, определить, какие возможности и расширения будут предоставлены " -"сертификатом.\n" -"\n" -"Формат профиля сертификатов — это формат в виде списка свойств, который " -"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" -"\n" -"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" -"\n" -"Идентификатор профиля — это строка без пробелов и знаков препинания, она " -"начинается с буквы, за которой следуют другие буквы, цифры или символы " -"подчёркивания (\"_\").\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Удалить профиль сертификатов:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показать сведения о профиле:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Сохранить конфигурацию профиля в файл:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Поиск профилей, в которых не хранятся сертификаты:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" -"\n" -"Формат конфигурации профиля — это формат в виде необработанного списка " -"свойств, который используется системой сертификации Dogtag Certificate " -"System. Поддержка формата XML не предусмотрена.\n" -"\n" -"К профилям под управлением IPA применяются следующие ограничения:\n" -"\n" -"- При импорте профиля значение поля \"profileId\", если это поле имеется, " -"должно совпадать с идентификатором, указанным в командной строке.\n" -"\n" -"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" -"\n" -"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" -"\n" -"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " -"\"certOutputImpl\".\n" +msgid "Maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" -"\n" -"Управление профилями сертификатов\n" -"\n" -"Профили сертификатов используются центром сертификации (Certificate " -"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " -"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " -"если это так, определить, какие возможности и расширения будут предоставлены " -"сертификатом.\n" -"\n" -"Формат профиля сертификатов — это формат в виде списка свойств, который " -"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" -"\n" -"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" -"\n" -"Идентификатор профиля — это строка без пробелов и знаков препинания, она " -"начинается с буквы, за которой следуют другие буквы, цифры или символы " -"подчёркивания (\"_\").\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" -" ipa certprofile-import ShortLivedUserCert\n" -" --file UserCert.profile --desc \"User Certificates\"\n" -" --store=false\n" -"\n" -" Удалить профиль сертификатов:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показать сведения о профиле:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Сохранить конфигурацию профиля в файл:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Поиск профилей, в которых не хранятся сертификаты:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" -"\n" -"Формат конфигурации профиля — это формат в виде необработанного списка " -"свойств, который используется системой сертификации Dogtag Certificate " -"System. Поддержка формата XML не предусмотрена.\n" -"\n" -"К профилям под управлением IPA применяются следующие ограничения:\n" -"\n" -"- При импорте профиля значение поля \"profileId\", если это поле имеется, " -"должно совпадать с идентификатором, указанным в командной строке.\n" -"\n" -"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" -"\n" -"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" -"\n" -"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " -"\"certOutputImpl\".\n" +msgid "Modify Kerberos ticket policy." +msgstr "Изменить политику билетов Kerberos." -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" -"\n" -"Управление записями зон и ресурсов DNS.\n" +msgid "Reset Kerberos ticket policy to the default values." +msgstr "Восстановить значения политики билетов Kerberos по умолчанию." -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Управление токенами OTP.\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Управление прокси-серверами RADIUS.\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Управление токенами YubiKey.\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Управление хранилищами.\n" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"Управляемые разрешения\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Управлять расположениями DNS\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Управлять конфигурацией DNS-сервера\n" +msgid "Display the current Kerberos ticket policy." +msgstr "Показать текущую политику билетов Kerberos." msgid "" "\n" @@ -8194,199 +5178,138 @@ msgstr "" "записи будет добавляться собственная запись, а также отчёт по каждому " "обновлению группы пользователей по умолчанию.\n" -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" +msgid "Migrate users and groups from DS to IPA." +msgstr "Перенести данные пользователей и групп из DS в IPA" + +msgid "LDAP URI" +msgstr "URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "URI LDAP сервера DS, с которого будет осуществляться миграция" + +msgid "bind password" +msgstr "Привязка пароля " + +msgid "Bind DN" +msgstr "Привязка DN" + +msgid "User container" +msgstr "Контейнер пользователей" + +msgid "DN of container for users in DS relative to base DN" +msgstr "DN контейнера для пользователей в DS относительно базового DN" + +msgid "Group container" +msgstr "Контейнер групп" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "DN контейнера для групп в DS относительно базового DN" + +msgid "User object class" +msgstr "Класс объекта пользователя" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "Классы объектов, использованные для поиска записей пользователей в DS" + +msgid "Group object class" +msgstr "Класс объектов группы" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "Классы объектов, использованные для поиска записей групп в DS" + +msgid "Ignore user object class" +msgstr "Игнорировать класс объектов пользователя" + +msgid "Objectclasses to be ignored for user entries in DS" msgstr "" -"\n" -"Переход на IPA\n" -"\n" -"Перенос пользователей и групп с LDAP-сервера на IPA.\n" -"\n" -"Посылает запрос LDAP к удалённому серверу с целью поиска пользователей и " -"групп в контейнере. Чтобы перенести пароли, следует выполнить привязку к " -"серверу от имени пользователя, который может читать атрибут userPassword на " -"удалённом сервере. Перечень таких пользователей обычно ограничен " -"администраторами высшего уровня, в частности cn=Directory Manager на 389-ds " -"(пользователь bind по умолчанию).\n" -"\n" -"Контейнер пользователей по умолчанию: ou=People.\n" -"\n" -"Контейнер групп по умолчанию: ou=Groups.\n" -"\n" -"Записи пользователей и групп, которые уже существуют на IPA-сервере, будут " -"пропущены.\n" -"\n" -"Две схемы LDAP определяют, как хранятся записи участников группы: RFC2307 и\n" -"RFC2307bis. RFC2307bis использует атрибуты member и uniquemember для " -"определения участников группы, а RFC2307 использует атрибут memberUid. По " -"умолчанию используется схема RFC2307bis.\n" -"\n" -"С помощью приложения compat IPA можно повторно форматировать данные для " -"систем, в которых не предусмотрена поддержка RFC2307bis. Рекомендуется " -"отключать это приложение во время переноса, чтобы уменьшить нагрузку на " -"систему. Его можно включить снова после переноса. Чтобы перенести данные с " -"включённым приложением, используйте параметр \"--with-compat\".\n" -"\n" -"У перенесённых пользователей нет учётных данных Kerberos, только пароль " -"LDAP. Для завершения процесса переноса пользователям следует открыть " -"страницу http://ipa.example.com/ipa/migration и пройти аутентификацию с " -"помощью пароля LDAP, чтобы создать свои записи учётных данных Kerberos.\n" -"\n" -"По умолчанию перенос отключён. Чтобы включить его, используйте команду ipa " -"config-mod:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Если базовое DN не будет предоставлено с помощью --basedn, IPA будет " -"использовать значение defaultNamingContext, если оно установлено, или первое " -"значение в наборе namingContexts в корневой папке удалённого LDAP-сервера.\n" -"\n" -"Записи пользователей добавляются в группу пользователей по умолчанию. " -"Процесс такого добавления может быть довольно длительным, поэтому при " -"переносе он выполняется в пакетном режиме, пакетами по 100 пользователей. В " -"результате возникнет определённый период, когда записи пользователей уже " -"добавлены в IPA, но эти пользователи ещё не стали участниками группы " -"пользователей по умолчанию.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"Простейший перенос, приняты все значения по умолчанию:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -"Определение контейнеров пользователей и групп. Можно использовать для " -"переноса данных пользователей и групп с сервера IPA версии 1:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" -" --group-container='cn=groups,cn=accounts'\n" -" ldap://ds.example.com:389\n" -"\n" -"Так как на сервере IPA версии 2 уже предусмотрены предопределённые группы, " -"которые могут совпадать с перенесёнными с сервера (IPA версии 1) группами " -"(например, admins, ipausers), пользователи из таких групп могут быть " -"перенесены в неизвестную группу (unknown) на новом сервере IPA версии 2.\n" -"Используйте параметр --group-overwrite-gid, чтобы перезаписать идентификатор " -"группы (GID) уже созданных групп и предотвратить эту проблему:\n" -" ipa migrate-ds --group-overwrite-gi\n" -" --user-container='cn=users,cn=accounts'\n" -" --group-container='cn=groups,cn=accounts'\n" -" ldap://ds.example.com:389\n" -"\n" -"Перенесённые данные пользователей и групп могут содержать классы объектов и " -"сопутствующие атрибуты, неизвестные серверу IPA версии 2. Эти классы " -"объектов и атрибуты можно исключить из процедуры переноса данных:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" -" --group-container='cn=groups,cn=accounts'\n" -" --user-ignore-objectclass=radiusprofile\n" -" --user-ignore-attribute=radiusgroupname\n" -" ldap://ds.example.com:389\n" -"\n" -"ВЕДЕНИЕ ЖУРНАЛА\n" -"\n" -"Во время переноса предупреждения и сообщения об ошибках будут добавляться в " -"журнал ошибок Apache. После завершения переноса следует ознакомиться с " -"соответствующим файлом, чтобы исправить или выяснить причины ошибок, которые " -"могли произойти. \n" -"\n" -"Для каждого пакета из 100 перенесённых записей пользователей будет показано " -"информационное сообщение, предназначенное для оценки прогресса обработки и " -"определения её продолжительности. \n" -"\n" -"Если определён уровень ведения журнала debug путём установления debug = True " -"в /etc/ipa/default.conf или в /etc/ipa/server.conf, для каждой перенесённой " -"записи будет добавляться собственная запись, а также отчёт по каждому " -"обновлению группы пользователей по умолчанию.\n" +"Классы объектов, которые следует игнорировать для записей пользователей в DS" + +msgid "Ignore user attribute" +msgstr "Игнорировать атрибут пользователя" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "Атрибуты, которые следует игнорировать для записей пользователей в DS" + +msgid "Ignore group object class" +msgstr "Игнорировать класс объектов группы" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "Классы объектов, которые следует игнорировать для записей групп в DS" + +msgid "Ignore group attribute" +msgstr "Игнорировать атрибут группы" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "Атрибуты, которые следует игнорировать для записей групп в DS" + +msgid "Overwrite GID" +msgstr "Перезаписать GID" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" +"При переносе группы, которая уже существует в домене IPA, перезаписать GID " +"группы и сообщить об успешном выполнении" + +msgid "LDAP schema" +msgstr "Схема LDAP" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"Схема, используемая на LDAP-сервере. Поддерживаются значения RFC2307 и " +"RFC2307bis. Значение по умолчанию: RFC2307bis." + +msgid "Continue" +msgstr "Продолжить" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" +"Непрерывный режим работы. Сообщения об ошибках выводятся, но процесс " +"продолжается." + +msgid "Base DN" +msgstr "Базовое DN" + +msgid "Base DN on remote LDAP server" +msgstr "Базовое DN на удалённом LDAP-сервере" + +msgid "Ignore compat plugin" +msgstr "Игнорировать подключаемый модуль совместимости" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" +"Разрешает миграцию несмотря на использование подключаемого модуля " +"совместимости" + +msgid "CA certificate" +msgstr "Сертификат CA" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Загрузить сертификат CA LDAP-сервера из ФАЙЛА" + +msgid "groups to exclude from migration" +msgstr "группы, которые следует исключить из миграции" + +msgid "users to exclude from migration" +msgstr "пользователи, которых следует исключить из миграции" + +msgid "Lists of objects migrated; categorized by type." +msgstr "Список перенесённых объектов; упорядочены по типу" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "Список объектов, которые не удалось перенести; упорядочены по типу" + +msgid "False if migration mode was disabled." +msgstr "Значение \"False\", если режим миграции отключён." + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" +"Значение \"False\", если миграцию не удалось выполнить из-за включённого " +"подключаемого модуля совместимости." msgid "" "\n" @@ -8395,61 +5318,35 @@ msgstr "" "\n" "Прочие подключаемые модули\n" -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Изменить диапазон идентификаторов.\n" -" \n" -"======= \n" -"ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -"=======" +msgid "Show environment variables." +msgstr "Показать переменные окружения." + +msgid "Forward to server instead of running locally" +msgstr "Перенаправить на сервер вместо локального выполнения" msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " +"retrieve and print all attributes from the server. Affects command output." msgstr "" -"\n" -"Изменить отношение доверия (для будущего использования).\n" -"\n" -" В текущей версии для изменения атрибутов LDAP доступен только параметр " -"по умолчанию. В последующих версиях будут добавлены более специфичные " -"параметры.\n" -" " +"Получить и вывести все атрибуты, возвращаемые сервером. Влияет на содержимое " +"результата исполнения команды." + +msgid "Dictionary mapping variable name to value" +msgstr "Словарь, сопоставляющий имя переменной со значением" + +msgid "Total number of variables env (>= count)" +msgstr "Количество переменных env (>= count)" + +msgid "Number of variables returned (<= total)" +msgstr "Количество возвращённых переменных (<= total)" + +msgid "Show all loaded plugins." +msgstr "Показать все загруженные подключаемые модули." + +msgid "Dictionary mapping plugin names to bases" +msgstr "Словарь, сопоставляющий имена подключаемых модулей с базовыми" + +msgid "Number of plugins loaded" +msgstr "Количество загруженных подключаемых модулей" msgid "" "\n" @@ -8498,125 +5395,108 @@ msgstr "" " Удалить сетевую группу:\n" " ipa netgroup-del admins\n" -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" -"\n" -"Сетевые группы\n" -"\n" -"Сетевая группа — это группа, которая используется для проверки разрешений. " -"Она может содержать как значения пользователей, так и значения узлов.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую сетевую группу:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Добавить участников в сетевую группу:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -"Удалить участника из сетевой группы:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -"Показать сведения о сетевой группе:\n" -" ipa netgroup-show admins\n" -"\n" -" Удалить сетевую группу:\n" -" ipa netgroup-del admins\n" +msgid "Netgroup name" +msgstr "Имя сетевой группы" -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" -"\n" -"Обратите внимание, что код причины 7 не используется. Подробные сведения в " -"RFC 5280:\n" +msgid "Netgroup description" +msgstr "Описание сетевой группы" -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"Обратите внимание на разницу между атрибутами и записями. Разрешения " -"являются независимыми, поэтому возможность добавить пользователя не означает " -"возможность изменять запись добавленного пользователя.\n" +msgid "NIS domain name" +msgstr "Имя домена NIS" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Токены OTP\n" +msgid "IPA unique ID" +msgstr "Уникальный ID IPA" -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "Member netgroups" +msgstr "Сетевые группы — участники" + +msgid "Indirect Member netgroups" +msgstr "Сетевые группы с непрямым участием" + +msgid "Member User" +msgstr "Пользователь-участник" + +msgid "Member Group" +msgstr "Группа-участник" + +msgid "Member Host" +msgstr "Узел-участник" + +msgid "Member Hostgroup" +msgstr "Группа узлов — участник" + +msgid "Add a new netgroup." +msgstr "Добавить новую сетевую группу." + +msgid "Add members to a netgroup." +msgstr "Добавить участников в сетевую группу." + +msgid "member netgroup" +msgstr "сетевая группа — участник" + +msgid "netgroups to add" +msgstr "сетевые группы, которые следует добавить" + +msgid "Delete a netgroup." +msgstr "Удалить сетевую группу." + +msgid "Search for a netgroup." +msgstr "Поиск сетевой группы." + +msgid "search for managed groups" +msgstr "Поиск управляемых групп" + +msgid "Search for netgroups with these member netgroups." +msgstr "Поиск сетевых групп с этими сетевыми группами — участниками." + +msgid "Search for netgroups without these member netgroups." +msgstr "Поиск сетевых групп без этих сетевых групп — участников." + +msgid "Search for netgroups with these member users." +msgstr "Поиск сетевых групп с этими пользователями-участниками." + +msgid "Search for netgroups without these member users." +msgstr "Поиск сетевых групп без этих пользователей-участников." + +msgid "group" +msgstr "группа" + +msgid "Search for netgroups with these member groups." +msgstr "Поиск сетевых групп с этими группами-участниками." + +msgid "Search for netgroups without these member groups." +msgstr "Поиск сетевых групп без этих групп-участников." + +msgid "Search for netgroups with these member hosts." +msgstr "Поиск сетевых групп с этими узлами-участниками." + +msgid "Search for netgroups without these member hosts." +msgstr "Поиск сетевых групп без этих узлов-участников." + +msgid "Search for netgroups with these member host groups." +msgstr "Поиск сетевых групп с этими группами узлов — участниками." + +msgid "Search for netgroups without these member host groups." +msgstr "Поиск сетевых групп без этих групп узлов — участников." + +msgid "Search for netgroups with these member of netgroups." +msgstr "Поиск сетевых групп, которые являются участниками этой сетевой группы." + +msgid "Search for netgroups without these member of netgroups." msgstr "" -"\n" -"Токены OTP\n" -"\n" -"Управление токенами OTP.\n" -"\n" -"В IPA реализована поддержка использования токенов OTP для многофакторной " -"аутентификации. Этот код позволяет управлять токенами OTP.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новый токен:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Проверить токен:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Изменить поставщика:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Удалить токен:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +"Поиск сетевых групп, которые не являются участниками этой сетевой группы." + +msgid "Modify a netgroup." +msgstr "Изменить сетевую группу." + +msgid "Remove members from a netgroup." +msgstr "Удалить участников из сетевой группы." + +msgid "netgroups to remove" +msgstr "сетевые группы, которые следует удалить" + +msgid "Display information about a netgroup." +msgstr "Показать сведения о сетевой группе." msgid "" "\n" @@ -8672,211 +5552,115 @@ msgstr "" " Изменить максимальную продолжительность окна HOTP-синхронизации на 50:\n" " ipa hotpconfig-mod --hotp-sync-window=50\n" -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" -"\n" -"Политика паролей\n" -"\n" -"Политика паролей устанавливает ограничения для паролей IPA, включая " -"максимальный срок действия, минимальный срок действия, количество паролей " -"для сохранения в журнале, количество требуемых классов символов (для более " -"надёжных паролей) и минимальную длину пароля.\n" -"\n" -"По умолчанию имеется одна, глобальная политика для всех пользователей. Также " -"можно создать политику паролей для применения к группе. К каждому " -"пользователю применяется только одна политика паролей: групповая или " -"глобальная. Групповая политика автономна, она не является супермножеством " -"глобальной политики в сочетании с пользовательскими настройками.\n" -"\n" -"Для каждой групповой политики паролей должно быть установлено уникальное " -"значение приоритета. Если пользователь находится в нескольких группах, для " -"которых имеются политики паролей, этот приоритет определит, какая политика " -"паролей применяется. Чем меньше значение, тем выше приоритет политики.\n" -"\n" -"Групповые политики паролей автоматически удаляются, когда удаляются группы, " -"с которыми они связаны.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Изменить глобальную политику:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -"Добавить новую групповую политику паролей:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Показать глобальную политику паролей:\n" -" ipa pwpolicy-show\n" -"\n" -" Показать групповую политику паролей:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Показать политику, которая применяется к указанному пользователю:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Изменить групповую политику паролей:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgid "TOTP authentication Window" +msgstr "Окно TOTP-аутентификации" + +msgid "TOTP authentication time variance (seconds)" +msgstr "Отклонение по времени TOTP-аутентификации (в секундах)" + +msgid "TOTP Synchronization Window" +msgstr "Окно TOTP-синхронизации" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "Отклонение по времени TOTP-синхронизации (в секундах)" + +msgid "HOTP Authentication Window" +msgstr "Окно HOTP-аутентификации" + +msgid "HOTP authentication skip-ahead" +msgstr "Пропустить HOTP-аутентификацию и перейти далее" + +msgid "HOTP Synchronization Window" +msgstr "Окно HOTP-синхронизации" + +msgid "HOTP synchronization skip-ahead" +msgstr "Пропустить HOTP-синхронизацию и перейти далее" + +msgid "Modify OTP configuration options." +msgstr "Изменить параметры конфигурации OTP." + +msgid "Show the current OTP configuration." +msgstr "Показать текущую конфигурацию OTP." msgid "" "\n" -"Permissions\n" -msgstr "" +"YubiKey Tokens\n" "\n" -"Разрешения\n" - -msgid "" +"Manage YubiKey tokens.\n" "\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" "\n" "EXAMPLES:\n" "\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" msgstr "" "\n" -"Разрешения\n" +"Токены YubiKey\n" "\n" -"С помощью разрешений можно очень точно делегировать права доступа. " -"Разрешение представляет собой удобную для восприятия форму 389-ds ACI " -"(правила управления доступом).\n" -"Разрешение даёт право выполнять определённую задачу, например, добавлять " -"пользователей, изменять группы и так далее.\n" +"Управление токенами YubiKey.\n" "\n" -"Разрешение не может содержать другие разрешения.\n" -"\n" -"* Разрешение даёт доступ для чтения, записи, добавления или удаления.\n" -"* Привилегия объединяет схожие разрешения (например, все разрешения, которые " -"требуются для добавления пользователя).\n" -"* Роль даёт набор привилегий пользователям, группам, узлам или группам " -"узлов.\n" -"\n" -"Разрешение состоит из нескольких разных частей:\n" -"\n" -"1. Имя разрешения.\n" -"2. Цель разрешения.\n" -"3. Права, предоставленные разрешением.\n" -"\n" -"Права определяют, какие действия разрешены. Варианты прав (права могут " -"сочетать в себе несколько вариантов):\n" -"1. write - записать один или несколько атрибутов.\n" -"2. read - прочитать один или несколько атрибутов.\n" -"3. add - добавить в дерево новую запись.\n" -"4. delete - удалить существующую запись.\n" -"5. all - предоставляются все разрешения.\n" -"\n" -"По умолчанию доступ для чтения разрешён для большинства атрибутов, поэтому " -"потребность в использовании этого разрешения вряд ли будет возникать часто.\n" -"\n" -"Обратите внимание на разницу между атрибутами и записями. Разрешения " -"являются независимыми, поэтому возможность добавить пользователя не означает " -"возможность изменять запись добавленного пользователя.\n" -"\n" -"Существует ряд разрешённых целей:\n" -"1. type: тип объекта (пользователь, группа и так далее).\n" -"2. memberof: участник группы или группы узлов.\n" -"3. filter: фильтр LDAP.\n" -"4. subtree: фильтр LDAP, определяющий часть LDAP DIT. Это супермножество " -"цели \"type\".\n" -"5. targetgroup: предоставление доступа для изменения определённой группы " -"(например, предоставление прав доступа для управления участием в группе).\n" +"Этот код является расширением подключаемого модуля otptoken и предоставляет " +"поддержку прямого чтения или записи токенов YubiKey.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Добавить разрешение на создание пользователей:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +" Добавить новый токен:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" + +msgid "" "\n" -" Добавить разрешение на управление участием в группе:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" +"\n" +"Установка пароля пользователя\n" +"\n" +"Если пароль пользователя изменяет кто-то кроме самого пользователя " +"(например, его сбрасывает служба технической поддержки), пароль потребуется " +"изменить при первом использовании. Это делается для того, чтобы пароль знал " +"только конечный пользователь.\n" +"\n" +"Политика паролей IPA управляет частотой смены пароля, требованиями к " +"надёжности пароля и размером журнала паролей.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Чтобы сбросить свой собственный пароль:\n" +" ipa passwd\n" +"\n" +" Чтобы изменить пароль другого пользователя:\n" +" ipa passwd tuser1\n" + +msgid "Set a user's password." +msgstr "Установить пароль пользователя." + +msgid "New Password" +msgstr "Новый пароль" + +msgid "Current Password" +msgstr "Текущий пароль" + +msgid "OTP" +msgstr "OTP" + +msgid "One Time Password" +msgstr "Одноразовый пароль" msgid "" "\n" @@ -9020,17 +5804,140 @@ msgstr "" " ipa permission-add --attrs=member --permissions=write --type=group " "\"Manage Group Members\"\n" -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" +msgid "Permission name" +msgstr "Имя разрешения" + +msgid "Granted rights" +msgstr "Предоставленные права" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" msgstr "" -"\n" -"Разрешения, которые по умолчанию поставляются с IPA, можно называть " -"\"управляемыми\". Имеется заданный по умолчанию набор атрибутов, к которым " -"они применяются, но администратор может добавлять в набор или удалять из " -"него отдельные атрибуты.\n" +"Права, которые следует предоставить (read, search, compare, write, add, " +"delete, all)" + +msgid "Effective attributes" +msgstr "Действующие атрибуты" + +msgid "All attributes to which the permission applies" +msgstr "Все атрибуты, к которым применяется разрешение" + +msgid "Included attributes" +msgstr "Включённые атрибуты" + +msgid "User-specified attributes to which the permission applies" +msgstr "Определённые пользователем атрибуты, к которым применяется разрешение" + +msgid "Excluded attributes" +msgstr "Исключённые атрибуты" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" +"Определённые пользователем атрибуты, к которым явно не применяется разрешение" + +msgid "Default attributes" +msgstr "Атрибуты по умолчанию" + +msgid "Attributes to which the permission applies by default" +msgstr "Атрибуты, к которым по умолчанию применяется разрешение" + +msgid "Bind rule type" +msgstr "Тип правила привязки" + +msgid "Subtree to apply permissions to" +msgstr "Поддерево, к которому следует применить разрешения" + +msgid "Extra target filter" +msgstr "Дополнительный фильтр целей" + +msgid "Raw target filter" +msgstr "Необработанный фильтр целей" + +msgid "All target filters, including those implied by type and memberof" +msgstr "Все фильтры целей, включая те, которые применяются по type и memberof" + +msgid "Target DN" +msgstr "DN цели" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" +"Дополнительное DN, к которому следует применить разрешение (должно " +"находиться в поддереве, но может ещё не существовать)" + +msgid "Member of group" +msgstr "Участник группы" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "Целевые участники группы (устанавливает фильтр целей memberOf)" + +msgid "User group to apply permissions to (sets target)" +msgstr "" +"Группа пользователей, к которой следует применить разрешения (устанавливает " +"target)" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "Тип объекта IPA (устанавливает фильтр целей subtree и objectClass)" + +msgid "Deprecated; use extratargetfilter" +msgstr "Больше не поддерживается; используйте extratargetfilter" + +msgid "Deprecated; use ipapermlocation" +msgstr "Больше не поддерживается; используйте ipapermlocation" + +msgid "Deprecated; use ipapermright" +msgstr "Больше не поддерживается; используйте ipapermright" + +msgid "Granted to Privilege" +msgstr "Предоставлена привилегия" + +msgid "Indirect Member of roles" +msgstr "Участник ролей с непрямым участием" + +msgid "Add a new permission." +msgstr "Добавить новое разрешение." + +msgid "Add members to a permission." +msgstr "Добавить участников в разрешение." + +msgid "member privilege" +msgstr "привилегия участника" + +msgid "privileges to add" +msgstr "привилегии, которые следует добавить" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" +"Добавить разрешение на доступ к системе без использования ACI (внутренняя " +"команда)." + +msgid "Permission flags" +msgstr "Флаги разрешения" + +msgid "Delete a permission." +msgstr "Удалить разрешение." + +msgid "force delete of SYSTEM permissions" +msgstr "Принудительно удалить разрешения SYSTEM" + +msgid "Search for permissions." +msgstr "Поиск разрешений." + +msgid "Modify a permission." +msgstr "Изменить разрешение." + +msgid "Rename the permission object" +msgstr "Переименовать объект разрешения" + +msgid "Remove members from a permission." +msgstr "Удалить участников из разрешения." + +msgid "privileges to remove" +msgstr "привилегии, которые следует удалить" + +msgid "Display information about a permission." +msgstr "Показать сведения о разрешении." msgid "" "\n" @@ -9087,196 +5994,54 @@ msgstr "" " IPA server version 2.1.9. API version 2.20\n" " -----------------------------------------------------\n" +msgid "Ping a remote server." +msgstr "Проверить связь с удалённым сервером." + msgid "" "\n" -"Ping the remote IPA server to ensure it is running.\n" +"Kerberos pkinit options\n" "\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" "\n" "EXAMPLES:\n" "\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" "\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" msgstr "" "\n" -"Проверить связь с удалённым IPA-сервером, чтобы убедиться, что он работает.\n" +"Параметры команды pkinit Kerberos\n" "\n" -"Команда ping отправляет эхо-запрос на IPA-сервер. Сервер возвращает сведения " -"о своей версии. Эти данные используются клиентом IPA для подтверждения того, " -"что сервер доступен и принимает запросы.\n" -"\n" -"Сервер из xmlrpc_uri in /etc/ipa/default.conf проверяется первым.\n" -"Если он не отвечает, клиент пытается установить связь с любым сервером, " -"указанным в записях SRV ldap в DNS.\n" +"Включить или отключить использование \"анонимного пользователя\" для пре-" +"аутентификации с помощью сертификатов (pkinit) путём использования учётной " +"записи WELLKNOWN/ANONYMOUS@REALM. Сервер должен быть установлен с " +"поддержкой pkinit.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Проверить связь с IPA-сервером:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" +" Включить использование \"анонимного пользователя\" для pkinit:\n" +" ipa pkinit-anonymous enable\n" "\n" -" Проверить связь с IPA-сервером и получить подробные данные:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" +" Включить использование \"анонимного пользователя\" для pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"Более подробные сведения об использовании \"анонимного пользователя\" для " +"pkinit:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" +msgid "Enable or Disable Anonymous PKINIT." msgstr "" -"\n" -"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " -"удалённого вызова процедур \n" -"\n" -"Чтобы запустить этот код на легком сервере (lite-server), выполните " -"следующие команды:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"где содержимое файла batch_request.json соответствует следующему примеру\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " -"уровне:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далее находится вложенный ответ для каждого метода команды IPA, " -"отправленного в запросе\n" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" -"\n" -"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " -"удалённого вызова процедур \n" -"\n" -"Чтобы запустить этот код на легком сервере (lite-server), выполните " -"следующие команды:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"где содержимое файла batch_request.json соответствует следующему примеру\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " -"уровне:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далее находится вложенный ответ для каждого метода команды IPA, " -"отправленного в запросе\n" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" -"\n" -"Интерфейс командной строки не позволяет получить прямой доступ к " -"подключаемым модулям, команды используются для внутренней обработки\n" +"Включить или отключить использование \"анонимного пользователя\" для пре-" +"аутентификации (PKINIT)." msgid "" "\n" @@ -9319,19 +6084,237 @@ msgstr "" "\n" "Дополнительные сведения доступны в разделах справки о ролях и разрешениях.\n" -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"Предоставляет возможности самоанализа API.\n" +msgid "Privilege name" +msgstr "Имя привилегии" + +msgid "Privilege description" +msgstr "Описание привилегии" + +msgid "Granting privilege to roles" +msgstr "Предоставление привилегий ролям" + +msgid "Add a new privilege." +msgstr "Добавить новую привилегию." + +msgid "Add members to a privilege." +msgstr "Добавить участников в привилегию." + +msgid "member role" +msgstr "роль участника" + +msgid "roles to add" +msgstr "роли, которые следует добавить" + +msgid "Add permissions to a privilege." +msgstr "Добавить разрешения в привилегию." + +msgid "permission" +msgstr "Разрешение" + +msgid "permissions" +msgstr "Разрешения" + +msgid "Number of permissions added" +msgstr "Количество добавленных разрешений" + +msgid "Delete a privilege." +msgstr "Удалить привилегию." + +msgid "Search for privileges." +msgstr "Поиск привилегий." + +msgid "Modify a privilege." +msgstr "Изменить привилегию." + +msgid "Rename the privilege object" +msgstr "Переименовать объект привилегии" + +msgid "Remove members from a privilege" +msgstr "Удалить участников из привилегии." + +msgid "roles to remove" +msgstr "роли, которые следует удалить" + +msgid "Remove permissions from a privilege." +msgstr "Удалить разрешения из привилегии." + +msgid "Number of permissions removed" +msgstr "Количество удалённых разрешений" + +msgid "Display information about a privilege." +msgstr "Показать сведения о привилегии." msgid "" "\n" -"RADIUS Proxy Servers\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" "\n" -"Прокси-серверы RADIUS\n" +"Политика паролей\n" +"\n" +"Политика паролей устанавливает ограничения для паролей IPA, включая " +"максимальный срок действия, минимальный срок действия, количество паролей " +"для сохранения в журнале, количество требуемых классов символов (для более " +"надёжных паролей) и минимальную длину пароля.\n" +"\n" +"По умолчанию имеется одна, глобальная политика для всех пользователей. Также " +"можно создать политику паролей для применения к группе. К каждому " +"пользователю применяется только одна политика паролей: групповая или " +"глобальная. Групповая политика автономна, она не является супермножеством " +"глобальной политики в сочетании с пользовательскими настройками.\n" +"\n" +"Для каждой групповой политики паролей должно быть установлено уникальное " +"значение приоритета. Если пользователь находится в нескольких группах, для " +"которых имеются политики паролей, этот приоритет определит, какая политика " +"паролей применяется. Чем меньше значение, тем выше приоритет политики.\n" +"\n" +"Групповые политики паролей автоматически удаляются, когда удаляются группы, " +"с которыми они связаны.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Изменить глобальную политику:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +"Добавить новую групповую политику паролей:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Показать глобальную политику паролей:\n" +" ipa pwpolicy-show\n" +"\n" +" Показать групповую политику паролей:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Показать политику, которая применяется к указанному пользователю:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Изменить групповую политику паролей:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" + +msgid "Group" +msgstr "Группа" + +msgid "Manage password policy for specific group" +msgstr "Управление политикой паролей для определённой группы" + +msgid "Max lifetime (days)" +msgstr "Максимальный срок действия (в днях)" + +msgid "Maximum password lifetime (in days)" +msgstr "Максимальный срок действия пароля (в днях)" + +msgid "Min lifetime (hours)" +msgstr "Минимальный срок действия (в часах)" + +msgid "Minimum password lifetime (in hours)" +msgstr "Минимальный срок действия пароля (в часах)" + +msgid "History size" +msgstr "Размер журнала " + +msgid "Password history size" +msgstr "Размер журнала паролей" + +msgid "Character classes" +msgstr "Классы символов" + +msgid "Minimum number of character classes" +msgstr "Минимальное количество классов символов" + +msgid "Min length" +msgstr "Минимальная длина" + +msgid "Minimum length of password" +msgstr "Минимальная длина пароля" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Приоритет политики (чем больше число, тем ниже приоритет)" + +msgid "Max failures" +msgstr "Максимальное количество ошибок" + +msgid "Consecutive failures before lockout" +msgstr "Количество последовательных ошибок до блокировки" + +msgid "Failure reset interval" +msgstr "Интервал сброса ошибок" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" +"Период, по истечении которого счётчик ошибок будет сброшен (в секундах)" + +msgid "Lockout duration" +msgstr "Длительность блокировки" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Период, в течение которого будет действовать блокировка (в секундах)" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"cn\")" + +msgid "Add a new group password policy." +msgstr "Добавить новую групповую политику паролей." + +msgid "Delete a group password policy." +msgstr "Удалить групповую политику паролей." + +msgid "Search for group password policies." +msgstr "Поиск групповых политик паролей." + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"group\")" + +msgid "Modify a group password policy." +msgstr "Изменить групповую политику паролей." + +msgid "Display information about password policy." +msgstr "Показать сведения о политике паролей." + +msgid "User" +msgstr "Пользователь" + +msgid "Display effective policy for a specific user" +msgstr "Показать действующую политику для определённого пользователя" msgid "" "\n" @@ -9387,38 +6370,59 @@ msgstr "" " Удалить конфигурацию:\n" " ipa radiusproxy-del MyRADIUS\n" -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"ПОВТОРНАЯ РЕГИСТРАЦИЯ\n" -"\n" -"Если узел уже когда-то был зарегистрирован и затем утратил свою конфигурацию " -"(например, была уничтожена виртуальная машина), его можно зарегистрировать " -"повторно.\n" -"\n" -"Дополнительные сведения доступны на страницах справочника по ipa-client-" -"install.\n" -"\n" -"В запись узла при необходимости можно включить данные о его расположении, " -"типе используемой операционной системы и так далее.\n" +msgid "RADIUS proxy server name" +msgstr "Имя прокси-сервера RADIUS" -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" -"\n" -"Повысить уровень домена IPA.\n" +msgid "A description of this RADIUS proxy server" +msgstr "Описание этого прокси-сервера RADIUS" + +msgid "Server" +msgstr "Сервер" + +msgid "The hostname or IP (with or without port)" +msgstr "Имя узла или IP-адрес (с портом или без порта)" + +msgid "Secret" +msgstr "Секрет" + +msgid "The secret used to encrypt data" +msgstr "Секрет, который используется для шифрования данных" + +msgid "Timeout" +msgstr "Время ожидания" + +msgid "The total timeout across all retries (in seconds)" +msgstr "Общее время ожидания для всех повторных попыток (в секундах)" + +msgid "Retries" +msgstr "Повторные попытки" + +msgid "The number of times to retry authentication" +msgstr "Количество повторных попыток аутентификации" + +msgid "User attribute" +msgstr "Атрибут пользователя" + +msgid "The username attribute on the user object" +msgstr "Атрибут имени пользователя объекта пользователя" + +msgid "Add a new RADIUS proxy server." +msgstr "Добавить новый прокси-сервер RADIUS." + +msgid "Delete a RADIUS proxy server." +msgstr "Удалить прокси-сервер RADIUS." + +msgid "Search for RADIUS proxy servers." +msgstr "Поиск прокси-серверов RADIUS." + +msgid "Modify a RADIUS proxy server." +msgstr "Изменить прокси-сервер RADIUS." + +msgid "Rename the RADIUS proxy server object" +msgstr "Переименовать объект прокси-сервера RADIUS" + +msgid "Display information about a RADIUS proxy server." +msgstr "Показать сведения о прокси-сервере RADIUS." msgid "" "\n" @@ -9461,227 +6465,23 @@ msgstr "" " Удалить домен из списка доменов области:\n" " ipa realmdomains-mod --del-domain=olddomain.com\n" -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Домены области\n" -"\n" -"Управление списком доменов, связанных с областью (realm) IPA.\n" -"\n" -"Этот список используется контроллерами доменов из других областей (realms), " -"у которых установлено отношение доверия с этой областью (realm) IPA. Им " -"необходимы сведения о том, какой запрос следует перенаправить в центр " -"распространения ключей (KDC) этой области (realm) IPA.\n" -"\n" -"При автоматическом управлении: домен автоматически добавляется в список " -"доменов области (realm) при создании новой зоны DNS под управлением IPA. То " -"же самое относится и к удалению.\n" -"\n" -"При внешнем управлении DNS: домены, которые не управляются в DNS IPA-" -"сервера, необходимо вручную добавить в список с помощью команды ipa " -"realmdomains-mod.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Показать текущий список доменов области:\n" -" ipa realmdomains-show\n" -"\n" -" Заменить список доменов области:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Добавить домен в список доменов области:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Удалить домен из списка доменов области:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgid "Domain" +msgstr "Домен" -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" -"\n" -"Удаление \"%(hostname)s\" приводит к отключению топологии в суффиксе " -"\"%(suffix)s\":\n" -"%(errors)s" +msgid "Add domain" +msgstr "Добавить домен" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" -"\n" -"Топология репликация в суффиксе \"%(suffix)s\" отключена:\n" -"%(errors)s" +msgid "Delete domain" +msgstr "Удалить домен" -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" -"\n" -"Возврат сведений о текущем прошедшем аутентификацию профиле \n" -"\n" -"Команда определения профиля возвращает сведения о том, как получить больше " -"данных о профиле, прошедшем аутентификацию для этого запроса. Данные " -"включают:\n" -"\n" -" * тип объекта\n" -" * команду для получения сведений об объекте\n" -" * аргументы и параметры, которые следует передать команде\n" -"\n" -"Сведения возвращаются в виде словаря. Ниже в качестве примера приведён вывод " -"в формате \"ключ: значение\".\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Поиск от имени пользователя IPA:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Поиск от имени пользователя из доверенного домена:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Поиск от имени узла:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Поиск от имени службы Kerberos:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" +msgid "Modify realm domains." +msgstr "Изменить домены области." -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"Права определяют, какие действия разрешены. Варианты прав (права могут " -"сочетать в себе несколько вариантов):\n" -"1. write - записать один или несколько атрибутов.\n" -"2. read - прочитать один или несколько атрибутов.\n" -"3. search - поиск по одному или нескольким атрибутам.\n" -"4. compare - сравнить один или несколько атрибутов.\n" -"5. add - добавить в дерево новую запись.\n" -"6. delete - удалить существующую запись.\n" -"7. all - предоставляются все разрешения.\n" +msgid "Force adding domain even if not in DNS" +msgstr "Принудительно добавить домен, даже если имени нет в DNS" + +msgid "Display the list of realm domains." +msgstr "Показать список доменов области." msgid "" "\n" @@ -9758,12 +6558,157 @@ msgstr "" "группы \"junioradmin\" смогут добавлять записи пользователей, сбрасывать " "пароли или добавлять пользователя в группу пользователей IPA по умолчанию.\n" +msgid "Role name" +msgstr "Имя роли" + +msgid "A description of this role-group" +msgstr "Описание группы этой роли " + +msgid "Member users" +msgstr "Пользователи-участники" + +msgid "Member groups" +msgstr "Группы-участники" + +msgid "Privileges" +msgstr "Привилегии" + +msgid "Member services" +msgstr "Службы-участники" + +msgid "Add a new role." +msgstr "Добавить новую роль." + +msgid "Add members to a role." +msgstr "Добавить участников в роль." + +msgid "member service" +msgstr "служба-участник" + +msgid "services to add" +msgstr "cлужбы, которые следует добавить" + +msgid "Add privileges to a role." +msgstr "Добавить привилегии в роль." + +msgid "privilege" +msgstr "Привилегия" + +msgid "privileges" +msgstr "Привилегии" + +msgid "Number of privileges added" +msgstr "Количество добавленных привилегий" + +msgid "Delete a role." +msgstr "Удалить роль." + +msgid "Search for roles." +msgstr "Поиск ролей." + +msgid "Modify a role." +msgstr "Изменить роль." + +msgid "Rename the role object" +msgstr "Переименовать объект роли." + +msgid "Remove members from a role." +msgstr "Удалить участников из роли." + +msgid "services to remove" +msgstr "службы, которые следует удалить" + +msgid "Remove privileges from a role." +msgstr "Удалить привилегии из роли." + +msgid "Number of privileges removed" +msgstr "Количество удалённых привилегий" + +msgid "Display information about a role." +msgstr "Показать сведения о роли." + msgid "" "\n" -"SEARCHING:\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" msgstr "" "\n" -"ПОИСК:\n" +"Разрешения самообслуживания\n" +"\n" +"С помощью разрешений самообслуживания можно очень точно делегировать " +"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " +"разрешениям разрешение на выполнение конкретных задач, таких как добавление " +"пользователя, изменение группы и так далее.\n" +"\n" +"Разрешение самообслуживания определяет, что объект может изменять в своей " +"собственной записи.\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить правило самообслуживания, чтобы разрешить пользователям управлять " +"своим адресом (с использованием выражения Bash в фигурных скобках):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" В список атрибутов необходимо включить все атрибуты, в том числе уже " +"существующие. Добавить telephoneNumber в список (с использованием выражения " +"Bash в фигурных скобках):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Показать обновлённое правило:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Удалить правило:\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +msgid "Self-service name" +msgstr "Имя самообслуживания" + +msgid "Attributes to which the permission applies." +msgstr "Атрибуты, к которым применяется разрешение." + +msgid "Add a new self-service permission." +msgstr "Добавить новое разрешение самообслуживания." + +msgid "Delete a self-service permission." +msgstr "Удалить разрешение самообслуживания." + +msgid "Search for a self-service permission." +msgstr "Поиск разрешения самообслуживания." + +msgid "Modify a self-service permission." +msgstr "Изменить разрешение самообслуживания." + +msgid "Display information about a self-service permission." +msgstr "Показать сведения о разрешении самообслуживания." msgid "" "\n" @@ -9866,643 +6811,51 @@ msgstr "" "порядок применения списка пользователей SELinux, а также показать " "пользователя SELinux по умолчанию.\n" -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" -"\n" -"ПОДДЕРЖИВАЕМЫЕ ТИПЫ ЗОН\n" -"\n" -" * Главная зона (dnszone-*), содержит надёжные данные.\n" -" * Зона перенаправления (dnsforwardzone-*), перенаправляет запросы на " -"настроенные перенаправители\n" -" (набор DNS-серверов).\n" +msgid "SELinux User" +msgstr "Пользователь SELinux" -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" -"\n" -"Поиск записей ACI.\n" -"\n" -" Возвращает список записей ACI.\n" -"\n" -" ПРИМЕРЫ:\n" -"\n" -" Чтобы найти все записи ACI, которые применяются непосредственно к " -"участникам группы ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" Чтобы найти все записи ACI, которые предоставляют доступ для добавления " -"(add):\n" -" ipa aci-find --permissions=add\n" -"\n" -" Следует учитывать, что с помощью команды find выполняется только поиск " -"указанного текста в наборе записей ACI; при поиске записи ACI не оцениваются " -"по критерию применимости.\n" -" Например, при поиске по тексту memberof=ipausers будут найдены все " -"записи ACI, в которых memberof содержат ipausers. Но могут иметься другие " -"записи ACI, которые применяются к участникам этой группы опосредованно.\n" -" " +msgid "HBAC Rule" +msgstr "Правило HBAC" -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Разрешения самообслуживания\n" -"\n" -"С помощью разрешений самообслуживания можно очень точно делегировать " -"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " -"разрешениям разрешение на выполнение конкретных задач, таких как добавление " -"пользователя, изменение группы и так далее.\n" -"\n" -"Разрешение самообслуживания определяет, что объект может изменять в своей " -"собственной записи.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить правило самообслуживания, чтобы разрешить пользователям управлять " -"своим адресом (с использованием выражения Bash в фигурных скобках):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" В список атрибутов необходимо включить все атрибуты, в том числе уже " -"существующие. Добавить telephoneNumber в список (с использованием выражения " -"Bash в фигурных скобках):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Показать обновлённое правило:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Удалить правило:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "Правило HBAC, которое определяет пользователей, группы и группы узлов" -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Разрешения самообслуживания\n" -"\n" -"С помощью разрешений самообслуживания можно очень точно делегировать " -"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " -"разрешениям разрешение на выполнение конкретных задач, таких как добавление " -"пользователя, изменение группы и так далее.\n" -"\n" -"Разрешение самообслуживания определяет, что объект может изменять в своей " -"собственной записи.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить правило самообслуживания, чтобы разрешить пользователям управлять " -"своим адресом:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" В список атрибутов необходимо включить все атрибуты, в том числе уже " -"существующие. Добавить telephoneNumber в список:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Показать обновлённое правило:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Удалить правило:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +msgid "Create a new SELinux User Map." +msgstr "Создать новый список пользователей SELinux." -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgid "Add target hosts and hostgroups to an SELinux User Map rule." msgstr "" -"\n" -"Конфигурация сервера\n" -"\n" -"Управление значениями по умолчанию, которые используются IPA, и некоторыми " -"параметрами их настройки.\n" -"\n" -"ПРИМЕЧАНИЯ:\n" -"\n" -"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " -"будет реплицировано. В текущей версии оно не используется для " -"заблаговременного уведомления пользователей об окончании срока действия " -"пароля.\n" -"\n" -"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " -"для чтения. Среди них:\n" -"\n" -"Основа субъекта сертификата: настроенная основа субъекта сертификата, " -"например O=EXAMPLE.COM. Настраивается только во время установки.\n" -"Возможности подключаемого модуля паролей: в текущей версии он определяет " -"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " -"условия).\n" -"\n" -"При установке приоритета сопоставления пользователей SELinux, возможно, " -"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " -"оболочкой.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Показать базовую конфигурацию сервера:\n" -" ipa config-show\n" -"\n" -" Показать все параметры конфигурации:\n" -" ipa config-show --all\n" -"\n" -" Изменить максимальную длину имени пользователя на 99 символов:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Увеличить установленные по умолчанию ограничения времени и размера поиска " -"IPA-сервера:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Указать почтовый домен пользователей по умолчанию:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " -"migrate-ds\":\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Определить порядок списка пользователей SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"Добавить целевые узлы и группы узлов в правило списка пользователей SELinux." -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgid "Add users and groups to an SELinux User Map rule." msgstr "" -"\n" -"Конфигурация сервера\n" -"\n" -"Управление значениями по умолчанию, которые используются IPA, и некоторыми " -"параметрами их настройки.\n" -"\n" -"ПРИМЕЧАНИЯ:\n" -"\n" -"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " -"будет реплицировано. В текущей версии оно не используется для " -"заблаговременного уведомления пользователей об окончании срока действия " -"пароля.\n" -"\n" -"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " -"для чтения. Среди них:\n" -"\n" -"Основа субъекта сертификата: настроенная основа субъекта сертификата, " -"например O=EXAMPLE.COM. Настраивается только во время установки.\n" -"Возможности подключаемого модуля паролей: в текущей версии он определяет " -"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " -"условия).\n" -"\n" -"При установке приоритета сопоставления пользователей SELinux, возможно, " -"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " -"оболочкой.\n" -"\n" -"Максимальная длина имени узла в Linux управляется параметром ядра " -"MAXHOSTNAMELEN и по умолчанию составляет 64 символа. В некоторых других " -"операционных системах, например, в Solaris, разрешены имена узлов длиной " -"вплоть до 255.\n" -"Этот параметр позволяет регулировать длину, но по умолчанию ограничен " -"максимальной длиной для Linux.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Показать базовую конфигурацию сервера:\n" -" ipa config-show\n" -"\n" -" Показать все параметры конфигурации:\n" -" ipa config-show --all\n" -"\n" -" Изменить максимальную длину имени пользователя на 99 символов:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Изменить максимальную длину имени узла на 255 символов:¶\n" -" ipa config-mod --maxhostname=255¶\n" -"\n" -" Увеличить установленные по умолчанию ограничения времени и размера поиска " -"IPA-сервера:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Указать почтовый домен пользователей по умолчанию:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " -"migrate-ds\":\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Определить порядок списка пользователей SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"Добавить пользователей и группы в правило списка пользователей SELinux." -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Ограниченное делегирование служб\n" -"\n" -"Управление правилами, с помощью которых можно ограничить делегирование " -"учётных данных таким образом, что служба сможет выполнять олицетворение " -"пользователя при обмене данными с другой службой без необходимости для " -"пользователя самом деле перенаправлять билет для получения билета (TGT). " -"Такой метод делегирования учётных данных значительно лучше, так как " -"предотвращает раскрытие краткосрочного секрета пользователя.\n" -"\n" -"В соответствии с соглашением об именовании к имени соответствующего правила " -"добавляется слово \"target\" или \"targets\". Такая схема имён не является " -"обязательной, но она помогает концептуально связать правила и их " -"назначения.\n" -"\n" -"Правило состоит из двух компонентов:\n" -" - Список целей (назначений), к которым применяется правило\n" -" - Список memberPrincipals, которым разрешено делегирование для этих " -"целей \n" -"\n" -"Цель состоит из списка учётных записей, которые можно делегировать.\n" -"\n" -"Если проще, правило утверждает, что определённую учетную запись можно " -"делегировать как указанный список учётных записей, согласно заданному списку " -"целей.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новое правило ограниченного делегирования:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Добавить новую цель ограниченного делегирования:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Добавить учётную запись в правило:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Добавить цель в правило:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Добавить учётную запись в цель:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Показать сведения об именованном правиле делегирования и цели:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Удалить ограниченное делегирование:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"В этом примере служба ftp может получать билет для получения билета для " -"службы ldap от имени связанного пользователя.\n" -"\n" -"Настоятельно не рекомендуется изменять делегирования, которые поставляются с " -"IPA, ipa-http-delegation и его цели ipa-cifs-delegation-targets и Ipa-ldap-" -"delegation-targets. Неправильная настройка может привести к потере " -"возможности делегирования, что повлечет неработоспособность всей системы.\n" +msgid "Delete a SELinux User Map." +msgstr "Удалить список пользователей SELinux." -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgid "Disable an SELinux User Map rule." +msgstr "Отключить правило списка пользователей SELinux." + +msgid "Enable an SELinux User Map rule." +msgstr "Включить правило списка пользователей SELinux." + +msgid "Search for SELinux User Maps." +msgstr "Поиск списков пользователей SELinux." + +msgid "Modify a SELinux User Map." +msgstr "Изменить список пользователей SELinux." + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." msgstr "" -"\n" -"Службы\n" -"\n" -"Служба IPA — это служба, которая выполняется на узле. В записи службы IPA " -"могут храниться данные учётной записи Kerberos, SSL-сертификата или оба " -"набора данных.\n" -"\n" -"Службой IPA можно управлять непосредственно с компьютера, если системе этого " -"компьютера предоставлены соответствующие права доступа. Это касается даже " -"компьютеров, отличных от тех, с которыми связана эта служба. Например, " -"запрос SSL-сертификата с помощью учётных данных учётной записи службы узла. " -"Чтобы управлять службой с помощью учётных данных узла, следует запустить " -"команду kinit от имени узла:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Добавление службы IPA позволяет связанной службе запрашивать SSL-сертификаты " -"и таблицы ключей, но создание самих запросов является отдельным шагом: " -"соответствующие данные не создаются в результате простого добавления " -"службы.\n" -"\n" -"В записи службы хранятся только открытые данные сертификата; закрытый ключ " -"не сохраняется.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую службу IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Разрешить узлу управлять сертификатом службы IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Переопределить список по умолчанию, который содержит поддерживаемые типы " -"PAC для службы:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -"Такое переопределение типа PAC необходимо, например, для работы NFS. В " -"текущей версии соответствующий код в ядре Linux может работать только с " -"билетами Kerberos, размер которых не превышает максимально заданного. Так " -"как данные PAC могут быть довольно объёмными, для служб NFS рекомендуется " -"установить --pac-type=NONE.\n" -"\n" -" Удалить службу IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Найти все службы IPA, связанные с узлом:\n" -" ipa service-find web.example.com\n" -"\n" -" Найти все службы HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Отключить ключ Kerberos и SSL-сертификат службы:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Запросить сертификат для службы IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" +"Удалить целевые узлы и группы узлов из правила списка пользователей SELinux." + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" +"Удалить пользователей и группы из правила списка пользователей SELinux." + +msgid "Display the properties of a SELinux User Map rule." +msgstr "Показать свойства правила списка пользователей SELinux." msgid "" "\n" @@ -10632,122 +6985,88 @@ msgstr "" " ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" "httpd.keytab\n" -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" -"\n" -"Службы\n" -"\n" -"Служба IPA — это служба, которая выполняется на узле. В записи службы IPA " -"могут храниться данные учётной записи Kerberos, SSL-сертификата или оба " -"набора данных.\n" -"\n" -"Службой IPA можно управлять непосредственно с компьютера, если системе этого " -"компьютера предоставлены соответствующие права доступа. Это касается даже " -"компьютеров, отличных от тех, с которыми связана эта служба. Например, " -"запрос SSL-сертификата с помощью учётных данных учётной записи службы узла. " -"Чтобы управлять службой с помощью учётных данных узла, следует запустить " -"команду kinit от имени узла:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Добавление службы IPA позволяет связанной службе запрашивать SSL-сертификаты " -"и таблицы ключей, но создание самих запросов является отдельным шагом: " -"соответствующие данные не создаются в результате простого добавления " -"службы.\n" -"\n" -"В записи службы хранятся только открытые данные сертификата; закрытый ключ " -"не сохраняется.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую службу IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Разрешить узлу управлять сертификатом службы IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Переопределить список по умолчанию, который содержит поддерживаемые типы " -"PAC для службы:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Удалить службу IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Найти все службы IPA, связанные с узлом:\n" -" ipa service-find web.example.com\n" -"\n" -" Найти все службы HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Отключить ключ Kerberos и SSL-сертификат службы:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Запросить сертификат для службы IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Создать и получить таблицу ключей для службы IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" +msgid "Principal" +msgstr "Учётная запись" + +msgid "Service principal" +msgstr "Учётная запись службы" + +msgid "PAC type" +msgstr "Тип PAC" msgid "" -"\n" -"Session Support for IPA\n" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." msgstr "" -"\n" -"Сеансовая поддержка для IPA\n" +"Переопределить список по умолчанию, который содержит поддерживаемые типы " +"PAC. Используйте значение \"NONE\", чтобы отключить поддержку PAC для этой " +"службы; например, это может быть необходимо для служб NFS." + +msgid "Add a new IPA new service." +msgstr "Добавить новую службу IPA." + +msgid "force principal name even if not in DNS" +msgstr "" +"принудительно установить значение имени учётной записи, даже если имени нет " +"в DNS" + +msgid "Add hosts that can manage this service." +msgstr "Добавить узлы, которые могут управлять этой службой." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" +"Разрешить пользователям, группам, узлам или группам узлов создавать таблицу " +"ключей этой службы." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Разрешить пользователям, группам, узлам или группам узлов получать таблицу " +"ключей этой службы." + +msgid "Delete an IPA service." +msgstr "Удалить службу IPA." + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Отключить ключ Kerberos и SSL-сертификат службы." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" +"Запретить пользователям, группам, узлам или группам узлов создавать таблицу " +"ключей этой службы." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Запретить пользователям, группам, узлам или группам узлов получать таблицу " +"ключей этой службы." + +msgid "Search for IPA services." +msgstr "Поиск служб IPA." + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"principal\")" + +msgid "Search for services with these managed by hosts." +msgstr "Поиск служб, включая службы, управляемые узлами." + +msgid "Search for services without these managed by hosts." +msgstr "Поиск служб, не включая службы, управляемые узлами." + +msgid "Modify an existing IPA service." +msgstr "Изменить существующую службу IPA." + +msgid "Remove hosts that can manage this service." +msgstr "Удалить узлы, которые могут управлять этой службой." + +msgid "Display information about an IPA service." +msgstr "Показать сведения о службе IPA." msgid "" "\n" @@ -11969,668 +8288,1365 @@ msgstr "" "данные Kerberos. Всё остальное не меняется.\n" "\n" -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" +msgid "RPC command used to log the current user out of their session." msgstr "" -"\n" -"Установка пароля пользователя\n" -"\n" -"Если пароль пользователя изменяет кто-то кроме самого пользователя " -"(например, его сбрасывает служба технической поддержки), пароль потребуется " -"изменить при первом использовании. Это делается для того, чтобы пароль знал " -"только конечный пользователь.\n" -"\n" -"Политика паролей IPA управляет частотой смены пароля, требованиями к " -"надёжности пароля и размером журнала паролей.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Чтобы сбросить свой собственный пароль:\n" -" ipa passwd\n" -"\n" -" Чтобы изменить пароль другого пользователя:\n" -" ipa passwd tuser1\n" +"Команда RPC, которая используется для завершения сеанса текущего " +"пользователя." msgid "" "\n" -"Simulate use of Host-based access controls\n" +"Sudo Commands\n" "\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" +"Commands used as building blocks for sudo\n" "\n" "EXAMPLES:\n" "\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" "\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" msgstr "" "\n" -"Имитация использования управления доступом на основе узла\n" +"Команды Sudo \n" "\n" -"Правила HBAC управляют тем, кто, на каких узлах и из каких узлов сможет " -"получать доступ к определённым службам. Вы можете воспользоваться HBAC для " -"определения тех пользователей и групп, которые будут иметь доступ к " -"определённой службе или группе служб на целевом узле. \n" -"\n" -"Так как применение правил HBAC подразумевает использование рабочей среды, " -"этот подключаемый модуль предназначен для обеспечения имитации оценки правил " -"HBAC при отсутствии доступа к рабочей среде.\n" -"\n" -" Проверка тестового пользователя, который обращается к службе на именованном " -"узле, на соответствие существующим включённым правилам.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" Параметры --user, --host и --service являются обязательными, остальные " -"можно не указывать.\n" -"\n" -" Если указан параметр --rules, имитировать включение указанных правил и " -"проверить возможность входа пользователя в случае использования только этих " -"правил.\n" -"\n" -" Если указан параметр --enabled, добавить все включённые правила HBAC к " -"имитации.\n" -"\n" -" Если указан параметр --disabled, добавить все отключённые правила HBAC к " -"имитации.\n" -"\n" -" Если указан параметр --nodetail, не возвращать данные о соответствующих или " -"не соответствующих правилах.\n" -"\n" -" Если одновременно указаны параметры --rules и --enabled, выполнить имитацию " -"--rules _и_\n" -" всех включённых правил IPA.\n" -"\n" -" Если не указан параметр --rules, выполнить имитацию всех включённых правил " -"IPA.\n" -" По умолчанию в IPA имеется общее ограничение количества извлекаемых " -"записей, его можно изменить с помощью параметра --sizelimit.\n" -"\n" -" Если указан параметр --srchost, он будет проигнорирован. Он сохранён только " -"для обеспечения совместимости.\n" +"Команды, которые используются в качестве строительных блоков для Sudo\n" "\n" "ПРИМЕРЫ:\n" "\n" -" 1. Использовать все включённые правила HBAC в базе данных IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: my-third-rule\n" -" не соответствует: myrule\n" -" соответствует: allow_all\n" +" Создать новую команду\n" +" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" "\n" -" 2. Отключить подробный отчёт о применении правил:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -"\n" -" 3. Проверить явно указанные правила HBAC:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: myrule\n" -"\n" -" 4. Использовать все включённые правила HBAC в базе данных IPA + явно " -"указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: my-third-rule\n" -" не соответствует: myrule\n" -" соответствует: allow_all\n" -"\n" -" 5. Проверить все отключённые правила HBAC в базе данных IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" не соответствует: new-rule\n" -"\n" -" 6. Проверить все отключённые правила HBAC в базе данных IPA + явно " -"указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: my-third-rule\n" -" не соответствует: myrule\n" -"\n" -" 7. Проверить все (включённые и отключённые) правила HBAC в базе данных " -"IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: my-third-rule\n" -" не соответствует: myrule\n" -" не соответствует: new-rule\n" -" соответствует: allow_all\n" +" Удалить команду\n" +" ipa sudocmd-del /usr/bin/less\n" + +msgid "Sudo Command" +msgstr "Команда Sudo" + +msgid "A description of this command" +msgstr "Описание этой команды" + +msgid "Sudo Command Groups" +msgstr "Группы команд Sudo" + +msgid "Create new Sudo Command." +msgstr "Создать новую команду Sudo." + +msgid "Delete Sudo Command." +msgstr "Удалить команду Sudo." + +msgid "Search for Sudo Commands." +msgstr "Поиск команд Sudo." + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"command\")" + +msgid "Modify Sudo Command." +msgstr "Изменить команду Sudo." + +msgid "Display Sudo Command." +msgstr "Показать команду Sudo." msgid "" "\n" -"Simulate use of Host-based access controls\n" +"Groups of Sudo Commands\n" "\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" +"Manage groups of Sudo Commands.\n" "\n" "EXAMPLES:\n" "\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" "\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" "\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" "\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" "\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" msgstr "" "\n" -"Имитация использования управления доступом на основе узла\n" +"Группы команд Sudo\n" "\n" -"Правила HBAC управляют тем, кто и на каких узлах сможет получать доступ к " -"определённым службам. Вы можете воспользоваться HBAC для определения тех " -"пользователей и групп, которые будут иметь доступ к определённой службе или " -"группе служб на целевом узле. \n" -"\n" -"Так как применение правил HBAC подразумевает использование рабочей среды, " -"этот подключаемый модуль предназначен для обеспечения имитации оценки правил " -"HBAC при отсутствии доступа к рабочей среде.\n" -"\n" -" Проверка тестового пользователя, который обращается к службе на именованном " -"узле, на соответствие существующим включённым правилам.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" Параметры --user, --host и --service являются обязательными, остальные " -"можно не указывать.\n" -"\n" -" Если указан параметр --rules, имитировать включение указанных правил и " -"проверить возможность входа пользователя в случае использования только этих " -"правил.\n" -"\n" -" Если указан параметр --enabled, добавить все включённые правила HBAC к " -"имитации.\n" -"\n" -" Если указан параметр --disabled, добавить все отключённые правила HBAC к " -"имитации.\n" -"\n" -" Если указан параметр --nodetail, не возвращать данные о соответствующих или " -"не соответствующих правилах.\n" -"\n" -" Если одновременно указаны параметры --rules и --enabled, выполнить имитацию " -"--rules _и_\n" -" всех включённых правил IPA.\n" -"\n" -" Если не указан параметр --rules, выполнить имитацию всех включённых правил " -"IPA.\n" -" По умолчанию в IPA имеется общее ограничение количества извлекаемых " -"записей, его можно изменить с помощью параметра --sizelimit.\n" -"\n" -" ПРИМЕРЫ:\n" -"\n" -" 1. Использовать все включённые правила HBAC в базе данных IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -" Соответствующие правила: allow_all\n" -"\n" -" 2. Отключить подробный отчёт о применении правил:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -"\n" -" 3. Проверить явно указанные правила HBAC:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: myrule\n" -"\n" -" 4. Использовать все включённые правила HBAC в базе данных IPA + явно " -"указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -" Соответствующие правила: allow_all\n" -"\n" -" 5. Проверить все отключённые правила HBAC в базе данных IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" Несоответствующие правила: new-rule\n" -"\n" -" 6. Проверить все отключённые правила HBAC в базе данных IPA + явно " -"указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -"\n" -" 7. Проверить все (включённые и отключённые) правила HBAC в базе данных " -"IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -" Несоответствующие правила: new-rule\n" -" Соответствующие правила: allow_all\n" -"\n" -"\n" -"HBACTEST И ДОВЕРЕННЫЕ ДОМЕНЫ\n" -"\n" -"Если в IPA настроен внешний доверенный домен, правила HBAC также применяются " -"к пользователям, которые выполняют доступ к ресурсам IPA из доверенного " -"домена. Пользователи и группы доверенного домена (и их SID) затем могут быть " -"привязаны к внешним группам, которые могут быть участниками POSIX-групп в " -"IPA. Такие привязки можно использовать в правилах HBAC, тем самым разрешая " -"доступ к ресурсам, которые защищены системой HBAC.\n" -"\n" -"Подключаемый модуль hbactest позволяет проверять доступ как для локальных " -"пользователей IPA, так и для пользователей из доверенных доменов, как с " -"полным именем пользователя, так и по SID пользователей. В таких именах " -"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" -"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." -"test.\n" -"\n" -"Обратите внимание, что выполнять hbactest с аргументом пользователя " -"доверенного домена в параметре --user могут только участники группы \"trust " -"admins\".\n" +"Управление группами команд Sudo.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" 1. Проверить, соответствует ли пользователь из доверенного домена, " -"указанный по краткому имени, какому-либо правилу:\n" +" Добавить новую группу команд Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" "\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Соответствующие правила: can_login\n" +" Удалить группу команд Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" "\n" -" 2. Проверить, соответствует ли пользователь из доверенного домена, " -"указанный по имени домена, какому-либо правилу:\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" "\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Соответствующие правила: can_login\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" "\n" -" 3. Проверить, соответствует ли пользователь из доверенного домена, " -"указанный по SID, какому-либо правилу:\n" +" Показать группу команд Sudo:\n" +" ipa group-show localadmins\n" + +msgid "Sudo Command Group" +msgstr "Группа команд Sudo" + +msgid "Group description" +msgstr "Описание группы" + +msgid "Commands" +msgstr "Команды" + +msgid "Member Sudo commands" +msgstr "Команды участника Sudo" + +msgid "Create new Sudo Command Group." +msgstr "Создать новую группу команд Sudo." + +msgid "Add members to Sudo Command Group." +msgstr "Добавить участников в группу команд Sudo." + +msgid "member sudo command" +msgstr "команда Sudo — участник" + +msgid "sudo commands to add" +msgstr "команды Sudo, которые следует добавить" + +msgid "Delete Sudo Command Group." +msgstr "Удалить группу команд Sudo." + +msgid "Search for Sudo Command Groups." +msgstr "Поиск групп команд Sudo." + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"sudocmdgroup-" +"name\")" + +msgid "Modify Sudo Command Group." +msgstr "Изменить группу команд Sudo." + +msgid "Remove members from Sudo Command Group." +msgstr "Удалить участников из группы команд Sudo." + +msgid "sudo commands to remove" +msgstr "команды Sudo, которые следует удалить" + +msgid "Display Sudo Command Group." +msgstr "Показать группу команд Sudo." + +msgid "" "\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Соответствующие правила: can_login\n" +"Users\n" "\n" -" 4. Проверить, соответствует ли другой пользователь из доверенного " -"домена, указанный по SID, какому-либо правилу:\n" +"Manage user entries. All users are POSIX users.\n" "\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Несоответствующие правила: can_login\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" "\n" -" 5. Проверить, соответствует ли другой пользователь из доверенного домена, " -"указанный по краткому имени, какому-либо правилу:\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" "\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Несоответствующие правила: can_login\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" "\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" +"\n" +"Пользователи\n" +"\n" +"Управление записями пользователей. Все пользователи являются POSIX-" +"пользователями.\n" +"\n" +"IPA поддерживает широкий спектр форматов имён пользователей, но следует " +"учитывать те ограничения, которые могут существовать в конкретной среде. " +"Например, имена пользователей, которые начинаются с цифры или превышают " +"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" +"Используйте команду \"ipa config-mod\" для изменения формата имени " +"пользователя, разрешённого средствами IPA.\n" +"\n" +"Отключение учётной записи пользователя сделает невозможным получение таким " +"пользователем новых учётных данных Kerberos. Это не сделает " +"недействительными те учётные данные, которые уже были предоставлены.\n" +"\n" +"Управление паролями не входит в этот модуль. Дополнительные сведения можно " +"получить с помощью команды ipa help passwd\n" +"\n" +"Блокировка учётной записи при ошибке пароля выполняется на одном из главных " +"IPA-серверов. Чтобы определить, на каком главном сервере заблокирован " +"пользователь, можно использовать команду user-status.\n" +"На этом главном сервере администратор должен разблокировать пользователя:\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить нового пользователя:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Найти всех пользователей, записи которых содержат строку \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Найти всех пользователей, в записях \"Tim\" является именем:\n" +" ipa user-find --first=Tim\n" +"\n" +" Отключить учётную запись пользователя:\n" +" ipa user-disable tuser1\n" +"\n" +" Включить учётную запись пользователя:\n" +" ipa user-enable tuser1\n" +"\n" +" Удалить пользователя:\n" +" ipa user-del tuser1\n" + +msgid "First name" +msgstr "Имя" + +msgid "Last name" +msgstr "Фамилия" + +msgid "Full name" +msgstr "Полное имя" + +msgid "Display name" +msgstr "Отображаемое имя" + +msgid "Initials" +msgstr "Инициалы" + +msgid "Kerberos principal" +msgstr "Учётная запись Kerberos" + +msgid "Kerberos principal expiration" +msgstr "Окончание действия учётной записи Kerberos" + +msgid "Email address" +msgstr "Адрес электронной почты" + +msgid "Prompt to set the user password" +msgstr "Запросить пароль у пользователя" + +msgid "Generate a random user password" +msgstr "Создать случайный пользовательский пароль" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "ID пользователя (если не указан, система назначит его самостоятельно)" + +msgid "Street address" +msgstr "Адрес" + +msgid "City" +msgstr "Город" + +msgid "State/Province" +msgstr "Область/республика" + +msgid "ZIP" +msgstr "Индекс" + +msgid "Telephone Number" +msgstr "Номер телефона" + +msgid "Mobile Telephone Number" +msgstr "Номер мобильного телефона" + +msgid "Pager Number" +msgstr "Номер пейджера" + +msgid "Fax Number" +msgstr "Номер факса" + +msgid "Org. Unit" +msgstr "Отдел" + +msgid "Job Title" +msgstr "Должность" + +msgid "Manager" +msgstr "Руководитель" + +msgid "Car License" +msgstr "Номер автомобиля" + +msgid "Account disabled" +msgstr "Учётная запись отключена" + +msgid "User authentication types" +msgstr "Типы аутентификации пользователей" + +msgid "Types of supported user authentication" +msgstr "Поддерживаемые типы аутентификации пользователей" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Категория пользователей (семантика этого атрибута предназначена для " +"локального разбора)" + +msgid "RADIUS proxy configuration" +msgstr "Конфигурация прокси RADIUS" + +msgid "RADIUS proxy username" +msgstr "Имя пользователя прокси RADIUS" + +msgid "Department Number" +msgstr "Номер отдела" + +msgid "Employee Number" +msgstr "Номер сотрудника" + +msgid "Employee Type" +msgstr "Тип сотрудника" + +msgid "Preferred Language" +msgstr "Предпочитаемый язык" + +msgid "Member of groups" +msgstr "Участник групп" + +msgid "Indirect Member of group" +msgstr "Непрямой участник группы" + +msgid "Kerberos keys available" +msgstr "Доступные ключи Kerberos" + +msgid "Add a new user." +msgstr "Добавить нового пользователя." + +msgid "Don't create user private group" +msgstr "Не создавать личную группу пользователя" + +msgid "Delete a user." +msgstr "Удалить пользователя." + +msgid "Disable a user account." +msgstr "Отключить учётную запись пользователя." + +msgid "Enable a user account." +msgstr "Включить учётную запись пользователя." + +msgid "Search for users." +msgstr "Поиск пользователей." + +msgid "Self" +msgstr "Моя учётная запись" + +msgid "Display user record for current Kerberos principal" +msgstr "Показать запись пользователя для текущей учётной записи Kerberos" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"login\")" + +msgid "Search for users with these member of groups." +msgstr "Поиск пользователей, которые являются участниками этой группы." + +msgid "Search for users without these member of groups." +msgstr "Поиск пользователей, которые не являются участниками этой группы." + +msgid "Search for users with these member of netgroups." +msgstr "Поиск пользователей, которые являются участниками этой сетевой группы." + +msgid "Search for users without these member of netgroups." +msgstr "" +"Поиск пользователей, которые не являются участниками этой сетевой группы." + +msgid "Search for users with these member of roles." +msgstr "Поиск пользователей, которые являются участниками этой роли." + +msgid "Search for users without these member of roles." +msgstr "Поиск пользователей, которые не являются участниками этой роли." + +msgid "Search for users with these member of HBAC rules." +msgstr "Поиск пользователей, которые являются участниками этого правила HBAC." + +msgid "Search for users without these member of HBAC rules." +msgstr "" +"Поиск пользователей, которые не являются участниками этого правила HBAC." + +msgid "Search for users with these member of sudo rules." +msgstr "Поиск пользователей, которые являются участниками этого правила Sudo." + +msgid "Search for users without these member of sudo rules." +msgstr "" +" Поиск пользователей, которые не являются участниками этого правила Sudo." + +msgid "Modify a user." +msgstr "Изменить пользователя." + +msgid "Rename the user object" +msgstr "Переименовать объект пользователя" + +msgid "Display information about a user." +msgstr "Показать сведения о пользователе." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" +"\n" +"Состояние блокировки учётной записи пользователя.\n" +"\n" +" Учётная запись может быть заблокирована, если в течение определённого " +"периода времени слишком большое количество раз был введён неверный пароль " +"(соответствующие ограничения регулируются политикой паролей). Запись " +"блокируется временно, она может быть разблокирована администратором.\n" +"\n" +" Эта программа соединяется с каждым главным IPA-сервером и показывает " +"состояние блокировки на каждом из них.\n" +"\n" +" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " +"потребуется сравнить количество неудачных попыток входа и время последней " +"неудачной попытки с эталонными значениями. Для блокировки учётной записи " +"количество неудачных попыток входа должно превысить значение maxfail в " +"течение временного интервала failinterval в соответствии с политикой " +"паролей, связанной с пользователем.\n" +"\n" +" Счётчик неудачных попыток изменяется только тогда, когда пользователь " +"выполняет попытку войти, поэтому учётная запись может казаться " +"заблокированной, но время, прошедшее с последней неудачной попытки входа, " +"превышает время блокировки (lockouttime), установленное политикой паролей. " +"Это означает, что пользователь может войти в систему снова.\n" +" " + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" +"\n" +"Разблокировка учётной записи пользователя.\n" +" \n" +"Учётная запись может быть заблокирована, если в течение определённого " +"периода времени слишком большое количество раз был введён неверный пароль " +"(соответствующие ограничения регулируются политикой паролей). Запись " +"блокируется временно, она может быть разблокирована администратором." + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +"Правило автоучастия.\n" +"\n" +"Внося ясные правила о принадлежности узлов и пользователей к группам " +"посредством настройки включающих и исключающих шаблонов регулярных " +"выражений, вы можете автоматически связывать новые записи с группой или " +"группой узлов на основе данных атрибутов.\n" +"\n" +"Правило непосредственно связывается с группой по имени, следовательно, вы не " +"можете создать правило без определения группы или группы узлов. \n" +"\n" +"Условие является регулярным выражением, используется 389-ds для установления " +"соответствия новой входящей записи правилу автоучастия. Если имеется " +"соответствие правилу включения, запись добавляется в соответствующую группу " +"или группу узлов.\n" +"\n" +"Можно указать группу или группу узлов по умолчанию, которая будет " +"использоваться для записей, не соответствующих ни одному правилу. В случае " +"записей пользователей эта группа будет резервной группой, поскольку все " +"пользователи по умолчанию являются участниками группы, указанной в " +"настройках IPA.\n" +"\n" +"Команду automember-rebuild можно использовать, чтобы задним числом применить " +"правила автоучастия в отношении уже существующих записей; это перестроит их " +"участие.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"Добавить начальную группу или группу узлов :\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Добавить начальное правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Добавить в правило условие:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Добавить в правило исключительное условие, чтобы предотвратить " +"автоназначение:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Добавить узел:\n" +" ipa host-add web1.example.com\n" +"\n" +" Добавить пользователя:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +"Проверить автоучастие:\n" +" ipa hostgroup-show webservers\n" +" Группа узлов: webservers\n" +" Описание: Web Servers\n" +" Узлы-участники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Имя группы: devel\n" +" Описание: Developers\n" +" GID: 1004200000\n" +" Пользователи-участники: tuser\n" +"\n" +" Удалить условие из правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Изменить правило автоучастия:\n" +" ipa automember-mod\n" +"\n" +" Установить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Удалить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Показать целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Найти все правила автоучастия:\n" +" ipa automember-find\n" +"\n" +" Показать правило автоучастия:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Удалить правило автоучастия:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +"Перестроить участие для всех пользователей:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Перестроить участие для всех узлов:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Перестроить участие для указанных пользователей:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Перестроить участие для указанных узлов:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "A description of this auto member rule" +msgstr "Описание этого правила автоучастия" + +msgid "Default (fallback) Group" +msgstr "Группа по умолчанию (резервная)" + +msgid "Default group for entries to land" +msgstr "Группа по умолчанию для размещения записей" + +msgid "Add an automember rule." +msgstr "Добавить правило автоучастия." + +msgid "Automember Rule" +msgstr "Правило автоучастия" + +msgid "Grouping Type" +msgstr "Тип группировки" + +msgid "Grouping to which the rule applies" +msgstr "Группировка, к которой применяется правило " + +msgid "Add conditions to an automember rule." +msgstr "Добавить условия в правило автоучастия." + +msgid "Inclusive Regex" +msgstr "Включающие регулярные выражения" + +msgid "Exclusive Regex" +msgstr "Исключающие регулярные выражения" + +msgid "Attribute Key" +msgstr "Ключ атрибута" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Атрибут для фильтрации с помощью регулярных выражений. Например, полное имя " +"для узла или руководитель для пользователя." + +msgid "Conditions that could not be added" +msgstr "Условия, которые не удалось добавить" + +msgid "Number of conditions added" +msgstr "Количество добавленных условий" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" +"Удалить группу по умолчанию (резервную) для всех несоответствующих записей." + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" +"Установить группу по умолчанию (резервную) для всех несоответствующих " +"записей." + +msgid "Default (fallback) group for entries to land" +msgstr "Группа по умолчанию (резервная) для размещения записей" + +msgid "Display information about the default (fallback) automember groups." +msgstr " Показать сведения о группах автоучастия по умолчанию (резервных)" + +msgid "Delete an automember rule." +msgstr "Удалить правило автоучастия." + +msgid "Search for automember rules." +msgstr "Поиск правил автоучастия." + +msgid "Modify an automember rule." +msgstr "Изменить правило автоучастия." + +msgid "Rebuild auto membership." +msgstr "Перестроить автоучастие." + +msgid "Rebuild membership for all members of a grouping" +msgstr "Перестроить участие для всех участников группировки" + +msgid "Rebuild membership for specified users" +msgstr "Перестроить участие для указанных пользователей" + +msgid "Rebuild membership for specified hosts" +msgstr "Перестроить участие для указанных узлов" + +msgid "No wait" +msgstr "Не ждать" + +msgid "Don't wait for rebuilding membership" +msgstr "Не ждать перестройки участия" + +msgid "Remove conditions from an automember rule." +msgstr "Удалить условия из правила автоучастия." + +msgid "Conditions that could not be removed" +msgstr "Условия, которые не удалось удалить" + +msgid "Number of conditions removed" +msgstr "Количество удалённых условий" + +msgid "Display information about an automember rule." +msgstr "Показать сведения о правиле автоучастия." + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" +"\n" +"Операции с сертификатами IPA \n" +"\n" +"Применение набора команд для управления сертификатами SSL-серверов.\n" +"\n" +"Запросы сертификатов существуют в виде запроса подписи сертификата " +"(Certificate Signing Request, CSR) в формате PEM.\n" +"\n" +"Система выдачи сертификатов Dogtag Certificate System использует только " +"значение CN в CSR и принудительно устанавливает остальные параметры субъекта " +"в соответствии со значениями, настроенными на сервере.\n" +"\n" +"Сертификат хранится в учётной записи службы, а учётной записи службы " +"требуется узел.\n" +"\n" +"Чтобы запросить сертификат:\n" +"\n" +"* Должен существовать узел\n" +"* Должна существовать служба (либо следует использовать параметр --add для " +"её автоматического добавления)\n" +"\n" +"ПОИСК:\n" +"\n" +"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " +"датам действия и дате выдачи.\n" +"\n" +"Если поиск выполняется по дате _с, используется сравнение >=, а если " +"выполняется поиск _до — сравнение <=. Сочетание обоих видов поиска приводит " +"к поиску с логической операцией И.\n" +"\n" +"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " +"датами, определёнными в в сертификатах.\n" +"\n" +"Формат даты: ГГГГ-мм-дд.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Запросить новый сертификат и добавить учётную запись:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Получить существующий сертификат:\n" +" ipa cert-show 1032\n" +"\n" +" Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Удалить сертификат из списка отзыва:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Проверить состояние запроса подписи:\n" +" ipa cert-status 10\n" +"\n" +" Поиск сертификатов по имени узла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Поиск отозванных сертификатов по причине отзыва:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Поиск сертификатов по дате выдачи:\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " +"сертификатов, следовательно, данные о состоянии запроса не являются " +"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " +"если CA не сразу выдаёт сертификат.\n" +"\n" +"Поддерживаются следующие причины отзыва:\n" +"\n" +" * 0 - не указано\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Обратите внимание, что код причины 7 не используется. Подробные сведения в " +"RFC 5280:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "Проверяет, включена ли служба CA на каких-либо серверах." + +msgid "Search for existing certificates." +msgstr "Поиск существующих сертификатов." + +msgid "Match cn attribute in subject" +msgstr "Сопоставлять атрибут \"cn\" в субъекте" + +msgid "Reason" +msgstr "Причина" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Причина отзыва сертификата (0-10)" + +msgid "minimum serial number" +msgstr "минимальный серийный номер" + +msgid "maximum serial number" +msgstr "максимальный серийный номер" + +msgid "match the common name exactly" +msgstr "точное соответствие общему имени" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "Действующий не позднее, чем с этой даты (ГГГГ-мм-дд)" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "Действующий не позднее, чем до этой даты (ГГГГ-мм-дд)" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "Действующий не ранее, чем с этой даты (ГГГГ-мм-дд)" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "Действующий не ранее, чем до этой даты (ГГГГ-мм-дд)" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "Выдан с этой даты (ГГГГ-мм-дд)" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "Выдан до этой даты (ГГГГ-мм-дд)" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "Отозван с этой даты (ГГГГ-мм-дд)" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "Отозван до этой даты (ГГГГ-мм-дд)" + +msgid "Maximum number of certs returned" +msgstr "Максимальное количество возвращённых сертификатов" + +msgid "Take a revoked certificate off hold." +msgstr "Возобновить действие отозванного сертификата." + +msgid "Serial number" +msgstr "Серийный номер" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" +"Серийный номер в десятичной или, если есть префикс 0x, в шестнадцатеричной " +"системе" + +msgid "Submit a certificate signing request." +msgstr "Отправить запрос подписи сертификата." + +msgid "CSR" +msgstr "Запрос подписи сертификата" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Учётная запись службы для этого сертификата (например, HTTP/test.example.com)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "автоматически добавить учётную запись, если она не существует" + +msgid "Revoke a certificate." +msgstr "Отозвать сертификат." + +msgid "Retrieve an existing certificate." +msgstr "Получить существующий сертификат." + +msgid "Output filename" +msgstr "Имя файла выходных данных" + +msgid "File to store the certificate in." +msgstr "Файл для сохранения сертификата" + +msgid "Check the status of a certificate signing request." +msgstr "Проверить состояние запроса подписи сертификата." + +msgid "Request id" +msgstr "ID запроса" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Группы пользователей\n" +"\n" +"Управление группами пользователей. По умолчанию все новые группы являются " +"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " +"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " +"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " +"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" +"\n" +"У каждой группы должно быть описание.\n" +"\n" +"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " +"поддерживается, но может повлиять на разрешения для файлов. При создании " +"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " +"создаст его автоматически.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Добавить новую не-POSIX-группу:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Преобразовать не-POSIX-группу в posix-группу:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Добавить новую POSIX-группу с определённым ID группы:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Удалить группу:\n" +" ipa group-del unixadmins\n" +"\n" +" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Добавить нескольких пользователей в группу \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Удалить пользователя из группы \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa group-show localadmins\n" +"\n" +"Участие внешних групп создано для того, чтобы сделать возможной привязку " +"пользователей из доверенных доменов к локальным POSIX-группам с целью " +"использования ресурсов IPA. Внешние участники должны быть добавлены в " +"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " +"затем должна быть включена в одну из групп POSIX.\n" +"\n" +"В текущей версии участник внешней группы является идентификатором " +"безопасности (Security Identifier или SID), определённым доверенным доменом. " +"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " +"или имя@домен. IPA попытается определить SID по переданному имени путём " +"использования общего каталога доверенного домена.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список внешних участников группы ad_admins_external, чтобы " +"определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "GID (use this option to set it manually)" +msgstr "GID (используйте этот параметр, чтобы установить его вручную)" + +msgid "Indirect Member users" +msgstr "Пользователи с непрямым участием" + +msgid "Indirect Member groups" +msgstr "Группы с непрямым участием" + +msgid "Create a new group." +msgstr "Создать новую группу." + +msgid "Create as a non-POSIX group" +msgstr "Создать как не-POSIX-группу " + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "Разрешить добавление внешних не IPA-участников из доверенных доменов" + +msgid "Add members to a group." +msgstr "Добавить участников в группу." + +msgid "External member" +msgstr "Внешний участник" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "Участники доверенного домена в формате DOM\\имя или имя@домен" + +msgid "Delete group." +msgstr "Удалить группу." + +msgid "Detach a managed group from a user." +msgstr "Отсоединить управляемую группу от пользователя." + +msgid "Search for groups." +msgstr "Поиск групп." + +msgid "search for private groups" +msgstr "Поиск личных групп" + +msgid "search for POSIX groups" +msgstr "Поиск POSIX-групп" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" +"Поиск групп с поддержкой внешних не IPA-участников из доверенных доменов" + +msgid "search for non-POSIX groups" +msgstr "Поиск не POSIX-групп" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"group-name\")" + +msgid "Search for groups with these member users." +msgstr "Поиск групп с этими пользователями-участниками." + +msgid "Search for groups without these member users." +msgstr "Поиск групп без этих пользователей-участников." + +msgid "Search for groups with these member groups." +msgstr "Поиск групп с этими группами-участниками." + +msgid "Search for groups without these member groups." +msgstr "Поиск групп без этих групп-участников." + +msgid "Search for groups with these member of groups." +msgstr "Поиск групп, участником которых является эта группа." + +msgid "Search for groups without these member of groups." +msgstr "Поиск групп, участником которых не является эта группа." + +msgid "Search for groups with these member of netgroups." +msgstr "Поиск групп, которые являются участниками этой сетевой группы." + +msgid "Search for groups without these member of netgroups." +msgstr "Поиск групп, которые не являются участниками этой сетевой группы." + +msgid "Search for groups with these member of roles." +msgstr "Поиск групп, которые являются участниками этой роли." + +msgid "Search for groups without these member of roles." +msgstr "Поиск групп, которые не являются участниками этой роли." + +msgid "Search for groups with these member of HBAC rules." +msgstr "Поиск групп, которые являются участниками этого правила HBAC." + +msgid "Search for groups without these member of HBAC rules." +msgstr "Поиск групп, которые не являются участниками этого правила HBAC." + +msgid "Search for groups with these member of sudo rules." +msgstr "Поиск групп, которые являются участниками этого правила Sudo." + +msgid "Search for groups without these member of sudo rules." +msgstr "Поиск групп, которые не являются участниками этого правила Sudo." + +msgid "Modify a group." +msgstr "Изменить группу." + +msgid "change to a POSIX group" +msgstr "Изменить на POSIX-группу" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" +"Изменить для добавления поддержки внешних не IPA-участников из доверенных " +"доменов" + +msgid "Rename the group object" +msgstr "Переименовать объект группы" + +msgid "Remove members from a group." +msgstr "Удалить участников из группы." + +msgid "Display information about a named group." +msgstr "Показать сведения об именованной группе." msgid "" "\n" @@ -13021,6 +10037,20501 @@ msgstr "" " Несоответствующие правила: can_login\n" "\n" +msgid "Simulate use of Host-based access controls" +msgstr "Имитировать использование управления доступом на основе узла" + +msgid "Target host" +msgstr "Целевой узел" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" +"Правила, которые следует проверить. Если они не указаны, считается, что " +"использован параметр --enabled" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" +"Скрыть подробные сведения о том, какие правила соответствуют, не " +"соответствуют или недействительны" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "Проверить все включённые правила IPA [поведение по умолчанию]" + +msgid "Include all disabled IPA rules into test" +msgstr "Проверить все отключённые правила IPA" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" +"Максимальное количество правил, которое следует обработать, если не указан " +"параметр --rules" + +msgid "Warning" +msgstr "Предупреждение" + +msgid "Matched rules" +msgstr "Соответствующие правила" + +msgid "Not matched rules" +msgstr "Несоответствующие правила" + +msgid "Non-existent or invalid rules" +msgstr "Несуществующие или недействительные правила" + +msgid "Result of simulation" +msgstr "Результат имитации" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Отношения доверия между областями (realm)\n" +"\n" +"Управление отношениями доверия между доменами IPA и Active Directory.\n" +"\n" +"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " +"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " +"поддерживает только отношения доверия между доменами IPA и Active Directory " +"под управлением Windows Server 2008 или более поздней версии с " +"функциональными возможностями уровня 2008 или более поздней версии.\n" +"\n" +"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " +"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " +"Работоспособность отношения доверия зависит от возможности обнаруживать " +"специальные ресурсы в другом домене с помощью записей DNS.\n" +"\n" +"Примеры:\n" +"\n" +"1. Установить отношение доверия между областями (realm) с Active Directory с " +"помощью учётных данных администратора AD:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. Вывести список всех существующих отношений доверия:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показать подробные сведения об определённом отношении доверия:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Удалить существующее отношение доверия:\n" +"\n" +" ipa trust-del \n" +"\n" +"Как только отношение доверия будет установлено, удалённых пользователей " +"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " +"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" +"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " +"POSIX-групп.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список участников внешних участников группы ad_admins_external, " +"чтобы определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" +"\n" +"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " +"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " +"идентификаторы затем используются для связи с доверенным доменом конкретного " +"типа.\n" +"\n" +"1. Показать глобальную конфигурацию отношений доверия для типа отношений " +"доверия Active Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " +"Directory и указать другую резервную основную группу (GID резервной основной " +"группы используется в качестве GID основного пользователя, если для " +"пользователя, который выполняет аутентификацию в домене IPA, не был " +"установлен другой основной GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " +"(разрешена любая группа с классом объекта posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +msgid "Domain NetBIOS name" +msgstr "Имя домена NetBIOS" + +msgid "Domain Security Identifier" +msgstr "Идентификатор безопасности домена" + +msgid "SID blacklist incoming" +msgstr "Входящий \"чёрный список\" SID" + +msgid "SID blacklist outgoing" +msgstr "Исходящий \"чёрный список\" SID" + +msgid "Security Identifier" +msgstr "Идентификатор безопасности" + +msgid "NetBIOS name" +msgstr "Имя NetBIOS" + +msgid "Domain GUID" +msgstr "GUID домена" + +msgid "Fallback primary group" +msgstr "Резервная основная группа" + +msgid "Domain name" +msgstr "Имя домена" + +msgid "Trusted domain partner" +msgstr "Партнёр доверенного домена" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "Определить, запущена ли в этой системе команда ipa-adtrust-install." + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" +"Определить, настроен ли подключаемый модуль совместимости схем (Schema " +"Compatibility) для обслуживания пользователей и групп доверенных доменов." + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "Определить, запущена ли команда ipa-adtrust-install с задачей sidgen." + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" +"\n" +"Добавление нового отношения доверия, которое следует использовать.\n" +"\n" +"Эта команда устанавливает отношение доверия с другим доменом, который " +"становится \"доверенным\". В результате пользователи доверенного домена " +"получают доступ к ресурсам этого домена.\n" +"\n" +"В текущей версии поддерживаются только отношения доверия с доменами Active " +"Directory.\n" +"\n" +"Команду можно безопасно запускать несколько раз для одного и того же домена, " +"такой запуск приводит к изменению учётных данных отношения доверия на обеих " +"сторонах.\n" +" " + +msgid "Trust type (ad for Active Directory, default)" +msgstr "Тип отношения доверия (ad для Active Directory, значение по умолчанию)" + +msgid "Active Directory domain administrator" +msgstr "Администратор домена Active Directory" + +msgid "Active Directory domain administrator's password" +msgstr "Пароль администратора домена Active Directory" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "Контроллер домена для домена Active Directory (необязательно)" + +msgid "Shared secret for the trust" +msgstr "Общий секрет для отношения доверия" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" +"Первый идентификатор POSIX диапазона, зарезервированного для доверенного " +"домена" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" +"Размер диапазона идентификаторов, зарезервированного для доверенного домена" + +msgid "Range type" +msgstr "Тип диапазона" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" +"Тип диапазона идентификаторов доверенного домена, один из следующих: ipa-ad-" +"trust-posix, ipa-ad-trust" + +msgid "Delete a trust." +msgstr "Удалить отношение доверия." + +msgid "Refresh list of the domains associated with the trust" +msgstr "Обновить список доменов, связанных с отношением доверия." + +msgid "Search for trusts." +msgstr "Поиск отношений доверия." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"realm\")" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +"Изменить отношение доверия (для будущего использования).\n" +"\n" +" В текущей версии для изменения атрибутов LDAP доступен только параметр " +"по умолчанию. В последующих версиях будут добавлены более специфичные " +"параметры.\n" +" " + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" +"Определить идентификаторы безопасности пользователей и групп в доверенных " +"доменах" + +msgid "Security Identifiers (SIDs)" +msgstr "Идентификаторы безопасности (SID)" + +msgid "Display information about a trust." +msgstr "Показать сведения об отношении доверия." + +msgid "Modify global trust configuration." +msgstr "Изменить глобальную конфигурацию отношений доверия." + +msgid "Show global trust configuration." +msgstr "Показать глобальную конфигурацию отношений доверия." + +msgid "Allow access from the trusted domain" +msgstr "Разрешить доступ из доверенного домена." + +msgid "Remove information about the domain associated with the trust." +msgstr "Удалить сведения о домене, связанном с отношением доверия." + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "Отключить использование ресурсов IPA доменом отношения доверия" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "Разрешить использование ресурсов IPA доменом отношения доверия." + +msgid "Search domains of the trust" +msgstr "Поиск доменов отношения доверия." + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"domain\")" + +msgid "Modify trustdomain of the trust" +msgstr "Изменить значение доверенного домена (trustdomain) отношения доверия." + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "Имя диапазона" + +msgid "First Posix ID of the range" +msgstr "Первый идентификатор POSIX диапазона" + +msgid "Number of IDs in the range" +msgstr "Количество идентификаторов в диапазоне" + +msgid "First RID of the corresponding RID range" +msgstr "Первый RID соответствующего диапазона RID" + +msgid "First RID of the secondary RID range" +msgstr "Первый RID вторичного диапазона RID" + +msgid "Domain SID of the trusted domain" +msgstr "SID доверенного домена" + +msgid "Name of the trusted domain" +msgstr "Имя доверенного домена" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" +"Тип диапазона идентификаторов, один из следующих: ipa-ad-trust-posix, ipa-ad-" +"trust, ipa-local" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +"Добавление нового диапазона идентификаторов.\n" +"\n" +" Для добавления нового диапазона идентификаторов всегда необходимо " +"указывать\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Кроме того,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" могут указываться для нового диапазона идентификаторов для локального " +"домена, в то время как\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" должны быть указаны для добавления нового диапазона для доверенного " +"домена AD.\n" +"\n" +" ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +" " + +msgid "Delete an ID range." +msgstr "Удалить диапазон идентификаторов." + +msgid "Search for ranges." +msgstr "Поиск диапазонов." + +msgid "Modify ID range." +msgstr "Изменить диапазон идентификаторов." + +msgid "Display information about a range." +msgstr "Показать сведения о диапазоне." + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +"Токены OTP\n" +"\n" +"Управление токенами OTP.\n" +"\n" +"В IPA реализована поддержка использования токенов OTP для многофакторной " +"аутентификации. Этот код позволяет управлять токенами OTP.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новый токен:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Проверить токен:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Изменить поставщика:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Удалить токен:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "Unique ID" +msgstr "Уникальный идентификатор" + +msgid "Type of the token" +msgstr "Тип токена" + +msgid "Token description (informational only)" +msgstr "Описание токена (только для сведения)" + +msgid "Owner" +msgstr "Владелец" + +msgid "Assigned user of the token (default: self)" +msgstr "Назначенный пользователь токена (значение по умолчанию: self)" + +msgid "Assigned manager of the token (default: self)" +msgstr "Назначенный руководитель токена (значение по умолчанию: self)" + +msgid "Disabled" +msgstr "Отключён" + +msgid "Mark the token as disabled (default: false)" +msgstr "Отметить токен как отключённый (значение по умолчанию: false)" + +msgid "Validity start" +msgstr "Начало срока действия" + +msgid "First date/time the token can be used" +msgstr "Начало срока действия токена (день и время)" + +msgid "Validity end" +msgstr "Окончание срока действия" + +msgid "Last date/time the token can be used" +msgstr "Окончание срока действия токена (день и время)" + +msgid "Vendor" +msgstr "Поставщик" + +msgid "Token vendor name (informational only)" +msgstr "Имя поставщика токена (только для сведения)" + +msgid "Model" +msgstr "Модель" + +msgid "Token model (informational only)" +msgstr "Модель токена (только для сведения)" + +msgid "Serial" +msgstr "Серийный номер" + +msgid "Token serial (informational only)" +msgstr "Серийный номер токена (только для сведения)" + +msgid "Token secret (Base32; default: random)" +msgstr "Секрет токена (Base32; значение по умолчанию: случайный)" + +msgid "Token hash algorithm" +msgstr "Алгоритм хеширования токена" + +msgid "Digits" +msgstr "Цифры" + +msgid "Number of digits each token code will have" +msgstr "Количество цифр, которое будет содержать каждый код токена" + +msgid "Clock offset" +msgstr "Смещение времени" + +msgid "TOTP token / IPA server time difference" +msgstr "Разница времени между токеном TOTP и сервером IPA" + +msgid "Clock interval" +msgstr "Временной интервал" + +msgid "Length of TOTP token code validity" +msgstr "Продолжительность действия кода токена TOTP" + +msgid "Counter" +msgstr "Счётчик" + +msgid "Initial counter for the HOTP token" +msgstr "Начальный счётчик токена HOTP" + +msgid "Add a new OTP token." +msgstr "Добавить новый токен OTP." + +msgid "(deprecated)" +msgstr "(больше не поддерживается)" + +msgid "Do not display QR code" +msgstr "Не показывать QR-код" + +msgid "Add users that can manage this token." +msgstr "Добавить пользователей, которые могут управлять этим токеном." + +msgid "Delete an OTP token." +msgstr "Удалить токен OTP." + +msgid "Search for OTP token." +msgstr "Поиск токена OTP." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"id\")" + +msgid "Modify a OTP token." +msgstr "Изменить токен OTP." + +msgid "Rename the OTP token object" +msgstr "Переименовать объект токена OTP." + +msgid "Display information about an OTP token." +msgstr "Показать сведения о токене OTP." + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +"Правила Sudo\n" +"\n" +"Sudo (su \"do\") позволяет системному администратору делегировать " +"полномочия, чтобы дать определённым пользователям (или группам " +"пользователей) возможность выполнять некоторые (или все) команды от имени " +"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +"журнал аудита команд и их аргументов.\n" +"\n" +"IPA предоставляет возможности настройки различных аспектов Sudo:\n" +" Users: пользователь (пользователи) или группа (группы), которые могут " +"вызывать Sudo.\n" +" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " +"вызывать Sudo.\n" +" Allow Command: конкретная команда (команды), которые разрешены для " +"выполнения с помощью Sudo. \n" +" Deny Command: конкретная команда (команды), которые запрещены для " +"выполнения с помощью Sudo.\n" +" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " +"от имени которых Sudo будет выполнять команды.\n" +" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +"команды.\n" +" Options: различные параметры sudoers (участники Sudo), которые могут " +"изменить поведение Sudo.\n" +"\n" +"Правилу Sudo можно добавить порядок, который будет руководить порядком " +"обработки записей (если такой порядок предусмотрен на клиентской стороне). " +"Порядок определяется числовым индексом (целое число), который не должен " +"повторяться.\n" +"\n" +"IPA предусматривает специальную привязку DN (binddn) для использования с " +"Sudo:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать новое правило:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Добавить объект команды Sudo и добавить его в правило в качестве " +"разрешённой команды:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Добавить узел в правило:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Добавить пользователя в правило:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Добавить специальное правило Sudo для конфигурации сервера Sudo по " +"умолчанию:\n" +" ipa sudorule-add defaults\n" +"\n" +" Указать параметр Sudo по умолчанию:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "Command category" +msgstr "Категория команд" + +msgid "Command category the rule applies to" +msgstr "Категория команд, к которой применяется правило" + +msgid "RunAs User category" +msgstr "Категория запуска от имени пользователей" + +msgid "RunAs User category the rule applies to" +msgstr "" +"Категория запуска от имени пользователей, к которой применяется правило" + +msgid "RunAs Group category" +msgstr "Категория запуска от имени группы" + +msgid "RunAs Group category the rule applies to" +msgstr "Категория запуска от имени группы, к которой применяется правило" + +msgid "Sudo order" +msgstr "Порядок Sudo" + +msgid "integer to order the Sudo rules" +msgstr "Целое число для упорядочивания правил Sudo" + +msgid "External User" +msgstr "Внешний пользователь" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" +"Внешний пользователь, к которому применяется правило (только sudorule-find)" + +msgid "Host Masks" +msgstr "Маски узлов" + +msgid "Sudo Allow Commands" +msgstr "Разрешённые команды Sudo" + +msgid "Sudo Deny Commands" +msgstr "Запрещённые команды Sudo" + +msgid "Sudo Allow Command Groups" +msgstr "Группы разрешённых команд Sudo" + +msgid "Sudo Deny Command Groups" +msgstr "Группы запрещённых команд Sudo" + +msgid "RunAs Users" +msgstr "Пользователи запуска от имени" + +msgid "Run as a user" +msgstr "Запустить от имени пользователя" + +msgid "Groups of RunAs Users" +msgstr "Группы пользователей запуска от имени" + +msgid "Run as any user within a specified group" +msgstr "Запустить от имени любого пользователя из указанной группы" + +msgid "RunAs External User" +msgstr "Внешний пользователь для RunAs" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" +"Внешний пользователь, от имени которого можно выполнять команды (только " +"sudorule-find)" + +msgid "External Groups of RunAs Users" +msgstr "Внешние группы пользователей запуска от имени" + +msgid "External Groups of users that the command can run as" +msgstr "Внешние группы пользователей, от имени которых можно выполнять команду" + +msgid "RunAs Groups" +msgstr "Группы запуска от имени" + +msgid "Run with the gid of a specified POSIX group" +msgstr "Запускать с идентификатором указанной POSIX-группы" + +msgid "RunAs External Group" +msgstr "Внешняя группа для RunAs" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" +"Внешняя группа, от имени которой можно выполнять команды (только sudorule-" +"find)" + +msgid "Sudo Option" +msgstr "Параметр Sudo" + +msgid "Create new Sudo Rule." +msgstr "Создать новое правило Sudo." + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "Добавить команды и группы команд Sudo, которых касается правило Sudo." + +msgid "member sudo command group" +msgstr "группа команд — участник Sudo" + +msgid "sudo command groups to add" +msgstr "группы команд Sudo, которые следует добавить" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Добавить узлы и группы узлов, которых касается правило Sudo." + +msgid "host masks of allowed hosts" +msgstr "Маски разрешённых узлов" + +msgid "Add an option to the Sudo Rule." +msgstr "Добавить параметр в правило Sudo." + +msgid "Add group for Sudo to execute as." +msgstr "Добавить группу для выполнения Sudo от её имени." + +msgid "Add users and groups for Sudo to execute as." +msgstr "Добавить пользователей и группы для выполнения Sudo от их имени." + +msgid "Add users and groups affected by Sudo Rule." +msgstr "Добавить пользователей и группы, которых касается правило Sudo." + +msgid "Delete Sudo Rule." +msgstr "Удалить правило Sudo." + +msgid "Disable a Sudo Rule." +msgstr "Отключить правило Sudo." + +msgid "Enable a Sudo Rule." +msgstr "Включить правило Sudo." + +msgid "Search for Sudo Rule." +msgstr "Поиск правила Sudo." + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"sudorule-name\")" + +msgid "Modify Sudo Rule." +msgstr "Изменить правило Sudo." + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "Удалить команды и группы команд Sudo, которых касается правило Sudo." + +msgid "sudo command groups to remove" +msgstr "группы команд Sudo, которые следует удалить" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Удалить узлы и группы узлов, которых касается правило Sudo." + +msgid "Remove an option from Sudo Rule." +msgstr "Удалить параметр из правила Sudo." + +msgid "Remove group for Sudo to execute as." +msgstr "Удалить группу для выполнения Sudo от её имени." + +msgid "Remove users and groups for Sudo to execute as." +msgstr "Удалить пользователей и группы для выполнения Sudo от их имени." + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Удалить пользователей и группы, которых касается правило Sudo." + +msgid "Display Sudo Rule." +msgstr "Показать правило Sudo." + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" +"Ограничение времени поиска в секундах (\"0\" означает отсутствие ограничения)" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" +"Максимальное количество возвращённых записей (\"0\" означает отсутствие " +"ограничения)" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Управление правилами CA ACL.\n" +"\n" +"Этот подключаемый модуль используется для определения правил, которые " +"управляют тем, для каких учётных записей разрешено выдавать сертификаты с " +"помощью конкретного профиля сертификатов.\n" +"\n" +"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" +"\n" +"Идентификатор профиля — это строка без пробелов и знаков препинания, она " +"начинается с буквы, за которой следуют другие буквы, цифры или символы " +"подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать ACL службы сертификации \"test\", которая предоставляет всем " +"пользователям доступ к профилю \"UserCert\":\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Показать свойства именованной ACL службы сертификации:\n" +" ipa caacl-show test\n" +"\n" +" Создать ACL службы сертификации, чтобы разрешить пользователю \"alice\" " +"использовать профиль \"DNP3\":\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Отключить ACL службы сертификации:\n" +" ipa caacl-disable test\n" +"\n" +" Удалить ACL службы сертификации:\n" +" ipa caacl-del test\n" + +msgid "ACL name" +msgstr "Имя ACL" + +msgid "Profile category" +msgstr "Категория профилей" + +msgid "Profile category the ACL applies to" +msgstr "Категория профилей, к которой применяется ACL" + +msgid "User category the ACL applies to" +msgstr "Категория пользователей, к которой применяется ACL" + +msgid "Host category the ACL applies to" +msgstr "Категория узлов, к которой применяется ACL" + +msgid "Service category the ACL applies to" +msgstr "Категория служб, к которой применяется ACL" + +msgid "Profiles" +msgstr "Профили" + +msgid "Create a new CA ACL." +msgstr "Создать новую запись CA ACL." + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Добавить целевые узлы или группы узлов в CA ACL." + +msgid "Add profiles to a CA ACL." +msgstr "Добавить профили в CA ACL." + +msgid "member Certificate Profile" +msgstr "Профиль сертификатов — участник" + +msgid "Certificate Profiles to add" +msgstr "Профили сертификатов, которые следует добавить" + +msgid "Add services to a CA ACL." +msgstr "Добавить службы в CA ACL." + +msgid "Add users and groups to a CA ACL." +msgstr "Добавить пользователей и группы в CA ACL." + +msgid "Delete a CA ACL." +msgstr "Удалить CA ACL." + +msgid "Disable a CA ACL." +msgstr "Отключить CA ACL." + +msgid "Enable a CA ACL." +msgstr "Включить CA ACL." + +msgid "Search for CA ACLs." +msgstr "Поиск CA ACL." + +msgid "Modify a CA ACL." +msgstr "Изменить CA ACL." + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Удалить целевые узлы или группы узлов из CA ACL." + +msgid "Remove profiles from a CA ACL." +msgstr "Удалить профили из CA ACL." + +msgid "Certificate Profiles to remove" +msgstr "Профили сертификатов, которые следует удалить" + +msgid "Remove services from a CA ACL." +msgstr "Удалить службы из CA ACL." + +msgid "Remove users and groups from a CA ACL." +msgstr "Удалить пользователей и группы из CA ACL." + +msgid "Display the properties of a CA ACL." +msgstr "Показать свойства CA ACL." + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" +"Максимальное количество времени (в секундах) для поиска (-1 или 0 означает " +"отсутствие ограничения)" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" +"Максимальное количество записей результатов поиска (-1 или 0 означает " +"отсутствие ограничения)" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" +"\n" +"Повысить уровень домена IPA.\n" + +msgid "Query current Domain Level." +msgstr "Запросить текущий уровень домена." + +msgid "Current domain level:" +msgstr "Текущий уровень домена:" + +msgid "Change current Domain Level." +msgstr "Изменить текущий уровень домена." + +msgid "Domain Level" +msgstr "Уровень домена" + +msgid "Add certificates to host entry" +msgstr "Добавить сертификаты в запись узла" + +msgid "Remove certificates from host entry" +msgstr "Удалить сертификаты из записи узла." + +msgid "Fallback to AD DC LDAP" +msgstr "Перейти к резервному варианту LDAP DC AD " + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" +"Разрешить переход к резервному варианту LDAP DC AD при определении адресов " +"доверенных объектов AD. Только для двусторонних отношений доверия." + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" +"Применяет представление ID к указанным узлам или текущим участникам " +"указанных групп узлов. Если к узлу применяется другое представление ID, оно " +"будет переопределено." + +msgid "Add to default group" +msgstr "Добавить в группу по умолчанию" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" +"Добавить перенесённые записи пользователей без группы в группу по умолчанию " +"(значение по умолчанию: true)" + +msgid "Search scope" +msgstr "Область поиска" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" +"Область поиска LDAP для пользователей и групп: base, onelevel или subtree. " +"Значение по умолчанию: onelevel." + +msgid "Target DN subtree" +msgstr "Поддерево DN цели" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" +"Необязательное поддерево DN, в которое может быть перемещена запись (должна " +"находиться в поддереве, но может ещё не существовать)" + +msgid "Origin DN subtree" +msgstr "Поддерево DN происхождения" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" +"Необязательное поддерево DN, из которого может быть перемещена запись " +"(должна принадлежать к поддереву, но может ещё не существовать)" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +"IPA-серверы\n" +"\n" +"Получение сведений об установленных IPA-серверах.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Найти все серверы:\n" +" ipa server-find\n" +"\n" +" Показать определённый сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "Server name" +msgstr "Имя сервера" + +msgid "IPA server hostname" +msgstr "Имя узла IPA-сервера" + +msgid "Managed suffix" +msgstr "Управляемый суффикс" + +msgid "Min domain level" +msgstr "Мин. уровень домена" + +msgid "Minimum domain level" +msgstr "Минимальный уровень домена" + +msgid "Max domain level" +msgstr "Макс. уровень домена" + +msgid "Maximum domain level" +msgstr "Максимальный уровень домена" + +msgid "Delete IPA server." +msgstr "Удалить IPA-сервер." + +msgid "Search for IPA servers." +msgstr "Поиск IPA-серверов." + +msgid "Show IPA server." +msgstr "Показать IPA-сервер." + +msgid "Add new certificates to a service" +msgstr "Добавить новые сертификаты в запись службы." + +msgid "Remove certificates from a service" +msgstr "Удалить сертификаты из записи службы." + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Ограниченное делегирование служб\n" +"\n" +"Управление правилами, с помощью которых можно ограничить делегирование " +"учётных данных таким образом, что служба сможет выполнять олицетворение " +"пользователя при обмене данными с другой службой без необходимости для " +"пользователя самом деле перенаправлять билет для получения билета (TGT). " +"Такой метод делегирования учётных данных значительно лучше, так как " +"предотвращает раскрытие краткосрочного секрета пользователя.\n" +"\n" +"В соответствии с соглашением об именовании к имени соответствующего правила " +"добавляется слово \"target\" или \"targets\". Такая схема имён не является " +"обязательной, но она помогает концептуально связать правила и их " +"назначения.\n" +"\n" +"Правило состоит из двух компонентов:\n" +" - Список целей (назначений), к которым применяется правило\n" +" - Список memberPrincipals, которым разрешено делегирование для этих " +"целей \n" +"\n" +"Цель состоит из списка учётных записей, которые можно делегировать.\n" +"\n" +"Если проще, правило утверждает, что определённую учетную запись можно " +"делегировать как указанный список учётных записей, согласно заданному списку " +"целей.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новое правило ограниченного делегирования:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Добавить новую цель ограниченного делегирования:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Добавить учётную запись в правило:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Добавить цель в правило:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Добавить учётную запись в цель:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Показать сведения об именованном правиле делегирования и цели:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Удалить ограниченное делегирование:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"В этом примере служба ftp может получать билет для получения билета для " +"службы ldap от имени связанного пользователя.\n" +"\n" +"Настоятельно не рекомендуется изменять делегирования, которые поставляются с " +"IPA, ipa-http-delegation и его цели ipa-cifs-delegation-targets и Ipa-ldap-" +"delegation-targets. Неправильная настройка может привести к потере " +"возможности делегирования, что повлечет неработоспособность всей системы.\n" + +msgid "Allowed Target" +msgstr "Допустимая цель" + +msgid "Create a new service delegation rule." +msgstr "Создать новое правило делегирования служб." + +msgid "Add member to a named service delegation rule." +msgstr "Добавить участника в именованное правило делегирования служб." + +msgid "member principal" +msgstr "учётная запись — участник" + +msgid "principal to add" +msgstr "учётная запись, которую следует добавить" + +msgid "Add target to a named service delegation rule." +msgstr "Добавить цель в именованное правило делегирования служб." + +msgid "member service delegation target" +msgstr "цель делегирования служб — участник" + +msgid "service delegation targets to add" +msgstr "цели делегирования служб, которые следует добавить" + +msgid "Delete service delegation." +msgstr "Удалить делегирование служб." + +msgid "Search for service delegations rule." +msgstr "Поиск правила делегирования служб." + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"delegation-name" +"\")" + +msgid "Remove member from a named service delegation rule." +msgstr "Удалить участника из именованного правила делегирования служб." + +msgid "principal to remove" +msgstr "учётная запись, которую следует удалить" + +msgid "Remove target from a named service delegation rule." +msgstr "Удалить цель из именованного правила делегирования служб." + +msgid "service delegation targets to remove" +msgstr "цели делегирования служб, которые следует удалить" + +msgid "Display information about a named service delegation rule." +msgstr "Показать сведения об именованном правиле делегирования служб." + +msgid "Create a new service delegation target." +msgstr "Создать новую цель делегирования служб." + +msgid "Add member to a named service delegation target." +msgstr "Добавить участника в именованную цель делегирования служб." + +msgid "Delete service delegation target." +msgstr "Удалить цель делегирования служб." + +msgid "Search for service delegation target." +msgstr "Поиск цели делегирования служб." + +msgid "Remove member from a named service delegation target." +msgstr "Удалить участника из именованной цели делегирования служб." + +msgid "Display information about a named service delegation target." +msgstr "Показать сведения об именованной цели делегирования служб." + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" +"\n" +"Неподтверждённые пользователи\n" +"\n" +"Управление записями неподтверждённых пользователей.\n" +"\n" +"Записи неподтверждённых пользователей находятся непосредственно в " +"контейнере: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\". Пользователь не может проходить " +"аутентификацию с помощью этих записей (даже если они содержат учётные " +"данные), они являются кандидатами на преобразование в активные записи. \n" +"\n" +"Активные записи пользователей являются пользователями Posix, находящимися " +"непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователь может " +"проходить аутентификацию с помощью активных записей, если они содержат " +"учётные данные.\n" +"\n" +"Удалённые записи пользователей являются пользователями Posix, находящимися " +"непосредственно в контейнере: \"cn=deleted users, cn=accounts, " +"cn=provisioning, SUFFIX\". Пользователь не может проходить аутентификацию с " +"помощью этих записей (даже если они содержат учётные данные).\n" +"\n" +"Контейнер неподтверждённых пользователей содержит записи:\n" +" - созданные с помощью команд \"stageuser-add\", которые являются " +"пользователями Posix\n" +" - созданные с помощью внешней системы подготовки \n" +"\n" +"Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать следующим " +"требованиям:\n" +" - RDN записи имеет значение \"uid\"\n" +" - ipaUniqueID имеет значение \"autogenerate\"\n" +"\n" +"IPA поддерживает широкий спектр форматов имён пользователей, но следует " +"учитывать те ограничения, которые могут существовать в конкретной среде. " +"Например, имена пользователей, которые начинаются с цифры или превышают " +"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" +"Используйте команду \"ipa config-mod\" для изменения формата имени " +"пользователя, разрешённого средствами IPA.\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить нового неподтверждённого пользователя:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Добавить неподтверждённого пользователя из контейнера Delete:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" + +msgid "Activate a stage user." +msgstr "Активировать неподтверждённого пользователя." + +msgid "Add a new stage user." +msgstr "Добавить нового неподтверждённого пользователя." + +msgid "Create Stage user in from a delete user" +msgstr "" +"Создать неподтверждённого пользователя на основе удалённого пользователя" + +msgid "Delete a stage user." +msgstr "Удалить неподтверждённого пользователя." + +msgid "Search for stage users." +msgstr "Поиск неподтверждённых пользователей." + +msgid "Search for stage users with these member of groups." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этой " +"группы." + +msgid "Search for stage users without these member of groups." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этой " +"группы." + +msgid "Search for stage users with these member of netgroups." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этой " +"сетевой группы." + +msgid "Search for stage users without these member of netgroups." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этой " +"сетевой группы." + +msgid "Search for stage users with these member of roles." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этой роли." + +msgid "Search for stage users without these member of roles." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этой " +"роли." + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этого " +"правила HBAC." + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этого " +"правила HBAC." + +msgid "Search for stage users with these member of sudo rules." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этого " +"правила Sudo." + +msgid "Search for stage users without these member of sudo rules." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этого " +"правила Sudo." + +msgid "Modify a stage user." +msgstr "Изменить неподтверждённого пользователя." + +msgid "Rename the stage user object" +msgstr "Переименовать объект неподтверждённого пользователя" + +msgid "Display information about a stage user." +msgstr "Показать сведения о неподтверждённом пользователе." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" +"\n" +"Топология\n" +"\n" +"Управление топологией репликации.\n" +"\n" +"Требуется уровень домена не ниже 1.\n" + +msgid "Segment name" +msgstr "Имя сегмента" + +msgid "Arbitrary string identifying the segment" +msgstr "Обязательная строка, которая идентифицирует сегмент" + +msgid "Left node" +msgstr "Левый узел" + +msgid "Left replication node - an IPA server" +msgstr "Левый узел репликации — IPA-сервер" + +msgid "Right node" +msgstr "Правый узел" + +msgid "Right replication node - an IPA server" +msgstr "Правый узел репликации — IPA-сервер" + +msgid "Connectivity" +msgstr "Возможность подключения" + +msgid "Direction of replication between left and right replication node" +msgstr "Направление репликации между левым и правым узлами репликации" + +msgid "Attributes to strip" +msgstr "Атрибуты, которые следует убрать" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" +"Разделённый пробелами список атрибутов, которые удалены из обновлений " +"репликации" + +msgid "Attributes to replicate" +msgstr "Атрибуты, которые следует реплицировать" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" +"Атрибуты, которые не реплицируются на сервер-потребитель при частичном " +"обновлении. Например, `(objectclass=*) $ EXCLUDE accountlockout memberof" + +msgid "Attributes for total update" +msgstr "Атрибуты для общего обновления" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" +"Атрибуты, которые не реплицируются на сервер-потребитель при общем " +"обновлении. Например, (objectclass=*) $ EXCLUDE accountlockout memberof" + +msgid "Session timeout" +msgstr "Время ожидания сеанса" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" +"Количество секунд, в течение которого исходящие операции LDAP ожидают ответа " +"от удалённой реплики, прежде чем будет превышено время ожидания и выдано " +"сообщение об ошибке" + +msgid "Replication agreement enabled" +msgstr "Соглашение о репликации включено" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" +"Активно ли соглашение о репликации, то есть выполняется ли репликация по " +"этому соглашению" + +msgid "Suffix name" +msgstr "Имя суффикса" + +msgid "LDAP suffix to be managed" +msgstr "Суффикс LDAP, которым следует управлять" + +msgid "Add a new segment." +msgstr "Добавить новый сегмент." + +msgid "Delete a segment." +msgstr "Удалить сегмент." + +msgid "Search for topology segments." +msgstr "Поиск сегментов топологии." + +msgid "Modify a segment." +msgstr "Изменить сегмент." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" +"Отправить запрос на полную повторную инициализацию узла, чтобы получить " +"данные с другого узла." + +msgid "Initialize left node" +msgstr "Инициализировать левый узел" + +msgid "Initialize right node" +msgstr "Инициализировать правый узел" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "Остановить уже начатое обновление выбранного узла (узлов)" + +msgid "Display a segment." +msgstr "Показать сегмент." + +msgid "Add a new topology suffix to be managed." +msgstr "Добавить новый суффикс топологии, которым следует управлять." + +msgid "Delete a topology suffix." +msgstr "Удалить суффикс топологии." + +msgid "Search for topology suffices." +msgstr "Поиск суффиксов топологии." + +msgid "Modify a topology suffix." +msgstr "Изменить суффикс топологии." + +msgid "Show managed suffix." +msgstr "Показать управляемый суффикс." + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" +"\n" +"Проверка топологии репликации для суффикса.\n" +"\n" +"Проверки, которые выполняются:\n" +" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " +"репликации между всеми серверами).\n" +" 2. проверка того, не превышено ли рекомендованное количество соглашений о " +"репликации между серверами. \n" +" " + +msgid "Preserved user" +msgstr "Хранимый пользователь" + +msgid "Add one or more certificates to the user entry" +msgstr "Добавить один или несколько сертификатов в запись пользователя." + +msgid "Remove one or more certificates to the user entry" +msgstr "Удалить один или несколько сертификатов из записи пользователя." + +msgid "Move deleted user into staged area" +msgstr "Переместить удалённую запись пользователя в область хранения." + +msgid "Undelete a delete user account." +msgstr "Восстановить удалённую учётную запись пользователя." + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +"Хранилища\n" +"\n" +"Управление хранилищами.\n" +"\n" +"Хранилище — это безопасное место для хранения секрета.\n" +"\n" +"В зависимости от владения хранилища подразделяются на три категории:\n" +"* хранилища пользователей или личные хранилища\n" +"* хранилища служб\n" +"* хранилища совместного использования\n" +"\n" +"Хранилища пользователей — это хранилища, владельцем которых является " +"конкретный пользователь. Личными являются хранилища, владельцем которых " +"является текущий пользователь. Владельцем хранилища службы является " +"определённая служба. Хранилища совместного использования принадлежат " +"администратору, но могут использоваться другими пользователями или " +"службами.\n" +"\n" +"В зависимости от механизма обеспечения безопасности выделяют три типа " +"хранилищ:\n" +"* стандартные хранилища\n" +"* симметричные хранилища\n" +"* асимметричные хранилища\n" +"\n" +"В стандартном хранилище для передачи и хранения секрета используются " +"безопасные механизмы. Секрет могут получить только те пользователи, у " +"которых есть доступ к хранилищу.\n" +"\n" +"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью пароля. Секрет можно " +"получить только с помощью этого пароля.\n" +"\n" +"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " +"можно получить только с помощью закрытого ключа.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Вывести список хранилищ:\n" +" ipa vault-find\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +"\n" +" Добавить стандартное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type standard\n" +"\n" +" Добавить симметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Добавить асимметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Показать хранилище:\n" +" ipa vault-show <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +"\n" +" Изменить описание хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --desc <описание>\n" +"\n" +" Изменить тип хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старый пароль / закрытый ключ]\n" +" [новый пароль / открытый ключ]\n" +"\n" +" Изменить пароль симметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password <старый пароль>\n" +" --new-password <новый пароль>\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" +"\n" +" Изменить ключи асимметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закрытого ключа>\n" +" --public-key-file <файл нового открытого ключа>\n" +"\n" +" Удалить хранилище:\n" +" ipa vault-del <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +"\n" +" Показать конфигурацию хранилища:\n" +" ipa vaultconfig-show\n" +"\n" +" Архивировать данные в стандартное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" +"\n" +" Архивировать данные в симметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" +" --password-file password.txt\n" +"\n" +" Архивировать данные в асимметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" +"\n" +" Получить данные из стандартного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" +"\n" +" Получить данные из симметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" +" --password-file password.txt\n" +"\n" +" Получить данные из асимметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных> --private-key-file private.pem\n" +"\n" +" Добавить владельцев хранилища:\n" +" ipa vault-add-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +"\n" +" Удалить владельцев хранилища:\n" +" ipa vault-remove-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +"\n" +" Добавить участников хранилища:\n" +" ipa vault-add-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +"\n" +" Удалить участников хранилища:\n" +" ipa vault-remove-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "Vault name" +msgstr "Имя хранилища" + +msgid "Vault description" +msgstr "Описание хранилища" + +msgid "Vault type" +msgstr "Тип хранилища" + +msgid "Salt" +msgstr "Соль" + +msgid "Vault salt" +msgstr "Соль хранилища" + +msgid "Public key" +msgstr "Открытый ключ" + +msgid "Vault public key" +msgstr "Открытый ключ хранилища" + +msgid "Owner users" +msgstr "Пользователи-владельцы" + +msgid "Owner groups" +msgstr "Группы-владельцы" + +msgid "Owner services" +msgstr "Службы-владельцы" + +msgid "Vault service" +msgstr "Служба хранилища" + +msgid "Shared vault" +msgstr "Хранилище совместного использования" + +msgid "Vault user" +msgstr "Пользователь хранилища" + +msgid "Transport Certificate" +msgstr "Сертификат транспорта" + +msgid "Service name of the service vault" +msgstr "Имя службы хранилища служб" + +msgid "Username of the user vault" +msgstr "Имя пользователя хранилища пользователей" + +msgid "Add members to a vault." +msgstr "Добавить участников в хранилище." + +msgid "Add owners to a vault." +msgstr "Добавить владельцев в хранилище." + +msgid "owner user" +msgstr "пользователь-владелец" + +msgid "owner group" +msgstr "группа-владелец" + +msgid "owner service" +msgstr "служба-владелец" + +msgid "Owners that could not be added" +msgstr "Владельцы, которых не удалось добавить" + +msgid "Number of owners added" +msgstr "Количество добавленных владельцев" + +msgid "Session key wrapped with transport certificate" +msgstr "Ключ сеанса, упакованный с сертификатом транспорта" + +msgid "Vault data encrypted with session key" +msgstr "Данные хранилища, зашифрованные ключом сеанса" + +msgid "Nonce" +msgstr "Специальный" + +msgid "Delete a vault." +msgstr "Удалить хранилище." + +msgid "Search for vaults." +msgstr "Поиск хранилищ." + +msgid "List all service vaults" +msgstr "Вывести список всех хранилищ служб" + +msgid "List all user vaults" +msgstr "Вывести список всех хранилищ пользователей" + +msgid "Remove members from a vault." +msgstr "Удалить участников из хранилища." + +msgid "Remove owners from a vault." +msgstr "Удалить владельцев из хранилища." + +msgid "Owners that could not be removed" +msgstr "Владельцы, которых не удалось удалить" + +msgid "Number of owners removed" +msgstr "Количество удалённых владельцев" + +msgid "Display information about a vault." +msgstr "Показать сведения о хранилище." + +msgid "Show vault configuration." +msgstr "Показать конфигурацию хранилища." + +msgid "Output file to store the transport certificate" +msgstr "Выходной файл для хранения сертификата транспорта" + +msgid "Add owners to a vault container." +msgstr "Добавить владельцев в контейнер хранилищ." + +msgid "Delete a vault container." +msgstr "Удалить контейнер хранилищ." + +msgid "Remove owners from a vault container." +msgstr "Удалить владельцев из контейнера хранилищ." + +msgid "Display information about a vault container." +msgstr "Показать сведения о контейнере хранилищ." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Учётная запись для этого сертификата (например, HTTP/test.example.com)" + +msgid "Profile ID" +msgstr "Идентификатор профиля" + +msgid "Certificate Profile to use" +msgstr "Сертификат профиля, который следует использовать" + +msgid "Two-way trust" +msgstr "Двустороннее отношение доверия" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" +"Установить двунаправленное отношение доверия. По умолчанию устанавливается " +"только одностороннее отношение." + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Добавление нового диапазона идентификаторов.\n" +"\n" +" Для добавления нового диапазона идентификаторов всегда необходимо " +"указывать\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Кроме того,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" могут указываться для нового диапазона идентификаторов для локального " +"домена, в то время как\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" должны быть указаны для добавления нового диапазона для доверенного " +"домена AD.\n" +"\n" +"======= \n" +"ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +"=======" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Изменить диапазон идентификаторов.\n" +" \n" +"======= \n" +"ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +"=======" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" +"\n" +"Управление профилями сертификатов\n" +"\n" +"Профили сертификатов используются центром сертификации (Certificate " +"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " +"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " +"если это так, определить, какие возможности и расширения будут предоставлены " +"сертификатом.\n" +"\n" +"Формат профиля сертификатов — это формат в виде списка свойств, который " +"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" +"\n" +"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" +"\n" +"Идентификатор профиля — это строка без пробелов и знаков препинания, она " +"начинается с буквы, за которой следуют другие буквы, цифры или символы " +"подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Удалить профиль сертификатов:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показать сведения о профиле:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Сохранить конфигурацию профиля в файл:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Поиск профилей, в которых не хранятся сертификаты:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" +"\n" +"Формат конфигурации профиля — это формат в виде необработанного списка " +"свойств, который используется системой сертификации Dogtag Certificate " +"System. Поддержка формата XML не предусмотрена.\n" +"\n" +"К профилям под управлением IPA применяются следующие ограничения:\n" +"\n" +"- При импорте профиля значение поля \"profileId\", если это поле имеется, " +"должно совпадать с идентификатором, указанным в командной строке.\n" +"\n" +"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" +"\n" +"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" +"\n" +"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " +"\"certOutputImpl\".\n" + +msgid "Profile ID for referring to this profile" +msgstr "Идентификатор профиля для ссылки на этот профиль" + +msgid "Profile description" +msgstr "Описание профиля" + +msgid "Brief description of this profile" +msgstr "Краткое описание этого профиля" + +msgid "Store issued certificates" +msgstr "Сохранять выданные сертификаты" + +msgid "Whether to store certs issued using this profile" +msgstr "" +"Определяет, следует ли сохранять сертификаты, выданные с помощью этого " +"профиля" + +msgid "Delete a Certificate Profile." +msgstr "Удалить профиль сертификатов." + +msgid "Search for Certificate Profiles." +msgstr "Поиск профилей сертификатов." + +msgid "Import a Certificate Profile." +msgstr "Импортировать профиль сертификатов." + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" +"Имя файла необработанного профиля. Поддержка формата XML не предусмотрена." + +msgid "Modify Certificate Profile configuration." +msgstr "Изменить конфигурацию профиля сертификатов." + +msgid "File containing profile configuration" +msgstr "Файл, который содержит конфигурацию профиля" + +msgid "Display the properties of a Certificate Profile." +msgstr "Показать свойства профиля сертификатов." + +msgid "Write profile configuration to file" +msgstr "Записать конфигурацию профиля в файл" + +msgid "Remove users that can manage this token." +msgstr "Удалить пользователей, которые могут управлять этим токеном." + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "Определить адрес по имени узла в DNS. (Больше не поддерживается.)" + +msgid "Hostname (FQDN)" +msgstr "Имя узла (FQDN)" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" +"Принудительно создать зону DNS, даже если она будет пересекаться с " +"существующей зоной" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" +"Принудительно создать зону DNS, даже если не удаётся определить сервер имён. " +"(Больше не поддерживается.)" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Группы пользователей\n" +"\n" +"Управление группами пользователей. По умолчанию все новые группы являются " +"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " +"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " +"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " +"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" +"\n" +"У каждой группы должно быть описание.\n" +"\n" +"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " +"поддерживается, но может повлиять на разрешения для файлов. При создании " +"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " +"создаст его автоматически.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Добавить новую не-POSIX-группу:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Преобразовать не-POSIX-группу в posix-группу:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Добавить новую POSIX-группу с определённым ID группы:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Удалить группу:\n" +" ipa group-del unixadmins\n" +"\n" +" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Добавить нескольких пользователей в группу \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Удалить пользователя из группы \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa group-show localadmins\n" +"\n" +"Участие внешних групп создано для того, чтобы сделать возможной привязку " +"пользователей из доверенных доменов к локальным POSIX-группам с целью " +"использования ресурсов IPA. Внешние участники должны быть добавлены в " +"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " +"затем должна быть включена в одну из групп POSIX.\n" +"\n" +"В текущей версии участник внешней группы является идентификатором " +"безопасности (Security Identifier или SID), определённым доверенным доменом. " +"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " +"или имя@домен. IPA попытается определить SID по переданному имени путём " +"использования общего каталога доверенного домена.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список внешних участников группы ad_admins_external, чтобы " +"определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" +"\n" +"Имитация использования управления доступом на основе узла\n" +"\n" +"Правила HBAC управляют тем, кто и на каких узлах сможет получать доступ к " +"определённым службам. Вы можете воспользоваться HBAC для определения тех " +"пользователей и групп, которые будут иметь доступ к определённой службе или " +"группе служб на целевом узле. \n" +"\n" +"Так как применение правил HBAC подразумевает использование рабочей среды, " +"этот подключаемый модуль предназначен для обеспечения имитации оценки правил " +"HBAC при отсутствии доступа к рабочей среде.\n" +"\n" +" Проверка тестового пользователя, который обращается к службе на именованном " +"узле, на соответствие существующим включённым правилам.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" Параметры --user, --host и --service являются обязательными, остальные " +"можно не указывать.\n" +"\n" +" Если указан параметр --rules, имитировать включение указанных правил и " +"проверить возможность входа пользователя в случае использования только этих " +"правил.\n" +"\n" +" Если указан параметр --enabled, добавить все включённые правила HBAC к " +"имитации.\n" +"\n" +" Если указан параметр --disabled, добавить все отключённые правила HBAC к " +"имитации.\n" +"\n" +" Если указан параметр --nodetail, не возвращать данные о соответствующих или " +"не соответствующих правилах.\n" +"\n" +" Если одновременно указаны параметры --rules и --enabled, выполнить имитацию " +"--rules _и_\n" +" всех включённых правил IPA.\n" +"\n" +" Если не указан параметр --rules, выполнить имитацию всех включённых правил " +"IPA.\n" +" По умолчанию в IPA имеется общее ограничение количества извлекаемых " +"записей, его можно изменить с помощью параметра --sizelimit.\n" +"\n" +" ПРИМЕРЫ:\n" +"\n" +" 1. Использовать все включённые правила HBAC в базе данных IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +" Соответствующие правила: allow_all\n" +"\n" +" 2. Отключить подробный отчёт о применении правил:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +"\n" +" 3. Проверить явно указанные правила HBAC:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: myrule\n" +"\n" +" 4. Использовать все включённые правила HBAC в базе данных IPA + явно " +"указанные правила:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +" Соответствующие правила: allow_all\n" +"\n" +" 5. Проверить все отключённые правила HBAC в базе данных IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" Несоответствующие правила: new-rule\n" +"\n" +" 6. Проверить все отключённые правила HBAC в базе данных IPA + явно " +"указанные правила:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +"\n" +" 7. Проверить все (включённые и отключённые) правила HBAC в базе данных " +"IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +" Несоответствующие правила: new-rule\n" +" Соответствующие правила: allow_all\n" +"\n" +"\n" +"HBACTEST И ДОВЕРЕННЫЕ ДОМЕНЫ\n" +"\n" +"Если в IPA настроен внешний доверенный домен, правила HBAC также применяются " +"к пользователям, которые выполняют доступ к ресурсам IPA из доверенного " +"домена. Пользователи и группы доверенного домена (и их SID) затем могут быть " +"привязаны к внешним группам, которые могут быть участниками POSIX-групп в " +"IPA. Такие привязки можно использовать в правилах HBAC, тем самым разрешая " +"доступ к ресурсам, которые защищены системой HBAC.\n" +"\n" +"Подключаемый модуль hbactest позволяет проверять доступ как для локальных " +"пользователей IPA, так и для пользователей из доверенных доменов, как с " +"полным именем пользователя, так и по SID пользователей. В таких именах " +"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" +"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." +"test.\n" +"\n" +"Обратите внимание, что выполнять hbactest с аргументом пользователя " +"доверенного домена в параметре --user могут только участники группы \"trust " +"admins\".\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" 1. Проверить, соответствует ли пользователь из доверенного домена, " +"указанный по краткому имени, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Соответствующие правила: can_login\n" +"\n" +" 2. Проверить, соответствует ли пользователь из доверенного домена, " +"указанный по имени домена, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Соответствующие правила: can_login\n" +"\n" +" 3. Проверить, соответствует ли пользователь из доверенного домена, " +"указанный по SID, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Соответствующие правила: can_login\n" +"\n" +" 4. Проверить, соответствует ли другой пользователь из доверенного " +"домена, указанный по SID, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Несоответствующие правила: can_login\n" +"\n" +" 5. Проверить, соответствует ли другой пользователь из доверенного домена, " +"указанный по краткому имени, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Несоответствующие правила: can_login\n" +"\n" + +msgid "Managed suffixes" +msgstr "Управляемые суффиксы" + +msgid "Check connection to remote IPA server." +msgstr "Проверить связь с удалённым IPA-сервером." + +msgid "Remote server name" +msgstr "Имя удалённого сервера" + +msgid "Remote IPA server hostname" +msgstr "Имя узла удалённого IPA-сервера" + +msgid "suffix" +msgstr "суффикс" + +msgid "Search for servers with these managed suffixes." +msgstr "Поиск серверов, включая серверы с этими управляемыми суффиксами." + +msgid "Search for servers without these managed suffixes." +msgstr "Поиск серверов, не включая серверы с этими управляемыми суффиксами. " + +msgid "Add a manager to the stage user entry" +msgstr "Добавить руководителя в запись неподтверждённого пользователя." + +msgid "Remove a manager to the stage user entry" +msgstr "Удалить руководителя из записи неподтверждённого пользователя." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +"Топология\n" +"\n" +"Управление топологией репликации на уровне домена 1.\n" +"\n" +"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" +"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " +"связанные с доменом данные\n" +"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " +"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" +"\n" +"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" +"серверы. Способ репликации определяется соглашениями о репликации. " +"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " +"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " +"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " +"выполняется централизованно с помощью команд \"ipa topology*\".\n" +"\n" +"Соглашения представляются сегментами топологии. По умолчанию сегмент " +"топологии представляет 2 соглашения о репликации: по одному для каждого " +"направления, например, от A до B и от B до A. Создание однонаправленных " +"сегментов запрещено.\n" +"\n" +"Чтобы проверить, что ни один сервер не отключается в топологии указанного " +"суффикса, используйте эту команду:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Примеры:\n" +" Найти все IPA-серверы:\n" +" ipa server-find\n" +"\n" +" Найти все суффиксы:\n" +" ipa topologysuffix-find\n" +"\n" +" Добавить сегмент топологии в суффикс \"domain\":\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Добавить сегмент топологии в суффикс \"ca\":\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" +" ipa topologysegment-find domain\n" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" +" ipa topologysegment-find ca\n" +"\n" +" Удалить сегмент топологии в суффиксе \"domain\":\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Удалить сегмент топологии в суффиксе \"ca\":\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Проверить топологию суффикса \"domain\":\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Проверить топологию суффикса \"ca\":\n" +" ipa topologysuffix-verify ca\n" + +msgid "Managed LDAP suffix DN" +msgstr "DN управляемого суффикса LDAP" + +msgid "Search for topology suffixes." +msgstr "Поиск суффиксов топологии." + +msgid "Add a manager to the user entry" +msgstr "Добавить руководителя в запись пользователя." + +msgid "Remove a manager to the user entry" +msgstr "Удалить руководителя из записи пользователя." + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" +"\n" +"Инструкции управления доступом к серверу каталогов (ACI)\n" +"\n" +"ACI используются, чтобы разрешить или запретить доступ к информации. Текущая " +"версия модуля предназначена для предоставления, а не запрета доступа. \n" +"\n" +"Команды aci позволяют предоставить разрешения, благодаря которым можно " +"обновлять существующие записи, а также добавлять или удалять новые. Задача " +"ACI, поставляемых вместе с IPA: предоставить набор низкоуровневых " +"разрешений, которые дают доступ к специальным группам. Такие группы " +"называются группами задач. Данные низкоуровневые разрешения можно сочетать " +"между собой, формируя роли, чтобы предоставить больший объём доступа. Эти " +"роли представляют собой ещё один тип групп: группы ролей.\n" +"\n" +"Например, если имеются группы задач, которые разрешают добавлять и изменять " +"данные пользователей, то можно создать роль администратора пользователей " +"(useradmin). Если назначить пользователям роль useradmin, им будет разрешено " +"выполнять операции, определённые группами задач.\n" +"\n" +"Можно создавать ACI, которые будут предоставлять разрешения таким образом, " +"что пользователи группы A смогут записывать атрибуты для группы B.\n" +"\n" +"Параметр \"тип\" (type) — это список, который применяется ко всем записям " +"пользователей, записям групп или расположению узла. Он предназначен в " +"основном для предоставления прав доступа для добавления (создание новых " +"записей).\n" +"\n" +"Запись ACI состоит из трёх частей:\n" +"1. цель\n" +"2. разрешения\n" +"3. правила привязки\n" +"\n" +"Цель — это набор правил, которые определяют, какие объекты LDAP являются " +"целевыми. Это может быть список атрибутов, область этого дерева LDAP или " +"фильтр LDAP.\n" +"\n" +"Цели содержат:\n" +"- attrs: список атрибутов, которых касается цель\n" +"- type: тип объектов (пользователь, группа, узел, служба и так далее)\n" +"- memberof: участники группы\n" +"- targetgroup: предоставить доступ к изменению определённой группы. Эта " +"часть в основном разработана для предоставления пользователям разрешения на " +"добавление или удаление участников определённой группы.\n" +"- filter: действующий фильтр LDAP, используемый для сужения цели.\n" +"- subtree: используется для применения правила к целому набору объектов. " +"Например, чтобы разрешить добавление пользователей, следует предоставить " +"разрешение \"add\" для поддерева ldap://uid=*,cn=users,cn=accounts," +"dc=example,dc=com. Параметр subtree подходит для объектов, которые не " +"подпадают под действие параметра type.\n" +"\n" +"Разрешения определяют, какие действия разрешены для ACI, и могут быть одними " +"из следующих (или сочетать в себе несколько вариантов):\n" +"1. write - записать один или несколько атрибутов.\n" +"2. read - прочитать один или несколько атрибутов.\n" +"3. add - добавить в дерево новую запись.\n" +"4. delete - удалить существующую запись.\n" +"5. all - предоставляются все разрешения.\n" +"\n" +"Обратите внимание на разницу между атрибутами и записями. Разрешения " +"являются независимыми, поэтому возможность добавить пользователя не означает " +"возможность изменять запись добавленного пользователя.\n" +"\n" +"Правило привязки определяет, кому предоставляет разрешения ACI. LDAP-сервер " +"позволяет сделать это для любой действительной записи LDAP, но мы " +"рекомендуем использовать группы задач, чтобы можно было легко обеспечить " +"общий доступ к правам с помощью ролей.\n" +"\n" +"Более подробные сведения об управлении доступом:\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"ПРИМЕЧАНИЕ: в текущей версии записи записи ACI добавляются через " +"подключаемый модуль разрешений. Следующие примеры показывают, как работают " +"различные параметры, но сейчас это выполняется через командную строку (см. " +"последний пример).\n" +"\n" +" Добавить запись ACI, чтобы группа \"secretaries\" могла обновлять адрес " +"любого пользователя:\n" +" ipa group-add --desc=\"Офисные секретари\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Секретари записывают адреса\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Секретари записывают адреса\"\n" +"\n" +" Добавить запись ACI, которая разрешает участникам разрешения \"addusers\" " +"добавлять новых пользователей:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Добавление пользователей\"\n" +"\n" +" Добавить запись ACI, которая разрешает участникам группы \"editors\" " +"управлять записями участников группы \"admins\":\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Редакторы управляют администраторами\"\n" +"\n" +" Добавить запись ACI, которая разрешает участникам группы \"admins\" " +"изменять название улицы и почтовый индекс участников группы \"editors\":\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"администраторы редактируют адрес " +"редакторов\"\n" +"\n" +" Добавить запись ACI, которая разрешает участникам группы \"admins\" " +"изменять название улицы и почтовый индекс тех, кто работает под руководством " +"начальника:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Редактировать адрес тех, кто работает под руководством " +"начальника\"\n" +"\n" +" Добавить в IPA совершенно новый вид записи, который не предусмотрен ни " +"одним из параметров \"--type\", путём создания разрешения:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Добавление оранжевых записей\" " +"add_orange\n" +"\n" +"\n" +"Команда show показывает необработанную запись ACI 389-ds.\n" +"\n" +"ВАЖНО: при изменении атрибутов цели существующей записи ACI необходимо также " +"включить все существующие атрибуты. Когда выполняется aci-mod, targetattr " +"ЗАМЕНЯЕТ текущие атрибуты, а не добавляет к ним другие.\n" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" +"Разделённый запятыми список разрешений, которые следует предоставить (read, " +"write, add, delete, all)" + +msgid "Comma-separated list of attributes" +msgstr "Разделённый запятыми список атрибутов" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +"Правило автоучастия.\n" +"\n" +"Внося ясные правила о принадлежности узлов и пользователей к группам " +"посредством настройки включающих и исключающих шаблонов регулярных " +"выражений, вы можете автоматически связывать новые записи с группой или " +"группой узлов на основе данных атрибутов.\n" +"\n" +"Правило непосредственно связывается с группой по имени, следовательно, вы не " +"можете создать правило без определения группы или группы узлов. \n" +"\n" +"Условие является регулярным выражением, используется 389-ds для установления " +"соответствия новой входящей записи правилу автоучастия. Если имеется " +"соответствие правилу включения, запись добавляется в соответствующую группу " +"или группу узлов.\n" +"\n" +"Можно указать группу или группу узлов по умолчанию, которая будет " +"использоваться для записей, не соответствующих ни одному правилу. В случае " +"записей пользователей эта группа будет резервной группой, поскольку все " +"пользователи по умолчанию являются участниками группы, указанной в " +"настройках IPA.\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"Добавить начальную группу или группу узлов :\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Добавить начальное правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Добавить в правило условие:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Добавить в правило исключительное условие, чтобы предотвратить " +"автоназначение:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Добавить узел:\n" +" ipa host-add web1.example.com\n" +"\n" +" Добавить пользователя:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +"Проверить автоучастие:\n" +" ipa hostgroup-show webservers\n" +" Группа узлов: webservers\n" +" Описание: Web Servers\n" +" Узлы-участники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Имя группы: devel\n" +" Описание: Developers\n" +" GID: 1004200000\n" +" Пользователи-участники: tuser\n" +"\n" +" Удалить условие из правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Изменить правило автоучастия:\n" +" ipa automember-mod\n" +"\n" +" Установить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Удалить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Показать целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Найти все правила автоучастия:\n" +" ipa automember-find\n" +"\n" +" Показать правило автоучастия:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Удалить правило автоучастия:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" +"\n" +"Операции с сертификатами IPA \n" +"\n" +"Применение набора команд для управления сертификатами SSL-серверов.\n" +"\n" +"Запросы сертификатов существуют в виде запроса подписи сертификата " +"(Certificate Signing Request, CSR) в формате PEM.\n" +"\n" +"Если используется бэкенд с самоподписанным сертификатом, субъект в CSR " +"должен соответствовать субъекту, настроенному на сервере. Система выдачи " +"сертификатов Dogtag Certificate System использует только значение CN в CSR и " +"принудительно устанавливает остальные параметры субъекта.\n" +"\n" +"Сертификат хранится в учётной записи службы, а учётной записи службы " +"требуется узел.\n" +"\n" +"Чтобы запросить сертификат:\n" +"\n" +"* Должен существовать узел\n" +"* Должна существовать служба (либо следует использовать параметр --add для " +"её автоматического добавления)\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Запросить новый сертификат и добавить учётную запись:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Получить существующий сертификат:\n" +" ipa cert-show 1032\n" +"\n" +" Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Удалить сертификат из списка отзыва:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Проверить состояние запроса подписи:\n" +" ipa cert-status 10\n" +"\n" +"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " +"сертификатов, следовательно, данные о состоянии запроса не являются " +"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " +"если CA не сразу выдаёт сертификат.\n" +"\n" +"Поддерживаются следующие причины отзыва:\n" +"\n" +" * 0 - не указано\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Обратите внимание, что код причины 7 не используется. Подробные сведения в " +"RFC 5280:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" +"\n" +"Межгрупповое делегирование\n" +"\n" +"С помощью разрешений самообслуживания можно очень точно делегировать " +"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " +"разрешениям разрешение на выполнение конкретных задач, таких как добавление " +"пользователя, изменение группы и так далее.\n" +"\n" +"Межгрупповое делегирование предоставляет участникам одной группы возможность " +"обновлять набор атрибутов участников другой группы. \n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить правило делегирования, чтобы разрешить руководителям редактировать " +"адреса сотрудников:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees\" street\"\n" +"\n" +"В список атрибутов необходимо включить все атрибуты, в том числе уже " +"существующие. Добавить postalCode в список:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees\" street\"\n" +"\n" +" Показать обновлённое правило:\n" +" ipa delegation-show \"managers edit employees\" street\"\n" +"\n" +" Удалить правило:\n" +" ipa delegation-del \"managers edit employees\" street\"\n" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" +"Разделённый запятыми список разрешений, которые следует предоставить (read, " +"write). По умолчанию предоставляется разрешение \"write\" (запись)." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" +"\n" +"Система доменных имён (DNS)\n" +"\n" +"Управление записями зон и ресурсов DNS.\n" +"\n" +"\n" +"ИСПОЛЬЗОВАНИЕ СТРУКТУРИРОВАННЫХ ПАРАМЕТРОВ ДЛЯ ОТДЕЛЬНЫХ ТИПОВ\n" +"\n" +"Существует много структурированных типов записей ресурсов DNS, для которых " +"данные DNS, хранящиеся на сервере LDAP, являются не просто скалярным " +"значением, например IP-адрес или имя домена, а структурой данных, которая " +"часто может быть сложной. Примером может быть запись LOC [RFC1876], которая " +"состоит из многих обязательных и необязательных частей (градусов, минут, " +"секунд широты и долготы, высоты и погрешности).\n" +"\n" +"При работе с такими записями DNS может быть сложно не допустить ошибок и " +"ввести корректное значение. Модуль DNS предоставляет в ваше распоряжение " +"абстракцию над этими необработанными записями и позволяет управлять каждым " +"из типов записей ресурсов с помощью определённых параметров. Для каждого из " +"поддерживаемых типов записей ресурсов в модуле DNS предусмотрен стандартный " +"параметр для работы с необработанными записями с помощью формата ---" +"rec, например --mx-rec, и специальные параметры для каждой из частей " +"структуры записи ресурса с помощью формата ---, например --" +"mx-preference и --mx-exchanger.\n" +"\n" +"При добавлении записи можно воспользоваться параметрами, специально " +"предназначенными для записей ресурсов, или стандартным параметром для " +"необработанного значения (сочетать эти варианты в одном действии по " +"добавлению нельзя). При внесении изменений в существующую запись можно " +"воспользоваться для изменения одной части записи DNS новыми специальными " +"параметрами записей ресурсов, причём для определения изменённого значения " +"будет использован стандартный вариант необработанного значения. В " +"приведенном ниже примере показано изменение приоритета записи MX с 0 на 1 в " +"записи без внесения изменений в обменник:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую зону:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Добавить общесистемные права доступа, которыми можно воспользоваться для " +"делегирования привилегий для отдельных зон:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Изменить зону, чтобы разрешить динамическое обновление для собственных " +"записей узлов в области (realm) EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" Эта команда эквивалентна следующим командам:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Изменить зону, чтобы разрешить перенос зоны только для локальной сети:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Добавить новую обратную зону, указанную с помощью сетевого IP-адреса:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Добавить другой сервер имён для example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Добавить почтовый сервер для example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Добавить другую запись с помощью специальных параметров записи MX:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Добавить другую запись с помощью интерактивного режима (в который программа " +"переходит в ответ на команды dnsrecord-add, dnsrecord-mod или dnsrecord-del " +"без параметров):\n" +" ipa dnsrecord-add example.com @\n" +" Выберите тип записи ресурса DNS, который следует добавить\n" +" Наиболее распространённые типы для этого типа зон: NS, MX, LOC\n" +"\n" +" Тип записи ресурса DNS: MX\n" +" Приоритет MX: 30\n" +" Обменник MX: mail3\n" +" Имя записи: example.com\n" +" Запись MX: 10 mail1, 20 mail2, 30 mail3\n" +" Запись NS: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Удалить добавленный ранее сервер имён из example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Добавить запись LOC для example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Добавить новую запись A для www.example.com. Также создать обратную запись " +"в соответствующей обратной зоне. В этом случае запись PTR \"2\", которая " +"указывает на www.example.com, будет создана в зоне 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Добавить новую запись PTR для www.example.com:\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Добавить новые записи SRV для LDAP-серверов. Три четверти запросов должны " +"отправляться на fast.example.com, одна четверть — на slow.example.com. Если " +"обе службы недоступны, переключиться на backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" Для облегчения внесения изменений можно воспользоваться интерактивным " +"режимом:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" Возможность внесения изменений в определённую запись не предусмотрена.\n" +" Текущее содержание записи DNS:\n" +"\n" +" Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" +"\"):\n" +" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" +"\"): y\n" +" Приоритет SRV [0]: (сохранить значение по умолчанию)\n" +" Вес SRV [1]: 2 (изменённое значение)\n" +" Порт SRV [389]: (сохранить значение по умолчанию)\n" +" Цель SRV [slow.example.com]: (сохранить значение по умолчанию)\n" +" Пропущена 1 запись SRV. Одновременно можно изменять только одно значение " +"на тип записи DNS.\n" +" Имя записи: _ldap._tcp\n" +" Запись SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" После внесения этих изменений три пятых запросов должны направляться на\n" +" fast.example.com, а две пятых — на slow.example.com.\n" +"\n" +" Пример интерактивного режима для команды dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" Не указан параметр удаления определённой записи.\n" +" Удалить все? Да/Нет (по умолчанию \"Нет\"): (не удалять все записи)\n" +" Текущее содержание записи DNS:\n" +"\n" +" Запись A: 1.2.3.4, 11.22.33.44\n" +"\n" +" Удалить запись A '1.2.3.4'? Да/Нет (по умолчанию \"Нет\"):\n" +" Удалить запись A '11.22.33.44'? Да/Нет (по умолчанию \"Нет\"): y\n" +" Имя записи: www\n" +" Запись A: 1.2.3.4 (запись A 11.22.33.44 удалена)\n" +"\n" +" Показать зону example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Найти зону со словом \"example\" в имени домена:\n" +" ipa dnszone-find example\n" +"\n" +" Найти записи для ресурсов с \"www\" в имени в зоне example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Найти записи A со значением 10.10.0.1 в зоне example.com:\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Показать записи для ресурса www в зоне example.com:\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Делегировать зону sub.example другому серверу имён:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Если настроены глобальные перенаправители, все запросы на sub.example.com " +"будут идти через глобальный перенаправитель. Чтобы изменить это поведение " +"только для зоны example.com и перенаправлять запрос прямо на ns.sub.example." +"com., можно отключить глобальное перенаправление для отдельной зоны:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Перенаправлять все запросы для зоны external.com на другой сервер имён с " +"помощью политики \"first\" (запросы будет отправляться на выбранный " +"перенаправитель; если он не отвечает, будут использоваться глобальные " +"сопоставители):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Удалить зону example.com вместе со всеми записями ресурсов:\n" +" ipa dnszone-del example.com\n" +"\n" +" Определить адрес по имени узла, чтобы узнать, существует ли он (будет " +"добавлен стандартный домен IPA, если он не включён):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ DNS\n" +"\n" +"Конфигурация DNS, которая передаётся сценарию командной строки для " +"установки, хранится в локальном файле конфигурации на каждом IPA-сервере, " +"где настроена служба DNS. Эти локальные настройки могут быть переопределены " +"с помощью общей конфигурации, которая хранится на LDAP-сервере:\n" +"\n" +" Показать глобальную конфигурацию DNS:\n" +" ipa dnsconfig-show\n" +"\n" +" Изменить глобальную конфигурацию DNS и установить список глобальных " +"перенаправителей:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Список глобальных перенаправителей. Для каждого перенаправителя можно " +"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "Интервал между регулярными опросами сервера имён о новых зонах DNS" + +msgid "DNS class" +msgstr "Класс DNS" + +msgid "Comma-separated list of raw A records" +msgstr "Разделённый запятыми список необработанных записей A" + +msgid "Comma-separated list of raw AAAA records" +msgstr "Разделённый запятыми список необработанных записей AAAA" + +msgid "Comma-separated list of raw A6 records" +msgstr "Разделённый запятыми список необработанных записей A6" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "Разделённый запятыми список необработанных записей AFSDB" + +msgid "Comma-separated list of raw APL records" +msgstr "Разделённый запятыми список необработанных записей APL" + +msgid "Comma-separated list of raw CERT records" +msgstr "Разделённый запятыми список необработанных записей CERT" + +msgid "Comma-separated list of raw CNAME records" +msgstr "Разделённый запятыми список необработанных записей CNAME" + +msgid "Comma-separated list of raw DHCID records" +msgstr "Разделённый запятыми список необработанных записей DHCID" + +msgid "Comma-separated list of raw DLV records" +msgstr "Разделённый запятыми список необработанных записей DLV" + +msgid "Comma-separated list of raw DNAME records" +msgstr "Разделённый запятыми список необработанных записей DNAME" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "Разделённый запятыми список необработанных записей DNSKEY" + +msgid "Comma-separated list of raw DS records" +msgstr "Разделённый запятыми список необработанных записей DS" + +msgid "Comma-separated list of raw HIP records" +msgstr "Разделённый запятыми список необработанных записей HIP" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "Разделённый запятыми список необработанных записей IPSECKEY" + +msgid "Comma-separated list of raw KEY records" +msgstr "Разделённый запятыми список необработанных записей KEY" + +msgid "KEY Flags" +msgstr "Флаги KEY" + +msgid "KEY Protocol" +msgstr "Протокол KEY" + +msgid "Protocol" +msgstr "Протокол" + +msgid "KEY Algorithm" +msgstr "Алгоритм KEY" + +msgid "KEY Public Key" +msgstr "Открытый ключ KEY" + +msgid "Public Key" +msgstr "Открытый ключ" + +msgid "Comma-separated list of raw KX records" +msgstr "Разделённый запятыми список необработанных записей KX" + +msgid "Comma-separated list of raw LOC records" +msgstr "Разделённый запятыми список необработанных записей LOC" + +msgid "Comma-separated list of raw MX records" +msgstr "Разделённый запятыми список необработанных записей MX" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "Разделённый запятыми список необработанных записей NAPTR" + +msgid "Comma-separated list of raw NS records" +msgstr "Разделённый запятыми список необработанных записей NS" + +msgid "Comma-separated list of raw NSEC records" +msgstr "Разделённый запятыми список необработанных записей NSEC" + +msgid "NSEC Next Domain Name" +msgstr "Имя следующего домена NSEC" + +msgid "Next Domain Name" +msgstr "Имя следующего домена" + +msgid "NSEC Type Map" +msgstr "Список сопоставления типов NSEC" + +msgid "Type Map" +msgstr "Список сопоставления типов" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "Разделённый запятыми список необработанных записей NSEC3" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "Разделённый запятыми список необработанных записей NSEC3PARAM" + +msgid "Comma-separated list of raw PTR records" +msgstr "Разделённый запятыми список необработанных записей PTR" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "Разделённый запятыми список необработанных записей RRSIG" + +msgid "RRSIG Type Covered" +msgstr "Охваченные типы RRSIG" + +msgid "Type Covered" +msgstr "Охваченные типы" + +msgid "RRSIG Algorithm" +msgstr "Алгоритм RRSIG" + +msgid "RRSIG Labels" +msgstr "Метки RRSIG" + +msgid "Labels" +msgstr "Метки" + +msgid "RRSIG Original TTL" +msgstr "Исходное значение срока жизни RRSIG" + +msgid "Original TTL" +msgstr "Исходное значение срока жизни" + +msgid "RRSIG Signature Expiration" +msgstr "Окончание действия подписи RRSIG" + +msgid "Signature Expiration" +msgstr "Окончание действия подписи" + +msgid "RRSIG Signature Inception" +msgstr "Начало действия подписи RRSIG" + +msgid "Signature Inception" +msgstr "Начало действия подписи" + +msgid "RRSIG Key Tag" +msgstr "Тег ключа RRSIG" + +msgid "RRSIG Signer's Name" +msgstr "Имя подписавшего RRSIG" + +msgid "Signer's Name" +msgstr "Имя подписавшего" + +msgid "RRSIG Signature" +msgstr "Подпись RRSIG" + +msgid "Signature" +msgstr "Подпись" + +msgid "Comma-separated list of raw RP records" +msgstr "Разделённый запятыми список необработанных записей RP" + +msgid "Comma-separated list of raw SIG records" +msgstr "Разделённый запятыми список необработанных записей SIG" + +msgid "SIG Type Covered" +msgstr "Охваченные типы SIG" + +msgid "SIG Algorithm" +msgstr "Алгоритм SIG" + +msgid "SIG Labels" +msgstr "Метки SIG" + +msgid "SIG Original TTL" +msgstr "Исходное значение срока жизни SIG" + +msgid "SIG Signature Expiration" +msgstr "Окончание действия подписи SIG" + +msgid "SIG Signature Inception" +msgstr "Начало действия подписи SIG" + +msgid "SIG Key Tag" +msgstr "Тег ключа SIG" + +msgid "SIG Signer's Name" +msgstr "Имя подписавшего SIG" + +msgid "SIG Signature" +msgstr "Подпись SIG" + +msgid "Comma-separated list of raw SPF records" +msgstr "Разделённый запятыми список необработанных записей SPF" + +msgid "Comma-separated list of raw SRV records" +msgstr "Разделённый запятыми список необработанных записей SRV" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "Разделённый запятыми список необработанных записей SSHFP" + +msgid "Comma-separated list of raw TA records" +msgstr "Разделённый запятыми список необработанных записей TA" + +msgid "Comma-separated list of raw TKEY records" +msgstr "Разделённый запятыми список необработанных записей TKEY" + +msgid "Comma-separated list of raw TSIG records" +msgstr "Разделённый запятыми список необработанных записей TSIG" + +msgid "Comma-separated list of raw TXT records" +msgstr "Разделённый запятыми список необработанных записей TXT" + +msgid "SOA time to live" +msgstr "Срок жизни SOA" + +msgid "SOA record time to live" +msgstr "Срок жизни записи SOA" + +msgid "SOA class" +msgstr "Класс SOA" + +msgid "SOA record class" +msgstr "Класс записи SOA" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Список перенаправителей для отдельных зон. Для каждого перенаправителя можно " +"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" +"Добавить запись перенаправления для сервера имён, расположенного в созданной " +"зоне" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" +"\n" +"Права\n" +"\n" +"Управление правами для клиентских компьютеров\n" +"\n" +"Правами можно управлять либо путём регистрации на сервере прав с именем " +"пользователя и паролем, либо путём импорта сертификатов прав вручную. " +"Сертификат прав содержит сведения о продукте, на который выдано разрешение, " +"количестве использований прав и сроке действия.\n" +"\n" +"Сервер прав управляет количеством доступных клиентских прав.\n" +"Чтобы отметить эти права как использованные IPA-сервером, следует указать " +"количество, и они будут отмечены, как использованные на сервере прав.\n" +"\n" +" Зарегистрироваться на сервере прав:\n" +" ipa entitle-register consumer\n" +"\n" +" Импортировать сертификат прав:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Показать текущие права:\n" +" ipa entitle-status\n" +"\n" +" Получить сведения о сертификатах прав:\n" +" ipa entitle-get\n" +"\n" +" Использовать некоторые права с сервера прав:\n" +" ipa entitle-consume 50\n" +"\n" +"Регистрационный идентификатор является уникальным идентификатором (UUID). " +"Этот идентификатор будет ИМПОРТИРОВАН, если использована команда entitle-" +"import.\n" +"\n" +"Для применения изменений к /etc/rhsm/rhsm.conf необходимо перезапустить " +"службу httpd.\n" + +msgid "Consume an entitlement." +msgstr "Использовать право." + +msgid "Quantity" +msgstr "Количество" + +msgid "Search for entitlement accounts." +msgstr "Поиск учётных записей прав." + +msgid "Retrieve the entitlement certs." +msgstr "Получить сертификаты прав." + +msgid "Import an entitlement certificate." +msgstr "Импортировать сертификат прав." + +msgid "UUID" +msgstr "UUID" + +msgid "Enrollment UUID" +msgstr "UUID регистрации" + +msgid "Register to the entitlement system." +msgstr "Зарегистрироваться в системе прав." + +msgid "Username" +msgstr "Имя пользователя" + +msgid "Enrollment UUID (not implemented)" +msgstr "UUID регистрации (не поддерживается)" + +msgid "Registration password" +msgstr "Пароль для регистрации" + +msgid "Display current entitlements." +msgstr "Показать текущие права." + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "Повторно синхронизировать локальный кэш прав с сервером прав." + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Группы пользователей\n" +"\n" +"Управление группами пользователей. По умолчанию все новые группы являются " +"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " +"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " +"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " +"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" +"\n" +"У каждой группы должно быть описание.\n" +"\n" +"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " +"поддерживается, но может повлиять на разрешения для файлов. При создании " +"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " +"создаст его автоматически.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Добавить новую не-POSIX-группу:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Преобразовать не-POSIX-группу в posix-группу:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Добавить новую POSIX-группу с определённым ID группы:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Удалить группу:\n" +" ipa group-del unixadmins\n" +"\n" +" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Добавить список пользователей в группу \"localadmins\":\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Удалить пользователя из группы \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa group-show localadmins\n" +"\n" +"Участие внешних групп создано для того, чтобы сделать возможной привязку " +"пользователей из доверенных доменов к локальным POSIX-группам с целью " +"использования ресурсов IPA. Внешние участники должны быть добавлены в " +"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " +"затем должна быть включена в одну из групп POSIX.\n" +"\n" +"В текущей версии участник внешней группы является идентификатором " +"безопасности (Security Identifier или SID), определённым доверенным доменом. " +"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " +"или имя@домен. IPA попытается определить SID по переданному имени путём " +"использования общего каталога доверенного домена.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список внешних участников группы ad_admins_external, чтобы " +"определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" +"Разделённый запятыми список участников доверенного домена в формате DOM\\имя " +"или имя@домен" + +msgid "comma-separated list of users to add" +msgstr "Разделённый запятыми список пользователей, которых следует добавить" + +msgid "comma-separated list of groups to add" +msgstr "Разделённый запятыми список групп, которые следует добавить" + +msgid "comma-separated list of users to remove" +msgstr "Разделённый запятыми список пользователей, которых следует удалить" + +msgid "comma-separated list of groups to remove" +msgstr "Разделённый запятыми список групп, которые следует удалить" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" +"\n" +"Управление доступом на основе узла\n" +"\n" +"Управляйте тем, кто, на каких узлах и из каких узлов сможет получать доступ " +"к определённым службам. Вы можете воспользоваться HBAC для определения тех " +"пользователей и групп на узле происхождения запроса, которые будут иметь " +"доступ к определённой службе или группе служб на целевом узле.\n" +"\n" +"Также можно указать категорию пользователей, целевых узлов и узлов " +"происхождения запроса. В текущей версии доступен только вариант \"all\", но " +"в будущих версиях, возможно, появятся и другие варианты.\n" +"\n" +"Целевые узлы и узлы происхождения запроса в правилах HBAC должны быть узлами " +"под управлением IPA.\n" +"\n" +"Доступные службы и группы служб управляются, соответственно, с помощью " +"подключаемых модулей hbacsvc и hbacsvcgroup.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать правило, \"test1\", которое предоставляет всем пользователям доступ " +"на узел \"server\" отовсюду:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Показать свойства именованного правила HBAC:\n" +" ipa hbacrule-show test1\n" +"\n" +" Создать правило для определённой службы. Это правило предоставит " +"пользователю john доступ к службе sshd на любом компьютере с любого " +"компьютера:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Создать правило для новой группы служб. Это правило предоставит " +"пользователю john доступ к службе FTP на любом компьютере с любого " +"компьютера:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Отключить именованное правило HBAC:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Удалить именованное правило HBAC:\n" +" ipa hbacrule-del allow_server\n" + +msgid "Source host category" +msgstr "Категория узлов-источников" + +msgid "Source host category the rule applies to" +msgstr "Категория узлов-источников, к которой применяется правило" + +msgid "Source Hosts" +msgstr "Узлы-источники" + +msgid "Source Host Groups" +msgstr "Группы узлов-источников" + +msgid "comma-separated list of hosts to add" +msgstr "Разделённый запятыми список узлов, которые следует добавить" + +msgid "comma-separated list of host groups to add" +msgstr "Разделённый запятыми список групп узлов, которые следует добавить" + +msgid "comma-separated list of HBAC services to add" +msgstr "Разделённый запятыми список служб HBAC, которые следует добавить" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "Разделённый запятыми список групп служб HBAC, которые следует добавить" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "Добавить узлы-источники и группы узлов из правила HBAC." + +msgid "comma-separated list of hosts to remove" +msgstr "Разделённый запятыми список узлов, которые следует удалить" + +msgid "comma-separated list of host groups to remove" +msgstr "Разделённый запятыми список групп узлов, которые следует удалить" + +msgid "comma-separated list of HBAC services to remove" +msgstr "Разделённый запятыми список служб HBAC, которые следует удалить" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "Разделённый запятыми список групп служб HBAC, которые следует удалить" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "Удалить узлы-источники и группы узлов из правила HBAC." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" +"\n" +"Группы служб HBAC\n" +"\n" +"Группы служб HBAC могут содержать любое количество отдельных служб (так " +"называемых \"участников\"). У каждой группы должно быть описание.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу служб HBAC:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Добавить участников в группу служб HBAC:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Добавить новую группу в группу \"login\":\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Удалить группу служб HBAC:\n" +" ipa hbacsvcgroup-del login\n" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" +"\n" +"Имитация использования управления доступом на основе узла\n" +"\n" +"Правила HBAC управляют тем, кто, на каких узлах и из каких узлов сможет " +"получать доступ к определённым службам. Вы можете воспользоваться HBAC для " +"определения тех пользователей и групп, которые будут иметь доступ к " +"определённой службе или группе служб на целевом узле. \n" +"\n" +"Так как применение правил HBAC подразумевает использование рабочей среды, " +"этот подключаемый модуль предназначен для обеспечения имитации оценки правил " +"HBAC при отсутствии доступа к рабочей среде.\n" +"\n" +" Проверка тестового пользователя, который обращается к службе на именованном " +"узле, на соответствие существующим включённым правилам.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" Параметры --user, --host и --service являются обязательными, остальные " +"можно не указывать.\n" +"\n" +" Если указан параметр --rules, имитировать включение указанных правил и " +"проверить возможность входа пользователя в случае использования только этих " +"правил.\n" +"\n" +" Если указан параметр --enabled, добавить все включённые правила HBAC к " +"имитации.\n" +"\n" +" Если указан параметр --disabled, добавить все отключённые правила HBAC к " +"имитации.\n" +"\n" +" Если указан параметр --nodetail, не возвращать данные о соответствующих или " +"не соответствующих правилах.\n" +"\n" +" Если одновременно указаны параметры --rules и --enabled, выполнить имитацию " +"--rules _и_\n" +" всех включённых правил IPA.\n" +"\n" +" Если не указан параметр --rules, выполнить имитацию всех включённых правил " +"IPA.\n" +" По умолчанию в IPA имеется общее ограничение количества извлекаемых " +"записей, его можно изменить с помощью параметра --sizelimit.\n" +"\n" +" Если указан параметр --srchost, он будет проигнорирован. Он сохранён только " +"для обеспечения совместимости.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" 1. Использовать все включённые правила HBAC в базе данных IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: my-third-rule\n" +" не соответствует: myrule\n" +" соответствует: allow_all\n" +"\n" +" 2. Отключить подробный отчёт о применении правил:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +"\n" +" 3. Проверить явно указанные правила HBAC:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: myrule\n" +"\n" +" 4. Использовать все включённые правила HBAC в базе данных IPA + явно " +"указанные правила:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: my-third-rule\n" +" не соответствует: myrule\n" +" соответствует: allow_all\n" +"\n" +" 5. Проверить все отключённые правила HBAC в базе данных IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" не соответствует: new-rule\n" +"\n" +" 6. Проверить все отключённые правила HBAC в базе данных IPA + явно " +"указанные правила:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: my-third-rule\n" +" не соответствует: myrule\n" +"\n" +" 7. Проверить все (включённые и отключённые) правила HBAC в базе данных " +"IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: my-third-rule\n" +" не соответствует: myrule\n" +" не соответствует: new-rule\n" +" соответствует: allow_all\n" + +msgid "Source host" +msgstr "Узел-источник" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +"Узлы/Компьютеры\n" +"\n" +"Узел представляет собой отдельный компьютер. Термин может использоваться в " +"нескольких контекстах:\n" +"- записи служб, связанные с определённым узлом \n" +"- узел сохраняет учётную запись узла / службы\n" +"- узел может использоваться в правилах управления доступом на основе узла " +"(Host-based Access Control, HBAC)\n" +"- каждый зарегистрированный клиент создаёт запись узла\n" +"\n" +"РЕГИСТРАЦИЯ:\n" +"Существует три сценария регистрации нового клиента:\n" +"\n" +"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " +"существовать или отсутствовать. Полноправный администратор выполняет роль " +"hostadmin или является участником группы admins.\n" +"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " +"должен существовать. Администратор с ограниченными правами выполняет роль с " +"привилегией Host Enrollment.\n" +"3. Узел создан с одноразовым паролем.\n" +"\n" +"Узлу можно назначить роль только один раз. Если клиенту уже назначена роль и " +"эту роль требуется изменить, запись узла должна быть удалена и создана " +"повторно. Обратите внимание, что повторное создание записи узла приведет к " +"удалению всех служб узла и отзыву всех связанных с этими службами SSL-" +"сертификатов.\n" +"\n" +"В запись узла при необходимости можно включить данные о его расположении, " +"типе используемой операционной системы и так далее.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новый узел:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Удалить узел:\n" +" ipa host-del test.example.com\n" +"\n" +" Добавить новый узел с одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Добавить новый узел со случайным одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Изменить сведения об узле:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" +" ipa host-disable test.example.com\n" +"\n" +" Добавить узел, который может управлять таблицей ключей и сертификатом этого " +"узла:\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Группы узлов.\n" +"\n" +"Управление группами узлов. Оно полезно при применении управления доступом к " +"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Добавить другую новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Добавить участников в группу узлов:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Добавить группу узлов как участника другой группы узлов:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Удалить узел из группы узлов:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показать группу узлов:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Удалить группу узлов:\n" +" ipa hostgroup-del baltimore\n" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" +"Разделённый запятыми список классов объектов, использованных для поиска " +"записей пользователей в DS" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" +"Разделённый запятыми список классов объектов, использованных для поиска " +"записей групп в DS" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" +"Разделённый запятыми список классов объектов, которые следует игнорировать " +"для записей пользователей в DS" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" +"Разделённый запятыми список атрибутов, которые следует игнорировать для " +"записей пользователей в DS" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" +"Разделённый запятыми список классов объектов, которые следует игнорировать " +"для записей групп в DS" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" +"Разделённый запятыми список атрибутов, которые следует игнорировать для " +"записей групп в DS" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" +"Разделённый запятыми список групп, которые следует исключить из миграции" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" +"Разделённый запятыми список пользователей, которых следует исключить из " +"миграции" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" +"\n" +"Сетевые группы\n" +"\n" +"Сетевая группа — это группа, которая используется для проверки разрешений. " +"Она может содержать как значения пользователей, так и значения узлов.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую сетевую группу:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Добавить участников в сетевую группу:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +"Удалить участника из сетевой группы:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +"Показать сведения о сетевой группе:\n" +" ipa netgroup-show admins\n" +"\n" +" Удалить сетевую группу:\n" +" ipa netgroup-del admins\n" + +msgid "comma-separated list of netgroups to add" +msgstr "Разделённый запятыми список сетевых групп, которые следует добавить" + +msgid "comma-separated list of netgroups to remove" +msgstr "Разделённый запятыми список сетевых групп, которые следует удалить" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +"Разрешения\n" +"\n" +"С помощью разрешений можно очень точно делегировать права доступа. " +"Разрешение представляет собой удобную для восприятия форму 389-ds ACI " +"(правила управления доступом).\n" +"Разрешение даёт право выполнять определённую задачу, например, добавлять " +"пользователей, изменять группы и так далее.\n" +"\n" +"Разрешение не может содержать другие разрешения.\n" +"\n" +"* Разрешение даёт доступ для чтения, записи, добавления или удаления.\n" +"* Привилегия объединяет схожие разрешения (например, все разрешения, которые " +"требуются для добавления пользователя).\n" +"* Роль даёт набор привилегий пользователям, группам, узлам или группам " +"узлов.\n" +"\n" +"Разрешение состоит из нескольких разных частей:\n" +"\n" +"1. Имя разрешения.\n" +"2. Цель разрешения.\n" +"3. Права, предоставленные разрешением.\n" +"\n" +"Права определяют, какие действия разрешены. Варианты прав (права могут " +"сочетать в себе несколько вариантов):\n" +"1. write - записать один или несколько атрибутов.\n" +"2. read - прочитать один или несколько атрибутов.\n" +"3. add - добавить в дерево новую запись.\n" +"4. delete - удалить существующую запись.\n" +"5. all - предоставляются все разрешения.\n" +"\n" +"По умолчанию доступ для чтения разрешён для большинства атрибутов, поэтому " +"потребность в использовании этого разрешения вряд ли будет возникать часто.\n" +"\n" +"Обратите внимание на разницу между атрибутами и записями. Разрешения " +"являются независимыми, поэтому возможность добавить пользователя не означает " +"возможность изменять запись добавленного пользователя.\n" +"\n" +"Существует ряд разрешённых целей:\n" +"1. type: тип объекта (пользователь, группа и так далее).\n" +"2. memberof: участник группы или группы узлов.\n" +"3. filter: фильтр LDAP.\n" +"4. subtree: фильтр LDAP, определяющий часть LDAP DIT. Это супермножество " +"цели \"type\".\n" +"5. targetgroup: предоставление доступа для изменения определённой группы " +"(например, предоставление прав доступа для управления участием в группе).\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить разрешение на создание пользователей:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Добавить разрешение на управление участием в группе:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" +"Разделённый запятыми список разрешений, которые следует предоставить (read, " +"write, add, delete, all)" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" +"Тип объекта IPA (user (пользователь), group (группа), host (узел), hostgroup " +"(группа узлов), service (служба), netgroup (сетевая группа), dns)" + +msgid "Target members of a group" +msgstr "Целевые участники группы" + +msgid "User group to apply permissions to" +msgstr "Группа пользователей, к которой следует применить разрешения" + +msgid "comma-separated list of privileges to add" +msgstr "Разделённый запятыми список привилегий, которые следует добавить" + +msgid "Add a system permission without an ACI" +msgstr "Добавить разрешение на доступ к системе без использования ACI" + +msgid "Permission type" +msgstr "Тип разрешения" + +msgid "comma-separated list of privileges to remove" +msgstr "Разделённый запятыми список привилегий, которые следует удалить" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" +"\n" +"Проверить связь с удалённым IPA-сервером, чтобы убедиться, что он работает.\n" +"\n" +"Команда ping отправляет эхо-запрос на IPA-сервер. Сервер возвращает сведения " +"о своей версии. Эти данные используются клиентом IPA для подтверждения того, " +"что сервер доступен и принимает запросы.\n" +"\n" +"Сервер из xmlrpc_uri in /etc/ipa/default.conf проверяется первым.\n" +"Если он не отвечает, клиент пытается установить связь с любым сервером, " +"указанным в записях SRV ldap в DNS.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Проверить связь с IPA-сервером:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Проверить связь с IPA-сервером и получить подробные данные:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" + +msgid "comma-separated list of roles to add" +msgstr "Разделённый запятыми список ролей, которые следует добавить" + +msgid "comma-separated list of permissions" +msgstr "Разделённый запятыми список разрешений" + +msgid "comma-separated list of roles to remove" +msgstr "Разделённый запятыми список ролей, которые следует удалить" + +msgid "comma-separated list of privileges" +msgstr "Разделённый запятыми список привилегий" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Разрешения самообслуживания\n" +"\n" +"С помощью разрешений самообслуживания можно очень точно делегировать " +"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " +"разрешениям разрешение на выполнение конкретных задач, таких как добавление " +"пользователя, изменение группы и так далее.\n" +"\n" +"Разрешение самообслуживания определяет, что объект может изменять в своей " +"собственной записи.\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить правило самообслуживания, чтобы разрешить пользователям управлять " +"своим адресом:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" В список атрибутов необходимо включить все атрибуты, в том числе уже " +"существующие. Добавить telephoneNumber в список:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Показать обновлённое правило:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Удалить правило:\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" +"\n" +"Службы\n" +"\n" +"Служба IPA — это служба, которая выполняется на узле. В записи службы IPA " +"могут храниться данные учётной записи Kerberos, SSL-сертификата или оба " +"набора данных.\n" +"\n" +"Службой IPA можно управлять непосредственно с компьютера, если системе этого " +"компьютера предоставлены соответствующие права доступа. Это касается даже " +"компьютеров, отличных от тех, с которыми связана эта служба. Например, " +"запрос SSL-сертификата с помощью учётных данных учётной записи службы узла. " +"Чтобы управлять службой с помощью учётных данных узла, следует запустить " +"команду kinit от имени узла:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Добавление службы IPA позволяет связанной службе запрашивать SSL-сертификаты " +"и таблицы ключей, но создание самих запросов является отдельным шагом: " +"соответствующие данные не создаются в результате простого добавления " +"службы.\n" +"\n" +"В записи службы хранятся только открытые данные сертификата; закрытый ключ " +"не сохраняется.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую службу IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Разрешить узлу управлять сертификатом службы IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Переопределить список по умолчанию, который содержит поддерживаемые типы " +"PAC для службы:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Удалить службу IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Найти все службы IPA, связанные с узлом:\n" +" ipa service-find web.example.com\n" +"\n" +" Найти все службы HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Отключить ключ Kerberos и SSL-сертификат службы:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Запросить сертификат для службы IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Создать и получить таблицу ключей для службы IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" +"Переопределить список по умолчанию, который содержит поддерживаемые типы " +"PAC. Используйте значение \"NONE\", чтобы отключить поддержку PAC для этой " +"службы" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" +"\n" +"Группы команд Sudo\n" +"\n" +"Управление группами команд Sudo.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу команд Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Удалить группу команд Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показать группу команд Sudo:\n" +" ipa group-show localadmins\n" + +msgid "comma-separated list of sudo commands to add" +msgstr "Разделённый запятыми список команд Sudo, которые следует добавить" + +msgid "comma-separated list of sudo commands to remove" +msgstr "Разделённый запятыми список команд Sudo, которые следует удалить" + +msgid "Active directory domain administrator's password" +msgstr "Пароль администратора домена Active Directory" + +msgid "GECOS field" +msgstr "Поле GECOS" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +"Добавление нового диапазона идентификаторов.\n" +"\n" +" Для добавления нового диапазона идентификаторов всегда необходимо " +"указывать\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Кроме того,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" могут указываться для нового диапазона идентификаторов для локального " +"домена, в то время как\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" должны быть указаны для добавления нового диапазона для доверенного " +"домена AD.\n" +"\n" +" ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +" " + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" +"\n" +"Правила Sudo\n" +"\n" +"Sudo (su \"do\") позволяет системному администратору делегировать " +"полномочия, чтобы дать определённым пользователям (или группам " +"пользователей) возможность выполнять некоторые (или все) команды от имени " +"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +"журнал аудита команд и их аргументов.\n" +"\n" +"IPA предоставляет возможности настройки различных аспектов Sudo:\n" +" Users: пользователь (пользователи) или группа (группы), которые могут " +"вызывать Sudo.\n" +" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " +"вызывать Sudo.\n" +" Allow Command: конкретная команда (команды), которые разрешены для " +"выполнения с помощью Sudo. \n" +" Deny Command: конкретная команда (команды), которые запрещены для " +"выполнения с помощью Sudo.\n" +" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " +"от имени которых Sudo будет выполнять команды.\n" +" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +"команды.\n" +" Options: различные параметры sudoers (участники Sudo), которые могут " +"изменить поведение Sudo.\n" +"\n" +"Правилу Sudo можно добавить порядок, который будет руководить порядком " +"обработки записей (если такой порядок предусмотрен на клиентской стороне). " +"Порядок определяется числовым индексом (целое число), который не должен " +"повторяться.\n" +"\n" +"IPA предусматривает специальную привязку DN (binddn) для использования с " +"Sudo:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"Дополнительные сведения приведены в документации IPA по Sudo.\n" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" +"Разделённый запятыми список групп команд Sudo, которые следует добавить" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "Разделённый запятыми список групп команд Sudo, которые следует удалить" + +msgid "Additional instructions:" +msgstr "Дополнительные инструкции:" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"Не отправлен номер версии программного интерфейса (API), совместимость с " +"новейшими версиями не гарантируется. Предполагается следующая версия API " +"сервера: %(server_version)s" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"С выходом IPA 4.0 изменилась семантика DNS-перенаправителя.\n" +"Рекомендуется перейти на использование зон перенаправления (dnsforwardzone-" +"*).\n" +"Подробные сведения содержатся в документации." + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"Экспериментальная поддержка DNSSEC.\n" +"%(additional_info)s" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "Параметр \"%(option)s\" не поддерживается. %(additional_info)s" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Семантика %(label)s изменена. %(current_behavior)s\n" +"%(hint)s" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS-сервер %(server)s: %(error)s." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS-сервер %(server)s не поддерживает DNSSEC: %(error)s.\n" +"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"зона перенаправления \"%(fwzone)s\" не действует из-за отсутствия " +"надлежащего NS-делегирования в основной зоне \"%(authzone)s\". Добавьте NS-" +"запись \"%(ns_rec)s\" в родительскую зону \"%(authzone)s\"." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS-сервер %(server)s не поддерживает EDNS0 (RFC 6891): %(error)s.\n" +"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Сбой проверки DNSSEC: %(error)s.\n" +"Проверьте конфигурацию DNSSEC или отключите проверку DNSSEC на всех IPA-" +"серверах." + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"Не удалось создать запись TXT _kerberos из домена %(domain)s (%(error)s).\n" +"Возможная причина: зона не находится под управлением IPA. Создайте запись " +"вручную, включив в неё следующее значение: \"%(realm)s\"" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"Не удалось удалить запись TXT _kerberos из домена %(domain)s (%(error)s).\n" +"Возможная причина: зона не находится под управлением IPA. Удалите запись " +"вручную." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Не установлен мастер ключей DNSSEC. Подпись в зоне DNSSEC будет работать " +"только после установки мастера ключей DNSSEC." + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"Относительное имя записи \"%(record)s\" содержит имя зоны \"%(zone)s\" в " +"качестве суффикса, что превращает её в полное имя домена \"%(fqdn)s\". " +"Обычно эта ошибка вызвана отсутствием точки в конце определения имени." + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "\"%(command)s\" не поддерживается. %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Результат поиска усечён: %(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Доверительные отношения с %(domain)s разорваны. Восстановите их, выполнив " +"команду \"ipa trust-add\"." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "Не удалось удалить DNS-запись (записи) узла %(host)s. (%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"Политика перенаправления конфликтует с некоторыми автоматически созданными " +"пустыми зонами. Запросы для зон, указанных в RFC 6303, будут игнорировать " +"перенаправление и рекурсию и всегда возвращать ответы \"NXDOMAIN\". Чтобы " +"переопределить это поведение, используйте политику перенаправления \"only\"." + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "Не удалось обновить системную запись \"%(record)s\". Ошибка: %(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA не управляет зоной %(zone)s. Добавьте записи на DNS-сервер вручную." + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Не удалось автоматически обновить системные записи DNS. Повторно запустите " +"обновление системных записей вручную, чтобы получить список отсутствующих " +"записей." + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"Для применения изменений конфигурации необходимо перезапустить службу " +"%(service)s на IPA-сервере %(server)s." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"В расположении IPA %(location)s нет DNS-серверов. Без них расположение не " +"будет работать надлежащим образом." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: неверно сформированный сертификат. %(reason)s" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "Узел добавлен, но при обновлении DNS произошла ошибка: %(reason)s" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "Сертификат для %(ca)s недоступен на этом сервере." + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d переменных" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "загружен %(count)d подключаемый модуль" +msgstr[1] "загружено %(count)d подключаемых модуля" +msgstr[2] "загружено %(count)d подключаемых модулей" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Введите %(label)s ещё раз для проверки: " + +msgid "Passwords do not match!" +msgstr "Пароли не совпадают!" + +msgid "No matching entries found" +msgstr "Соответствующих записей не найдено" + +msgid "Topic or Command" +msgstr "Тема или команда" + +msgid "The topic or command name." +msgstr "Имя темы или команды." + +msgid "Topic commands:" +msgstr "Команды темы:" + +msgid "To get command help, use:" +msgstr "Чтобы получить справку по команде, используйте команду:" + +msgid " ipa --help" +msgstr " ipa <команда> --help" + +msgid "Command name" +msgstr "Имя команды" + +msgid "Positional arguments" +msgstr "Позиционные аргументы" + +#, python-format +msgid "Same as --%s" +msgstr "То же, что и --%s" + +msgid "Deprecated options" +msgstr "Неподдерживаемые опции" + +msgid "No file to read" +msgstr "Отсутствует файл для чтения" + +msgid "A dictionary representing an LDAP entry" +msgstr "Словарь, соответствующий записи LDAP" + +msgid "A list of LDAP entries" +msgstr "Список записей LDAP" + +msgid "All commands should at least have a result" +msgstr "Все команды должны выводить результат" + +msgid "Results are truncated, try a more specific search" +msgstr "Результаты усечены. Попробуйте задать более точные условия поиска" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Неизвестный параметр: %(option)s" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Версия клиента. Используется для определения того, примет ли сервер запрос." + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" +"%(cver)s версия клиента несовместима с %(sver)s версией сервера \"%(server)s" +"\"" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s сообщает о неизвестной ошибке %(code)d: %(error)s" + +msgid "an internal error has occurred" +msgstr "произошла внутренняя ошибка" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "на сервере \"%(server)s\" произошла внутренняя ошибка " + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "неизвестная команда \"%(name)s\"" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "ошибка на сервере \"%(server)s\": %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "не удалось установить соединение с \"%(uri)s\": %(error)s " + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Неверный JSON-RPC запрос: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" +"ошибка преобразования данных для передачи по протоколу XML-RPC: %(error)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Отсутствует или неверный HTTP Referer, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" +"Системной кодировкой должна быть UTF-8, поддержка \"%(encoding)s\" не " +"предусмотрена. Установите либо LC_ALL=\"C.UTF-8\", либо LC_ALL=\"\" и " +"LC_CTYPE=\"C.UTF-8\"." + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "ошибка Kerberos: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "не получены учётные данные Kerberos" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "В базе данных Kerberos не найдена служба \"%(service)s\" " + +msgid "No credentials cache found" +msgstr "Кэш учётных данных не найден" + +msgid "Ticket expired" +msgstr "Срок действия билета истек" + +msgid "Credentials cache permissions incorrect" +msgstr "Неправильные права доступа к кэшу учётных данных" + +msgid "Bad format in credentials cache" +msgstr "Неверный формат кэша учётных данных " + +msgid "Cannot resolve KDC for requested realm" +msgstr "Не удалось определить KDC для запрошенной области (realm)" + +msgid "Session error" +msgstr "Сеансовая ошибка" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" +"Не удалось проверить подлинность учётной записи %(principal)s: %(message)s" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Недостаточно прав для доступа: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "команда \"%(name)s\" не имеет аргументов" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "команда \"%(name)s\" имеет не более %(count)d аргумента" +msgstr[1] "команда \"%(name)s\" имеет не более %(count)d аргументов" +msgstr[2] "команда \"%(name)s\" имеет не более %(count)d аргументов" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "пересекающиеся аргументы и параметры: %(names)s" + +#, python-format +msgid "'%(name)s' is required" +msgstr "следует указать \"%(name)s\"" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "недопустимое \"%(name)s\": %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "api не предоставляет такого пространства имён: \"%(name)s\"" + +msgid "Passwords do not match" +msgstr "Пароли не совпадают" + +msgid "Command not implemented" +msgstr "Команда не поддерживается" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "Клиент не настроен. Выполните команду ipa-client-install." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Не удалось получить %(name)s в интерактивном режиме" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "Команда \"%(name)s\" больше не поддерживается" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "Домен \"%(domain)s\" не является корневым для леса \"%(forest)s\"" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Такая запись уже существует" + +msgid "You must enroll a host in order to create a host service" +msgstr "Чтобы создать службу узла, необходимо сначала зарегистрировать узел" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Учётная запись службы указана в виде, отличном от: служба/полностью-" +"определённое-имя узла: %(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" +"Область (realm) для учётной записи не совпадает с областью этого IPA-сервера" + +msgid "This command requires root access" +msgstr "Для выполнения этой команды требуются права администратора (root)" + +msgid "This is already a posix group" +msgstr "Уже является POSIX-группой" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" +"Учётная запись указана в виде, отличном от от user@REALM: \"%(principal)s\"" + +msgid "This entry is already enabled" +msgstr "Эта запись уже включена" + +msgid "This entry is already disabled" +msgstr "Эта запись уже отключена" + +msgid "This entry cannot be enabled or disabled" +msgstr "Эту запись нельзя включать или отключать" + +msgid "This entry is not a member" +msgstr "Этой записи нет среди участников" + +msgid "A group may not be a member of itself" +msgstr "Группа не может входить в состав самой себя" + +msgid "This entry is already a member" +msgstr "Эта запись уже есть среди участников" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Не удалось выполнить декодирование Base64: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Группа не может быть добавлена сама в себя" + +msgid "The default users group cannot be removed" +msgstr "Невозможно удалить группу пользователей по умолчанию" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"Удаление управляемой группы запрещено. Сначала её необходимо отключить." + +msgid "A managed group cannot have a password policy." +msgstr "Управляемая группа не может иметь политику паролей." + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "\"%(entry)s\" не содержит сертификат." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "Не удалось создать личную группу. Группа \"%(group)s\" уже существует." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "Ошибка при проверке того, что все участники были %(verb)s: %(exc)s" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s не содержит \"%(value)s\"" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "Недостаточно строгие условия поиска. Ожидалось: 1. Найдено: %(found)d." + +msgid "This group already allows external members" +msgstr "В этой группе уже разрешены внешние участники" + +msgid "This group cannot be posix because it is external" +msgstr "Эта группа не может быть POSIX-группой, так как является внешней" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" +"Эта группа уже является POSIX-группой и не может быть преобразована во " +"внешнюю группу" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Удаление сервера прервано: %(reason)s." + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" +"%(operation)s не поддерживается для учётных записей %(principal_type)s " + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "Ошибка выполнения запроса, состояние %(status)s: %(reason)s" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" +"Набор правил сопоставления \"%(ruleset)s\" содержит более одного правила для " +"вспомогательной службы %(helper)s" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "\"%(attr)s\" уже содержит одно или несколько значений" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "команда или раздел справки \"%(topic)s\" не обнаружены" + +msgid "change collided with another change" +msgstr "изменение конфликтует с другим выполненным изменением" + +msgid "no modifications to be performed" +msgstr "отсутствуют изменения для выполнения" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +msgid "limits exceeded for this query" +msgstr "для этого запроса превышены ограничения" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "изменение главного ключа запрещено" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: допустимо только одно значение." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: неправильный синтаксис." + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Неверный фильтр поиска %(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "Запрещено для неконцевой записи" + +msgid "LDAP timeout" +msgstr "Время ожидания LDAP" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" +"Превышение времени ожидания завершения задачи LDAP %(task)s, DN задачи: " +"\"%(task_dn)s\"" + +msgid "Configured time limit exceeded" +msgstr "Превышено заданное ограничение по времени " + +msgid "Configured size limit exceeded" +msgstr "Превышено заданное ограничение по размеру" + +msgid "Configured administrative server limit exceeded" +msgstr "Превышено заданное ограничение административного сервера" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Не удалось завершить операцию с сертификатом: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Ошибка формата сертификата: %(error)s" + +msgid "Already registered" +msgstr "Уже зарегистрировано" + +msgid "Not registered yet" +msgstr "Ещё не зарегистрировано" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s невозможно удалить, так как он нужен для %(label)s %(dependent)s" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s не может быть удалён или отключён, потому что является последним в " +"%(label)s %(container)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s не может быть удалён или изменён: %(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "Сертификат %(name)s недействителен" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" +"Схема не нуждается в обновлении (отпечаток \"%(fingerprint)s\", TTL %(ttl)s " +"с)" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "На узле \"%(hostname)s\" нет соответствующей записи DNS A/AAAA" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" +"Не удалось выполнить проверку DNS: ожидалось {%(expected)s}, получено " +"{%(got)s}" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"У леса \"%(forest)s\" существует отношение доверия с лесом (лесами) " +"%(domains)s, это не позволяет установить отношение доверия с \"%(conflict)s\"" + +msgid "incorrect type" +msgstr "неверный тип" + +msgid "Only one value is allowed" +msgstr "Допускается только одно значение" + +msgid "this option is deprecated" +msgstr "это опция устарела" + +msgid "must be True or False" +msgstr "должно равняться либо True, либо False" + +msgid "must be an integer" +msgstr "должно быть целым числом" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "должно быть не меньше %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "может быть не больше %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "должно быть десятичным числом" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "должно быть не меньше %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "не может быть больше %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" +"класс чисел \"%(cls)s\" не входит в список допустимых классов чисел: " +"%(allowed)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "должно соответствовать шаблону \"%(pattern)s\"" + +msgid "must be binary data" +msgstr "должно быть двоичными данными" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "размер должен быть не меньше %(minlength)d байт" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "размер должен быть не больше %(maxlength)d байт" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "размер должен быть точно %(length)d байт" + +msgid "must be a certificate" +msgstr "должно быть сертификатом" + +msgid "must be a certificate signing request" +msgstr "должно быть запросом подписи сертификата" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Сбой при декодировании запроса подписи сертификата: %s" + +msgid "must be Unicode text" +msgstr "должно быть Юникод-текстом" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Использование пробелов в начале и в конце запрещено" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "должно быть не короче %(minlength)d символов" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "может быть не длиннее %(maxlength)d символов" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "должно быть точно %(length)d символов длиной" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "Использовать символ %(char)r запрещено." + +#, python-format +msgid "must be '%(value)s'" +msgstr "должно быть \"%(value)s\"" + +#, python-format +msgid "must be one of %(values)s" +msgstr "должно быть одним из следующих значений: %(values)s" + +msgid "must be datetime value" +msgstr "должно быть значением даты и времени (datetime)" + +msgid "does not match any of accepted formats: " +msgstr "не соответствует ни одному допустимому формату:" + +msgid "incomplete time value" +msgstr "неполное значение времени" + +msgid "must be DNS name" +msgstr "должно быть DNS-именем" + +msgid "must be absolute" +msgstr "должно быть абсолютным" + +msgid "must be relative" +msgstr "должно быть относительным" + +msgid "must be dictionary" +msgstr "должно быть словарём" + +msgid "must be Kerberos principal" +msgstr "должно быть учётной записью Kerberos" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Недопустимая учётная запись: \"%(value)s\"" + +msgid "Service principal is required" +msgstr "Следует указать учётную запись службы" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: файл не найден" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "Не удалось обработать учётную запись\n" + +msgid "any of the configured servers" +msgstr "любой из настроенных серверов" + +msgid "Exceeded number of tries to forward a request." +msgstr "Превышено количество попыток перенаправления запроса." + +msgid "Filename is empty" +msgstr "Пустое имя файла" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "В доступе отказано: %(file)s" + +msgid "empty DNS label" +msgstr "пустая DNS-метка" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "Длина DNS-метки не может быть больше 63 символов" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"можно использовать только буквы, цифры, символы %(chars)s. DNS-метка не " +"может начинаться или заканчиваться символом %(chars2)s" + +msgid "single label {}s are not supported" +msgstr "поддержка одноуровневых доменов {}s не предусмотрена" + +msgid "too many '@' characters" +msgstr "слишком много символов @" + +msgid "cannot be longer that {} characters" +msgstr "не может превышать {} символов" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "имя узла содержит пустую метку (точки подряд)" + +msgid "not fully qualified" +msgstr "указано не полностью" + +msgid "invalid SSH public key" +msgstr "неверный открытый ключ SSH" + +msgid "options are not allowed" +msgstr "использование параметров запрещено" + +msgid "invalid hostmask" +msgstr "недопустимая маска узла" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "запрос \"%(owner)s %(rtype)s\": %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "запрос \"%(owner)s %(rtype)s\" с помощью EDNS0: %(error)s" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" +"ответ на запрос \"%(owner)s %(rtype)s\" не содержит подписи DNSSEC (нет " +"данных RRSIG)" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"запись \"%(owner)s %(rtype)s\" не прошла проверку DNSSEC на сервере %(ip)s" + +msgid "invalid escape code in domain name" +msgstr "" +"недопустимая управляющая последовательность (escape code) в имени домена" + +msgid "domain name cannot be longer than 255 characters" +msgstr "имя домена не может быть длиннее 255 символов" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS-метка не может быть длиннее 63 символов" + +msgid "invalid domain name" +msgstr "недопустимое имя домена" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "имя домена \"%(domain)s\" должно быть нормализовано до: %(normalized)s" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "недопустимое имя домена: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"недопустимая версия IP-адреса (сейчас %(value)d, должна быть " +"%(required_value)d)!" + +msgid "invalid IP address format" +msgstr "недопустимый формат IP-адреса" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s не является допустимым портом" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" +"должно присутствовать хотя бы одно значение, равное каноническому имени " +"учётной записи" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" +"область (realm) или UPN-суффикс пересекается с пространством имён " +"доверенного домена" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Не удалось получить цепочку сертификатов CA: %s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "не удалось выполнить запрос, состояние HTTP %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Не удалось получить данные о состоянии CA: %s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Не удалось получить данные о состоянии CA: %d" + +#, python-format +msgid "objectclass %s not found" +msgstr "класс объектов %s не найден" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "Не удалось обменяться данными с CMS (состояние %d)" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "Соглашение о репликации для %(hostname)s не найдено" + +msgid "Failed to authenticate to CA REST API" +msgstr "" +"Не удалось выполнить аутентификацию с помощью программного интерфейса CA REST" + +msgid "automount location" +msgstr "расположение автомонтирования" + +msgid "automount locations" +msgstr "расположения автомонтирования" + +msgid "Automount Locations" +msgstr "Расположения автомонтирования" + +msgid "Automount Location" +msgstr "Расположение автомонтирования" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Добавлено расположение автомонтирования \"%(value)s\"" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Удаление расположения автомонтирования. \"%(value)s\"" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "установлено соответствие %(count)d расположения автомонтирования" +msgstr[1] "установлено соответствие %(count)d расположений автомонтирования" +msgstr[2] "установлено соответствие %(count)d расположений автомонтирования" + +msgid "automount map" +msgstr "список соответствия автомонтирования" + +msgid "automount maps" +msgstr "списки соответствия автомонтирования" + +msgid "Automount Maps" +msgstr "Списки соответствия автомонтирования" + +msgid "Automount Map" +msgstr "Список соответствия автомонтирования" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Добавлен список соответствия автомонтирования \"%(value)s\"" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Удалён список соответствия автомонтирования \"%(value)s\"" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Изменён список соответствия автомонтирования \"%(value)s\"" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +"установлено соответствие %(count)d списка соответствия автомонтирования" +msgstr[1] "" +"установлено соответствие %(count)d списков соответствия автомонтирования" +msgstr[2] "" +"установлено соответствие %(count)d списков соответствия автомонтирования" + +msgid "Automount key object." +msgstr "Объект ключа автомонтирования." + +msgid "automount key" +msgstr "ключ автомонтирования" + +msgid "automount keys" +msgstr "ключи автомонтирования" + +msgid "Automount Keys" +msgstr "Ключи автомонтирования" + +msgid "Automount Key" +msgstr "Ключ автомонтирования" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" +"Пара ключ,информация должна быть уникальной. Ключ с именем %(key)s и " +"информацией %(info)s уже существует" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "ключ с именем %(key)s уже существует" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "Ключ автомонтирования %(key)s с информацией %(info)s не существует" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" +"Найдено несколько записей с ключом %(key)s. Используйте --info, чтобы " +"выбрать определённую запись." + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Добавлен ключ автомонтирования \"%(value)s\"" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Добавлен непрямой список соответствия автомонтирования \"%(value)s\"" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" +"точка монтирования указывается относительно родительского списка " +"соответствия, её запись не может начинаться с /" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Удалён ключ автомонтирования \"%(value)s\"" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Изменён ключ автомонтирования \"%(value)s\"" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "установлено соответствие %(count)d ключа автомонтирования" +msgstr[1] "установлено соответствие %(count)d ключей автомонтирования" +msgstr[2] "установлено соответствие %(count)d ключей автомонтирования" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Управление профилями сертификатов\n" +"\n" +"Профили сертификатов используются центром сертификации (Certificate " +"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " +"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " +"если это так, определить, какие возможности и расширения будут предоставлены " +"сертификатом.\n" +"\n" +"Формат профиля сертификатов — это формат в виде списка свойств, который " +"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" +"\n" +"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" +"\n" +"Идентификатор профиля — это строка без пробелов и знаков препинания, она " +"начинается с буквы, за которой следуют другие буквы, цифры или символы " +"подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" +" ipa certprofile-import ShortLivedUserCert\n" +" --file UserCert.profile --desc \"User Certificates\"\n" +" --store=false\n" +"\n" +" Удалить профиль сертификатов:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показать сведения о профиле:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Сохранить конфигурацию профиля в файл:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Поиск профилей, в которых не хранятся сертификаты:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" +"\n" +"Формат конфигурации профиля — это формат в виде необработанного списка " +"свойств, который используется системой сертификации Dogtag Certificate " +"System. Поддержка формата XML не предусмотрена.\n" +"\n" +"К профилям под управлением IPA применяются следующие ограничения:\n" +"\n" +"- При импорте профиля значение поля \"profileId\", если это поле имеется, " +"должно совпадать с идентификатором, указанным в командной строке.\n" +"\n" +"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" +"\n" +"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" +"\n" +"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " +"\"certOutputImpl\".\n" + +msgid "CA is not configured" +msgstr "CA не настроен" + +msgid "invalid Profile ID" +msgstr "недопустимый идентификатор профиля" + +msgid "Certificate Profile" +msgstr "Профиль сертификатов" + +msgid "Certificate Profiles" +msgstr "Профили сертификатов" + +msgid "Profile configuration" +msgstr "Конфигурация профиля" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "установлено соответствие %(count)d профиля" +msgstr[1] "установлено соответствие %(count)d профилей" +msgstr[2] "установлено соответствие %(count)d профилей" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Импортирован профиль \"%(value)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" +"В данных профиля несколько раз указан идентификатор \"profileId\": %(values)s" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"Идентификатор профиля \"%(cli_value)s\" не соответствует данным профиля " +"\"%(file_value)s\"" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Удалён профиль \"%(value)s\"" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Предустановленный профиль \"%(profile_id)s\" невозможно удалить" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Изменён профиль сертификатов \"%(value)s\"" + +msgid "Certificate profiles cannot be renamed" +msgstr "Профили сертификатов невозможно переименовать" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "Недостаточно привилегий для внесения изменений в профиль сертификатов." + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Управление правилами CA ACL.\n" +"\n" +"Этот подключаемый модуль используется для определения правил, которые " +"управляют тем, какие службы сертификации и профили можно использовать для " +"выдачи сертификатов конкретным учётным записям или группам учётных записей.\n" +"\n" +"ОБЛАСТЬ ДЕЙСТВИЯ УЧЁТНОЙ ЗАПИСИ СУБЪЕКТА:\n" +"\n" +"Чтобы разрешить запрос сертификата, учётная запись (записи), которая " +"является субъектом запроса сертификата (это не обязательно должна быть та " +"учётная запись, которая фактически запрашивает сертификат), должна быть " +"включена в область действия ACL службы сертификации, которая также включает " +"целевые службу сертификации и профиль.\n" +"\n" +"Пользователей можно включить по имени, группе или категорией \"все " +"пользователи\". Узлы можно включить по имени, группе узлов или категорией " +"\"все узлы\". Службы можно включить по имени службы или категорией \"все " +"службы\". ACL служб сертификации могут быть связаны с одним типом учётных " +"записей или с несколькими типами.\n" +"\n" +"ОБЛАСТЬ ДЕЙСТВИЯ СЛУЖБЫ СЕРТИФИКАЦИИ:\n" +"\n" +"ACL службы сертификации может быть связана с одной или несколькими службами " +"сертификации по имени или по категории \"все CA\". По соображениям " +"совместимости ACL службы сертификации без привязки к службе сертификации " +"считается связанной со службой сертификации \"ipa\" (и только с этой службой " +"сертификации).\n" +"\n" +"ОБЛАСТЬ ДЕЙСТВИЯ ПРОФИЛЯ:\n" +"\n" +"ACL службы сертификации может быть связана с одним или несколькими профилями " +"по идентификатору профиля. Идентификатор профиля — это строка без пробелов и " +"знаков препинания, она начинается с буквы, за которой следуют другие буквы, " +"цифры или символы подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать ACL службы сертификации \"test\", которая предоставляет всем " +"пользователям доступ к профилю \"UserCert\":\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Показать свойства именованной ACL службы сертификации:\n" +" ipa caacl-show test\n" +"\n" +" Создать ACL службы сертификации, чтобы разрешить пользователю \"alice\" " +"использовать профиль \"DNP3\":\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Отключить ACL службы сертификации:\n" +" ipa caacl-disable test\n" +"\n" +" Удалить ACL службы сертификации:\n" +" ipa caacl-del test\n" + +msgid "CA ACL" +msgstr "CA ACL" + +msgid "CA ACLs" +msgstr "CA ACL" + +msgid "CA category" +msgstr "Категория CA" + +msgid "CA category the ACL applies to" +msgstr "Категория CA, к которой применяется ACL" + +msgid "CAs" +msgstr "CA" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "Добавлена CA ACL \"%(value)s\"" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Удалена CA ACL \"%(value)s\"" + +msgid "default CA ACL can be only disabled" +msgstr "CA ACL по умолчанию можно только отключить" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Изменена CA ACL \"%(value)s\"" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"для категории CA нельзя установить значение \"all\", когда имеются " +"разрешённые CA" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" +"для категории профилей нельзя установить значение \"all\", когда имеются " +"разрешённые профили" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" +"для категории пользователей нельзя установить значение \"all\", когда " +"имеются разрешённые пользователи" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"для категории узлов нельзя установить значение \"all\", когда имеются " +"разрешённые узлы" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"для категории служб нельзя установить значение \"all\", когда имеются " +"разрешённые службы" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "установлено соответствие %(count)d CA ACL" +msgstr[1] "установлено соответствие %(count)d CA ACL" +msgstr[2] "установлено соответствие %(count)d CA ACL" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Включена CA ACL \"%(value)s\"" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Отключена CA ACL \"%(value)s\"" + +#, python-format +msgid "%i user or group added." +msgstr "Добавлен %i пользователь или группа." + +#, python-format +msgid "%i users or groups added." +msgstr "Добавлено пользователей или групп: %i." + +msgid "users cannot be added when user category='all'" +msgstr "" +"невозможно добавить пользователей, когда категория пользователей=\"all\"" + +#, python-format +msgid "%i user or group removed." +msgstr "Удалён %i пользователь или группа." + +#, python-format +msgid "%i users or groups removed." +msgstr "Удалено пользователей или групп: %i." + +#, python-format +msgid "%i host or hostgroup added." +msgstr "Добавлен %i узел или группа узлов." + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "Добавлено узлов или групп узлов: %i." + +msgid "hosts cannot be added when host category='all'" +msgstr "невозможно добавить узлы, когда категория узлов=\"all\"" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "Удалён %i узел или группа узлов." + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "Удалено узлов или групп узлов: %i." + +#, python-format +msgid "%i service added." +msgstr "Добавлена %i служба." + +#, python-format +msgid "%i services added." +msgstr "Добавлено служб: %i." + +msgid "services cannot be added when service category='all'" +msgstr "невозможно добавить службы, когда категория служб=\"all\"" + +#, python-format +msgid "%i service removed." +msgstr "Удалена %i служба." + +#, python-format +msgid "%i services removed." +msgstr "Удалено служб: %i." + +#, python-format +msgid "%i profile added." +msgstr "Добавлен %i профиль." + +#, python-format +msgid "%i profiles added." +msgstr "Добавлено профилей: %i." + +msgid "profiles cannot be added when profile category='all'" +msgstr "невозможно добавить профили, когда категория профилей=\"all\"" + +#, python-format +msgid "%i profile removed." +msgstr "Удалён %i профиль." + +#, python-format +msgid "%i profiles removed." +msgstr "Удалено профилей: %i." + +msgid "Add CAs to a CA ACL." +msgstr "Добавить CA в CA ACL." + +#, python-format +msgid "%i CA added." +msgstr "Добавлена %i CA." + +#, python-format +msgid "%i CAs added." +msgstr "Добавлено CA: %i." + +msgid "CAs cannot be added when CA category='all'" +msgstr "невозможно добавить CA, когда категория CA=\"all\"" + +msgid "Remove CAs from a CA ACL." +msgstr "Удалить CA из CA ACL." + +#, python-format +msgid "%i CA removed." +msgstr "Удалена %i CA." + +#, python-format +msgid "%i CAs removed." +msgstr "Удалено CA: %i." + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" +"Уровень домена не может быть поднят до {0}, следует устранить существующие " +"конфликты репликации." + +msgid "Server does not support domain level functionality" +msgstr "Сервер не поддерживает функционал уровня домена" + +msgid "Domain Level cannot be lowered." +msgstr "Уровень домена не может быть понижен." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Уровень домена не может быть поднят до {0}, так на сервере {1} не " +"предусмотрена поддержка такого уровня." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"Система доменных имён (DNS)\n" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" +"\n" +"Управление записями зон и ресурсов DNS.\n" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" +"\n" +"ПОДДЕРЖИВАЕМЫЕ ТИПЫ ЗОН\n" +"\n" +" * Главная зона (dnszone-*), содержит надёжные данные.\n" +" * Зона перенаправления (dnsforwardzone-*), перенаправляет запросы на " +"настроенные перенаправители\n" +" (набор DNS-серверов).\n" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" +"\n" +"ИСПОЛЬЗОВАНИЕ СТРУКТУРИРОВАННЫХ ПАРАМЕТРОВ ДЛЯ ОТДЕЛЬНЫХ ТИПОВ\n" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" +"\n" +"Существует много структурированных типов записей ресурсов DNS, для которых " +"данные DNS, хранящиеся на сервере LDAP, являются не просто скалярным " +"значением, например IP-адрес или имя домена, а структурой данных, которая " +"часто может быть сложной. Примером может быть запись LOC [RFC1876], которая " +"состоит из многих обязательных и необязательных частей (градусов, минут, " +"секунд широты и долготы, высоты и погрешности).\n" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" +"\n" +"При работе с такими записями DNS может быть сложно не допустить ошибок и " +"ввести корректное значение. Модуль DNS предоставляет в ваше распоряжение " +"абстракцию над этими необработанными записями и позволяет управлять каждым " +"из типов записей ресурсов с помощью определённых параметров. Для каждого из " +"поддерживаемых типов записей ресурсов в модуле DNS предусмотрен стандартный " +"параметр для работы с необработанными записями с помощью формата ---" +"rec, например --mx-rec, и специальные параметры для каждой из частей " +"структуры записи ресурса с помощью формата ---, например --" +"mx-preference и --mx-exchanger.\n" +"\n" +"\n" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" +"\n" +"\n" +"При добавлении записи можно воспользоваться параметрами, специально " +"предназначенными для записей ресурсов, или стандартным параметром для " +"необработанного значения (сочетать эти варианты в одном действии по " +"добавлению нельзя). При внесении изменений в существующую запись можно " +"воспользоваться для изменения одной части записи DNS новыми специальными " +"параметрами записей ресурсов, причём для определения изменённого значения " +"будет использован стандартный вариант необработанного значения. В " +"приведенном ниже примере показано изменение приоритета записи MX с 0 на 1 в " +"записи без внесения изменений в обменник:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"\n" +"ПРИМЕРЫ:\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" +"\n" +"Добавить новую зону:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" +"\n" +" Добавить общесистемные права доступа, которыми можно воспользоваться для " +"делегирования привилегий для отдельных зон:\n" +" ipa dnszone-add-permission example.com\n" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" +"\n" +" Изменить зону, чтобы разрешить динамическое обновление для собственных " +"записей узлов в области (realm) EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" +"\n" +" Эта команда эквивалентна следующим командам:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" +"\n" +" Изменить зону, чтобы разрешить перенос зоны только для локальной сети:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" +"\n" +" Добавить новую обратную зону, указанную с помощью сетевого IP-адреса:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" +"\n" +" Добавить другой сервер имён для example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" +"\n" +" Добавить почтовый сервер для example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" +"\n" +" Добавить другую запись с помощью специальных параметров записи MX:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" +"\n" +"Добавить другую запись с помощью интерактивного режима (в который программа " +"переходит в ответ на команды dnsrecord-add, dnsrecord-mod или dnsrecord-del " +"без параметров):\n" +" ipa dnsrecord-add example.com @\n" +" Выберите тип записи ресурса DNS, который следует добавить\n" +" Наиболее распространённые типы для этого типа зон: NS, MX, LOC\n" +"\n" +" Тип записи ресурса DNS: MX\n" +" Приоритет MX: 30\n" +" Обменник MX: mail3\n" +" Имя записи: example.com\n" +" Запись MX: 10 mail1, 20 mail2, 30 mail3\n" +" Запись NS: nameserver.example.com., nameserver2.example.com.\n" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" +"\n" +" Удалить добавленный ранее сервер имён из example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" +"\n" +" Добавить запись LOC для example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" +"\n" +" Добавить новую запись A для www.example.com. Также создать обратную запись " +"в соответствующей обратной зоне. В этом случае запись PTR \"2\", которая " +"указывает на www.example.com, будет создана в зоне 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" +"\n" +" Добавить новую запись PTR для www.example.com:\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" +"\n" +" Добавить новые записи SRV для LDAP-серверов. Три четверти запросов должны " +"отправляться на fast.example.com, одна четверть — на slow.example.com. Если " +"обе службы недоступны, переключиться на backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" +"\n" +"Для облегчения внесения изменений можно воспользоваться интерактивным " +"режимом:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" Возможность внесения изменений в определённую запись не предусмотрена.\n" +" Текущее содержание записи DNS:\n" +"\n" +" Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" +"\"):\n" +" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" +"\"): y\n" +" Приоритет SRV [0]: (сохранить значение по умолчанию)\n" +" Вес SRV [1]: 2 (изменённое значение)\n" +" Порт SRV [389]: (сохранить значение по умолчанию)\n" +" Цель SRV [slow.example.com]: (сохранить значение по умолчанию)\n" +" Пропущена 1 запись SRV. Одновременно можно изменять только одно значение " +"на тип записи DNS.\n" +" Имя записи: _ldap._tcp\n" +" Запись SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" +"\n" +" После внесения этих изменений три пятых запросов должны направляться на " +"fast.example.com, а две пятых — на slow.example.com.\n" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" +"\n" +"Пример интерактивного режима для команды dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" Не указан параметр удаления определённой записи.\n" +" Удалить все? Да/Нет (по умолчанию \"Нет\"): (не удалять все записи)\n" +" Текущее содержание записи DNS:\n" +"\n" +" Запись A: 192.0.2.2, 192.0.2.3\n" +"\n" +" Удалить запись A '192.0.2.2'? Да/Нет (по умолчанию \"Нет\"):\n" +" Удалить запись A '192.0.2.3'? Да/Нет (по умолчанию \"Нет\"): y\n" +" Имя записи: www\n" +" Запись A: 192.0.2.2 (запись A 192.0.2.3 удалена)\n" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" +"\n" +" Показать зону example.com:\n" +" ipa dnszone-show example.com\n" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" +"\n" +" Найти зону со словом \"example\" в имени домена:\n" +" ipa dnszone-find example\n" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" +"\n" +" Найти записи для ресурсов с \"www\" в имени в зоне example.com:\n" +" ipa dnsrecord-find example.com www\n" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" +"\n" +" Найти записи A со значением 192.0.2.2 в зоне example.com:\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" +"\n" +" Показать записи для ресурса www в зоне example.com:\n" +" ipa dnsrecord-show example.com www\n" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" +"\n" +" Делегировать зону sub.example другому серверу имён:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" +"\n" +" Удалить зону example.com вместе со всеми записями ресурсов:\n" +" ipa dnszone-del example.com\n" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" +"\n" +"Если настроен глобальный перенаправитель, все запросы, для которых этот " +"сервер не является полномочным (например, sub.example.com), будут " +"перенаправлены на глобальный перенаправитель. Конфигурацию глобального " +"перенаправления можно переопределить для отдельных зон.\n" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" +"\n" +" Семантика перенаправления в IPA соответствует семантике BIND и зависит от " +"типа зоны:\n" +" * Главная зона: локальный BIND предоставляет надёжные ответы на запросы " +"данных в указанной зоне (включая надёжные ответы NXDOMAIN), а " +"перенаправление применяется только для запросов имён за пределами отрезков " +"(записи NS) зон, которые обслуживаются локально.\n" +"\n" +" * Зона перенаправления: зона перенаправления не содержит надёжные данные. " +"BIND перенаправляет запросы, на которые не удалось получить ответы из " +"локального кэша, на настроенные перенаправители.\n" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" +"\n" +" Семантика параметра --forward-policy:\n" +" * none - отключить перенаправление для указанной зоны.\n" +" * first - перенаправить все запросы на настроенные перенаправители. Если " +"они не сработают,\n" +" выполнить разрешение с помощью корневых серверов DNS.\n" +" * only - перенаправить все запросы на настроенные перенаправители и " +"вернуть сообщение об ошибке, если они не сработают.\n" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" +"\n" +" Отключить глобальное перенаправление для указанного поддерева:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" +"\n" +" Эта конфигурация перенаправляет все запросы имён за пределами поддерева " +"example.com на глобальные перенаправители. Для имён в пределах поддерева " +"example.com используется обычный рекурсивный процесс разрешения (то есть с " +"переходом по записям NS и так далее).\n" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" +"\n" +" Перенаправлять все запросы для зоны external.example.com на другой " +"перенаправитель с помощью политики \"first\" (запросы будут направлены на " +"выбранный перенаправитель, а если он не ответит, будут использованы " +"глобальные корневые серверы):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" +"\n" +" Изменить политику перенаправления (параметр forward-policy) для external." +"example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" +"\n" +" Показать зону перенаправления external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" +"\n" +" Вывести список всех зон перенаправления:\n" +" ipa dnsforwardzone-find\n" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" +"\n" +" Удалить зону перенаправления external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" +"\n" +"Определить адрес по имени узла, чтобы узнать, существует ли он (будет " +"добавлен стандартный домен IPA, если он не включён):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" +"\n" +"\n" +"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ DNS\n" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" +"\n" +"Конфигурация DNS, которая передаётся сценарию командной строки для " +"установки, хранится в локальном файле конфигурации на каждом IPA-сервере, " +"где настроена служба DNS. Эти локальные настройки могут быть переопределены " +"с помощью общей конфигурации, которая хранится на LDAP-сервере:\n" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" +"\n" +" Показать глобальную конфигурацию DNS:\n" +" ipa dnsconfig-show\n" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" +"\n" +"Изменить глобальную конфигурацию DNS и установить список глобальных " +"перенаправителей:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" + +msgid "invalid IP network format" +msgstr "недопустимый формат IP-сети" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "каждый элемент ACL должен заканчиваться точкой с запятой" + +msgid "invalid address format" +msgstr "недопустимый формат адреса" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" +"ожидаемый формат: <0-255> <0-255> <0-65535> " +"шестнадцатеричные_цифры_равной_длины_или_дефис" + +msgid "algorithm value: allowed interval 0-255" +msgstr "значение алгоритма: допустимый интервал 0-255" + +msgid "flags value: allowed interval 0-255" +msgstr "значение флагов: допустимый интервал от 0 до 255" + +msgid "iterations value: allowed interval 0-65535" +msgstr "значение количества итераций: допустимый интервал от 0 до 65535" + +#, python-format +msgid "salt value: %(err)s" +msgstr "значение соли: %(err)s" + +msgid "invalid domain-name: not fully qualified" +msgstr "недействительное имя домена: не является полным" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" +"не должно быть именем домена с подстановочными знаками (RFC 4592, раздел 4)" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "Ни один сервер имён не ответил на запрос обратной зоны DNS %(revdns)s" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" +"Обратная зона DNS %(revzone)s для IP-адреса %(addr)s не управляется этим " +"сервером" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "Зона DNS %(zone)s не найдена" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "IP-адрес %(ip)s уже назначен в домене %(domain)s." + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" +"Обратная запись для IP-адреса %(ip)s уже существует в обратной зоне %(zone)s." + +#, python-format +msgid "%s record" +msgstr "запись %s" + +#, python-format +msgid "Raw %s records" +msgstr "Необработанные записи %s" + +#, python-format +msgid "%s Record" +msgstr "Запись %s" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(подробности доступны в RFC %s)" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "\"%s\" является обязательной частью записи DNS" + +msgid "Invalid number of parts!" +msgstr "Неверное количество частей!" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" +"В подключаемом модуле bind-dyndb-ldap не предусмотрена поддержка типа записи " +"ресурсов DNS \"%s\"" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "формат должен быть указан следующим образом: \"%(format)s\" %(rfcs)s" + +msgid "Create reverse" +msgstr "Создать обратную запись" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "Не удалось создать обратную запись для \"%(value)s\": %(exc)s" + +msgid "Exchanger" +msgstr "Обменник" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" +"формат должен быть указан следующим образом:\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" где:\n" +" d1: [0 .. 90] (градусы широты)\n" +" d2: [0 .. 180] (градусы долготы)\n" +" m1, m2: [0 .. 59] (минуты широты / долготы)\n" +" s1, s2: [0 .. 59.999] (секунды широты / долготы)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (высота в метрах)\n" +" siz, hp, vp: [0 .. 90000000.00] (размер / точность в метрах)\n" +" Подробные сведения доступны в RFC 1876" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "\"%(required)s\" не должно быть пустым, если указано \"%(name)s\"" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" +"значением флагов должна быть одна из следующих букв: \"S\", \"A\", \"U\" или " +"\"P\"" + +msgid "Priority (order)" +msgstr "Приоритет (порядок)" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" +"Чем меньше число, тем выше приоритет. Клиентские части попытаются связаться " +"с тем доступным для них сервером, у которого ниже число приоритета. " + +msgid "Relative weight for entries with the same priority." +msgstr "Относительный вес записей с одинаковым приоритетом" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "значение не подходит под формат времени \"ГГГГММДДЧЧММСС\"" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" +"Чем меньше число, тем выше приоритет. Клиентские части попытаются связаться " +"с тем доступным для них адресом, у которого ниже число приоритета. " + +msgid "Target Uniform Resource Identifier" +msgstr "Универсальный код ресурса (URI) запрошенного конечного объекта " + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" +"Универсальный код ресурса (URI) запрошенного конечного объекта в " +"соответствии с RFC 3986" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "На сервере имён \"%(host)s\" нет соответствующей записи A/AAAA" + +msgid "Managedby permission" +msgstr "Разрешение managedby" + +msgid "DNS is not configured" +msgstr "DNS не настроено" + +#, fuzzy +#| msgid "hosts cannot be set when type is 'group'" +msgid "cannot be used when a zone is specified" +msgstr "невозможно указать узлы, когда тип \"group\"" + +msgid "Only one zone type is allowed per zone name" +msgstr "Для одного имени зоны можно использовать только один тип зоны" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "Добавлено системное разрешение \"%(value)s\"" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "разрешение \"%(value)s\" уже существует" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "Удалено системное разрешение \"%(value)s\"" + +msgid "DNS zone" +msgstr "зона DNS" + +msgid "DNS zones" +msgstr "зоны DNS" + +msgid "DNS Zones" +msgstr "Зоны DNS" + +msgid "DNS Zone" +msgstr "Зона DNS" + +msgid "Default time to live" +msgstr "Срок жизни по умолчанию" + +msgid "Time to live for records without explicit TTL definition" +msgstr "Срок жизни записей без явного определения срока жизни" + +msgid "setting Authoritative nameserver" +msgstr "установка полномочного сервера имён" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "Используется только для установки атрибута MNAME SOA" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "Запись (записи) NS можно изменять в начале зоны: \"@\". " + +msgid "" +msgstr "<все серверы DNS IPA>" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "Сервер имён для обратной зоны не может быть относительным DNS-именем" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Удалена зона DNS \"%(value)s\"" + +msgid "is required" +msgstr "следует указать" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Отключена зона DNS \"%(value)s\"" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Включена зона DNS \"%(value)s\"" + +msgid "DNS resource record" +msgstr "запись ресурса DNS" + +msgid "DNS resource records" +msgstr "записи ресурсов DNS" + +msgid "DNS Resource Records" +msgstr "Записи ресурсов DNS" + +msgid "DNS Resource Record" +msgstr "Запись ресурса DNS" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "запись DS не должна находиться в начале зоны (RFC 4035, раздел 2.4)" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" +"данные вне зоны: имя записи должно быть поддоменом зоны или относительным " +"именем" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" +"нельзя использовать шаблон имени домена в поле владельца записей %(types)s " +"(RFC 4592, раздел 4)" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" +"Обратной зоне %(name)s требуется ровно %(count)d компонтов IP-адресов, " +"предоставлено %(user_count)d" + +msgid "only master zones can contain records" +msgstr "только главные зоны могут содержать записи" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" +"для одного имени можно использовать только одну запись CNAME (RFC 2136, " +"раздел 1.1.5)" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" +"Запись CNAME нельзя использовать вместе с любыми другими записями (RFC 1034, " +"раздел 3.6.2)" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" +"для одного имени можно использовать только одну запись DNAME (RFC 6672, " +"раздел 2.4)" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"Запись NS нельзя использовать вместе с записью %(type)s, если только они не " +"расположены в корневой записи зоны (RFC 2181, раздел 6.1)" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" +"запись DS должна использоваться вместе с записью NS (RFC 4592, раздел 4.6, " +"RFC 4035, раздел 2.4)" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "Необработанное значение записи DNS уже задано параметром \"%(name)s\"" + +msgid "DNS zone root record cannot be renamed" +msgstr "Невозможно переименовать корневую запись зоны DNS" + +msgid "DNS records can be only updated one at a time" +msgstr "Записи DNS можно обновлять только по одной" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Удалена запись \"%(value)s\"" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "Невозможно удалить запись зоны \"%s\"" + +#, python-format +msgid "Found '%(value)s'" +msgstr "Найдено: \"%(value)s\"" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Узел \"%(host)s\" не найден" + +msgid "DNS configuration options" +msgstr "Параметры конфигурации DNS" + +msgid "DNS Global Configuration" +msgstr "Глобальная конфигурация DNS" + +msgid "IPA DNS version" +msgstr "Версия DNS IPA" + +msgid "IPA DNS servers" +msgstr "DNS-серверы IPA" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" +"Вывести список главных IPA-серверов, настроенных в качестве DNS-серверов" + +msgid "IPA DNSSec key master" +msgstr "Мастер ключей DNSSec IPA" + +msgid "IPA server configured as DNSSec key master" +msgstr "IPA-сервер, настроенный в качестве мастера ключей DNSSec" + +msgid "Global DNS configuration is empty" +msgstr "Пустая глобальная конфигурация DNS" + +msgid "DNS forward zone" +msgstr "зона перенаправления DNS" + +msgid "DNS forward zones" +msgstr "зоны перенаправления DNS" + +msgid "DNS Forward Zones" +msgstr "Зоны перенаправления DNS" + +msgid "DNS Forward Zone" +msgstr "Зона перенаправления DNS" + +msgid "Please specify forwarders." +msgstr "Укажите серверы-перенаправители." + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Удалена зона перенаправления DNS \"%(value)s\"" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Отключена зона перенаправления DNS \"%(value)s\"" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Включена зона перенаправления DNS \"%(value)s\"" + +msgid "IPA DNS records" +msgstr "Записи DNS IPA" + +msgid "IPA location records" +msgstr "Записи расположений IPA" + +msgid "Update location and IPA server DNS records" +msgstr "Обновить записи расположений и DNS-серверов IPA. " + +msgid "Result of the command" +msgstr "Результат команды" + +msgid "Dry run" +msgstr "Пробное выполнение" + +msgid "Do not update records only return expected records" +msgstr "Не обновлять записи, только вернуть ожидаемые записи" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Конфигурация DNS-сервера\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Управлять конфигурацией DNS-сервера\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +" Показать конфигурацию определённого DNS-сервера:\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Обновить конфигурацию определённого DNS-сервера:\n" +" ipa dnsserver-mod\n" + +msgid "DNS server" +msgstr "DNS-сервер" + +msgid "DNS servers" +msgstr "DNS-серверы" + +msgid "DNS Servers" +msgstr "DNS-серверы" + +msgid "DNS Server" +msgstr "DNS-сервер" + +msgid "DNS Server name" +msgstr "Имя DNS-сервера" + +msgid "SOA mname override" +msgstr "Переопределение mname SOA" + +msgid "SOA mname (authoritative server) override" +msgstr "Переопределение mname SOA (полномочный сервер)" + +msgid "Forwarders" +msgstr "Перенаправители" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Перенаправители для отдельных серверов. Для каждого перенаправителя можно " +"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Условная политика перенаправления для отдельных серверов. Чтобы отключить " +"для этой зоны перенаправление на глобальный перенаправитель, установите " +"значение \"none\". В этом случае условные перенаправители зон не будут " +"приниматься во внимание." + +msgid "Modify DNS server configuration" +msgstr "Изменить конфигурацию DNS-сервера" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Изменена запись DNS-сервера \"%(value)s\"" + +msgid "Search for DNS servers." +msgstr "Поиск DNS-серверов." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "установлено соответствие %(count)d DNS-сервера" +msgstr[1] "установлено соответствие %(count)d DNS-серверов" +msgstr[2] "установлено соответствие %(count)d DNS-серверов" + +msgid "IPA DNS Server is not installed" +msgstr "DNS-сервер IPA не установлен" + +msgid "Display configuration of a DNS server." +msgstr "Показать конфигурацию DNS-сервера." + +msgid "Add a new DNS server." +msgstr "Добавить новый DNS-сервер." + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Добавлен новый DNS-сервер \"%(value)s\"" + +msgid "Delete a DNS server" +msgstr "Удалить DNS-сервер" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Удалён DNS-сервер \"%(value)s\"" + +msgid "REST API is not logged in." +msgstr "Не выполнен вход в программный интерфейс REST." + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" +"Ответ от программного интерфейса REST CA не соответствует 2xx: %(status)d. " +"%(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "Не удалось обменяться данными с CMS" + +msgid "Response from CA was not valid JSON" +msgstr "Ответ от CA не являлся корректным кодом JSON" + +msgid "Host-based access control commands" +msgstr "Команды управления доступом на основе узла" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Службы HBAC\n" +"\n" +"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " +"соответствовать имени службы, которую оценивает PAM.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую службу HBAC:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Изменить существующую службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " +"FTP\n" +" и добавленная выше служба tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Удалить службу HBAC:\n" +" ipa hbacsvc-del tftp\n" + +msgid "HBAC services" +msgstr "cлужбы HBAC" + +msgid "HBAC Services" +msgstr "Cлужбы HBAC" + +msgid "HBAC Service" +msgstr "Cлужба HBAC" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Добавлена служба HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Удалена служба HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Изменена служба HBAC \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "установлено соответствие %(count)d службы HBAC" +msgstr[1] "установлено соответствие %(count)d служб HBAC" +msgstr[2] "установлено соответствие %(count)d служб HBAC" + +msgid "HBAC service group" +msgstr "группа служб HBAC" + +msgid "HBAC service groups" +msgstr "группы служб HBAC" + +msgid "HBAC Service Groups" +msgstr "Группы служб HBAC" + +msgid "HBAC Service Group" +msgstr "Группа служб HBAC" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Добавлена группа служб HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Удалена группа служб HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Изменена группа служб HBAC \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "установлено соответствие %(count)d группы служб HBAC" +msgstr[1] "установлено соответствие %(count)d групп служб HBAC" +msgstr[2] "установлено соответствие %(count)d групп служб HBAC" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" +"\n" +"Неподтверждённые пользователи\n" +"\n" +"Управление записями неподтверждённых пользователей.\n" +"\n" +"Записи неподтверждённых пользователей находятся непосредственно в " +"контейнере: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\". Пользователи не могут проходить " +"аутентификацию с помощью этих записей (даже если они содержат учётные " +"данные). Эти записи только являются кандидатами на преобразование в активные " +"записи. \n" +"\n" +"Активные записи пользователей являются пользователями Posix, находящимися " +"непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователи могут " +"проходить аутентификацию с помощью активных записей, если они содержат " +"учётные данные.\n" +"\n" +"Удалённые записи пользователей являются пользователями Posix, находящимися " +"непосредственно в контейнере: \"cn=deleted users, cn=accounts, " +"cn=provisioning, SUFFIX\". Пользователи не могут проходить аутентификацию с " +"помощью этих записей, даже если они содержат учётные данные.\n" +"\n" +"Контейнер неподтверждённых пользователей содержит записи:\n" +" - созданные с помощью команд \"stageuser-add\", которые являются " +"пользователями Posix\n" +" - созданные с помощью внешней системы подготовки \n" +"\n" +"Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать следующим " +"требованиям:\n" +" - RDN записи имеет значение \"uid\"\n" +" - ipaUniqueID имеет значение \"autogenerate\"\n" +"\n" +"IPA поддерживает широкий спектр форматов имён пользователей, но следует " +"учитывать те ограничения, которые могут существовать в конкретной среде. " +"Например, имена пользователей, которые начинаются с цифры или превышают " +"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" +"Используйте команду \"ipa config-mod\" для изменения формата имени " +"пользователя, разрешённого средствами IPA.\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить нового неподтверждённого пользователя:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Добавить неподтверждённого пользователя из контейнера удалённых " +"пользователей:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" + +msgid "Stage Users" +msgstr "Неподтверждённые пользователи" + +msgid "Stage User" +msgstr "Неподтверждённый пользователь" + +msgid "stage user" +msgstr "неподтверждённый пользователь" + +msgid "stage users" +msgstr "неподтверждённые пользователи" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Добавлен неподтверждённый пользователь \"%(value)s\"" + +msgid "givenname is required" +msgstr "следует указать имя" + +msgid "sn is required" +msgstr "следует указать sn" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "может быть не длиннее %(len)d символов" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Удалён неподтверждённый пользователь \"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Изменён неподтверждённый пользователь \"%(value)s\"" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "установлено соответствие %(count)d пользователя" +msgstr[1] "установлено соответствие %(count)d пользователей" +msgstr[2] "установлено соответствие %(count)d пользователей" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Активировать неподтверждённого пользователя \"%(value)s\"" + +msgid "Entry RDN is not 'uid'" +msgstr "RDN записи не имеет значение \"uid\"" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "В записи нет \"%(attribute)s\"" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "активный пользователь с именем \"%(user)s\" уже существует" + +#, python-format +msgid "Stage user %s activated" +msgstr "Неподтверждённый пользователь %s активирован" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" +"Добавить один или несколько сертификатов в запись неподтверждённого " +"пользователя." + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" +"Добавлены сертификаты в запись неподтверждённого пользователя \"%(value)s\"" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" +"Удалить один или несколько сертификатов из записи неподтверждённого " +"пользователя." + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" +"Удалены сертификаты из записи неподтверждённого пользователя \"%(value)s\"" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" +"Добавить новый псевдоним учётной записи в запись неподтверждённого " +"пользователя." + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" +"Добавлены новые псевдонимы в запись неподтверждённого пользователя " +"\"%(value)s\"" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" +"Удалить псевдоним учётной записи из записи неподтверждённого пользователя." + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" +"Удалены псевдонимы из записи неподтверждённого пользователя \"%(value)s\"" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" +"Добавить одно или несколько сопоставлений сертификатов в запись " +"неподтверждённого пользователя." + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" +"Удалить одно или несколько сопоставлений сертификатов из записи " +"неподтверждённого пользователя." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" +"\n" +"Топология\n" +"\n" +"Управление топологией репликации на уровне домена 1.\n" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" +"\n" +"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" +"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " +"связанные с доменом данные\n" +"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " +"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" +"\n" +"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" +"серверы. Способ репликации определяется соглашениями о репликации. " +"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " +"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " +"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " +"выполняется централизованно с помощью команд \"ipa topology*\".\n" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" +"\n" +"Соглашения представляются сегментами топологии. По умолчанию сегмент " +"топологии представляет 2 соглашения о репликации: по одному для каждого " +"направления, например, от A до B и от B до A. Создание однонаправленных " +"сегментов запрещено.\n" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" +"\n" +"Чтобы проверить, что ни один сервер не отключается в топологии указанного " +"суффикса, используйте эту команду:\n" +" ipa topologysuffix-verify $suffix\n" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +"\n" +"Примеры:\n" +" Найти все IPA-серверы:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Найти все суффиксы:\n" +" ipa topologysuffix-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Добавить сегмент топологии к суффиксу \"domain\":\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Добавить сегмент топологии в суффикс \"ca\":\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" +" ipa topologysegment-find domain\n" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" +" ipa topologysegment-find ca\n" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" +"\n" +" Удалить сегмент топологии в суффиксе \"domain\":\n" +" ipa topologysegment-del domain segment_name\n" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" +"\n" +" Удалить сегмент топологии в суффиксе \"ca\":\n" +" ipa topologysegment-del ca segment_name\n" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" +"\n" +" Проверить топологию суффикса \"domain\":\n" +" ipa topologysuffix-verify domain\n" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +" Проверить топологию суффикса \"ca\":\n" +" ipa topologysuffix-verify ca\n" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "Управление топологией требует уровня домена не ниже {0}" + +msgid "segment" +msgstr "сегмент" + +msgid "segments" +msgstr "сегменты" + +msgid "Topology Segments" +msgstr "Сегменты топологии" + +msgid "Topology Segment" +msgstr "Сегмент топологии" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "левый узел не является узлом топологии: %(leftnode)s" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "правый узел не является узлом топологии: %(rightnode)s" + +msgid "left node and right node must not be the same" +msgstr "левый узел и правый узел должны быть разными узлами" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "в левом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "в правом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "установлено соответствие %(count)d сегмента" +msgstr[1] "установлено соответствие %(count)d сегментов" +msgstr[2] "установлено соответствие %(count)d сегментов" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Добавлен сегмент \"%(value)s\"" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Удалён сегмент \"%(value)s\"" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Изменён сегмент \"%(value)s\"" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +msgid "left or right node has to be specified" +msgstr "следует указать левый или правый узел" + +msgid "only one node can be specified" +msgstr "можно указать только один узел" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Обновление репликации для сегмента: направлен запрос \"%(pkey)s\"." + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Остановка репликации для сегмента: направлен запрос \"%(pkey)s\"." + +msgid "suffixes" +msgstr "суффиксы" + +msgid "Topology suffixes" +msgstr "Суффиксы топологии" + +msgid "Topology suffix" +msgstr "Суффикс топологии" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "установлено соответствие %(count)d суффикса топологии" +msgstr[1] "установлено соответствие %(count)d суффиксов топологии" +msgstr[2] "установлено соответствие %(count)d суффиксов топологии" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Удалён суффикс топологии \"%(value)s\"" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Добавлен суффикс топологии \"%(value)s\"" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Изменён суффикс топологии \"%(value)s\"" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"Проверка топологии репликации для суффикса.\n" +"\n" +"Проверки, которые выполняются:\n" +" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " +"репликации между всеми серверами).\n" +" 2. проверка того, не превышено ли рекомендованное количество соглашений о " +"репликации между серверами.\n" +" \n" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" +"Недостаточно привилегий \"write\" для атрибута \"krbLastPwdChange\" записи " +"\"%s\"." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of hosts.\n" +#| "\n" +#| "Manage groups of hosts. This is useful for applying access control to a\n" +#| "number of hosts by using Host-based Access Control.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new host group:\n" +#| " ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +#| "\n" +#| " Add another new host group:\n" +#| " ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +#| "\n" +#| " Add members to the hostgroup (using Bash brace expansion):\n" +#| " ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +#| "\n" +#| " Add a hostgroup as a member of another hostgroup:\n" +#| " ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +#| "\n" +#| " Remove a host from the hostgroup:\n" +#| " ipa hostgroup-remove-member --hosts=box2 baltimore\n" +#| "\n" +#| " Display a host group:\n" +#| " ipa hostgroup-show baltimore\n" +#| "\n" +#| " Delete a hostgroup:\n" +#| " ipa hostgroup-del baltimore\n" +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Группы узлов.\n" +"\n" +"Управление группами узлов. Оно полезно при применении управления доступом к " +"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Добавить другую новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Добавить участников в группу узлов (с использованием выражения Bash в " +"фигурных скобках):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Добавить группу узлов как участника другой группы узлов:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Удалить узел из группы узлов:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показать группу узлов:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Удалить группу узлов:\n" +" ipa hostgroup-del baltimore\n" + +msgid "host groups" +msgstr "группы узлов" + +msgid "Host Group" +msgstr "Группа узлов" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Добавлена группа узлов \"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"сетевая группа с именем \"%s\" уже существует. Группы узлов и сетевые группы " +"имеют общее пространство имён" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Удалена группа узлов \"%(value)s\"" + +msgid "hostgroup" +msgstr "группа узлов" + +msgid "privileged hostgroup" +msgstr "привилегированная группа узлов" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Изменена группа узлов \"%(value)s\"" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "установлено соответствие %(count)d группы узлов" +msgstr[1] "установлено соответствие %(count)d групп узлов" +msgstr[2] "установлено соответствие %(count)d групп узлов" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Добавить пользователей, которые могут управлять этим токеном." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Удалить пользователей, которые могут управлять этим токеном." + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Хранилища\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Управление хранилищами.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" +"\n" +"Хранилище — это безопасное место для хранения секрета. В одном хранилище " +"может храниться только один секрет. При архивировании секрета в хранилище " +"существующий секрет (если имеется) будет перезаписан.\n" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"В зависимости от владения хранилища подразделяются на три категории:\n" +"* хранилища пользователей или личные хранилища\n" +"* хранилища служб\n" +"* хранилища совместного использования\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Хранилища пользователей — это хранилища, владельцем которых является " +"конкретный пользователь. Личными являются хранилища, владельцем которых " +"является текущий пользователь. Владельцем хранилища службы является " +"определённая служба. Хранилища совместного использования принадлежат " +"администратору, но могут использоваться другими пользователями или " +"службами.\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"В зависимости от механизма обеспечения безопасности выделяют три типа " +"хранилищ:\n" +"* стандартные хранилища\n" +"* симметричные хранилища\n" +"* асимметричные хранилища\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"В стандартном хранилище для передачи и хранения секрета используются " +"безопасные механизмы. Секрет могут получить только те пользователи, у " +"которых есть доступ к хранилищу.\n" +"\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью пароля. Секрет можно " +"получить только с помощью этого пароля.\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " +"можно получить только с помощью закрытого ключа.\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Вывести список хранилищ:\n" +" ipa vault-find\n" +" [--user <пользователь>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Добавить стандартное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type standard\n" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Добавить симметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type symmetric --password-file password.txt\n" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Добавить асимметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file public.pem\n" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Показать хранилище:\n" +" ipa vault-show <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Изменить описание хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --desc <описание>\n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" +"\n" +" Изменить тип хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старый пароль / закрытый ключ]\n" +" [новый пароль / открытый ключ]\n" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" +"\n" +" Изменить пароль симметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password <старый пароль>\n" +" --new-password <новый пароль>\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" +"\n" +" Изменить ключи асимметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закрытого ключа>\n" +" --public-key-file <файл нового открытого ключа>\n" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Удалить хранилище:\n" +" ipa vault-del <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Показать конфигурацию хранилища:\n" +" ipa vaultconfig-show\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архивировать данные в стандартное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Архивировать данные в симметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" +" --password-file password.txt\n" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архивировать данные в асимметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Получить данные из стандартного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Получить данные из симметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" +" --password-file password.txt\n" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Получить данные из асимметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных> --private-key-file private.pem\n" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Добавить владельцев хранилища:\n" +" ipa vault-add-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Удалить владельцев хранилища:\n" +" ipa vault-remove-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Добавить участников хранилища:\n" +" ipa vault-add-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Удалить участников хранилища:\n" +" ipa vault-remove-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" Объект контейнера хранилищ.\n" +" " + +msgid "vaultcontainer" +msgstr "контейнер хранилищ" + +msgid "vaultcontainers" +msgstr "контейнеры хранилищ" + +msgid "Vault Containers" +msgstr "Контейнеры хранилищ" + +msgid "Vault Container" +msgstr "Контейнер хранилищ" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" +"Невозможно одновременно указать параметры службы, совместного использования " +"и пользователя" + +msgid "Host is not supported" +msgstr "Поддержка узла не предусмотрена" + +msgid "KRA service is not enabled" +msgstr "Служба KRA не включена" + +msgid "Deleted vault container" +msgstr "Удалён контейнер хранилищ" + +#, python-format +msgid "owner %s" +msgstr "владелец %s" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Объект хранилища.\n" +" " + +msgid "vault" +msgstr "хранилище" + +msgid "vaults" +msgstr "хранилища" + +msgid "Vaults" +msgstr "Хранилища" + +msgid "Vault" +msgstr "Хранилище" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" +"Невозможно одновременно указать параметры службы, общего доступа и " +"пользователя" + +msgid "Add a vault." +msgstr "Добавить хранилище." + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Добавлено хранилище \"%(value)s\"" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Удалено хранилище \"%(value)s\"" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "установлено соответствие %(count)d хранилища" +msgstr[1] "установлено соответствие %(count)d хранилищ" +msgstr[2] "установлено соответствие %(count)d хранилищ" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" +"Невозможно одновременно указать параметры службы (служб), общего доступа и " +"пользователя (пользователей)" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Изменено хранилище \"%(value)s\"" + +msgid "Vault configuration" +msgstr "Конфигурация хранилища" + +msgid "IPA KRA servers" +msgstr "KRA-серверы IPA" + +msgid "IPA servers configured as key recovery agents" +msgstr "IPA-серверы, настроенные в качестве агентов восстановления ключей" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Данные архивированы в хранилище \"%(value)s\"" + +msgid "Retrieve data from a vault." +msgstr "Извлечь данные из хранилища." + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Данные получены из хранища \"%(value)s\"" + +msgid "No archived data." +msgstr "Архивированных данных нет." + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "Проверяет, включена ли служба KRA на каких-либо серверах." + +msgid "netgroups" +msgstr "сетевые группы" + +msgid "Netgroups" +msgstr "Сетевые группы" + +msgid "Netgroup" +msgstr "Сетевая группа" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Добавлена сетевая группа \"%(value)s\"" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"группа узлов с именем \"%s\" уже существует. Группы узлов и сетевые группы " +"имеют общее пространство имён" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Удалена сетевая группа \"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Изменена сетевая группа \"%(value)s\"" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "установлено соответствие %(count)d сетевой группы" +msgstr[1] "установлено соответствие %(count)d сетевых групп" +msgstr[2] "установлено соответствие %(count)d сетевых групп" + +msgid "One time password commands" +msgstr "Команды для одноразового пароля" + +msgid "OTP configuration options" +msgstr "Параметры конфигурации OTP" + +msgid "OTP Configuration" +msgstr "Конфигурация OTP" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Изменён пароль \"%(value)s\"" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Средства отчётности о состоянии функции пре-аутентификации (PKINIT) " +"Kerberos.\n" +"\n" +"Отчёт о том, включена или отключена пре-аутентификация (PKINIT) Kerberos на " +"главных IPA-серверах \n" +"\n" +"ПРИМЕРЫ:\n" +" Вывести список состояний PKINIT на всех главных серверах:\n" +" ipa pkinit-status\n" +"\n" +" Проверить состояние PKINIT на \"ipa.example.com\":\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" Вывести список всех главных IPA-серверов с отключённой PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"Дополнительные сведения о поддержке PKINIT:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "PKINIT status" +msgstr "Состояние PKINIT" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "Включена или отключена пре-аутентификация (PKINIT)" + +msgid "Report PKINIT status on the IPA masters" +msgstr "Сообщить состояние PKINIT на главных IPA-серверах" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "установлено соответствие %(count)s сервера" +msgstr[1] "установлено соответствие %(count)s серверов" +msgstr[2] "установлено соответствие %(count)s серверов" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"Прокси-серверы RADIUS\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Управление прокси-серверами RADIUS.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"В IPA поддерживается использование внешнего прокси-сервера RADIUS для " +"выполнения аутентификации с помощью одноразового пароля krb5. Эта поддержка " +"обеспечивает значительную гибкость при интеграции со сторонними службами " +"аутентификации.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Добавить новый сервер:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Найти все серверы, записи которых содержат строку \"example.com\":\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Проверить конфигурацию:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Изменить секрет:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Удалить конфигурацию:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "недопустимое имя атрибута" + +msgid "invalid port number" +msgstr "недопустимый номер порта" + +msgid "RADIUS proxy server" +msgstr "прокси-сервер RADIUS" + +msgid "RADIUS proxy servers" +msgstr "прокси-серверы RADIUS" + +msgid "RADIUS Servers" +msgstr "Серверы RADIUS" + +msgid "RADIUS Server" +msgstr "Сервер RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Добавлен прокси-сервер RADIUS \"%(value)s\"" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Удалён прокси-сервер RADIUS \"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Изменён прокси-сервер RADIUS \"%(value)s\"" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "установлено соответствие %(count)d прокси-сервера RADIUS" +msgstr[1] "установлено соответствие %(count)d прокси-серверов RADIUS" +msgstr[2] "установлено соответствие %(count)d прокси-серверов RADIUS" + +msgid "A list of ACI values" +msgstr "Список значений ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "type, filter, subtree и targetgroup нельзя использовать вместе" + +msgid "ACI prefix is required" +msgstr "Следует указать префикс ACI" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"следует указать хотя бы одно из: type, filter, subtree, targetgroup, attrs " +"или memberof" + +msgid "filter and memberof are mutually exclusive" +msgstr "filter и memberof нельзя использовать вместе" + +msgid "group, permission and self are mutually exclusive" +msgstr "group, permission и self нельзя использовать вместе" + +msgid "One of group, permission or self is required" +msgstr "Следует указать одно из значений: group, permission или self" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Группа \"%s\" не существует" + +msgid "empty filter" +msgstr "пустой фильтр" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Ошибка синтаксиса: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "Некорректное DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI с именем \"%s\" не найдена" + +msgid "ACI object." +msgstr "Объект ACI." + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Создана ACI \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Удалена ACI \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Изменена ACI \"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "установлено соответствие %(count)d ACI" +msgstr[1] "установлено соответствие %(count)d ACI" +msgstr[2] "установлено соответствие %(count)d ACI" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI переименована в \"%(value)s\"" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" +"\n" +"Конфигурация сервера\n" +"\n" +"Управление значениями по умолчанию, которые используются IPA, и некоторыми " +"параметрами их настройки.\n" +"\n" +"ПРИМЕЧАНИЯ:\n" +"\n" +"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " +"будет реплицировано. В текущей версии оно не используется для " +"заблаговременного уведомления пользователей об окончании срока действия " +"пароля.\n" +"\n" +"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " +"для чтения. Среди них:\n" +"\n" +"Основа субъекта сертификата: настроенная основа субъекта сертификата, " +"например O=EXAMPLE.COM. Настраивается только во время установки.\n" +"Возможности подключаемого модуля паролей: в текущей версии он определяет " +"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " +"условия).\n" +"\n" +"При установке приоритета сопоставления пользователей SELinux, возможно, " +"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " +"оболочкой.\n" +"\n" +"Максимальная длина имени узла в Linux управляется параметром ядра " +"MAXHOSTNAMELEN и по умолчанию составляет 64 символа. В некоторых других " +"операционных системах, например, в Solaris, разрешены имена узлов длиной " +"вплоть до 255.\n" +"Этот параметр позволяет регулировать длину, но по умолчанию ограничен " +"максимальной длиной для Linux.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Показать базовую конфигурацию сервера:\n" +" ipa config-show\n" +"\n" +" Показать все параметры конфигурации:\n" +" ipa config-show --all\n" +"\n" +" Изменить максимальную длину имени пользователя на 99 символов:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Изменить максимальную длину имени узла на 255 символов:¶\n" +" ipa config-mod --maxhostname=255¶\n" +"\n" +" Увеличить установленные по умолчанию ограничения времени и размера поиска " +"IPA-сервера:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Указать почтовый домен пользователей по умолчанию:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " +"migrate-ds\":\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Определить порядок списка пользователей SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "must be at least 10" +msgstr "должно быть не меньше 10" + +msgid "configuration options" +msgstr "параметры конфигурации" + +msgid "Configuration" +msgstr "Конфигурация" + +msgid "Maximum hostname length" +msgstr "Максимальная длина имени узла" + +msgid "IPA masters" +msgstr "Главные IPA-серверы" + +msgid "List of all IPA masters" +msgstr "Список всех главных IPA-серверов" + +msgid "Hidden IPA masters" +msgstr "Скрытые главные IPA-серверы" + +msgid "List of all hidden IPA masters" +msgstr "Список всех скрытых главных IPA-серверов" + +msgid "IPA master capable of PKINIT" +msgstr "Главный IPA-сервер с поддержкой PKINIT" + +msgid "IPA master which can process PKINIT requests" +msgstr "Главный IPA-сервер, которой может обрабатывать запросы PKINIT" + +msgid "IPA CA servers" +msgstr "Серверы CA IPA" + +msgid "IPA servers configured as certificate authority" +msgstr "IPA-серверы, настроенные в качестве центра сертификации" + +msgid "Hidden IPA CA servers" +msgstr "Скрытые серверы CA IPA" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Скрытые IPA-серверы, настроенные в качестве центра сертификации" + +msgid "IPA CA renewal master" +msgstr "Главный сервер обновления CA IPA" + +msgid "Renewal master for IPA certificate authority" +msgstr "Главный сервер обновления центра сертификации IPA" + +msgid "IPA servers configured as key recovery agent" +msgstr "IPA-серверы, настроенные в качестве агента восстановления ключей" + +msgid "Hidden IPA KRA servers" +msgstr "Скрытые KRA-серверы IPA" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" +"Скрытые IPA-серверы, настроенные в качестве агента восстановления ключей" + +msgid "Domain resolution order" +msgstr "Порядок разрешения доменов" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" +"Разделённый двоеточиями список доменов, которые используются для обработки " +"кратких имён" + +msgid "IPA servers configured as domain name server" +msgstr "IPA-серверы, настроенные в качестве сервера доменных имен" + +msgid "Hidden IPA DNS servers" +msgstr "Скрытые DNS-серверы IPA" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "Скрытыие IPA-серверы, настроенные в качестве сервера доменных имен" + +msgid "DNSec key master" +msgstr "Мастер ключей DNSec" + +msgid "Empty domain is not allowed" +msgstr "Использование пустого домена запрещено" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Недопустимое имя домена \"%(domain)s\": %(e)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "На сервере нет сведений о домене \"%(domain)s\"" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Отключённый домен \"%(domain)s\" нельзя использовать" + +msgid "The group doesn't exist" +msgstr "Группа не существует" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "атрибут \"%s\" нельзя использовать" + +msgid "May not be empty" +msgstr "Не может быть пустым" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "Атрибут %(obj)s по умолчанию, %(attr)s, не будет разрешён!" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "Ожидается список пользователей SELinux, с разделителем $" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" +"Запись пользователя SELinux \"%(user)s\" не является корректной: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" +"Пользователя списка соответствия пользователей SELinux по умолчанию нет в " +"порядковом списке" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Groups of users\n" +#| "\n" +#| "Manage groups of users. By default, new groups are POSIX groups. You\n" +#| "can add the --nonposix option to the group-add command to mark a new " +#| "group\n" +#| "as non-POSIX. You can use the --posix argument with the group-mod " +#| "command\n" +#| "to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +#| "converted to non-POSIX groups.\n" +#| "\n" +#| "Every group must have a description.\n" +#| "\n" +#| "POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +#| "supported but can have an impact on your file permissions. It is not " +#| "necessary\n" +#| "to supply a GID when creating a group. IPA will generate one " +#| "automatically\n" +#| "if it is not provided.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new group:\n" +#| " ipa group-add --desc='local administrators' localadmins\n" +#| "\n" +#| " Add a new non-POSIX group:\n" +#| " ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +#| "\n" +#| " Convert a non-POSIX group to posix:\n" +#| " ipa group-mod --posix remoteadmins\n" +#| "\n" +#| " Add a new POSIX group with a specific Group ID number:\n" +#| " ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +#| "\n" +#| " Add a new POSIX group and let IPA assign a Group ID number:\n" +#| " ipa group-add --desc='printer admins' printeradmins\n" +#| "\n" +#| " Remove a group:\n" +#| " ipa group-del unixadmins\n" +#| "\n" +#| " To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +#| " ipa group-add-member --groups=remoteadmins localadmins\n" +#| "\n" +#| " Add multiple users to the \"localadmins\" group:\n" +#| " ipa group-add-member --users=test1 --users=test2 localadmins\n" +#| "\n" +#| " Remove a user from the \"localadmins\" group:\n" +#| " ipa group-remove-member --users=test2 localadmins\n" +#| "\n" +#| " Display information about a named group.\n" +#| " ipa group-show localadmins\n" +#| "\n" +#| "External group membership is designed to allow users from trusted " +#| "domains\n" +#| "to be mapped to local POSIX groups in order to actually use IPA " +#| "resources.\n" +#| "External members should be added to groups that specifically created as\n" +#| "external and non-POSIX. Such group later should be included into one of " +#| "POSIX\n" +#| "groups.\n" +#| "\n" +#| "An external group member is currently a Security Identifier (SID) as " +#| "defined by\n" +#| "the trusted domain. When adding external group members, it is possible " +#| "to\n" +#| "specify them in either SID, or DOM\\name, or name@domain format. IPA will " +#| "attempt\n" +#| "to resolve passed name to SID with the use of Global Catalog of the " +#| "trusted domain.\n" +#| "\n" +#| "Example:\n" +#| "\n" +#| "1. Create group for the trusted domain admins' mapping and their local " +#| "POSIX group:\n" +#| "\n" +#| " ipa group-add --desc=' admins external map' " +#| "ad_admins_external --external\n" +#| " ipa group-add --desc=' admins' ad_admins\n" +#| "\n" +#| "2. Add security identifier of Domain Admins of the to the " +#| "ad_admins_external\n" +#| " group:\n" +#| "\n" +#| " ipa group-add-member ad_admins_external --external 'AD\\Domain " +#| "Admins'\n" +#| "\n" +#| "3. Allow members of ad_admins_external group to be associated with " +#| "ad_admins POSIX group:\n" +#| "\n" +#| " ipa group-add-member ad_admins --groups ad_admins_external\n" +#| "\n" +#| "4. List members of external members of ad_admins_external group to see " +#| "their SIDs:\n" +#| "\n" +#| " ipa group-show ad_admins_external\n" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Группы пользователей\n" +"\n" +"Управление группами пользователей. По умолчанию все новые группы являются " +"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " +"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " +"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " +"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" +"\n" +"У каждой группы должно быть описание.\n" +"\n" +"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " +"поддерживается, но может повлиять на разрешения для файлов. При создании " +"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " +"создаст его автоматически.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Добавить новую не-POSIX-группу:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Преобразовать не-POSIX-группу в posix-группу:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Добавить новую POSIX-группу с определённым ID группы:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Удалить группу:\n" +" ipa group-del unixadmins\n" +"\n" +" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Добавить нескольких пользователей в группу \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Удалить пользователя из группы \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa group-show localadmins\n" +"\n" +"Участие внешних групп создано для того, чтобы сделать возможной привязку " +"пользователей из доверенных доменов к локальным POSIX-группам с целью " +"использования ресурсов IPA. Внешние участники должны быть добавлены в " +"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " +"затем должна быть включена в одну из групп POSIX.\n" +"\n" +"В текущей версии участник внешней группы является идентификатором " +"безопасности (Security Identifier или SID), определённым доверенным доменом. " +"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " +"или имя@домен. IPA попытается определить SID по переданному имени путём " +"использования общего каталога доверенного домена.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список внешних участников группы ad_admins_external, чтобы " +"определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "groups" +msgstr "группы" + +msgid "User Group" +msgstr "Группа пользователей" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Добавлена группа \"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "невозможно указать gid для внешней группы" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Удалена группа \"%(value)s\"" + +msgid "privileged group" +msgstr "привилегированная группа" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Изменена группа \"%(value)s\"" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "установлено соответствие %(count)d группы" +msgstr[1] "установлено соответствие %(count)d групп" +msgstr[2] "установлено соответствие %(count)d групп" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Невозможно выполнить проверку внешнего участника без установленной поддержки " +"Samba 4. Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без настройки собственного домена нельзя выполнять операцию присоединения. " +"Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Отсоединена группа \"%(value)s\" от пользователя \"%(value)s\"" + +msgid "not allowed to modify user entries" +msgstr "запрещено изменять записи пользователей" + +msgid "not allowed to modify group entries" +msgstr "запрещено изменять записи групп" + +msgid "Not a managed group" +msgstr "Не является управляемой группой" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Добавить пользователей, которые могут управлять этим токеном." + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Удалить пользователей, которые могут управлять этим токеном." + +msgid "" +"\n" +"Permissions\n" +msgstr "" +"\n" +"Разрешения\n" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" +"\n" +"С помощью разрешений можно очень точно делегировать права доступа. " +"Разрешение представляет собой удобную для восприятия форму 389-ds ACI " +"(правила управления доступом).\n" +"Разрешение даёт право выполнять определённую задачу, например, добавлять " +"пользователей, изменять группы и так далее.\n" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"Разрешение не может содержать другие разрешения.\n" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* Разрешение даёт доступ для чтения, записи, добавления, удаления, поиска " +"или сравнения.\n" +"* Привилегия объединяет схожие разрешения (например, все разрешения, которые " +"требуются для добавления пользователя).\n" +"* Роль даёт набор привилегий пользователям, группам, узлам или группам " +"узлов.\n" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" +"\n" +"Разрешение состоит из нескольких разных частей:\n" +"\n" +"1. Имя разрешения.\n" +"2. Цель разрешения.\n" +"3. Права, предоставленные разрешением.\n" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"Права определяют, какие действия разрешены. Варианты прав (права могут " +"сочетать в себе несколько вариантов):\n" +"1. write - записать один или несколько атрибутов.\n" +"2. read - прочитать один или несколько атрибутов.\n" +"3. search - поиск по одному или нескольким атрибутам.\n" +"4. compare - сравнить один или несколько атрибутов.\n" +"5. add - добавить в дерево новую запись.\n" +"6. delete - удалить существующую запись.\n" +"7. all - предоставляются все разрешения.\n" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" +"\n" +"Обратите внимание на разницу между атрибутами и записями. Разрешения " +"являются независимыми, поэтому возможность добавить пользователя не означает " +"возможность изменять запись добавленного пользователя.\n" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" +"\n" +"Существует ряд разрешённых целей:\n" +"1. subtree: DN; разрешение применяется к поддереву под этим DN.\n" +"2. target filter: фильтр LDAP.\n" +"3. target: DN с возможными подстановочными знаками, определяет записи, к " +"которым применяется разрешение.\n" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" +"\n" +"Кроме того, имеются следующие удобные параметры. Установка одного из них " +"установит соответствующий атрибут (атрибуты).\n" +"1. type: тип объекта (пользователь, группа и так далее); устанавливает " +"поддерево и фильтр целей.\n" +"2. memberof: применить к участникам группы; устанавливает фильтр целей.\n" +"3. targetgroup: предоставить доступ для изменения определённой группы " +"(например, предоставить права доступа для управления участием в группе); " +"устанавливает цель.\n" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" +"\n" +"Управляемые разрешения\n" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" +"\n" +"Разрешения, которые по умолчанию поставляются с IPA, можно называть " +"\"управляемыми\". Имеется заданный по умолчанию набор атрибутов, к которым " +"они применяются, но администратор может добавлять в набор или удалять из " +"него отдельные атрибуты.\n" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"Запрещено удалять или переименовывать управляемое разрешение, а также " +"изменять его цель.\n" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" +"\n" +" Добавить разрешение на создание пользователей:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +" Добавить разрешение на управление участием в группе:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" + +msgid "must be enclosed in parentheses" +msgstr "должно быть заключено в скобки" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "\"%s\" не является типом объекта" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\" не является корректным типом разрешения" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Больше не поддерживается; используйте %s" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "Разрешение с неизвестным флагом %s не может быть изменено или удалено" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "Разрешение SYSTEM не может быть изменено или удалено" + +#, python-format +msgid "Entry %s not found" +msgstr "Запись %s не найдена" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "ACI для разрешения %(name)s не найдена в %(dn)s " + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" +"невозможно одновременно указать полный фильтр целей и дополнительный фильтр " +"целей" + +#, python-format +msgid "option was renamed; use %s" +msgstr "параметр переименован; используйте %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "Невозможно использовать %(old_name)s с %(new_name)s" + +#, python-format +msgid "%s: group not found" +msgstr "%s: группа не найдена" + +msgid "target and targetgroup are mutually exclusive" +msgstr "target и targetgroup нельзя использовать вместе" + +msgid "subtree and type are mutually exclusive" +msgstr "subtree и type нельзя использовать вместе" + +msgid "Bad search filter" +msgstr "Неверный фильтр поиска" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Запись %s не существует" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" +"должен быть указан хотя бы один спецификатор записи назначения (например, " +"target, targetfilter, attrs)" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Добавлено разрешение \"%(value)s\"" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "attrs и включённые атрибуты нельзя использовать вместе" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "Не удалось сохранить ACI разрешения в %s" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Удалено разрешение \"%(value)s\"" + +msgid "cannot delete managed permissions" +msgstr "невозможно удалить управляемые разрешения" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI разрешения %s не найдена" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Изменено разрешение \"%(value)s\"" + +msgid "cannot rename managed permissions" +msgstr "невозможно переименовать управляемые разрешения" + +msgid "not modifiable on managed permissions" +msgstr "нельзя изменять в управляемых разрешениях" + +msgid "only available on managed permissions" +msgstr "доступно только в управляемых разрешениях" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "attrs и включённые или исключённые атрибуты нельзя использовать вместе" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" +"невозможно установить тип привязки для разрешения, которое связано с " +"привилегией" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "установлено соответствие %(count)d разрешения" +msgstr[1] "установлено соответствие %(count)d разрешений" +msgstr[2] "установлено соответствие %(count)d разрешений" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Токены OTP\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Управление токенами OTP.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"В IPA реализована поддержка использования токенов OTP для многофакторной " +"аутентификации. Этот код позволяет управлять токенами OTP.\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Добавить новый токен:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Проверить токен:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" +"\n" +" Изменить поставщика:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Удалить токен:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "OTP token" +msgstr "токен OTP" + +msgid "OTP tokens" +msgstr "токены OTP" + +msgid "OTP Tokens" +msgstr "Токены OTP" + +msgid "OTP Token" +msgstr "Токен OTP" + +msgid "URI" +msgstr "Универсальный код ресурса (URI)" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Добавлен токен OTP \"%(value)s\"" + +msgid "cannot be empty" +msgstr "не может быть пустым" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Удалён токен OTP \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Изменён токен OTP \"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "установлено соответствие %(count)d токена OTP" +msgstr[1] "установлено соответствие %(count)d токенов OTP" +msgstr[2] "установлено соответствие %(count)d токенов OTP" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" +"\n" +"Правила Sudo\n" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" +"\n" +"Sudo (su \"do\") позволяет системному администратору делегировать " +"полномочия, чтобы дать определённым пользователям (или группам " +"пользователей) возможность выполнять некоторые (или все) команды от имени " +"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +"журнал аудита команд и их аргументов.\n" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"IPA предоставляет возможности настройки различных аспектов Sudo:\n" +" Users: пользователь (пользователи) или группа (группы), которые могут " +"вызывать Sudo.\n" +" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " +"вызывать Sudo.\n" +" Allow Command: конкретная команда (команды), которые разрешены для " +"выполнения с помощью Sudo. \n" +" Deny Command: конкретная команда (команды), которые запрещены для " +"выполнения с помощью Sudo.\n" +" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " +"от имени которых Sudo будет выполнять команды.\n" +" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +"команды.\n" +" Options: различные параметры sudoers (участники Sudo), которые могут " +"изменить поведение Sudo.\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"Правилу Sudo можно добавить порядок, который будет руководить порядком " +"обработки записей (если такой порядок предусмотрен на клиентской стороне). " +"Порядок определяется числовым индексом (целое число), который не должен " +"повторяться.\n" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" +"\n" +"IPA предусматривает специальную привязку DN (binddn) для использования с " +"Sudo:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" +"\n" +"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" +"\n" +" Создать новое правило:\n" +" ipa sudorule-add readfiles\n" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" +"\n" +" Добавить объект команды Sudo и добавить его в правило в качестве " +"разрешённой команды:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" +"\n" +" Добавить узел в правило:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" +"\n" +" Добавить пользователя в правило:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" +"\n" +" Добавить специальное правило Sudo для конфигурации сервера Sudo по " +"умолчанию:\n" +" ipa sudorule-add defaults\n" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +" Указать параметр Sudo по умолчанию:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" +"\n" +" Указать преобразования типа и роли SELinux в правиле:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" + +msgid "this option has been deprecated." +msgstr "этот параметр больше не поддерживается." + +msgid "sudo rules" +msgstr "правила Sudo" + +msgid "Sudo Rules" +msgstr "Правила Sudo" + +msgid "Sudo Rule" +msgstr "Правило Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"порядковый номер должен иметь уникальное значение (%(order)d уже " +"использовано для %(rule)s)" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Добавлено правило Sudo \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Удалено правило Sudo \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Изменено правило Sudo \"%(value)s\"" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"для категории %(type)s нельзя установить значение \"all\", когда имеются " +"разрешённые %(objects)s" + +msgid "users" +msgstr "пользователи" + +msgid "command" +msgstr "команда" + +msgid "commands" +msgstr "команды" + +msgid "runAs user" +msgstr "пользователь запуска от имени" + +msgid "runAs users" +msgstr "пользователи запуска от имени" + +msgid "group runAs" +msgstr "группа запуска от имени" + +msgid "runAs groups" +msgstr "группы запуска от имени" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "установлено соответствие %(count)d правила Sudo" +msgstr[1] "установлено соответствие %(count)d правил Sudo" +msgstr[2] "установлено соответствие %(count)d правил Sudo" + +msgid "commands cannot be added when command category='all'" +msgstr "невозможно добавить команды, когда категория команд=\"all\"" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" +"невозможно добавить пользователей, когда категория запуска от имени " +"пользователей или запуска от имени групп=\"all\"" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" +"Нельзя указывать \"%(name)s\" в качестве имени пользователя в записи " +"RunAsUser" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "Имя группы \"%(name)s\" не принимается RunAsUser" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "Имя группы \"%(name)s\" не принимается RunAsGroup" + +msgid "commands for controlling sudo configuration" +msgstr "команды управления конфигурацией Sudo" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" +"\n" +"Команды Sudo \n" +"\n" +"Команды, которые используются в качестве строительных блоков для Sudo\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать новую команду\n" +" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" +"\n" +" Удалить команду\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" + +msgid "sudo command" +msgstr "команда Sudo" + +msgid "sudo commands" +msgstr "команды Sudo" + +msgid "Sudo Commands" +msgstr "Команды Sudo" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Добавлена команда Sudo \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Удалена команда Sudo \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Изменена команда Sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "установлено соответствие %(count)d команды Sudo" +msgstr[1] "установлено соответствие %(count)d команд Sudo" +msgstr[2] "установлено соответствие %(count)d команд Sudo" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" +"\n" +"Группы команд Sudo\n" +"\n" +"Управление группами команд Sudo.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу команд Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Удалить группу команд Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показать группу команд Sudo:\n" +" ipa sudocmdgroup-show admincmds\n" + +msgid "sudo command group" +msgstr "группа команд Sudo" + +msgid "sudo command groups" +msgstr "группы команд Sudo" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Добавлена группа команд Sudo \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Удалена группа команд Sudo \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Изменена группа команд Sudo \"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "установлено соответствие %(count)d группы команд Sudo" +msgstr[1] "установлено соответствие %(count)d групп команд Sudo" +msgstr[2] "установлено соответствие %(count)d групп команд Sudo" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Домены области\n" +"\n" +"Управление списком доменов, связанных с областью (realm) IPA.\n" +"\n" +"Этот список используется контроллерами доменов из других областей (realms), " +"у которых установлено отношение доверия с этой областью (realm) IPA. Им " +"необходимы сведения о том, какой запрос следует перенаправить в центр " +"распространения ключей (KDC) этой области (realm) IPA.\n" +"\n" +"При автоматическом управлении: домен автоматически добавляется в список " +"доменов области (realm) при создании новой зоны DNS под управлением IPA. То " +"же самое относится и к удалению.\n" +"\n" +"При внешнем управлении DNS: домены, которые не управляются в DNS IPA-" +"сервера, необходимо вручную добавить в список с помощью команды ipa " +"realmdomains-mod.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Показать текущий список доменов области:\n" +" ipa realmdomains-show\n" +"\n" +" Заменить список доменов области:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Добавить домен в список доменов области:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Удалить домен из списка доменов области:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" + +msgid "Realm domains" +msgstr "Домены области (realm)" + +msgid "Realm Domains" +msgstr "Домены области (realm)" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" +"\n" +" Изменение доменов области (realm).\n" +"\n" +" Проверка DNS: при ручном добавлении домена в список по умолчанию " +"выполняется проверка DNS. Она устанавливает, связан ли домен с областью " +"(realm) IPA, проверяя, есть ли у домена запись TXT _kerberos, которая " +"содержит имя области (realm) IPA. Эту проверку можно пропустить, указав " +"параметр --force.\n" +"\n" +" Удаление: при удалении домена области (realm), у которого имеется " +"соответствующая находящаяся под управлением IPA зона DNS, также " +"автоматически удаляется и соответствующая запись TXT _kerberos в этой зоне. " +"Другие записи в этой зоне и сама зона остаются.\n" +" " + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"Запись зоны DNS для каждого realmdomain должна содержать записи SOA или NS. " +"Для %s такие записи не найдены." + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "Следующие домены не принадлежат к этой области (realm): %(domains)s" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"Не удалось определить область (realm) следующих доменов: %(domains)s. Если " +"эти домены принадлежат к этой области, создайте на каждом из них запись TXT " +"_kerberos, которая содержит \"%(realm)s\"." + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"Параметр --domain невозможно использовать одновременно с параметром --add-" +"domain или --del-domain. Используйте параметр --domain, чтобы явно указать " +"весь список доменов области (realm). Используйте параметр --add-domain/del-" +"domain, чтобы добавить или удалить отдельные домены." + +msgid "IPA server domain cannot be omitted" +msgstr "Домен IPA-сервера не может быть пропущен" + +msgid "IPA server domain cannot be deleted" +msgstr "Домен IPA-сервера не может быть удалён" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" +"\n" +"Возврат сведений о текущем прошедшем аутентификацию профиле \n" +"\n" +"Команда определения профиля возвращает сведения о том, как получить больше " +"данных о профиле, прошедшем аутентификацию для этого запроса. Данные " +"включают:\n" +"\n" +" * тип объекта\n" +" * команду для получения сведений об объекте\n" +" * аргументы и параметры, которые следует передать команде\n" +"\n" +"Сведения возвращаются в виде словаря. Ниже в качестве примера приведён вывод " +"в формате \"ключ: значение\".\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Поиск от имени пользователя IPA:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Поиск от имени пользователя из доверенного домена:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Поиск от имени узла:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Поиск от имени службы Kerberos:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" + +msgid "Describe currently authenticated identity." +msgstr "Показать описание текущего прошедшего аутентификацию профиля." + +msgid "Object class name" +msgstr "Имя класса объектов." + +msgid "Function to get details" +msgstr "Функция для получения сведений" + +msgid "Arguments to details function" +msgstr "Аргументы функции для получения сведений" + +msgid "Cannot query Directory Manager with API" +msgstr "" +"Не удалось отправить запрос средству управления каталогом (Directory " +"Manager) с помощью программного интерфейса" + +msgid "kerberos ticket policy settings" +msgstr "параметры политики билетов Kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Политика билетов Kerberos" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "Максимальный срок жизни" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" + +#, fuzzy +#| msgid "Max renew" +msgid "OTP max renew" +msgstr "Максимальный срок для обновления" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "Максимальный срок жизни" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "Имя прокси-сервера RADIUS" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "Максимальный срок жизни" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" + +#, fuzzy +#| msgid "Max renew" +msgid "PKINIT max renew" +msgstr "Максимальный срок для обновления" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" + +msgid "Hardened max renew" +msgstr "" + +#, fuzzy +#| msgid "Maximum renewable age (seconds)" +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "Не удалось прочитать политику билетов для %s" + +msgid "Default ticket policy could not be read" +msgstr "Не удалось прочитать политику билетов по умолчанию" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" +"Не удалось прочитать фильтр происхождения (originfilter) определения личной " +"группы пользователя (UPG Definition). Проверьте ваши разрешения." + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"расположения IPA\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Управлять расположениями DNS\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Найти все расположения:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Показать определённое расположение:\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Добавить расположение:\n" +" ipa location-add location --description 'My location'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Удалить расположение:\n" +" ipa location-del location\n" + +msgid "location" +msgstr "расположение" + +msgid "locations" +msgstr "расположения" + +msgid "IPA Locations" +msgstr "Расположения IPA" + +msgid "IPA Location" +msgstr "Расположение IPA" + +msgid "Location name" +msgstr "Имя расположения" + +msgid "IPA location name" +msgstr "Имя расположения IPA" + +msgid "IPA Location description" +msgstr "Описание расположения IPA" + +msgid "Servers" +msgstr "Серверы" + +msgid "Servers that belongs to the IPA location" +msgstr "Серверы, которые принадлежат к записи расположения IPA" + +msgid "Advertised by servers" +msgstr "Сообщено серверами" + +msgid "List of servers which advertise the given location" +msgstr "Список серверов, которые сообщают указанное расположение" + +msgid "Add a new IPA location." +msgstr "Добавить новую запись расположения IPA." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Добавлена запись расположения IPA \"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "Удалить запись расположения IPA." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Удалена запись расположения IPA \"%(value)s\"" + +msgid "IPA Server" +msgstr "IPA-сервер" + +msgid "Modify information about an IPA location." +msgstr "Изменить сведения о расположении IPA." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Изменена запись расположения IPA \"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "Поиск расположений IPA." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "установлено соответствие %(count)d расположения IPA" +msgstr[1] "установлено соответствие %(count)d расположений IPA" +msgstr[2] "установлено соответствие %(count)d расположений IPA" + +msgid "Display information about an IPA location." +msgstr "Показать сведения о расположении IPA." + +msgid "Servers in location" +msgstr "Серверы в расположении" + +msgid "" +"\n" +"API Schema\n" +msgstr "" +"\n" +"Схема API\n" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"Предоставляет возможности самоанализа API.\n" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Показать сведения о user-find:\n" +" ipa command-show user-find\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Найти параметры user-find:\n" +" ipa param-find user-find\n" + +msgid "Name" +msgstr "Имя" + +msgid "Documentation" +msgstr "Документация" + +msgid "Exclude from" +msgstr "Исключить из" + +msgid "Include in" +msgstr "Включить в" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"%s\")" + +msgid "Help topic" +msgstr "Раздел справки" + +msgid "Version" +msgstr "Версия" + +msgid "Parameters" +msgstr "Параметры" + +msgid "Method of" +msgstr "Метод" + +msgid "Method name" +msgstr "Имя метода" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s не найден" + +msgid "Display information about a command." +msgstr "Показать сведения о команде." + +msgid "Search for commands." +msgstr "Поиск команд." + +msgid "Return command defaults" +msgstr "Вернуть значения команд по умолчанию" + +msgid "Display information about a class." +msgstr "Показать сведения о классе." + +msgid "Search for classes." +msgstr "Поиск классов." + +msgid "Display information about a help topic." +msgstr "Показать сведения о разделе справки." + +msgid "Search for help topics." +msgstr "Поиск разделов справки." + +msgid "Required" +msgstr "Обязательно" + +msgid "Multi-value" +msgstr "Многозначный" + +msgid "Always ask" +msgstr "Всегда спрашивать" + +msgid "CLI metavar" +msgstr "Метапеременная CLI" + +msgid "CLI name" +msgstr "Имя CLI" + +msgid "Confirm (password)" +msgstr "Подтвердить (пароль)" + +msgid "Default" +msgstr "По умолчанию" + +msgid "Default from" +msgstr "По умолчанию с" + +msgid "Label" +msgstr "Метка" + +msgid "Convert on server" +msgstr "Преобразовывать на сервере" + +msgid "Option group" +msgstr "Группа параметров" + +msgid "Sensitive" +msgstr "Учитывать" + +msgid "Positional argument" +msgstr "Позиционный аргумент" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(metaobject)s: %(oname)s не найден" + +msgid "Display information about a command parameter." +msgstr "Показать сведения о параметре команды." + +msgid "Search command parameters." +msgstr "Поиск параметров команды." + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(command_name)s: %(oname)s не найден" + +msgid "Display information about a command output." +msgstr "Показать сведения о выводе команды." + +msgid "Search for command outputs." +msgstr "Поиск выводов команд." + +msgid "Store and provide schema for commands and topics" +msgstr "Хранить и предоставлять схему для команд и тем" + +msgid "Fingerprint of schema cached by client" +msgstr "Отпечаток схемы, кэшированный клиентом" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"=======\n" +"ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +"=======\n" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "Диапазоны идентификаторов" + +msgid "ID Range" +msgstr "Диапазон идентификаторов" + +msgid "local domain range" +msgstr "диапазон локальных доменов" + +msgid "Active Directory domain range" +msgstr "диапазон доменов Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "Диапазон доверия Active Directory с атрибутами POSIX" + +msgid "ID range type, one of allowed values" +msgstr "Тип диапазона идентификаторов, одно из разрешённых значений" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" +"изменение диапазона, при котором появляются объекты с идентификаторами за " +"пределами указанного диапазона, запрещено " + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Невозможно выполнить проверку SID без установленной поддержки Samba 4. " +"Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Отношения доверия между областями (realm) не настроены. Убедитесь, что на " +"IPA-сервере запущена команда ipa-adtrust-install" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" +"Не удалось распознать SID в качестве допустимого идентификатора безопасности " +"для доверенного домена" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +"Добавление нового диапазона идентификаторов.\n" +"\n" +" Для добавления нового диапазона идентификаторов всегда необходимо " +"указывать\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Кроме того,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" могут указываться для нового диапазона идентификаторов для локального " +"домена, в то время как\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" должны быть указаны для добавления нового диапазона для доверенного " +"домена AD.\n" +"\n" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Добавлен диапазон идентификаторов \"%(value)s\"" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "Невозможно одновременно использовать параметры dom-sid и dom-name" + +msgid "Specified trusted domain name could not be found." +msgstr "Указанное имя доверенного домена не найдено." + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" +"Параметры dom-sid/dom-name и rid-base необходимо использовать одновременно" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"Если типом диапазона IPA является ipa-ad-trust-posix, параметр rid-base " +"использовать нельзя" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"Если указан SID доверенного домена, тип диапазона IPA должен быть ipa-ad-" +"trust или ipa-ad-trust-posix" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Невозможно одновременно использовать параметры dom-sid/dom-name и secondary-" +"rid-base" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"Если не указан SID доверенного домена, тип диапазона IPA не должен быть ipa-" +"ad-trust или ipa-ad-trust-posix" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" +"Параметры secondary-rid-base и rid-base необходимо использовать одновременно" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "Основной диапазон RID и вторичный диапазон RID не могут пересекаться" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Необходимо указать оба параметра, rid-base и secondary-rid-base, так как " +"команда ipa-adtrust-install уже запущена." + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Удалён диапазон идентификаторов \"%(value)s\"" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "установлено соответствие %(count)d диапазона" +msgstr[1] "установлено соответствие %(count)d диапазонов" +msgstr[2] "установлено соответствие %(count)d диапазонов" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" +"Изменить диапазон идентификаторов.\n" +"\n" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Изменён диапазон идентификаторов \"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Эту команду нельзя использовать для изменения выделения идентификаторов для " +"локального домена IPA. Чтобы получить дополнительные сведения, выполните " +"команду `ipa help idrange`" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"Не удалось найти SID указанного доверенного домена. Укажите SID в явном виде " +"с помощью параметра dom-sid." + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" +"Невозможно одновременно использовать параметры dom-sid и secondary-rid-base" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "Параметры dom-sid и rid-base необходимо использовать одновременно" + +msgid "self service permission" +msgstr "разрешение самообслуживания" + +msgid "self service permissions" +msgstr "разрешения самообслуживания" + +msgid "Self Service Permissions" +msgstr "Разрешения самообслуживания" + +msgid "Self Service Permission" +msgstr "Разрешение самообслуживания" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Добавлено самообслуживание \"%(value)s\"" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Удалено самообслуживание \"%(value)s\"" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Изменено самообслуживание \"%(value)s\"" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "установлено соответствие %(count)d самообслуживания" +msgstr[1] "установлено соответствие %(count)d самообслуживаний" +msgstr[2] "установлено соответствие %(count)d самообслуживаний" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Роли IPA-сервера\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"Получить состояние ролей (DNS-сервер, CA и так далее), предоставленное " +"главными IPA-серверами.\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" +"\n" +"Роль может находиться в одном из следующих состояний: включена, настроена " +"или отсутствует.\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Показать состояние роли \"DNS server\" на сервере:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Показать состояние всех ролей, которые содержат \"AD\", на сервере:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Показать состояние всех настроенных ролей на сервере:\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" +"\n" +" Показать неявную роль главного IPA-сервера:\n" +" ipa server-role-find --include-master\n" + +msgid "server role" +msgstr "роль сервера" + +msgid "server roles" +msgstr "роли сервера" + +msgid "IPA Server Roles" +msgstr "Роли IPA-сервера" + +msgid "IPA Server Role" +msgstr "Роль IPA-сервера" + +msgid "IPA server role name" +msgstr "Имя роли IPA-сервера" + +msgid "Role status" +msgstr "Состояние роли" + +msgid "Status of the role" +msgstr "Состояние роли" + +msgid "Show role status on a server" +msgstr "Показать состояние роли на сервере." + +msgid "Find a server role on a server(s)" +msgstr "Поиск роли сервера на сервере (серверах)." + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "установлено соответствие %(count)s роли сервера" +msgstr[1] "установлено соответствие %(count)s ролей сервера" +msgstr[2] "установлено соответствие %(count)s ролей сервера" + +msgid "Include IPA master entries" +msgstr "Включить записи главных IPA-cерверов" + +msgid "roles" +msgstr "роли" + +msgid "IPA role name" +msgstr "Имя роли IPA" + +msgid "HBAC rule and local members cannot both be set" +msgstr "Невозможно одновременно указать правило HBAC и локальных участников" + +msgid "Invalid SELinux user name, must match {}" +msgstr "Некорректное имя пользователя SELinux, должно соответствовать {}" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" +"Некорректное значение MLS, должно соответстовать {mls}, где максимальный " +"уровень {mls_max}" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" +"Некорректное значение MCS, должно соответстовать {mcs}, где максимальная " +"категория {mcs_max}" + +msgid "SELinux user map list not found in configuration" +msgstr "Список пользователей SELinux не найден в конфигурации" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" +"Пользователь SELinux %(user)s не найден в списке порядка применения (в " +"конфигурации)" + +msgid "SELinux User Map rule" +msgstr "Правило списка пользователей SELinux" + +msgid "SELinux User Map rules" +msgstr "Правила списка пользователей SELinux" + +msgid "SELinux User Maps" +msgstr "Списки пользователей SELinux" + +msgid "SELinux User Map" +msgstr "Список пользователей SELinux" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Правило HBAC %(rule)s не найдено" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Добавлен список пользователей SELinux \"%(value)s\"" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Удалён список пользователей SELinux \"%(value)s\"" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Изменён список пользователей SELinux \"%(value)s\"" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "установлено соответствие %(count)d списка пользователей SELinux" +msgstr[1] "установлено соответствие %(count)d списков пользователей SELinux" +msgstr[2] "установлено соответствие %(count)d списков пользователей SELinux" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Включён список пользователей SELinux \"%(value)s\"" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Отключён список пользователей SELinux \"%(value)s\"" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: роль не найдена" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}: атрибут не найден" + +msgid "pyhbac is not installed." +msgstr "Пакет pyhbac не установлен." + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"Операции с сертификатами IPA\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"Применение набора команд для управления сертификатами SSL-серверов.\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"Запросы сертификатов существуют в виде запроса подписи сертификата " +"(Certificate Signing Request, CSR) в формате PEM.\n" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" +"\n" +"Система выдачи сертификатов Dogtag Certificate System использует только " +"значение CN в CSR и принудительно устанавливает остальные параметры субъекта " +"в соответствии со значениями, настроенными на сервере.\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"Сертификат хранится в учётной записи службы, а учётной записи службы " +"требуется узел.\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"Чтобы запросить сертификат:\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* Должен существовать узел\n" +"* Должна существовать служба (либо следует использовать параметр --add для " +"её автоматического добавления)\n" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" +"\n" +"ПОИСК:\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " +"датам действия и дате выдачи.\n" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" +"\n" +"Если поиск выполняется по дате _с, используется сравнение >=, а если " +"выполняется поиск _до — сравнение <=. Сочетание обоих видов поиска приводит " +"к поиску с логической операцией И.\n" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " +"датами, определёнными в в сертификатах.\n" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" +"\n" +"Формат даты: ГГГГ-мм-дд.\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" +"\n" +"Запросить новый сертификат и добавить учётную запись:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" +"\n" +"Получить существующий сертификат:\n" +" ipa cert-show 1032\n" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" +"\n" +"Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" +"\n" +"Удалить сертификат из списка отзыва:\n" +" ipa cert-remove-hold 1032\n" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" +"\n" +"Проверить состояние запроса подписи:\n" +" ipa cert-status 10\n" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" +"\n" +"Поиск сертификатов по имени узла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"\n" +"Поиск отозванных сертификатов по причине отзыва:\n" +" ipa cert-find --revocation-reason=5\n" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" +"\n" +"Поиск сертификатов по дате выдачи:\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" +"\n" +" Поиск сертификатов, владельцем которых является определённый пользователь:\n" +" ipa cert-find --user=user\n" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" +"\n" +" Проверить сертификат:\n" +" ipa cert-find --file=cert.pem --all\n" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" +"\n" +" Проверить, что владельцем сертификата является определённый пользователь:\n" +" ipa cert-find --file=cert.pem --user=user\n" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" +"\n" +"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " +"сертификатов, следовательно, данные о состоянии запроса не являются " +"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " +"если CA не сразу выдаёт сертификат.\n" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" +"\n" +"Поддерживаются следующие причины отзыва:\n" + +msgid " * 0 - unspecified\n" +msgstr " * 0 - не указана\n" + +msgid " * 1 - keyCompromise\n" +msgstr " * 1 - keyCompromise\n" + +msgid " * 2 - cACompromise\n" +msgstr " * 2 - cACompromise\n" + +msgid " * 3 - affiliationChanged\n" +msgstr " * 3 - affiliationChanged\n" + +msgid " * 4 - superseded\n" +msgstr " * 4 - superseded\n" + +msgid " * 5 - cessationOfOperation\n" +msgstr " * 5 - cessationOfOperation\n" + +msgid " * 6 - certificateHold\n" +msgstr " * 6 - certificateHold\n" + +msgid " * 8 - removeFromCRL\n" +msgstr " * 8 - removeFromCRL\n" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr " * 9 - privilegeWithdrawn\n" + +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" +"\n" +"Обратите внимание, что код причины 7 не используется. Подробные сведения в " +"RFC 5280:\n" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"Учётной записи \"%(principal)s\" не разрешено использовать службу " +"сертификации \"%(ca)s\" с профилем \"%(profile_id)s\" для выдачи " +"сертификатов." + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "enabledService/configuredService не в записи kdc ipaConfigString" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" +"Узел \"%(hostname)s\" не является активным центром распространения ключей " +"(KDC)" + +msgid "Issuing CA" +msgstr "Выдающий CA" + +msgid "Name of issuing CA" +msgstr "Имя выдающего CA" + +msgid "Base-64 encoded certificate." +msgstr "Base-64 шифрованный сертификат" + +msgid "Certificate chain" +msgstr "Цепочка сертификатов" + +msgid "X.509 certificate chain" +msgstr "Цепочка сертификатов X.509" + +msgid "Subject" +msgstr "Субъект" + +msgid "Subject email address" +msgstr "Адрес электронной почты субъекта" + +msgid "Subject DNS name" +msgstr "DNS-имя субъекта" + +msgid "Subject X.400 address" +msgstr "Адрес X.400 субъекта" + +msgid "Subject directory name" +msgstr "Имя каталога субъекта" + +msgid "Subject EDI Party name" +msgstr "Имя стороны EDI субъекта" + +msgid "Subject URI" +msgstr "Универсальный код ресурса (URI) субъекта" + +msgid "Subject IP Address" +msgstr "IP-адрес субъекта" + +msgid "Subject OID" +msgstr "Идентификатор объекта (OID) субъекта" + +msgid "Subject UPN" +msgstr "Имя участника-пользователя (UPN) субъекта" + +msgid "Subject Kerberos principal name" +msgstr "Имя учётной записи Kerberos субъекта" + +msgid "Subject Other Name" +msgstr "Другое имя субъекта" + +msgid "Issuer" +msgstr "Издатель" + +msgid "Issuer DN" +msgstr "DN издателя" + +msgid "Not Before" +msgstr "Недействителен до" + +msgid "Not After" +msgstr "Недействителен после" + +msgid "Fingerprint (SHA1)" +msgstr "Отпечаток (SHA1)" + +msgid "Fingerprint (SHA256)" +msgstr "Отпечаток (SHA256)" + +msgid "Serial number (hex)" +msgstr "Серийный номер (hex)" + +msgid "Request status" +msgstr "Состояние запроса" + +msgid "Include certificate chain in output" +msgstr "Включить цепочку сертификатов в вывод" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" +"Автоматически добавить учётную запись, если она не существует (только для " +"учётных записей служб)" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "сертификаты krbtgt могут использовать только профиль %s" + +msgid "No Common Name was found in subject of request." +msgstr "В субъекте запроса не найдено общее имя (CN)." + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" +"имя узла в субъекте запроса \"%(cn)s\" не соответствует имени или " +"псевдонимам учётной записи \"%(principal)s\"" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" +"имя узла в субъекте запроса \"%(cn)s\" не соответствует имени узла учётной " +"записи \"%(hostname)s\"" + +msgid "DN commonName does not match user's login" +msgstr "В commonName DN не соответствует имени пользователя" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" +"В emailAddress DN не соответствует ни одному адресу электронной почты " +"пользователя" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" +"Недостаточно привилегий \"write\" для атрибута \"userCertificate\" записи " +"\"%s\"." + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" +"использование типа альтернативного имени субъекта %s запрещено для учётных " +"записей пользователей" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" +"Учётная запись службы для альтернативного имени субъекта %s в запросе " +"сертификата не существует" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" +"Недостаточно привилегий для создания сертификата с альтернативным именем " +"субъекта \"%s\"." + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" +"Учётная запись \"%s\" в альтернативном имени субъекта не соответствует " +"запрошенной учётной записи" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" +"RFC822Name не соответствует ни одному адресу электронной почты пользователя" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" +"использование типа альтернативного имени субъекта %s запрещено для учётных " +"записей, которые не относятся к пользователям" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "Использование типа альтернативного имени субъекта %s запрещено" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "CA \"%s\" отключён" + +msgid "'add' option" +msgstr "параметр \"add\"" + +msgid "The principal for this request doesn't exist." +msgstr "Учётная запись для этого запроса не существует." + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "IP-адрес в subjectAltName (%s) недоступен из DNS-имён" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "IP-адрес в subjectAltName (%s) не имеет записи PTR" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "Запись PTR для SAN IP (%s) не соответствует записям A/AAAA" + +msgid "Status" +msgstr "Состояние" + +msgid "Revoked" +msgstr "Отозван" + +msgid "Revocation reason" +msgstr "Причина отзыва" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" +"Причина отзыва сертификата (0-10). Введите \"ipa help cert\", чтобы получить " +"сведения о причине отзыва. " + +#, python-format +msgid "Owner %s" +msgstr "Владелец %s" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Сертификат с серийным номером %(serial)s, выданный CA \"%(ca)s\", не найден" + +msgid "7 is not a valid revocation reason" +msgstr "7 — неверная причина отзыва сертификата" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"certificate\")" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "установлено соответствие %(count)d сертификата" +msgstr[1] "установлено соответствие %(count)d сертификатов" +msgstr[2] "установлено соответствие %(count)d сертификатов" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "Поиск сертификатов, включая те, владельцами которых являются %s" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "Поиск сертификатов, не включая те, владельцами которых являются %s" + +msgid "ID View" +msgstr "Представление ID" + +msgid "system ID View" +msgstr "системное представление ID" + +msgid "ID Views" +msgstr "Представления ID" + +msgid "User object overrides" +msgstr "Приоритет объекта пользователя" + +msgid "Group object overrides" +msgstr "Приоритет объекта группы" + +msgid "Hosts the view applies to" +msgstr "Узлы, к которым применяется представление" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Добавлено представление ID \"%(value)s\"" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Удалено представление ID \"%(value)s\"" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "Изменено представление ID \"%(value)s\"" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "установлено соответствие %(count)d представления ID" +msgstr[1] "установлено соответствие %(count)d представлений ID" +msgstr[2] "установлено соответствие %(count)d представлений ID" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" +"Представление отношений доверия по умолчанию невозможно применить к узлам" + +msgid "not found" +msgstr "не найдено" + +#, fuzzy +#| msgid "Default Trust View cannot be applied on hosts" +msgid "ID View cannot be applied to IPA master" +msgstr "" +"Представление отношений доверия по умолчанию невозможно применить к узлам" + +msgid "ID View already applied" +msgstr "Представление ID уже применено" + +msgid "value" +msgstr "значение" + +#, python-format +msgid "ID View applied to %i host." +msgstr "Представление ID применено к узлу: %i." + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "Представление ID применено к узлам: %i." + +#, python-format +msgid "ID View cleared from %i host." +msgstr "Представление ID очищено из %i узла." + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "Представление ID очищено из %i узлов." + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" +"Вы пытаетесь сослаться на личную группу, которую запрещено переопределять. " +"Попробуйте переопределить атрибут GID соответствующего пользователя." + +msgid "IPA object" +msgstr "Объект IPA" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" +"невозможно переопределить системные объекты IPA (например, системные группы, " +"личные группы пользователей)" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Не удалось определить привязку \"%(anchor)s\"." + +msgid "Default Trust View cannot contain IPA users" +msgstr "" +"Представление отношений доверия по умолчанию не может содержать " +"пользователей IPA" + +msgid "Add a new ID override." +msgstr "Добавить новое переопределение ID." + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Добавлено переопределение ID \"%(value)s\"" + +msgid "Delete an ID override." +msgstr "Удалить переопределение ID." + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Удалено переопределение ID \"%(value)s\"" + +msgid "Modify an ID override." +msgstr "Изменить переопределение ID." + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Изменено переопределение ID \"%(value)s\"" + +msgid "ID override" +msgstr "Переопределение ID" + +msgid "ID overrides cannot be renamed" +msgstr "Невозможно переименовать переопределения ID" + +msgid "Search for an ID override." +msgstr "Поиск переопределения ID." + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "установлено соответствие %(count)d переопределения ID" +msgstr[1] "установлено соответствие %(count)d переопределений ID" +msgstr[2] "установлено соответствие %(count)d переопределений ID" + +msgid "Display information about an ID override." +msgstr "Показать сведения о переопределении ID." + +msgid "User ID override" +msgstr "Переопределение ID пользователя" + +msgid "User ID overrides" +msgstr "Переопределения ID пользователя" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64 шифрованный сертификат пользователя" + +msgid "Group ID override" +msgstr "Переопределение ID группы" + +msgid "Group ID overrides" +msgstr "Переопределения ID группы" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Добавить один или несколько сертификатов в запись idoverrideuser." + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Добавлены сертификаты в запись idoverrideuser \"%(value)s\"" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Удалить один или несколько сертификатов из записи idoverrideuser." + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Удалены сертификаты из записи idoverrideuser \"%(value)s\"" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Добавлено переопределение ID пользователя \"%(value)s\"" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Удалено переопределение ID пользователя \"%(value)s\"" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Изменено переопределение ID пользователя \"%(value)s\"" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "установлено соответствие %(count)d переопределения ID пользователя" +msgstr[1] "установлено соответствие %(count)d переопределений ID пользователя" +msgstr[2] "установлено соответствие %(count)d переопределений ID пользователя" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Добавлено переопределение ID группы \"%(value)s\"" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Удалено переопределение ID группы \"%(value)s\"" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Изменено переопределение ID группы \"%(value)s\"" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "установлено соответствие %(count)d переопределения ID группы" +msgstr[1] "установлено соответствие %(count)d переопределений ID группы" +msgstr[2] "установлено соответствие %(count)d переопределений ID группы" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Правило автоучастия.\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Внося ясные правила о принадлежности узлов и пользователей к группам " +"посредством настройки включающих и исключающих шаблонов регулярных " +"выражений, вы можете автоматически связывать новые записи с группой или " +"группой узлов на основе данных атрибутов.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Правило непосредственно связывается с группой по имени, следовательно, вы не " +"можете создать правило без определения группы или группы узлов.\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Условие является регулярным выражением, используется 389-ds для установления " +"соответствия новой входящей записи правилу автоучастия. Если имеется " +"соответствие правилу включения, запись добавляется в соответствующую группу " +"или группу узлов.\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"Можно указать группу или группу узлов по умолчанию, которая будет " +"использоваться для записей, не соответствующих ни одному правилу. В случае " +"записей пользователей эта группа будет резервной группой, поскольку все " +"пользователи по умолчанию являются участниками группы, указанной в " +"настройках IPA.\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"Команду automember-rebuild можно использовать, чтобы задним числом применить " +"правила автоучастия в отношении уже существующих записей; это перестроит их " +"участие.\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" +"\n" +" Добавить начальную группу или группу узлов:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" +"\n" +" Добавить начальное правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" +"\n" +" Добавить в правило условие:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" +"\n" +" Добавить в правило исключительное условие, чтобы предотвратить " +"автоназначение:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +"Добавить узел:\n" +" ipa host-add web1.example.com\n" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" +"\n" +" Добавить пользователя:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" +"\n" +"Проверить автоучастие:\n" +" ipa hostgroup-show webservers\n" +" Группа узлов: webservers\n" +" Описание: Web Servers\n" +" Узлы-участники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Имя группы: devel\n" +" Описание: Developers\n" +" GID: 1004200000\n" +" Пользователи-участники: tuser\n" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" +"\n" +" Удалить условие из правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Изменить правило автоучастия:\n" +" ipa automember-mod\n" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" +"\n" +"Установить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" +"\n" +" Удалить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" +"\n" +" Показать целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Найти все правила автоучастия:\n" +" ipa automember-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" +"\n" +" Найти все неиспользуемые правила автоучастия:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Найти все неиспользуемые правила автоучастия и удалить их:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" +"\n" +" Показать правило автоучастия:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +" Удалить правило автоучастия:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"\n" +" Перестроить участие для всех пользователей:\n" +" ipa automember-rebuild --type=group\n" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"\n" +" Перестроить участие для всех узлов:\n" +" ipa automember-rebuild --type=hostgroup\n" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" +"\n" +" Перестроить участие для указанных пользователей:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +" Перестроить участие для указанных узлов:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "Auto Membership Rule" +msgstr "Правило автоучастия" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" не найден(а)" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s неправильный атрибут" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Добавить правило автоучастия.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Добавлено правило автоучастия \"%(value)s\"" + +msgid "Auto Membership is not configured" +msgstr "Автоучастие не настроено" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Добавить условия в правило автоучастия.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Добавлено условие (условия) в \"%(value)s\"" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Правило автоучастия: %s не найдено!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Переопределить это, чтобы получить возможность добавить данные об " +"успехе или неудаче в возвращаемое сообщение.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Удалить условия из правила автоучастия.\n" +" " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Удалено условие (условия) из \"%(value)s\"" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Переопределить это, чтобы получить возможность указать состояния " +"успеха или неудачи.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Изменить правило автоучастия.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Изменено правило автоучастия \"%(value)s\"" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Удалить правило автоучастия.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Удалено правило автоучастия \"%(value)s\"" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +"Поиск правил автоучастия." + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "установлено соответствие %(count)d правила" +msgstr[1] "установлено соответствие %(count)d правил" +msgstr[2] "установлено соответствие %(count)d правил" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +"Показать сведения о правиле автоучастия." + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Установить группу по умолчанию (резервную) для всех несоответствующих " +"записей.\n" +" " + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" +"Установить группу по умолчанию (резервную) для автоучастия \"%(value)s\"" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Удалить группу по умолчанию (резервную) для всех несоответствующих " +"записей.\n" +" " + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Удалена группа по умолчанию (резервная) для автоучастия \"%(value)s\"" + +msgid "No default (fallback) group set" +msgstr "Группа по умолчанию (резервная) не установлена" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Показать сведения о группах автоучастия по умолчанию (резервных).\n" +" " + +msgid "Task DN" +msgstr "DN задачи" + +msgid "DN of the started task" +msgstr "DN запущенной задачи" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "следует указать хотя бы один из параметров: тип, пользователи, узлы" + +msgid "users and hosts cannot both be set" +msgstr "невозможно одновременно указать пользователей и узлы" + +msgid "hosts cannot be set when type is 'group'" +msgstr "невозможно указать узлы, когда тип \"group\"" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "невозможно указать пользователей, когда тип \"hostgroup\"" + +msgid "Automember rebuild membership task started" +msgstr "Выполняется задача по перестройке записей автоучастия" + +msgid "Automember rebuild membership task completed" +msgstr "Завершена задача по перестройке записей автоучастия" + +#, python-format +msgid "Task DN = '%s'" +msgstr "DN задачи = \"%s\"" + +msgid "Automember" +msgstr "Автоучастник" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" +"\n" +" Поиск неиспользуемых правил автоучастия. Чтобы найти все неиспользуемые " +"правила, может потребоваться выполнить команду с правами привилегированного " +"пользователя.\n" +" " + +msgid "Remove orphan automember rules" +msgstr "Удалить неиспользуемые правила автоучастия" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" +"\n" +"Управление службами сертификации\n" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" +"\n" +"Подчинённые службы сертификации (Sub-CA) можно добавлять для выпуска с " +"заданной областью сертификатов X.509.\n" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" +"\n" +"Службы сертификации включаются при создании, но их использование " +"регулируется ACL служб сертификации, если у оператора нет разрешения " +"обходить ACL служб сертификации (CA).\n" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" +"\n" +"Все службы сертификации, кроме службы сертификации \"IPA\", можно отключать " +"и включать повторно. Отключение службы сертификации приводит к тому, что ей " +"запрещается выдавать сертификаты, но не влияет на действительность её " +"сертификата.\n" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" +"\n" +"Службы сертификации (все, кроме службы сертификации \"IPA\") можно удалять. " +"Удаление службы сертификации приводит к отзыву её сертификата для подписи и " +"удалению её закрытого ключа.\n" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "Центр сертификации" + +msgid "Certificate Authorities" +msgstr "Центры сертификации" + +msgid "Name for referencing the CA" +msgstr "Имя для ссылки на CA" + +msgid "Description of the purpose of the CA" +msgstr "Описание предназначения CA" + +msgid "Authority ID" +msgstr "ID центра" + +msgid "Dogtag Authority ID" +msgstr "ID Dogtag центра " + +msgid "Subject DN" +msgstr "DN субъекта" + +msgid "Subject Distinguished Name" +msgstr "Различающееся имя субъекта" + +msgid "Issuer Distinguished Name" +msgstr "Различающееся имя издателя" + +msgid "Search for CAs." +msgstr "Поиск CA." + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "установлено соответствие %(count)d CA" +msgstr[1] "установлено соответствие %(count)d CA" +msgstr[2] "установлено соответствие %(count)d CA" + +msgid "Display the properties of a CA." +msgstr "Показать свойства CA." + +msgid "Create a CA." +msgstr "Создать запись CA." + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "Создана запись CA \"%(value)s\"" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Недостаточно привилегий \"add\" для записи \"%s\"." + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "Нераспознанные атрибуты: %(attrs)s" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "DN субъекта уже используется CA \"%s\"" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "Удалена запись CA \"%(value)s\"" + +msgid "Insufficient privilege to delete a CA." +msgstr "Недостаточно привилегий для удаления записи CA." + +msgid "CA" +msgstr "Центр сертификации (CA)" + +msgid "IPA CA cannot be deleted" +msgstr "Невозможно удалить CA IPA" + +#, fuzzy +#| msgid "Must be a decimal number" +msgid "Must be disabled first" +msgstr "Должно быть десятичным числом" + +msgid "Modify CA configuration." +msgstr "Изменить конфигурацию CA." + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "Изменена запись CA \"%(value)s\"" + +msgid "Insufficient privilege to modify a CA." +msgstr "Недостаточно привилегий для внесения изменений в запись CA." + +msgid "Disable a CA." +msgstr "Отключить службу сертификации." + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "Отключена служба сертификации \"%(value)s\"" + +msgid "IPA CA cannot be disabled" +msgstr "Службу сертификации IPA нельзя отключить" + +msgid "Enable a CA." +msgstr "Включить службу сертификации." + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "Включена служба сертификации \"%(value)s\"" + +msgid "Internationalization messages" +msgstr "Сообщения интернационализации" + +msgid "Your session has expired. Please log in again." +msgstr "Время вашего сеанса истекло. Пожалуйста, войдите в систему ещё раз." + +msgid "Apply" +msgstr "Применить" + +msgid "Rebuild auto membership" +msgstr "Перестроить автоучастие" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Вы действительно хотите перестроить автоучастие?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "Вы действительно хотите выполнить это действие?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "Вы действительно хотите удалить ${object}?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "Вы действительно хотите отключить ${object}?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Вы действительно хотите включить ${object}?" + +msgid "Actions" +msgstr "Действия" + +msgid "Add" +msgstr "Добавить" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "Добавлено записей: ${count}" + +msgid "Direct Membership" +msgstr "Прямое участие" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "Доступный фильтр ${other_entity}" + +msgid "Indirect Membership" +msgstr "Непрямое участие" + +msgid "No entries." +msgstr "Отсутствуют записи." + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Показано записей: с ${start} по ${end} из ${total}." + +msgid "Remove" +msgstr "Удалить" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "Удалено записей: ${count}" + +msgid "Show Results" +msgstr "Показать результаты" + +msgid "Authentication indicators" +msgstr "Индикаторы аутентификации" + +msgid "Authentication indicator" +msgstr "Индикатор аутентификации" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Если метод не выбран, будет использован неявный метод (пароль).

Пароль + двухфакторная аутентификация: в LDAP и " +"Kerberos предусмотрена аутентификация по одному из этих типов " +"аутентификации, но Kerberos использует метод предварительной " +"аутентификации, который требует использования armor ccache.

RADIUS с другим типом: в Kerberos всегда используется " +"RADIUS, а в LDAP он не используется никогда. LDAP распознаёт только варианты " +"аутентификации по паролю и двухфакторной аутентификации.

" + +msgid "Add Custom Authentication Indicator" +msgstr "Добавить пользовательский идентификатор аутентификации" + +msgid "Two factor authentication (password + OTP)" +msgstr "Двухфакторная аутентификация (пароль + OTP)" + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "Пароль с усиленной защитой (SPAKE или FAST)" + +msgid "Disable per-user override" +msgstr "Отключить переопределение на уровне пользователя" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Параметр для отдельных пользователей переопределяет общее значение, если " +"будет выбран один из вариантов.

Пароль + двухфакторная " +"аутентификация: в LDAP и Kerberos предусмотрена аутентификация по " +"одному из этих типов аутентификации, но Kerberos использует метод " +"предварительной аутентификации, который требует использования armor ccache." +"

RADIUS с другим типом: в Kerberos всегда " +"используется RADIUS, а в LDAP он не используется никогда. LDAP распознаёт " +"только варианты аутентификации по паролю и двухфакторной аутентификации.

" + +msgid "About" +msgstr "О программе" + +msgid "Activate" +msgstr "Активировать" + +msgid "Add and Add Another" +msgstr "Добавить и добавить ещё" + +msgid "Add and Close" +msgstr "Добавить и закрыть" + +msgid "Add and Edit" +msgstr "Добавить и изменить" + +msgid "Add Many" +msgstr "Добавить много" + +msgid "Back" +msgstr "Назад" + +msgid "Cancel" +msgstr "Отменить" + +msgid "Clear" +msgstr "Очистить" + +msgid "Clear all fields on the page." +msgstr "Очистить все поля на странице." + +msgid "Close" +msgstr "Закрыть" + +msgid "Disable" +msgstr "Отключить" + +msgid "Download" +msgstr "Загрузить" + +msgid "Download certificate as PEM formatted file." +msgstr "Загрузить сертификат в виде файла в формате PEM." + +msgid "Edit" +msgstr "Изменить" + +msgid "Enable" +msgstr "Включить" + +msgid "Find" +msgstr "Найти" + +msgid "Get" +msgstr "Получить" + +msgid "Hide" +msgstr "Скрыть" + +msgid "Issue" +msgstr "Выдать" + +msgid "Match" +msgstr "Сопоставить" + +msgid "Match users according to certificate." +msgstr "Установить соответствие пользователей по сертификату." + +msgid "Migrate" +msgstr "Перенести" + +msgid "OK" +msgstr "OK" + +msgid "Refresh" +msgstr "Обновить" + +msgid "Reload current settings from the server." +msgstr "Перезагрузить текущие параметры с сервера" + +msgid "Delete" +msgstr "Удалить" + +msgid "Remove hold" +msgstr "Отменить приостановку действия" + +msgid "Reset" +msgstr "Сбросить" + +msgid "Reset Password" +msgstr "Сбросить пароль" + +msgid "Reset Password and Log in" +msgstr "Сбросить пароль и войти" + +msgid "Restore" +msgstr "Восстановить" + +msgid "Retry" +msgstr "Повторить попытку" + +msgid "Revert" +msgstr "Вернуть" + +msgid "Revoke" +msgstr "Отозвать" + +msgid "Save" +msgstr "Сохранить" + +msgid "Set" +msgstr "Установить" + +msgid "Show" +msgstr "Показать" + +msgid "Stage" +msgstr "Сделать неподтверждённым" + +msgid "Update" +msgstr "Обновить" + +msgid "View" +msgstr "Показать" + +msgid "Customization" +msgstr "Настройка" + +msgid "Pagination Size" +msgstr "Размер для разбивки на страницы" + +msgid "Collapse All" +msgstr "Свернуть все" + +msgid "Expand All" +msgstr "Развернуть все" + +msgid "General" +msgstr "Основные" + +msgid "Identity Settings" +msgstr "Параметры идентификации" + +#, fuzzy +#| msgid "Role Settings" +msgid "Record Settings" +msgstr "Параметры роли" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Параметры ${primary_key} ${entity}" + +msgid "Back to Top" +msgstr "К началу" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "Обновлено ${primary_key} ${entity}" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "Успешно добавлено ${entity}" + +msgid "Add custom value" +msgstr "Добавить пользовательское значение" + +msgid "Available" +msgstr "Доступно" + +msgid "Some operations failed." +msgstr "Не удалось выполнить некоторые операции." + +msgid "Operations Error" +msgstr "Ошибка операций" + +msgid "Confirmation" +msgstr "Подтверждение" + +msgid "Custom value" +msgstr "Пользовательское значение" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"На этой странице имеются несохранённые изменения. Пожалуйста, сохраните или " +"отмените их. " + +msgid "Unsaved Changes" +msgstr "Несохранённые изменения" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Изменить ${entity}" + +msgid "Hide details" +msgstr "Скрыть подробности" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, версия: ${version}" + +msgid "Prospective" +msgstr "Ожидается" + +msgid "Redirection" +msgstr "Перенаправление" + +msgid "Select entries to be removed." +msgstr "Выбранные записи, которые следует удалить." + +msgid "Result" +msgstr "Результат" + +msgid "Show details" +msgstr "Показать подробные сведения" + +msgid "Success" +msgstr "Успех" + +msgid "Validation error" +msgstr "Ошибка подтверждения" + +msgid "Input form contains invalid or missing values." +msgstr "Форма ввода данных содержит недопустимые или отсутствующие значения." + +msgid "Please try the following options:" +msgstr "Попробуйте использовать следующие параметры:" + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"При повторном возникновении проблемы обратитесь к системному администратору." + +msgid "Refresh the page." +msgstr "Обновить страницу." + +msgid "Reload the browser." +msgstr "Перезапустить браузер." + +msgid "Return to the main page and retry the operation" +msgstr "Вернуться на главную страницу и снова попытаться выполнить операцию" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Произошла ошибка (${error})" + +msgid "HTTP Error" +msgstr "Ошибка HTTP" + +msgid "Internal Error" +msgstr "Внутренняя ошибка" + +msgid "IPA Error" +msgstr "Ошибка IPA" + +msgid "No response" +msgstr "Нет ответа" + +msgid "Unknown Error" +msgstr "Неизвестная ошибка" + +msgid "URL" +msgstr "URL-адрес" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} управляется:" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "Участники ${primary_key}:" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} является участником:" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} members:" +msgid "${primary_key} member managers:" +msgstr "Участники ${primary_key}:" + +msgid "Settings" +msgstr "Параметры" + +msgid "Search" +msgstr "Поиск" + +msgid "False" +msgstr "Нет (False)" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" +"Разрешить группам пользователей создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Разрешить группам пользователей получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "Разрешить группам узлов создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "Разрешить группам узлов получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "Разрешить узлам создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "Разрешить узлам получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "Разрешить пользователям создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "Разрешить пользователям получать таблицу ключей '${primary_key}'" + +msgid "Allowed to create keytab" +msgstr "Разрешено создавать таблицу ключей" + +msgid "Allowed to retrieve keytab" +msgstr "Разрешено получать таблицу ключей" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" +"Запретить группам пользователей создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Запретить группам пользователей получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "Запретить группам узлов создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "Запретить группам узлов получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "Запретить узлам создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "Запретить узлам получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "Запретить пользователям создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "Запретить пользователям получать таблицу ключей '${primary_key}'" + +msgid "Add Kerberos Principal Alias" +msgstr "Добавить псевдоним учётной записи Kerberos" + +msgid "New kerberos principal alias" +msgstr "Новый псевдоним учётной записи Kerberos" + +msgid "Remove Kerberos Alias" +msgstr "Удалить псевдоним Kerberos" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "Вы хотите удалить псевдоним Kerberos ${alias}?" + +msgid "Inherited from server configuration" +msgstr "Унаследовано из конфигурации сервера" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Override inherited settings" +msgstr "Переопределить унаследованные параметры" + +msgid "PAD" +msgstr "PAD" + +msgid "Authenticating" +msgstr "Аутентификация" + +msgid "Authentication with personal certificate failed" +msgstr "Не удалось выполнить аутентификацию с личным сертификатом" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" +" Чтобы войти с помощью " +"сертификата, убедитесь, что у вас имеется действительный " +"личный сертификат. " + +msgid "Continue to next page" +msgstr "Перейти на следующую страницу" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" +" Чтобы войти с помощью имени " +"пользователя и пароля, введите их в соответствующие поля, затем " +"нажмите кнопку \"Войти\"." + +msgid "Login failed due to an unknown reason" +msgstr "Не удалось войти по неизвестной причине" + +msgid "Logged In As" +msgstr "Выполнен вход под именем" + +msgid "Authentication with Kerberos failed" +msgstr "Не удалось выполнить аутентификацию с Kerberos" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" +" Чтобы войти с помощью Kerberos, убедитесь, что у вас имеются действительные билеты (получить их " +"можно через kinit) и правильно настроен браузер, затем нажмите кнопку \"Войти\"." + +msgid "Loading" +msgstr "Загрузка" + +msgid "Kerberos Principal you entered is expired" +msgstr "Срок действия введённой учётной записи Kerberos истёк" + +msgid "Loading data" +msgstr "Загрузка данных" + +msgid "Log in" +msgstr "Войти" + +msgid "Log In Using Certificate" +msgstr "Войти с помощью сертификата" + +msgid "Log in using personal certificate" +msgstr "Войти с помощью личного сертификата" + +msgid "Log out" +msgstr "Выйти" + +msgid "Log out error" +msgstr "Ошибка при выходе" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "Вы будете перенаправлены через ${count}s" + +msgid "Sync OTP Token" +msgstr "Синхронизировать токен OTP" + +msgid "Synchronizing" +msgstr "Выполняется синхронизация" + +msgid "The user account you entered is locked" +msgstr "Введённая учётная запись пользователя заблокирована" + +msgid "number of passwords" +msgstr "количество паролей" + +msgid "seconds" +msgstr "в секундах" + +msgid "Migrating" +msgstr "Выполняется перенос" + +msgid "There was a problem with your request. Please, try again later." +msgstr "Ошибка при обработке запроса. Пожалуйста, повторите попытку позже." + +msgid "Password migration was not successful" +msgstr "Не удалось выполнить перенос пароля" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" +"

Перенос пароля

Если вас направил на эту страницу ваш системный " +"администратор, это означает, что ваши личные данные переносятся в новую " +"систему управления идентификацией и учётными записями пользователей (IPA).

Пожалуйста, введите ваши учётные данные в форму, чтобы завершить этот " +"процесс. После успешного выполнения входа ваша учётная запись Kerberos будет " +"активирована.

" + +msgid "The password or username you entered is incorrect" +msgstr "Введён неверный пароль или имя пользователя" + +msgid "Password migration was successful" +msgstr "Перенос пароля успешно завершён" + +msgid "Attribute" +msgstr "Атрибут" + +msgid "Add delegation" +msgstr "Добавить делегирование" + +msgid "Remove delegations" +msgstr "Удалить делегирования" + +msgid "Add permission" +msgstr "Добавить разрешение" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "Добавить привилегии в разрешение '${primary_key}'" + +msgid "Remove permissions" +msgstr "Удалить разрешения" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "Удалить привилегии из разрешения '${primary_key}'" + +msgid "Add privilege" +msgstr "Добавить привилегию" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "Добавить привилегию '${primary_key}' в разрешения" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "Добавить роли в привилегию '${primary_key}'" + +msgid "Remove privileges" +msgstr "Удалить привилегии" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "Удалить привилегию '${primary_key}' из разрешений" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "Удалить роли из привилегии '${primary_key}'" + +msgid "Role Settings" +msgstr "Параметры роли" + +msgid "Add role" +msgstr "Добавить роль" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "Добавить группы пользователей в роль '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "Добавить узлы в роль '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "Добавить группы узлов в роль '${primary_key}'" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "Добавить роль '${primary_key}' в привилегии" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "Добавить службы в роль '${primary_key}'" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "Добавить пользователей в роль '${primary_key}'" + +msgid "Remove roles" +msgstr "Удалить роли" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "Удалить роль '${primary_key}' из привилегий" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "Удалить группы пользователей из роли '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "Удалить узлы из роли '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "Удалить группы узлов из роли '${primary_key}'" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "Удалить службы из роли '${primary_key}'" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "Удалить пользователей из роли '${primary_key}'" + +msgid "Add self service permission" +msgstr "Добавить разрешение самообслуживания" + +msgid "Remove self service permissions" +msgstr "Удалить разрешения самообслуживания" + +msgid "Add rule" +msgstr "Добавить правило" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "Добавить включающее условие в '${primary_key}'" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "Добавить исключающее условие в '${primary_key}'" + +#, fuzzy +#| msgid "Are you sure you want to stage selected users?" +msgid "Are you sure you want to change default group?" +msgstr "" +"Вы действительно хотите сделать выбранных пользователей неподтверждёнными?" + +msgid "Default host group" +msgstr "Группа узлов по умолчанию" + +msgid "Default user group" +msgstr "Группа пользователей по умолчанию" + +msgid "Exclusive" +msgstr "Исключающий" + +msgid "Expression" +msgstr "Выражение" + +msgid "Host group rule" +msgstr "Правило группы узлов" + +msgid "Host group rules" +msgstr "Правила группы узлов" + +msgid "Inclusive" +msgstr "Включающий" + +msgid "Remove auto membership rules" +msgstr "Удалить правила автоучастия" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "Удалить исключающие условия из правила '${primary_key}'" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "Удалить включающие условия из правила '${primary_key}'" + +msgid "User group rule" +msgstr "Правило группы пользователей" + +msgid "User group rules" +msgstr "Правила группы пользователей" + +msgid "Add automount key" +msgstr "Добавить ключ автомонтирования" + +msgid "Remove automount keys" +msgstr "Удалить ключи автомонтирования" + +msgid "Add automount location" +msgstr "Добавить расположение автомонтирования" + +msgid "Automount Location Settings" +msgstr "Параметры расположения автомонтирования" + +msgid "Remove automount locations" +msgstr "Удалить расположения автомонтирования" + +msgid "Add automount map" +msgstr "Добавить список соответствия автомонтирования" + +msgid "Map Type" +msgstr "Тип списка соответствия" + +msgid "Direct" +msgstr "Прямой" + +msgid "Indirect" +msgstr "Непрямой" + +msgid "Remove automount maps" +msgstr "Удалить списки соответствия автомонтирования" + +msgid "Add certificate authority" +msgstr "Добавить центр сертификации" + +msgid "Remove certificate authorities" +msgstr "Удалить центры сертификации" + +msgid "Add CA ACL" +msgstr "Добавить CA ACL" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "Добавить центры сертификации в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Добавить группы пользователей в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "Добавить группы узлов в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "Добавить узлы в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "Добавить профили сертификатов в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Добавить службы в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "Добавить пользователей в CA ACL '${primary_key}'" + +msgid "All" +msgstr "Все" + +msgid "Any CA" +msgstr "Любой CA" + +msgid "Any Host" +msgstr "Любой узел" + +msgid "Any Service" +msgstr "Любая служба" + +msgid "Any Profile" +msgstr "Любой профиль" + +msgid "Anyone" +msgstr "Любой" + +msgid "Rule status" +msgstr "Состояние правила" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "Если CA не указаны, будут разрешены запросы к CA по умолчанию." + +msgid "Remove CA ACLs" +msgstr "Удалить CA ACL" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "Удалить центры сертификации из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Удалить группы пользователей из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Удалить группы узлов из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "Удалить узлы из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "Удалить профили сертификатов из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "Удалить службы из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "Удалить пользователей из CA ACL '${primary_key}'" + +msgid "Specified CAs" +msgstr "Указанные CA" + +msgid "Specified Hosts and Groups" +msgstr "Указанные узлы и группы" + +msgid "Specified Profiles" +msgstr "Указанные профили" + +msgid "Specified Services and Groups" +msgstr "Указанные службы и группы" + +msgid "Specified Users and Groups" +msgstr "Указанные пользователи и группы" + +msgid "Permitted to have certificates issued" +msgstr "Разрешено иметь выданные сертификаты" + +msgid "Remove certificate profiles" +msgstr "Удалить профили сертификатов" + +msgid "AA Compromise" +msgstr "Компрометация AA" + +msgid "Add principal" +msgstr "Добавить учётную запись" + +msgid "Affiliation Changed" +msgstr "Изменение принадлежности" + +msgid "CA Compromise" +msgstr "Компрометация центра сертификации (CA)" + +msgid "Certificates" +msgstr "Сертификаты" + +msgid "Certificate Hold" +msgstr "Приостановка действия сертификата" + +msgid "Cessation of Operation" +msgstr "Прекращение действия" + +msgid "Common Name" +msgstr "Общее имя" + +msgid "the certificate with serial number " +msgstr "сертификат с серийным номером" + +msgid "Expires On" +msgstr "Истекает" + +msgid "Issued on from" +msgstr "Выдан с" + +msgid "Issued on to" +msgstr "Выдан до" + +msgid "Maximum serial number" +msgstr "Максимальный серийный номер" + +msgid "Minimum serial number" +msgstr "Минимальный серийный номер" + +msgid "Revoked on from" +msgstr "Отозван с" + +msgid "Revoked on to" +msgstr "Отозван до" + +msgid "Valid not after from" +msgstr "Действующий не позднее, чем с" + +msgid "Valid not after to" +msgstr "Действующий не позднее, чем до" + +msgid "Valid not before from" +msgstr "Действующий не ранее, чем с" + +msgid "Valid not before to" +msgstr "Действующий не ранее, чем до" + +msgid "Fingerprints" +msgstr "Отпечатки" + +msgid "Get Certificate" +msgstr "Получить сертификат" + +msgid "Certificate Hold Removed" +msgstr "Приостановка действия сертификата отменена" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "Выдать новый сертификат для узла '${primary_key}'" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "Выдать новый сертификат для службы '${primary_key}'" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "Выдать новый сертификат для пользователя '${primary_key}'" + +msgid "Issue new certificate" +msgstr "Выдать новый сертификат" + +msgid "Issued By" +msgstr "Выдан (издатель)" + +msgid "Issued On" +msgstr "Выдан (дата)" + +msgid "Issued To" +msgstr "Выдан для" + +msgid "Key Compromise" +msgstr "Компрометация ключа" + +msgid "No Valid Certificate" +msgstr "Отсутствуют действительные сертификаты" + +msgid "New Certificate" +msgstr "Новый сертификат" + +msgid "Certificate in base64 or PEM format" +msgstr "Сертификат в формате base64 или PEM" + +msgid "Note" +msgstr "Примечание" + +msgid "Organization" +msgstr "Организация" + +msgid "Organizational Unit" +msgstr "Организационное подразделение" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "Имеется сертификатов: ${count}" + +msgid "Privilege Withdrawn" +msgstr "Отзыв привилегии" + +msgid "Reason for Revocation" +msgstr "Причина отзыва" + +msgid "Remove certificate hold" +msgstr "Отменить приостановку действия сертификата" + +msgid "Do you want to remove the certificate hold?" +msgstr "Вы хотите отменить приостановку действия сертификата?" + +msgid "Remove from CRL" +msgstr "Удаление из списка отзыва сертификатов (CRL)" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" +"
  1. Создать базу данных сертификатов или использовать существующую. " +"Чтобы создать новую базу данных, выполните команду:
    # certutil -N " +"-d <путь к базе данных>
  2. Создайте CSR с субъектом " +"CN=<${cn_name}>,O=<область (realm)>, например:
    " +"# certutil -R -d <путь к базе данных> -a -g <размер ключа> " +"-s 'CN=${cn},O=${realm}'${san}
  3. Скопируйте и вставьте CSR " +"(от -----BEGIN NEW CERTIFICATE REQUEST----- до -----END NEW " +"CERTIFICATE REQUEST-----) в расположенную ниже область для ввода " +"текста:
" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr " -8 '${cn}'" + +msgid "Certificate requested" +msgstr "Отправлен запрос сертификата" + +msgid "Revoke certificate" +msgstr "Отозвать сертификат" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" +"Вы хотите отозвать этот сертификат? Выберите причину в раскрывающемся списке." + +msgid "Certificate Revoked" +msgstr "Сертификат отозван" + +msgid "REVOKED" +msgstr "ОТОЗВАНО" + +msgid "Serial Number" +msgstr "Серийный номер" + +msgid "Serial Number (hex)" +msgstr "Серийный номер (шестнадцатеричный)" + +msgid "SHA1 Fingerprint" +msgstr "Отпечаток SHA1" + +msgid "SHA256 Fingerprint" +msgstr "Отпечаток SHA256" + +msgid "Superseded" +msgstr "Замена" + +msgid "Unspecified" +msgstr "Не указана" + +msgid "Valid Certificate Present" +msgstr "Имеется действительный сертификат" + +msgid "Valid from" +msgstr "Действителен с" + +msgid "Valid to" +msgstr "Действителен до" + +msgid "Validity" +msgstr "Действительность" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Сертификат для ${primary_key} ${entity}" + +msgid "View Certificate" +msgstr "Просмотреть сертификат" + +msgid "Certificate Data" +msgstr "Данные сертификата" + +msgid "Certificate For Match" +msgstr "Сертификат для соответствия" + +msgid "Certificate Mapping Match" +msgstr "Соответствие сопоставления сертификата" + +msgid "Matched Users" +msgstr "Соответствующие пользователи" + +msgid "User Login" +msgstr "Имя учётной записи пользователя" + +msgid "Add certificate identity mapping rule" +msgstr "Добавить правило сопоставления сертификатов с записями пользователей" + +msgid "Add certificate mapping data" +msgstr "Добавить данные сопоставления сертификата" + +msgid "Certificate mapping data" +msgstr "Данные сопоставления сертификата" + +msgid "Configuration string" +msgstr "Строка конфигурации" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "Вы хотите удалить данные сопоставления сертификата ${data}?" + +msgid "Remove certificate mapping data" +msgstr "Удалить данные сопоставления сертификата" + +msgid "Issuer and subject" +msgstr "Издатель и субъект" + +msgid "Remove certificate identity mapping rules" +msgstr "Удалить правила сопоставления сертификатов с записями пользователей" + +msgid "Group Options" +msgstr "Параметры группы" + +msgid "Search Options" +msgstr "Параметры поиска" + +msgid "SELinux Options" +msgstr "Параметры SELinux" + +msgid "Server Options" +msgstr "Параметры сервера" + +msgid "Service Options" +msgstr "Параметры службы" + +msgid "User Options" +msgstr "Параметры пользователя" + +msgid "Forward first" +msgstr "Сначала перенаправлять" + +msgid "Forwarding disabled" +msgstr "Перенаправление отключено" + +msgid "Forward only" +msgstr "Только перенаправлять" + +msgid "Options" +msgstr "Параметры" + +msgid "Update System DNS Records" +msgstr "Обновить записи DNS системы" + +msgid "Do you want to update system DNS records?" +msgstr "Вы хотите обновить записи DNS системы?" + +msgid "System DNS records updated" +msgstr "Записи DNS системы обновлены" + +msgid "Add DNS forward zone" +msgstr "Добавить зону перенаправления DNS" + +msgid "Remove DNS forward zones" +msgstr "Удалить зоны перенаправления DNS" + +msgid "Add DNS resource record" +msgstr "Добавить запись ресурса DNS" + +msgid "DNS record was deleted because it contained no data." +msgstr "Запись DNS была удалена, так как не содержала данные." + +msgid "Other Record Types" +msgstr "Другие типы записей" + +msgid "Address not valid, can't redirect" +msgstr "Адрес недействителен, перенаправление невозможно" + +msgid "Create dns record" +msgstr "Создать запись DNS" + +msgid "Creating record." +msgstr "Создание записи." + +msgid "Record creation failed." +msgstr "Не удалось создать запись." + +msgid "Checking if record exists." +msgstr "Проверка существования записи." + +msgid "Record not found." +msgstr "Запись не найдена." + +msgid "Redirection to PTR record" +msgstr "Перенаправление на запись PTR" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "Найдена зона: ${zone}" + +msgid "Target reverse zone not found." +msgstr "Целевая обратная зона не найдена." + +msgid "Fetching DNS zones." +msgstr "Получение данных зон DNS." + +msgid "An error occurred while fetching dns zones." +msgstr "Ошибка при получении данных зон DNS." + +msgid "You will be redirected to DNS Zone." +msgstr "Вы будете перенаправлены в зону DNS." + +msgid "Remove DNS resource records" +msgstr "Удалить записи ресурсов DNS" + +msgid "Standard Record Types" +msgstr "Стандартные типы записей" + +msgid "Records for DNS Zone" +msgstr "Записи зоны DNS" + +msgid "Record Type" +msgstr "Тип записи" + +msgid "Add DNS zone" +msgstr "Добавить зону DNS" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "Вы действительно хотите добавить разрешение для зоны DNS ${object}?" + +msgid "DNS Zone Settings" +msgstr "Параметры зоны DNS" + +msgid "Remove DNS zones" +msgstr "Удалить зоны DNS" + +msgid "Remove Permission" +msgstr "Удалить разрешение" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "Вы действительно хотите удалить разрешение для зоны DNS ${object}?" + +msgid "Skip DNS check" +msgstr "Пропустить проверку DNS" + +msgid "Skip overlap check" +msgstr "Пропустить проверку пересечения" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" +"Следует ли проверить, есть ли адрес нового полномочного сервера имён в DNS" + +msgid "Authoritative nameserver change" +msgstr "Изменение полномочного сервера имён" + +msgid "Level" +msgstr "Уровень" + +msgid "Set Domain Level" +msgstr "Указать уровень домена" + +msgid "Add user group" +msgstr "Добавить группу пользователей" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "Добавить группы пользователей в группу пользователей '${primary_key}'" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "Добавить группу пользователей '${primary_key}' в группы пользователей" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Добавить группу пользователей '${primary_key}' в правила HBAC" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "Добавить группу пользователей '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "Добавить группу пользователей '${primary_key}' в роли" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "Добавить группу пользователей '${primary_key}' в правила Sudo" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "Добавить службы в группу пользователей '${primary_key}'" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "Добавить пользователей в группу пользователей '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Add user groups into user group '${primary_key}'" +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "Добавить группы пользователей в группу пользователей '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove user groups from user group '${primary_key}'" +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "Удалить группы пользователей из группы пользователей '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Add users into user group '${primary_key}'" +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "Добавить пользователей в группу пользователей '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove users from user group '${primary_key}'" +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "Удалить пользователей из группы пользователей '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Add services into user group '${primary_key}'" +msgid "Add user ID override into user group '${primary_key}'" +msgstr "Добавить службы в группу пользователей '${primary_key}'" + +msgid "Group Settings" +msgstr "Параметры группы" + +msgid "External" +msgstr "Внешний" + +msgid "Groups" +msgstr "Группы" + +msgid "Group categories" +msgstr "Категории групп" + +msgid "Change to external group" +msgstr "Изменение на внешнюю группу" + +msgid "Change to POSIX group" +msgstr "Изменение на POSIX-группу" + +msgid "Non-POSIX" +msgstr "Не POSIX" + +msgid "POSIX" +msgstr "POSIX" + +msgid "Remove user groups" +msgstr "Удалить группы пользователей" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "Удалить группу пользователей '${primary_key}' из групп пользователей" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "Удалить группу пользователей '${primary_key}' из сетевых групп" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "Удалить группу пользователей '${primary_key}' из ролей" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Удалить группу пользователей '${primary_key}' из правил HBAC" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Удалить группу пользователей '${primary_key}' из правил Sudo" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "Удалить группы пользователей из группы пользователей '${primary_key}'" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "Удалить службы из группы пользователей '${primary_key}'" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "Удалить пользователей из группы пользователей '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove services from user group '${primary_key}'" +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "Удалить службы из группы пользователей '${primary_key}'" + +msgid "Group Type" +msgstr "Тип группы" + +msgid "Add HBAC rule" +msgstr "Добавить правило HBAC" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Добавить группы пользователей в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "Добавить группы узлов в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "Добавить узлы в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "Добавить группы служб HBAC в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Добавить службы HBAC в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Добавить пользователей в правило HBAC '${primary_key}'" + +msgid "Accessing" +msgstr "Получение доступа" + +msgid "Remove HBAC rules" +msgstr "Удалить правила HBAC" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Удалить группы пользователей из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Удалить группы узлов из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "Удалить узлы из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Удалить группы служб HBAC из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "Удалить службы HBAC из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Удалить пользователей из правила HBAC '${primary_key}'" + +msgid "Via Service" +msgstr "Служба для использования" + +msgid "Who" +msgstr "Кто" + +msgid "Add HBAC service" +msgstr "Добавить службу HBAC" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "Добавить службу HBAC '${primary_key}' в группы служб HBAC" + +msgid "Remove HBAC services" +msgstr "Удалить службы HBAC" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "Удалить службу HBAC '${primary_key}' из групп служб HBAC" + +msgid "Add HBAC service group" +msgstr "Добавить группу служб HBAC" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "Добавить службы HBAC в группу служб HBAC '${primary_key}'" + +msgid "Remove HBAC service groups" +msgstr "Удалить группы служб HBAC" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Удалить службы HBAC из группы служб HBAC '${primary_key}'" + +msgid "Access Denied" +msgstr "Отказано в доступе" + +msgid "Access Granted" +msgstr "Доступ предоставлен" + +msgid "Include Disabled" +msgstr "Включать отключённые" + +msgid "Include Enabled" +msgstr "Включать включённые" + +msgid "HBAC Test" +msgstr "Проверка HBAC" + +msgid "Matched" +msgstr "Установлено соответствие" + +msgid "Missing values: " +msgstr "Отсутствующие значения:" + +msgid "New Test" +msgstr "Новая проверка" + +msgid "Rules" +msgstr "Правила" + +msgid "Run Test" +msgstr "Выполнить проверку" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "Указать внешний адрес: ${entity}" + +msgid "Unmatched" +msgstr "Соответствие не установлено" + +msgid "Add host" +msgstr "Добавить узел" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "Добавить узлы, которые управляют узлом '${primary_key}'" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "Добавить узел '${primary_key}' в группы узлов" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Добавить узел '${primary_key}' в правила HBAC" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "Добавить узел '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "Добавить узел '${primary_key}' в роли" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "Добавить узел '${primary_key}' в правила Sudo" + +msgid "Host Certificate" +msgstr "Сертификат узла" + +msgid "Host Name" +msgstr "Имя узла" + +msgid "Delete Key, Unprovision" +msgstr "Удалить ключ, отменить подготовку к работе" + +msgid "Host Settings" +msgstr "Параметры узла" + +msgid "Enrolled" +msgstr "Зарегистрировано" + +msgid "Enrollment" +msgstr "Регистрация" + +msgid "Fully Qualified Host Name" +msgstr "Полное имя узла" + +msgid "Generate OTP" +msgstr "Создать OTP" + +msgid "Generated OTP" +msgstr "Созданный OTP" + +msgid "Kerberos Key" +msgstr "Ключ Kerberos" + +msgid "Kerberos Key Not Present" +msgstr "Отсутствует ключ Kerberos" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Имеется ключ Kerberos, узел подготовлен к работе" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password" +msgstr "Одноразовый пароль" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Not Present" +msgstr "Одноразовый пароль" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Present" +msgstr "Одноразовый пароль" + +msgid "Reset OTP" +msgstr "Сбросить OTP" + +#, fuzzy +#| msgid "One Time Password" +msgid "Reset One-Time Password" +msgstr "Одноразовый пароль" + +msgid "Set OTP" +msgstr "Установить OTP" + +msgid "OTP set" +msgstr "Установлен OTP" + +#, fuzzy +#| msgid "One Time Password" +msgid "Set One-Time Password" +msgstr "Одноразовый пароль" + +msgid "Remove hosts" +msgstr "Удалить узлы" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "Удалить узлы, которые управляют узлом '${primary_key}'" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "Удалить узел '${primary_key}' из групп узлов" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "Удалить узел '${primary_key}' из сетевых групп" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "Удалить узел '${primary_key}' из ролей" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Удалить узел '${primary_key}' из правил HBAC" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "Удалить узел '${primary_key}' из правил Sudo" + +msgid "Unprovision" +msgstr "Отменить подготовку" + +msgid "Are you sure you want to unprovision this host?" +msgstr "Вы действительно хотите отменить подготовку этого узла?" + +msgid "Unprovisioning host" +msgstr "Отмена подготовки узла" + +msgid "Host unprovisioned" +msgstr "Узел, подготовка которого к работе отменена" + +msgid "Add host group" +msgstr "Добавить группу узлов" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "Добавить узлы в группу узлов '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "Добавить группы узлов в группу узлов '${primary_key}'" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "Добавить группу узлов '${primary_key}' в группы узлов" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "Добавить группу узлов '${primary_key}' в правила HBAC" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "Добавить группу узлов '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "Добавить группу узлов '${primary_key}' в правила Sudo" + +#, fuzzy, python-brace-format +#| msgid "Add host groups into host group '${primary_key}'" +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "Добавить группы узлов в группу узлов '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove host groups from host group '${primary_key}'" +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "Удалить группы узлов из группы узлов '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Add users into user group '${primary_key}'" +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "Добавить пользователей в группу пользователей '${primary_key}'" + +#, fuzzy, python-brace-format +#| msgid "Remove users from netgroup '${primary_key}'" +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "Удалить пользователей из сетевой группы '${primary_key}'" + +msgid "Host Group Settings" +msgstr "Параметры группы узлов" + +msgid "Remove host groups" +msgstr "Удалить группы узлов" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "Удалить группу узлов '${primary_key}' из групп узлов" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "Удалить группу узлов '${primary_key}' из сетевых групп" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Удалить группу узлов '${primary_key}' из правил HBAC" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "Удалить группу узлов '${primary_key}' из правил Sudo" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "Удалить узлы из группы узлов '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "Удалить группы узлов из группы узлов '${primary_key}'" + +msgid "User to override" +msgstr "Пользователь, которого следует переопределить" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" +"Введите имя учётной записи доверенного пользователя или пользователя IPA. " +"Примечание: в списке результатов поиска не будет записей пользователей из " +"доверенных доменов." + +msgid "Enter trusted user login." +msgstr "Введите имя учётной записи доверенного пользователя." + +msgid "Profile" +msgstr "Профиль" + +msgid "Group to override" +msgstr "Группа, которую следует переопределить" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" +"Введите имя учётной записи доверенной группы или группы IPA. Примечание: в " +"списке результатов поиска не будет записей групп из доверенных доменов." + +msgid "Enter trusted group name." +msgstr "Введите имя доверенной группы." + +msgid "Add ID view" +msgstr "Добавить представление ID" + +msgid "Add group ID override" +msgstr "Добавить переопределение ID группы" + +msgid "Add user ID override" +msgstr "Добавить переопределение ID пользователя" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key} применяется к:" + +msgid "Applied to hosts" +msgstr "Применено к узлам" + +msgid "Apply to host groups" +msgstr "Применить к группам узлов" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "Применить представление ID '${primary_key}' к узлам групп узлов" + +msgid "Apply to hosts" +msgstr "Применить к узлам" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "Применить представление ID '${primary_key}' к узлам" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "${primary_key} переопределяет:" + +msgid "Remove ID views" +msgstr "Удалить представления ID" + +msgid "Remove user ID overrides" +msgstr "Удалить переопределения ID пользователя" + +msgid "Remove group ID overrides" +msgstr "Удалить переопределения ID группы" + +msgid "Un-apply from host groups" +msgstr "Отменить применение к группам узлов" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "Отменить применение представлений ID к узлам групп узлов" + +msgid "Un-apply" +msgstr "Отменить применение" + +msgid "Un-apply from hosts" +msgstr "Отменить применение к узлам" + +msgid "Un-apply ID Views from hosts" +msgstr "Отменить применение представлений ID к узлам" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" +"Вы действительно хотите отменить применение представления ID к выбранным " +"записям?" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "Отменить применение представления ID '${primary_key}' к узлам" + +msgid "Add netgroup" +msgstr "Добавить сетевую группу" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "Добавить сетевую группу '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "Добавить сетевые группы в сетевую группу '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "Добавить группы пользователей в сетевую группу '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "Добавить узлы в сетевую группу '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "Добавить группы узлов в сетевую группу '${primary_key}'" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "Добавить пользователей в сетевую группу '${primary_key}'" + +msgid "Host" +msgstr "Узел" + +msgid "Netgroup Settings" +msgstr "Параметры сетевой группы" + +msgid "Remove netgroups" +msgstr "Удалить сетевые группы" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "Удалить сетевую группу '${primary_key}' из сетевых групп" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Удалить группы пользователей из сетевой группы '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "Удалить узлы из сетевой группы '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "Удалить группы узлов из сетевой группы '${primary_key}'" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "Удалить сетевые группы из сетевой группы '${primary_key}'" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "Удалить пользователей из сетевой группы '${primary_key}'" + +msgid "Add OTP token" +msgstr "Добавить токен OTP" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "Добавить пользователей, которые управляют токеном OTP '${primary_key}'" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"В качестве приложения для работы с токенами OTP можно использовать FreeOTP." + +msgid "Configure your token" +msgstr "Настройте ваш токен" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" +"Настройте ваш токен, отсканировав расположенный ниже QR-код. Щёлкните по QR-" +"коду, если видите правильные данные на устройстве, которое вы хотите " +"настроить." + +msgid "OTP Token Settings" +msgstr "Параметры токена OTP" + +msgid "Disable token" +msgstr "Отключить токен" + +msgid "Enable token" +msgstr "Включить токен" + +msgid "Remove OTP tokens" +msgstr "Удалить токены OTP" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "Удалить пользователей, которые управляют токеном OTP '${primary_key}'" + +msgid "Show QR code" +msgstr "Показать QR-код" + +msgid "Show configuration uri" +msgstr "Показать адрес конфигурации" + +msgid "Counter-based (HOTP)" +msgstr "На основе счётчика (HOTP)" + +msgid "Time-based (TOTP)" +msgstr "На основе времени (TOTP)" + +msgid "Add Custom Attribute" +msgstr "Добавить пользовательский атрибут" + +msgid "Permission settings" +msgstr "Параметры разрешений" + +msgid "Attribute breakdown" +msgstr "Разбивка по атрибутам" + +msgid "Privilege Settings" +msgstr "Параметры привилегий" + +msgid "Public key:" +msgstr "Открытый ключ:" + +msgid "Set public key" +msgstr "Установить открытый ключ" + +msgid "Show/Set key" +msgstr "Показать или установить ключ" + +msgid "Modified: key not set" +msgstr "Изменено: ключ не установлен" + +msgid "Modified" +msgstr "Изменено" + +msgid "New: key not set" +msgstr "Новый: ключ не установлен" + +msgid "New: key set" +msgstr "Новый: ключ установлен" + +msgid "Add password policy" +msgstr "Добавить политику паролей" + +msgid "Password Policy" +msgstr "Политика паролей" + +msgid "Remove password policies" +msgstr "Удалить политики паролей" + +msgid "Add ID range" +msgstr "Добавить диапазон идентификаторов" + +msgid "Range Settings" +msgstr "Параметры диапазона" + +msgid "Base ID" +msgstr "Основной ID" + +msgid "Primary RID base" +msgstr "Основа основного RID" + +msgid "Range size" +msgstr "Размер диапазона" + +msgid "Domain SID" +msgstr "SID домена" + +msgid "Secondary RID base" +msgstr "Основа вторичного RID" + +msgid "Remove ID ranges" +msgstr "Удалить диапазоны идентификаторов" + +msgid "Active Directory domain" +msgstr "Домен Active Directory" + +msgid "Active Directory domain with POSIX attributes" +msgstr "Домен Active Directory с атрибутами POSIX" + +msgid "Detect" +msgstr "Определить" + +msgid "Local domain" +msgstr "Локальный домен" + +msgid "IPA trust" +msgstr "Отношение доверия IPA" + +msgid "Active Directory winsync" +msgstr "winsync Active Directory" + +msgid "Add RADIUS server" +msgstr "Добавить сервер RADIUS" + +msgid "RADIUS Proxy Server Settings" +msgstr "Параметры прокси-сервера RADIUS" + +msgid "Remove RADIUS servers" +msgstr "Удалить серверы RADIUS" + +msgid "Check DNS" +msgstr "Проверить DNS" + +msgid "Do you also want to perform DNS check?" +msgstr "Вы хотите также выполнить проверку DNS?" + +msgid "Force Update" +msgstr "Принудительное обновление" + +msgid "Add SELinux user map" +msgstr "Добавить список пользователей SELinux" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" +"Добавить группы пользователей в список пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "Добавить группы узлов в список пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "Добавить узлы в список пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "Добавить пользователей в список пользователей SELinux '${primary_key}'" + +msgid "Remove selinux user maps" +msgstr "Удалить списки пользователей SELinux" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" +"Удалить группы пользователей из списка пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "Удалить группы узлов из списка пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "Удалить узлы из списка пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "Удалить пользователей из списка пользователей SELinux '${primary_key}'" + +msgid "Server Roles" +msgstr "Роли сервера" + +msgid "Server Role" +msgstr "Роль сервера" + +msgid "Warning: Consider service replication" +msgstr "Предупреждение: рекомендуется использовать репликацию служб" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" +"Настоятельно рекомендуется установить следующие службы на нескольких " +"серверах:" + +msgid "Delete Server" +msgstr "Удалить сервер" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" +"Удаление сервера приводит к его необратимому удалению из топологии. Это " +"действие нельзя отменить." + +msgid "Add service" +msgstr "Добавить службу" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "Добавить узлы, которые управляют службой '${primary_key}'" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "Добавить службу '${primary_key}' в роли" + +msgid "Service Certificate" +msgstr "Сертификат службы" + +msgid "Service Settings" +msgstr "Параметры службы" + +msgid "Provisioning" +msgstr "Подготовка" + +msgid "Remove services" +msgstr "Удалить службы" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "Удалить службу '${primary_key}' из ролей" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "Удалить узлы, которые управляют службой '${primary_key}'" + +msgid "Are you sure you want to unprovision this service?" +msgstr "Вы действительно хотите отменить подготовку этой службы?" + +msgid "Unprovisioning service" +msgstr "Отмена подготовки службы" + +msgid "Service unprovisioned" +msgstr "Служба, подготовка которой к работе отменена" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Имеется ключ Kerberos, служба подготовлена к работе" + +msgid "SSH public keys" +msgstr "Открытые ключи SSH" + +msgid "SSH public key:" +msgstr "Открытый ключ SSH:" + +msgid "Set SSH key" +msgstr "Указать ключ SSH" + +msgid "Are you sure you want to activate selected users?" +msgstr "Вы действительно хотите активировать выбранные записи пользователей?" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "Вы действительно хотите активировать ${object}?" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "Активировано пользователей: ${count}" + +msgid "Add stage user" +msgstr "Добавить неподтверждённого пользователя" + +msgid "Stage users" +msgstr "Неподтверждённые пользователи" + +msgid "Preserved users" +msgstr "Хранимые пользователи" + +msgid "Remove preserved users" +msgstr "Удалить хранимых пользователей" + +msgid "Remove stage users" +msgstr "Удалить неподтверждённых пользователей" + +msgid "Are you sure you want to stage selected users?" +msgstr "" +"Вы действительно хотите сделать выбранных пользователей неподтверждёнными?" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "Пользователей, сделанных неподтверждёнными: ${count}" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "Вы действительно хотите разместить ${object} на хранение?" + +msgid "Are you sure you want to restore selected users?" +msgstr "Вы действительно хотите восстановить выбранные записи пользователей?" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "Вы действительно хотите восстановить ${object}?" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "Восстановлено пользователей: ${count}" + +msgid "User categories" +msgstr "Категории пользователей" + +msgid "Add sudo command" +msgstr "Добавить команду Sudo" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "Добавить команду Sudo '${primary_key}' в группы команд Sudo" + +msgid "Remove sudo commands" +msgstr "Удалить команды Sudo" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "Удалить команду Sudo '${primary_key}' из групп команд Sudo" + +msgid "Add sudo command group" +msgstr "Добавить группу команд Sudo" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "Добавить команды Sudo в группу команд Sudo '${primary_key}'" + +msgid "Remove sudo command groups" +msgstr "Удалить группы команд Sudo" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "Удалить команды Sudo из группы команд Sudo '${primary_key}'" + +msgid "Add sudo rule" +msgstr "Добавить правило Sudo" + +msgid "Add sudo option" +msgstr "Добавить параметр Sudo" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "Добавить разрешённые команды Sudo в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" +"Добавить группы разрешённых команд Sudo в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "Добавить запрещённые команды Sudo в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" +"Добавить группы запрещённых команд Sudo в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "Добавить группы пользователей в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "Добавить группы узлов в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "Добавить узлы в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" +"Добавить пользователей запуска от имени в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" +"Добавить группы пользователей запуска от имени в правило Sudo " +"'${primary_key}'" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "Добавить группы запуска от имени в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "Добавить пользователей в правило Sudo '${primary_key}'" + +msgid "Allow" +msgstr "Разрешить" + +msgid "Any Command" +msgstr "Любая команда" + +msgid "Any Group" +msgstr "Любая группа" + +msgid "Run Commands" +msgstr "Выполнить команды" + +msgid "Deny" +msgstr "Запретить" + +msgid "Access this host" +msgstr "Получить доступ к узлу" + +msgid "Option added" +msgstr "Параметр добавлен" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "Удалено параметров: ${count}" + +msgid "Remove sudo rules" +msgstr "Удалить правила Sudo" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "Удалить разрешённые команды Sudo из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" +"Удалить группы разрешённых команд Sudo из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "Удалить запрещённые команды Sudo из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" +"Удалить группы запрещённых команд Sudo из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Удалить группы пользователей из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "Удалить группы узлов из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "Удалить узлы из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" +"Удалить пользователей запуска от имени из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" +"Удалить группы пользователей запуска от имени из правила Sudo " +"'${primary_key}'" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "Удалить группы запуска от имени из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "Удалить пользователей из правила Sudo '${primary_key}'" + +msgid "As Whom" +msgstr "В качестве" + +msgid "Specified Commands and Groups" +msgstr "Указанные команды и группы" + +msgid "Specified Groups" +msgstr "Указанные группы" + +msgid "Remove sudo options" +msgstr "Удалить параметры Sudo" + +msgid "Autogenerated" +msgstr "Созданные автоматически" + +msgid "Segment details" +msgstr "Свойства сегмента" + +msgid "Replication configuration" +msgstr "Конфигурация репликации" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" +"Управляемая топология требует минимального уровня домена ${domainlevel}" + +msgid "Add IPA location" +msgstr "Добавить расположение IPA" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "Добавить IPA-сервер в расположение IPA '${primary_key}'" + +msgid "Remove IPA locations" +msgstr "Удалить расположения IPA" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "Удалить IPA-серверы из расположения IPA '${primary_key}'" + +msgid "Add topology segment" +msgstr "Добавить сегмент топологии" + +msgid "Remove topology segments" +msgstr "Удалить сегменты топологии" + +msgid "Account" +msgstr "Учётная запись" + +msgid "Add trust" +msgstr "Добавить отношение доверия" + +msgid "Administrative account" +msgstr "Учётная запись администратора" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklists" +msgstr "Входящий \"чёрный список\" SID" + +msgid "Trust Settings" +msgstr "Параметры отношения доверия" + +msgid "Establish using" +msgstr "Установить с помощью" + +msgid "Fetch domains" +msgstr "Получить домены" + +msgid "Pre-shared password" +msgstr "Общий пароль" + +msgid "Remove trusts" +msgstr "Удалить отношения доверия" + +msgid "Remove domains" +msgstr "Удалить домены" + +msgid "Trust direction" +msgstr "Направление отношения доверия" + +msgid "Trust status" +msgstr "Состояние отношения доверия" + +msgid "Trust type" +msgstr "Тип отношения доверия" + +msgid "Alternative UPN suffixes" +msgstr "Альтернативные суффиксы UPN" + +msgid "User attributes for SMB services" +msgstr "Пользовательские атрибуты для служб SMB" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "Путь к сценарию, исполняемому в системе Windows при входе" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "Путь к профилю пользователя, в формате UNC \\\\server\\share\\" + +msgid "Path to a user home directory, in UNC format" +msgstr "Путь к домашнему каталогу пользователя, в формате UNC" + +msgid "Drive to mount a home directory" +msgstr "Диск для монтирования домашнего каталога" + +msgid "Account Settings" +msgstr "Параметры учётной записи" + +msgid "Account Status" +msgstr "Состояние учётной записи" + +msgid "Active users" +msgstr "Активные пользователи" + +msgid "Add user" +msgstr "Добавить пользователя" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "Добавить пользователя '${primary_key}' в группы пользователей" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Добавить пользователя '${primary_key}' в правила HBAC" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "Добавить пользователя '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "Добавить пользователя '${primary_key}' в роли" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "Добавить пользователя '${primary_key}' в правила Sudo" + +msgid "Contact Settings" +msgstr "Параметры контакта" + +msgid "Delete mode" +msgstr "Режим удаления" + +msgid "Employee Information" +msgstr "Сведения о сотруднике" + +msgid "Error changing account status" +msgstr "Ошибка при изменении состояния учётной записи" + +msgid "Password expiration" +msgstr "Окончание действия пароля" + +msgid "Mailing Address" +msgstr "Почтовый адрес" + +msgid "Misc. Information" +msgstr "Прочие сведения" + +msgid "delete" +msgstr "удалить" + +msgid "preserve" +msgstr "сохранить" + +msgid "No private group" +msgstr "Без личной группы" + +msgid "Remove users" +msgstr "Удалить пользователей" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "Удалить пользователя '${primary_key}' из групп пользователей" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "Удалить пользователя '${primary_key}' из сетевых групп" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "Удалить пользователя '${primary_key}' из ролей" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Удалить пользователя '${primary_key}' из правил HBAC" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "Удалить пользователя '${primary_key}' из правил Sudo" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"Вы действительно хотите ${action} пользователя?
Изменения вступят в силу " +"немедленно." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Щёлкните, чтобы ${action}" + +msgid "Unlock" +msgstr "Разблокировать" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Вы действительно хотите разблокировать пользователя ${object}?" + +msgid "Add vault" +msgstr "Добавить хранилище" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "Добавить группы пользователей в участники хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "Добавить службы в участники хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "Добавить пользователей в участники хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "Добавить группы пользователей во владельцы хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "Добавить службы во владельцы хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "Добавить пользователей во владельцы хранилища '${primary_key}'" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" +"Секреты можно добавлять или извлекать из хранилища только с помощью " +"инструментов командной строки vault-archive и vault-retrieve." + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" +"Содержимое \"стандартных\" хранилищ могут просматривать пользователи с более " +"высоким уровнем привилегий (администраторы)." + +msgid "Asymmetric" +msgstr "Асимметричное" + +msgid "Vaults Config" +msgstr "Конфигурация хранилищ" + +msgid "Members" +msgstr "Участники" + +msgid "My User Vaults" +msgstr "Мои хранилища пользователей" + +msgid "Owners" +msgstr "Владельцы" + +msgid "Remove vaults" +msgstr "Удалить хранилища" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "Удалить группы пользователей из участников хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "Удалить службы из участников хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "Удалить пользователей из участников хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "Удалить группы пользователей из владельцев хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "Удалить службы из владельцев хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "Удалить пользователей из владельцев хранилища '${primary_key}'" + +msgid "Service Vaults" +msgstr "Хранилища служб" + +msgid "Shared" +msgstr "Общее" + +msgid "Shared Vaults" +msgstr "Хранилища совместного использования" + +msgid "Standard" +msgstr "Стандартное" + +msgid "Symmetric" +msgstr "Симметричное" + +msgid "Vault Type" +msgstr "Тип хранилища" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" +"С помощью веб-интерфейса можно создавать только стандартные хранилища. " +"Используйте интерфейс командной строки для создания других типов хранилищ." + +msgid "User Vaults" +msgstr "Хранилища пользователей" + +msgid "Current password is required" +msgstr "Следует указать текущий пароль" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Количество дней до окончания действия вашего пароля: ${days}." + +msgid "First OTP" +msgstr "Первый OTP" + +msgid "New password is required" +msgstr "Следует указать новый пароль" + +#, fuzzy +#| msgid "" +#| " To log in with username and " +#| "password, enter them in the corresponding fields, then click " +#| "'Log in'." +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" +" Чтобы войти с помощью имени " +"пользователя и пароля, введите их в соответствующие поля, затем " +"нажмите кнопку \"Войти\"." + +#, fuzzy +#| msgid "" +#| " To log in with username and " +#| "password, enter them in the corresponding fields, then click " +#| "'Log in'." +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" +" Чтобы войти с помощью имени " +"пользователя и пароля, введите их в соответствующие поля, затем " +"нажмите кнопку \"Войти\"." + +msgid "Token synchronization failed" +msgstr "Не удалось синхронизировать токен" + +msgid "The username, password or token codes are not correct" +msgstr "Неправильное имя пользователя, пароль или коды токена." + +msgid "Token was synchronized" +msgstr "Токен синхронизирован" + +msgid "Password change complete" +msgstr "Изменение пароля завершено" + +msgid "Your password has expired. Please enter a new password." +msgstr "Срок действия вашего пароля истёк. Пожалуйста, введите новый пароль." + +msgid "Passwords must match" +msgstr "Пароли должны совпадать" + +msgid "Password reset was not successful." +msgstr "Не удалось сбросить пароль." + +msgid "Reset your password." +msgstr "Сбросить свой пароль." + +msgid "Second OTP" +msgstr "Второй OTP" + +msgid "Verify Password" +msgstr "Проверить пароль" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Вы действительно хотите удалить выбранные записи?" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "Удалено записей: ${count}" + +msgid "Are you sure you want to disable selected entries?" +msgstr "Вы действительно хотите отключить выбранные записи?" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "Отключено записей: ${count}" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Вы действительно хотите включить выбранные записи?" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "Включено записей: ${count}" + +msgid "Some entries were not deleted" +msgstr "Не удалось удалить некоторые записи" + +msgid "Quick Links" +msgstr "Быстрые ссылки" + +msgid "Select All" +msgstr "Выбрать все" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"Запрос вернул количество результатов, которое превышает заданное ограничение " +"по размеру. Показано результатов: первые ${counter}." + +msgid "Unselect All" +msgstr "Отменить выбор" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" +"

Настройка Kerberos для браузера

\n" +"\n" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" +"

Firefox

\n" +"\n" +"

\n" +" Можно настроить Firefox на использование Kerberos для единого " +"входа. Приведённые далее инструкции помогут настроить веб-браузер для " +"отправки ваших учётных данных Kerberos подходящему центру распространения " +"ключей, что позволит выполнять единый вход.\n" +"

\n" +"\n" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" +"

Chrome

\n" +"\n" +"

\n" +" Можно настроить Chrome на использование Kerberos для единого " +"входа. Приведённые далее инструкции помогут настроить веб-браузер для " +"отправки ваших учётных данных Kerberos подходящему центру распространения " +"ключей, что позволит выполнять единый вход.\n" +"

\n" +"\n" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" +"

Импортировать сертификат центра сертификации

\n" +"
    \n" +"
  1. \n" +" Загрузите сертификат центра сертификации. Либо используйте сертификат /etc/ipa/ca.crt., если узел также является " +"клиентом управления учётными данными.\n" +"
    2. \n" +"
  2. \n" +" Нажмите кнопку меню с подсказкой Настройка и управление " +"Google Chrome (по умолчанию она расположена в правом верхнем углу " +"Chrome) и выберите пункт Настройки.\n" +"
    3. \n" +"
  3. \n" +" Затем нажмите кнопку Показать дополнительные настройки, чтобы просмотреть дополнительные параметры, и нажмите кнопку " +"Настроить сертификаты, которая расположена под заголовком HTTPS/" +"SSL.\n" +"
    4. \n" +"
  4. \n" +" На вкладке Доверенные корневые центры сертификации " +"нажмите кнопку Импорт..., которая расположена в нижней части окна.\n" +"
    5. \n" +"
  5. Выберите файл сертификата центра сертификации, который был загружен вами " +"ранее.
    6. \n" +"
\n" +"\n" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" +"

Internet Explorer

\n" +"

ПРЕДУПРЕЖДЕНИЕ: браузер Internet Explorer больше не " +"поддерживается.

\n" +"

\n" +" После входа в систему на рабочей станции с вашим ключом Kerberos " +"вы сможете использовать этот билет в Internet Explorer.\n" +"

\n" +"

\n" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" +"Войдите на компьютер под управлением Windows с помощью учётной " +"записи вашей области (realm) Kerberos (административный домен)\n" +"

\n" +"

\n" +"В Internet Explorer: выберите в меню \"Инструменты\" пункт " +"\"Параметры Интернета\".\n" +"

\n" +"
\n" +"
    \n" +"
  1. Откройте вкладку \"Безопасность\"
    2. \n" +"
  2. Выберите пункт \"Местная интрасеть\"
    3. \n" +"
  3. Нажмите кнопку \"Узлы...\"
    4. \n" +"
  4. Нажмите кнопку \"Дополнительно\"
    5. \n" +"
  5. Добавьте ваш домен в список
    6. \n" +"
\n" +"
    \n" +"
  1. Откройте вкладку \"Безопасность\"
    2. \n" +"
  2. Выберите пункт \"Местная интрасеть\"
    3. \n" +"
  3. Нажмите кнопку \"Другой...\"
    4. \n" +"
  4. Выберите пункт \"Автоматический вход в сеть только в зоне интрасети\"\n" +"
\n" +"\n" +"
    \n" +"
  1. Посетите веб-сайт, который использует Kerberos, с помощью IE (в URL-" +"адресе необходимо использовать полное имя домена)
    2. \n" +"
  2. Всё готово.
    3. \n" +"
\n" +"
\n" +"\n" + +msgid "Working" +msgstr "В процессе" + +msgid "Audit" +msgstr "Аудит" + +msgid "Authentication" +msgstr "Аутентификация" + +msgid "Automount" +msgstr "Автомонтирование" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "Управление доступом на основе узла" + +msgid "Identity" +msgstr "Идентификация" + +msgid "Network Services" +msgstr "Сетевые службы" + +msgid "Policy" +msgstr "Политика" + +msgid "Role-Based Access Control" +msgstr "Управление доступом на основе ролей" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "Топология" + +msgid "Trusts" +msgstr "Отношения доверия" + +msgid "True" +msgstr "Да" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"\n" +msgstr "" +"

Не удалось проверить ваши учётные данные Kerberos

\n" +"

\n" +" Убедитесь, что у вас имеются действительные билеты (их можно " +"получить через kinit) и правильно настроен браузер.\n" +"

\n" +"\n" +"

Конфигурация браузера

\n" +"\n" +"
\n" +"

\n" +" Если вы используете веб-интерфейс впервые, пожалуйста, настройте ваш браузер.\n" +"

\n" +"
\n" + +msgid "API Browser" +msgstr "Навигатор API " + +msgid "First" +msgstr "Первый" + +msgid "Last" +msgstr "Последний" + +msgid "Next" +msgstr "Вперёд" + +msgid "Page" +msgstr "Страница" + +msgid "Prev" +msgstr "Назад" + +msgid "Undo" +msgstr "Отменить" + +msgid "Undo this change." +msgstr "Отменить это изменение." + +msgid "Undo All" +msgstr "Отменить все" + +msgid "Undo all changes in this field." +msgstr "Отменить все изменения в этом поле." + +msgid "Text does not match field pattern" +msgstr "Текст не соответствует шаблону поля" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" +"Должно быть значением даты / времени в формате UTC (например, \"2014-01-20 " +"17:58:01Z\")" + +msgid "Must be a decimal number" +msgstr "Должно быть десятичным числом" + +msgid "Format error" +msgstr "Ошибка форматирования" + +msgid "Must be an integer" +msgstr "Должно быть целым числом" + +msgid "Not a valid IP address" +msgstr "Недопустимый IP-адрес" + +msgid "Not a valid IPv4 address" +msgstr "Недопустимый адрес IPv4" + +msgid "Not a valid IPv6 address" +msgstr "Недопустимый адрес IPv6" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Максимальное значение равно ${value}" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Минимальное значение равно ${value}" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "Недопустимый сетевой адрес (примеры: 2001:db8::/64, 192.0.2.0/24)" + +msgid "Parse error" +msgstr "Ошибка обработки" + +msgid "Must be a positive number" +msgstr "Должно быть положительным числом" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "'${port}' не является допустимым портом" + +msgid "Required field" +msgstr "Обязательное поле" + +msgid "Unsupported value" +msgstr "Неподдерживаемое значение" + +msgid "Role" +msgstr "Роль" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Добавлена роль \"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Удалена роль \"%(value)s\"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Изменена роль \"%(value)s\"" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "установлено соответствие %(count)d роли" +msgstr[1] "установлено соответствие %(count)d ролей" +msgstr[2] "установлено соответствие %(count)d ролей" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"IPA-серверы\n" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"Получить сведения об установленных IPA-серверах.\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Найти все серверы:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Показать определённый сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "server" +msgstr "сервер" + +msgid "servers" +msgstr "серверы" + +msgid "IPA Servers" +msgstr "IPA-серверы" + +msgid "Server location" +msgstr "Расположение сервера" + +msgid "Service weight" +msgstr "Вес служб" + +msgid "Weight for server services" +msgstr "Вес служб сервера" + +msgid "Service relative weight" +msgstr "Относительный вес служб" + +msgid "Relative weight for server services (counts per location)" +msgstr "" +"Относительный вес служб сервера (вычисляется для отдельного расположения)" + +msgid "Enabled server roles" +msgstr "Включены роли сервера" + +msgid "List of enabled roles" +msgstr "Список включённых ролей" + +msgid "Modify information about an IPA server." +msgstr "Изменить сведения о IPA-сервере." + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Изменена запись IPA-сервера \"%(value)s\"" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "установлено соответствие %(count)d IPA-сервера" +msgstr[1] "установлено соответствие %(count)d IPA-серверов" +msgstr[2] "установлено соответствие %(count)d IPA-серверов" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Удалён IPA-сервер \"%(value)s\"" + +msgid "Ignore topology errors" +msgstr "Игнорировать ошибки топологии" + +msgid "Ignore topology connectivity problems after removal" +msgstr "Игнорировать ошибки топологии подключений после удаления" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" +"Игнорировать проверку того, является ли удаляемый сервер последним сервером " +"CA или DNS" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Пропустить проверку того, удаляется ли последний главный сервер CA или DNS-" +"сервер" + +msgid "Force server removal" +msgstr "Принудительное удаление сервера" + +msgid "Force server removal even if it does not exist" +msgstr "Принудительное удаление сервера, даже если он не существует" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"Реплика является активным мастером ключей DNSSEC. Удаление может привести к " +"неработоспособности вашей системы DNS. Сначала следует отключить или " +"заменить мастер ключей DNSSEC." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" +"Удаление этой записи сервера оставит вашу установленную систему без DNS." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"Удаление этой записи сервера запрещено, так как это оставило бы вашу " +"установленную систему без KRA." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"Удаление этой записи сервера запрещено, так как это оставило бы вашу " +"установленную систему без CA." + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "Предупреждения игнорируются, процесс удаления продолжается" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" +"Не удалось удалить memberPrincipal %(principal)s из записи s4u2proxy %(dn)s: " +"%(err)s" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "Не удалось удалить записи имени узла DNA для %(master)s: %(err)s" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "Не удалось удалить сервер %(master)s из списка серверов: %(err)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "Не удалось удалить ключи Custodia для %(master)s: %(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Не удалось удалить учётные записи или ключи сервера: %(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Не удалось удалить записи DNS %(hostname)s: %(err)s" + +msgid "You may need to manually remove them from the tree" +msgstr "Возможно, потребуется вручную удалить их из дерева" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "Принудительное удаление %(hostname)s" + +msgid "Ignoring topology connectivity errors." +msgstr "Игнорирование ошибок топологии подключений." + +msgid "Server has already been deleted" +msgstr "Сервер уже удалён" + +msgid "Agreements deleted" +msgstr "Соглашения удалены" + +msgid "Following segments were not deleted:" +msgstr "Следующие сегменты не были удалены:" + +#, python-format +msgid "must be \"%s\"" +msgstr "должно быть \"%s\"" + +msgid "not allowed to perform server connection check" +msgstr "не разрешено выполнение проверки связи с сервером" + +msgid "Set enabled/hidden state of a server." +msgstr "Установить включённое/скрытое состояние сервера." + +msgid "State" +msgstr "Состояние" + +msgid "Server state" +msgstr "Состояние сервера" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Изменено состояние сервера \"%(value)s\"." + +msgid "Cannot hide CA renewal master." +msgstr "Не удалось скрыть мастер обновления CA." + +msgid "Cannot hide DNSSec key master." +msgstr "Не удалось скрыть мастер ключей DNSSec." + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "Не удалось скрыть последний включённый сервер %(name)s." + +#, fuzzy +#| msgid "" +#| "\n" +#| "Service Constrained Delegation\n" +#| "\n" +#| "Manage rules to allow constrained delegation of credentials so\n" +#| "that a service can impersonate a user when communicating with another\n" +#| "service without requiring the user to actually forward their TGT.\n" +#| "This makes for a much better method of delegating credentials as it\n" +#| "prevents exposure of the short term secret of the user.\n" +#| "\n" +#| "The naming convention is to append the word \"target\" or \"targets\" to\n" +#| "a matching rule name. This is not mandatory but helps conceptually\n" +#| "to associate rules and targets.\n" +#| "\n" +#| "A rule consists of two things:\n" +#| " - A list of targets the rule applies to\n" +#| " - A list of memberPrincipals that are allowed to delegate for\n" +#| " those targets\n" +#| "\n" +#| "A target consists of a list of principals that can be delegated.\n" +#| "\n" +#| "In English, a rule says that this principal can delegate as this\n" +#| "list of principals, as defined by these targets.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new constrained delegation rule:\n" +#| " ipa servicedelegationrule-add ftp-delegation\n" +#| "\n" +#| " Add a new constrained delegation target:\n" +#| " ipa servicedelegationtarget-add ftp-delegation-target\n" +#| "\n" +#| " Add a principal to the rule:\n" +#| " ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +#| "com ftp-delegation\n" +#| "\n" +#| " Add our target to the rule:\n" +#| " ipa servicedelegationrule-add-target --" +#| "servicedelegationtargets=ftp-delegation-target ftp-delegation\n" +#| "\n" +#| " Add a principal to the target:\n" +#| " ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +#| "com ftp-delegation-target\n" +#| "\n" +#| " Display information about a named delegation rule and target:\n" +#| " ipa servicedelegationrule_show ftp-delegation\n" +#| " ipa servicedelegationtarget_show ftp-delegation-target\n" +#| "\n" +#| " Remove a constrained delegation:\n" +#| " ipa servicedelegationrule-del ftp-delegation-target\n" +#| " ipa servicedelegationtarget-del ftp-delegation\n" +#| "\n" +#| "In this example the ftp service can get a TGT for the ldap service on\n" +#| "the bound user's behalf.\n" +#| "\n" +#| "It is strongly discouraged to modify the delegations that ship with\n" +#| "IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +#| "ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +#| "to delegate, causing the framework to stop functioning.\n" +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Ограниченное делегирование служб\n" +"\n" +"Управление правилами, с помощью которых можно ограничить делегирование " +"учётных данных таким образом, что служба сможет выполнять олицетворение " +"пользователя при обмене данными с другой службой без необходимости для " +"пользователя самом деле перенаправлять билет для получения билета (TGT). " +"Такой метод делегирования учётных данных значительно лучше, так как " +"предотвращает раскрытие краткосрочного секрета пользователя.\n" +"\n" +"В соответствии с соглашением об именовании к имени соответствующего правила " +"добавляется слово \"target\" или \"targets\". Такая схема имён не является " +"обязательной, но она помогает концептуально связать правила и их " +"назначения.\n" +"\n" +"Правило состоит из двух компонентов:\n" +" - Список целей (назначений), к которым применяется правило\n" +" - Список memberPrincipals, которым разрешено делегирование для этих " +"целей \n" +"\n" +"Цель состоит из списка учётных записей, которые можно делегировать.\n" +"\n" +"Если проще, правило утверждает, что определённую учетную запись можно " +"делегировать как указанный список учётных записей, согласно заданному списку " +"целей.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новое правило ограниченного делегирования:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Добавить новую цель ограниченного делегирования:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Добавить учётную запись в правило:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Добавить цель в правило:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Добавить учётную запись в цель:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Показать сведения об именованном правиле делегирования и цели:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Удалить ограниченное делегирование:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"В этом примере служба ftp может получать билет для получения билета для " +"службы ldap от имени связанного пользователя.\n" +"\n" +"Настоятельно не рекомендуется изменять делегирования, которые поставляются с " +"IPA, ipa-http-delegation и его цели ipa-cifs-delegation-targets и Ipa-ldap-" +"delegation-targets. Неправильная настройка может привести к потере " +"возможности делегирования, что повлечет неработоспособность всей системы.\n" + +msgid "Allowed to Impersonate" +msgstr "Разрешено олицетворять" + +msgid "Member principals" +msgstr "Учётные записи — участники" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "Недопустимая учётная запись: \"%(value)s\"" + +msgid "Add target to a named service delegation." +msgstr "Добавить цель в именованное делегирование служб." + +#, python-format +msgid "member %s" +msgstr "участник %s" + +msgid "Remove member from a named service delegation." +msgstr "Удалить участника из именованного делегирования служб." + +msgid "service delegation rule" +msgstr "правило делегирования служб" + +msgid "service delegation rules" +msgstr "правила делегирования служб" + +msgid "Service delegation rules" +msgstr "Правила делегирования служб" + +msgid "Service delegation rule" +msgstr "Правило делегирования служб" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Добавлено правило делегирования служб \"%(value)s\"" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Удалено делегирование служб \"%(value)s\"" + +msgid "privileged service delegation rule" +msgstr "правило делегирования привилегированных служб" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "установлено соответствие %(count)d правила делегирования служб" +msgstr[1] "установлено соответствие %(count)d правил делегирования служб" +msgstr[2] "установлено соответствие %(count)d правил делегирования служб" + +msgid "service delegation target" +msgstr "цель делегирования служб" + +msgid "service delegation targets" +msgstr "цели делегирования служб" + +msgid "Service delegation targets" +msgstr "Цели делегирования служб" + +msgid "Service delegation target" +msgstr "Цель делегирования служб" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Добавлена цель делегирования служб \"%(value)s\"" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Удалена цель делегирования служб \"%(value)s\"" + +msgid "privileged service delegation target" +msgstr "цель делегирования привилегированных служб" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "установлено соответствие %(count)d цели делегирования служб" +msgstr[1] "установлено соответствие %(count)d целей делегирования служб" +msgstr[2] "установлено соответствие %(count)d целей делегирования служб" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" +"\n" +"Переход на IPA\n" +"\n" +"Перенос пользователей и групп с LDAP-сервера на IPA.\n" +"\n" +"Посылает запрос LDAP к удалённому серверу с целью поиска пользователей и " +"групп в контейнере. Чтобы перенести пароли, следует выполнить привязку к " +"серверу от имени пользователя, который может читать атрибут userPassword на " +"удалённом сервере. Перечень таких пользователей обычно ограничен " +"администраторами высшего уровня, в частности cn=Directory Manager на 389-ds " +"(пользователь bind по умолчанию).\n" +"\n" +"Контейнер пользователей по умолчанию: ou=People.\n" +"\n" +"Контейнер групп по умолчанию: ou=Groups.\n" +"\n" +"Записи пользователей и групп, которые уже существуют на IPA-сервере, будут " +"пропущены.\n" +"\n" +"Две схемы LDAP определяют, как хранятся записи участников группы: RFC2307 и\n" +"RFC2307bis. RFC2307bis использует атрибуты member и uniquemember для " +"определения участников группы, а RFC2307 использует атрибут memberUid. По " +"умолчанию используется схема RFC2307bis.\n" +"\n" +"С помощью приложения compat IPA можно повторно форматировать данные для " +"систем, в которых не предусмотрена поддержка RFC2307bis. Рекомендуется " +"отключать это приложение во время переноса, чтобы уменьшить нагрузку на " +"систему. Его можно включить снова после переноса. Чтобы перенести данные с " +"включённым приложением, используйте параметр \"--with-compat\".\n" +"\n" +"У перенесённых пользователей нет учётных данных Kerberos, только пароль " +"LDAP. Для завершения процесса переноса пользователям следует открыть " +"страницу http://ipa.example.com/ipa/migration и пройти аутентификацию с " +"помощью пароля LDAP, чтобы создать свои записи учётных данных Kerberos.\n" +"\n" +"По умолчанию перенос отключён. Чтобы включить его, используйте команду ipa " +"config-mod:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Если базовое DN не будет предоставлено с помощью --basedn, IPA будет " +"использовать значение defaultNamingContext, если оно установлено, или первое " +"значение в наборе namingContexts в корневой папке удалённого LDAP-сервера.\n" +"\n" +"Записи пользователей добавляются в группу пользователей по умолчанию. " +"Процесс такого добавления может быть довольно длительным, поэтому при " +"переносе он выполняется в пакетном режиме, пакетами по 100 пользователей. В " +"результате возникнет определённый период, когда записи пользователей уже " +"добавлены в IPA, но эти пользователи ещё не стали участниками группы " +"пользователей по умолчанию.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"Простейший перенос, приняты все значения по умолчанию:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +"Определение контейнеров пользователей и групп. Можно использовать для " +"переноса данных пользователей и групп с сервера IPA версии 1:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" +" --group-container='cn=groups,cn=accounts'\n" +" ldap://ds.example.com:389\n" +"\n" +"Так как на сервере IPA версии 2 уже предусмотрены предопределённые группы, " +"которые могут совпадать с перенесёнными с сервера (IPA версии 1) группами " +"(например, admins, ipausers), пользователи из таких групп могут быть " +"перенесены в неизвестную группу (unknown) на новом сервере IPA версии 2.\n" +"Используйте параметр --group-overwrite-gid, чтобы перезаписать идентификатор " +"группы (GID) уже созданных групп и предотвратить эту проблему:\n" +" ipa migrate-ds --group-overwrite-gi\n" +" --user-container='cn=users,cn=accounts'\n" +" --group-container='cn=groups,cn=accounts'\n" +" ldap://ds.example.com:389\n" +"\n" +"Перенесённые данные пользователей и групп могут содержать классы объектов и " +"сопутствующие атрибуты, неизвестные серверу IPA версии 2. Эти классы " +"объектов и атрибуты можно исключить из процедуры переноса данных:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" +" --group-container='cn=groups,cn=accounts'\n" +" --user-ignore-objectclass=radiusprofile\n" +" --user-ignore-attribute=radiusgroupname\n" +" ldap://ds.example.com:389\n" +"\n" +"ВЕДЕНИЕ ЖУРНАЛА\n" +"\n" +"Во время переноса предупреждения и сообщения об ошибках будут добавляться в " +"журнал ошибок Apache. После завершения переноса следует ознакомиться с " +"соответствующим файлом, чтобы исправить или выяснить причины ошибок, которые " +"могли произойти. \n" +"\n" +"Для каждого пакета из 100 перенесённых записей пользователей будет показано " +"информационное сообщение, предназначенное для оценки прогресса обработки и " +"определения её продолжительности. \n" +"\n" +"Если определён уровень ведения журнала debug путём установления debug = True " +"в /etc/ipa/default.conf или в /etc/ipa/server.conf, для каждой перенесённой " +"записи будет добавляться собственная запись, а также отчёт по каждому " +"обновлению группы пользователей по умолчанию.\n" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Учётная запись Kerberos %s уже существует. Используйте команду \"ipa user-mod" +"\", чтобы установить её параметры вручную." + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Не удалось определить, существует ли уже учётная запись Kerberos %s. " +"Используйте команду \"ipa user-mod\", чтобы установить её параметры вручную." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Не удалось добавить пользователя в группу по умолчанию. Используйте команду " +"\"ipa group-add-member\", чтобы добавить его вручную." + +msgid "Migration of LDAP search reference is not supported." +msgstr "Поддержка миграции поисковой ссылки LDAP не предусмотрена." + +msgid "Malformed DN" +msgstr "Некорректное DN" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s не является POSIX-пользователем" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" +". Проверьте идентификатор существующей группы. Используйте параметр --group-" +"overwrite-gid для перезаписи идентификатора группы" + +msgid "Invalid LDAP URI." +msgstr "Неверный URI LDAP." + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s для исключения из миграции" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"список результатов поиска объектов миграции был усечён сервером; возможно, " +"процесс миграции не завершён\n" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"Поиск LDAP в %(container)s не вернул никаких результатов (основа поиска: " +"%(search_base)s, класс объектов: %(objectclass)s)" + +msgid "Default group for new users not found" +msgstr "Группа по умолчанию для новых пользователей не найдена" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" +"\n" +"Узлы/Компьютеры\n" +"\n" +"Узел представляет собой отдельный компьютер. Термин может использоваться в " +"нескольких контекстах:\n" +"- записи служб, связанные с определённым узлом \n" +"- узел сохраняет учётную запись узла / службы\n" +"- узел может использоваться в правилах управления доступом на основе узла " +"(Host-based Access Control, HBAC)\n" +"- каждый зарегистрированный клиент создаёт запись узла\n" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" +"\n" +"РЕГИСТРАЦИЯ:\n" +"\n" +"Существует три сценария регистрации нового клиента:\n" +"\n" +"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " +"существовать или отсутствовать. Полноправный администратор выполняет роль " +"hostadmin или является участником группы admins.\n" +"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " +"должен существовать. Администратор с ограниченными правами выполняет роль с " +"привилегией Host Enrollment.\n" +"3. Узел создан с одноразовым паролем.\n" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" +"\n" +"ПОВТОРНАЯ РЕГИСТРАЦИЯ\n" +"\n" +"Если узел уже когда-то был зарегистрирован и затем утратил свою конфигурацию " +"(например, была уничтожена виртуальная машина), его можно зарегистрировать " +"повторно.\n" +"\n" +"Дополнительные сведения доступны на страницах справочника по ipa-client-" +"install.\n" +"\n" +"В запись узла при необходимости можно включить данные о его расположении, " +"типе используемой операционной системы и так далее.\n" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" +"\n" +" Добавить новый узел:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Удалить узел:\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Добавить новый узел с одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +" Добавить новый узел со случайным одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Изменить сведения об узле:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +"Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +" Добавить узел, который может управлять таблицей ключей и сертификатом этого " +"узла:\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Разрешить пользователю создавать таблицу ключей:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "Base-64 encoded host certificate" +msgstr "Base-64 шифрованный сертификат узла" + +msgid "Principal alias" +msgstr "Псевдоним учётной записи" + +msgid "SSH public key fingerprint" +msgstr "Отпечаток открытого ключа SSH" + +msgid "Authentication Indicators" +msgstr "Индикаторы аутентификации" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Добавлен узел \"%(value)s\"" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Удалён узел \"%(value)s\"" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" +"Удалить записи A, AAAA, SSHFP и PTR узла (узлов) под управлением DNS IPA" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Записи A, AAAA, SSHFP или PTR не найдены." + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Изменён узел \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "Невозможно установить пароль для зарегистрированного узла." + +msgid "cn is immutable" +msgstr "cn нельзя изменять" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "установлено соответствие %(count)d узела" +msgstr[1] "установлено соответствие %(count)d узлов" +msgstr[2] "установлено соответствие %(count)d узлов" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Отключён узел \"%(value)s\"" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Добавлены сертификаты в запись узла \"%(value)s\"" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Удалены сертификаты из записи узла \"%(value)s\"" + +msgid "Add new principal alias to host entry" +msgstr "Добавить новый псевдоним учётной записи в запись узла." + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Добавлены новые псевдонимы в запись узла \"%(value)s\"" + +msgid "Remove principal alias from a host entry" +msgstr "Удалить псевдоним учётной записи из записи узла." + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Удалены псевдонимы из записи узла \"%(value)s\"" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" +"Объект класса обслуживания, который используется для связывания политик с " +"группами" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"приоритет должен иметь уникальное значение (%(prio)d уже использовано для " +"%(gname)s)" + +msgid "Add Class of Service entry" +msgstr "Добавить запись класса обслуживания" + +msgid "Delete Class of Service entry" +msgstr "Удалить запись класса обслуживания" + +msgid "Modify Class of Service entry" +msgstr "Изменить запись класса обслуживания" + +msgid "Display Class of Service entry" +msgstr "Показать запись класса обслуживания" + +msgid "Search for Class of Service entry" +msgstr "Поиск записи класса обслуживания" + +msgid "password policy" +msgstr "политика паролей" + +msgid "password policies" +msgstr "политики паролей" + +msgid "Password Policies" +msgstr "Политики паролей" + +#, fuzzy +#| msgid "Max renew" +msgid "Max repeat" +msgstr "Максимальный срок для обновления" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "Максимальное количество возвращённых записей" + +#, fuzzy +#| msgid "Max renew" +msgid "Max sequence" +msgstr "Максимальный срок для обновления" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Имя пользователя" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "Максимальный срок жизни пароля должен быть больше минимального." + +msgid "cannot delete global password policy" +msgstr "невозможно удалить глобальную политику паролей" + +msgid "priority cannot be set on global policy" +msgstr "невозможно установить приоритет для глобальной политики" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Отношения доверия между областями (realm)\n" +"\n" +"Управление отношениями доверия между доменами IPA и Active Directory.\n" +"\n" +"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " +"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " +"поддерживает только отношения доверия между доменами IPA и Active Directory " +"под управлением Windows Server 2008 или более поздней версии с " +"функциональными возможностями уровня 2008 или более поздней версии.\n" +"\n" +"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " +"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " +"Работоспособность отношения доверия зависит от возможности обнаруживать " +"специальные ресурсы в другом домене с помощью записей DNS.\n" +"\n" +"Примеры:\n" +"\n" +"1. Установить отношение доверия между областями (realm) с Active Directory с " +"помощью учётных данных администратора AD:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. Вывести список всех существующих отношений доверия:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показать подробные сведения об определённом отношении доверия:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Удалить существующее отношение доверия:\n" +"\n" +" ipa trust-del \n" +"\n" +"Как только отношение доверия будет установлено, удалённых пользователей " +"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " +"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" +"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " +"POSIX-групп.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список участников внешних участников группы ad_admins_external, " +"чтобы определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" +"\n" +"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " +"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " +"идентификаторы затем используются для связи с доверенным доменом конкретного " +"типа.\n" +"\n" +"1. Показать глобальную конфигурацию отношений доверия для типа отношений " +"доверия Active Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " +"Directory и указать другую резервную основную группу (GID резервной основной " +"группы используется в качестве GID основного пользователя, если для " +"пользователя, который выполняет аутентификацию в домене IPA, не был " +"установлен другой основной GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " +"(разрешена любая группа с классом объекта posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" +" Кроме того, выполнить эту команду могут следующие серверы: %(masters)s" + +msgid "AD Trust setup" +msgstr "Настройка отношений доверия AD" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Невозможно выполнить выбранную команду без установленной поддержки Samba 4. " +"Убедитесь, что субпакет IPA server-trust-ad установлен." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Невозможно выполнить выбранную команду без настройки экземпляра Samba 4 на " +"этом компьютере. Убедитесь, что на этом сервере запущена команда ipa-adtrust-" +"install." + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без настройки собственного домена нельзя выполнять поиск в доверенных " +"доменах. Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"Не удалось получить домены из доверенного леса. Подробные сведения доступны " +"в файле error_log" + +msgid "trust" +msgstr "отношение доверия" + +msgid "trusts" +msgstr "отношения доверия" + +msgid "Trust" +msgstr "Отношение доверия" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklist incoming" +msgstr "Входящий \"чёрный список\" SID" + +#, fuzzy +#| msgid "SID blacklist outgoing" +msgid "SID blocklist outgoing" +msgstr "Исходящий \"чёрный список\" SID" + +msgid "UPN suffixes" +msgstr "Суффиксы UPN" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "недопустимый SID: {SID}" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" +"\n" +"Добавление нового отношения доверия, которое следует использовать.\n" +"\n" +"Эта команда устанавливает отношение доверия с другим доменом, который " +"становится \"доверенным\". В результате пользователи доверенного домена " +"получают доступ к ресурсам этого домена.\n" +"\n" +"В текущей версии поддерживаются только отношения доверия с доменами Active " +"Directory.\n" +"\n" +"Команду можно безопасно запускать несколько раз для одного и того же домена, " +"такой запуск приводит к изменению учётных данных отношения доверия на обеих " +"сторонах.\n" +"\n" +"Если команда уже выполнялась с определённым типом диапазона или с " +"автоматическим определением типа диапазона, а теперь необходимо настроить " +"другой тип диапазона, возможно, потребуется сначала удалить диапазон " +"идентификаторов с помощью команды ipa idrange-del. Затем повторите команду с " +"необходимым типом диапазона.\n" +"\n" +" " + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" +"Тип диапазона идентификаторов доверенного домена, одно из разрешённых " +"значений" + +msgid "External trust" +msgstr "Внешнее отношение доверия" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Установить внешнее отношение доверия с доменом в другом лесу. Отношение " +"доверия не является транзитивным за пределами этого домена." + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" +"Добавлено отношение доверия Active Directory для области (realm) \"%(value)s" +"\"" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Повторно установлено отношение доверия с доменом \"%(value)s\"" + +msgid "missing base_id" +msgstr "отсутствует base_id" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "pysss_murmur недоступен на сервере, base-id не предоставлен." + +msgid "trust type" +msgstr "тип отношения доверия" + +msgid "only \"ad\" is supported" +msgstr "предусмотрена поддержка только \"ad\"" + +msgid "domain" +msgstr "домен" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"Невозможно установить отношение доверия с AD, развёрнутой в том же домене, " +"что и IPA. Поддержка такой настройки не предусмотрена." + +msgid "Realm-domain mismatch" +msgstr "Несоответствие области (realm) и домена" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Для установления отношения доверия с Active Directory имя домена и имя " +"области (realm) IPA-сервера должны совпадать" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"Доверенный домен %(domain)s находится среди доменов области (realm) IPA. Его " +"необходимо удалить до установления отношения доверия. Смотрите команду \"ipa " +"realmdomains-mod --del-domain\"." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"Доверенным доменом и учётной записью администратора используются разные " +"области (realms)" + +msgid "Realm administrator password should be specified" +msgstr "Следует указать пароль администратора области (realm)" + +msgid "id range type" +msgstr "тип диапазона идентификаторов" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"При добавлении отношения доверия AD значениями --range-type могут быть " +"только ipa-ad-trust или ipa-ad-trust-posix." + +msgid "id range" +msgstr "диапазон идентификаторов" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Для этого отношения доверия уже существует диапазон идентификаторов. Следует " +"либо удалить старый диапазон, либо исключить из команды параметры --base-" +"id/--range-size." + +msgid "range exists" +msgstr "диапазон существует" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Уже существует диапазон идентификаторов с тем же именем, но другим SID " +"домена. Диапазон идентификаторов для нового доверенного домена необходимо " +"создать вручную." + +msgid "range type change" +msgstr "изменение типа диапазона" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"Диапазон идентификаторов для доверенного домена уже существует, но имеет " +"другой тип. Удалите старый диапазон вручную или не устанавливайте тип " +"принудительно с помощью параметра --range-type." + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "Не удалось определить контроллер домена для домена {domain}. " + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"В DNS IPA определена соответствующая политика перенаправления. Возможно, " +"перенаправитель указывает на некорректный узел?" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" +"IPA управляет DNS. Проверьте вашу конфигурацию DNS и убедитесь, что " +"настройки позволяют определять адреса служебных записей домена \"{domain}\". " +"Примеры настройки DNS с помощью команд CLI или веб-интерфейса доступны в " +"документации. " + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" +"Поскольку IPA не управляет записями DNS, следует настроить DNS так, чтобы " +"система определяла адрес домена \"{domain}\" по данным узлов IPA и наоборот." + +msgid "Unable to verify write permissions to the AD" +msgstr "Не удалось проверить разрешения на запись в AD" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" +"Указано недостаточно аргументов для выполнения настройки отношения доверия" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Удалено отношение доверия \"%(value)s\"" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Изменить отношение доверия (для будущего использования).\n" +"\n" +" В текущей версии для изменения атрибутов LDAP доступен только параметр " +"по умолчанию. В последующих версиях будут добавлены более специфичные " +"параметры.\n" +" " + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" +"Изменено отношение доверия \"%(value)s\" (изменения будут применены через 60 " +"секунд)" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "установлено соответствие %(count)d отношения доверия" +msgstr[1] "установлено соответствие %(count)d отношений доверия" +msgstr[2] "установлено соответствие %(count)d отношений доверия" + +msgid "trust configuration" +msgstr "конфигурация отношений доверия" + +msgid "Global Trust Configuration" +msgstr "Глобальная конфигурация отношений доверия" + +msgid "IPA AD trust agents" +msgstr "Агенты отношений доверия AD IPA" + +msgid "IPA servers configured as AD trust agents" +msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" + +msgid "IPA AD trust controllers" +msgstr "Контролёры отношений доверия AD IPA" + +msgid "IPA servers configured as AD trust controllers" +msgstr "IPA-серверы, настроенные в качестве контролёров отношений доверия AD" + +msgid "unsupported trust type" +msgstr "неподдерживаемый тип отношения доверия" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Изменена конфигурация отношений доверия \"%(value)s\"" + +msgid "SID" +msgstr "Идентификатор безопасности (SID)" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Для выполнения этой команды должна существовать группа \"editors\", но такая " +"группа не найдена." + +msgid "trust domain" +msgstr "надёжный домен" + +msgid "trust domains" +msgstr "надёжные домены" + +msgid "Trusted domains" +msgstr "Доверенные домены" + +msgid "Trusted domain" +msgstr "Доверенный домен" + +msgid "Domain enabled" +msgstr "Домен включён" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Удалены сведения о доверенном домене \"%(value)s\"" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"невозможно удалить корневой домен отношения доверия, используйте trust-del " +"для удаления самого отношения доверия" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Список надёжных доменов успешно обновлён. Используйте команду trustdomain-" +"find для вывода этого списка." + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Configure this server as a trust agent." +msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "запрещено изменять записи пользователей" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Включён надёжный домен \"%(value)s\"" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"Корневой домен отношения доверия всегда включён для существующего доверия" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Отключён надёжный домен \"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"невозможно отключить корневой домен отношения доверия, используйте trust-del " +"для удаления самого отношения доверия" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" +"\n" +"Сопоставление сертификатов с записями пользователей\n" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" +"\n" +"Управление конфигурацией и правилами сопоставления сертификатов с записями " +"пользователей.\n" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" +"\n" +"В IPA предусмотрена поддержка использования сертификатов для аутентификации. " +"Сертификаты могут храниться или в записи пользователя (весь сертификат в " +"атрибуте usercertificate), или просто привязываться к записи пользователя " +"путём сопоставления. С помощью этого кода можно управлять правилами, которые " +"позволяют связывать сертификат с записью пользователя.\n" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +"Показать глобальную конфигурацию сопоставления сертификатов с записями " +"пользователей:\n" +" ipa certmapconfig-show\n" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" +"\n" +" Изменить глобальную конфигурацию сопоставления сертификатов с записями " +"пользователей:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" +"\n" +" Создать новое правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" +"\n" +" Изменить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" +"\n" +" Отключить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-disable rule1\n" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" +"\n" +" Включить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-enable rule1\n" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"\n" +" Показать сведения о правиле сопоставления сертификатов с записями " +"пользователей:\n" +" ipa certmaprule-show rule1\n" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" +"\n" +" Найти все правила сопоставления сертификатов с записями пользователей в " +"указанном домене:\n" +" ipa certmaprule-find --domain example.com\n" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" +"\n" +" Удалить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-del rule1\n" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" +"Домен(ы) \"%s\" не могут использоваться для применения проверки " +"altSecurityIdentities." + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" +"Правило сопоставления с altSecurityIdentities должно применяться к " +"доверенному домену Active Directory, но с правилом не был связан ни один " +"домен." + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "Домен %s не является ни доменом IPA, ни доверенным доменом." + +msgid "Certificate Identity Mapping configuration options" +msgstr "" +"Параметры конфигурации сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" +"Глобальная конфигурация сопоставления сертификатов с записями пользователей" + +msgid "Prompt for the username" +msgstr "Запрос имени пользователя" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" +"Запрашивать имя пользователя, когда с сертификатом сопоставляются несколько " +"записей пользователей" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" +"Изменить конфигурацию сопоставления сертификатов с записями пользователей." + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" +"Показать текущую конфигурацию сопоставления сертификатов с записями " +"пользователей." + +msgid "Certificate Identity Mapping Rules" +msgstr "Правила сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rule" +msgstr "Правило сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rule name" +msgstr "Имя правила сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rule description" +msgstr "Описание правила сопоставления сертификатов с записями пользователей" + +msgid "Mapping rule" +msgstr "Правило сопоставления" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" +"Правило, которое используется для сопоставления сертификата с записью " +"пользователя" + +msgid "Matching rule" +msgstr "Правило соответствия" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" +"Правило, которое используется для определения того, пригоден ли сертификат " +"для аутентификации" + +msgid "Domain where the user entry will be searched" +msgstr "Домен, в котором будет выполняться поиск записи пользователя" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "Приоритет правила (чем больше число, тем ниже приоритет)" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" +"Создать новое правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Добавлено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Изменить правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Изменено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Поиск правил сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +"установлено соответствие %(count)d правила сопоставления сертификатов с " +"записями пользователей" +msgstr[1] "" +"установлено соответствие %(count)d правил сопоставления сертификатов с " +"записями пользователей" +msgstr[2] "" +"установлено соответствие %(count)d правил сопоставления сертификатов с " +"записями пользователей" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" +"Показать сведения о правиле сопоставления сертификатов с записями " +"пользователей." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Удалить правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Удалено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "Включить правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Включено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Отключить правило сопоставления сертификатов с записями пользователей." + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Отключено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" +"Не удалось установить соединение с sssd с помощью SystemBus. Подробные " +"сведения доступны в файле error_log" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Не удалось найти пользователей с помощью SystemBus. Подробные сведения " +"доступны в файле error_log" + +msgid "User logins" +msgstr "Имена входа пользователя" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" +"\n" +" Поиск пользователей, соответствующих предоставленному сертификату.\n" +"\n" +" Чтобы получить список соответствующих пользователей, эта команда " +"использует данные SSSD, следовательно, она может возвращать кэшированные " +"данные. Подробнее об очистке кэша SSSD можно узнать из документации к " +"sss_cache.\n" +" " + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "установлено соответствие %(count)s пользователя" +msgstr[1] "установлено соответствие %(count)s пользователей" +msgstr[2] "установлено соответствие %(count)s пользователей" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" +"невозможно добавить разрешение \"%(perm)s\" с типом привязки \"%(bindtype)s" +"\" в привилегию" + +msgid "Privilege" +msgstr "Привилегия" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Добавлена привилегия \"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Удалена привилегия \"%(value)s\"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Изменена привилегия \"%(value)s\"" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "установлено соответствие %(count)d привилегии" +msgstr[1] "установлено соответствие %(count)d привилегий" +msgstr[2] "установлено соответствие %(count)d привилегий" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" +"\n" +"Сеансовая поддержка для IPA\n" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" +"\n" +"Службы\n" +"\n" +"Служба IPA — это служба, которая выполняется на узле. В записи службы IPA " +"могут храниться данные учётной записи Kerberos, SSL-сертификата или оба " +"набора данных.\n" +"\n" +"Службой IPA можно управлять непосредственно с компьютера, если системе этого " +"компьютера предоставлены соответствующие права доступа. Это касается даже " +"компьютеров, отличных от тех, с которыми связана эта служба. Например, " +"запрос SSL-сертификата с помощью учётных данных учётной записи службы узла. " +"Чтобы управлять службой с помощью учётных данных узла, следует запустить " +"команду kinit от имени узла:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Добавление службы IPA позволяет связанной службе запрашивать SSL-сертификаты " +"и таблицы ключей, но создание самих запросов является отдельным шагом: " +"соответствующие данные не создаются в результате простого добавления " +"службы.\n" +"\n" +"В записи службы хранятся только открытые данные сертификата; закрытый ключ " +"не сохраняется.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую службу IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Разрешить узлу управлять сертификатом службы IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Переопределить список по умолчанию, который содержит поддерживаемые типы " +"PAC для службы:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +"Такое переопределение типа PAC необходимо, например, для работы NFS. В " +"текущей версии соответствующий код в ядре Linux может работать только с " +"билетами Kerberos, размер которых не превышает максимально заданного. Так " +"как данные PAC могут быть довольно объёмными, для служб NFS рекомендуется " +"установить --pac-type=NONE.\n" +"\n" +" Удалить службу IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Найти все службы IPA, связанные с узлом:\n" +" ipa service-find web.example.com\n" +"\n" +" Найти все службы HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Отключить ключ Kerberos и SSL-сертификат службы:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Запросить сертификат для службы IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" +"\n" +" Разрешить пользователю создавать таблицу ключей:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" +"\n" +"Создать и получить таблицу ключей для службы IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" + +msgid "Trusted to authenticate as user" +msgstr "Доверие для аутентификации в качестве пользователя" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "Службе разрешена аутентификация от имени клиента" + +msgid "Malformed principal" +msgstr "Недопустимая учётная запись" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "служба" + +msgid "services" +msgstr "службы" + +msgid "Service principal alias" +msgstr "Псевдоним учётной записи службы" + +msgid "Base-64 encoded service certificate" +msgstr "Base-64 шифрованный сертификат службы" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "Значение NONE нельзя сочетать с другими типами PAC" + +msgid "Add a new IPA service." +msgstr "Добавить новую службу IPA." + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Добавлена служба \"%(value)s\"" + +msgid "force principal name even if host not in DNS" +msgstr "" +"Принудительно установить значение имени учётной записи, даже если узла нет в " +"DNS" + +msgid "Skip host check" +msgstr "Пропустить проверку узла" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" +"Принудительно создать службу, даже если объект узла для управления ей не " +"существует" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "Узел \"%s\", в который следовало добавить службу, не существует." + +msgid "Add a new SMB service." +msgstr "Добавить новую службу SMB." + +msgid "SMB service NetBIOS name" +msgstr "Имя NetBIOS службы SMB" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Удалена служба \"%(value)s\"" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Изменена служба \"%(value)s\"" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "установлено соответствие %(count)d службы" +msgstr[1] "установлено соответствие %(count)d служб" +msgstr[2] "установлено соответствие %(count)d служб" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Отключена служба \"%(value)s\"" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Добавлены сертификаты в учётную запись службы \"%(value)s\"" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Удалены сертификаты из учётной записи службы \"%(value)s\"" + +msgid "Add new principal alias to a service" +msgstr "Добавить новый псевдоним учётной записи в запись службы." + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Добавлены новые псевдонимы в учётную запись службы \"%(value)s\"" + +msgid "Remove principal alias from a service" +msgstr "Удалить псевдоним учётной записи из службы." + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Удалены псевдонимы учётной записи службы \"%(value)s\"" + +msgid "delegation" +msgstr "делегирование" + +msgid "delegations" +msgstr "делегирования" + +msgid "Delegations" +msgstr "Делегирования" + +msgid "Delegation" +msgstr "Делегирование" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "Добавлено делегирование \"%(value)s\"" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "Удалено делегирование \"%(value)s\"" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "Изменено делегирование \"%(value)s\"" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "установлено соответствие %(count)d делегирования" +msgstr[1] "установлено соответствие %(count)d делегирований" +msgstr[2] "установлено соответствие %(count)d делегирований" + +msgid "The deny type has been deprecated." +msgstr "Тип \"deny\" больше не поддерживается." + +msgid "HBAC rules" +msgstr "правила HBAC" + +msgid "HBAC Rules" +msgstr "Правила HBAC" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Добавлено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Удалено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Изменено правило HBAC \"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "установлено соответствие %(count)d правила HBAC" +msgstr[1] "установлено соответствие %(count)d правил HBAC" +msgstr[2] "установлено соответствие %(count)d правил HBAC" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Включено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Отключено правило HBAC \"%(value)s\"" + +msgid "Access time" +msgstr "Время доступа" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Добавить узлы-источники и группы узлов в правило HBAC." + msgid "" "\n" "Simulate use of Host-based access controls\n" @@ -13411,771 +30922,328 @@ msgstr "" " Соответствующие правила: allow_all\n" " Несоответствующие правила: can_login\n" +msgid "Unresolved rules in --rules" +msgstr "Непригодные к обработке правила в --rules" + +#, python-format +msgid "Access granted: %s" +msgstr "Доступ предоставлен: %s" + +msgid "operation not defined" +msgstr "операция не определена" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "не разрешено выполнение операции: %s" + +msgid "No such virtual command" +msgstr "Такая виртуальная команда отсутствует" + +msgid "Member service groups" +msgstr "Группы служб — участники" + +msgid "Member HBAC service groups" +msgstr "Группы служб HBAC — участники" + +#, fuzzy +#| msgid "Remove user ID overrides" +msgid "Member ID user overrides" +msgstr "Удалить переопределения ID пользователя" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "Пользователи с непрямым участием" + +msgid "Indirect Member permissions" +msgstr "Разрешения с непрямым участием" + +msgid "Indirect Member HBAC service" +msgstr "Служба HBAC с непрямым участием" + +msgid "Indirect Member HBAC service group" +msgstr "Группа служб HBAC с непрямым участием" + +msgid "Invalid format. Should be name=value" +msgstr "Неправильный формат. Должно быть имя=значение" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Главный IPA-сервер не может быть удалён или отключён" + +msgid "entry" +msgstr "запись" + +msgid "entries" +msgstr "записи" + +msgid "Entry" +msgstr "Запись" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "запись контейнера (%(container)s) не найдена" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s не найден" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "%(oname)s с именем \"%(pkey)s\" уже существует" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "атрибут \"%(attribute)s\" запрещён" + +#, fuzzy, python-format +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "атрибут \"%s\" нельзя использовать" + +msgid "attribute is not configurable" +msgstr "настройка атрибута невозможна" + +msgid "No such attribute on this entry" +msgstr "В этой записи нет такого атрибута" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Переименовать объект %(ldap_obj_name)s" + +msgid "the entry was deleted while being modified" +msgstr "запись была удалена во время внесения изменений" + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "%s для добавления" + +#, python-format +msgid "%s to remove" +msgstr "%s для удаления" + +#, python-format msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" -"\n" -"Неподтверждённые пользователи\n" -"\n" -"Управление записями неподтверждённых пользователей.\n" -"\n" -"Записи неподтверждённых пользователей находятся непосредственно в " -"контейнере: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\". Пользователь не может проходить " -"аутентификацию с помощью этих записей (даже если они содержат учётные " -"данные), они являются кандидатами на преобразование в активные записи. \n" -"\n" -"Активные записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователь может " -"проходить аутентификацию с помощью активных записей, если они содержат " -"учётные данные.\n" -"\n" -"Удалённые записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=deleted users, cn=accounts, " -"cn=provisioning, SUFFIX\". Пользователь не может проходить аутентификацию с " -"помощью этих записей (даже если они содержат учётные данные).\n" -"\n" -"Контейнер неподтверждённых пользователей содержит записи:\n" -" - созданные с помощью команд \"stageuser-add\", которые являются " -"пользователями Posix\n" -" - созданные с помощью внешней системы подготовки \n" -"\n" -"Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать следующим " -"требованиям:\n" -" - RDN записи имеет значение \"uid\"\n" -" - ipaUniqueID имеет значение \"autogenerate\"\n" -"\n" -"IPA поддерживает широкий спектр форматов имён пользователей, но следует " -"учитывать те ограничения, которые могут существовать в конкретной среде. " -"Например, имена пользователей, которые начинаются с цифры или превышают " -"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" -"Используйте команду \"ipa config-mod\" для изменения формата имени " -"пользователя, разрешённого средствами IPA.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить нового неподтверждённого пользователя:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Добавить неподтверждённого пользователя из контейнера Delete:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "Поиск %(searched_object)s с этими %(relationship)s %(ldap_object)s." + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "Поиск %(searched_object)s без этих %(relationship)s %(ldap_object)s." + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "добавлено значение атрибута в запись %(value)s" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "удалены значения атрибута из записи %(value)s" + +msgid "one or more values to remove" +msgstr "одно или несколько значений, которые следует удалить" msgid "" "\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"Baseuser\n" "\n" +"This contains common definitions for user/stageuser\n" msgstr "" "\n" -"Неподтверждённые пользователи\n" +"Основной пользователь\n" "\n" -"Управление записями неподтверждённых пользователей.\n" -"\n" -"Записи неподтверждённых пользователей находятся непосредственно в " -"контейнере: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\". Пользователи не могут проходить " -"аутентификацию с помощью этих записей (даже если они содержат учётные " -"данные). Эти записи только являются кандидатами на преобразование в активные " -"записи. \n" -"\n" -"Активные записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователи могут " -"проходить аутентификацию с помощью активных записей, если они содержат " -"учётные данные.\n" -"\n" -"Удалённые записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=deleted users, cn=accounts, " -"cn=provisioning, SUFFIX\". Пользователи не могут проходить аутентификацию с " -"помощью этих записей, даже если они содержат учётные данные.\n" -"\n" -"Контейнер неподтверждённых пользователей содержит записи:\n" -" - созданные с помощью команд \"stageuser-add\", которые являются " -"пользователями Posix\n" -" - созданные с помощью внешней системы подготовки \n" -"\n" -"Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать следующим " -"требованиям:\n" -" - RDN записи имеет значение \"uid\"\n" -" - ipaUniqueID имеет значение \"autogenerate\"\n" -"\n" -"IPA поддерживает широкий спектр форматов имён пользователей, но следует " -"учитывать те ограничения, которые могут существовать в конкретной среде. " -"Например, имена пользователей, которые начинаются с цифры или превышают " -"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" -"Используйте команду \"ipa config-mod\" для изменения формата имени " -"пользователя, разрешённого средствами IPA.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить нового неподтверждённого пользователя:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Добавить неподтверждённого пользователя из контейнера удалённых " -"пользователей:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"Содержит общие определения для пользователя или неподтверждённого " +"пользователя\n" + +msgid "must be TRUE or FALSE" +msgstr "должно быть TRUE или FALSE" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" +"Класс объектов ipaNTUserAttrs отсутствует, запись пользователя не может " +"иметь атрибуты SMB." + +msgid "User password expiration" +msgstr "Окончание действия пароля пользователя" + +msgid "SMB logon script path" +msgstr "Путь к сценарию входа SMB" + +msgid "SMB profile path" +msgstr "Путь к профилю SMB" + +msgid "SMB Home Directory" +msgstr "Домашний каталог SMB" + +msgid "SMB Home Directory Drive" +msgstr "Диск домашнего каталога SMB" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "неправильный формат почты: %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "руководитель %(manager)s не найден" + +msgid "Issuer of the certificate" +msgstr "Издатель сертификата" + +msgid "Subject of the certificate" +msgstr "Субъект сертификата" + +msgid "cannot have an empty subject" +msgstr "поле субъекта не может быть пустым" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "невозможно одновременно указать subject/issuer и certificate" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "невозможно одновременно указать subject/issuer и ipacertmapdata" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" +"Добавить одно или несколько сопоставлений сертификатов в запись пользователя." + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" +"Добавлены сопоставления сертификатов в запись пользователя \"%(value)s\"" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" +"Удалить одно или несколько сопоставлений сертификатов из записи пользователя." + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" +"Удалены сопоставления сертификатов из записи пользователя \"%(value)s\"" msgid "" "\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" +"Plugin to make multiple ipa calls via one remote procedure call\n" "\n" -"В стандартном хранилище для передачи и хранения секрета используются " -"безопасные механизмы. Секрет могут получить только те пользователи, у " -"которых есть доступ к хранилищу.\n" +"To run this code in the lite-server\n" "\n" - -msgid "" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" +"where the contents of the file batch_request.json follow the below example\n" "\n" -"Подчинённые службы сертификации (Sub-CA) можно добавлять для выпуска с " -"заданной областью сертификатов X.509.\n" - -msgid "" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" "\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" "\n" -"Sudo (su \"do\") позволяет системному администратору делегировать " -"полномочия, чтобы дать определённым пользователям (или группам " -"пользователей) возможность выполнять некоторые (или все) команды от имени " -"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -"журнал аудита команд и их аргументов.\n" - -msgid "" "\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" -"\n" -"Команды Sudo \n" -"\n" -"Команды, которые используются в качестве строительных блоков для Sudo\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать новую команду\n" -" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" -"\n" -" Удалить команду\n" -" ipa sudocmd-del /usr/bin/less\n" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" +"And then a nested response for each IPA command method sent in the request\n" "\n" msgstr "" "\n" -"Команды Sudo \n" +"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " +"удалённого вызова процедур \n" "\n" -"Команды, которые используются в качестве строительных блоков для Sudo\n" +"Чтобы запустить этот код на легком сервере (lite-server), выполните " +"следующие команды:\n" "\n" -"ПРИМЕРЫ:\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" "\n" -" Создать новую команду\n" -" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" +"где содержимое файла batch_request.json соответствует следующему примеру\n" "\n" -" Удалить команду\n" -" ipa sudocmd-del /usr/bin/less\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" "\n" +"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " +"уровне:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далее находится вложенный ответ для каждого метода команды IPA, " +"отправленного в запросе\n" -msgid "" -"\n" -"Sudo Rules\n" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -"\n" -"Правила Sudo\n" +"Совершать несколько вызовов ipa с помощью одного удалённого вызова процедур " + +msgid "must contain a tuple (list, dict)" +msgstr "должно содержать кортеж (список, словарь)" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Добавлен пользователь \"%(value)s\"" + +msgid "Default group for new users is not POSIX" +msgstr "Группа по умолчанию для новых пользователей не является POSIX-группой" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Удален пользователь \"%(value)s\"" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: пользователь уже хранится" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Изменён пользователь \"%(value)s\"" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Учётная запись пользователя \"%(value)s\" возвращена после удаления" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "пользователь \"%s\" уже активен" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Учётная запись неподтверждённого пользователя \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Учётная запись пользователя \"%(value)s\" отключена" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Учётная запись пользователя \"%(value)s\" включена" msgid "" "\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -"Правила Sudo\n" -"\n" -"Sudo (su \"do\") позволяет системному администратору делегировать " -"полномочия, чтобы дать определённым пользователям (или группам " -"пользователей) возможность выполнять некоторые (или все) команды от имени " -"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -"журнал аудита команд и их аргументов.\n" -"\n" -"IPA предоставляет возможности настройки различных аспектов Sudo:\n" -" Users: пользователь (пользователи) или группа (группы), которые могут " -"вызывать Sudo.\n" -" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " -"вызывать Sudo.\n" -" Allow Command: конкретная команда (команды), которые разрешены для " -"выполнения с помощью Sudo. \n" -" Deny Command: конкретная команда (команды), которые запрещены для " -"выполнения с помощью Sudo.\n" -" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " -"от имени которых Sudo будет выполнять команды.\n" -" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -"команды.\n" -" Options: различные параметры sudoers (участники Sudo), которые могут " -"изменить поведение Sudo.\n" -"\n" -"Правилу Sudo можно добавить порядок, который будет руководить порядком " -"обработки записей (если такой порядок предусмотрен на клиентской стороне). " -"Порядок определяется числовым индексом (целое число), который не должен " -"повторяться.\n" -"\n" -"IPA предусматривает специальную привязку DN (binddn) для использования с " -"Sudo:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать новое правило:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Добавить объект команды Sudo и добавить его в правило в качестве " -"разрешённой команды:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Добавить узел в правило:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Добавить пользователя в правило:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Добавить специальное правило Sudo для конфигурации сервера Sudo по " -"умолчанию:\n" -" ipa sudorule-add defaults\n" -"\n" -" Указать параметр Sudo по умолчанию:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" -"\n" -"Правила Sudo\n" -"\n" -"Sudo (su \"do\") позволяет системному администратору делегировать " -"полномочия, чтобы дать определённым пользователям (или группам " -"пользователей) возможность выполнять некоторые (или все) команды от имени " -"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -"журнал аудита команд и их аргументов.\n" -"\n" -"IPA предоставляет возможности настройки различных аспектов Sudo:\n" -" Users: пользователь (пользователи) или группа (группы), которые могут " -"вызывать Sudo.\n" -" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " -"вызывать Sudo.\n" -" Allow Command: конкретная команда (команды), которые разрешены для " -"выполнения с помощью Sudo. \n" -" Deny Command: конкретная команда (команды), которые запрещены для " -"выполнения с помощью Sudo.\n" -" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " -"от имени которых Sudo будет выполнять команды.\n" -" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -"команды.\n" -" Options: различные параметры sudoers (участники Sudo), которые могут " -"изменить поведение Sudo.\n" -"\n" -"Правилу Sudo можно добавить порядок, который будет руководить порядком " -"обработки записей (если такой порядок предусмотрен на клиентской стороне). " -"Порядок определяется числовым индексом (целое число), который не должен " -"повторяться.\n" -"\n" -"IPA предусматривает специальную привязку DN (binddn) для использования с " -"Sudo:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"Дополнительные сведения приведены в документации IPA по Sudo.\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью пароля. Секрет можно " -"получить только с помощью этого пароля.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"Команду automember-rebuild можно использовать, чтобы задним числом применить " -"правила автоучастия в отношении уже существующих записей; это перестроит их " -"участие.\n" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"Формат даты: ГГГГ-мм-дд.\n" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" -"\n" -"Система выдачи сертификатов Dogtag Certificate System использует только " -"значение CN в CSR и принудительно устанавливает остальные параметры субъекта " -"в соответствии со значениями, настроенными на сервере.\n" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" -"\n" -"Поддерживаются следующие причины отзыва:\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" -"\n" -"Роль может находиться в одном из следующих состояний: включена, настроена " -"или отсутствует.\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"Существует ряд разрешённых целей:\n" -"1. subtree: DN; разрешение применяется к поддереву под этим DN.\n" -"2. target filter: фильтр LDAP.\n" -"3. target: DN с возможными подстановочными знаками, определяет записи, к " -"которым применяется разрешение.\n" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" -"\n" -"Существует много структурированных типов записей ресурсов DNS, для которых " -"данные DNS, хранящиеся на сервере LDAP, являются не просто скалярным " -"значением, например IP-адрес или имя домена, а структурой данных, которая " -"часто может быть сложной. Примером может быть запись LOC [RFC1876], которая " -"состоит из многих обязательных и необязательных частей (градусов, минут, " -"секунд широты и долготы, высоты и погрешности).\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" -"\n" -"Этот код является расширением подключаемого модуля otptoken и предоставляет " -"поддержку прямого чтения или записи токенов YubiKey.\n" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" -"\n" -"Чтобы проверить, что ни один сервер не отключается в топологии указанного " -"суффикса, используйте эту команду:\n" -" ipa topologysuffix-verify $suffix\n" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" -"\n" -"Топология\n" -"\n" -"Управление топологией репликации на уровне домена 1.\n" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -"Топология\n" -"\n" -"Управление топологией репликации на уровне домена 1.\n" -"\n" -"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" -"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " -"связанные с доменом данные\n" -"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " -"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" -"\n" -"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" -"серверы. Способ репликации определяется соглашениями о репликации. " -"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " -"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " -"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " -"выполняется централизованно с помощью команд \"ipa topology*\".\n" -"\n" -"Соглашения представляются сегментами топологии. По умолчанию сегмент " -"топологии представляет 2 соглашения о репликации: по одному для каждого " -"направления, например, от A до B и от B до A. Создание однонаправленных " -"сегментов запрещено.\n" -"\n" -"Чтобы проверить, что ни один сервер не отключается в топологии указанного " -"суффикса, используйте эту команду:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Примеры:\n" -" Найти все IPA-серверы:\n" -" ipa server-find\n" -"\n" -" Найти все суффиксы:\n" -" ipa topologysuffix-find\n" -"\n" -" Добавить сегмент топологии в суффикс \"domain\":\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Добавить сегмент топологии в суффикс \"ca\":\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" -" ipa topologysegment-find domain\n" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" -" ipa topologysegment-find ca\n" -"\n" -" Удалить сегмент топологии в суффиксе \"domain\":\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Удалить сегмент топологии в суффиксе \"ca\":\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Проверить топологию суффикса \"domain\":\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Проверить топологию суффикса \"ca\":\n" -" ipa topologysuffix-verify ca\n" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" -"\n" -"Топология\n" -"\n" -"Управление топологией репликации.\n" -"\n" -"Требуется уровень домена не ниже 1.\n" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" -"\n" -"ИСПОЛЬЗОВАНИЕ СТРУКТУРИРОВАННЫХ ПАРАМЕТРОВ ДЛЯ ОТДЕЛЬНЫХ ТИПОВ\n" - -msgid "" -"\n" -"Unlock a user account\n" +" Unlock a user account\n" "\n" " An account may become locked if the password is entered incorrectly too\n" " many times within a specific time period as controlled by password\n" " policy. A locked account is a temporary condition and may be unlocked " "by\n" -" an administrator.\n" -" " +" an administrator." msgstr "" "\n" "Разблокировка учётной записи пользователя.\n" @@ -14185,1871 +31253,144 @@ msgstr "" "(соответствующие ограничения регулируются политикой паролей). Запись " "блокируется временно, она может быть разблокирована администратором." -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Хранилища пользователей — это хранилища, владельцем которых является " -"конкретный пользователь. Личными являются хранилища, владельцем которых " -"является текущий пользователь. Владельцем хранилища службы является " -"определённая служба. Хранилища совместного использования принадлежат " -"администратору, но могут использоваться другими пользователями или " -"службами.\n" +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Учётная запись \"%(value)s\" разблокирована" + +msgid "Failed logins" +msgstr "Неудачные попытки входа" + +msgid "Last successful authentication" +msgstr "Последняя успешная аутентификация" + +msgid "Last failed authentication" +msgstr "Последняя ошибка при аутентификации" + +msgid "Time now" +msgstr "Время сейчас" msgid "" "\n" -"Users\n" +" Lockout status of a user account\n" "\n" -"Manage user entries. All users are POSIX users.\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" "\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" "\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" "\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " msgstr "" "\n" -"Пользователи\n" -"\n" -"Управление записями пользователей. Все пользователи являются POSIX-" -"пользователями.\n" -"\n" -"IPA поддерживает широкий спектр форматов имён пользователей, но следует " -"учитывать те ограничения, которые могут существовать в конкретной среде. " -"Например, имена пользователей, которые начинаются с цифры или превышают " -"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" -"Используйте команду \"ipa config-mod\" для изменения формата имени " -"пользователя, разрешённого средствами IPA.\n" -"\n" -"Отключение учётной записи пользователя сделает невозможным получение таким " -"пользователем новых учётных данных Kerberos. Это не сделает " -"недействительными те учётные данные, которые уже были предоставлены.\n" -"\n" -"Управление паролями не входит в этот модуль. Дополнительные сведения можно " -"получить с помощью команды ipa help passwd\n" -"\n" -"Блокировка учётной записи при ошибке пароля выполняется на одном из главных " -"IPA-серверов. Чтобы определить, на каком главном сервере заблокирован " -"пользователь, можно использовать команду user-status.\n" -"На этом главном сервере администратор должен разблокировать пользователя:\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить нового пользователя:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Найти всех пользователей, записи которых содержат строку \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Найти всех пользователей, в записях \"Tim\" является именем:\n" -" ipa user-find --first=Tim\n" -"\n" -" Отключить учётную запись пользователя:\n" -" ipa user-disable tuser1\n" -"\n" -" Включить учётную запись пользователя:\n" -" ipa user-enable tuser1\n" -"\n" -" Удалить пользователя:\n" -" ipa user-del tuser1\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" -"\n" -"Хранилище — это безопасное место для хранения секрета. В одном хранилище " -"может храниться только один секрет. При архивировании секрета в хранилище " -"существующий секрет (если имеется) будет перезаписан.\n" - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Хранилища\n" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -"Хранилища\n" -"\n" -"Управление хранилищами.\n" -"\n" -"Хранилище — это безопасное место для хранения секрета.\n" -"\n" -"В зависимости от владения хранилища подразделяются на три категории:\n" -"* хранилища пользователей или личные хранилища\n" -"* хранилища служб\n" -"* хранилища совместного использования\n" -"\n" -"Хранилища пользователей — это хранилища, владельцем которых является " -"конкретный пользователь. Личными являются хранилища, владельцем которых " -"является текущий пользователь. Владельцем хранилища службы является " -"определённая служба. Хранилища совместного использования принадлежат " -"администратору, но могут использоваться другими пользователями или " -"службами.\n" -"\n" -"В зависимости от механизма обеспечения безопасности выделяют три типа " -"хранилищ:\n" -"* стандартные хранилища\n" -"* симметричные хранилища\n" -"* асимметричные хранилища\n" -"\n" -"В стандартном хранилище для передачи и хранения секрета используются " -"безопасные механизмы. Секрет могут получить только те пользователи, у " -"которых есть доступ к хранилищу.\n" -"\n" -"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью пароля. Секрет можно " -"получить только с помощью этого пароля.\n" -"\n" -"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " -"можно получить только с помощью закрытого ключа.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Вывести список хранилищ:\n" -" ipa vault-find\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -"\n" -" Добавить стандартное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type standard\n" -"\n" -" Добавить симметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Добавить асимметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Показать хранилище:\n" -" ipa vault-show <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -"\n" -" Изменить описание хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --desc <описание>\n" -"\n" -" Изменить тип хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старый пароль / закрытый ключ]\n" -" [новый пароль / открытый ключ]\n" -"\n" -" Изменить пароль симметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password <старый пароль>\n" -" --new-password <новый пароль>\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" -"\n" -" Изменить ключи асимметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закрытого ключа>\n" -" --public-key-file <файл нового открытого ключа>\n" -"\n" -" Удалить хранилище:\n" -" ipa vault-del <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -"\n" -" Показать конфигурацию хранилища:\n" -" ipa vaultconfig-show\n" -"\n" -" Архивировать данные в стандартное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" -"\n" -" Архивировать данные в симметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" -" --password-file password.txt\n" -"\n" -" Архивировать данные в асимметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" -"\n" -" Получить данные из стандартного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" -"\n" -" Получить данные из симметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" -" --password-file password.txt\n" -"\n" -" Получить данные из асимметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных> --private-key-file private.pem\n" -"\n" -" Добавить владельцев хранилища:\n" -" ipa vault-add-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" -"\n" -" Удалить владельцев хранилища:\n" -" ipa vault-remove-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" -"\n" -" Добавить участников хранилища:\n" -" ipa vault-add-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" -"\n" -" Удалить участников хранилища:\n" -" ipa vault-remove-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" -"\n" -"Проверка топологии репликации для суффикса.\n" -"\n" -"Проверки, которые выполняются:\n" -" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " -"репликации между всеми серверами).\n" -" 2. проверка того, не превышено ли рекомендованное количество соглашений о " -"репликации между серверами.\n" -" \n" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" +"Состояние блокировки учётной записи пользователя.\n" +"\n" +" Учётная запись может быть заблокирована, если в течение определённого " +"периода времени слишком большое количество раз был введён неверный пароль " +"(соответствующие ограничения регулируются политикой паролей). Запись " +"блокируется временно, она может быть разблокирована администратором.\n" +"\n" +" Эта программа соединяется с каждым главным IPA-сервером и показывает " +"состояние блокировки на каждом из них.\n" +"\n" +" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " +"потребуется сравнить количество неудачных попыток входа и время последней " +"неудачной попытки с эталонными значениями. Для блокировки учётной записи " +"количество неудачных попыток входа должно превысить значение maxfail в " +"течение временного интервала failinterval в соответствии с политикой " +"паролей, связанной с пользователем.\n" +"\n" +" Счётчик неудачных попыток изменяется только тогда, когда пользователь " +"выполняет попытку войти, поэтому учётная запись может казаться " +"заблокированной, но время, прошедшее с последней неудачной попытки входа, " +"превышает время блокировки (lockouttime), установленное политикой паролей. " +"Это означает, что пользователь может войти в систему снова.\n" " " -msgstr "" -"\n" -"Проверка топологии репликации для суффикса.\n" -"\n" -"Проверки, которые выполняются:\n" -" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " -"репликации между всеми серверами).\n" -" 2. проверка того, не превышено ли рекомендованное количество соглашений о " -"репликации между серверами. \n" -" " - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" -"\n" -"\n" -"При добавлении записи можно воспользоваться параметрами, специально " -"предназначенными для записей ресурсов, или стандартным параметром для " -"необработанного значения (сочетать эти варианты в одном действии по " -"добавлению нельзя). При внесении изменений в существующую запись можно " -"воспользоваться для изменения одной части записи DNS новыми специальными " -"параметрами записей ресурсов, причём для определения изменённого значения " -"будет использован стандартный вариант необработанного значения. В " -"приведенном ниже примере показано изменение приоритета записи MX с 0 на 1 в " -"записи без внесения изменений в обменник:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" -"\n" -"Если поиск выполняется по дате _с, используется сравнение >=, а если " -"выполняется поиск _до — сравнение <=. Сочетание обоих видов поиска приводит " -"к поиску с логической операцией И.\n" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"Токены YubiKey\n" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" -"\n" -"Токены YubiKey\n" -"\n" -"Управление токенами YubiKey.\n" -"\n" -"Этот код является расширением подключаемого модуля otptoken и предоставляет " -"поддержку прямого чтения или записи токенов YubiKey.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новый токен:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" - -msgid " * 0 - unspecified\n" -msgstr " * 0 - не указана\n" - -msgid " * 1 - keyCompromise\n" -msgstr " * 1 - keyCompromise\n" - -msgid " * 10 - aACompromise\n" -msgstr " * 10 - aACompromise\n" - -msgid " * 2 - cACompromise\n" -msgstr " * 2 - cACompromise\n" - -msgid " * 3 - affiliationChanged\n" -msgstr " * 3 - affiliationChanged\n" - -msgid " * 4 - superseded\n" -msgstr " * 4 - superseded\n" - -msgid " * 5 - cessationOfOperation\n" -msgstr " * 5 - cessationOfOperation\n" - -msgid " * 6 - certificateHold\n" -msgstr " * 6 - certificateHold\n" - -msgid " * 8 - removeFromCRL\n" -msgstr " * 8 - removeFromCRL\n" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr " * 9 - privilegeWithdrawn\n" - -msgid " ipa --help" -msgstr " ipa <команда> --help" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr " -8 '${cn}'" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -" Кроме того, выполнить эту команду могут следующие серверы: %(masters)s" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\" не является корректным типом разрешения" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\" не является типом объекта" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "Имеется сертификатов: ${count}" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "Добавлено записей: ${count}" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "Удалено записей: ${count}" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "Отключено записей: ${count}" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "Включено записей: ${count}" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "Удалено записей: ${count}" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "Удалено параметров: ${count}" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "Активировано пользователей: ${count}" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "Восстановлено пользователей: ${count}" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "Пользователей, сделанных неподтверждёнными: ${count}" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Параметры ${primary_key} ${entity}" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "Обновлено ${primary_key} ${entity}" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "Успешно добавлено ${entity}" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} применяется к:" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} является участником:" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} управляется:" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "Участники ${primary_key}:" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key} переопределяет:" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, версия: ${version}" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s не содержит \"%(value)s\"" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: неправильный синтаксис." - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: допустимо только одно значение." - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(command_name)s: %(oname)s не найден" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"Поиск LDAP в %(container)s не вернул никаких результатов (основа поиска: " -"%(search_base)s, класс объектов: %(objectclass)s)" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -"Пропущена %(count)d %(type)s запись. Одновременно можно изменить только одно " -"значение на тип записи DNS." -msgstr[1] "" -"Пропущено %(count)d %(type)s записей. Одновременно можно изменить только " -"одно значение на тип записи DNS." -msgstr[2] "" -"Пропущено %(count)d %(type)s записей. Одновременно можно изменить только " -"одно значение на тип записи DNS." - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "установлено соответствие %(count)d ACI" -msgstr[1] "установлено соответствие %(count)d ACI" -msgstr[2] "установлено соответствие %(count)d ACI" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "установлено соответствие %(count)d CA ACL" -msgstr[1] "установлено соответствие %(count)d CA ACL" -msgstr[2] "установлено соответствие %(count)d CA ACL" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "установлено соответствие %(count)d CA" -msgstr[1] "установлено соответствие %(count)d CA" -msgstr[2] "установлено соответствие %(count)d CA" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -"установлено соответствие %(count)d правила сопоставления сертификатов с " -"записями пользователей" -msgstr[1] "" -"установлено соответствие %(count)d правил сопоставления сертификатов с " -"записями пользователей" -msgstr[2] "" -"установлено соответствие %(count)d правил сопоставления сертификатов с " -"записями пользователей" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "установлено соответствие %(count)d DNS-сервера" -msgstr[1] "установлено соответствие %(count)d DNS-серверов" -msgstr[2] "установлено соответствие %(count)d DNS-серверов" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "установлено соответствие %(count)d переопределения ID группы" -msgstr[1] "установлено соответствие %(count)d переопределений ID группы" -msgstr[2] "установлено соответствие %(count)d переопределений ID группы" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "установлено соответствие %(count)d правила HBAC" -msgstr[1] "установлено соответствие %(count)d правил HBAC" -msgstr[2] "установлено соответствие %(count)d правил HBAC" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "установлено соответствие %(count)d группы служб HBAC" -msgstr[1] "установлено соответствие %(count)d групп служб HBAC" -msgstr[2] "установлено соответствие %(count)d групп служб HBAC" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "установлено соответствие %(count)d службы HBAC" -msgstr[1] "установлено соответствие %(count)d служб HBAC" -msgstr[2] "установлено соответствие %(count)d служб HBAC" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "установлено соответствие %(count)d представления ID" -msgstr[1] "установлено соответствие %(count)d представлений ID" -msgstr[2] "установлено соответствие %(count)d представлений ID" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "установлено соответствие %(count)d переопределения ID" -msgstr[1] "установлено соответствие %(count)d переопределений ID" -msgstr[2] "установлено соответствие %(count)d переопределений ID" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "установлено соответствие %(count)d расположения IPA" -msgstr[1] "установлено соответствие %(count)d расположений IPA" -msgstr[2] "установлено соответствие %(count)d расположений IPA" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "установлено соответствие %(count)d IPA-сервера" -msgstr[1] "установлено соответствие %(count)d IPA-серверов" -msgstr[2] "установлено соответствие %(count)d IPA-серверов" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "установлено соответствие %(count)d токена OTP" -msgstr[1] "установлено соответствие %(count)d токенов OTP" -msgstr[2] "установлено соответствие %(count)d токенов OTP" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "установлено соответствие %(count)d прокси-сервера RADIUS" -msgstr[1] "установлено соответствие %(count)d прокси-серверов RADIUS" -msgstr[2] "установлено соответствие %(count)d прокси-серверов RADIUS" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "установлено соответствие %(count)d списка пользователей SELinux" -msgstr[1] "установлено соответствие %(count)d списков пользователей SELinux" -msgstr[2] "установлено соответствие %(count)d списков пользователей SELinux" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "установлено соответствие %(count)d группы команд Sudo" -msgstr[1] "установлено соответствие %(count)d групп команд Sudo" -msgstr[2] "установлено соответствие %(count)d групп команд Sudo" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "установлено соответствие %(count)d команды Sudo" -msgstr[1] "установлено соответствие %(count)d команд Sudo" -msgstr[2] "установлено соответствие %(count)d команд Sudo" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "установлено соответствие %(count)d правила Sudo" -msgstr[1] "установлено соответствие %(count)d правил Sudo" -msgstr[2] "установлено соответствие %(count)d правил Sudo" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "установлено соответствие %(count)d переопределения ID пользователя" -msgstr[1] "установлено соответствие %(count)d переопределений ID пользователя" -msgstr[2] "установлено соответствие %(count)d переопределений ID пользователя" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "установлено соответствие %(count)d ключа автомонтирования" -msgstr[1] "установлено соответствие %(count)d ключей автомонтирования" -msgstr[2] "установлено соответствие %(count)d ключей автомонтирования" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "установлено соответствие %(count)d расположения автомонтирования" -msgstr[1] "установлено соответствие %(count)d расположений автомонтирования" -msgstr[2] "установлено соответствие %(count)d расположений автомонтирования" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -"установлено соответствие %(count)d списка соответствия автомонтирования" -msgstr[1] "" -"установлено соответствие %(count)d списков соответствия автомонтирования" -msgstr[2] "" -"установлено соответствие %(count)d списков соответствия автомонтирования" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "установлено соответствие %(count)d сертификата" -msgstr[1] "установлено соответствие %(count)d сертификатов" -msgstr[2] "установлено соответствие %(count)d сертификатов" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "установлено соответствие %(count)d делегирования" -msgstr[1] "установлено соответствие %(count)d делегирований" -msgstr[2] "установлено соответствие %(count)d делегирований" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "установлено соответствие %(count)d группы" -msgstr[1] "установлено соответствие %(count)d групп" -msgstr[2] "установлено соответствие %(count)d групп" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "установлено соответствие %(count)d узела" -msgstr[1] "установлено соответствие %(count)d узлов" -msgstr[2] "установлено соответствие %(count)d узлов" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "установлено соответствие %(count)d группы узлов" -msgstr[1] "установлено соответствие %(count)d групп узлов" -msgstr[2] "установлено соответствие %(count)d групп узлов" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "установлено соответствие %(count)d сетевой группы" -msgstr[1] "установлено соответствие %(count)d сетевых групп" -msgstr[2] "установлено соответствие %(count)d сетевых групп" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "установлено соответствие %(count)d разрешения" -msgstr[1] "установлено соответствие %(count)d разрешений" -msgstr[2] "установлено соответствие %(count)d разрешений" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "загружен %(count)d подключаемый модуль" -msgstr[1] "загружено %(count)d подключаемых модуля" -msgstr[2] "загружено %(count)d подключаемых модулей" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "установлено соответствие %(count)d привилегии" -msgstr[1] "установлено соответствие %(count)d привилегий" -msgstr[2] "установлено соответствие %(count)d привилегий" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "установлено соответствие %(count)d профиля" -msgstr[1] "установлено соответствие %(count)d профилей" -msgstr[2] "установлено соответствие %(count)d профилей" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "установлено соответствие %(count)d диапазона" -msgstr[1] "установлено соответствие %(count)d диапазонов" -msgstr[2] "установлено соответствие %(count)d диапазонов" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "установлено соответствие %(count)d роли" -msgstr[1] "установлено соответствие %(count)d ролей" -msgstr[2] "установлено соответствие %(count)d ролей" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "установлено соответствие %(count)d правила" -msgstr[1] "установлено соответствие %(count)d правил" -msgstr[2] "установлено соответствие %(count)d правил" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "установлено соответствие %(count)d сегмента" -msgstr[1] "установлено соответствие %(count)d сегментов" -msgstr[2] "установлено соответствие %(count)d сегментов" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "установлено соответствие %(count)d самообслуживания" -msgstr[1] "установлено соответствие %(count)d самообслуживаний" -msgstr[2] "установлено соответствие %(count)d самообслуживаний" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "установлено соответствие %(count)d правила делегирования служб" -msgstr[1] "установлено соответствие %(count)d правил делегирования служб" -msgstr[2] "установлено соответствие %(count)d правил делегирования служб" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "установлено соответствие %(count)d цели делегирования служб" -msgstr[1] "установлено соответствие %(count)d целей делегирования служб" -msgstr[2] "установлено соответствие %(count)d целей делегирования служб" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "установлено соответствие %(count)d службы" -msgstr[1] "установлено соответствие %(count)d служб" -msgstr[2] "установлено соответствие %(count)d служб" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "установлено соответствие %(count)d суффикса топологии" -msgstr[1] "установлено соответствие %(count)d суффиксов топологии" -msgstr[2] "установлено соответствие %(count)d суффиксов топологии" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "установлено соответствие %(count)d отношения доверия" -msgstr[1] "установлено соответствие %(count)d отношений доверия" -msgstr[2] "установлено соответствие %(count)d отношений доверия" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "установлено соответствие %(count)d пользователя" -msgstr[1] "установлено соответствие %(count)d пользователей" -msgstr[2] "установлено соответствие %(count)d пользователей" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d переменных" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "установлено соответствие %(count)d хранилища" -msgstr[1] "установлено соответствие %(count)d хранилищ" -msgstr[2] "установлено соответствие %(count)d хранилищ" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "установлено соответствие %(count)s сервера" -msgstr[1] "установлено соответствие %(count)s серверов" -msgstr[2] "установлено соответствие %(count)s серверов" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "установлено соответствие %(count)s роли сервера" -msgstr[1] "установлено соответствие %(count)s ролей сервера" -msgstr[2] "установлено соответствие %(count)s ролей сервера" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "установлено соответствие %(count)s пользователя" -msgstr[1] "установлено соответствие %(count)s пользователей" -msgstr[2] "установлено соответствие %(count)s пользователей" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" -"%(cver)s версия клиента несовместима с %(sver)s версией сервера \"%(server)s" -"\"" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: файл не найден" - -#, python-format -msgid "%(host)s failed" -msgstr "Ошибка %(host)s" #, python-format msgid "%(host)s failed: %(error)s" msgstr "Ошибка %(host)s: %(error)s" #, python-format -msgid "%(info)s" -msgstr "%(info)s" +msgid "%(host)s failed" +msgstr "Ошибка %(host)s" #, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s невозможно удалить, так как он нужен для %(label)s %(dependent)s" +msgid "Account disabled: %(disabled)s" +msgstr "Учётная запись отключена: %(disabled)s" #, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s не может быть удалён или отключён, потому что является последним в " -"%(label)s %(container)s" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Добавлены сертификаты в запись пользователя \"%(value)s\"" #, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s не может быть удалён или изменён: %(reason)s" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Удалены сертификаты из записи пользователя \"%(value)s\"" + +msgid "Add new principal alias to the user entry" +msgstr "Добавить новый псевдоним учётной записи в запись пользователя." #, python-format -msgid "%(line)s" -msgstr "%(line)s" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Добавлены новые псевдонимы в запись пользователя \"%(value)s\"" + +msgid "Remove principal alias from the user entry" +msgstr "Удалить псевдоним учётной записи из записи пользователя." #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(metaobject)s: %(oname)s не найден" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Удалены псевдонимы из записи пользователя \"%(value)s\"" #, python-format -msgid "%(name)s certificate is not valid" -msgstr "Сертификат %(name)s недействителен" +msgid "all masters must have %(role)s role enabled" +msgstr "на всех главных серверах должна быть включена роль %(role)s" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "Атрибут %(obj)s по умолчанию, %(attr)s, не будет разрешён!" +msgid "must have %(role)s role enabled" +msgstr "должна быть включена роль %(role)s" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "%(oname)s с именем \"%(pkey)s\" уже существует" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" -"%(operation)s не поддерживается для учётных записей %(principal_type)s " - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" не найден(а)" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s не найден" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s не найден" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s не является допустимым портом" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: неверно сформированный сертификат. %(reason)s" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" -"Превышение времени ожидания завершения задачи LDAP %(task)s, DN задачи: " -"\"%(task_dn)s\"" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" -"для категории %(type)s нельзя установить значение \"all\", когда имеются " -"разрешённые %(objects)s" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s не является POSIX-пользователем" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -#, python-format -msgid "%i CA added." -msgstr "Добавлена %i CA." - -#, python-format -msgid "%i CA removed." -msgstr "Удалена %i CA." - -#, python-format -msgid "%i CAs added." -msgstr "Добавлено CA: %i." - -#, python-format -msgid "%i CAs removed." -msgstr "Удалено CA: %i." - -#, python-format -msgid "%i host or hostgroup added." -msgstr "Добавлен %i узел или группа узлов." - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "Удалён %i узел или группа узлов." - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "Добавлено узлов или групп узлов: %i." - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "Удалено узлов или групп узлов: %i." - -#, python-format -msgid "%i profile added." -msgstr "Добавлен %i профиль." - -#, python-format -msgid "%i profile removed." -msgstr "Удалён %i профиль." - -#, python-format -msgid "%i profiles added." -msgstr "Добавлено профилей: %i." - -#, python-format -msgid "%i profiles removed." -msgstr "Удалено профилей: %i." - -#, python-format -msgid "%i service added." -msgstr "Добавлена %i служба." - -#, python-format -msgid "%i service removed." -msgstr "Удалена %i служба." - -#, python-format -msgid "%i services added." -msgstr "Добавлено служб: %i." - -#, python-format -msgid "%i services removed." -msgstr "Удалено служб: %i." - -#, python-format -msgid "%i user or group added." -msgstr "Добавлен %i пользователь или группа." - -#, python-format -msgid "%i user or group removed." -msgstr "Удалён %i пользователь или группа." - -#, python-format -msgid "%i users or groups added." -msgstr "Добавлено пользователей или групп: %i." - -#, python-format -msgid "%i users or groups removed." -msgstr "Удалено пользователей или групп: %i." - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s Record" -msgstr "Запись %s" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s неправильный атрибут" - -#, python-format -msgid "%s record" -msgstr "запись %s" - -#, python-format -msgid "%s to add" -msgstr "%s для добавления" - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s для исключения из миграции" - -#, python-format -msgid "%s to remove" -msgstr "%s для удаления" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "%s: прокси-сервер RADIUS не найден" - -#, python-format -msgid "%s: group not found" -msgstr "%s: группа не найдена" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: пользователь уже хранится" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "'${port}' не является допустимым портом" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "\"%(attr)s\" уже содержит одно или несколько значений" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "\"%(command)s\" не поддерживается. %(additional_info)s" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "\"%(entry)s\" не содержит сертификат." - -#, python-format -msgid "'%(name)s' is required" -msgstr "следует указать \"%(name)s\"" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "Параметр \"%(option)s\" не поддерживается. %(additional_info)s" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "\"%(required)s\" не должно быть пустым, если указано \"%(name)s\"" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "\"%s\" является обязательной частью записи DNS" - -msgid "'add' option" -msgstr "параметр \"add\"" - -msgid "(deprecated)" -msgstr "(больше не поддерживается)" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(подробности доступны в RFC %s)" +msgid "must be enabled only on a single master" +msgstr "должно быть включено только на одном главном сервере" msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" msgstr "" -". Проверьте идентификатор существующей группы. Используйте параметр --group-" -"overwrite-gid для перезаписи идентификатора группы" - -msgid "7 is not a valid revocation reason" -msgstr "7 — неверная причина отзыва сертификата" - -msgid "" -msgstr "<все серверы DNS IPA>" - -msgid "" -"

Browser Kerberos Setup

\n" "\n" -msgstr "" -"

Настройка Kerberos для браузера

\n" +"Классы для управления доверенными присоединениями с помощью вызовов DCE-RPC\n" "\n" +"Код в этом модуле жёстко зависит от содержания пакета samba4-python и " +"привязок для языка Python в Samba4.\n" -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" -"

Перенос пароля

Если вас направил на эту страницу ваш системный " -"администратор, это означает, что ваши личные данные переносятся в новую " -"систему управления идентификацией и учётными записями пользователей (IPA).

Пожалуйста, введите ваши учётные данные в форму, чтобы завершить этот " -"процесс. После успешного выполнения входа ваша учётная запись Kerberos будет " -"активирована.

" +msgid "CIFS server denied your credentials" +msgstr "Ваши регистрационные данные отклонены сервером CIFS" -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" -"

Не удалось проверить ваши учётные данные Kerberos

\n" -"

\n" -" Убедитесь, что у вас имеются действительные билеты (их можно " -"получить через kinit) и правильно настроен браузер.\n" -"

\n" -"\n" -"

Конфигурация браузера

\n" -"\n" -"
\n" -"

\n" -" Если вы используете веб-интерфейс впервые, пожалуйста, настройте ваш браузер.\n" -"

\n" -"
\n" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" -"

Chrome

\n" -"\n" -"

\n" -" Можно настроить Chrome на использование Kerberos для единого " -"входа. Приведённые далее инструкции помогут настроить веб-браузер для " -"отправки ваших учётных данных Kerberos подходящему центру распространения " -"ключей, что позволит выполнять единый вход.\n" -"

\n" -"\n" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" -"

Firefox

\n" -"\n" -"

\n" -" Можно настроить Firefox на использование Kerberos для единого " -"входа. Приведённые далее инструкции помогут настроить веб-браузер для " -"отправки ваших учётных данных Kerberos подходящему центру распространения " -"ключей, что позволит выполнять единый вход.\n" -"

\n" -"\n" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" -"

Internet Explorer

\n" -"

ПРЕДУПРЕЖДЕНИЕ: браузер Internet Explorer больше не " -"поддерживается.

\n" -"

\n" -" После входа в систему на рабочей станции с вашим ключом Kerberos " -"вы сможете использовать этот билет в Internet Explorer.\n" -"

\n" -"

\n" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" -"

Импортировать сертификат центра сертификации

\n" -"
    \n" -"
  1. \n" -" Загрузите сертификат центра сертификации. Либо используйте сертификат /etc/ipa/ca.crt., если узел также является " -"клиентом управления учётными данными.\n" -"
    2. \n" -"
  2. \n" -" Нажмите кнопку меню с подсказкой Настройка и управление " -"Google Chrome (по умолчанию она расположена в правом верхнем углу " -"Chrome) и выберите пункт Настройки.\n" -"
    3. \n" -"
  3. \n" -" Затем нажмите кнопку Показать дополнительные настройки, чтобы просмотреть дополнительные параметры, и нажмите кнопку " -"Настроить сертификаты, которая расположена под заголовком HTTPS/" -"SSL.\n" -"
    4. \n" -"
  4. \n" -" На вкладке Доверенные корневые центры сертификации " -"нажмите кнопку Импорт..., которая расположена в нижней части окна.\n" -"
    5. \n" -"
  5. Выберите файл сертификата центра сертификации, который был загружен вами " -"ранее.
    6. \n" -"
\n" -"\n" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" -" Чтобы войти с помощью Kerberos, убедитесь, что у вас имеются действительные билеты (получить их " -"можно через kinit) и правильно настроен браузер, затем нажмите кнопку \"Войти\"." - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" -" Чтобы войти с помощью " -"сертификата, убедитесь, что у вас имеется действительный " -"личный сертификат. " - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" -" Чтобы войти с помощью имени " -"пользователя и пароля, введите их в соответствующие поля, затем " -"нажмите кнопку \"Войти\"." - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" -"
  1. Создать базу данных сертификатов или использовать существующую. " -"Чтобы создать новую базу данных, выполните команду:
    # certutil -N " -"-d <путь к базе данных>
  2. Создайте CSR с субъектом " -"CN=<${cn_name}>,O=<область (realm)>, например:
    " -"# certutil -R -d <путь к базе данных> -a -g <размер ключа> " -"-s 'CN=${cn},O=${realm}'${san}
  3. Скопируйте и вставьте CSR " -"(от -----BEGIN NEW CERTIFICATE REQUEST----- до -----END NEW " -"CERTIFICATE REQUEST-----) в расположенную ниже область для ввода " -"текста:
" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Если метод не выбран, будет использован неявный метод (пароль).

Пароль + двухфакторная аутентификация: в LDAP и " -"Kerberos предусмотрена аутентификация по одному из этих типов " -"аутентификации, но Kerberos использует метод предварительной " -"аутентификации, который требует использования armor ccache.

RADIUS с другим типом: в Kerberos всегда используется " -"RADIUS, а в LDAP он не используется никогда. LDAP распознаёт только варианты " -"аутентификации по паролю и двухфакторной аутентификации.

" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Параметр для отдельных пользователей переопределяет общее значение, если " -"будет выбран один из вариантов.

Пароль + двухфакторная " -"аутентификация: в LDAP и Kerberos предусмотрена аутентификация по " -"одному из этих типов аутентификации, но Kerberos использует метод " -"предварительной аутентификации, который требует использования armor ccache." -"

RADIUS с другим типом: в Kerberos всегда " -"используется RADIUS, а в LDAP он не используется никогда. LDAP распознаёт " -"только варианты аутентификации по паролю и двухфакторной аутентификации.

" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" -"Войдите на компьютер под управлением Windows с помощью учётной " -"записи вашей области (realm) Kerberos (административный домен)\n" -"

\n" -"

\n" -"В Internet Explorer: выберите в меню \"Инструменты\" пункт " -"\"Параметры Интернета\".\n" -"

\n" -"
\n" -"
    \n" -"
  1. Откройте вкладку \"Безопасность\"
    2. \n" -"
  2. Выберите пункт \"Местная интрасеть\"
    3. \n" -"
  3. Нажмите кнопку \"Узлы...\"
    4. \n" -"
  4. Нажмите кнопку \"Дополнительно\"
    5. \n" -"
  5. Добавьте ваш домен в список
    6. \n" -"
\n" -"
    \n" -"
  1. Откройте вкладку \"Безопасность\"
    2. \n" -"
  2. Выберите пункт \"Местная интрасеть\"
    3. \n" -"
  3. Нажмите кнопку \"Другой...\"
    4. \n" -"
  4. Выберите пункт \"Автоматический вход в сеть только в зоне интрасети\"\n" -"
\n" -"\n" -"
    \n" -"
  1. Посетите веб-сайт, который использует Kerberos, с помощью IE (в URL-" -"адресе необходимо использовать полное имя домена)
    2. \n" -"
  2. Всё готово.
    3. \n" -"
\n" -"
\n" -"\n" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"=======\n" -"ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -"=======\n" - -msgid "A Create reverse" -msgstr "Создать обратную запись A" - -msgid "A IP Address" -msgstr "IP-адрес" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "Разрешение SYSTEM не может быть изменено или удалено" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Разделённый запятыми список полей, по которым следует выполнять поиск при " -"поиске групп" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Разделённый запятыми список полей, по которым следует выполнять поиск при " -"поиске пользователей" - -msgid "A description of this RADIUS proxy server" -msgstr "Описание этого прокси-сервера RADIUS" - -msgid "A description of this auto member rule" -msgstr "Описание этого правила автоучастия" - -msgid "A description of this command" -msgstr "Описание этой команды" - -msgid "A description of this host" -msgstr "Описание этого узла" - -msgid "A description of this host-group" -msgstr "Описание этой группы узлов" - -msgid "A description of this role-group" -msgstr "Описание группы этой роли " - -msgid "A dictionary representing an LDAP entry" -msgstr "Словарь, соответствующий записи LDAP" - -msgid "A group may not be a member of itself" -msgstr "Группа не может входить в состав самой себя" - -msgid "A group may not be added as a member of itself" -msgstr "Группа не может быть добавлена сама в себя" - -msgid "A host willing to act as a key exchanger" -msgstr "Узел, который может работать как обменник ключей" - -msgid "A host willing to act as a mail exchanger" -msgstr "Узел, который может работать как почтовый обменник" - -msgid "A hostname which this alias hostname points to" -msgstr "Имя узла, на который указывает этот псевдоним узла" - -msgid "A list of ACI values" -msgstr "Список значений ACI" - -msgid "A list of LDAP entries" -msgstr "Список записей LDAP" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "Ожидается список пользователей SELinux, с разделителем $" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Список глобальных перенаправителей. Для каждого перенаправителя можно " -"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Список перенаправителей для отдельных зон. Для каждого перенаправителя можно " -"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" - -msgid "A managed group cannot have a password policy." -msgstr "Управляемая группа не может иметь политику паролей." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "Ошибка при проверке того, что все участники были %(verb)s: %(exc)s" - -msgid "A record" -msgstr "Запись" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" -"Разделённый пробелами список атрибутов, которые удалены из обновлений " -"репликации" - -msgid "A string searched in all relevant object attributes" -msgstr "" -"Строка, поиск которой выполняется во всех соответствующих атрибутах объекта" - -msgid "A6 Record data" -msgstr "Данные записи A6" - -msgid "A6 record" -msgstr "Запись A6" - -msgid "AA Compromise" -msgstr "Компрометация AA" - -msgid "AAAA Create reverse" -msgstr "Создать обратную запись AAAA" - -msgid "AAAA IP Address" -msgstr "IP-адрес AAAA" - -msgid "AAAA record" -msgstr "Запись AAAA" - -msgid "ACI" -msgstr "ACI" - -msgid "ACI name" -msgstr "Имя ACI" - -msgid "ACI object." -msgstr "Объект ACI." - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI разрешения %s не найдена" - -msgid "ACI prefix" -msgstr "Префикс ACI" - -msgid "ACI prefix is required" -msgstr "Следует указать префикс ACI" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI с именем \"%s\" не найдена" - -msgid "ACIs" -msgstr "ACI" - -msgid "ACL name" -msgstr "Имя ACL" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" -"DC AD не удалось получить доступ к контроллерам домена IPA. Скорее всего, " -"проблема связана с DNS или брандмауэром" - -msgid "AD Trust setup" -msgstr "Настройка отношений доверия AD" +msgid "communication with CIFS server was unsuccessful" +msgstr "не удалось обменяться данными с сервером CIFS" msgid "AD domain controller" msgstr "Контроллер домена AD" +msgid "unsupported functional level" +msgstr "неподдерживаемый функциональный уровень" + msgid "" "AD domain controller complains about communication sequence. It may mean " "unsynchronized time on both sides, for example" @@ -16058,1828 +31399,19 @@ msgstr "" "связи. Это может означать, например, рассинхронизацию времени между " "компьютерами, которые обмениваются данными" -msgid "AFSDB Hostname" -msgstr "Имя узла AFSDB" - -msgid "AFSDB Subtype" -msgstr "Подтип AFSDB" - -msgid "AFSDB record" -msgstr "Запись AFSDB" - -msgid "API Browser" -msgstr "Навигатор API " - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"Не отправлен номер версии программного интерфейса (API), совместимость с " -"новейшими версиями не гарантируется. Предполагается следующая версия API " -"сервера: %(server_version)s" - -msgid "APL record" -msgstr "Запись APL" - -msgid "About" -msgstr "О программе" - -msgid "Access Denied" -msgstr "Отказано в доступе" - -msgid "Access Granted" -msgstr "Доступ предоставлен" - -#, python-format -msgid "Access granted: %s" -msgstr "Доступ предоставлен: %s" - -msgid "Access this host" -msgstr "Получить доступ к узлу" - -msgid "Access time" -msgstr "Время доступа" - -msgid "Accessing" -msgstr "Получение доступа" - -msgid "Account" -msgstr "Учётная запись" - -msgid "Account Settings" -msgstr "Параметры учётной записи" - -msgid "Account Status" -msgstr "Состояние учётной записи" - -msgid "Account disabled" -msgstr "Учётная запись отключена" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Учётная запись отключена: %(disabled)s" - -msgid "Actions" -msgstr "Действия" - -msgid "Activate" -msgstr "Активировать" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Активировать неподтверждённого пользователя \"%(value)s\"" - -msgid "Activate a stage user." -msgstr "Активировать неподтверждённого пользователя." - -msgid "Active Directory domain" -msgstr "Домен Active Directory" - -msgid "Active Directory domain administrator" -msgstr "Администратор домена Active Directory" - -msgid "Active Directory domain administrator's password" -msgstr "Пароль администратора домена Active Directory" - -msgid "Active Directory domain range" -msgstr "диапазон доменов Active Directory" - -msgid "Active Directory domain with POSIX attributes" -msgstr "Домен Active Directory с атрибутами POSIX" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "Диапазон доверия Active Directory с атрибутами POSIX" - -msgid "Active Directory winsync" -msgstr "winsync Active Directory" - -msgid "Active directory domain administrator's password" -msgstr "Пароль администратора домена Active Directory" - -msgid "Active users" -msgstr "Активные пользователи" - -msgid "Active zone" -msgstr "Активная зона" - -msgid "Add" -msgstr "Добавить" - -msgid "Add CA ACL" -msgstr "Добавить CA ACL" - -msgid "Add CAs to a CA ACL." -msgstr "Добавить CA в CA ACL." - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "Добавить центры сертификации в CA ACL '${primary_key}'" - -msgid "Add Class of Service entry" -msgstr "Добавить запись класса обслуживания" - -msgid "Add Custom Attribute" -msgstr "Добавить пользовательский атрибут" - -msgid "Add Custom Authentication Indicator" -msgstr "Добавить пользовательский идентификатор аутентификации" - -msgid "Add DNS forward zone" -msgstr "Добавить зону перенаправления DNS" - -msgid "Add DNS resource record" -msgstr "Добавить запись ресурса DNS" - -msgid "Add DNS zone" -msgstr "Добавить зону DNS" - -msgid "Add HBAC rule" -msgstr "Добавить правило HBAC" - -msgid "Add HBAC service" -msgstr "Добавить службу HBAC" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "Добавить службу HBAC '${primary_key}' в группы служб HBAC" - -msgid "Add HBAC service group" -msgstr "Добавить группу служб HBAC" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "Добавить группы служб HBAC в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Добавить службы HBAC в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "Добавить службы HBAC в группу служб HBAC '${primary_key}'" - -msgid "Add ID range" -msgstr "Добавить диапазон идентификаторов" - -msgid "Add ID view" -msgstr "Добавить представление ID" - -msgid "Add IPA location" -msgstr "Добавить расположение IPA" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "Добавить IPA-сервер в расположение IPA '${primary_key}'" - -msgid "Add Kerberos Principal Alias" -msgstr "Добавить псевдоним учётной записи Kerberos" - -msgid "Add Many" -msgstr "Добавить много" - -msgid "Add OTP token" -msgstr "Добавить токен OTP" - -msgid "Add RADIUS server" -msgstr "Добавить сервер RADIUS" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "Добавить группы запуска от имени в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" -"Добавить группы пользователей запуска от имени в правило Sudo " -"'${primary_key}'" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" -"Добавить пользователей запуска от имени в правило Sudo '${primary_key}'" - -msgid "Add SELinux user map" -msgstr "Добавить список пользователей SELinux" - -msgid "Add a manager to the stage user entry" -msgstr "Добавить руководителя в запись неподтверждённого пользователя." - -msgid "Add a manager to the user entry" -msgstr "Добавить руководителя в запись пользователя." - -msgid "Add a new DNS server." -msgstr "Добавить новый DNS-сервер." - -msgid "Add a new Group ID override." -msgstr "Добавить новое переопределение ID группы." - -msgid "Add a new HBAC service group." -msgstr "Добавить новую группу служб HBAC." - -msgid "Add a new HBAC service." -msgstr "Добавить новую службу HBAC." - -msgid "Add a new ID View." -msgstr "Добавить новое представление ID." - -msgid "Add a new ID override." -msgstr "Добавить новое переопределение ID." - -msgid "Add a new IPA location." -msgstr "Добавить новую запись расположения IPA." - -msgid "Add a new IPA new service." -msgstr "Добавить новую службу IPA." - -msgid "Add a new IPA service." -msgstr "Добавить новую службу IPA." - -msgid "Add a new OTP token." -msgstr "Добавить новый токен OTP." - -msgid "Add a new RADIUS proxy server." -msgstr "Добавить новый прокси-сервер RADIUS." - -msgid "Add a new SMB service." -msgstr "Добавить новую службу SMB." - -msgid "Add a new User ID override." -msgstr "Добавить новое переопределение ID пользователя." - -msgid "Add a new YubiKey OTP token." -msgstr "Добавить новый токен OTP YubiKey." - -msgid "Add a new delegation." -msgstr "Добавить новое делегирование." - -msgid "Add a new group password policy." -msgstr "Добавить новую групповую политику паролей." - -msgid "Add a new host." -msgstr "Добавить новый узел." - -msgid "Add a new hostgroup." -msgstr "Добавить новую группу узлов." - -msgid "Add a new netgroup." -msgstr "Добавить новую сетевую группу." - -msgid "Add a new permission." -msgstr "Добавить новое разрешение." - -msgid "Add a new privilege." -msgstr "Добавить новую привилегию." - -msgid "Add a new role." -msgstr "Добавить новую роль." - -msgid "Add a new segment." -msgstr "Добавить новый сегмент." - -msgid "Add a new self-service permission." -msgstr "Добавить новое разрешение самообслуживания." - -msgid "Add a new stage user." -msgstr "Добавить нового неподтверждённого пользователя." - -msgid "Add a new topology suffix to be managed." -msgstr "Добавить новый суффикс топологии, которым следует управлять." - -msgid "Add a new user." -msgstr "Добавить нового пользователя." - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" -"Добавить разрешение для делегирования прав доступа для отдельных зон " -"перенаправления." - -msgid "Add a permission for per-zone access delegation." -msgstr "Добавить разрешение для делегирования прав доступа для отдельных зон." - -msgid "Add a system permission without an ACI" -msgstr "Добавить разрешение на доступ к системе без использования ACI" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" -"Добавить разрешение на доступ к системе без использования ACI (внутренняя " -"команда)." - -msgid "Add a vault." -msgstr "Добавить хранилище." - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" -"Добавить группы разрешённых команд Sudo в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "Добавить разрешённые команды Sudo в правило Sudo '${primary_key}'" +msgid "Cannot find specified domain or server name" +msgstr "Не удалось найти домен или сервер с указанным именем" msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" msgstr "" -"Добавить пару атрибут/значение. Формат: атрибут=значение. Атрибут\n" -"должен быть частью схемы." - -msgid "Add an automember rule." -msgstr "Добавить правило автоучастия." - -msgid "Add an option to the Sudo Rule." -msgstr "Добавить параметр в правило Sudo." - -msgid "Add and Add Another" -msgstr "Добавить и добавить ещё" - -msgid "Add and Close" -msgstr "Добавить и закрыть" - -msgid "Add and Edit" -msgstr "Добавить и изменить" - -msgid "Add automount key" -msgstr "Добавить ключ автомонтирования" - -msgid "Add automount location" -msgstr "Добавить расположение автомонтирования" - -msgid "Add automount map" -msgstr "Добавить список соответствия автомонтирования" - -msgid "Add certificate authority" -msgstr "Добавить центр сертификации" - -msgid "Add certificate identity mapping rule" -msgstr "Добавить правило сопоставления сертификатов с записями пользователей" - -msgid "Add certificate mapping data" -msgstr "Добавить данные сопоставления сертификата" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "Добавить профили сертификатов в CA ACL '${primary_key}'" - -msgid "Add certificates to host entry" -msgstr "Добавить сертификаты в запись узла" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "Добавить команды и группы команд Sudo, которых касается правило Sudo." - -msgid "Add conditions to an automember rule." -msgstr "Добавить условия в правило автоучастия." - -msgid "Add custom value" -msgstr "Добавить пользовательское значение" - -msgid "Add delegation" -msgstr "Добавить делегирование" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" -"Добавить группы запрещённых команд Sudo в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "Добавить запрещённые команды Sudo в правило Sudo '${primary_key}'" - -msgid "Add domain" -msgstr "Добавить домен" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "Добавить исключающее условие в '${primary_key}'" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" -"Добавить запись перенаправления для сервера имён, расположенного в созданной " -"зоне" - -msgid "Add group ID override" -msgstr "Добавить переопределение ID группы" - -msgid "Add group for Sudo to execute as." -msgstr "Добавить группу для выполнения Sudo от её имени." - -msgid "Add host" -msgstr "Добавить узел" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Добавить узел '${primary_key}' в правила HBAC" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "Добавить узел '${primary_key}' в группы узлов" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "Добавить узел '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "Добавить узел '${primary_key}' в роли" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "Добавить узел '${primary_key}' в правила Sudo" - -msgid "Add host group" -msgstr "Добавить группу узлов" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "Добавить группу узлов '${primary_key}' в правила HBAC" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "Добавить группу узлов '${primary_key}' в группы узлов" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "Добавить группу узлов '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "Добавить группу узлов '${primary_key}' в правила Sudo" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "Добавить группы узлов в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "Добавить группы узлов в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "Добавить группы узлов в список пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "Добавить группы узлов в группу узлов '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "Добавить группы узлов в сетевую группу '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "Добавить группы узлов в роль '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "Добавить группы узлов в правило Sudo '${primary_key}'" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Добавить узлы и группы узлов, которых касается правило Sudo." - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "Добавить узлы в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "Добавить узлы в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "Добавить узлы в список пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "Добавить узлы в группу узлов '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "Добавить узлы в сетевую группу '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "Добавить узлы в роль '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "Добавить узлы в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "Добавить узлы, которые управляют узлом '${primary_key}'" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "Добавить узлы, которые управляют службой '${primary_key}'" - -msgid "Add hosts that can manage this host." -msgstr "Добавить узлы, которые могут управлять этим узлом." - -msgid "Add hosts that can manage this service." -msgstr "Добавить узлы, которые могут управлять этой службой." - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "Добавить включающее условие в '${primary_key}'" - -msgid "Add member to a named service delegation rule." -msgstr "Добавить участника в именованное правило делегирования служб." - -msgid "Add member to a named service delegation target." -msgstr "Добавить участника в именованную цель делегирования служб." - -msgid "Add members to Sudo Command Group." -msgstr "Добавить участников в группу команд Sudo." - -msgid "Add members to a group." -msgstr "Добавить участников в группу." - -msgid "Add members to a hostgroup." -msgstr "Добавить участников в группу узлов." - -msgid "Add members to a netgroup." -msgstr "Добавить участников в сетевую группу." - -msgid "Add members to a permission." -msgstr "Добавить участников в разрешение." - -msgid "Add members to a privilege." -msgstr "Добавить участников в привилегию." - -msgid "Add members to a role." -msgstr "Добавить участников в роль." - -msgid "Add members to a vault." -msgstr "Добавить участников в хранилище." - -msgid "Add members to an HBAC service group." -msgstr "Добавить участников в группу служб HBAC." - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" -"Добавить перенесённые записи пользователей без группы в группу по умолчанию " -"(значение по умолчанию: true)" - -msgid "Add netgroup" -msgstr "Добавить сетевую группу" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "Добавить сетевую группу '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "Добавить сетевые группы в сетевую группу '${primary_key}'" - -msgid "Add new DNS resource record." -msgstr "Добавить новую запись ресурса DNS." - -msgid "Add new certificates to a service" -msgstr "Добавить новые сертификаты в запись службы." - -msgid "Add new principal alias to a service" -msgstr "Добавить новый псевдоним учётной записи в запись службы." - -msgid "Add new principal alias to host entry" -msgstr "Добавить новый псевдоним учётной записи в запись узла." - -msgid "Add new principal alias to the stageuser entry" -msgstr "" -"Добавить новый псевдоним учётной записи в запись неподтверждённого " -"пользователя." - -msgid "Add new principal alias to the user entry" -msgstr "Добавить новый псевдоним учётной записи в запись пользователя." - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" -"Добавить одно или несколько сопоставлений сертификатов в запись " -"неподтверждённого пользователя." - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" -"Добавить одно или несколько сопоставлений сертификатов в запись пользователя." - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Добавить один или несколько сертификатов в запись idoverrideuser." - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" -"Добавить один или несколько сертификатов в запись неподтверждённого " -"пользователя." - -msgid "Add one or more certificates to the user entry" -msgstr "Добавить один или несколько сертификатов в запись пользователя." - -msgid "Add owners to a vault container." -msgstr "Добавить владельцев в контейнер хранилищ." - -msgid "Add owners to a vault." -msgstr "Добавить владельцев в хранилище." - -msgid "Add password policy" -msgstr "Добавить политику паролей" - -msgid "Add permission" -msgstr "Добавить разрешение" - -msgid "Add permissions to a privilege." -msgstr "Добавить разрешения в привилегию." - -msgid "Add principal" -msgstr "Добавить учётную запись" - -msgid "Add privilege" -msgstr "Добавить привилегию" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "Добавить привилегию '${primary_key}' в разрешения" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "Добавить привилегии в разрешение '${primary_key}'" - -msgid "Add privileges to a role." -msgstr "Добавить привилегии в роль." - -msgid "Add profiles to a CA ACL." -msgstr "Добавить профили в CA ACL." - -msgid "Add role" -msgstr "Добавить роль" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "Добавить роль '${primary_key}' в привилегии" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "Добавить роли в привилегию '${primary_key}'" - -msgid "Add rule" -msgstr "Добавить правило" - -msgid "Add self service permission" -msgstr "Добавить разрешение самообслуживания" - -msgid "Add service" -msgstr "Добавить службу" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "Добавить службу '${primary_key}' в роли" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Добавить службы в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "Добавить службы в участники хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "Добавить службы во владельцы хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "Добавить службы в роль '${primary_key}'" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "Добавить службы в группу пользователей '${primary_key}'" - -msgid "Add services to a CA ACL." -msgstr "Добавить службы в CA ACL." - -msgid "Add services to an HBAC rule." -msgstr "Добавить службы в правило HBAC." - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "Добавить узлы-источники и группы узлов из правила HBAC." - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Добавить узлы-источники и группы узлов в правило HBAC." - -msgid "Add stage user" -msgstr "Добавить неподтверждённого пользователя" - -msgid "Add sudo command" -msgstr "Добавить команду Sudo" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "Добавить команду Sudo '${primary_key}' в группы команд Sudo" - -msgid "Add sudo command group" -msgstr "Добавить группу команд Sudo" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "Добавить команды Sudo в группу команд Sudo '${primary_key}'" - -msgid "Add sudo option" -msgstr "Добавить параметр Sudo" - -msgid "Add sudo rule" -msgstr "Добавить правило Sudo" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Добавить целевые узлы или группы узлов в CA ACL." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Добавить целевые узлы и группы узлов в правило HBAC." - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" -"Добавить целевые узлы и группы узлов в правило списка пользователей SELinux." - -msgid "Add target to a named service delegation rule." -msgstr "Добавить цель в именованное правило делегирования служб." - -msgid "Add target to a named service delegation." -msgstr "Добавить цель в именованное делегирование служб." - -msgid "Add the host to DNS with this IP address" -msgstr "Добавить узел в DNS с этим IP-адресом" - -msgid "Add to default group" -msgstr "Добавить в группу по умолчанию" - -msgid "Add topology segment" -msgstr "Добавить сегмент топологии" - -msgid "Add trust" -msgstr "Добавить отношение доверия" - -msgid "Add user" -msgstr "Добавить пользователя" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "Добавить пользователя '${primary_key}' в правила HBAC" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "Добавить пользователя '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "Добавить пользователя '${primary_key}' в роли" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "Добавить пользователя '${primary_key}' в правила Sudo" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "Добавить пользователя '${primary_key}' в группы пользователей" - -msgid "Add user ID override" -msgstr "Добавить переопределение ID пользователя" - -msgid "Add user group" -msgstr "Добавить группу пользователей" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Добавить группу пользователей '${primary_key}' в правила HBAC" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "Добавить группу пользователей '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "Добавить группу пользователей '${primary_key}' в роли" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "Добавить группу пользователей '${primary_key}' в правила Sudo" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "Добавить группу пользователей '${primary_key}' в группы пользователей" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Добавить группы пользователей в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Добавить группы пользователей в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" -"Добавить группы пользователей в список пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "Добавить группы пользователей в участники хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "Добавить группы пользователей в сетевую группу '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "Добавить группы пользователей во владельцы хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "Добавить группы пользователей в роль '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "Добавить группы пользователей в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "Добавить группы пользователей в группу пользователей '${primary_key}'" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "Добавить пользователей и группы, которых касается правило Sudo." - -msgid "Add users and groups for Sudo to execute as." -msgstr "Добавить пользователей и группы для выполнения Sudo от их имени." - -msgid "Add users and groups to a CA ACL." -msgstr "Добавить пользователей и группы в CA ACL." - -msgid "Add users and groups to an HBAC rule." -msgstr "Добавить пользователей и группы в правило HBAC." - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" -"Добавить пользователей и группы в правило списка пользователей SELinux." - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "Добавить пользователей в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Добавить пользователей в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "Добавить пользователей в список пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "Добавить пользователей в участники хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "Добавить пользователей в сетевую группу '${primary_key}'" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "Добавить пользователей во владельцы хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "Добавить пользователей в роль '${primary_key}'" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "Добавить пользователей в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "Добавить пользователей в группу пользователей '${primary_key}'" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "Добавить пользователей, которые управляют токеном OTP '${primary_key}'" - -msgid "Add users that can manage this token." -msgstr "Добавить пользователей, которые могут управлять этим токеном." - -msgid "Add vault" -msgstr "Добавить хранилище" - -#, python-format -msgid "Added %(map)s" -msgstr "Добавлено %(map)s" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Добавлено %(src)s в %(dst)s" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" -"Добавлено отношение доверия Active Directory для области (realm) \"%(value)s" -"\"" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Добавлена CA ACL \"%(value)s\"" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Добавлено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Добавлено переопределение ID группы \"%(value)s\"" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Добавлено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Добавлена служба HBAC \"%(value)s\"" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Добавлена группа служб HBAC \"%(value)s\"" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Добавлено представление ID \"%(value)s\"" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Добавлено переопределение ID \"%(value)s\"" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Добавлен диапазон идентификаторов \"%(value)s\"" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Добавлена запись расположения IPA \"%(value)s\"" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Добавлен токен OTP \"%(value)s\"" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Добавлен прокси-сервер RADIUS \"%(value)s\"" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Добавлен список пользователей SELinux \"%(value)s\"" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Добавлена команда Sudo \"%(value)s\"" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Добавлена группа команд Sudo \"%(value)s\"" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Добавлено правило Sudo \"%(value)s\"" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Добавлено переопределение ID пользователя \"%(value)s\"" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Добавлено правило автоучастия \"%(value)s\"" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Добавлен непрямой список соответствия автомонтирования \"%(value)s\"" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Добавлен ключ автомонтирования \"%(value)s\"" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Добавлено расположение автомонтирования \"%(value)s\"" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Добавлен список соответствия автомонтирования \"%(value)s\"" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" -"Добавлены сопоставления сертификатов в запись пользователя \"%(value)s\"" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Добавлены сертификаты в запись узла \"%(value)s\"" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Добавлены сертификаты в запись idoverrideuser \"%(value)s\"" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Добавлены сертификаты в учётную запись службы \"%(value)s\"" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" -"Добавлены сертификаты в запись неподтверждённого пользователя \"%(value)s\"" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Добавлены сертификаты в запись пользователя \"%(value)s\"" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Добавлено условие (условия) в \"%(value)s\"" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Добавлено делегирование \"%(value)s\"" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Добавлена группа \"%(value)s\"" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Добавлен узел \"%(value)s\"" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Добавлена группа узлов \"%(value)s\"" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Добавлена сетевая группа \"%(value)s\"" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Добавлен новый DNS-сервер \"%(value)s\"" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Добавлены новые псевдонимы в запись узла \"%(value)s\"" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" -"Добавлены новые псевдонимы в запись неподтверждённого пользователя " -"\"%(value)s\"" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Добавлены новые псевдонимы в учётную запись службы \"%(value)s\"" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Добавлены новые псевдонимы в запись пользователя \"%(value)s\"" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "В правило Sudo \"%(rule)s\" добавлен параметр \"%(option)s\"" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Добавлено разрешение \"%(value)s\"" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Добавлена привилегия \"%(value)s\"" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Добавлена роль \"%(value)s\"" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Добавлен сегмент \"%(value)s\"" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Добавлено самообслуживание \"%(value)s\"" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Добавлена служба \"%(value)s\"" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Добавлено правило делегирования служб \"%(value)s\"" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Добавлена цель делегирования служб \"%(value)s\"" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Добавлен неподтверждённый пользователь \"%(value)s\"" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Добавлено системное разрешение \"%(value)s\"" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Добавлен суффикс топологии \"%(value)s\"" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Добавлен пользователь \"%(value)s\"" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Добавлено хранилище \"%(value)s\"" - -msgid "Additional instructions:" -msgstr "Дополнительные инструкции:" - -msgid "Address not valid, can't redirect" -msgstr "Адрес недействителен, перенаправление невозможно" - -msgid "Administrative account" -msgstr "Учётная запись администратора" - -msgid "Administrator e-mail address" -msgstr "Адрес электронной почты администратора" - -msgid "Advertised by servers" -msgstr "Сообщено серверами" - -msgid "Affiliation Changed" -msgstr "Изменение принадлежности" - -msgid "Agreements deleted" -msgstr "Соглашения удалены" - -msgid "Algorithm" -msgstr "Алгоритм" - -msgid "All" -msgstr "Все" - -msgid "All attributes to which the permission applies" -msgstr "Все атрибуты, к которым применяется разрешение" - -msgid "All commands should at least have a result" -msgstr "Все команды должны выводить результат" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "Ни один сервер имён не ответил на запрос обратной зоны DNS %(revdns)s" - -msgid "All target filters, including those implied by type and memberof" -msgstr "Все фильтры целей, включая те, которые применяются по type и memberof" - -msgid "Allow" -msgstr "Разрешить" - -msgid "Allow PTR sync" -msgstr "Разрешить PTR-синхронизацию" - -msgid "Allow access from the trusted domain" -msgstr "Разрешить доступ из доверенного домена." - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "Разрешить добавление внешних не IPA-участников из доверенных доменов" - -msgid "Allow dynamic updates." -msgstr "Разрешить динамические обновления" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" -"Разрешить переход к резервному варианту LDAP DC AD при определении адресов " -"доверенных объектов AD. Только для двусторонних отношений доверия." - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "Разрешить группам узлов создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "Разрешить группам узлов получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "Разрешить узлам создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "Разрешить узлам получать таблицу ключей '${primary_key}'" - -msgid "Allow in-line DNSSEC signing" -msgstr "Разрешить линейную подпись DNSSEC" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "Разрешить линейную подпись DNSSEC записей в зоне" - -msgid "Allow query" -msgstr "Разрешить запрос" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "Разрешить синхронизацию прямых (A, AAAA) и обратных (PTR) записей" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" -"Разрешить синхронизацию прямых (A, AAAA) и обратных (PTR) записей в зоне" - -msgid "Allow transfer" -msgstr "Разрешить перенос" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "Разрешить использование ресурсов IPA доменом отношения доверия." - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" -"Разрешить группам пользователей создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Разрешить группам пользователей получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "Разрешить пользователям создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "Разрешить пользователям получать таблицу ключей '${primary_key}'" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Разрешить пользователям, группам, узлам или группам узлов создавать таблицу " -"ключей этого узла." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" -"Разрешить пользователям, группам, узлам или группам узлов создавать таблицу " -"ключей этой службы." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Разрешить пользователям, группам, узлам или группам узлов получать таблицу " -"ключей этого узла." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Разрешить пользователям, группам, узлам или группам узлов получать таблицу " -"ключей этой службы." - -msgid "Allowed Target" -msgstr "Допустимая цель" - -msgid "Allowed to Impersonate" -msgstr "Разрешено олицетворять" - -msgid "Allowed to create keytab" -msgstr "Разрешено создавать таблицу ключей" - -msgid "Allowed to retrieve keytab" -msgstr "Разрешено получать таблицу ключей" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" -"Разрешает миграцию несмотря на использование подключаемого модуля " -"совместимости" - -msgid "Already registered" -msgstr "Уже зарегистрировано" - -msgid "Alternative UPN suffixes" -msgstr "Альтернативные суффиксы UPN" - -msgid "Altitude" -msgstr "Высота над уровнем моря" - -msgid "Always ask" -msgstr "Всегда спрашивать" - -msgid "Ambiguous search, user domain was not specified" -msgstr "Неоднозначные параметры поиска: не указан домен пользователя" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Главный IPA-сервер не может быть удалён или отключён" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Произошла ошибка (${error})" - -msgid "An error occurred while fetching dns zones." -msgstr "Ошибка при получении данных зон DNS." - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Для этого отношения доверия уже существует диапазон идентификаторов. Следует " -"либо удалить старый диапазон, либо исключить из команды параметры --base-" -"id/--range-size." - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "Интервал между регулярными опросами сервера имён о новых зонах DNS" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Не удалось определить привязку \"%(anchor)s\"." - -msgid "Anchor to override" -msgstr "Привязка, которую следует переопределить" - -msgid "Any CA" -msgstr "Любой CA" - -msgid "Any Command" -msgstr "Любая команда" - -msgid "Any Group" -msgstr "Любая группа" - -msgid "Any Host" -msgstr "Любой узел" - -msgid "Any Profile" -msgstr "Любой профиль" - -msgid "Any Service" -msgstr "Любая служба" - -msgid "Anyone" -msgstr "Любой" - -msgid "Applied to hosts" -msgstr "Применено к узлам" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" -"Применяет представление ID к указанным узлам или текущим участникам " -"указанных групп узлов. Если к узлу применяется другое представление ID, оно " -"будет переопределено." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" -"Применяет представление ID к указанным узлам или текущим участникам " -"указанных групп узлов. Если к узлу применяется другое представление ID, оно " -"будет переопределено." - -msgid "Apply" -msgstr "Применить" - -msgid "Apply ACI to your own entry (self)" -msgstr "Применить ACI к своей собственной записи (self)" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "Применить представление ID '${primary_key}' к узлам" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "Применить представление ID '${primary_key}' к узлам групп узлов" - -msgid "Apply to host groups" -msgstr "Применить к группам узлов" - -msgid "Apply to hosts" -msgstr "Применить к узлам" - -msgid "Arbitrary string identifying the segment" -msgstr "Обязательная строка, которая идентифицирует сегмент" - -msgid "Archive data into a vault." -msgstr "Архивировать данные в хранилище." - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Данные архивированы в хранилище \"%(value)s\"" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"Вы действительно хотите ${action} пользователя?
Изменения вступят в силу " -"немедленно." - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Вы действительно хотите активировать ${object}?" - -msgid "Are you sure you want to activate selected users?" -msgstr "Вы действительно хотите активировать выбранные записи пользователей?" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "Вы действительно хотите добавить разрешение для зоны DNS ${object}?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Вы действительно хотите удалить ${object}?" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Вы действительно хотите удалить выбранные записи?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Вы действительно хотите отключить ${object}?" - -msgid "Are you sure you want to disable selected entries?" -msgstr "Вы действительно хотите отключить выбранные записи?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Вы действительно хотите включить ${object}?" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Вы действительно хотите включить выбранные записи?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "Вы действительно хотите выполнить это действие?" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Вы действительно хотите перестроить автоучастие?" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "Вы действительно хотите удалить разрешение для зоны DNS ${object}?" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Вы действительно хотите восстановить ${object}?" - -msgid "Are you sure you want to restore selected users?" -msgstr "Вы действительно хотите восстановить выбранные записи пользователей?" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Вы действительно хотите разместить ${object} на хранение?" - -msgid "Are you sure you want to stage selected users?" -msgstr "" -"Вы действительно хотите сделать выбранных пользователей неподтверждёнными?" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" -"Вы действительно хотите отменить применение представления ID к выбранным " -"записям?" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Вы действительно хотите разблокировать пользователя ${object}?" - -msgid "Are you sure you want to unprovision this host?" -msgstr "Вы действительно хотите отменить подготовку этого узла?" - -msgid "Are you sure you want to unprovision this service?" -msgstr "Вы действительно хотите отменить подготовку этой службы?" - -msgid "Arguments to details function" -msgstr "Аргументы функции для получения сведений" - -msgid "As Whom" -msgstr "В качестве" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" -"Запросить неслучайный пароль, который следует использовать для учётной записи" - -msgid "Assigned ID View" -msgstr "Назначенное представление ID" - -msgid "Assigned manager of the token (default: self)" -msgstr "Назначенный руководитель токена (значение по умолчанию: self)" - -msgid "Assigned user of the token (default: self)" -msgstr "Назначенный пользователь токена (значение по умолчанию: self)" - -msgid "Asymmetric" -msgstr "Асимметричное" +"DC AD не удалось получить доступ к контроллерам домена IPA. Скорее всего, " +"проблема связана с DNS или брандмауэром" msgid "At least the domain or IP address should be specified" msgstr "Следует указать хотя бы домен или IP-адрес" -msgid "Attribute" -msgstr "Атрибут" - -msgid "Attribute Key" -msgstr "Ключ атрибута" - -msgid "Attribute breakdown" -msgstr "Разбивка по атрибутам" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Атрибут для фильтрации с помощью регулярных выражений. Например, полное имя " -"для узла или руководитель для пользователя." - -msgid "Attributes" -msgstr "Атрибуты" - -msgid "Attributes for total update" -msgstr "Атрибуты для общего обновления" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" -"Атрибуты, которые не реплицируются на сервер-потребитель при частичном " -"обновлении. Например, `(objectclass=*) $ EXCLUDE accountlockout memberof" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" -"Атрибуты, которые не реплицируются на сервер-потребитель при общем " -"обновлении. Например, (objectclass=*) $ EXCLUDE accountlockout memberof" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "Атрибуты, которые следует игнорировать для записей групп в DS" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "Атрибуты, которые следует игнорировать для записей пользователей в DS" - -msgid "Attributes to replicate" -msgstr "Атрибуты, которые следует реплицировать" - -msgid "Attributes to strip" -msgstr "Атрибуты, которые следует убрать" - -msgid "Attributes to which the delegation applies" -msgstr "Атрибуты, к которым применяется делегирование" - -msgid "Attributes to which the permission applies" -msgstr "Атрибуты, к которым применяется разрешение" - -msgid "Attributes to which the permission applies by default" -msgstr "Атрибуты, к которым по умолчанию применяется разрешение" - -msgid "Attributes to which the permission applies." -msgstr "Атрибуты, к которым применяется разрешение." - -msgid "Audit" -msgstr "Аудит" - -msgid "Authenticating" -msgstr "Аутентификация" - -msgid "Authentication" -msgstr "Аутентификация" - -msgid "Authentication Indicators" -msgstr "Индикаторы аутентификации" - -msgid "Authentication indicator" -msgstr "Индикатор аутентификации" - -msgid "Authentication indicators" -msgstr "Индикаторы аутентификации" - -msgid "Authentication with Kerberos failed" -msgstr "Не удалось выполнить аутентификацию с Kerberos" - -msgid "Authentication with personal certificate failed" -msgstr "Не удалось выполнить аутентификацию с личным сертификатом" - -msgid "Authoritative nameserver" -msgstr "Полномочный сервер имён" - -msgid "Authoritative nameserver change" -msgstr "Изменение полномочного сервера имён" - -msgid "Authoritative nameserver domain name" -msgstr "Имя домена полномочного сервера имён" - -msgid "Authority ID" -msgstr "ID центра" - -msgid "Auto Membership Rule" -msgstr "Правило автоучастия" - -msgid "Auto Membership is not configured" -msgstr "Автоучастие не настроено" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Правило автоучастия: %s не найдено!" - -msgid "Autogenerated" -msgstr "Созданные автоматически" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Не удалось автоматически обновить системные записи DNS. Повторно запустите " -"обновление системных записей вручную, чтобы получить список отсутствующих " -"записей." - -msgid "Automember" -msgstr "Автоучастник" - -msgid "Automember Rule" -msgstr "Правило автоучастия" - -msgid "Automember rebuild membership task completed" -msgstr "Завершена задача по перестройке записей автоучастия" - -msgid "Automember rebuild membership task started" -msgstr "Выполняется задача по перестройке записей автоучастия" - -msgid "Automount" -msgstr "Автомонтирование" - -msgid "Automount Key" -msgstr "Ключ автомонтирования" - -msgid "Automount Keys" -msgstr "Ключи автомонтирования" - -msgid "Automount Location" -msgstr "Расположение автомонтирования" - -msgid "Automount Location Settings" -msgstr "Параметры расположения автомонтирования" - -msgid "Automount Locations" -msgstr "Расположения автомонтирования" - -msgid "Automount Map" -msgstr "Список соответствия автомонтирования" - -msgid "Automount Maps" -msgstr "Списки соответствия автомонтирования" - -msgid "Automount key name." -msgstr "Имя ключа автомонтирования" - -msgid "Automount key object." -msgstr "Объект ключа автомонтирования." - -msgid "Automount location name." -msgstr "Имя расположения автомонтирования" - -msgid "Automount map name." -msgstr "Имя списка соответствия автомонтирования" - -msgid "Automount master file." -msgstr "Главный файл автомонтирования." - -msgid "Available" -msgstr "Доступно" - -msgid "BIND update policy" -msgstr "Политика обновления BIND" - -msgid "Back" -msgstr "Назад" - -msgid "Back to Top" -msgstr "К началу" - -msgid "Bad format in credentials cache" -msgstr "Неверный формат кэша учётных данных " - -msgid "Bad or unsupported salt type.\n" -msgstr "Недопустимый или неподдерживаемый тип соли.\n" - -msgid "Bad search filter" -msgstr "Неверный фильтр поиска" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Неверный фильтр поиска %(info)s" - -msgid "Base DN" -msgstr "Базовое DN" - -msgid "Base DN on remote LDAP server" -msgstr "Базовое DN на удалённом LDAP-сервере" - -msgid "Base ID" -msgstr "Основной ID" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "Основа для субъектов сертификатов (OU=Test,O=Example)" - -msgid "Base-64 encoded certificate." -msgstr "Base-64 шифрованный сертификат" - -msgid "Base-64 encoded host certificate" -msgstr "Base-64 шифрованный сертификат узла" - -msgid "Base-64 encoded server certificate" -msgstr "Base-64 шифрованный сертификат сервера" - -msgid "Base-64 encoded service certificate" -msgstr "Base-64 шифрованный сертификат службы" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64 шифрованный сертификат пользователя" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Не удалось выполнить декодирование Base64: %(reason)s" - -msgid "Binary data to archive" -msgstr "Двоичные данные, которые следует архивировать" - -msgid "Bind DN" -msgstr "Привязка DN" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "Привязка пароля уже предоставлена (-w).\n" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" -"При использовании DN привязки (-w или -W) необходима привязка пароля.\n" - -msgid "Bind rule type" -msgstr "Тип правила привязки" - -msgid "Brief description of this profile" -msgstr "Краткое описание этого профиля" - -msgid "CA" -msgstr "Центр сертификации (CA)" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "CA \"%s\" отключён" - -msgid "CA ACL" -msgstr "CA ACL" - -msgid "CA ACLs" -msgstr "CA ACL" - -msgid "CA Compromise" -msgstr "Компрометация центра сертификации (CA)" - -msgid "CA category" -msgstr "Категория CA" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"для категории CA нельзя установить значение \"all\", когда имеются " -"разрешённые CA" - -msgid "CA category the ACL applies to" -msgstr "Категория CA, к которой применяется ACL" - -msgid "CA certificate" -msgstr "Сертификат CA" - -msgid "CA is not configured" -msgstr "CA не настроен" - -msgid "CAs" -msgstr "CA" - -msgid "CAs cannot be added when CA category='all'" -msgstr "невозможно добавить CA, когда категория CA=\"all\"" - -msgid "CERT Algorithm" -msgstr "Алгоритм CERT" - -msgid "CERT Certificate Type" -msgstr "Тип сертификата CERT" - -msgid "CERT Certificate/CRL" -msgstr "Сертификат или список отзыва сертификатов (CRL) CERT" - -msgid "CERT Key Tag" -msgstr "Тег ключа CERT" - -msgid "CERT record" -msgstr "Запись CERT" - -msgid "CIFS credentials object" -msgstr "Объект учётных данных CIFS" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "Ваши регистрационные данные отклонены сервером CIFS %(host)s" - #, python-format msgid "" "CIFS server communication error: code \"%(num)s\", message \"%(message)s" @@ -17888,3486 +31420,88 @@ msgstr "" "Ошибка обмена данными с сервером CIFS: код \"%(num)s\", сообщение " "\"%(message)s\" (оба значения могут быть \"None\")" -msgid "CIFS server denied your credentials" -msgstr "Ваши регистрационные данные отклонены сервером CIFS" +msgid "no trusted domain is configured" +msgstr "отсутствуют настроенные доверенные домены" -msgid "CLI metavar" -msgstr "Метапеременная CLI" +msgid "domain is not configured" +msgstr "домен не настроен" -msgid "CLI name" -msgstr "Имя CLI" +msgid "SID is not valid" +msgstr "SID недействителен" -msgid "CNAME Hostname" -msgstr "Имя узла CNAME" +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "SID не совпадает точно ни с одним из SID доверенных доменов" -msgid "CNAME record" -msgstr "Запись CNAME" +msgid "SID does not match any trusted domain" +msgstr "SID не соответствует ни одному доверенному домену" -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" -"Запись CNAME нельзя использовать вместе с любыми другими записями (RFC 1034, " -"раздел 3.6.2)" +msgid "Trust setup" +msgstr "Настройка отношения доверия" -msgid "CSR" -msgstr "Запрос подписи сертификата" +msgid "Our domain is not configured" +msgstr "Наш домен не настроен" -msgid "Cancel" -msgstr "Отменить" +msgid "No trusted domain is not configured" +msgstr "Не настроено ни одного доверенного домена" + +msgid "trusted domain object" +msgstr "объект доверенного домена" + +msgid "domain is not trusted" +msgstr "домен не является доверенным" + +msgid "no trusted domain matched the specified flat name" +msgstr "указанному плоскому имени не соответствует ни один доверенный домен" + +msgid "trusted domain object not found" +msgstr "объект доверенного домена не найден" + +#, fuzzy +#| msgid "SID does not match any trusted domain" +msgid "Object does not belong to a trusted domain" +msgstr "SID не соответствует ни одному доверенному домену" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "SSSD не удалось определить для объекта корректный SID" + +msgid "Ambiguous search, user domain was not specified" +msgstr "Неоднозначные параметры поиска: не указан домен пользователя" + +msgid "Trusted domain did not return a unique object" +msgstr "Доверенным доменом не возвращён уникальный объект" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "Доверенным доменом не возвращён корректный SID объекта" + +msgid "trusted domain user not found" +msgstr "пользователь доверенного домена не найден" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "Не удалось получить список сборщиков мусора (GC) доверенного домена" + +msgid "CIFS credentials object" +msgstr "Объект учётных данных CIFS" #, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "Не удалось создать обратную запись для \"%(value)s\": %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Не удалось расшифровать файл \"%(filename)s\": %(exc)s" +msgid "CIFS server %(host)s denied your credentials" +msgstr "Ваши регистрационные данные отклонены сервером CIFS %(host)s" #, python-format msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" msgstr "Не удалось установить соединение LSA с %(host)s. Сервер CIFS работает?" -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"Невозможно установить отношение доверия с AD, развёрнутой в том же домене, " -"что и IPA. Поддержка такой настройки не предусмотрена." - -msgid "Cannot find specified domain or server name" -msgstr "Не удалось найти домен или сервер с указанным именем" - -msgid "Cannot hide CA renewal master." -msgstr "Не удалось скрыть мастер обновления CA." - -msgid "Cannot hide DNSSec key master." -msgstr "Не удалось скрыть мастер ключей DNSSec." - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "Не удалось скрыть последний включённый сервер %(name)s." - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Невозможно выполнить проверку SID без установленной поддержки Samba 4. " -"Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Невозможно выполнить проверку внешнего участника без установленной поддержки " -"Samba 4. Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без настройки собственного домена нельзя выполнять операцию присоединения. " -"Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Невозможно выполнить выбранную команду без настройки экземпляра Samba 4 на " -"этом компьютере. Убедитесь, что на этом сервере запущена команда ipa-adtrust-" -"install." - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Невозможно выполнить выбранную команду без установленной поддержки Samba 4. " -"Убедитесь, что субпакет IPA server-trust-ad установлен." - -msgid "Cannot query Directory Manager with API" -msgstr "" -"Не удалось отправить запрос средству управления каталогом (Directory " -"Manager) с помощью программного интерфейса" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Не удалось прочитать файл \"%(filename)s\": %(exc)s" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Не удалось определить KDC для запрошенной области (realm)" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "Не удалось получить список сборщиков мусора (GC) доверенного домена" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без настройки собственного домена нельзя выполнять поиск в доверенных " -"доменах. Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "Невозможно одновременно указать механизм SASL и DN привязки\n" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "Невозможно одновременно указать сервер и адрес LDAP\n" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "Не удалось сохранить ACI разрешения в %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "Невозможно использовать %(old_name)s с %(new_name)s" - -msgid "Car License" -msgstr "Номер автомобиля" - -msgid "Certificate" -msgstr "Сертификат" - -msgid "Certificate Association Data" -msgstr "Данные сопоставления сертификата " - -msgid "Certificate Authorities" -msgstr "Центры сертификации" - -msgid "Certificate Authority" -msgstr "Центр сертификации" - -msgid "Certificate Data" -msgstr "Данные сертификата" - -msgid "Certificate For Match" -msgstr "Сертификат для соответствия" - -msgid "Certificate Hold" -msgstr "Приостановка действия сертификата" - -msgid "Certificate Hold Removed" -msgstr "Приостановка действия сертификата отменена" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" -"Глобальная конфигурация сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rule" -msgstr "Правило сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rule description" -msgstr "Описание правила сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rule name" -msgstr "Имя правила сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rules" -msgstr "Правила сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" -"Параметры конфигурации сопоставления сертификатов с записями пользователей" - -msgid "Certificate Mapping Match" -msgstr "Соответствие сопоставления сертификата" - -msgid "Certificate Profile" -msgstr "Профиль сертификатов" - -msgid "Certificate Profile to use" -msgstr "Сертификат профиля, который следует использовать" - -msgid "Certificate Profiles" -msgstr "Профили сертификатов" - -msgid "Certificate Profiles to add" -msgstr "Профили сертификатов, которые следует добавить" - -msgid "Certificate Profiles to remove" -msgstr "Профили сертификатов, которые следует удалить" - -msgid "Certificate Revoked" -msgstr "Сертификат отозван" - -msgid "Certificate Subject base" -msgstr "Основа субъекта сертификата" - -msgid "Certificate Type" -msgstr "Тип сертификата" - -msgid "Certificate Usage" -msgstr "Использование сертификата" - -msgid "Certificate chain" -msgstr "Цепочка сертификатов" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Сертификат для ${primary_key} ${entity}" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Ошибка формата сертификата: %(error)s" - -msgid "Certificate in base64 or PEM format" -msgstr "Сертификат в формате base64 или PEM" - -msgid "Certificate mapping data" -msgstr "Данные сопоставления сертификата" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Не удалось завершить операцию с сертификатом: %(error)s" - -msgid "Certificate profiles cannot be renamed" -msgstr "Профили сертификатов невозможно переименовать" - -msgid "Certificate requested" -msgstr "Отправлен запрос сертификата" - #, python-format msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Сертификат с серийным номером %(serial)s, выданный CA \"%(ca)s\", не найден" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Сертификат (сертификаты), которые хранятся в файле \"%(file)s\"" - -msgid "Certificate/CRL" -msgstr "Сертификат или список отзыва сертификатов (CRL)" - -msgid "Certificates" -msgstr "Сертификаты" - -msgid "Cessation of Operation" -msgstr "Прекращение действия" - -msgid "Change current Domain Level." -msgstr "Изменить текущий уровень домена." - -msgid "Change password" -msgstr "Изменить пароль" - -msgid "Change to POSIX group" -msgstr "Изменение на POSIX-группу" - -msgid "Change to external group" -msgstr "Изменение на внешнюю группу" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Изменён пароль \"%(value)s\"" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Изменено состояние сервера \"%(value)s\"." - -msgid "Character classes" -msgstr "Классы символов" - -msgid "Check DNS" -msgstr "Проверить DNS" - -msgid "Check connection to remote IPA server." -msgstr "Проверить связь с удалённым IPA-сервером." - -msgid "Check the status of a certificate signing request." -msgstr "Проверить состояние запроса подписи сертификата." - -msgid "Checking if record exists." -msgstr "Проверка существования записи." - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "Проверяет, включена ли служба CA на каких-либо серверах." - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "Проверяет, включена ли служба DNS на каких-либо серверах." - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "Проверяет, включена ли служба KRA на каких-либо серверах." - -msgid "City" -msgstr "Город" - -msgid "Class" -msgstr "Класс" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" -"Объект класса обслуживания, который используется для связывания политик с " -"группами" - -msgid "Clear" -msgstr "Очистить" - -msgid "Clear all fields on the page." -msgstr "Очистить все поля на странице." - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" -"Очищает представление ID для указанных узлов или текущих участников " -"указанных групп узлов." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Щёлкните, чтобы ${action}" - -msgid "Client credentials may be delegated to the service" -msgstr "Учётные данные клиента можно делегировать службе" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Клиент не настроен. Выполните команду ipa-client-install." - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Версия клиента. Используется для определения того, примет ли сервер запрос." - -msgid "Clock interval" -msgstr "Временной интервал" - -msgid "Clock offset" -msgstr "Смещение времени" - -msgid "Close" -msgstr "Закрыть" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "Не удалось закрыть файл таблицы ключей\n" - -msgid "Collapse All" -msgstr "Свернуть все" - -msgid "Comma separated encryption types list" -msgstr "Список типов шифрования, разделённых запятыми" - -msgid "Comma-separated list of attributes" -msgstr "Разделённый запятыми список атрибутов" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" -"Разделённый запятыми список атрибутов, которые следует игнорировать для " -"записей групп в DS" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" -"Разделённый запятыми список атрибутов, которые следует игнорировать для " -"записей пользователей в DS" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" -"Разделённый запятыми список классов объектов, которые следует игнорировать " -"для записей групп в DS" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" -"Разделённый запятыми список классов объектов, которые следует игнорировать " -"для записей пользователей в DS" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" -"Разделённый запятыми список классов объектов, использованных для поиска " -"записей групп в DS" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" -"Разделённый запятыми список классов объектов, использованных для поиска " -"записей пользователей в DS" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" -"Разделённый запятыми список разрешений, которые следует предоставить (read, " -"write). По умолчанию предоставляется разрешение \"write\" (запись)." - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" -"Разделённый запятыми список разрешений, которые следует предоставить (read, " -"write, add, delete, all)" - -msgid "Comma-separated list of raw A records" -msgstr "Разделённый запятыми список необработанных записей A" - -msgid "Comma-separated list of raw A6 records" -msgstr "Разделённый запятыми список необработанных записей A6" - -msgid "Comma-separated list of raw AAAA records" -msgstr "Разделённый запятыми список необработанных записей AAAA" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "Разделённый запятыми список необработанных записей AFSDB" - -msgid "Comma-separated list of raw APL records" -msgstr "Разделённый запятыми список необработанных записей APL" - -msgid "Comma-separated list of raw CERT records" -msgstr "Разделённый запятыми список необработанных записей CERT" - -msgid "Comma-separated list of raw CNAME records" -msgstr "Разделённый запятыми список необработанных записей CNAME" - -msgid "Comma-separated list of raw DHCID records" -msgstr "Разделённый запятыми список необработанных записей DHCID" - -msgid "Comma-separated list of raw DLV records" -msgstr "Разделённый запятыми список необработанных записей DLV" - -msgid "Comma-separated list of raw DNAME records" -msgstr "Разделённый запятыми список необработанных записей DNAME" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "Разделённый запятыми список необработанных записей DNSKEY" - -msgid "Comma-separated list of raw DS records" -msgstr "Разделённый запятыми список необработанных записей DS" - -msgid "Comma-separated list of raw HIP records" -msgstr "Разделённый запятыми список необработанных записей HIP" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "Разделённый запятыми список необработанных записей IPSECKEY" - -msgid "Comma-separated list of raw KEY records" -msgstr "Разделённый запятыми список необработанных записей KEY" - -msgid "Comma-separated list of raw KX records" -msgstr "Разделённый запятыми список необработанных записей KX" - -msgid "Comma-separated list of raw LOC records" -msgstr "Разделённый запятыми список необработанных записей LOC" - -msgid "Comma-separated list of raw MX records" -msgstr "Разделённый запятыми список необработанных записей MX" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "Разделённый запятыми список необработанных записей NAPTR" - -msgid "Comma-separated list of raw NS records" -msgstr "Разделённый запятыми список необработанных записей NS" - -msgid "Comma-separated list of raw NSEC records" -msgstr "Разделённый запятыми список необработанных записей NSEC" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "Разделённый запятыми список необработанных записей NSEC3" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "Разделённый запятыми список необработанных записей NSEC3PARAM" - -msgid "Comma-separated list of raw PTR records" -msgstr "Разделённый запятыми список необработанных записей PTR" - -msgid "Comma-separated list of raw RP records" -msgstr "Разделённый запятыми список необработанных записей RP" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "Разделённый запятыми список необработанных записей RRSIG" - -msgid "Comma-separated list of raw SIG records" -msgstr "Разделённый запятыми список необработанных записей SIG" - -msgid "Comma-separated list of raw SPF records" -msgstr "Разделённый запятыми список необработанных записей SPF" - -msgid "Comma-separated list of raw SRV records" -msgstr "Разделённый запятыми список необработанных записей SRV" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "Разделённый запятыми список необработанных записей SSHFP" - -msgid "Comma-separated list of raw TA records" -msgstr "Разделённый запятыми список необработанных записей TA" - -msgid "Comma-separated list of raw TKEY records" -msgstr "Разделённый запятыми список необработанных записей TKEY" - -msgid "Comma-separated list of raw TSIG records" -msgstr "Разделённый запятыми список необработанных записей TSIG" - -msgid "Comma-separated list of raw TXT records" -msgstr "Разделённый запятыми список необработанных записей TXT" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "Команда \"%(name)s\" больше не поддерживается" - -msgid "Command category" -msgstr "Категория команд" - -msgid "Command category the rule applies to" -msgstr "Категория команд, к которой применяется правило" - -msgid "Command name" -msgstr "Имя команды" - -msgid "Command not implemented" -msgstr "Команда не поддерживается" - -msgid "Commands" -msgstr "Команды" - -msgid "Common Name" -msgstr "Общее имя" - -msgid "Conditions that could not be added" -msgstr "Условия, которые не удалось добавить" - -msgid "Conditions that could not be removed" -msgstr "Условия, которые не удалось удалить" - -msgid "Configuration" -msgstr "Конфигурация" - -msgid "Configuration string" -msgstr "Строка конфигурации" - -msgid "Configure your token" -msgstr "Настройте ваш токен" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" -"Настройте ваш токен, отсканировав расположенный ниже QR-код. Щёлкните по QR-" -"коду, если видите правильные данные на устройстве, которое вы хотите " -"настроить." - -msgid "Configured administrative server limit exceeded" -msgstr "Превышено заданное ограничение административного сервера" - -msgid "Configured size limit exceeded" -msgstr "Превышено заданное ограничение по размеру" - -msgid "Configured time limit exceeded" -msgstr "Превышено заданное ограничение по времени " - -msgid "Confirm (password)" -msgstr "Подтвердить (пароль)" - -msgid "Confirmation" -msgstr "Подтверждение" - -msgid "Connectivity" -msgstr "Возможность подключения" - -msgid "Consecutive failures before lockout" -msgstr "Количество последовательных ошибок до блокировки" - -msgid "Consume an entitlement." -msgstr "Использовать право." - -msgid "Contact Settings" -msgstr "Параметры контакта" - -msgid "Contact this specific KDC Server" -msgstr "Установить связь с указанным KDC-сервером" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" -"Содержимое \"стандартных\" хранилищ могут просматривать пользователи с более " -"высоким уровнем привилегий (администраторы)." - -msgid "Continue" -msgstr "Продолжить" - -msgid "Continue to next page" -msgstr "Перейти на следующую страницу" - -msgid "Continuous mode: Don't stop on errors." -msgstr "Режим непрерывной работы: не останавливаться в случае ошибок" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" -"Непрерывный режим работы. Сообщения об ошибках выводятся, но процесс " -"продолжается." - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" -"Непрерывный режим работы. Сообщения об ошибках выводятся, но процесс " -"продолжается." - -msgid "Convert on server" -msgstr "Преобразовывать на сервере" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Не удалось получить %(name)s в интерактивном режиме" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" -"Не удалось прочитать фильтр происхождения (originfilter) определения личной " -"группы пользователя (UPG Definition). Проверьте ваши разрешения." - -msgid "Counter" -msgstr "Счётчик" - -msgid "Counter-based (HOTP)" -msgstr "На основе счётчика (HOTP)" - -msgid "Create Stage user in from a delete user" -msgstr "" -"Создать неподтверждённого пользователя на основе удалённого пользователя" - -msgid "Create a CA." -msgstr "Создать запись CA." - -msgid "Create a new CA ACL." -msgstr "Создать новую запись CA ACL." - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" -"Создать новое правило сопоставления сертификатов с записями пользователей." - -msgid "Create a new HBAC rule." -msgstr "Создать новое правило HBAC." - -msgid "Create a new SELinux User Map." -msgstr "Создать новый список пользователей SELinux." - -msgid "Create a new automount key." -msgstr "Создать новый ключ автомонтирования." - -msgid "Create a new automount location." -msgstr "Создать новое расположение автомонтирования." - -msgid "Create a new automount map." -msgstr "Создать новый список соответствия автомонтирования." - -msgid "Create a new group." -msgstr "Создать новую группу." - -msgid "Create a new indirect mount point." -msgstr "Создать новую непрямую точку монтирования." - -msgid "Create a new service delegation rule." -msgstr "Создать новое правило делегирования служб." - -msgid "Create a new service delegation target." -msgstr "Создать новую цель делегирования служб." - -msgid "Create a new vault." -msgstr "Создать новое хранилище." - -msgid "Create as a non-POSIX group" -msgstr "Создать как не-POSIX-группу " - -msgid "Create dns record" -msgstr "Создать запись DNS" - -msgid "Create new ACI." -msgstr "Создать новую запись ACI." - -msgid "Create new DNS forward zone." -msgstr "Создать новую зону перенаправления DNS." - -msgid "Create new DNS zone (SOA record)." -msgstr "Создать новую зону DNS (запись SOA)." - -msgid "Create new Sudo Command Group." -msgstr "Создать новую группу команд Sudo." - -msgid "Create new Sudo Command." -msgstr "Создать новую команду Sudo." - -msgid "Create new Sudo Rule." -msgstr "Создать новое правило Sudo." - -msgid "Create reverse" -msgstr "Создать обратную запись" - -msgid "Create reverse record for this IP Address" -msgstr "Создать обратную запись для этого IP-адреса" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Создана ACI \"%(value)s\"" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Создана запись CA \"%(value)s\"" - -msgid "Creating record." -msgstr "Создание записи." - -msgid "Credentials" -msgstr "Учётные данные" - -msgid "Credentials cache permissions incorrect" -msgstr "Неправильные права доступа к кэшу учётных данных" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Отношения доверия между областями (realm) не настроены. Убедитесь, что на " -"IPA-сервере запущена команда ipa-adtrust-install" - -msgid "Current DNS record contents:\n" -msgstr "Текущее содержание записи DNS:\n" - -msgid "Current Password" -msgstr "Текущий пароль" - -msgid "Current domain level:" -msgstr "Текущий уровень домена:" - -msgid "Current password is required" -msgstr "Следует указать текущий пароль" - -msgid "Custom value" -msgstr "Пользовательское значение" - -msgid "Customization" -msgstr "Настройка" - -msgid "DHCID record" -msgstr "Запись DHCID" - -msgid "DLV Algorithm" -msgstr "Алгоритм DLV" - -msgid "DLV Digest" -msgstr "Дайджест DLV" - -msgid "DLV Digest Type" -msgstr "Тип дайджеста DLV" - -msgid "DLV Key Tag" -msgstr "Тег ключа DLV" - -msgid "DLV record" -msgstr "Запись DLV" - -msgid "DN commonName does not match user's login" -msgstr "В commonName DN не соответствует имени пользователя" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" -"В emailAddress DN не соответствует ни одному адресу электронной почты " -"пользователя" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "DN контейнера для групп в DS относительно базового DN" - -msgid "DN of container for users in DS relative to base DN" -msgstr "DN контейнера для пользователей в DS относительно базового DN" - -msgid "DN of the started task" -msgstr "DN запущенной задачи" - -msgid "DN to bind as if not using kerberos" -msgstr "" -"DN, к которому следует установить привязку, если не используется Kerberos" - -msgid "DNAME Target" -msgstr "Цель DNAME" - -msgid "DNAME record" -msgstr "Запись DNAME" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS Forward Zone" -msgstr "Зона перенаправления DNS" - -msgid "DNS Forward Zones" -msgstr "Зоны перенаправления DNS" - -msgid "DNS Global Configuration" -msgstr "Глобальная конфигурация DNS" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" -"В подключаемом модуле bind-dyndb-ldap не предусмотрена поддержка типа записи " -"ресурсов DNS \"%s\"" - -msgid "DNS Resource Record" -msgstr "Запись ресурса DNS" - -msgid "DNS Resource Records" -msgstr "Записи ресурсов DNS" - -msgid "DNS Server" -msgstr "DNS-сервер" - -msgid "DNS Server name" -msgstr "Имя DNS-сервера" - -msgid "DNS Servers" -msgstr "DNS-серверы" - -msgid "DNS Zone" -msgstr "Зона DNS" - -msgid "DNS Zone Settings" -msgstr "Параметры зоны DNS" - -msgid "DNS Zones" -msgstr "Зоны DNS" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" -"Не удалось выполнить проверку DNS: ожидалось {%(expected)s}, получено " -"{%(got)s}" - -msgid "DNS class" -msgstr "Класс DNS" - -msgid "DNS configuration options" -msgstr "Параметры конфигурации DNS" - -msgid "DNS forward zone" -msgstr "зона перенаправления DNS" - -msgid "DNS forward zones" -msgstr "зоны перенаправления DNS" - -msgid "DNS forwarder" -msgstr "DNS-перенаправитель" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"С выходом IPA 4.0 изменилась семантика DNS-перенаправителя.\n" -"Рекомендуется перейти на использование зон перенаправления (dnsforwardzone-" -"*).\n" -"Подробные сведения содержатся в документации." - -msgid "DNS is not configured" -msgstr "DNS не настроено" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS-метка не может быть длиннее 63 символов" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "Длина DNS-метки не может быть больше 63 символов" - -msgid "DNS record was deleted because it contained no data." -msgstr "Запись DNS была удалена, так как не содержала данные." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "Не удалось удалить DNS-запись (записи) узла %(host)s. (%(reason)s)" - -msgid "DNS records can be only updated one at a time" -msgstr "Записи DNS можно обновлять только по одной" - -msgid "DNS resource record" -msgstr "запись ресурса DNS" - -msgid "DNS resource record type" -msgstr "Тип записи ресурса DNS" - -msgid "DNS resource records" -msgstr "записи ресурсов DNS" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" -"Обратная зона DNS %(revzone)s для IP-адреса %(addr)s не управляется этим " -"сервером" - -msgid "DNS server" -msgstr "DNS-сервер" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS-сервер %(server)s не поддерживает DNSSEC: %(error)s.\n" -"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS-сервер %(server)s не поддерживает EDNS0 (RFC 6891): %(error)s.\n" -"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS-сервер %(server)s: %(error)s." - -msgid "DNS servers" -msgstr "DNS-серверы" - -msgid "DNS zone" -msgstr "зона DNS" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Зона DNS %(zone)s не найдена" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"Запись зоны DNS для каждого realmdomain должна содержать записи SOA или NS. " -"Для %s такие записи не найдены." - -msgid "DNS zone root record cannot be renamed" -msgstr "Невозможно переименовать корневую запись зоны DNS" - -msgid "DNS zones" -msgstr "зоны DNS" - -msgid "DNSKEY record" -msgstr "Запись DNSKEY" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"Экспериментальная поддержка DNSSEC.\n" -"%(additional_info)s" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Сбой проверки DNSSEC: %(error)s.\n" -"Проверьте конфигурацию DNSSEC или отключите проверку DNSSEC на всех IPA-" -"серверах." - -msgid "DNSec key master" -msgstr "Мастер ключей DNSec" - -msgid "DS Algorithm" -msgstr "Алгоритм DS" - -msgid "DS Digest" -msgstr "Дайджест DS" - -msgid "DS Digest Type" -msgstr "Тип дайджеста DS" - -msgid "DS Key Tag" -msgstr "Тег ключа DS" - -msgid "DS record" -msgstr "Запись DS" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "запись DS не должна находиться в начале зоны (RFC 4035, раздел 2.4)" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" -"запись DS должна использоваться вместе с записью NS (RFC 4592, раздел 4.6, " -"RFC 4035, раздел 2.4)" - -msgid "Data" -msgstr "Данные" - -msgid "Debugging output" -msgstr "Отладочный вывод" - -msgid "Default" -msgstr "По умолчанию" - -msgid "Default (fallback) Group" -msgstr "Группа по умолчанию (резервная)" - -msgid "Default (fallback) group for entries to land" -msgstr "Группа по умолчанию (резервная) для размещения записей" - -msgid "Default PAC types" -msgstr "Типы PAC по умолчанию" - -msgid "Default SELinux user" -msgstr "Пользователь SELinux по умолчанию" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" -"Пользователь SELinux по умолчанию, когда в правиле списка SELinux не найдено " -"соответствие" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" -"Представление отношений доверия по умолчанию невозможно применить к узлам" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" -"Представление отношений доверия по умолчанию не может содержать " -"пользователей IPA" - -msgid "Default attributes" -msgstr "Атрибуты по умолчанию" - -msgid "Default e-mail domain" -msgstr "Почтовый домен по умолчанию" - -msgid "Default from" -msgstr "По умолчанию с" - -msgid "Default group for entries to land" -msgstr "Группа по умолчанию для размещения записей" - -msgid "Default group for new users" -msgstr "Группа по умолчанию для новых пользователей" - -msgid "Default group for new users is not POSIX" -msgstr "Группа по умолчанию для новых пользователей не является POSIX-группой" - -msgid "Default group for new users not found" -msgstr "Группа по умолчанию для новых пользователей не найдена" - -msgid "Default group objectclasses" -msgstr "Классы объектов для групп по умолчанию" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Классы объектов для групп по умолчанию (через запятую)" - -msgid "Default host group" -msgstr "Группа узлов по умолчанию" - -msgid "Default location of home directories" -msgstr "Расположение домашних каталогов по умолчанию" - -msgid "Default shell" -msgstr "Оболочка по умолчанию" - -msgid "Default shell for new users" -msgstr "Оболочка по умолчанию для новых пользователей" - -msgid "Default ticket policy could not be read" -msgstr "Не удалось прочитать политику билетов по умолчанию" - -msgid "Default time to live" -msgstr "Срок жизни по умолчанию" - -msgid "Default types of PAC supported for services" -msgstr "Типы PAC по умолчанию, которые поддерживаются для служб" - -msgid "Default types of supported user authentication" -msgstr "Стандартные типы поддерживаемой аутентификации пользователей" - -msgid "Default user authentication types" -msgstr "Стандартные типы аутентификации пользователей" - -msgid "Default user group" -msgstr "Группа пользователей по умолчанию" - -msgid "Default user objectclasses" -msgstr "Классы объектов для пользователей по умолчанию" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "Классы объектов для пользователей по умолчанию (через запятую)" - -msgid "Default users group" -msgstr "Группа пользователей по умолчанию" - -msgid "Degrees Latitude" -msgstr "Градусы широты" - -msgid "Degrees Longitude" -msgstr "Градусы долготы" - -msgid "Delegation" -msgstr "Делегирование" - -msgid "Delegation name" -msgstr "Имя делегирования" - -msgid "Delegations" -msgstr "Делегирования" - -msgid "Delete" -msgstr "Удалить" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Удалить значения \"%(value)s\" %(name)s?" - -msgid "Delete ACI." -msgstr "Удалить запись ACI." - -msgid "Delete Class of Service entry" -msgstr "Удалить запись класса обслуживания" - -msgid "Delete DNS forward zone." -msgstr "Удалить зону перенаправления DNS." - -msgid "Delete DNS record entry." -msgstr "Удалить пункт записи DNS." - -msgid "Delete DNS resource record." -msgstr "Удалить запись ресурса DNS." - -msgid "Delete DNS zone (SOA record)." -msgstr "Удалить зону DNS (запись SOA)." - -msgid "Delete IPA server." -msgstr "Удалить IPA-сервер." - -msgid "Delete Key, Unprovision" -msgstr "Удалить ключ, отменить подготовку к работе" - -msgid "Delete Server" -msgstr "Удалить сервер" - -msgid "Delete Sudo Command Group." -msgstr "Удалить группу команд Sudo." - -msgid "Delete Sudo Command." -msgstr "Удалить команду Sudo." - -msgid "Delete Sudo Rule." -msgstr "Удалить правило Sudo." - -msgid "Delete a CA ACL." -msgstr "Удалить CA ACL." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Удалить правило сопоставления сертификатов с записями пользователей." - -msgid "Delete a Certificate Profile." -msgstr "Удалить профиль сертификатов." - -msgid "Delete a DNS server" -msgstr "Удалить DNS-сервер" - -msgid "Delete a RADIUS proxy server." -msgstr "Удалить прокси-сервер RADIUS." - -msgid "Delete a SELinux User Map." -msgstr "Удалить список пользователей SELinux." - -msgid "Delete a delegation." -msgstr "Удалить делегирование." - -msgid "Delete a group password policy." -msgstr "Удалить групповую политику паролей." - -msgid "Delete a host." -msgstr "Удалить узел." - -msgid "Delete a hostgroup." -msgstr "Удалить группу узлов." - -msgid "Delete a netgroup." -msgstr "Удалить сетевую группу." - -msgid "Delete a permission." -msgstr "Удалить разрешение." - -msgid "Delete a privilege." -msgstr "Удалить привилегию." - -msgid "Delete a role." -msgstr "Удалить роль." - -msgid "Delete a segment." -msgstr "Удалить сегмент." - -msgid "Delete a self-service permission." -msgstr "Удалить разрешение самообслуживания." - -msgid "Delete a stage user." -msgstr "Удалить неподтверждённого пользователя." - -msgid "Delete a topology suffix." -msgstr "Удалить суффикс топологии." - -msgid "Delete a trust." -msgstr "Удалить отношение доверия." - -msgid "Delete a user" -msgstr "Удалить пользователя" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" -"Удалить пользователя, сохраняя запись доступной для будущего использования" - -msgid "Delete a user." -msgstr "Удалить пользователя." - -msgid "Delete a vault container." -msgstr "Удалить контейнер хранилищ." - -msgid "Delete a vault." -msgstr "Удалить хранилище." - -msgid "Delete all associated records" -msgstr "Удалить все связанные записи" - -msgid "Delete all?" -msgstr "Удалить все?" - -msgid "Delete an Group ID override." -msgstr "Удалить переопределение ID группы." - -msgid "Delete an HBAC rule." -msgstr "Удалить правило HBAC." - -msgid "Delete an HBAC service group." -msgstr "Удалить группу служб HBAC." - -msgid "Delete an ID View." -msgstr "Удалить представление ID." - -msgid "Delete an ID override." -msgstr "Удалить переопределение ID." - -msgid "Delete an ID range." -msgstr "Удалить диапазон идентификаторов." - -msgid "Delete an IPA location." -msgstr "Удалить запись расположения IPA." - -msgid "Delete an IPA service." -msgstr "Удалить службу IPA." - -msgid "Delete an OTP token." -msgstr "Удалить токен OTP." - -msgid "Delete an User ID override." -msgstr "Удалить переопределение ID пользователя." - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" -"Удалить пару атрибут/значение. Параметр будет использован последним, после " -"всех установок и добавлений." - -msgid "Delete an automember rule." -msgstr "Удалить правило автоучастия." - -msgid "Delete an automount key." -msgstr "Удалить ключ автомонтирования." - -msgid "Delete an automount location." -msgstr "Удалить расположение автомонтирования." - -msgid "Delete an automount map." -msgstr "Удалить список соответствия автомонтирования." - -msgid "Delete an existing HBAC service." -msgstr "Удалить существующую службу HBAC." - -msgid "Delete domain" -msgstr "Удалить домен" - -msgid "Delete group." -msgstr "Удалить группу." - -msgid "Delete mode" -msgstr "Режим удаления" - -msgid "Delete service delegation target." -msgstr "Удалить цель делегирования служб." - -msgid "Delete service delegation." -msgstr "Удалить делегирование служб." - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Удалена ACI \"%(value)s\"" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Удалена запись CA \"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Удалена CA ACL \"%(value)s\"" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Удалено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Удалена зона перенаправления DNS \"%(value)s\"" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Удалён DNS-сервер \"%(value)s\"" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Удалена зона DNS \"%(value)s\"" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Удалено переопределение ID группы \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Удалено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Удалена служба HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Удалена группа служб HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Удалено представление ID \"%(value)s\"" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Удалено переопределение ID \"%(value)s\"" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Удалён диапазон идентификаторов \"%(value)s\"" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Удалена запись расположения IPA \"%(value)s\"" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Удалён IPA-сервер \"%(value)s\"" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Удалён токен OTP \"%(value)s\"" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Удалён прокси-сервер RADIUS \"%(value)s\"" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Удалён список пользователей SELinux \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Удалена команда Sudo \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Удалена группа команд Sudo \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Удалено правило Sudo \"%(value)s\"" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Удалено переопределение ID пользователя \"%(value)s\"" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Удалено правило автоучастия \"%(value)s\"" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Удалён ключ автомонтирования \"%(value)s\"" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Удаление расположения автомонтирования. \"%(value)s\"" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Удалён список соответствия автомонтирования \"%(value)s\"" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Удалено делегирование \"%(value)s\"" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Удалена группа \"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Удалён узел \"%(value)s\"" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Удалена группа узлов \"%(value)s\"" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Удалена сетевая группа \"%(value)s\"" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Удалено разрешение \"%(value)s\"" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Удалена привилегия \"%(value)s\"" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Удалён профиль \"%(value)s\"" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Удалена запись \"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Удалена роль \"%(value)s\"" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Удалён сегмент \"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Удалено самообслуживание \"%(value)s\"" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Удалена служба \"%(value)s\"" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Удалено делегирование служб \"%(value)s\"" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Удалена цель делегирования служб \"%(value)s\"" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Удалён неподтверждённый пользователь \"%(value)s\"" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Удалён суффикс топологии \"%(value)s\"" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Удалено отношение доверия \"%(value)s\"" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Удален пользователь \"%(value)s\"" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Удалено хранилище \"%(value)s\"" - -msgid "Deleted vault container" -msgstr "Удалён контейнер хранилищ" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"Удаление управляемой группы запрещено. Сначала её необходимо отключить." - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" -"Удаление сервера приводит к его необратимому удалению из топологии. Это " -"действие нельзя отменить." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"Удаление этой записи сервера запрещено, так как это оставило бы вашу " -"установленную систему без CA." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"Удаление этой записи сервера запрещено, так как это оставило бы вашу " -"установленную систему без KRA." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" -"Удаление этой записи сервера оставит вашу установленную систему без DNS." - -msgid "Deny" -msgstr "Запретить" - -msgid "Department Number" -msgstr "Номер отдела" - -msgid "Deprecated options" -msgstr "Неподдерживаемые опции" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Больше не поддерживается; используйте %s" - -msgid "Deprecated; use extratargetfilter" -msgstr "Больше не поддерживается; используйте extratargetfilter" - -msgid "Deprecated; use ipapermlocation" -msgstr "Больше не поддерживается; используйте ipapermlocation" - -msgid "Deprecated; use ipapermright" -msgstr "Больше не поддерживается; используйте ipapermright" - -msgid "Describe currently authenticated identity." -msgstr "Показать описание текущего прошедшего аутентификацию профиля." - -msgid "Description" -msgstr "Описание" - -msgid "Description of the purpose of the CA" -msgstr "Описание предназначения CA" - -msgid "Detach a managed group from a user." -msgstr "Отсоединить управляемую группу от пользователя." - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Отсоединена группа \"%(value)s\" от пользователя \"%(value)s\"" - -msgid "Detect" -msgstr "Определить" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" -"Определить, настроен ли подключаемый модуль совместимости схем (Schema " -"Compatibility) для обслуживания пользователей и групп доверенных доменов." - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "Определить, запущена ли в этой системе команда ipa-adtrust-install." - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "Определить, запущена ли команда ipa-adtrust-install с задачей sidgen." - -msgid "Dict of I18N messages" -msgstr "Словарь переведённых сообщений (I18N)" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "Словарь команд IPA, зашифрованных JSON" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "Словарь методов IPA, зашифрованных JSON" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Словарь объектов IPA, зашифрованных JSON" - -msgid "Dictionary mapping plugin names to bases" -msgstr "Словарь, сопоставляющий имена подключаемых модулей с базовыми" - -msgid "Dictionary mapping variable name to value" -msgstr "Словарь, сопоставляющий имя переменной со значением" - -msgid "Digest" -msgstr "Дайджест" - -msgid "Digest Type" -msgstr "Тип дайджеста" - -msgid "Digits" -msgstr "Цифры" - -msgid "Direct" -msgstr "Прямой" - -msgid "Direct Membership" -msgstr "Прямое участие" - -msgid "Direction Latitude" -msgstr "Направление широты" - -msgid "Direction Longitude" -msgstr "Направление долготы" - -msgid "Direction of replication between left and right replication node" -msgstr "Направление репликации между левым и правым узлами репликации" - -msgid "Disable" -msgstr "Отключить" - -msgid "Disable DNS Forward Zone." -msgstr "Отключить зону перенаправления DNS." - -msgid "Disable DNS Zone." -msgstr "Отключить зону DNS." - -msgid "Disable a CA ACL." -msgstr "Отключить CA ACL." - -msgid "Disable a CA." -msgstr "Отключить службу сертификации." - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Отключить правило сопоставления сертификатов с записями пользователей." - -msgid "Disable a Sudo Rule." -msgstr "Отключить правило Sudo." - -msgid "Disable a user account." -msgstr "Отключить учётную запись пользователя." - -msgid "Disable an HBAC rule." -msgstr "Отключить правило HBAC." - -msgid "Disable an SELinux User Map rule." -msgstr "Отключить правило списка пользователей SELinux." - -msgid "Disable per-user override" -msgstr "Отключить переопределение на уровне пользователя" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Отключить ключ Kerberos и SSL-сертификат службы." - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "Отключить ключ Kerberos, SSL-сертификат и все службы узла." - -msgid "Disable token" -msgstr "Отключить токен" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "Отключить использование ресурсов IPA доменом отношения доверия" - -msgid "Disabled" -msgstr "Отключён" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Отключена служба сертификации \"%(value)s\"" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Отключена CA ACL \"%(value)s\"" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Отключено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Отключена зона перенаправления DNS \"%(value)s\"" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Отключена зона DNS \"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Отключено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Отключён список пользователей SELinux \"%(value)s\"" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Отключено правило Sudo \"%s\"" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Отключённый домен \"%(domain)s\" нельзя использовать" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Отключён узел \"%(value)s\"" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Отключена служба \"%(value)s\"" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Отключён надёжный домен \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Учётная запись пользователя \"%(value)s\" отключена" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "Запретить группам узлов создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "Запретить группам узлов получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "Запретить узлам создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "Запретить узлам получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" -"Запретить группам пользователей создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Запретить группам пользователей получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "Запретить пользователям создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "Запретить пользователям получать таблицу ключей '${primary_key}'" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Запретить пользователям, группам, узлам или группам узлов создавать таблицу " -"ключей этого узла." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" -"Запретить пользователям, группам, узлам или группам узлов создавать таблицу " -"ключей этой службы." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"Запретить пользователям, группам, узлам или группам узлов получать таблицу " -"ключей этого узла." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Запретить пользователям, группам, узлам или группам узлов получать таблицу " -"ключей этой службы." - -msgid "Display Class of Service entry" -msgstr "Показать запись класса обслуживания" - -msgid "Display DNS resource." -msgstr "Показать ресурс DNS." - -msgid "Display Sudo Command Group." -msgstr "Показать группу команд Sudo." - -msgid "Display Sudo Command." -msgstr "Показать команду Sudo." - -msgid "Display Sudo Rule." -msgstr "Показать правило Sudo." - -msgid "Display a segment." -msgstr "Показать сегмент." - -msgid "Display a single ACI given an ACI name." -msgstr "Показать отдельную запись ACI по указанному имени ACI." - -msgid "Display an automount key." -msgstr "Показать ключ автомонтирования." - -msgid "Display an automount location." -msgstr "Показать расположение автомонтирования." - -msgid "Display an automount map." -msgstr "Показать список соответствия автомонтирования." - -msgid "Display configuration of a DNS server." -msgstr "Показать конфигурацию DNS-сервера." - -msgid "Display current entitlements." -msgstr "Показать текущие права." - -msgid "Display effective policy for a specific user" -msgstr "Показать действующую политику для определённого пользователя" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" -"Показать сведения о правиле сопоставления сертификатов с записями " -"пользователей." - -msgid "Display information about a DNS forward zone." -msgstr "Показать сведения о зоне перенаправления DNS." - -msgid "Display information about a DNS zone (SOA record)." -msgstr "Показать сведения о зоне DNS (записи SOA)." - -msgid "Display information about a RADIUS proxy server." -msgstr "Показать сведения о прокси-сервере RADIUS." - -msgid "Display information about a class." -msgstr "Показать сведения о классе." - -msgid "Display information about a command output." -msgstr "Показать сведения о выводе команды." - -msgid "Display information about a command parameter." -msgstr "Показать сведения о параметре команды." - -msgid "Display information about a command." -msgstr "Показать сведения о команде." - -msgid "Display information about a delegation." -msgstr "Показать сведения о делегировании." - -msgid "Display information about a help topic." -msgstr "Показать сведения о разделе справки." - -msgid "Display information about a host." -msgstr "Показать сведения об узле." - -msgid "Display information about a hostgroup." -msgstr "Показать сведения о группе узлов." - -msgid "Display information about a named group." -msgstr "Показать сведения об именованной группе." - -msgid "Display information about a named service delegation rule." -msgstr "Показать сведения об именованном правиле делегирования служб." - -msgid "Display information about a named service delegation target." -msgstr "Показать сведения об именованной цели делегирования служб." - -msgid "Display information about a netgroup." -msgstr "Показать сведения о сетевой группе." - -msgid "Display information about a permission." -msgstr "Показать сведения о разрешении." - -msgid "Display information about a privilege." -msgstr "Показать сведения о привилегии." - -msgid "Display information about a range." -msgstr "Показать сведения о диапазоне." - -msgid "Display information about a role." -msgstr "Показать сведения о роли." - -msgid "Display information about a self-service permission." -msgstr "Показать сведения о разрешении самообслуживания." - -msgid "Display information about a stage user." -msgstr "Показать сведения о неподтверждённом пользователе." - -msgid "Display information about a trust." -msgstr "Показать сведения об отношении доверия." - -msgid "Display information about a user." -msgstr "Показать сведения о пользователе." - -msgid "Display information about a vault container." -msgstr "Показать сведения о контейнере хранилищ." - -msgid "Display information about a vault." -msgstr "Показать сведения о хранилище." - -msgid "Display information about an Group ID override." -msgstr "Показать сведения о переопределении ID группы." - -msgid "Display information about an HBAC service group." -msgstr "Показать сведения о группе служб HBAC." - -msgid "Display information about an HBAC service." -msgstr "Показать сведения о службе HBAC." - -msgid "Display information about an ID View." -msgstr "Показать сведения о представлении ID." - -msgid "Display information about an ID override." -msgstr "Показать сведения о переопределении ID." - -msgid "Display information about an IPA location." -msgstr "Показать сведения о расположении IPA." - -msgid "Display information about an IPA service." -msgstr "Показать сведения о службе IPA." - -msgid "Display information about an OTP token." -msgstr "Показать сведения о токене OTP." - -msgid "Display information about an User ID override." -msgstr "Показать сведения о переопределении ID пользователя." - -msgid "Display information about an automember rule." -msgstr "Показать сведения о правиле автоучастия." - -msgid "Display information about password policy." -msgstr "Показать сведения о политике паролей." - -msgid "Display information about the default (fallback) automember groups." -msgstr " Показать сведения о группах автоучастия по умолчанию (резервных)" - -msgid "Display name" -msgstr "Отображаемое имя" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Показать права доступа этой записи (требуется --all). Подробные сведения " -"приводятся на странице справочника (man) по IPA." - -msgid "Display the current Kerberos ticket policy." -msgstr "Показать текущую политику билетов Kerberos." - -msgid "Display the list of realm domains." -msgstr "Показать список доменов области." - -msgid "Display the properties of a CA ACL." -msgstr "Показать свойства CA ACL." - -msgid "Display the properties of a CA." -msgstr "Показать свойства CA." - -msgid "Display the properties of a Certificate Profile." -msgstr "Показать свойства профиля сертификатов." - -msgid "Display the properties of a SELinux User Map rule." -msgstr "Показать свойства правила списка пользователей SELinux." - -msgid "Display the properties of an HBAC rule." -msgstr "Показать свойства правила HBAC." - -msgid "Display user record for current Kerberos principal" -msgstr "Показать запись пользователя для текущей учётной записи Kerberos" - -msgid "Do not display QR code" -msgstr "Не показывать QR-код" - -msgid "Do not update records only return expected records" -msgstr "Не обновлять записи, только вернуть ожидаемые записи" - -msgid "Do you also want to perform DNS check?" -msgstr "Вы хотите также выполнить проверку DNS?" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" -"Следует ли проверить, есть ли адрес нового полномочного сервера имён в DNS" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "Вы хотите удалить данные сопоставления сертификата ${data}?" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "Вы хотите удалить псевдоним Kerberos ${alias}?" - -msgid "Do you want to remove the certificate hold?" -msgstr "Вы хотите отменить приостановку действия сертификата?" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" -"Вы хотите отозвать этот сертификат? Выберите причину в раскрывающемся списке." - -msgid "Do you want to update system DNS records?" -msgstr "Вы хотите обновить записи DNS системы?" - -msgid "Documentation" -msgstr "Документация" - -msgid "Dogtag Authority ID" -msgstr "ID Dogtag центра " - -msgid "Domain" -msgstr "Домен" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "Домен \"%(domain)s\" не является корневым для леса \"%(forest)s\"" - -msgid "Domain GUID" -msgstr "GUID домена" - -msgid "Domain Level" -msgstr "Уровень домена" - -msgid "Domain Level cannot be lowered." -msgstr "Уровень домена не может быть понижен." +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "IPA-сервер и удалённый домен не могут иметь общее имя NetBIOS: %s" #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." msgstr "" -"Уровень домена не может быть поднят до {0}, следует устранить существующие " -"конфликты репликации." - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" -"Уровень домена не может быть поднят до {0}, так на сервере {1} не " -"предусмотрена поддержка такого уровня." - -msgid "Domain NetBIOS name" -msgstr "Имя домена NetBIOS" - -msgid "Domain SID" -msgstr "SID домена" - -msgid "Domain SID of the trusted domain" -msgstr "SID доверенного домена" - -msgid "Domain Security Identifier" -msgstr "Идентификатор безопасности домена" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "Контроллер домена для домена Active Directory (необязательно)" - -msgid "Domain enabled" -msgstr "Домен включён" - -msgid "Domain name" -msgstr "Имя домена" - -msgid "Domain resolution order" -msgstr "Порядок разрешения доменов" - -msgid "Domain where the user entry will be searched" -msgstr "Домен, в котором будет выполняться поиск записи пользователя" - -msgid "Don't create user private group" -msgstr "Не создавать личную группу пользователя" - -msgid "Don't wait for rebuilding membership" -msgstr "Не ждать перестройки участия" - -msgid "Download" -msgstr "Загрузить" - -msgid "Download certificate as PEM formatted file." -msgstr "Загрузить сертификат в виде файла в формате PEM." - -msgid "Drive to mount a home directory" -msgstr "Диск для монтирования домашнего каталога" - -msgid "Dry run" -msgstr "Пробное выполнение" - -msgid "Duplicate keys skipped:" -msgstr "Пропущенные ключи-дубликаты:" - -msgid "Duplicate maps skipped:" -msgstr "Пропущенные списки соответствия — дубликаты:" - -msgid "Dynamic update" -msgstr "Динамическое обновление" - -msgid "Edit" -msgstr "Изменить" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Изменить ${entity}" - -msgid "Effective attributes" -msgstr "Действующие атрибуты" - -msgid "Email address" -msgstr "Адрес электронной почты" - -msgid "Employee Information" -msgstr "Сведения о сотруднике" - -msgid "Employee Number" -msgstr "Номер сотрудника" - -msgid "Employee Type" -msgstr "Тип сотрудника" - -msgid "Empty domain is not allowed" -msgstr "Использование пустого домена запрещено" - -msgid "Enable" -msgstr "Включить" - -msgid "Enable DNS Forward Zone." -msgstr "Включить зону перенаправления DNS." - -msgid "Enable DNS Zone." -msgstr "Включить зону DNS." - -msgid "Enable a CA ACL." -msgstr "Включить CA ACL." - -msgid "Enable a CA." -msgstr "Включить службу сертификации." - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "Включить правило сопоставления сертификатов с записями пользователей." - -msgid "Enable a Sudo Rule." -msgstr "Включить правило Sudo." - -msgid "Enable a user account." -msgstr "Включить учётную запись пользователя." - -msgid "Enable an HBAC rule." -msgstr "Включить правило HBAC." - -msgid "Enable an SELinux User Map rule." -msgstr "Включить правило списка пользователей SELinux." - -msgid "Enable migration mode" -msgstr "Включить режим миграции" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" -"Включить или отключить использование \"анонимного пользователя\" для пре-" -"аутентификации (PKINIT)." - -msgid "Enable token" -msgstr "Включить токен" - -msgid "Enabled" -msgstr "Включено" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Включена служба сертификации \"%(value)s\"" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Включена CA ACL \"%(value)s\"" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Включено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Включена зона перенаправления DNS \"%(value)s\"" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Включена зона DNS \"%(value)s\"" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Включено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Включён список пользователей SELinux \"%(value)s\"" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Включено правило Sudo \"%s\"" - -msgid "Enabled server roles" -msgstr "Включены роли сервера" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Включён надёжный домен \"%(value)s\"" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Учётная запись пользователя \"%(value)s\" включена" - -msgid "Encryption types to request" -msgstr "Типы шифрования для запрашивания" - -msgid "Enctype comparison failed!\n" -msgstr "Ошибка сравнения значений типа шифрования!\n" - -msgid "Enrolled" -msgstr "Зарегистрировано" - -msgid "Enrollment" -msgstr "Регистрация" - -msgid "Enrollment UUID" -msgstr "UUID регистрации" - -msgid "Enrollment UUID (not implemented)" -msgstr "UUID регистрации (не поддерживается)" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Не удалось выполнить регистрацию. %s\n" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Введите %(label)s ещё раз для проверки: " - -msgid "Enter LDAP password" -msgstr "Введите пароль LDAP" - -msgid "Enter trusted group name." -msgstr "Введите имя доверенной группы." - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" -"Введите имя учётной записи доверенной группы или группы IPA. Примечание: в " -"списке результатов поиска не будет записей групп из доверенных доменов." - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" -"Введите имя учётной записи доверенного пользователя или пользователя IPA. " -"Примечание: в списке результатов поиска не будет записей пользователей из " -"доверенных доменов." - -msgid "Enter trusted user login." -msgstr "Введите имя учётной записи доверенного пользователя." - -msgid "Entry" -msgstr "Запись" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Запись %s не существует" - -#, python-format -msgid "Entry %s not found" -msgstr "Запись %s не найдена" - -msgid "Entry RDN is not 'uid'" -msgstr "RDN записи не имеет значение \"uid\"" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "В записи нет \"%(attribute)s\"" - -msgid "Enumerate all the hosts the view applies to." -msgstr "Пронумеровать все узлы, к которым применяется представление" - -msgid "Error" -msgstr "Ошибка" - -msgid "Error changing account status" -msgstr "Ошибка при изменении состояния учётной записи" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Ошибка получения области (realm) Kerberos по умолчанию: %s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Ошибка получения начальных учётных данных: %s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Ошибка обработки \"%1$s\": %2$s.\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Ошибка обработки файла таблицы ключей: %s.\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Ошибка сохранения учётных данных в кэше: %s.\n" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" -"Установить двунаправленное отношение доверия. По умолчанию устанавливается " -"только одностороннее отношение." - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Установить внешнее отношение доверия с доменом в другом лесу. Отношение " -"доверия не является транзитивным за пределами этого домена." - -msgid "Establish using" -msgstr "Установить с помощью" - -msgid "Established and verified" -msgstr "Установлено и проверено" - -msgid "Exceeded number of tries to forward a request." -msgstr "Превышено количество попыток перенаправления запроса." - -msgid "Exchanger" -msgstr "Обменник" - -msgid "Exclude from" -msgstr "Исключить из" - -msgid "Excluded attributes" -msgstr "Исключённые атрибуты" - -msgid "Exclusive" -msgstr "Исключающий" - -msgid "Exclusive Regex" -msgstr "Исключающие регулярные выражения" - -msgid "Expand All" -msgstr "Развернуть все" - -msgid "Expires On" -msgstr "Истекает" - -msgid "Export plugin meta-data for the webUI." -msgstr "Экспортировать метаданные подключаемого модуля для веб-интерфейса." - -msgid "Expression" -msgstr "Выражение" - -msgid "External" -msgstr "Внешний" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" -"Внешняя группа, от имени которой можно выполнять команды (только sudorule-" -"find)" - -msgid "External Groups of RunAs Users" -msgstr "Внешние группы пользователей запуска от имени" - -msgid "External Groups of users that the command can run as" -msgstr "Внешние группы пользователей, от имени которых можно выполнять команду" - -msgid "External User" -msgstr "Внешний пользователь" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" -"Внешний пользователь, от имени которого можно выполнять команды (только " -"sudorule-find)" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" -"Внешний пользователь, к которому применяется правило (только sudorule-find)" - -msgid "External host" -msgstr "Внешний узел" - -msgid "External member" -msgstr "Внешний участник" - -msgid "External trust" -msgstr "Внешнее отношение доверия" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Дополнительные хеши для создания в подключаемом модуле паролей" - -msgid "Extra target filter" -msgstr "Дополнительный фильтр целей" - -msgid "Failed CAs" -msgstr "Ошибка центров сертификации (CA)" - -msgid "Failed RunAs" -msgstr "Ошибка запуска от имени" - -msgid "Failed RunAsGroup" -msgstr "Ошибка запуска от имени группы" - -msgid "Failed allowed to create keytab" -msgstr "Не удалось разрешить создавать таблицу ключей" - -msgid "Failed allowed to retrieve keytab" -msgstr "Не удалось разрешить получать таблицу ключей" - -msgid "Failed hosts/hostgroups" -msgstr "Ошибка узлов или групп узлов" - -msgid "Failed logins" -msgstr "Неудачные попытки входа" - -msgid "Failed managedby" -msgstr "Ошибка managedby" - -msgid "Failed members" -msgstr "Ошибка участников" - -msgid "Failed owners" -msgstr "Записи владельцев с ошибками" - -msgid "Failed profiles" -msgstr "Ошибка профилей" - -msgid "Failed service/service groups" -msgstr "Ошибка службы или групп служб" - -msgid "Failed source hosts/hostgroups" -msgstr "Ошибка узлов-источников или групп узлов — источников" - -msgid "Failed targets" -msgstr "Ошибка целей" - -msgid "Failed to add" -msgstr "Ошибка при добавлении" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Не удалось добавить ключ в таблицу ключей\n" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Не удалось добавить пользователя в группу по умолчанию. Используйте команду " -"\"ipa group-add-member\", чтобы добавить его вручную." - -msgid "Failed to authenticate to CA REST API" -msgstr "" -"Не удалось выполнить аутентификацию с помощью программного интерфейса CA REST" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "Не удалось задать привязку к серверу!\n" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Не удалось удалить memberPrincipal %(principal)s из записи s4u2proxy %(dn)s: " -"%(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Не удалось удалить ключи Custodia для %(master)s: %(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Не удалось удалить записи имени узла DNA для %(master)s: %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Не удалось удалить записи DNS %(hostname)s: %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Не удалось удалить учётные записи или ключи сервера: %(err)s" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Не удалось закрыть файл таблицы ключей\n" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" -"Не удалось установить соединение с sssd с помощью SystemBus. Подробные " -"сведения доступны в файле error_log" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Не удалось создать элемент управления!\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Не удалось создать ключ\n" - -msgid "Failed to create key!\n" -msgstr "Не удалось создать ключ!\n" - -msgid "Failed to create random key!\n" -msgstr "Не удалось создать случайный ключ!\n" - -msgid "Failed to decode control reply!\n" -msgstr "" -"Не удалось расшифровать контрольный ответ!\n" -"\n" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Не удалось найти пользователей с помощью SystemBus. Подробные сведения " -"доступны в файле error_log" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "Не удалось получить файл таблицы ключей\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Не удалось получить файл таблицы ключей!\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "Не удалось получить результат: %s\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Не удалось открыть файл таблицы ключей\n" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "Не удалось открыть файл конфигурации %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Не удалось открыть файл таблицы ключей\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Не удалось открыть файл таблицы ключей \"%1$s\": %2$s\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Не удалось обработать файл конфигурации %s\n" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Не удалось обработать расширенный результат: %s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "Не удалось обработать результат: %s\n" - -msgid "Failed to remove" -msgstr "Ошибка при удалении" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "Не удалось удалить сервер %(master)s из списка серверов: %(err)s" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Не удалось разрешить символическую ссылку на файл таблицы ключей.\n" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "Не удалось получить ни одного ключа" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "Не удалось получить данные о типе шифрования %1$s (№%2$d)\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Не удалось получить данные о типе шифрования №%d\n" - -msgid "Failed users/groups" -msgstr "Ошибка пользователей или групп" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Сбой при декодировании запроса подписи сертификата: %s" - -msgid "Failure reset interval" -msgstr "Интервал сброса ошибок" - -msgid "Fallback primary group" -msgstr "Резервная основная группа" - -msgid "Fallback to AD DC LDAP" -msgstr "Перейти к резервному варианту LDAP DC AD " - -msgid "False" -msgstr "Нет (False)" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" -"Значение \"False\", если миграцию не удалось выполнить из-за включённого " -"подключаемого модуля совместимости." - -msgid "False if migration mode was disabled." -msgstr "Значение \"False\", если режим миграции отключён." - -msgid "Fax Number" -msgstr "Номер факса" - -msgid "Fetch domains" -msgstr "Получить домены" - -msgid "Fetching DNS zones." -msgstr "Получение данных зон DNS." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"Не удалось получить домены из доверенного леса. Подробные сведения доступны " -"в файле error_log" - -#, python-format -msgid "File %(file)s not found" -msgstr "Файл %(file)s не найден" - -msgid "File containing data to archive" -msgstr "Файл, содержащий данные, которые следует архивировать" - -msgid "File containing profile configuration" -msgstr "Файл, который содержит конфигурацию профиля" - -msgid "File containing the new vault password" -msgstr "Файл, который содержит новый пароль хранилища" - -msgid "File containing the new vault public key" -msgstr "Файл, который содержит новый открытый ключ хранилища" - -msgid "File containing the old vault password" -msgstr "Файл, который содержит старый пароль хранилища" - -msgid "File containing the old vault private key" -msgstr "Файл, который содержит старый закрытый ключ хранилища" - -msgid "File containing the vault password" -msgstr "Файл, который содержит пароль хранилища" - -msgid "File containing the vault private key" -msgstr "Файл, который содержит закрытый ключ хранилища" - -msgid "File containing the vault public key" -msgstr "Файл, который содержит открытый ключ хранилища" - -msgid "File to load the certificate from" -msgstr "Файл, из которого следует загрузить сертификат" - -msgid "File to load the certificate from." -msgstr "Файл, из которого следует загрузить сертификат." - -msgid "File to store retrieved data" -msgstr "Файл, в который следует сохранить полученные данные" - -msgid "File to store the certificate in." -msgstr "Файл для сохранения сертификата" - -msgid "Filename is empty" -msgstr "Пустое имя файла" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" -"Имя файла необработанного профиля. Поддержка формата XML не предусмотрена." - -msgid "Filter" -msgstr "Фильтр" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "Доступный фильтр ${other_entity}" - -msgid "Find" -msgstr "Найти" - -msgid "Find a server role on a server(s)" -msgstr "Поиск роли сервера на сервере (серверах)." - -msgid "Fingerprint" -msgstr "Отпечаток" - -msgid "Fingerprint (SHA1)" -msgstr "Отпечаток (SHA1)" - -msgid "Fingerprint (SHA256)" -msgstr "Отпечаток (SHA256)" - -msgid "Fingerprint Type" -msgstr "Тип отпечатка" - -msgid "Fingerprint of schema cached by client" -msgstr "Отпечаток схемы, кэшированный клиентом" - -msgid "Fingerprints" -msgstr "Отпечатки" - -msgid "First" -msgstr "Первый" - -msgid "First Code" -msgstr "Первый код" - -msgid "First OTP" -msgstr "Первый OTP" - -msgid "First Posix ID of the range" -msgstr "Первый идентификатор POSIX диапазона" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" -"Первый идентификатор POSIX диапазона, зарезервированного для доверенного " -"домена" - -msgid "First RID of the corresponding RID range" -msgstr "Первый RID соответствующего диапазона RID" - -msgid "First RID of the secondary RID range" -msgstr "Первый RID вторичного диапазона RID" - -msgid "First date/time the token can be used" -msgstr "Начало срока действия токена (день и время)" - -msgid "First name" -msgstr "Имя" - -msgid "Flags" -msgstr "Флаги" - -msgid "Following segments were not deleted:" -msgstr "Следующие сегменты не были удалены:" - -msgid "Force" -msgstr "Принудительно" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" -"Принудительно создать зону DNS, даже если она будет пересекаться с " -"существующей зоной" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" -"Принудительно создать зону DNS, даже если не удаётся определить сервер имён" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" -"Принудительно создать зону DNS, даже если не удаётся определить сервер имён. " -"(Больше не поддерживается.)" - -msgid "Force Update" -msgstr "Принудительное обновление" - -msgid "Force adding domain even if not in DNS" -msgstr "Принудительно добавить домен, даже если имени нет в DNS" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "Принудительно изменить сервер имён, даже если он отсутствует в DNS" - -msgid "Force server removal" -msgstr "Принудительное удаление сервера" - -msgid "Force server removal even if it does not exist" -msgstr "Принудительное удаление сервера, даже если он не существует" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" -"Принудительно присоединить узел. Повторить присоединение, даже если оно уже " -"выполнено." - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "Принудительное удаление %(hostname)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"У леса \"%(forest)s\" существует отношение доверия с лесом (лесами) " -"%(domains)s, это не позволяет установить отношение доверия с \"%(conflict)s\"" - -msgid "Format error" -msgstr "Ошибка форматирования" - -msgid "Forward first" -msgstr "Сначала перенаправлять" - -msgid "Forward only" -msgstr "Только перенаправлять" - -msgid "Forward policy" -msgstr "Политика перенаправления" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"В DNS IPA определена соответствующая политика перенаправления. Возможно, " -"перенаправитель указывает на некорректный узел?" - -msgid "Forward to server instead of running locally" -msgstr "Перенаправить на сервер вместо локального выполнения" - -msgid "Forward zones only" -msgstr "Только зоны перенаправления" - -msgid "Forwarders" -msgstr "Перенаправители" - -msgid "Forwarding disabled" -msgstr "Перенаправление отключено" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"Политика перенаправления конфликтует с некоторыми автоматически созданными " -"пустыми зонами. Запросы для зон, указанных в RFC 6303, будут игнорировать " -"перенаправление и рекурсию и всегда возвращать ответы \"NXDOMAIN\". Чтобы " -"переопределить это поведение, используйте политику перенаправления \"only\"." - -#, python-format -msgid "Found '%(value)s'" -msgstr "Найдено: \"%(value)s\"" - -msgid "Full name" -msgstr "Полное имя" - -msgid "Fully Qualified Host Name" -msgstr "Полное имя узла" - -msgid "Function to get details" -msgstr "Функция для получения сведений" - -msgid "GECOS" -msgstr "GECOS" - -msgid "GECOS field" -msgstr "Поле GECOS" - -msgid "GID" -msgstr "ID группы" - -msgid "GID (use this option to set it manually)" -msgstr "GID (используйте этот параметр, чтобы установить его вручную)" - -msgid "GSSAPI|EXTERNAL" -msgstr "GSSAPI|EXTERNAL" - -msgid "General" -msgstr "Основные" - -msgid "Generate OTP" -msgstr "Создать OTP" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "Создать случайный пароль для массовой регистрации" - -msgid "Generate a random user password" -msgstr "Создать случайный пользовательский пароль" - -msgid "Generate automount files for a specific location." -msgstr "Создать файлы автомонтирования для определённого расположения." - -msgid "Generated OTP" -msgstr "Созданный OTP" - -msgid "Get" -msgstr "Получить" - -msgid "Get Certificate" -msgstr "Получить сертификат" - -msgid "Global DNS configuration is empty" -msgstr "Пустая глобальная конфигурация DNS" - -msgid "Global Trust Configuration" -msgstr "Глобальная конфигурация отношений доверия" - -msgid "Global forwarders" -msgstr "Глобальные перенаправители" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Глобальные перенаправители. Для каждого перенаправителя можно указать " -"отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"." - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" -"Глобальная политика перенаправления. Чтобы отключить все настроенные " -"глобальные перенаправители, установите значение \"none\"." - -msgid "Granted rights" -msgstr "Предоставленные права" - -msgid "Granted to Privilege" -msgstr "Предоставлена привилегия" - -msgid "Granting privilege to roles" -msgstr "Предоставление привилегий ролям" - -msgid "Group" -msgstr "Группа" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Группа \"%s\" не существует" - -msgid "Group ID Number" -msgstr "ID группы" - -msgid "Group ID override" -msgstr "Переопределение ID группы" - -msgid "Group ID overrides" -msgstr "Переопределения ID группы" - -msgid "Group Options" -msgstr "Параметры группы" - -msgid "Group Settings" -msgstr "Параметры группы" - -msgid "Group Type" -msgstr "Тип группы" - -msgid "Group categories" -msgstr "Категории групп" - -msgid "Group container" -msgstr "Контейнер групп" - -msgid "Group description" -msgstr "Описание группы" - -msgid "Group name" -msgstr "Имя группы" - -msgid "Group object class" -msgstr "Класс объектов группы" - -msgid "Group object overrides" -msgstr "Приоритет объекта группы" - -msgid "Group search fields" -msgstr "Поля поиска групп" - -msgid "Group to apply ACI to" -msgstr "Группа, к которой следует применить ACI" - -msgid "Group to override" -msgstr "Группа, которую следует переопределить" - -msgid "Grouping Type" -msgstr "Тип группировки" - -msgid "Grouping to which the rule applies" -msgstr "Группировка, к которой применяется правило " - -msgid "Groups" -msgstr "Группы" - -msgid "Groups allowed to create keytab" -msgstr "Группы, которым разрешено создавать таблицу ключей" - -msgid "Groups allowed to retrieve keytab" -msgstr "Группы, которым разрешено получать таблицу ключей" - -msgid "Groups of RunAs Users" -msgstr "Группы пользователей запуска от имени" - -msgid "HBAC Rule" -msgstr "Правило HBAC" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "Правило HBAC, которое определяет пользователей, группы и группы узлов" - -msgid "HBAC Rules" -msgstr "Правила HBAC" - -msgid "HBAC Service" -msgstr "Cлужба HBAC" - -msgid "HBAC Service Group" -msgstr "Группа служб HBAC" - -msgid "HBAC Service Groups" -msgstr "Группы служб HBAC" - -msgid "HBAC Services" -msgstr "Cлужбы HBAC" - -msgid "HBAC Test" -msgstr "Проверка HBAC" - -msgid "HBAC rule" -msgstr "правило HBAC" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Правило HBAC %(rule)s не найдено" - -msgid "HBAC rule and local members cannot both be set" -msgstr "Невозможно одновременно указать правило HBAC и локальных участников" - -msgid "HBAC rules" -msgstr "правила HBAC" - -msgid "HBAC service" -msgstr "Служба HBAC" - -msgid "HBAC service description" -msgstr "Описание службы HBAC" - -msgid "HBAC service group" -msgstr "группа служб HBAC" - -msgid "HBAC service group description" -msgstr "Описание группы служб HBAC" - -msgid "HBAC service groups" -msgstr "группы служб HBAC" - -msgid "HBAC service groups to add" -msgstr "группы служб HBAC, которые следует добавить" - -msgid "HBAC service groups to remove" -msgstr "группы служб HBAC, которые следует удалить" - -msgid "HBAC services" -msgstr "cлужбы HBAC" - -msgid "HBAC services to add" -msgstr "cлужбы HBAC, которые следует добавить" - -msgid "HBAC services to remove" -msgstr "службы HBAC, которые следует удалить" - -msgid "HIP record" -msgstr "Запись HIP" - -msgid "HOTP Authentication Window" -msgstr "Окно HOTP-аутентификации" - -msgid "HOTP Synchronization Window" -msgstr "Окно HOTP-синхронизации" - -msgid "HOTP authentication skip-ahead" -msgstr "Пропустить HOTP-аутентификацию и перейти далее" - -msgid "HOTP synchronization skip-ahead" -msgstr "Пропустить HOTP-синхронизацию и перейти далее" - -msgid "HTTP Error" -msgstr "Ошибка HTTP" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "Пароль с усиленной защитой (SPAKE или FAST)" - -msgid "Hardware MAC address(es) on this host" -msgstr "MAC-адрес(а) данного узла" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Аппаратная платформа узла (например, Lenovo T61)" - -msgid "Hello world" -msgstr "Привет всем!" - -msgid "Help topic" -msgstr "Раздел справки" - -msgid "Hidden IPA CA servers" -msgstr "Скрытые серверы CA IPA" - -msgid "Hidden IPA DNS servers" -msgstr "Скрытые DNS-серверы IPA" - -msgid "Hidden IPA KRA servers" -msgstr "Скрытые KRA-серверы IPA" - -msgid "Hidden IPA masters" -msgstr "Скрытые главные IPA-серверы" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Скрытые IPA-серверы, настроенные в качестве центра сертификации" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "Скрытыие IPA-серверы, настроенные в качестве сервера доменных имен" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" -"Скрытые IPA-серверы, настроенные в качестве агента восстановления ключей" - -msgid "Hide" -msgstr "Скрыть" - -msgid "Hide details" -msgstr "Скрыть подробности" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" -"Скрыть подробные сведения о том, какие правила соответствуют, не " -"соответствуют или недействительны" - -msgid "History size" -msgstr "Размер журнала " - -msgid "Home directory" -msgstr "Домашний каталог" - -msgid "Home directory base" -msgstr "Основа домашних каталогов" - -msgid "Horizontal Precision" -msgstr "Горизонтальная точность" - -msgid "Host" -msgstr "Узел" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Узел \"%(host)s\" не найден" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "На узле \"%(hostname)s\" нет соответствующей записи DNS A/AAAA" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" -"Узел \"%(hostname)s\" не является активным центром распространения ключей " -"(KDC)" - -msgid "Host Certificate" -msgstr "Сертификат узла" - -msgid "Host Group" -msgstr "Группа узлов" - -msgid "Host Group Settings" -msgstr "Параметры группы узлов" - -msgid "Host Groups" -msgstr "Группы узлов" - -msgid "Host Groups allowed to create keytab" -msgstr "Группы узлов, которым разрешено создавать таблицу ключей" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Группы узлов, которым разрешено получать таблицу ключей" - -msgid "Host Masks" -msgstr "Маски узлов" - -msgid "Host Name" -msgstr "Имя узла" - -msgid "Host Settings" -msgstr "Параметры узла" - -msgid "Host category" -msgstr "Категория узлов" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Категория узлов (семантика этого атрибута предназначена для локального " -"разбора)" - -msgid "Host category the ACL applies to" -msgstr "Категория узлов, к которой применяется ACL" - -msgid "Host category the rule applies to" -msgstr "Категория узлов, к которой применяется правило" - -msgid "Host group rule" -msgstr "Правило группы узлов" - -msgid "Host group rules" -msgstr "Правила группы узлов" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Аппаратная платформа узла (например, \"Lenovo T61\")" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Узел уже присоединён.\n" - -msgid "Host is not supported" -msgstr "Поддержка узла не предусмотрена" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Адрес местонахождения узла (например, \"Москва, Россия\")" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Расположение узла (например, \"Lab 2\")" - -msgid "Host name" -msgstr "Имя узла" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Операционная система узла и её версия (например, \"Fedora 9\")" - -msgid "Host unprovisioned" -msgstr "Узел, подготовка которого к работе отменена" - -msgid "Host-Based Access Control" -msgstr "Управление доступом на основе узла" - -msgid "Host-based access control commands" -msgstr "Команды управления доступом на основе узла" - -msgid "Host-group" -msgstr "Группа узлов" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" -"Группы узлов, к узлам которых следует применить представление ID. Обратите " -"внимание, что представление не применяется автоматически к узлам, " -"добавленным в группу узлов после выполнения команды idview-apply." - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" -"Группы узлов, для узлов которых следует очистить представления ID. Обратите " -"внимание, что представление не очищается автоматически для узлов, " -"добавленных в группу узлов после выполнения команды idview-unapply. " - -msgid "Hostname" -msgstr "Имя узла" - -msgid "Hostname (FQDN)" -msgstr "Имя узла (FQDN)" - -msgid "Hostname of this server" -msgstr "Имя узла этого сервера" - -msgid "Hosts" -msgstr "Узлы" - -msgid "Hosts allowed to create keytab" -msgstr "Узлы, которым разрешено создавать таблицу ключей" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Узлы, которым разрешено получать таблицу ключей" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" -"Узлы или группы узлов, для которых не удалось очистить представление ID." - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" -"Узлы или группы узлов, к которым не удалось применить это представление ID." - -msgid "Hosts that ID View was cleared from." -msgstr "Узлы, для которых было очищено представление ID." - -msgid "Hosts that this ID View was applied to." -msgstr "Узлы, к которым было применено это представление ID." - -msgid "Hosts the view applies to" -msgstr "Узлы, к которым применяется представление" - -msgid "Hosts to apply the ID View to" -msgstr "Узлы, к которым следует применить представление ID" - -msgid "Hosts to clear (any) ID View from." -msgstr "Узлы, для которых следует очистить (любое) представление ID." - -msgid "How long should negative responses be cached" -msgstr "Как долго следует кэшировать отрицательные ответы" - -msgid "ID Range" -msgstr "Диапазон идентификаторов" - -msgid "ID Ranges" -msgstr "Диапазоны идентификаторов" - -msgid "ID View" -msgstr "Представление ID" - -msgid "ID View Name" -msgstr "Имя представления ID" - -msgid "ID View already applied" -msgstr "Представление ID уже применено" - -#, python-format -msgid "ID View applied to %i host." -msgstr "Представление ID применено к узлу: %i." - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "Представление ID применено к узлам: %i." - -#, python-format -msgid "ID View cleared from %i host." -msgstr "Представление ID очищено из %i узла." - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "Представление ID очищено из %i узлов." - -msgid "ID Views" -msgstr "Представления ID" - -msgid "ID override" -msgstr "Переопределение ID" - -msgid "ID overrides cannot be renamed" -msgstr "Невозможно переименовать переопределения ID" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"Диапазон идентификаторов для доверенного домена уже существует, но имеет " -"другой тип. Удалите старый диапазон вручную или не устанавливайте тип " -"принудительно с помощью параметра --range-type." - -msgid "ID range type, one of allowed values" -msgstr "Тип диапазона идентификаторов, одно из разрешённых значений" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" -"Тип диапазона идентификаторов, один из следующих: ipa-ad-trust-posix, ipa-ad-" -"trust, ipa-local" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Уже существует диапазон идентификаторов с тем же именем, но другим SID " -"домена. Диапазон идентификаторов для нового доверенного домена необходимо " -"создать вручную." - -msgid "IP Address" -msgstr "IP-адрес" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "IP-адрес %(ip)s уже назначен в домене %(domain)s." - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "IP-адрес в subjectAltName (%s) не имеет записи PTR" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "IP-адрес в subjectAltName (%s) недоступен из DNS-имён" - -msgid "IP network to create reverse zone name from" -msgstr "IP-сеть для создания имени обратной зоны" - -msgid "IPA AD trust agents" -msgstr "Агенты отношений доверия AD IPA" - -msgid "IPA AD trust controllers" -msgstr "Контролёры отношений доверия AD IPA" - -msgid "IPA CA cannot be deleted" -msgstr "Невозможно удалить CA IPA" - -msgid "IPA CA cannot be disabled" -msgstr "Службу сертификации IPA нельзя отключить" - -msgid "IPA CA certificate" -msgstr "Сертификат CA IPA" - -msgid "IPA CA renewal master" -msgstr "Главный сервер обновления CA IPA" - -msgid "IPA CA servers" -msgstr "Серверы CA IPA" - -msgid "IPA DNS Server is not installed" -msgstr "DNS-сервер IPA не установлен" - -msgid "IPA DNS records" -msgstr "Записи DNS IPA" - -msgid "IPA DNS servers" -msgstr "DNS-серверы IPA" - -msgid "IPA DNS version" -msgstr "Версия DNS IPA" - -msgid "IPA DNSSec key master" -msgstr "Мастер ключей DNSSec IPA" - -msgid "IPA Error" -msgstr "Ошибка IPA" - -msgid "IPA KRA servers" -msgstr "KRA-серверы IPA" - -msgid "IPA Location" -msgstr "Расположение IPA" - -msgid "IPA Location description" -msgstr "Описание расположения IPA" - -msgid "IPA Locations" -msgstr "Расположения IPA" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"Если указан SID доверенного домена, тип диапазона IPA должен быть ipa-ad-" -"trust или ipa-ad-trust-posix" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"Если не указан SID доверенного домена, тип диапазона IPA не должен быть ipa-" -"ad-trust или ipa-ad-trust-posix" - -msgid "IPA Server" -msgstr "IPA-сервер" - -msgid "IPA Server Role" -msgstr "Роль IPA-сервера" - -msgid "IPA Server Roles" -msgstr "Роли IPA-сервера" - -msgid "IPA Server to use" -msgstr "IPA-сервер, который следует использовать" - -msgid "IPA Servers" -msgstr "IPA-серверы" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA не управляет зоной %(zone)s. Добавьте записи на DNS-сервер вручную." - -msgid "IPA location name" -msgstr "Имя расположения IPA" - -msgid "IPA location records" -msgstr "Записи расположений IPA" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" -"IPA управляет DNS. Проверьте вашу конфигурацию DNS и убедитесь, что " -"настройки позволяют определять адреса служебных записей домена \"{domain}\". " -"Примеры настройки DNS с помощью команд CLI или веб-интерфейса доступны в " -"документации. " - -msgid "IPA master capable of PKINIT" -msgstr "Главный IPA-сервер с поддержкой PKINIT" +"Отношение доверия с {ipa_domain} с неподдерживаемым типом {trust_type} уже " +"существует. Пожалуйста, удалите его вручную на стороне DC AD." #, python-format msgid "" @@ -21382,1797 +31516,37 @@ msgstr "" "данных об отношениях доверия. Кроме того, проверьте, может ли DNS AD " "определять по записям SRV %(records)s корректный IPA-сервер." -msgid "IPA master which can process PKINIT requests" -msgstr "Главный IPA-сервер, которой может обрабатывать запросы PKINIT" - -msgid "IPA masters" -msgstr "Главные IPA-серверы" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "namingContext IPA не найдено\n" - -msgid "IPA object" -msgstr "Объект IPA" - -msgid "IPA role name" -msgstr "Имя роли IPA" - -msgid "IPA server configured as DNSSec key master" -msgstr "IPA-сервер, настроенный в качестве мастера ключей DNSSec" - -msgid "IPA server domain cannot be deleted" -msgstr "Домен IPA-сервера не может быть удалён" - -msgid "IPA server domain cannot be omitted" -msgstr "Домен IPA-сервера не может быть пропущен" - -msgid "IPA server hostname" -msgstr "Имя узла IPA-сервера" - -msgid "IPA server role name" -msgstr "Имя роли IPA-сервера" - -msgid "IPA servers configured as AD trust agents" -msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" - -msgid "IPA servers configured as AD trust controllers" -msgstr "IPA-серверы, настроенные в качестве контролёров отношений доверия AD" - -msgid "IPA servers configured as certificate authority" -msgstr "IPA-серверы, настроенные в качестве центра сертификации" - -msgid "IPA servers configured as domain name server" -msgstr "IPA-серверы, настроенные в качестве сервера доменных имен" - -msgid "IPA servers configured as key recovery agent" -msgstr "IPA-серверы, настроенные в качестве агента восстановления ключей" - -msgid "IPA servers configured as key recovery agents" -msgstr "IPA-серверы, настроенные в качестве агентов восстановления ключей" - -msgid "IPA trust" -msgstr "Отношение доверия IPA" - -msgid "IPA unique ID" -msgstr "Уникальный ID IPA" - -msgid "IPSECKEY record" -msgstr "Запись IPSECKEY" - -msgid "Identity" -msgstr "Идентификация" - -msgid "Identity Settings" -msgstr "Параметры идентификации" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "Если CA не указаны, будут разрешены запросы к CA по умолчанию." - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"При повторном возникновении проблемы обратитесь к системному администратору." - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" -"Игнорировать проверку того, является ли удаляемый сервер последним сервером " -"CA или DNS" - -msgid "Ignore compat plugin" -msgstr "Игнорировать подключаемый модуль совместимости" - -msgid "Ignore group attribute" -msgstr "Игнорировать атрибут группы" - -msgid "Ignore group object class" -msgstr "Игнорировать класс объектов группы" - -msgid "Ignore topology connectivity problems after removal" -msgstr "Игнорировать ошибки топологии подключений после удаления" - -msgid "Ignore topology errors" -msgstr "Игнорировать ошибки топологии" - -msgid "Ignore user attribute" -msgstr "Игнорировать атрибут пользователя" - -msgid "Ignore user object class" -msgstr "Игнорировать класс объектов пользователя" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "Пропущено %(src)s в %(dst)s" - -msgid "Ignored keys:" -msgstr "Пропущенные ключи:" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "Предупреждения игнорируются, процесс удаления продолжается" - -msgid "Ignoring topology connectivity errors." -msgstr "Игнорирование ошибок топологии подключений." - -msgid "Import a Certificate Profile." -msgstr "Импортировать профиль сертификатов." - -msgid "Import an entitlement certificate." -msgstr "Импортировать сертификат прав." - -msgid "Import automount files for a specific location." -msgstr "Импортировать файлы автомонтирования для определённого расположения." - -msgid "Imported keys:" -msgstr "Импортированные ключи:" - -msgid "Imported maps:" -msgstr "Импортированные списки соответствия:" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Импортирован профиль \"%(value)s\"" - -msgid "Include Disabled" -msgstr "Включать отключённые" - -msgid "Include Enabled" -msgstr "Включать включённые" - -msgid "Include IPA master entries" -msgstr "Включить записи главных IPA-cерверов" - -msgid "Include all disabled IPA rules into test" -msgstr "Проверить все отключённые правила IPA" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "Проверить все включённые правила IPA [поведение по умолчанию]" - -msgid "Include certificate chain in output" -msgstr "Включить цепочку сертификатов в вывод" - -msgid "Include in" -msgstr "Включить в" - -msgid "Included attributes" -msgstr "Включённые атрибуты" - -msgid "Inclusive" -msgstr "Включающий" - -msgid "Inclusive Regex" -msgstr "Включающие регулярные выражения" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "Указаны несовместимые параметры (-r и -P)\n" - -msgid "Indirect" -msgstr "Непрямой" - -msgid "Indirect Member HBAC service" -msgstr "Служба HBAC с непрямым участием" - -msgid "Indirect Member HBAC service group" -msgstr "Группа служб HBAC с непрямым участием" - -msgid "Indirect Member groups" -msgstr "Группы с непрямым участием" - -msgid "Indirect Member host-groups" -msgstr "Группы узлов с непрямым участием" - -msgid "Indirect Member hosts" -msgstr "Узлы с непрямым участием" - -msgid "Indirect Member netgroups" -msgstr "Сетевые группы с непрямым участием" - -msgid "Indirect Member of HBAC rule" -msgstr "Участник правила HBAC с непрямым участием" - -msgid "Indirect Member of Sudo rule" -msgstr "Участник правила Sudo с непрямым участием" - -msgid "Indirect Member of group" -msgstr "Непрямой участник группы" - -msgid "Indirect Member of host-group" -msgstr "Участник группы узлов с непрямым участием" - -msgid "Indirect Member of netgroup" -msgstr "Участник сетевой группы с непрямым участием" - -msgid "Indirect Member of role" -msgstr "Участник роли с непрямым участием" - -msgid "Indirect Member of roles" -msgstr "Участник ролей с непрямым участием" - -msgid "Indirect Member permissions" -msgstr "Разрешения с непрямым участием" - -msgid "Indirect Member users" -msgstr "Пользователи с непрямым участием" - -msgid "Indirect Membership" -msgstr "Непрямое участие" - -msgid "Inherited from server configuration" -msgstr "Унаследовано из конфигурации сервера" - -msgid "Initial counter for the HOTP token" -msgstr "Начальный счётчик токена HOTP" - -msgid "Initialize left node" -msgstr "Инициализировать левый узел" - -msgid "Initialize right node" -msgstr "Инициализировать правый узел" - -msgid "Initials" -msgstr "Инициалы" - -msgid "Input data specified multiple times" -msgstr "Входные данные указаны несколько раз" - -msgid "Input file" -msgstr "Входной файл" - -msgid "Input filename" -msgstr "Имя файла входных данных" - -msgid "Input form contains invalid or missing values." -msgstr "Форма ввода данных содержит недопустимые или отсутствующие значения." - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Недостаточно привилегий \"add\" для записи \"%s\"." - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Недостаточно привилегий \"write\" для атрибута \"krbLastPwdChange\" записи " -"\"%s\"." - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" -"Недостаточно привилегий \"write\" для атрибута \"userCertificate\" записи " -"\"%s\"." - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Недостаточно прав для доступа: %(info)s" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" -"Недостаточно привилегий для создания сертификата с альтернативным именем " -"субъекта \"%s\"." - -msgid "Insufficient privilege to delete a CA." -msgstr "Недостаточно привилегий для удаления записи CA." - -msgid "Insufficient privilege to modify a CA." -msgstr "Недостаточно привилегий для внесения изменений в запись CA." - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "Недостаточно привилегий для внесения изменений в профиль сертификатов." - -msgid "Internal Error" -msgstr "Внутренняя ошибка" - -msgid "Internationalization messages" -msgstr "Сообщения интернационализации" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Неверный JSON-RPC запрос: %(error)s" - -msgid "Invalid LDAP URI." -msgstr "Неверный URI LDAP." - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" -"Некорректное значение MCS, должно соответстовать {mcs}, где максимальная " -"категория {mcs_max}" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" -"Некорректное значение MLS, должно соответстовать {mls}, где максимальный " -"уровень {mls_max}" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "Некорректный механизм привязки SASL\n" - -msgid "Invalid SELinux user name, must match {}" -msgstr "Некорректное имя пользователя SELinux, должно соответствовать {}" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Недопустимое имя учётной записи службы\n" - -msgid "Invalid credentials" -msgstr "Недействительные учётные данные" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Недопустимое имя домена \"%(domain)s\": %(e)s" - -msgid "Invalid format. Should be name=value" -msgstr "Неправильный формат. Должно быть имя=значение" - -msgid "Invalid number of parts!" -msgstr "Неверное количество частей!" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Тип недействителен или не поддерживается. Разрешённые значения: %s" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "Открытый ключ хранилища недействителен или не поддерживается: %s" - -msgid "Invalid vault type" -msgstr "Недопустимый тип хранилища" - -msgid "Is zone active?" -msgstr "Зона активна?" - -msgid "Issue" -msgstr "Выдать" - -msgid "Issue new certificate" -msgstr "Выдать новый сертификат" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "Выдать новый сертификат для узла '${primary_key}'" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "Выдать новый сертификат для службы '${primary_key}'" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "Выдать новый сертификат для пользователя '${primary_key}'" - -msgid "Issued By" -msgstr "Выдан (издатель)" - -msgid "Issued On" -msgstr "Выдан (дата)" - -msgid "Issued To" -msgstr "Выдан для" - -msgid "Issued on from" -msgstr "Выдан с" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "Выдан с этой даты (ГГГГ-мм-дд)" - -msgid "Issued on to" -msgstr "Выдан до" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "Выдан до этой даты (ГГГГ-мм-дд)" - -msgid "Issuer" -msgstr "Издатель" - -msgid "Issuer DN" -msgstr "DN издателя" - -msgid "Issuer Distinguished Name" -msgstr "Различающееся имя издателя" - -msgid "Issuer and subject" -msgstr "Издатель и субъект" - -msgid "Issuer of the certificate" -msgstr "Издатель сертификата" - -msgid "Issuing CA" -msgstr "Выдающий CA" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" -"Настоятельно рекомендуется установить следующие службы на нескольких " -"серверах:" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "Используется только для установки атрибута MNAME SOA" - -msgid "Job Title" -msgstr "Должность" - -msgid "Join an IPA domain" -msgstr "Присоединиться к домену IPA." - -msgid "KEY Algorithm" -msgstr "Алгоритм KEY" - -msgid "KEY Flags" -msgstr "Флаги KEY" - -msgid "KEY Protocol" -msgstr "Протокол KEY" - -msgid "KEY Public Key" -msgstr "Открытый ключ KEY" - -msgid "KEY record" -msgstr "Запись KEY" - -msgid "KRA service is not enabled" -msgstr "Служба KRA не включена" - -msgid "KX Exchanger" -msgstr "Обменник KX" - -msgid "KX Preference" -msgstr "Приоритет KX" - -msgid "KX record" -msgstr "Запись KX" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" -"Кэш учётных данных Kerberos не найден. Имеется ли у вас билет Kerberos?\n" - -msgid "Kerberos Key" -msgstr "Ключ Kerberos" - -msgid "Kerberos Key Not Present" -msgstr "Отсутствует ключ Kerberos" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Имеется ключ Kerberos, узел подготовлен к работе" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Имеется ключ Kerberos, служба подготовлена к работе" - -msgid "Kerberos Principal you entered is expired" -msgstr "Срок действия введённой учётной записи Kerberos истёк" - -msgid "Kerberos Service Principal Name" -msgstr "Имя учётной записи службы Kerberos" - -msgid "Kerberos Ticket Policy" -msgstr "Политика билетов Kerberos" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" -"Учётная запись пользователя Kerberos не найдена. Имеется ли у вас корректный " -"кэш учётных данных?\n" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Не удалось инициализировать Kerberos-контекст\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Не удалось инициализировать Kerberos-контекст: %1$s (%2$d)\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "ошибка Kerberos: %(major)s/%(minor)s" - -msgid "Kerberos keys available" -msgstr "Доступные ключи Kerberos" - -msgid "Kerberos principal" -msgstr "Учётная запись Kerberos" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Учётная запись Kerberos %s уже существует. Используйте команду \"ipa user-mod" -"\", чтобы установить её параметры вручную." - -msgid "Kerberos principal expiration" -msgstr "Окончание действия учётной записи Kerberos" - -msgid "Kerberos principal name for this host" -msgstr "Имя учётной записи Kerberos для этого узла" - -msgid "Key" -msgstr "Ключ" - -msgid "Key Compromise" -msgstr "Компрометация ключа" - -msgid "Key Tag" -msgstr "Тег ключа" - -msgid "Keytab" -msgstr "Таблица ключей" - -msgid "Keytab File Name" -msgstr "Имя файла таблицы ключей" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Таблица ключей успешно получена и сохранена в: %s\n" - -msgid "LDAP DN" -msgstr " DN LDAP" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "Механизм привязки LDAP SASL, если отсутствует bindd/bindpw" - -msgid "LDAP URI" -msgstr "URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "URI LDAP сервера DS, с которого будет осуществляться миграция" - -msgid "LDAP basedn" -msgstr "базовое расширяемое имя (DN) LDAP" - -msgid "LDAP password" -msgstr "Пароль LDAP" - -msgid "LDAP password (if not using Kerberos)" -msgstr "LDAP-пароль (если не используется Kerberos)" - -msgid "LDAP schema" -msgstr "Схема LDAP" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" -"Область поиска LDAP для пользователей и групп: base, onelevel или subtree. " -"Значение по умолчанию: onelevel." - -msgid "LDAP suffix to be managed" -msgstr "Суффикс LDAP, которым следует управлять" - -msgid "LDAP timeout" -msgstr "Время ожидания LDAP" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" -"Адрес LDAP, с которым следует установить соединение. Несовместимо с --server" - -msgid "LOC Altitude" -msgstr "Высота над уровнем моря LOC" - -msgid "LOC Degrees Latitude" -msgstr "Градусы широты LOC" - -msgid "LOC Degrees Longitude" -msgstr "Градусы долготы LOC" - -msgid "LOC Direction Latitude" -msgstr "Направление широты LOC" - -msgid "LOC Direction Longitude" -msgstr "Направление долготы LOC" - -msgid "LOC Horizontal Precision" -msgstr "Горизонтальная точность LOC" - -msgid "LOC Minutes Latitude" -msgstr "Минуты широты LOC" - -msgid "LOC Minutes Longitude" -msgstr "Минуты долготы LOC" - -msgid "LOC Seconds Latitude" -msgstr "Секунды широты LOC" - -msgid "LOC Seconds Longitude" -msgstr "Секунды долготы LOC" - -msgid "LOC Size" -msgstr "Размер LOC" - -msgid "LOC Vertical Precision" -msgstr "Вертикальная точность LOC" - -msgid "LOC record" -msgstr "Запись LOC" - -msgid "Label" -msgstr "Метка" - -msgid "Labels" -msgstr "Метки" - -msgid "Last" -msgstr "Последний" - -msgid "Last date/time the token can be used" -msgstr "Окончание срока действия токена (день и время)" - -msgid "Last failed authentication" -msgstr "Последняя ошибка при аутентификации" - -msgid "Last name" -msgstr "Фамилия" - -msgid "Last successful authentication" -msgstr "Последняя успешная аутентификация" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Использование пробелов в начале и в конце запрещено" - -msgid "Left node" -msgstr "Левый узел" - -msgid "Left replication node - an IPA server" -msgstr "Левый узел репликации — IPA-сервер" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Допустимый фильтр LDAP (например, ou=Engineering)" - -msgid "Length of TOTP token code validity" -msgstr "Продолжительность действия кода токена TOTP" - -msgid "Level" -msgstr "Уровень" - -msgid "List all service vaults" -msgstr "Вывести список всех хранилищ служб" - -msgid "List all user vaults" -msgstr "Вывести список всех хранилищ пользователей" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" -"Вывести список главных IPA-серверов, настроенных в качестве DNS-серверов" - -msgid "List of all IPA masters" -msgstr "Список всех главных IPA-серверов" - -msgid "List of all hidden IPA masters" -msgstr "Список всех скрытых главных IPA-серверов" - -msgid "List of deletions that failed" -msgstr "Список удалений, которые не удалось выполнить" - -msgid "List of enabled roles" -msgstr "Список включённых ролей" - -msgid "List of servers which advertise the given location" -msgstr "Список серверов, которые сообщают указанное расположение" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Список надёжных доменов успешно обновлён. Используйте команду trustdomain-" -"find для вывода этого списка." - -msgid "Lists of objects migrated; categorized by type." -msgstr "Список перенесённых объектов; упорядочены по типу" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "Список объектов, которые не удалось перенести; упорядочены по типу" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Загрузить сертификат CA LDAP-сервера из ФАЙЛА" - -msgid "Loading" -msgstr "Загрузка" - -msgid "Loading data" -msgstr "Загрузка данных" - -msgid "Local domain" -msgstr "Локальный домен" - -msgid "Locality" -msgstr "Адрес местонахождения" - -msgid "Location" -msgstr "Расположение" - -msgid "Location name" -msgstr "Имя расположения" - -msgid "Location of the ACI" -msgstr "Расположение ACI" - -msgid "Lockout duration" -msgstr "Длительность блокировки" - -msgid "Log In Using Certificate" -msgstr "Войти с помощью сертификата" - -msgid "Log in" -msgstr "Войти" - -msgid "Log in using personal certificate" -msgstr "Войти с помощью личного сертификата" - -msgid "Log out" -msgstr "Выйти" - -msgid "Log out error" -msgstr "Ошибка при выходе" - -msgid "Logged In As" -msgstr "Выполнен вход под именем" - -msgid "Login failed due to an unknown reason" -msgstr "Не удалось войти по неизвестной причине" - -msgid "Login shell" -msgstr "Оболочка входа" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" -"Чем меньше число, тем выше приоритет. Клиентские части попытаются связаться " -"с тем доступным для них адресом, у которого ниже число приоритета. " - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" -"Чем меньше число, тем выше приоритет. Клиентские части попытаются связаться " -"с тем доступным для них сервером, у которого ниже число приоритета. " - -msgid "MAC address" -msgstr "MAC-адрес" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "MX Exchanger" -msgstr "Обменник MX" - -msgid "MX Preference" -msgstr "Приоритет MX" - -msgid "MX record" -msgstr "Запись MX" - -msgid "Mailing Address" -msgstr "Почтовый адрес" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" -"Совершать несколько вызовов ipa с помощью одного удалённого вызова процедур " - -msgid "Malformed DN" -msgstr "Некорректное DN" - -msgid "Malformed principal" -msgstr "Недопустимая учётная запись" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Недопустимая учётная запись: \"%(value)s\"" - -msgid "Manage password policy for specific group" -msgstr "Управление политикой паролей для определённой группы" - -msgid "Manage ticket policy for specific user" -msgstr "Управление политикой билетов для определённого пользователя" - -msgid "Managed LDAP suffix DN" -msgstr "DN управляемого суффикса LDAP" - -msgid "Managed by" -msgstr "Управляется" - -msgid "Managed suffix" -msgstr "Управляемый суффикс" - -msgid "Managed suffixes" -msgstr "Управляемые суффиксы" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" -"Управляемая топология требует минимального уровня домена ${domainlevel}" - -msgid "Managedby permission" -msgstr "Разрешение managedby" - -msgid "Manager" -msgstr "Руководитель" - -msgid "Managing" -msgstr "Управление" - -msgid "Map" -msgstr "Список соответствия" - -msgid "Map Type" -msgstr "Тип списка соответствия" - -msgid "Mapping rule" -msgstr "Правило сопоставления" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"Набор правил сопоставления \"%(ruleset)s\" содержит более одного правила для " -"вспомогательной службы %(helper)s" - -msgid "Mark the token as disabled (default: false)" -msgstr "Отметить токен как отключённый (значение по умолчанию: false)" - -msgid "Master file" -msgstr "Главный файл" - -msgid "Match" -msgstr "Сопоставить" - -msgid "Match cn attribute in subject" -msgstr "Сопоставлять атрибут \"cn\" в субъекте" - -msgid "Match users according to certificate." -msgstr "Установить соответствие пользователей по сертификату." - -msgid "Matched" -msgstr "Установлено соответствие" - -msgid "Matched Users" -msgstr "Соответствующие пользователи" - -msgid "Matched rules" -msgstr "Соответствующие правила" - -msgid "Matching Type" -msgstr "Тип соответствия" - -msgid "Matching rule" -msgstr "Правило соответствия" - -msgid "Max domain level" -msgstr "Макс. уровень домена" - -msgid "Max failures" -msgstr "Максимальное количество ошибок" - -msgid "Max life" -msgstr "Максимальный срок жизни" - -msgid "Max lifetime (days)" -msgstr "Максимальный срок действия (в днях)" - -msgid "Max renew" -msgstr "Максимальный срок для обновления" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" -"Максимальное количество времени (в секундах) для поиска (-1 или 0 означает " -"отсутствие ограничения)" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" -"Максимальное количество времени (в секундах) для поиска (> 0 или -1 означает " -"отсутствие ограничения)" - -msgid "Maximum domain level" -msgstr "Максимальный уровень домена" - -msgid "Maximum hostname length" -msgstr "Максимальная длина имени узла" - -msgid "Maximum number of agreements per replica" -msgstr " Максимальное количество соглашений для реплики" - -msgid "Maximum number of certs returned" -msgstr "Максимальное количество возвращённых сертификатов" - -msgid "Maximum number of entries returned" -msgstr "Максимальное количество возвращённых записей" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" -"Максимальное количество возвращённых записей (\"0\" означает отсутствие " -"ограничения)" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" -"Максимальное количество записей результатов поиска (-1 означает отсутствие " -"ограничения)" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" -"Максимальное количество записей результатов поиска (-1 или 0 означает " -"отсутствие ограничения)" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" -"Максимальное количество правил, которое следует обработать, если не указан " -"параметр --rules" - -msgid "Maximum password life must be greater than minimum." -msgstr "Максимальный срок жизни пароля должен быть больше минимального." - -msgid "Maximum password lifetime (in days)" -msgstr "Максимальный срок действия пароля (в днях)" - -msgid "Maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -msgid "Maximum serial number" -msgstr "Максимальный серийный номер" - -msgid "Maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -msgid "Maximum username length" -msgstr "Максимальная длина имени пользователя" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Максимальное значение равно ${value}" - -msgid "May not be empty" -msgstr "Не может быть пустым" - -msgid "Member Group" -msgstr "Группа-участник" - -msgid "Member HBAC service" -msgstr "Служба-участник HBAC" - -msgid "Member HBAC service groups" -msgstr "Группы служб HBAC — участники" - -msgid "Member Host" -msgstr "Узел-участник" - -msgid "Member Hostgroup" -msgstr "Группа узлов — участник" - -msgid "Member Sudo commands" -msgstr "Команды участника Sudo" - -msgid "Member User" -msgstr "Пользователь-участник" - -msgid "Member groups" -msgstr "Группы-участники" - -msgid "Member host-groups" -msgstr "Группы узлов — участники" - -msgid "Member hosts" -msgstr "Узлы-участники" - -msgid "Member netgroups" -msgstr "Сетевые группы — участники" - -msgid "Member of" -msgstr "Участник" - -msgid "Member of HBAC rule" -msgstr "Участник правила HBAC" - -msgid "Member of HBAC service groups" -msgstr "Участник групп служб HBAC" - -msgid "Member of Sudo rule" -msgstr "Участник правила Sudo" - -msgid "Member of a group" -msgstr "Участник группы" - -msgid "Member of group" -msgstr "Участник группы" - -msgid "Member of groups" -msgstr "Участник групп" - -msgid "Member of host-groups" -msgstr "Участник групп узлов" - -msgid "Member of netgroups" -msgstr "Участник сетевых групп" - -msgid "Member principals" -msgstr "Учётные записи — участники" - -msgid "Member service groups" -msgstr "Группы служб — участники" - -msgid "Member services" -msgstr "Службы-участники" - -msgid "Member user group" -msgstr "Группа пользователей — участник" - -msgid "Member users" -msgstr "Пользователи-участники" - -msgid "Members" -msgstr "Участники" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "Участники доверенного домена в формате DOM\\имя или имя@домен" - -msgid "Members that could not be added" -msgstr "Участники, которых не удалось добавить" - -msgid "Members that could not be removed" -msgstr "Участники, которых не удалось удалить" - -msgid "Method name" -msgstr "Имя метода" - -msgid "Method of" -msgstr "Метод" - -msgid "Migrate" -msgstr "Перенести" - -msgid "Migrate users and groups from DS to IPA." -msgstr "Перенести данные пользователей и групп из DS в IPA" - -msgid "Migrating" -msgstr "Выполняется перенос" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"Режим миграции отключён. Используйте команду \"ipa config-mod --enable-" -"migration=TRUE\", чтобы включить его." - -msgid "Migration of LDAP search reference is not supported." -msgstr "Поддержка миграции поисковой ссылки LDAP не предусмотрена." - -msgid "Min domain level" -msgstr "Мин. уровень домена" - -msgid "Min length" -msgstr "Минимальная длина" - -msgid "Min lifetime (hours)" -msgstr "Минимальный срок действия (в часах)" - -msgid "Minimum domain level" -msgstr "Минимальный уровень домена" - -msgid "Minimum length of password" -msgstr "Минимальная длина пароля" - -msgid "Minimum number of character classes" -msgstr "Минимальное количество классов символов" - -msgid "Minimum password lifetime (in hours)" -msgstr "Минимальный срок действия пароля (в часах)" - -msgid "Minimum serial number" -msgstr "Минимальный серийный номер" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Минимальное значение равно ${value}" - -msgid "Minutes Latitude" -msgstr "Минуты широты" - -msgid "Minutes Longitude" -msgstr "Минуты долготы" - -msgid "Misc. Information" -msgstr "Прочие сведения" +msgid "Credentials" +msgstr "Учётные данные" msgid "Missing credentials for cross-forest communication" msgstr "Отсутствуют учётные данные для обмена данными между лесами" -msgid "Missing new vault public key" -msgstr "Отсутствует новый открытый ключ хранилища" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Отсутствует или неверный HTTP Referer, %(referer)s" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "Отсутствует список элементов управления ответами!\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "Отсутствует элемент управления ответами!\n" - -msgid "Missing values: " -msgstr "Отсутствующие значения:" - -msgid "Missing vault private key" -msgstr "Отсутствует закрытый ключ хранилища" - -msgid "Missing vault public key" -msgstr "Отсутствует открытый ключ хранилища" - -msgid "Mobile Telephone Number" -msgstr "Номер мобильного телефона" - -msgid "Model" -msgstr "Модель" - -msgid "Modified" -msgstr "Изменено" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Изменена конфигурация отношений доверия \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Изменена ACI \"%(value)s\"" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Изменена запись CA \"%(value)s\"" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Изменена CA ACL \"%(value)s\"" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Изменено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Изменён профиль сертификатов \"%(value)s\"" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Изменена запись DNS-сервера \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Изменено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Изменена служба HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Изменена группа служб HBAC \"%(value)s\"" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Изменён диапазон идентификаторов \"%(value)s\"" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Изменена запись расположения IPA \"%(value)s\"" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Изменена запись IPA-сервера \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Изменён токен OTP \"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Изменён прокси-сервер RADIUS \"%(value)s\"" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Изменён список пользователей SELinux \"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Изменена команда Sudo \"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Изменена группа команд Sudo \"%(value)s\"" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Изменено правило Sudo \"%(value)s\"" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Изменено переопределение ID группы \"%(value)s\"" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Изменено представление ID \"%(value)s\"" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Изменено переопределение ID \"%(value)s\"" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Изменено переопределение ID пользователя \"%(value)s\"" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Изменено правило автоучастия \"%(value)s\"" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Изменён ключ автомонтирования \"%(value)s\"" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Изменён список соответствия автомонтирования \"%(value)s\"" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Изменено делегирование \"%(value)s\"" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Изменена группа \"%(value)s\"" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Изменён узел \"%(value)s\"" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Изменена группа узлов \"%(value)s\"" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Изменена сетевая группа \"%(value)s\"" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Изменено разрешение \"%(value)s\"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Изменена привилегия \"%(value)s\"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Изменена роль \"%(value)s\"" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Изменён сегмент \"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Изменено самообслуживание \"%(value)s\"" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Изменена служба \"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Изменён неподтверждённый пользователь \"%(value)s\"" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Изменён суффикс топологии \"%(value)s\"" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" -"Изменено отношение доверия \"%(value)s\" (изменения будут применены через 60 " -"секунд)" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Изменён пользователь \"%(value)s\"" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Изменено хранилище \"%(value)s\"" - -msgid "Modified: key not set" -msgstr "Изменено: ключ не установлен" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Изменить значения \"%(value)s\" %(name)s?" - -msgid "Modify ACI." -msgstr "Изменить запись ACI." - -msgid "Modify CA configuration." -msgstr "Изменить конфигурацию CA." - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" -"Изменить конфигурацию сопоставления сертификатов с записями пользователей." - -msgid "Modify Certificate Profile configuration." -msgstr "Изменить конфигурацию профиля сертификатов." - -msgid "Modify Class of Service entry" -msgstr "Изменить запись класса обслуживания" - -msgid "Modify DNS forward zone." -msgstr "Изменить зону перенаправления DNS." - -msgid "Modify DNS server configuration" -msgstr "Изменить конфигурацию DNS-сервера" - -msgid "Modify DNS zone (SOA record)." -msgstr "Изменить зону DNS (запись SOA)." - -msgid "Modify ID range." -msgstr "Изменить диапазон идентификаторов." - msgid "" -"Modify ID range.\n" -"\n" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" msgstr "" -"Изменить диапазон идентификаторов.\n" -"\n" -msgid "Modify Kerberos ticket policy." -msgstr "Изменить политику билетов Kerberos." +msgid "Trusting forest" +msgstr "Доверяющий лес" -msgid "Modify OTP configuration options." -msgstr "Изменить параметры конфигурации OTP." +msgid "Trusted forest" +msgstr "Доверенный лес" -msgid "Modify Sudo Command Group." -msgstr "Изменить группу команд Sudo." +msgid "Established and verified" +msgstr "Установлено и проверено" -msgid "Modify Sudo Command." -msgstr "Изменить команду Sudo." +msgid "Waiting for confirmation by remote side" +msgstr "Ожидание подтверждения удалённой стороной" -msgid "Modify Sudo Rule." -msgstr "Изменить правило Sudo." - -msgid "Modify a CA ACL." -msgstr "Изменить CA ACL." - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Изменить правило сопоставления сертификатов с записями пользователей." - -msgid "Modify a DNS resource record." -msgstr "Изменить запись ресурса DNS." - -msgid "Modify a OTP token." -msgstr "Изменить токен OTP." - -msgid "Modify a RADIUS proxy server." -msgstr "Изменить прокси-сервер RADIUS." - -msgid "Modify a SELinux User Map." -msgstr "Изменить список пользователей SELinux." - -msgid "Modify a delegation." -msgstr "Изменить делегирование." - -msgid "Modify a group password policy." -msgstr "Изменить групповую политику паролей." - -msgid "Modify a group." -msgstr "Изменить группу." - -msgid "Modify a hostgroup." -msgstr "Изменить группу узлов." - -msgid "Modify a netgroup." -msgstr "Изменить сетевую группу." - -msgid "Modify a permission." -msgstr "Изменить разрешение." - -msgid "Modify a privilege." -msgstr "Изменить привилегию." - -msgid "Modify a role." -msgstr "Изменить роль." - -msgid "Modify a segment." -msgstr "Изменить сегмент." - -msgid "Modify a self-service permission." -msgstr "Изменить разрешение самообслуживания." - -msgid "Modify a stage user." -msgstr "Изменить неподтверждённого пользователя." - -msgid "Modify a topology suffix." -msgstr "Изменить суффикс топологии." - -msgid "Modify a user." -msgstr "Изменить пользователя." - -msgid "Modify a vault." -msgstr "Изменить хранилище." - -msgid "Modify an Group ID override." -msgstr "Изменить переопределение ID группы." - -msgid "Modify an HBAC rule." -msgstr "Изменить правило HBAC." - -msgid "Modify an HBAC service group." -msgstr "Изменить группу служб HBAC." - -msgid "Modify an HBAC service." -msgstr "Изменить службу HBAC." - -msgid "Modify an ID View." -msgstr "Изменить представление ID." - -msgid "Modify an ID override." -msgstr "Изменить переопределение ID." - -msgid "Modify an User ID override." -msgstr "Изменить переопределение ID пользователя." - -msgid "Modify an automember rule." -msgstr "Изменить правило автоучастия." - -msgid "Modify an automount key." -msgstr "Изменить ключ автомонтирования." - -msgid "Modify an automount map." -msgstr "Изменить список соответствия автомонтирования." - -msgid "Modify an existing IPA service." -msgstr "Изменить существующую службу IPA." - -msgid "Modify configuration options." -msgstr "Изменить параметры конфигурации." - -msgid "Modify global DNS configuration." -msgstr "Изменить глобальную конфигурацию DNS." - -msgid "Modify global trust configuration." -msgstr "Изменить глобальную конфигурацию отношений доверия." - -msgid "Modify information about a host." -msgstr "Изменить сведения об узле." - -msgid "Modify information about an IPA location." -msgstr "Изменить сведения о расположении IPA." - -msgid "Modify information about an IPA server." -msgstr "Изменить сведения о IPA-сервере." - -msgid "Modify realm domains." -msgstr "Изменить домены области." - -msgid "Modify trustdomain of the trust" -msgstr "Изменить значение доверенного домена (trustdomain) отношения доверия." - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" -"Найдено несколько записей с ключом %(key)s. Используйте --info, чтобы " -"выбрать определённую запись." - -msgid "Mount information" -msgstr "Сведения монтирования" - -msgid "Mount point" -msgstr "Точка монтирования" - -msgid "Move deleted user into staged area" -msgstr "Переместить удалённую запись пользователя в область хранения." - -msgid "Multi-value" -msgstr "Многозначный" - -msgid "Must be a decimal number" -msgstr "Должно быть десятичным числом" - -msgid "Must be a positive number" -msgstr "Должно быть положительным числом" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" -"Должно быть значением даты / времени в формате UTC (например, \"2014-01-20 " -"17:58:01Z\")" - -msgid "Must be an integer" -msgstr "Должно быть целым числом" - -msgid "My User Vaults" -msgstr "Мои хранилища пользователей" - -msgid "NAPTR Flags" -msgstr "Флаги NAPTR" - -msgid "NAPTR Order" -msgstr "Порядок NAPTR" - -msgid "NAPTR Preference" -msgstr "Приоритет NAPTR" - -msgid "NAPTR Regular Expression" -msgstr "Регулярное выражение NAPTR" - -msgid "NAPTR Replacement" -msgstr "Замена NAPTR" - -msgid "NAPTR Service" -msgstr "Служба NAPTR" - -msgid "NAPTR record" -msgstr "Запись NAPTR" - -msgid "NIS domain name" -msgstr "Имя домена NIS" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "Значение NONE нельзя сочетать с другими типами PAC" - -msgid "NS Hostname" -msgstr "Имя узла NS" - -msgid "NS record" -msgstr "Запись NS" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"Запись NS нельзя использовать вместе с записью %(type)s, если только они не " -"расположены в корневой записи зоны (RFC 2181, раздел 6.1)" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "Запись (записи) NS можно изменять в начале зоны: \"@\". " - -msgid "NSEC Next Domain Name" -msgstr "Имя следующего домена NSEC" - -msgid "NSEC Type Map" -msgstr "Список сопоставления типов NSEC" - -msgid "NSEC record" -msgstr "Запись NSEC" - -msgid "NSEC3 record" -msgstr "Запись NSEC3" - -msgid "NSEC3PARAM record" -msgstr "Запись NSEC3PARAM" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" -"Запись NSEC3PARAM для зоны в формате: алгоритм_хеширования флаги итерации " -"соль" - -msgid "Name" -msgstr "Имя" - -msgid "Name for referencing the CA" -msgstr "Имя для ссылки на CA" - -msgid "Name of command to export" -msgstr "Имя команды, которую следует экспортировать" - -msgid "Name of host-group" -msgstr "Имя группы узлов" - -msgid "Name of issuing CA" -msgstr "Имя выдающего CA" - -msgid "Name of method to export" -msgstr "Имя метода, который следует экспортировать" - -msgid "Name of object to export" -msgstr "Имя объекта, который следует экспортировать" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" -"Имя родительского списка соответствия автомонтирования (по умолчанию: auto." -"master)" - -msgid "Name of the trusted domain" -msgstr "Имя доверенного домена" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "На сервере имён \"%(host)s\" нет соответствующей записи A/AAAA" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "Сервер имён для обратной зоны не может быть относительным DNS-именем" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Не предоставлено ни --del-all, ни параметров удаления определённой записи.\n" -"Все поддерживаемые типы записей можно посмотреть с помощью команды help." - -msgid "Nested Methods to execute" -msgstr "Вложенные методы для выполнения" - -msgid "NetBIOS name" -msgstr "Имя NetBIOS" - -msgid "Netgroup" -msgstr "Сетевая группа" - -msgid "Netgroup Settings" -msgstr "Параметры сетевой группы" - -msgid "Netgroup description" -msgstr "Описание сетевой группы" - -msgid "Netgroup name" -msgstr "Имя сетевой группы" - -msgid "Netgroups" -msgstr "Сетевые группы" - -msgid "Network Services" -msgstr "Сетевые службы" - -msgid "New ACI name" -msgstr "Новое имя ACI" - -msgid "New Certificate" -msgstr "Новый сертификат" - -msgid "New Password" -msgstr "Новый пароль" - -msgid "New Principal Password" -msgstr "Новый пароль учётной записи" - -msgid "New Test" -msgstr "Новая проверка" - -msgid "New kerberos principal alias" -msgstr "Новый псевдоним учётной записи Kerberos" - -msgid "New mount information" -msgstr "Сведения о новом монтировании" - -msgid "New password is required" -msgstr "Следует указать новый пароль" - -msgid "New public key specified multiple times" -msgstr "Новый открытый ключ указан несколько раз" - -msgid "New vault password" -msgstr "Новый пароль хранилища" - -msgid "New: key not set" -msgstr "Новый: ключ не установлен" - -msgid "New: key set" -msgstr "Новый: ключ установлен" - -msgid "Next" -msgstr "Вперёд" - -msgid "Next Domain Name" -msgstr "Имя следующего домена" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Записи A, AAAA, SSHFP или PTR не найдены." - -msgid "No Common Name was found in subject of request." -msgstr "В субъекте запроса не найдено общее имя (CN)." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"В расположении IPA %(location)s нет DNS-серверов. Без них расположение не " -"будет работать надлежащим образом." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"Не установлен мастер ключей DNSSEC. Подпись в зоне DNSSEC будет работать " -"только после установки мастера ключей DNSSEC." - -msgid "No Valid Certificate" -msgstr "Отсутствуют действительные сертификаты" - -msgid "No archived data." -msgstr "Архивированных данных нет." - -msgid "No credentials cache found" -msgstr "Кэш учётных данных не найден" - -msgid "No default (fallback) group set" -msgstr "Группа по умолчанию (резервная) не установлена" - -msgid "No entries." -msgstr "Отсутствуют записи." - -msgid "No file to read" -msgstr "Отсутствует файл для чтения" - -msgid "No free YubiKey slot!" -msgstr "Нет свободных слотов YubiKey!" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Отсутствуют принятые KDC ключи\n" - -msgid "No matching entries found" -msgstr "Соответствующих записей не найдено" - -msgid "No option to delete specific record provided." -msgstr "Возможность удаления определённой записи не предусмотрена." - -msgid "No option to modify specific record provided." -msgstr "Возможность изменения определённой записи не предусмотрена." - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Отсутствует разрешение на присоединение этого узла к домену IPA.\n" - -msgid "No private group" -msgstr "Без личной группы" - -msgid "No response" -msgstr "Нет ответа" - -msgid "No such attribute on this entry" -msgstr "В этой записи нет такого атрибута" - -msgid "No such virtual command" -msgstr "Такая виртуальная команда отсутствует" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "Отсутствуют установленные в системе типы шифрования?!\n" - -msgid "No trusted domain is not configured" -msgstr "Не настроено ни одного доверенного домена" - -#, c-format -msgid "No values for %s" -msgstr "Отсутствуют значения для %s" - -msgid "No wait" -msgstr "Не ждать" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "Отсутствуют разрешения на запись в файл таблицы ключей \"%s\"\n" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" -"Ответ от программного интерфейса REST CA не соответствует 2xx: %(status)d. " -"%(explanation)s" +msgid "Unknown" +msgstr "Неизвестно" msgid "Non-Active Directory domain" msgstr "Домен, который не является доменом Active Directory" -msgid "Non-POSIX" -msgstr "Не POSIX" - -msgid "Non-existent or invalid rules" -msgstr "Несуществующие или недействительные правила" +msgid "RFC4120-compliant Kerberos realm" +msgstr "Область (realm) Kerberos, которая соответствует RFC4120" msgid "" "Non-transitive external trust to a domain in another Active Directory forest" @@ -23185,6261 +31559,41 @@ msgstr "" "Нетранзитивное внешнее отношение доверия с областью (realm) Kerberos, " "которая соответствует RFC4120" -msgid "Nonce" -msgstr "Специальный" - -msgid "Not After" -msgstr "Недействителен после" - -msgid "Not Before" -msgstr "Недействителен до" - -msgid "Not a managed group" -msgstr "Не является управляемой группой" - -msgid "Not a valid IP address" -msgstr "Недопустимый IP-адрес" - -msgid "Not a valid IPv4 address" -msgstr "Недопустимый адрес IPv4" - -msgid "Not a valid IPv6 address" -msgstr "Недопустимый адрес IPv6" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "Недопустимый сетевой адрес (примеры: 2001:db8::/64, 192.0.2.0/24)" - -msgid "Not allowed on non-leaf entry" -msgstr "Запрещено для неконцевой записи" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" -"Указано недостаточно аргументов для выполнения настройки отношения доверия" - -msgid "Not matched rules" -msgstr "Несоответствующие правила" - -msgid "Not registered yet" -msgstr "Ещё не зарегистрировано" - -msgid "Note" -msgstr "Примечание" - -msgid "Number of IDs in the range" -msgstr "Количество идентификаторов в диапазоне" - -msgid "Number of conditions added" -msgstr "Количество добавленных условий" - -msgid "Number of conditions removed" -msgstr "Количество удалённых условий" - -msgid "Number of days's notice of impending password expiration" -msgstr "Уведомление о количестве дней, оставшихся до окончания действия пароля" - -msgid "Number of digits each token code will have" -msgstr "Количество цифр, которое будет содержать каждый код токена" - -msgid "Number of entries returned" -msgstr "Количество возвращённых записей" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "Количество узлов, с которых снято представление ID: " - -msgid "Number of hosts the ID View was applied to:" -msgstr "Количество узлов, к которым было применено представление ID:" - -msgid "Number of members added" -msgstr "Количество добавленных участников" - -msgid "Number of members removed" -msgstr "Количество удалённых участников" - -msgid "Number of owners added" -msgstr "Количество добавленных владельцев" - -msgid "Number of owners removed" -msgstr "Количество удалённых владельцев" - -msgid "Number of permissions added" -msgstr "Количество добавленных разрешений" - -msgid "Number of permissions removed" -msgstr "Количество удалённых разрешений" - -msgid "Number of plugins loaded" -msgstr "Количество загруженных подключаемых модулей" - -msgid "Number of privileges added" -msgstr "Количество добавленных привилегий" - -msgid "Number of privileges removed" -msgstr "Количество удалённых привилегий" - +#, python-format msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" -"Количество секунд, в течение которого исходящие операции LDAP ожидают ответа " -"от удалённой реплики, прежде чем будет превышено время ожидания и выдано " -"сообщение об ошибке" - -msgid "Number of variables returned (<= total)" -msgstr "Количество возвращённых переменных (<= total)" - -msgid "OK" -msgstr "OK" - -msgid "OTP" -msgstr "OTP" - -msgid "OTP Configuration" -msgstr "Конфигурация OTP" - -msgid "OTP Token" -msgstr "Токен OTP" - -msgid "OTP Token Settings" -msgstr "Параметры токена OTP" - -msgid "OTP Tokens" -msgstr "Токены OTP" - -msgid "OTP configuration options" -msgstr "Параметры конфигурации OTP" - -msgid "OTP set" -msgstr "Установлен OTP" - -msgid "OTP token" -msgstr "токен OTP" - -msgid "OTP tokens" -msgstr "токены OTP" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" -"Класс объектов ipaNTUserAttrs отсутствует, запись пользователя не может " -"иметь атрибуты SMB." - -msgid "Object class name" -msgstr "Имя класса объектов." - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "Классы объектов, которые следует игнорировать для записей групп в DS" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" -"Классы объектов, которые следует игнорировать для записей пользователей в DS" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "Классы объектов, использованные для поиска записей групп в DS" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "Классы объектов, использованные для поиска записей пользователей в DS" - -msgid "Old vault password" -msgstr "Старый пароль хранилища" - -msgid "Old vault private key" -msgstr "Старый закрытый ключ хранилища" - -msgid "One Time Password" -msgstr "Одноразовый пароль" - -msgid "One of group, permission or self is required" -msgstr "Следует указать одно из значений: group, permission или self" - -msgid "One time password commands" -msgstr "Команды для одноразового пароля" - -msgid "Only one value is allowed" -msgstr "Допускается только одно значение" - -msgid "Only one zone type is allowed per zone name" -msgstr "Для одного имени зоны можно использовать только один тип зоны" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" -"С помощью веб-интерфейса можно создавать только стандартные хранилища. " -"Используйте интерфейс командной строки для создания других типов хранилищ." - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"При добавлении отношения доверия AD значениями --range-type могут быть " -"только ipa-ad-trust или ipa-ad-trust-posix." - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Операционная система и версия узла (например, Fedora 9)" - -msgid "Operating system" -msgstr "Операционная система" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Не удалось выполнить операцию: %s\n" - -msgid "Operations Error" -msgstr "Ошибка операций" - -msgid "Option added" -msgstr "Параметр добавлен" - -msgid "Option group" -msgstr "Группа параметров" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" -"Если типом диапазона IPA является ipa-ad-trust-posix, параметр rid-base " -"использовать нельзя" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" -"Необязательное поддерево DN, из которого может быть перемещена запись " -"(должна принадлежать к поддереву, но может ещё не существовать)" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" -"Необязательное поддерево DN, в которое может быть перемещена запись (должна " -"находиться в поддереве, но может ещё не существовать)" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" -"Дополнительное DN, к которому следует применить разрешение (должно " -"находиться в поддереве, но может ещё не существовать)" - -msgid "Options" -msgstr "Параметры" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "Невозможно одновременно использовать параметры dom-sid и dom-name" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "Параметры dom-sid и rid-base необходимо использовать одновременно" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" -"Невозможно одновременно использовать параметры dom-sid и secondary-rid-base" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" -"Параметры dom-sid/dom-name и rid-base необходимо использовать одновременно" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Невозможно одновременно использовать параметры dom-sid/dom-name и secondary-" -"rid-base" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" -"Параметры secondary-rid-base и rid-base необходимо использовать одновременно" - -msgid "Order" -msgstr "Порядок" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" -"В порядке увеличения приоритета пользователей SELinux, с разделителем $" - -msgid "Org. Unit" -msgstr "Отдел" - -msgid "Organization" -msgstr "Организация" - -msgid "Organizational Unit" -msgstr "Организационное подразделение" - -msgid "Origin DN subtree" -msgstr "Поддерево DN происхождения" - -msgid "Original TTL" -msgstr "Исходное значение срока жизни" - -msgid "Other Record Types" -msgstr "Другие типы записей" - -msgid "Our domain is not configured" -msgstr "Наш домен не настроен" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Недостаточно памяти!\n" - -msgid "Out of memory\n" -msgstr "Недостаточно памяти\n" - -#, c-format -msgid "Out of memory \n" -msgstr "" -"Недостаточно памяти\n" "\n" - -#, c-format -msgid "Out of memory!" -msgstr "Недостаточно памяти!" - -#, c-format -msgid "Out of memory!\n" -msgstr "Недостаточно памяти!\n" - -msgid "Out of memory!?\n" -msgstr "Недостаточно памяти!?\n" - -msgid "Output file to store the transport certificate" -msgstr "Выходной файл для хранения сертификата транспорта" - -msgid "Output filename" -msgstr "Имя файла выходных данных" - -msgid "Output only on errors" -msgstr "Выводить только ошибки" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" msgstr "" -"Переопределить список по умолчанию, который содержит поддерживаемые типы " -"PAC. Используйте значение \"NONE\", чтобы отключить поддержку PAC для этой " -"службы" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" -"Переопределить список по умолчанию, который содержит поддерживаемые типы " -"PAC. Используйте значение \"NONE\", чтобы отключить поддержку PAC для этой " -"службы; например, это может быть необходимо для служб NFS." - -msgid "Override existing password" -msgstr "Переопределить существующий пароль" - -msgid "Override inherited settings" -msgstr "Переопределить унаследованные параметры" - -msgid "Overwrite GID" -msgstr "Перезаписать GID" - -msgid "Owner" -msgstr "Владелец" - -#, python-format -msgid "Owner %s" -msgstr "Владелец %s" - -msgid "Owner groups" -msgstr "Группы-владельцы" - -msgid "Owner services" -msgstr "Службы-владельцы" - -msgid "Owner users" -msgstr "Пользователи-владельцы" - -msgid "Owners" -msgstr "Владельцы" - -msgid "Owners that could not be added" -msgstr "Владельцы, которых не удалось добавить" - -msgid "Owners that could not be removed" -msgstr "Владельцы, которых не удалось удалить" - -msgid "PAC type" -msgstr "Тип PAC" - -msgid "PAD" -msgstr "PAD" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "PKINIT status" -msgstr "Состояние PKINIT" - -msgid "POSIX" -msgstr "POSIX" - -msgid "PTR Hostname" -msgstr "Имя узла PTR" - -msgid "PTR record" -msgstr "Запись PTR" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "Запись PTR для SAN IP (%s) не соответствует записям A/AAAA" - -msgid "Page" -msgstr "Страница" - -msgid "Pager Number" -msgstr "Номер пейджера" - -msgid "Pagination Size" -msgstr "Размер для разбивки на страницы" - -msgid "Parameters" -msgstr "Параметры" - -msgid "Parent map" -msgstr "Родительский список соответствия" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" -"Проанализировать все необработанные записи DNS и вернуть их в " -"структурированном виде" - -msgid "Parse error" -msgstr "Ошибка обработки" - -msgid "Password" -msgstr "Пароль" - -msgid "Password Expiration Notification (days)" -msgstr "Уведомление об окончании действия пароля (в днях)" - -msgid "Password Policies" -msgstr "Политики паролей" - -msgid "Password Policy" -msgstr "Политика паролей" - -msgid "Password can be specified only for symmetric vault" -msgstr "Пароль можно указать только для симметричного хранилища" - -msgid "Password cannot be set on enrolled host." -msgstr "Невозможно установить пароль для зарегистрированного узла." - -msgid "Password change complete" -msgstr "Изменение пароля завершено" - -msgid "Password expiration" -msgstr "Окончание действия пароля" - -msgid "Password history size" -msgstr "Размер журнала паролей" - -msgid "Password migration was not successful" -msgstr "Не удалось выполнить перенос пароля" - -msgid "Password migration was successful" -msgstr "Перенос пароля успешно завершён" - -msgid "Password plugin features" -msgstr "Возможности подключаемого модуля паролей" - -msgid "Password reset was not successful." -msgstr "Не удалось сбросить пароль." - -msgid "Password specified multiple times" -msgstr "Пароль указан несколько раз" - -msgid "Password used in bulk enrollment" -msgstr "Пароль для массовой регистрации" - -msgid "Passwords do not match" -msgstr "Пароли не совпадают" - -msgid "Passwords do not match!" -msgstr "Пароли не совпадают!" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"Миграция записей паролей выполнена в формате до хеширования. IPA не удастся " -"создать ключи Kerberos, если не будут предоставлены текстовые пароли. Всем " -"пользователям с перенесёнными записями придётся выполнить вход на https://" -"your.domain/ipa/migration/ до того, как они смогут использовать свои учётные " -"записи Kerberos." - -msgid "Passwords must match" -msgstr "Пароли должны совпадать" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "Путь к сценарию, исполняемому в системе Windows при входе" - -msgid "Path to a user home directory, in UNC format" -msgstr "Путь к домашнему каталогу пользователя, в формате UNC" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "Путь к профилю пользователя, в формате UNC \\\\server\\share\\" - -msgid "Path to the IPA CA certificate" -msgstr "Путь к сертификату CA IPA" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Условная политика перенаправления для отдельных серверов. Чтобы отключить " -"для этой зоны перенаправление на глобальный перенаправитель, установите " -"значение \"none\". В этом случае условные перенаправители зон не будут " -"приниматься во внимание." - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Перенаправители для отдельных серверов. Для каждого перенаправителя можно " -"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Условная политика перенаправления для отдельных зон. Чтобы отключить для " -"этой зоны перенаправление на глобальный перенаправитель, установите значение " -"\"none\". В этом случае условные перенаправители зон не будут приниматься во " -"внимание." - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Перенаправители для отдельных зон. Для каждого перенаправителя можно указать " -"отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" -"Период, по истечении которого счётчик ошибок будет сброшен (в секундах)" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Период, в течение которого будет действовать блокировка (в секундах)" - -msgid "Permission" -msgstr "Разрешение" - -msgid "Permission ACI grants access to" -msgstr "Разрешение, доступ к которому предоставляет ACI" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "В доступе отказано: %(file)s" - -msgid "Permission flags" -msgstr "Флаги разрешения" - -msgid "Permission name" -msgstr "Имя разрешения" - -msgid "Permission settings" -msgstr "Параметры разрешений" - -msgid "Permission type" -msgstr "Тип разрешения" - -msgid "Permission value" -msgstr "Значение разрешения" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "Разрешение с неизвестным флагом %s не может быть изменено или удалено" - -msgid "Permissions" -msgstr "Разрешения" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" -"Разрешения, которые следует предоставить (read, write). По умолчанию " -"предоставляется разрешение \"write\" (запись)." - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" -"Разрешения, которые следует предоставить (read, write, add, delete, all)" - -msgid "Permitted Encryption Types" -msgstr "Разрешённые типы шифрования" - -msgid "Permitted to have certificates issued" -msgstr "Разрешено иметь выданные сертификаты" - -msgid "Ping a remote server." -msgstr "Проверить связь с удалённым сервером." - -msgid "Platform" -msgstr "Платформа" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Выберите тип записи ресурса DNS, который следует добавить" - -msgid "Please specify forwarders." -msgstr "Укажите серверы-перенаправители." - -msgid "Please try the following options:" -msgstr "Попробуйте использовать следующие параметры:" - -msgid "Policy" -msgstr "Политика" - -msgid "Port" -msgstr "Порт" - -msgid "Positional argument" -msgstr "Позиционный аргумент" - -msgid "Positional arguments" -msgstr "Позиционные аргументы" - -msgid "Pre-authentication is required for the service" -msgstr "Для службы требуется предварительная аутентификация" - -msgid "Pre-shared password" -msgstr "Общий пароль" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Предустановленный профиль \"%(profile_id)s\" невозможно удалить" - -msgid "Preference" -msgstr "Приоритет" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" -"Приоритет, указанный для этого обменника. Чем ниже значение, тем выше " -"приоритет." - -msgid "Preferred Language" -msgstr "Предпочитаемый язык" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Префикс, который используется для различения типов ACI (permission, " -"delegation, selfservice, none)" - -msgid "Preserved user" -msgstr "Хранимый пользователь" - -msgid "Preserved users" -msgstr "Хранимые пользователи" - -msgid "Prev" -msgstr "Назад" - -msgid "Primary RID base" -msgstr "Основа основного RID" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "Основной диапазон RID и вторичный диапазон RID не могут пересекаться" - -msgid "Primary key only" -msgstr "Только главный ключ" - -msgid "Principal" -msgstr "Учётная запись" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" -"Не удалось проверить подлинность учётной записи %(principal)s: %(message)s" +"\n" +"Топология репликация в суффиксе \"%(suffix)s\" отключена:\n" +"%(errors)s" #, python-format msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" -"Учётной записи \"%(principal)s\" не разрешено использовать службу " -"сертификации \"%(ca)s\" с профилем \"%(profile_id)s\" для выдачи " -"сертификатов." - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" -"Учётная запись \"%s\" в альтернативном имени субъекта не соответствует " -"запрошенной учётной записи" - -msgid "Principal alias" -msgstr "Псевдоним учётной записи" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Учётная запись для этого сертификата (например, HTTP/test.example.com)" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" -"Учётная запись указана в виде, отличном от от user@REALM: \"%(principal)s\"" - -msgid "Principal name" -msgstr "Имя учётной записи" - -msgid "Print as little as possible" -msgstr "Выводить минимум данных" - -msgid "Print debugging information" -msgstr "Вывести отладочные данные" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Вывести записи в том виде, в котором они хранятся на сервере. Влияет только " -"на формат вывода данных." - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Вывести данные XML-RPC без обработки в режиме GSSAPI" - -msgid "Priority" -msgstr "Приоритет" - -msgid "Priority (order)" -msgstr "Приоритет (порядок)" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Приоритет политики (чем больше число, тем ниже приоритет)" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "Приоритет правила (чем больше число, тем ниже приоритет)" - -msgid "Private key specified multiple times" -msgstr "Закрытый ключ указан несколько раз" - -msgid "Privilege" -msgstr "Привилегия" - -msgid "Privilege Settings" -msgstr "Параметры привилегий" - -msgid "Privilege Withdrawn" -msgstr "Отзыв привилегии" - -msgid "Privilege description" -msgstr "Описание привилегии" - -msgid "Privilege name" -msgstr "Имя привилегии" - -msgid "Privileges" -msgstr "Привилегии" - -msgid "Profile" -msgstr "Профиль" - -msgid "Profile ID" -msgstr "Идентификатор профиля" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"Идентификатор профиля \"%(cli_value)s\" не соответствует данным профиля " -"\"%(file_value)s\"" - -msgid "Profile ID for referring to this profile" -msgstr "Идентификатор профиля для ссылки на этот профиль" - -msgid "Profile category" -msgstr "Категория профилей" - -msgid "Profile category the ACL applies to" -msgstr "Категория профилей, к которой применяется ACL" - -msgid "Profile configuration" -msgstr "Конфигурация профиля" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Конфигурация профиля, которая хранится в файле \"%(file)s\"" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" -"В данных профиля несколько раз указан идентификатор \"profileId\": %(values)s" - -msgid "Profile description" -msgstr "Описание профиля" - -msgid "Profiles" -msgstr "Профили" - -msgid "Prompt for LDAP password" -msgstr "Запрос пароля LDAP" - -msgid "Prompt for the username" -msgstr "Запрос имени пользователя" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" -"Запрашивать имя пользователя, когда с сертификатом сопоставляются несколько " -"записей пользователей" - -msgid "Prompt to set the user password" -msgstr "Запросить пароль у пользователя" - -msgid "Prospective" -msgstr "Ожидается" - -msgid "Protocol" -msgstr "Протокол" - -msgid "Provisioning" -msgstr "Подготовка" - -msgid "Public Key" -msgstr "Открытый ключ" - -msgid "Public key" -msgstr "Открытый ключ" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "Открытый ключ можно указать только для асимметричного хранилища" - -msgid "Public key specified multiple times" -msgstr "Открытый ключ указан несколько раз" - -msgid "Public key:" -msgstr "Открытый ключ:" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" -"Ширина QR-кода превышает ширину, заданную параметром \"tty\" для вывода. " -"Измените размер терминала." - -msgid "Quantity" -msgstr "Количество" - -msgid "Query current Domain Level." -msgstr "Запросить текущий уровень домена." - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"Запрос вернул количество результатов, которое превышает заданное ограничение " -"по размеру. Показано результатов: первые ${counter}." - -msgid "Quick Links" -msgstr "Быстрые ссылки" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Тихий режим. Отображаются только ошибки." - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "RADIUS Proxy Server Settings" -msgstr "Параметры прокси-сервера RADIUS" - -msgid "RADIUS Server" -msgstr "Сервер RADIUS" - -msgid "RADIUS Servers" -msgstr "Серверы RADIUS" - -msgid "RADIUS proxy configuration" -msgstr "Конфигурация прокси RADIUS" - -msgid "RADIUS proxy server" -msgstr "прокси-сервер RADIUS" - -msgid "RADIUS proxy server name" -msgstr "Имя прокси-сервера RADIUS" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "Прокси-сервер RADIUS с именем \"%s\" уже существует" - -msgid "RADIUS proxy servers" -msgstr "прокси-серверы RADIUS" - -msgid "RADIUS proxy username" -msgstr "Имя пользователя прокси RADIUS" - -msgid "REST API is not logged in." -msgstr "Не выполнен вход в программный интерфейс REST." - -msgid "REVOKED" -msgstr "ОТОЗВАНО" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "Область (realm) Kerberos, которая соответствует RFC4120" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" -"RFC822Name не соответствует ни одному адресу электронной почты пользователя" - -msgid "RP record" -msgstr "Запись RP" - -msgid "RPC command used to log the current user out of their session." -msgstr "" -"Команда RPC, которая используется для завершения сеанса текущего " -"пользователя." - -msgid "RRSIG Algorithm" -msgstr "Алгоритм RRSIG" - -msgid "RRSIG Key Tag" -msgstr "Тег ключа RRSIG" - -msgid "RRSIG Labels" -msgstr "Метки RRSIG" - -msgid "RRSIG Original TTL" -msgstr "Исходное значение срока жизни RRSIG" - -msgid "RRSIG Signature" -msgstr "Подпись RRSIG" - -msgid "RRSIG Signature Expiration" -msgstr "Окончание действия подписи RRSIG" - -msgid "RRSIG Signature Inception" -msgstr "Начало действия подписи RRSIG" - -msgid "RRSIG Signer's Name" -msgstr "Имя подписавшего RRSIG" - -msgid "RRSIG Type Covered" -msgstr "Охваченные типы RRSIG" - -msgid "RRSIG record" -msgstr "Запись RRSIG" - -msgid "Random password" -msgstr "Случайный пароль" - -msgid "Range Settings" -msgstr "Параметры диапазона" - -msgid "Range name" -msgstr "Имя диапазона" - -msgid "Range size" -msgstr "Размер диапазона" - -msgid "Range type" -msgstr "Тип диапазона" - -#, python-format -msgid "Raw %s records" -msgstr "Необработанные записи %s" - -msgid "Raw A records" -msgstr "Необработанные записи A" - -msgid "Raw A6 records" -msgstr "Необработанные записи A6" - -msgid "Raw AAAA records" -msgstr "Необработанные записи AAAA" - -msgid "Raw AFSDB records" -msgstr "Необработанные записи AFSDB" - -msgid "Raw APL records" -msgstr "Необработанные записи APL" - -msgid "Raw CERT records" -msgstr "Необработанные записи CERT" - -msgid "Raw CNAME records" -msgstr "Необработанные записи CNAME" - -msgid "Raw DHCID records" -msgstr "Необработанные записи DHCID" - -msgid "Raw DLV records" -msgstr "Raw DLV records" - -msgid "Raw DNAME records" -msgstr "Необработанные записи DNAME" - -msgid "Raw DNSKEY records" -msgstr "Необработанные записи DNSKEY" - -msgid "Raw DS records" -msgstr "Необработанные записи DS" - -msgid "Raw HIP records" -msgstr "Необработанные записи HIP" - -msgid "Raw IPSECKEY records" -msgstr "Необработанные записи IPSECKEY" - -msgid "Raw KEY records" -msgstr "Необработанные записи KEY" - -msgid "Raw KX records" -msgstr "Необработанные записи KX" - -msgid "Raw LOC records" -msgstr "Необработанные записи LOC" - -msgid "Raw MX records" -msgstr "Необработанные записи MX" - -msgid "Raw NAPTR records" -msgstr "Необработанные записи NAPTR" - -msgid "Raw NS records" -msgstr "Необработанные записи NS" - -msgid "Raw NSEC records" -msgstr "Необработанные записи NSEC" - -msgid "Raw NSEC3 records" -msgstr "Необработанные записи NSEC3" - -msgid "Raw PTR records" -msgstr "Необработанные записи PTR" - -msgid "Raw RP records" -msgstr "Необработанные записи RP" - -msgid "Raw RRSIG records" -msgstr "Необработанные записи RRSIG" - -msgid "Raw SIG records" -msgstr "Необработанные записи SIG" - -msgid "Raw SPF records" -msgstr "Необработанные записи SPF" - -msgid "Raw SRV records" -msgstr "Необработанные записи SRV" - -msgid "Raw SSHFP records" -msgstr "Необработанные записи SSHFP" - -msgid "Raw TA records" -msgstr "Необработанные записи TA" - -msgid "Raw TKEY records" -msgstr "Необработанные записи TKEY" - -msgid "Raw TLSA records" -msgstr "Необработанные записи TLSA" - -msgid "Raw TSIG records" -msgstr "Необработанные записи TSIG" - -msgid "Raw TXT records" -msgstr "Необработанные записи TXT" - -msgid "Raw target filter" -msgstr "Необработанный фильтр целей" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "Необработанное значение записи DNS уже задано параметром \"%(name)s\"" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Повторно установлено отношение доверия с доменом \"%(value)s\"" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "Повторно синхронизировать локальный кэш прав с сервером прав." - -msgid "Realm Domains" -msgstr "Домены области (realm)" - -msgid "Realm administrator password should be specified" -msgstr "Следует указать пароль администратора области (realm)" - -msgid "Realm domains" -msgstr "Домены области (realm)" - -msgid "Realm name" -msgstr "Имя области (realm)" - -msgid "Realm-domain mismatch" -msgstr "Несоответствие области (realm) и домена" - -msgid "Reason" -msgstr "Причина" - -msgid "Reason for Revocation" -msgstr "Причина отзыва" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Причина отзыва сертификата (0-10)" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" -"Причина отзыва сертификата (0-10). Введите \"ipa help cert\", чтобы получить " -"сведения о причине отзыва. " - -msgid "Rebuild auto membership" -msgstr "Перестроить автоучастие" - -msgid "Rebuild auto membership." -msgstr "Перестроить автоучастие." - -msgid "Rebuild membership for all members of a grouping" -msgstr "Перестроить участие для всех участников группировки" - -msgid "Rebuild membership for specified hosts" -msgstr "Перестроить участие для указанных узлов" - -msgid "Rebuild membership for specified users" -msgstr "Перестроить участие для указанных пользователей" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" -"Превышено рекомендованное максимальное количество соглашений для реплики" - -msgid "Record Type" -msgstr "Тип записи" - -msgid "Record creation failed." -msgstr "Не удалось создать запись." - -msgid "Record data" -msgstr "Данные записи" - -msgid "Record name" -msgstr "Имя записи" - -msgid "Record not found." -msgstr "Запись не найдена." - -msgid "Record type" -msgstr "Тип записи" - -msgid "Records" -msgstr "Записи" - -msgid "Records for DNS Zone" -msgstr "Записи зоны DNS" - -msgid "Redirection" -msgstr "Перенаправление" - -msgid "Redirection to PTR record" -msgstr "Перенаправление на запись PTR" - -msgid "Refresh" -msgstr "Обновить" - -msgid "Refresh list of the domains associated with the trust" -msgstr "Обновить список доменов, связанных с отношением доверия." - -msgid "Refresh the page." -msgstr "Обновить страницу." - -msgid "Register to the entitlement system." -msgstr "Зарегистрироваться в системе прав." - -msgid "Registration password" -msgstr "Пароль для регистрации" - -msgid "Regular Expression" -msgstr "Регулярное выражение" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"Относительное имя записи \"%(record)s\" содержит имя зоны \"%(zone)s\" в " -"качестве суффикса, что превращает её в полное имя домена \"%(fqdn)s\". " -"Обычно эта ошибка вызвана отсутствием точки в конце определения имени." - -msgid "Relative weight for entries with the same priority." -msgstr "Относительный вес записей с одинаковым приоритетом" - -msgid "Relative weight for server services (counts per location)" -msgstr "" -"Относительный вес служб сервера (вычисляется для отдельного расположения)" - -msgid "Reload current settings from the server." -msgstr "Перезагрузить текущие параметры с сервера" - -msgid "Reload the browser." -msgstr "Перезапустить браузер." - -msgid "Remote IPA server hostname" -msgstr "Имя узла удалённого IPA-сервера" - -msgid "Remote server name" -msgstr "Имя удалённого сервера" - -msgid "Remove" -msgstr "Удалить" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" -"Удалить записи A, AAAA, SSHFP и PTR узла (узлов) под управлением DNS IPA" - -msgid "Remove CA ACLs" -msgstr "Удалить CA ACL" - -msgid "Remove CAs from a CA ACL." -msgstr "Удалить CA из CA ACL." - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "Удалить центры сертификации из CA ACL '${primary_key}'" - -msgid "Remove DNS forward zones" -msgstr "Удалить зоны перенаправления DNS" - -msgid "Remove DNS resource records" -msgstr "Удалить записи ресурсов DNS" - -msgid "Remove DNS zones" -msgstr "Удалить зоны DNS" - -msgid "Remove HBAC rules" -msgstr "Удалить правила HBAC" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "Удалить службу HBAC '${primary_key}' из групп служб HBAC" - -msgid "Remove HBAC service groups" -msgstr "Удалить группы служб HBAC" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Удалить группы служб HBAC из правила HBAC '${primary_key}'" - -msgid "Remove HBAC services" -msgstr "Удалить службы HBAC" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "Удалить службы HBAC из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Удалить службы HBAC из группы служб HBAC '${primary_key}'" - -msgid "Remove ID ranges" -msgstr "Удалить диапазоны идентификаторов" - -msgid "Remove ID views" -msgstr "Удалить представления ID" - -msgid "Remove IPA locations" -msgstr "Удалить расположения IPA" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "Удалить IPA-серверы из расположения IPA '${primary_key}'" - -msgid "Remove Kerberos Alias" -msgstr "Удалить псевдоним Kerberos" - -msgid "Remove OTP tokens" -msgstr "Удалить токены OTP" - -msgid "Remove Permission" -msgstr "Удалить разрешение" - -msgid "Remove RADIUS servers" -msgstr "Удалить серверы RADIUS" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "Удалить группы запуска от имени из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" -"Удалить группы пользователей запуска от имени из правила Sudo " -"'${primary_key}'" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" -"Удалить пользователей запуска от имени из правила Sudo '${primary_key}'" - -msgid "Remove a manager to the stage user entry" -msgstr "Удалить руководителя из записи неподтверждённого пользователя." - -msgid "Remove a manager to the user entry" -msgstr "Удалить руководителя из записи пользователя." - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" -"Удалить разрешение для делегирования прав доступа для отдельных зон " -"перенаправления." - -msgid "Remove a permission for per-zone access delegation." -msgstr "Удалить разрешение для делегирования прав доступа для отдельных зон." - -msgid "Remove all principals in this realm" -msgstr "Удалить все учётные записи в этой области (realm)" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" -"Удалить группы разрешённых команд Sudo из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "Удалить разрешённые команды Sudo из правила Sudo '${primary_key}'" - -msgid "Remove an option from Sudo Rule." -msgstr "Удалить параметр из правила Sudo." - -msgid "Remove auto membership rules" -msgstr "Удалить правила автоучастия" - -msgid "Remove automount keys" -msgstr "Удалить ключи автомонтирования" - -msgid "Remove automount locations" -msgstr "Удалить расположения автомонтирования" - -msgid "Remove automount maps" -msgstr "Удалить списки соответствия автомонтирования" - -msgid "Remove certificate authorities" -msgstr "Удалить центры сертификации" - -msgid "Remove certificate hold" -msgstr "Отменить приостановку действия сертификата" - -msgid "Remove certificate identity mapping rules" -msgstr "Удалить правила сопоставления сертификатов с записями пользователей" - -msgid "Remove certificate mapping data" -msgstr "Удалить данные сопоставления сертификата" - -msgid "Remove certificate profiles" -msgstr "Удалить профили сертификатов" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "Удалить профили сертификатов из CA ACL '${primary_key}'" - -msgid "Remove certificates from a service" -msgstr "Удалить сертификаты из записи службы." - -msgid "Remove certificates from host entry" -msgstr "Удалить сертификаты из записи узла." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "Удалить команды и группы команд Sudo, которых касается правило Sudo." - -msgid "Remove conditions from an automember rule." -msgstr "Удалить условия из правила автоучастия." - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" -"Удалить группу по умолчанию (резервную) для всех несоответствующих записей." - -msgid "Remove delegations" -msgstr "Удалить делегирования" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" -"Удалить группы запрещённых команд Sudo из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "Удалить запрещённые команды Sudo из правила Sudo '${primary_key}'" - -msgid "Remove domains" -msgstr "Удалить домены" - -msgid "Remove entries from DNS" -msgstr "Удалить записи из DNS" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "Удалить исключающие условия из правила '${primary_key}'" - -msgid "Remove from CRL" -msgstr "Удаление из списка отзыва сертификатов (CRL)" - -msgid "Remove group ID overrides" -msgstr "Удалить переопределения ID группы" - -msgid "Remove group for Sudo to execute as." -msgstr "Удалить группу для выполнения Sudo от её имени." - -msgid "Remove hold" -msgstr "Отменить приостановку действия" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Удалить узел '${primary_key}' из правил HBAC" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "Удалить узел '${primary_key}' из групп узлов" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "Удалить узел '${primary_key}' из сетевых групп" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "Удалить узел '${primary_key}' из ролей" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "Удалить узел '${primary_key}' из правил Sudo" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Удалить группу узлов '${primary_key}' из правил HBAC" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "Удалить группу узлов '${primary_key}' из групп узлов" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "Удалить группу узлов '${primary_key}' из сетевых групп" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "Удалить группу узлов '${primary_key}' из правил Sudo" - -msgid "Remove host groups" -msgstr "Удалить группы узлов" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Удалить группы узлов из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Удалить группы узлов из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "Удалить группы узлов из списка пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "Удалить группы узлов из группы узлов '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "Удалить группы узлов из сетевой группы '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "Удалить группы узлов из роли '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "Удалить группы узлов из правила Sudo '${primary_key}'" - -msgid "Remove hosts" -msgstr "Удалить узлы" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Удалить узлы и группы узлов, которых касается правило Sudo." - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "Удалить узлы из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "Удалить узлы из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "Удалить узлы из списка пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "Удалить узлы из группы узлов '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "Удалить узлы из сетевой группы '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "Удалить узлы из роли '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "Удалить узлы из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "Удалить узлы, которые управляют узлом '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "Удалить узлы, которые управляют службой '${primary_key}'" - -msgid "Remove hosts that can manage this host." -msgstr "Удалить узлы, которые могут управлять этим узлом." - -msgid "Remove hosts that can manage this service." -msgstr "Удалить узлы, которые могут управлять этой службой." - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "Удалить включающие условия из правила '${primary_key}'" - -msgid "Remove information about the domain associated with the trust." -msgstr "Удалить сведения о домене, связанном с отношением доверия." - -msgid "Remove member from a named service delegation rule." -msgstr "Удалить участника из именованного правила делегирования служб." - -msgid "Remove member from a named service delegation target." -msgstr "Удалить участника из именованной цели делегирования служб." - -msgid "Remove member from a named service delegation." -msgstr "Удалить участника из именованного делегирования служб." - -msgid "Remove members from Sudo Command Group." -msgstr "Удалить участников из группы команд Sudo." - -msgid "Remove members from a group." -msgstr "Удалить участников из группы." - -msgid "Remove members from a hostgroup." -msgstr "Удалить участников из группы узлов." - -msgid "Remove members from a netgroup." -msgstr "Удалить участников из сетевой группы." - -msgid "Remove members from a permission." -msgstr "Удалить участников из разрешения." - -msgid "Remove members from a privilege" -msgstr "Удалить участников из привилегии." - -msgid "Remove members from a role." -msgstr "Удалить участников из роли." - -msgid "Remove members from a vault." -msgstr "Удалить участников из хранилища." - -msgid "Remove members from an HBAC service group." -msgstr "Удалить участников из группы служб HBAC." - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "Удалить сетевую группу '${primary_key}' из сетевых групп" - -msgid "Remove netgroups" -msgstr "Удалить сетевые группы" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "Удалить сетевые группы из сетевой группы '${primary_key}'" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" -"Удалить одно или несколько сопоставлений сертификатов из записи " -"неподтверждённого пользователя." - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" -"Удалить одно или несколько сопоставлений сертификатов из записи пользователя." - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Удалить один или несколько сертификатов из записи idoverrideuser." - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" -"Удалить один или несколько сертификатов из записи неподтверждённого " -"пользователя." - -msgid "Remove one or more certificates to the user entry" -msgstr "Удалить один или несколько сертификатов из записи пользователя." - -msgid "Remove orphan automember rules" -msgstr "Удалить неиспользуемые правила автоучастия" - -msgid "Remove owners from a vault container." -msgstr "Удалить владельцев из контейнера хранилищ." - -msgid "Remove owners from a vault." -msgstr "Удалить владельцев из хранилища." - -msgid "Remove password policies" -msgstr "Удалить политики паролей" - -msgid "Remove permissions" -msgstr "Удалить разрешения" - -msgid "Remove permissions from a privilege." -msgstr "Удалить разрешения из привилегии." - -msgid "Remove preserved users" -msgstr "Удалить хранимых пользователей" - -msgid "Remove principal alias from a host entry" -msgstr "Удалить псевдоним учётной записи из записи узла." - -msgid "Remove principal alias from a service" -msgstr "Удалить псевдоним учётной записи из службы." - -msgid "Remove principal alias from the stageuser entry" -msgstr "" -"Удалить псевдоним учётной записи из записи неподтверждённого пользователя." - -msgid "Remove principal alias from the user entry" -msgstr "Удалить псевдоним учётной записи из записи пользователя." - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "Удалить привилегию '${primary_key}' из разрешений" - -msgid "Remove privileges" -msgstr "Удалить привилегии" - -msgid "Remove privileges from a role." -msgstr "Удалить привилегии из роли." - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "Удалить привилегии из разрешения '${primary_key}'" - -msgid "Remove profiles from a CA ACL." -msgstr "Удалить профили из CA ACL." - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "Удалить роль '${primary_key}' из привилегий" - -msgid "Remove roles" -msgstr "Удалить роли" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "Удалить роли из привилегии '${primary_key}'" - -msgid "Remove self service permissions" -msgstr "Удалить разрешения самообслуживания" - -msgid "Remove selinux user maps" -msgstr "Удалить списки пользователей SELinux" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "Удалить службу '${primary_key}' из ролей" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Удалить службы и группы служб из правила HBAC." - -msgid "Remove services" -msgstr "Удалить службы" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "Удалить службы из CA ACL '${primary_key}'" - -msgid "Remove services from a CA ACL." -msgstr "Удалить службы из CA ACL." - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "Удалить службы из участников хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "Удалить службы из владельцев хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Удалить службы из роли '${primary_key}'" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Удалить службы из группы пользователей '${primary_key}'" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "Удалить узлы-источники и группы узлов из правила HBAC." - -msgid "Remove stage users" -msgstr "Удалить неподтверждённых пользователей" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "Удалить команду Sudo '${primary_key}' из групп команд Sudo" - -msgid "Remove sudo command groups" -msgstr "Удалить группы команд Sudo" - -msgid "Remove sudo commands" -msgstr "Удалить команды Sudo" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "Удалить команды Sudo из группы команд Sudo '${primary_key}'" - -msgid "Remove sudo options" -msgstr "Удалить параметры Sudo" - -msgid "Remove sudo rules" -msgstr "Удалить правила Sudo" - -msgid "Remove target from a named service delegation rule." -msgstr "Удалить цель из именованного правила делегирования служб." - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Удалить целевые узлы или группы узлов из CA ACL." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Удалить целевые узлы и группы узлов из правила HBAC." - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" -"Удалить целевые узлы и группы узлов из правила списка пользователей SELinux." - -msgid "Remove topology segments" -msgstr "Удалить сегменты топологии" - -msgid "Remove trusts" -msgstr "Удалить отношения доверия" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Удалить пользователя '${primary_key}' из правил HBAC" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "Удалить пользователя '${primary_key}' из сетевых групп" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "Удалить пользователя '${primary_key}' из ролей" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "Удалить пользователя '${primary_key}' из правил Sudo" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "Удалить пользователя '${primary_key}' из групп пользователей" - -msgid "Remove user ID overrides" -msgstr "Удалить переопределения ID пользователя" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Удалить группу пользователей '${primary_key}' из правил HBAC" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "Удалить группу пользователей '${primary_key}' из сетевых групп" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "Удалить группу пользователей '${primary_key}' из ролей" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Удалить группу пользователей '${primary_key}' из правил Sudo" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "Удалить группу пользователей '${primary_key}' из групп пользователей" - -msgid "Remove user groups" -msgstr "Удалить группы пользователей" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Удалить группы пользователей из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Удалить группы пользователей из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" -"Удалить группы пользователей из списка пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "Удалить группы пользователей из участников хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Удалить группы пользователей из сетевой группы '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "Удалить группы пользователей из владельцев хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Удалить группы пользователей из роли '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Удалить группы пользователей из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "Удалить группы пользователей из группы пользователей '${primary_key}'" - -msgid "Remove users" -msgstr "Удалить пользователей" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Удалить пользователей и группы, которых касается правило Sudo." - -msgid "Remove users and groups for Sudo to execute as." -msgstr "Удалить пользователей и группы для выполнения Sudo от их имени." - -msgid "Remove users and groups from a CA ACL." -msgstr "Удалить пользователей и группы из CA ACL." - -msgid "Remove users and groups from an HBAC rule." -msgstr "Удалить пользователей и группы из правила HBAC." - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" -"Удалить пользователей и группы из правила списка пользователей SELinux." - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "Удалить пользователей из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Удалить пользователей из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "Удалить пользователей из списка пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "Удалить пользователей из участников хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "Удалить пользователей из сетевой группы '${primary_key}'" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "Удалить пользователей из владельцев хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "Удалить пользователей из роли '${primary_key}'" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "Удалить пользователей из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "Удалить пользователей из группы пользователей '${primary_key}'" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "Удалить пользователей, которые управляют токеном OTP '${primary_key}'" - -msgid "Remove users that can manage this token." -msgstr "Удалить пользователей, которые могут управлять этим токеном." - -msgid "Remove vaults" -msgstr "Удалить хранилища" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Удалены псевдонимы из записи узла \"%(value)s\"" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" -"Удалены псевдонимы из записи неподтверждённого пользователя \"%(value)s\"" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Удалены псевдонимы из записи пользователя \"%(value)s\"" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Удалены псевдонимы учётной записи службы \"%(value)s\"" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" -"Удалены сопоставления сертификатов из записи пользователя \"%(value)s\"" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Удалены сертификаты из записи узла \"%(value)s\"" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Удалены сертификаты из записи idoverrideuser \"%(value)s\"" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Удалены сертификаты из учётной записи службы \"%(value)s\"" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" -"Удалены сертификаты из записи неподтверждённого пользователя \"%(value)s\"" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Удалены сертификаты из записи пользователя \"%(value)s\"" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Удалено условие (условия) из \"%(value)s\"" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Удалена группа по умолчанию (резервная) для автоучастия \"%(value)s\"" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Удалены сведения о доверенном домене \"%(value)s\"" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Из правила Sudo \"%(rule)s\" удалён параметр \"%(option)s\"" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Удалено системное разрешение \"%(value)s\"" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" -"Выполняется удаление %(servers)s из топологии репликации; пожалуйста, " -"подождите..." - -#, c-format -msgid "Removing principal %s\n" -msgstr "Удаление учётной записи %s\n" - -msgid "Rename" -msgstr "Переименовать" - -msgid "Rename an ACI." -msgstr "Переименовать запись ACI." - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Переименовать объект %(ldap_obj_name)s" - -msgid "Rename the DNS resource record object" -msgstr "Переименовать объект записи ресурса DNS" - -msgid "Rename the Group ID override object" -msgstr "Переименовать объект переопределения ID группы" - -msgid "Rename the ID View object" -msgstr "Переименовать объект представления ID" - -msgid "Rename the OTP token object" -msgstr "Переименовать объект токена OTP." - -msgid "Rename the RADIUS proxy server object" -msgstr "Переименовать объект прокси-сервера RADIUS" - -msgid "Rename the User ID override object" -msgstr "Переименовать объект переопределения ID пользователя" - -msgid "Rename the automount key object" -msgstr "Переименовать объект ключа автомонтирования" - -msgid "Rename the group object" -msgstr "Переименовать объект группы" - -msgid "Rename the permission object" -msgstr "Переименовать объект разрешения" - -msgid "Rename the privilege object" -msgstr "Переименовать объект привилегии" - -msgid "Rename the role object" -msgstr "Переименовать объект роли." - -msgid "Rename the stage user object" -msgstr "Переименовать объект неподтверждённого пользователя" - -msgid "Rename the user object" -msgstr "Переименовать объект пользователя" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI переименована в \"%(value)s\"" - -msgid "Renewal master for IPA certificate authority" -msgstr "Главный сервер обновления центра сертификации IPA" - -msgid "Replacement" -msgstr "Замена" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"Реплика является активным мастером ключей DNSSEC. Удаление может привести к " -"неработоспособности вашей системы DNS. Сначала следует отключить или " -"заменить мастер ключей DNSSEC." - -msgid "Replication agreement enabled" -msgstr "Соглашение о репликации включено" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "Соглашение о репликации для %(hostname)s не найдено" - -msgid "Replication configuration" -msgstr "Конфигурация репликации" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Обновление репликации для сегмента: направлен запрос \"%(pkey)s\"." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "Топология репликации суффикса \"%(suffix)s\" содержит ошибки." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" -"Топология репликации суффикса \"%(suffix)s\" соответствует требованиям." - -msgid "Report PKINIT status on the IPA masters" -msgstr "Сообщить состояние PKINIT на главных IPA-серверах" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" -"Отправить запрос на полную повторную инициализацию узла, чтобы получить " -"данные с другого узла." - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "Ошибка выполнения запроса, состояние %(status)s: %(reason)s" - -msgid "Request id" -msgstr "ID запроса" - -msgid "Request is missing \"method\"" -msgstr "В запросе не указан метод (\"method\")" - -msgid "Request is missing \"params\"" -msgstr "В запросе не указаны параметры (\"params\")" - -msgid "Request must be a dict" -msgstr "Запрос должен принадлежать к типу словаря (dict)" - -msgid "Request status" -msgstr "Состояние запроса" - -msgid "Required" -msgstr "Обязательно" - -msgid "Required field" -msgstr "Обязательное поле" - -msgid "Requires pre-authentication" -msgstr "Требуется предварительная аутентификация" - -msgid "Reset" -msgstr "Сбросить" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "Восстановить значения политики билетов Kerberos по умолчанию." - -msgid "Reset OTP" -msgstr "Сбросить OTP" - -msgid "Reset Password" -msgstr "Сбросить пароль" - -msgid "Reset Password and Log in" -msgstr "Сбросить пароль и войти" - -msgid "Reset your password." -msgstr "Сбросить свой пароль." - -msgid "Resolve a host name in DNS." -msgstr "Определить адрес по имени узла в DNS." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "Определить адрес по имени узла в DNS. (Больше не поддерживается.)" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" -"Определить идентификаторы безопасности пользователей и групп в доверенных " -"доменах" - -msgid "Response from CA was not valid JSON" -msgstr "Ответ от CA не являлся корректным кодом JSON" - -msgid "Restore" -msgstr "Восстановить" - -msgid "Result" -msgstr "Результат" - -msgid "Result of simulation" -msgstr "Результат имитации" - -msgid "Result of the command" -msgstr "Результат команды" - -msgid "Results are truncated, try a more specific search" -msgstr "Результаты усечены. Попробуйте задать более точные условия поиска" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"%s\")" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"anchor\")" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"certificate\")" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"cn\")" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"command\")" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"delegation-name" -"\")" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"domain\")" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"group\")" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"group-name\")" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"hostgroup-name" -"\")" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"hostname\")" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"id\")" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"location\")" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"login\")" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"map\")" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"name\")" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"principal\")" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"realm\")" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"service\")" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"sudocmdgroup-" -"name\")" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"sudorule-name\")" - -msgid "Retries" -msgstr "Повторные попытки" - -msgid "Retrieve a data from a vault." -msgstr "Получить данные из хранилища." - -msgid "Retrieve an existing certificate." -msgstr "Получить существующий сертификат." - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Получить и вывести все атрибуты, возвращаемые сервером. Влияет на содержимое " -"результата исполнения команды." - -msgid "Retrieve current keys without changing them" -msgstr "Получать текущие ключи без внесения в них изменений" - -msgid "Retrieve data from a vault." -msgstr "Извлечь данные из хранилища." - -msgid "Retrieve the entitlement certs." -msgstr "Получить сертификаты прав." - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Данные получены из хранища \"%(value)s\"" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Не удалось получить цепочку сертификатов CA: %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Не удалось получить данные о состоянии CA: %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Не удалось получить данные о состоянии CA: %s" - -msgid "Retry" -msgstr "Повторить попытку" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" -"Повтор попытки с использованием метода получения таблицы ключей, который " -"применялся до версии 4.0\n" - -msgid "Return command defaults" -msgstr "Вернуть значения команд по умолчанию" - -msgid "Return to the main page and retry the operation" -msgstr "Вернуться на главную страницу и снова попытаться выполнить операцию" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" -"Обратная запись для IP-адреса %(ip)s уже существует в обратной зоне %(zone)s." - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" -"Обратной зоне %(name)s требуется ровно %(count)d компонтов IP-адресов, " -"предоставлено %(user_count)d" - -msgid "Reverse zone IP network" -msgstr "IP-сеть обратной зоны" - -msgid "Revert" -msgstr "Вернуть" - -msgid "Revocation reason" -msgstr "Причина отзыва" - -msgid "Revoke" -msgstr "Отозвать" - -msgid "Revoke a certificate." -msgstr "Отозвать сертификат." - -msgid "Revoke certificate" -msgstr "Отозвать сертификат" - -msgid "Revoked" -msgstr "Отозван" - -msgid "Revoked on from" -msgstr "Отозван с" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "Отозван с этой даты (ГГГГ-мм-дд)" - -msgid "Revoked on to" -msgstr "Отозван до" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "Отозван до этой даты (ГГГГ-мм-дд)" - -msgid "Right node" -msgstr "Правый узел" - -msgid "Right replication node - an IPA server" -msgstr "Правый узел репликации — IPA-сервер" - -msgid "Rights" -msgstr "Права" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" -"Права, которые следует предоставить (read, search, compare, write, add, " -"delete, all)" - -msgid "Role" -msgstr "Роль" - -msgid "Role Settings" -msgstr "Параметры роли" - -msgid "Role name" -msgstr "Имя роли" - -msgid "Role status" -msgstr "Состояние роли" - -msgid "Role-Based Access Control" -msgstr "Управление доступом на основе ролей" - -msgid "Roles" -msgstr "Роли" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"Корневой домен отношения доверия всегда включён для существующего доверия" - -msgid "Rule name" -msgstr "Имя правила" - -msgid "Rule status" -msgstr "Состояние правила" - -msgid "Rule type" -msgstr "Тип правила" - -msgid "Rule type (allow)" -msgstr "Тип правила (allow)" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" -"Правило, которое используется для определения того, пригоден ли сертификат " -"для аутентификации" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" -"Правило, которое используется для сопоставления сертификата с записью " -"пользователя" - -msgid "Rules" -msgstr "Правила" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" -"Правила, которые следует проверить. Если они не указаны, считается, что " -"использован параметр --enabled" - -msgid "Run Commands" -msgstr "Выполнить команды" - -msgid "Run Test" -msgstr "Выполнить проверку" - -msgid "Run as a user" -msgstr "Запустить от имени пользователя" - -msgid "Run as any user within a specified group" -msgstr "Запустить от имени любого пользователя из указанной группы" - -msgid "Run with the gid of a specified POSIX group" -msgstr "Запускать с идентификатором указанной POSIX-группы" - -msgid "RunAs External Group" -msgstr "Внешняя группа для RunAs" - -msgid "RunAs External User" -msgstr "Внешний пользователь для RunAs" - -msgid "RunAs Group category" -msgstr "Категория запуска от имени группы" - -msgid "RunAs Group category the rule applies to" -msgstr "Категория запуска от имени группы, к которой применяется правило" - -msgid "RunAs Groups" -msgstr "Группы запуска от имени" - -msgid "RunAs User category" -msgstr "Категория запуска от имени пользователей" - -msgid "RunAs User category the rule applies to" -msgstr "" -"Категория запуска от имени пользователей, к которой применяется правило" - -msgid "RunAs Users" -msgstr "Пользователи запуска от имени" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "Имя группы \"%(name)s\" не принимается RunAsGroup" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "Имя группы \"%(name)s\" не принимается RunAsUser" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" -"Нельзя указывать \"%(name)s\" в качестве имени пользователя в записи " -"RunAsUser" - -msgid "SELinux Options" -msgstr "Параметры SELinux" - -msgid "SELinux User" -msgstr "Пользователь SELinux" - -msgid "SELinux User Map" -msgstr "Список пользователей SELinux" - -msgid "SELinux User Map rule" -msgstr "Правило списка пользователей SELinux" - -msgid "SELinux User Map rules" -msgstr "Правила списка пользователей SELinux" - -msgid "SELinux User Maps" -msgstr "Списки пользователей SELinux" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" -"Пользователь SELinux %(user)s не найден в списке порядка применения (в " -"конфигурации)" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" -"Запись пользователя SELinux \"%(user)s\" не является корректной: %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" -"Пользователя списка соответствия пользователей SELinux по умолчанию нет в " -"порядковом списке" - -msgid "SELinux user map list not found in configuration" -msgstr "Список пользователей SELinux не найден в конфигурации" - -msgid "SELinux user map order" -msgstr "Порядок применения списка пользователей SELinux" - -msgid "SHA1 Fingerprint" -msgstr "Отпечаток SHA1" - -msgid "SHA256 Fingerprint" -msgstr "Отпечаток SHA256" - -msgid "SID" -msgstr "Идентификатор безопасности (SID)" - -msgid "SID blacklist incoming" -msgstr "Входящий \"чёрный список\" SID" - -msgid "SID blacklist outgoing" -msgstr "Исходящий \"чёрный список\" SID" - -msgid "SID does not match any trusted domain" -msgstr "SID не соответствует ни одному доверенному домену" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "SID не совпадает точно ни с одним из SID доверенных доменов" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"Не удалось найти SID указанного доверенного домена. Укажите SID в явном виде " -"с помощью параметра dom-sid." - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" -"Не удалось распознать SID в качестве допустимого идентификатора безопасности " -"для доверенного домена" - -msgid "SID is not valid" -msgstr "SID недействителен" - -msgid "SIG Algorithm" -msgstr "Алгоритм SIG" - -msgid "SIG Key Tag" -msgstr "Тег ключа SIG" - -msgid "SIG Labels" -msgstr "Метки SIG" - -msgid "SIG Original TTL" -msgstr "Исходное значение срока жизни SIG" - -msgid "SIG Signature" -msgstr "Подпись SIG" - -msgid "SIG Signature Expiration" -msgstr "Окончание действия подписи SIG" - -msgid "SIG Signature Inception" -msgstr "Начало действия подписи SIG" - -msgid "SIG Signer's Name" -msgstr "Имя подписавшего SIG" - -msgid "SIG Type Covered" -msgstr "Охваченные типы SIG" - -msgid "SIG record" -msgstr "Запись SIG" - -msgid "SMB Home Directory" -msgstr "Домашний каталог SMB" - -msgid "SMB Home Directory Drive" -msgstr "Диск домашнего каталога SMB" - -msgid "SMB logon script path" -msgstr "Путь к сценарию входа SMB" - -msgid "SMB profile path" -msgstr "Путь к профилю SMB" - -msgid "SMB service NetBIOS name" -msgstr "Имя NetBIOS службы SMB" - -msgid "SOA class" -msgstr "Класс SOA" - -msgid "SOA expire" -msgstr "Окончание действия SOA" - -msgid "SOA minimum" -msgstr "Минимальный срок жизни SOA" - -msgid "SOA mname (authoritative server) override" -msgstr "Переопределение mname SOA (полномочный сервер)" - -msgid "SOA mname override" -msgstr "Переопределение mname SOA" - -msgid "SOA record class" -msgstr "Класс записи SOA" - -msgid "SOA record expire time" -msgstr "Срок окончания действия записи SOA" - -msgid "SOA record refresh time" -msgstr "Время обновления записи SOA" - -msgid "SOA record retry time" -msgstr "Интервал между повторными запросами записи SOA" - -msgid "SOA record serial number" -msgstr "Серийный номер записи SOA" - -msgid "SOA record time to live" -msgstr "Срок жизни записи SOA" - -msgid "SOA refresh" -msgstr "Обновление SOA" - -msgid "SOA retry" -msgstr "Повторный запрос SOA" - -msgid "SOA serial" -msgstr "Номер SOA" - -msgid "SOA time to live" -msgstr "Срок жизни SOA" - -msgid "SPF record" -msgstr "Запись SPF" - -msgid "SRV Port" -msgstr "Порт SRV" - -msgid "SRV Priority" -msgstr "Приоритет SRV" - -msgid "SRV Target" -msgstr "Цель SRV" - -msgid "SRV Weight" -msgstr "Вес SRV" - -msgid "SRV record" -msgstr "Запись SRV" - -msgid "SSH public key" -msgstr "Открытый ключ SSH" - -msgid "SSH public key fingerprint" -msgstr "Отпечаток открытого ключа SSH" - -msgid "SSH public key:" -msgstr "Открытый ключ SSH:" - -msgid "SSH public keys" -msgstr "Открытые ключи SSH" - -msgid "SSHFP Algorithm" -msgstr "Алгоритм SSHFP" - -msgid "SSHFP Fingerprint" -msgstr "Отпечаток SSHFP" - -msgid "SSHFP Fingerprint Type" -msgstr "Тип отпечатка SSHFP" - -msgid "SSHFP record" -msgstr "Запись SSHFP" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "SSSD не удалось определить для объекта корректный SID" - -msgid "Salt" -msgstr "Соль" - -#, python-format -msgid "Same as --%s" -msgstr "То же, что и --%s" - -msgid "Save" -msgstr "Сохранить" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" -"Схема не нуждается в обновлении (отпечаток \"%(fingerprint)s\", TTL %(ttl)s " -"с)" - -msgid "Search" -msgstr "Поиск" - -msgid "Search Options" -msgstr "Параметры поиска" - -msgid "Search command parameters." -msgstr "Поиск параметров команды." - -msgid "Search domains of the trust" -msgstr "Поиск доменов отношения доверия." - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "Поиск %(searched_object)s с этими %(relationship)s %(ldap_object)s." - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "Поиск %(searched_object)s без этих %(relationship)s %(ldap_object)s." - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "Не удалось выполнить поиск %1$s на rootdse. Ошибка: %2$d\n" - -msgid "Search for CA ACLs." -msgstr "Поиск CA ACL." - -msgid "Search for CAs." -msgstr "Поиск CA." - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Поиск правил сопоставления сертификатов с записями пользователей." - -msgid "Search for Certificate Profiles." -msgstr "Поиск профилей сертификатов." - -msgid "Search for Class of Service entry" -msgstr "Поиск записи класса обслуживания" - -msgid "Search for DNS forward zones." -msgstr "Поиск зон перенаправления DNS." - -msgid "Search for DNS resources." -msgstr "Поиск ресурсов DNS." - -msgid "Search for DNS servers." -msgstr "Поиск DNS-серверов." - -msgid "Search for DNS zones (SOA records)." -msgstr "Поиск зон DNS (записей SOA)." - -msgid "Search for HBAC rules." -msgstr "Поиск правил HBAC." - -msgid "Search for HBAC services." -msgstr "Поиск служб HBAC." - -msgid "Search for IPA locations." -msgstr "Поиск расположений IPA." - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "Не удалось выполнить поиск namingContext IPA. Ошибка: %d\n" - -msgid "Search for IPA servers." -msgstr "Поиск IPA-серверов." - -msgid "Search for IPA services." -msgstr "Поиск служб IPA." - -msgid "Search for OTP token." -msgstr "Поиск токена OTP." - -msgid "Search for RADIUS proxy servers." -msgstr "Поиск прокси-серверов RADIUS." - -msgid "Search for SELinux User Maps." -msgstr "Поиск списков пользователей SELinux." - -msgid "Search for Sudo Command Groups." -msgstr "Поиск групп команд Sudo." - -msgid "Search for Sudo Commands." -msgstr "Поиск команд Sudo." - -msgid "Search for Sudo Rule." -msgstr "Поиск правила Sudo." - -msgid "Search for a netgroup." -msgstr "Поиск сетевой группы." - -msgid "Search for a self-service permission." -msgstr "Поиск разрешения самообслуживания." - -msgid "Search for an Group ID override." -msgstr "Поиск переопределения ID группы." - -msgid "Search for an HBAC service group." -msgstr "Поиск группы служб HBAC." - -msgid "Search for an ID View." -msgstr "Поиск представления ID." - -msgid "Search for an ID override." -msgstr "Поиск переопределения ID." - -msgid "Search for an User ID override." -msgstr "Поиск переопределения ID пользователя." - -msgid "Search for an automount key." -msgstr "Поиск ключа автомонтирования." - -msgid "Search for an automount location." -msgstr "Поиск расположения автомонтирования." - -msgid "Search for an automount map." -msgstr "Поиск списка соответствия автомонтирования." - -msgid "Search for automember rules." -msgstr "Поиск правил автоучастия." - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "Поиск сертификатов, включая те, владельцами которых являются %s" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "Поиск сертификатов, не включая те, владельцами которых являются %s" - -msgid "Search for classes." -msgstr "Поиск классов." - -msgid "Search for command outputs." -msgstr "Поиск выводов команд." - -msgid "Search for commands." -msgstr "Поиск команд." - -msgid "Search for delegations." -msgstr "Поиск делегирований." - -msgid "Search for entitlement accounts." -msgstr "Поиск учётных записей прав." - -msgid "Search for existing certificates." -msgstr "Поиск существующих сертификатов." - -msgid "Search for forward zones only" -msgstr "Поиск только зон перенаправления" - -msgid "Search for group password policies." -msgstr "Поиск групповых политик паролей." - -msgid "Search for groups with these member groups." -msgstr "Поиск групп с этими группами-участниками." - -msgid "Search for groups with these member of HBAC rules." -msgstr "Поиск групп, которые являются участниками этого правила HBAC." - -msgid "Search for groups with these member of groups." -msgstr "Поиск групп, участником которых является эта группа." - -msgid "Search for groups with these member of netgroups." -msgstr "Поиск групп, которые являются участниками этой сетевой группы." - -msgid "Search for groups with these member of roles." -msgstr "Поиск групп, которые являются участниками этой роли." - -msgid "Search for groups with these member of sudo rules." -msgstr "Поиск групп, которые являются участниками этого правила Sudo." - -msgid "Search for groups with these member users." -msgstr "Поиск групп с этими пользователями-участниками." - -msgid "Search for groups without these member groups." -msgstr "Поиск групп без этих групп-участников." - -msgid "Search for groups without these member of HBAC rules." -msgstr "Поиск групп, которые не являются участниками этого правила HBAC." - -msgid "Search for groups without these member of groups." -msgstr "Поиск групп, участником которых не является эта группа." - -msgid "Search for groups without these member of netgroups." -msgstr "Поиск групп, которые не являются участниками этой сетевой группы." - -msgid "Search for groups without these member of roles." -msgstr "Поиск групп, которые не являются участниками этой роли." - -msgid "Search for groups without these member of sudo rules." -msgstr "Поиск групп, которые не являются участниками этого правила Sudo." - -msgid "Search for groups without these member users." -msgstr "Поиск групп без этих пользователей-участников." - -msgid "Search for groups." -msgstr "Поиск групп." - -msgid "Search for help topics." -msgstr "Поиск разделов справки." - -msgid "Search for host groups with these member host groups." -msgstr "Поиск групп узлов с этими группами узлов — участниками." - -msgid "Search for host groups with these member hosts." -msgstr "Поиск групп узлов с этими узлами-участниками." - -msgid "Search for host groups with these member of HBAC rules." -msgstr "Поиск групп узлов, которые являются участниками этого правила HBAC." - -msgid "Search for host groups with these member of host groups." -msgstr "Поиск групп узлов, которые являются участниками этой группы узлов." - -msgid "Search for host groups with these member of netgroups." -msgstr "Поиск групп узлов, которые являются участниками этой сетевой группы." - -msgid "Search for host groups with these member of sudo rules." -msgstr "Поиск групп узлов, которые являются участниками этого правила Sudo." - -msgid "Search for host groups without these member host groups." -msgstr "Поиск групп узлов без этих групп узлов — участников." - -msgid "Search for host groups without these member hosts." -msgstr "Поиск групп узлов без этих узлов-участников." - -msgid "Search for host groups without these member of HBAC rules." -msgstr "Поиск групп узлов, которые не являются участниками этого правила HBAC." - -msgid "Search for host groups without these member of host groups." -msgstr "Поиск групп узлов, которые не являются участниками этой группы узлов." - -msgid "Search for host groups without these member of netgroups." -msgstr "" -"Поиск групп узлов, которые не являются участниками этой сетевой группы." - -msgid "Search for host groups without these member of sudo rules." -msgstr "Поиск групп узлов, которые не являются участниками этого правила Sudo." - -msgid "Search for hostgroups." -msgstr "Поиск групп узлов." - -msgid "Search for hosts with these enrolled by users." -msgstr "Поиск узлов, которые зарегистрированы пользователями." - -msgid "Search for hosts with these managed by hosts." -msgstr "Поиск узлов, которые управляются узлами." - -msgid "Search for hosts with these managing hosts." -msgstr "Поиск узлов, включая узлы, управляющие узлами." - -msgid "Search for hosts with these member of HBAC rules." -msgstr "Поиск узлов, которые являются участниками этого правила HBAC." - -msgid "Search for hosts with these member of host groups." -msgstr "Поиск узлов, которые являются участниками этой группы узлов." - -msgid "Search for hosts with these member of netgroups." -msgstr "Поиск узлов, которые являются участниками этой сетевой группы." - -msgid "Search for hosts with these member of roles." -msgstr "Поиск узлов, которые являются участниками этой роли." - -msgid "Search for hosts with these member of sudo rules." -msgstr "Поиск узлов, которые являются участниками этого правила Sudo." - -msgid "Search for hosts without these enrolled by users." -msgstr "Поиск узлов, которые не зарегистрированы пользователями." - -msgid "Search for hosts without these managed by hosts." -msgstr "Поиск узлов, которые не управляются узлами." - -msgid "Search for hosts without these managing hosts." -msgstr "Поиск узлов, не включая узлы, управляющие узлами." - -msgid "Search for hosts without these member of HBAC rules." -msgstr "Поиск узлов, которые не являются участниками этого правила HBAC." - -msgid "Search for hosts without these member of host groups." -msgstr "Поиск узлов, которые не являются участниками этой группы узлов." - -msgid "Search for hosts without these member of netgroups." -msgstr "Поиск узлов, которые не являются участниками этой сетевой группы." - -msgid "Search for hosts without these member of roles." -msgstr "Поиск узлов, которые не являются участниками этой роли." - -msgid "Search for hosts without these member of sudo rules." -msgstr "Поиск узлов, которые не являются участниками этого правила Sudo." - -msgid "Search for hosts." -msgstr "Поиск узлов." - -msgid "Search for netgroups with these member groups." -msgstr "Поиск сетевых групп с этими группами-участниками." - -msgid "Search for netgroups with these member host groups." -msgstr "Поиск сетевых групп с этими группами узлов — участниками." - -msgid "Search for netgroups with these member hosts." -msgstr "Поиск сетевых групп с этими узлами-участниками." - -msgid "Search for netgroups with these member netgroups." -msgstr "Поиск сетевых групп с этими сетевыми группами — участниками." - -msgid "Search for netgroups with these member of netgroups." -msgstr "Поиск сетевых групп, которые являются участниками этой сетевой группы." - -msgid "Search for netgroups with these member users." -msgstr "Поиск сетевых групп с этими пользователями-участниками." - -msgid "Search for netgroups without these member groups." -msgstr "Поиск сетевых групп без этих групп-участников." - -msgid "Search for netgroups without these member host groups." -msgstr "Поиск сетевых групп без этих групп узлов — участников." - -msgid "Search for netgroups without these member hosts." -msgstr "Поиск сетевых групп без этих узлов-участников." - -msgid "Search for netgroups without these member netgroups." -msgstr "Поиск сетевых групп без этих сетевых групп — участников." - -msgid "Search for netgroups without these member of netgroups." -msgstr "" -"Поиск сетевых групп, которые не являются участниками этой сетевой группы." - -msgid "Search for netgroups without these member users." -msgstr "Поиск сетевых групп без этих пользователей-участников." - -msgid "Search for permissions." -msgstr "Поиск разрешений." - -msgid "Search for privileges." -msgstr "Поиск привилегий." - -msgid "Search for ranges." -msgstr "Поиск диапазонов." - -msgid "Search for roles." -msgstr "Поиск ролей." - -msgid "Search for servers with these managed suffixes." -msgstr "Поиск серверов, включая серверы с этими управляемыми суффиксами." - -msgid "Search for servers without these managed suffixes." -msgstr "Поиск серверов, не включая серверы с этими управляемыми суффиксами. " - -msgid "Search for service delegation target." -msgstr "Поиск цели делегирования служб." - -msgid "Search for service delegations rule." -msgstr "Поиск правила делегирования служб." - -msgid "Search for services with these managed by hosts." -msgstr "Поиск служб, включая службы, управляемые узлами." - -msgid "Search for services without these managed by hosts." -msgstr "Поиск служб, не включая службы, управляемые узлами." - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этого " -"правила HBAC." - -msgid "Search for stage users with these member of groups." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этой " -"группы." - -msgid "Search for stage users with these member of netgroups." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этой " -"сетевой группы." - -msgid "Search for stage users with these member of roles." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этой роли." - -msgid "Search for stage users with these member of sudo rules." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этого " -"правила Sudo." - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этого " -"правила HBAC." - -msgid "Search for stage users without these member of groups." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этой " -"группы." - -msgid "Search for stage users without these member of netgroups." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этой " -"сетевой группы." - -msgid "Search for stage users without these member of roles." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этой " -"роли." - -msgid "Search for stage users without these member of sudo rules." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этого " -"правила Sudo." - -msgid "Search for stage users." -msgstr "Поиск неподтверждённых пользователей." - -msgid "Search for topology segments." -msgstr "Поиск сегментов топологии." - -msgid "Search for topology suffices." -msgstr "Поиск суффиксов топологии." - -msgid "Search for topology suffixes." -msgstr "Поиск суффиксов топологии." - -msgid "Search for trusts." -msgstr "Поиск отношений доверия." - -msgid "Search for users with these member of HBAC rules." -msgstr "Поиск пользователей, которые являются участниками этого правила HBAC." - -msgid "Search for users with these member of groups." -msgstr "Поиск пользователей, которые являются участниками этой группы." - -msgid "Search for users with these member of netgroups." -msgstr "Поиск пользователей, которые являются участниками этой сетевой группы." - -msgid "Search for users with these member of roles." -msgstr "Поиск пользователей, которые являются участниками этой роли." - -msgid "Search for users with these member of sudo rules." -msgstr "Поиск пользователей, которые являются участниками этого правила Sudo." - -msgid "Search for users without these member of HBAC rules." -msgstr "" -"Поиск пользователей, которые не являются участниками этого правила HBAC." - -msgid "Search for users without these member of groups." -msgstr "Поиск пользователей, которые не являются участниками этой группы." - -msgid "Search for users without these member of netgroups." -msgstr "" -"Поиск пользователей, которые не являются участниками этой сетевой группы." - -msgid "Search for users without these member of roles." -msgstr "Поиск пользователей, которые не являются участниками этой роли." - -msgid "Search for users without these member of sudo rules." -msgstr "" -" Поиск пользователей, которые не являются участниками этого правила Sudo." - -msgid "Search for users." -msgstr "Поиск пользователей." - -msgid "Search for vaults." -msgstr "Поиск хранилищ." - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Результат поиска усечён: %(reason)s" - -msgid "Search scope" -msgstr "Область поиска" - -msgid "Search size limit" -msgstr "Ограничение размера поиска" - -msgid "Search time limit" -msgstr "Ограничение времени поиска" - -msgid "Second Code" -msgstr "Другой код" - -msgid "Second OTP" -msgstr "Второй OTP" - -msgid "Secondary RID base" -msgstr "Основа вторичного RID" - -msgid "Seconds Latitude" -msgstr "Секунды широты" - -msgid "Seconds Longitude" -msgstr "Секунды долготы" - -msgid "Secret" -msgstr "Секрет" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" -"Секреты можно добавлять или извлекать из хранилища только с помощью " -"инструментов командной строки vault-archive и vault-retrieve." - -msgid "Security Identifier" -msgstr "Идентификатор безопасности" - -msgid "Security Identifiers (SIDs)" -msgstr "Идентификаторы безопасности (SID)" - -msgid "Segment details" -msgstr "Свойства сегмента" - -msgid "Segment name" -msgstr "Имя сегмента" - -msgid "Select All" -msgstr "Выбрать все" - -msgid "Select entries to be removed." -msgstr "Выбранные записи, которые следует удалить." - -msgid "Selector" -msgstr "Селектор" - -msgid "Self" -msgstr "Моя учётная запись" - -msgid "Self Service Permission" -msgstr "Разрешение самообслуживания" - -msgid "Self Service Permissions" -msgstr "Разрешения самообслуживания" - -msgid "Self-service name" -msgstr "Имя самообслуживания" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Семантика %(label)s изменена. %(current_behavior)s\n" -"%(hint)s" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" -"Разделённый точками с запятой список IP-адресов или сетей, которым разрешено " -"выдавать запросы" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" -"Разделённый точками с запятой список IP-адресов или сетей, которым разрешено " -"переносить зону" - -msgid "Sensitive" -msgstr "Учитывать" - -msgid "Serial" -msgstr "Серийный номер" - -msgid "Serial Number" -msgstr "Серийный номер" - -msgid "Serial Number (hex)" -msgstr "Серийный номер (шестнадцатеричный)" - -msgid "Serial number" -msgstr "Серийный номер" - -msgid "Serial number (hex)" -msgstr "Серийный номер (hex)" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" -"Серийный номер в десятичной или, если есть префикс 0x, в шестнадцатеричной " -"системе" - -msgid "Server" -msgstr "Сервер" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "У сервера \"%(srv)s\" имеется %(n)d соглашений с серверами:" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "Сервер %(srv)s не может связаться с серверами: %(replicas)s" - -msgid "Server Name" -msgstr "Имя сервера" - -msgid "Server Options" -msgstr "Параметры сервера" - -msgid "Server Role" -msgstr "Роль сервера" - -msgid "Server Roles" -msgstr "Роли сервера" - -msgid "Server does not support domain level functionality" -msgstr "Сервер не поддерживает функционал уровня домена" - -msgid "Server has already been deleted" -msgstr "Сервер уже удалён" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "На сервере нет сведений о домене \"%(domain)s\"" - -msgid "Server location" -msgstr "Расположение сервера" - -msgid "Server name" -msgstr "Имя сервера" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "Не указано имя сервера, сервер недоступен\n" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Удаление сервера прервано: %(reason)s." - -msgid "Server state" -msgstr "Состояние сервера" - -msgid "Server will check DNS forwarder(s)." -msgstr "Сервер проверит DNS-перенаправитель (перенаправители)." - -msgid "Servers" -msgstr "Серверы" - -msgid "Servers details:" -msgstr "Сведения о серверах:" - -msgid "Servers in location" -msgstr "Серверы в расположении" - -msgid "Servers that belongs to the IPA location" -msgstr "Серверы, которые принадлежат к записи расположения IPA" - -msgid "Service" -msgstr "Служба" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"Для применения изменений конфигурации необходимо перезапустить службу " -"%(service)s на IPA-сервере %(server)s." - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "В базе данных Kerberos не найдена служба \"%(service)s\" " - -msgid "Service Certificate" -msgstr "Сертификат службы" - -msgid "Service Groups" -msgstr "Группы служб" - -msgid "Service Options" -msgstr "Параметры службы" - -msgid "Service Settings" -msgstr "Параметры службы" - -msgid "Service Vaults" -msgstr "Хранилища служб" - -msgid "Service category" -msgstr "Категория служб" - -msgid "Service category the ACL applies to" -msgstr "Категория служб, к которой применяется ACL" - -msgid "Service category the rule applies to" -msgstr "Категория служб, к которой применяется правило" - -msgid "Service delegation rule" -msgstr "Правило делегирования служб" - -msgid "Service delegation rules" -msgstr "Правила делегирования служб" - -msgid "Service delegation target" -msgstr "Цель делегирования служб" - -msgid "Service delegation targets" -msgstr "Цели делегирования служб" - -msgid "Service group name" -msgstr "Имя группы служб" - -msgid "Service name" -msgstr "Имя службы" - -msgid "Service name of the service vault" -msgstr "Имя службы хранилища служб" - -msgid "Service principal" -msgstr "Учётная запись службы" - -msgid "Service principal alias" -msgstr "Псевдоним учётной записи службы" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Учётная запись службы для этого сертификата (например, HTTP/test.example.com)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Учётная запись службы указана в виде, отличном от: служба/полностью-" -"определённое-имя узла: %(reason)s" - -msgid "Service principal is required" -msgstr "Следует указать учётную запись службы" - -msgid "Service relative weight" -msgstr "Относительный вес служб" - -msgid "Service unprovisioned" -msgstr "Служба, подготовка которой к работе отменена" - -msgid "Service weight" -msgstr "Вес служб" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" -"Невозможно одновременно указать параметры службы (служб), общего доступа и " -"пользователя (пользователей)" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" -"Невозможно одновременно указать параметры службы, совместного использования " -"и пользователя" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" -"Невозможно одновременно указать параметры службы, общего доступа и " -"пользователя" - -msgid "Services" -msgstr "Службы" - -msgid "Session error" -msgstr "Сеансовая ошибка" - -msgid "Session key wrapped with transport certificate" -msgstr "Ключ сеанса, упакованный с сертификатом транспорта" - -msgid "Session timeout" -msgstr "Время ожидания сеанса" - -msgid "Set" -msgstr "Установить" - -msgid "Set Domain Level" -msgstr "Указать уровень домена" - -msgid "Set OTP" -msgstr "Установить OTP" - -msgid "Set SSH key" -msgstr "Указать ключ SSH" - -msgid "Set a user's password." -msgstr "Установить пароль пользователя." - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" -"Установить атрибут для пары имя/значение. Формат: атрибут=значение.\n" -"Если атрибут многозначный, команда заменяет уже присутствующие значения." - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" -"Установить группу по умолчанию (резервную) для всех несоответствующих " -"записей." - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" -"Установить группу по умолчанию (резервную) для автоучастия \"%(value)s\"" - -msgid "Set enabled/hidden state of a server." -msgstr "Установить включённое/скрытое состояние сервера." - -msgid "Set public key" -msgstr "Установить открытый ключ" - -msgid "Settings" -msgstr "Параметры" - -msgid "Shared" -msgstr "Общее" - -msgid "Shared Vaults" -msgstr "Хранилища совместного использования" - -msgid "Shared secret for the trust" -msgstr "Общий секрет для отношения доверия" - -msgid "Shared vault" -msgstr "Хранилище совместного использования" - -msgid "Show" -msgstr "Показать" - -msgid "Show IPA server." -msgstr "Показать IPA-сервер." - -msgid "Show QR code" -msgstr "Показать QR-код" - -msgid "Show Results" -msgstr "Показать результаты" - -msgid "Show all loaded plugins." -msgstr "Показать все загруженные подключаемые модули." - -msgid "Show configuration uri" -msgstr "Показать адрес конфигурации" - -msgid "Show details" -msgstr "Показать подробные сведения" - -msgid "Show environment variables." -msgstr "Показать переменные окружения." - -msgid "Show global trust configuration." -msgstr "Показать глобальную конфигурацию отношений доверия." - -msgid "Show managed suffix." -msgstr "Показать управляемый суффикс." - -msgid "Show role status on a server" -msgstr "Показать состояние роли на сервере." - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" -"Показать текущую конфигурацию сопоставления сертификатов с записями " -"пользователей." - -msgid "Show the current OTP configuration." -msgstr "Показать текущую конфигурацию OTP." - -msgid "Show the current configuration." -msgstr "Показать текущую конфигурацию." - -msgid "Show the current global DNS configuration." -msgstr "Показать текущую глобальную конфигурацию DNS." - -msgid "Show the list of permitted encryption types and exit" -msgstr "Показать список разрешённых типов шифрования и завершить работу" - -msgid "Show vault configuration." -msgstr "Показать конфигурацию хранилища." - -msgid "Show/Set key" -msgstr "Показать или установить ключ" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Показано записей: с ${start} по ${end} из ${total}." - -msgid "Signature" -msgstr "Подпись" - -msgid "Signature Expiration" -msgstr "Окончание действия подписи" - -msgid "Signature Inception" -msgstr "Начало действия подписи" - -msgid "Signer's Name" -msgstr "Имя подписавшего" - -msgid "Simple bind failed\n" -msgstr "Не удалось выполнить простую привязку\n" - -msgid "Simulate use of Host-based access controls" -msgstr "Имитировать использование управления доступом на основе узла" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" -"Поскольку IPA не управляет записями DNS, следует настроить DNS так, чтобы " -"система определяла адрес домена \"{domain}\" по данным узлов IPA и наоборот." - -msgid "Size" -msgstr "Размер" - -msgid "Size Limit" -msgstr "Ограничение по размеру" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" -"Размер данных превышает ограничение. Текущее ограничение размера хранилища: " -"%(limit)d Б" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" -"Размер диапазона идентификаторов, зарезервированного для доверенного домена" - -msgid "Skip DNS check" -msgstr "Пропустить проверку DNS" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Пропустить проверку того, удаляется ли последний главный сервер CA или DNS-" -"сервер" - -msgid "Skip host check" -msgstr "Пропустить проверку узла" - -msgid "Skip overlap check" -msgstr "Пропустить проверку пересечения" - -#, python-format -msgid "Skipped %(key)s" -msgstr "Пропущено %(key)s" - -#, python-format -msgid "Skipped %(map)s" -msgstr "Пропущено %(map)s" - -msgid "Some entries were not deleted" -msgstr "Не удалось удалить некоторые записи" - -msgid "Some operations failed." -msgstr "Не удалось выполнить некоторые операции." - -msgid "Source Host Groups" -msgstr "Группы узлов-источников" - -msgid "Source Hosts" -msgstr "Узлы-источники" - -msgid "Source host" -msgstr "Узел-источник" - -msgid "Source host category" -msgstr "Категория узлов-источников" - -msgid "Source host category the rule applies to" -msgstr "Категория узлов-источников, к которой применяется правило" - -msgid "Specified CAs" -msgstr "Указанные CA" - -msgid "Specified Commands and Groups" -msgstr "Указанные команды и группы" - -msgid "Specified Groups" -msgstr "Указанные группы" - -msgid "Specified Hosts and Groups" -msgstr "Указанные узлы и группы" - -msgid "Specified Profiles" -msgstr "Указанные профили" - -msgid "Specified Services and Groups" -msgstr "Указанные службы и группы" - -msgid "Specified Users and Groups" -msgstr "Указанные пользователи и группы" - -msgid "Specified trusted domain name could not be found." -msgstr "Указанное имя доверенного домена не найдено." - -msgid "Specifies where to store keytab information." -msgstr "Указывает место сохранения данных таблицы ключей." - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "Указать внешний адрес: ${entity}" - -msgid "Split DNS record to parts" -msgstr "Разделить запись DNS на части" - -msgid "Stage" -msgstr "Сделать неподтверждённым" - -msgid "Stage User" -msgstr "Неподтверждённый пользователь" - -msgid "Stage Users" -msgstr "Неподтверждённые пользователи" - -#, python-format -msgid "Stage user %s activated" -msgstr "Неподтверждённый пользователь %s активирован" - -msgid "Stage users" -msgstr "Неподтверждённые пользователи" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Учётная запись неподтверждённого пользователя \"%(value)s\"" - -msgid "Standard" -msgstr "Стандартное" - -msgid "Standard Record Types" -msgstr "Стандартные типы записей" - -msgid "State" -msgstr "Состояние" - -msgid "State/Province" -msgstr "Область/республика" - -msgid "Status" -msgstr "Состояние" - -msgid "Status of the role" -msgstr "Состояние роли" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "Остановить уже начатое обновление выбранного узла (узлов)" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Остановка репликации для сегмента: направлен запрос \"%(pkey)s\"." - -msgid "Store and provide schema for commands and topics" -msgstr "Хранить и предоставлять схему для команд и тем" - -msgid "Store issued certificates" -msgstr "Сохранять выданные сертификаты" - -msgid "Street address" -msgstr "Адрес" - -msgid "Structured" -msgstr "Структурировано" - -msgid "Subject" -msgstr "Субъект" - -msgid "Subject DN" -msgstr "DN субъекта" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "DN субъекта уже используется CA \"%s\"" - -msgid "Subject DNS name" -msgstr "DNS-имя субъекта" - -msgid "Subject Distinguished Name" -msgstr "Различающееся имя субъекта" - -msgid "Subject EDI Party name" -msgstr "Имя стороны EDI субъекта" - -msgid "Subject IP Address" -msgstr "IP-адрес субъекта" - -msgid "Subject Kerberos principal name" -msgstr "Имя учётной записи Kerberos субъекта" - -msgid "Subject OID" -msgstr "Идентификатор объекта (OID) субъекта" - -msgid "Subject Other Name" -msgstr "Другое имя субъекта" - -msgid "Subject UPN" -msgstr "Имя участника-пользователя (UPN) субъекта" - -msgid "Subject URI" -msgstr "Универсальный код ресурса (URI) субъекта" - -msgid "Subject X.400 address" -msgstr "Адрес X.400 субъекта" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "Использование типа альтернативного имени субъекта %s запрещено" - -msgid "Subject directory name" -msgstr "Имя каталога субъекта" - -msgid "Subject email address" -msgstr "Адрес электронной почты субъекта" - -msgid "Subject of the certificate" -msgstr "Субъект сертификата" - -msgid "Submit a certificate signing request." -msgstr "Отправить запрос подписи сертификата." - -msgid "Subtree" -msgstr "Поддерево" - -msgid "Subtree to apply ACI to" -msgstr "Поддерево, к которому следует применить ACI" - -msgid "Subtree to apply permissions to" -msgstr "Поддерево, к которому следует применить разрешения" - -msgid "Subtype" -msgstr "Подтип" - -msgid "Success" -msgstr "Успех" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Sudo Allow Command Groups" -msgstr "Группы разрешённых команд Sudo" - -msgid "Sudo Allow Commands" -msgstr "Разрешённые команды Sudo" - -msgid "Sudo Command" -msgstr "Команда Sudo" - -msgid "Sudo Command Group" -msgstr "Группа команд Sudo" - -msgid "Sudo Command Groups" -msgstr "Группы команд Sudo" - -msgid "Sudo Commands" -msgstr "Команды Sudo" - -msgid "Sudo Deny Command Groups" -msgstr "Группы запрещённых команд Sudo" - -msgid "Sudo Deny Commands" -msgstr "Запрещённые команды Sudo" - -msgid "Sudo Option" -msgstr "Параметр Sudo" - -msgid "Sudo Rule" -msgstr "Правило Sudo" - -msgid "Sudo Rules" -msgstr "Правила Sudo" - -msgid "Sudo order" -msgstr "Порядок Sudo" - -msgid "Suffix name" -msgstr "Имя суффикса" - -msgid "Superseded" -msgstr "Замена" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Поддерживаемые типы шифрования:\n" - -msgid "Suppress processing of membership attributes." -msgstr "Подавить обработку атрибутов участия." - -msgid "Symmetric" -msgstr "Симметричное" - -msgid "Sync OTP Token" -msgstr "Синхронизировать токен OTP" - -msgid "Synchronize an OTP token." -msgstr "Синхронизировать токен OTP." - -msgid "Synchronizing" -msgstr "Выполняется синхронизация" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Ошибка синтаксиса: %(error)s" - -msgid "System DNS records updated" -msgstr "Записи DNS системы обновлены" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"Системной кодировкой должна быть UTF-8, поддержка \"%(encoding)s\" не " -"предусмотрена. Установите либо LC_ALL=\"C.UTF-8\", либо LC_ALL=\"\" и " -"LC_CTYPE=\"C.UTF-8\"." - -msgid "TA record" -msgstr "Запись TA" - -msgid "TKEY record" -msgstr "Запись TKEY" - -msgid "TLSA Certificate Association Data" -msgstr "Данные сопоставления сертификата TLSA" - -msgid "TLSA Certificate Usage" -msgstr "Использование сертификата TLSA" - -msgid "TLSA Matching Type" -msgstr "Тип соответствия TLSA" - -msgid "TLSA Selector" -msgstr "Селектор TLSA" - -msgid "TLSA record" -msgstr "Запись TLSA" - -msgid "TOTP Synchronization Window" -msgstr "Окно TOTP-синхронизации" - -msgid "TOTP authentication Window" -msgstr "Окно TOTP-аутентификации" - -msgid "TOTP authentication time variance (seconds)" -msgstr "Отклонение по времени TOTP-аутентификации (в секундах)" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "Отклонение по времени TOTP-синхронизации (в секундах)" - -msgid "TOTP token / IPA server time difference" -msgstr "Разница времени между токеном TOTP и сервером IPA" - -msgid "TSIG record" -msgstr "Запись TSIG" - -msgid "TXT Text Data" -msgstr "Текстовые данные TXT" - -msgid "TXT record" -msgstr "Запись TXT" - -msgid "Take a revoked certificate off hold." -msgstr "Возобновить действие отозванного сертификата." - -msgid "Target" -msgstr "Цель" - -msgid "Target DN" -msgstr "DN цели" - -msgid "Target DN subtree" -msgstr "Поддерево DN цели" - -msgid "Target Uniform Resource Identifier" -msgstr "Универсальный код ресурса (URI) запрошенного конечного объекта " - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" -"Универсальный код ресурса (URI) запрошенного конечного объекта в " -"соответствии с RFC 3986" - -msgid "Target group" -msgstr "Целевая группа" - -msgid "Target host" -msgstr "Целевой узел" - -msgid "Target members of a group" -msgstr "Целевые участники группы" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "Целевые участники группы (устанавливает фильтр целей memberOf)" - -msgid "Target reverse zone not found." -msgstr "Целевая обратная зона не найдена." - -msgid "Target your own entry (self)" -msgstr "Выполнить над своей собственной записью (self)" - -msgid "Task DN" -msgstr "DN задачи" - -#, python-format -msgid "Task DN = '%s'" -msgstr "DN задачи = \"%s\"" - -msgid "Telephone Number" -msgstr "Номер телефона" - -msgid "Test the ACI syntax but don't write anything" -msgstr "Проверить синтаксис ACI, но никуда не записывать" - -msgid "Text Data" -msgstr "Текстовые данные" - -msgid "Text does not match field pattern" -msgstr "Текст не соответствует шаблону поля" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"Параметр --domain невозможно использовать одновременно с параметром --add-" -"domain или --del-domain. Используйте параметр --domain, чтобы явно указать " -"весь список доменов области (realm). Используйте параметр --add-domain/del-" -"domain, чтобы добавить или удалить отдельные домены." - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "ACI для разрешения %(name)s не найдена в %(dn)s " - -msgid "The IPA realm" -msgstr "Область (realm) IPA" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"Не удалось создать запись TXT _kerberos из домена %(domain)s (%(error)s).\n" -"Возможная причина: зона не находится под управлением IPA. Создайте запись " -"вручную, включив в неё следующее значение: \"%(realm)s\"" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"Не удалось удалить запись TXT _kerberos из домена %(domain)s (%(error)s).\n" -"Возможная причина: зона не находится под управлением IPA. Удалите запись " -"вручную." - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "Ключ автомонтирования %(key)s с информацией %(info)s не существует" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "Сертификат для %(ca)s недоступен на этом сервере." - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "Использовать символ %(char)r запрещено." - -msgid "The default users group cannot be removed" -msgstr "Невозможно удалить группу пользователей по умолчанию" - -msgid "The deny type has been deprecated." -msgstr "Тип \"deny\" больше не поддерживается." - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "Домен %s не является ни доменом IPA, ни доверенным доменом." - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" -"Имя домена целевого узла или \".\", если служба явно недоступна на этом " -"домене" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" -"Домен(ы) \"%s\" не могут использоваться для применения проверки " -"altSecurityIdentities." - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "Следующие домены не принадлежат к этой области (realm): %(domains)s" - -msgid "The group doesn't exist" -msgstr "Группа не существует" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "Узел \"%s\", в который следовало добавить службу, не существует." - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "Узел добавлен, но при обновлении DNS произошла ошибка: %(reason)s" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Имя узла должно быть полным: %s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Имя узла не должно быть следующим: %s\n" - -msgid "The hostname or IP (with or without port)" -msgstr "Имя узла или IP-адрес (с портом или без порта)" - -msgid "The hostname this reverse record points to" -msgstr "Имя узла, на которое указывает эта обратная запись" - -msgid "The hostname to register as" -msgstr "Имя узла для регистрации" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" -"Пара ключ,информация должна быть уникальной. Ключ с именем %(key)s и " -"информацией %(info)s уже существует" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" -"Файл таблицы ключей, в который следует добавить новый ключ (файл будет " -"создан, если не существует)." - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" -"Файл таблицы ключей, из которого следует удалить учётную запись (записи)" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" -"Правило сопоставления с altSecurityIdentities должно применяться к " -"доверенному домену Active Directory, но с правилом не был связан ни один " -"домен." - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Наиболее распространённые типы для этого типа зон: %s\n" - -msgid "The number of times to retry authentication" -msgstr "Количество повторных попыток аутентификации" - -msgid "The password or username you entered is incorrect" -msgstr "Введён неверный пароль или имя пользователя" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"Значение primary_key (основного ключа) записи, например \"ииванов\" для " -"пользователя" - -msgid "The principal for this request doesn't exist." -msgstr "Учётная запись для этого запроса не существует." - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Учётная запись, для которой следует получить файл таблицы ключей (пример: " -"ftp/ftp.example.com@EXAMPLE.COM)" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Учётная запись, которую следует удалить из файла таблицы ключей (пример: ftp/" -"ftp.example.com@EXAMPLE.COM)" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" -"Область (realm) для учётной записи не совпадает с областью этого IPA-сервера" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"Не удалось определить область (realm) следующих доменов: %(domains)s. Если " -"эти домены принадлежат к этой области, создайте на каждом из них запись TXT " -"_kerberos, которая содержит \"%(realm)s\"." - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"Схема, используемая на LDAP-сервере. Поддерживаются значения RFC2307 и " -"RFC2307bis. Значение по умолчанию: RFC2307bis." - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "Недостаточно строгие условия поиска. Ожидалось: 1. Найдено: %(found)d." - -msgid "The secret used to encrypt data" -msgstr "Секрет, который используется для шифрования данных" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "Службе разрешена аутентификация от имени клиента" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" -"Учётная запись службы для альтернативного имени субъекта %s в запросе " -"сертификата не существует" - -msgid "The topic or command name." -msgstr "Имя темы или команды." - -msgid "The total timeout across all retries (in seconds)" -msgstr "Общее время ожидания для всех повторных попыток (в секундах)" - -msgid "The user account you entered is locked" -msgstr "Введённая учётная запись пользователя заблокирована" - -msgid "The username attribute on the user object" -msgstr "Атрибут имени пользователя объекта пользователя" - -msgid "The username, password or token codes are not correct" -msgstr "Неправильное имя пользователя, пароль или коды токена." - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" -"Отношение доверия с {ipa_domain} с неподдерживаемым типом {trust_type} уже " -"существует. Пожалуйста, удалите его вручную на стороне DC AD." - -msgid "There was a problem with your request. Please, try again later." -msgstr "Ошибка при обработке запроса. Пожалуйста, повторите попытку позже." - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Эту команду нельзя использовать для изменения выделения идентификаторов для " -"локального домена IPA. Чтобы получить дополнительные сведения, выполните " -"команду `ipa help idrange`" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Для выполнения этой команды должна существовать группа \"editors\", но такая " -"группа не найдена." - -msgid "This command requires root access" -msgstr "Для выполнения этой команды требуются права администратора (root)" - -msgid "This entry already exists" -msgstr "Такая запись уже существует" - -msgid "This entry cannot be enabled or disabled" -msgstr "Эту запись нельзя включать или отключать" - -msgid "This entry is already a member" -msgstr "Эта запись уже есть среди участников" - -msgid "This entry is already disabled" -msgstr "Эта запись уже отключена" - -msgid "This entry is already enabled" -msgstr "Эта запись уже включена" - -msgid "This entry is not a member" -msgstr "Этой записи нет среди участников" - -msgid "This group already allows external members" -msgstr "В этой группе уже разрешены внешние участники" - -msgid "This group cannot be posix because it is external" -msgstr "Эта группа не может быть POSIX-группой, так как является внешней" - -msgid "This is already a posix group" -msgstr "Уже является POSIX-группой" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" -"Эта группа уже является POSIX-группой и не может быть преобразована во " -"внешнюю группу" - -msgid "This may take some time, please wait ..." -msgstr "Это может занять некоторое время; пожалуйста, подождите..." - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" -"На этой странице имеются несохранённые изменения. Пожалуйста, сохраните или " -"отмените их. " - -msgid "Ticket expired" -msgstr "Срок действия билета истек" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "Не удалось прочитать политику билетов для %s" - -msgid "Time Limit" -msgstr "Ограничение по времени" - -msgid "Time limit of search in seconds" -msgstr "Ограничение времени поиска в секундах" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" -"Ограничение времени поиска в секундах (\"0\" означает отсутствие ограничения)" - -msgid "Time now" -msgstr "Время сейчас" - -msgid "Time to live" -msgstr "Срок жизни" - -msgid "Time to live for records at zone apex" -msgstr "Срок жизни записей в начале зоны" - -msgid "Time to live for records without explicit TTL definition" -msgstr "Срок жизни записей без явного определения срока жизни" - -msgid "Time-based (TOTP)" -msgstr "На основе времени (TOTP)" - -msgid "Timeout" -msgstr "Время ожидания" - -#, c-format -msgid "Timeout exceeded." -msgstr "Превышено время ожидания." - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Для установления отношения доверия с Active Directory имя домена и имя " -"области (realm) IPA-сервера должны совпадать" - -msgid "To get command help, use:" -msgstr "Чтобы получить справку по команде, используйте команду:" - -msgid "Token ID" -msgstr "ID токена" - -msgid "Token description (informational only)" -msgstr "Описание токена (только для сведения)" - -msgid "Token hash algorithm" -msgstr "Алгоритм хеширования токена" - -msgid "Token model (informational only)" -msgstr "Модель токена (только для сведения)" - -msgid "Token secret (Base32; default: random)" -msgstr "Секрет токена (Base32; значение по умолчанию: случайный)" - -msgid "Token serial (informational only)" -msgstr "Серийный номер токена (только для сведения)" - -msgid "Token synchronization failed" -msgstr "Не удалось синхронизировать токен" - -msgid "Token vendor name (informational only)" -msgstr "Имя поставщика токена (только для сведения)" - -msgid "Token was synchronized" -msgstr "Токен синхронизирован" - -msgid "Topic commands:" -msgstr "Команды темы:" - -msgid "Topic or Command" -msgstr "Тема или команда" - -msgid "Topology" -msgstr "Топология" - -msgid "Topology Segment" -msgstr "Сегмент топологии" - -msgid "Topology Segments" -msgstr "Сегменты топологии" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" +"\n" +"Удаление \"%(hostname)s\" приводит к отключению топологии в суффиксе " +"\"%(suffix)s\":\n" +"%(errors)s" #, python-format msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" "Топология не позволяет серверу %(server)s выполнять репликацию с серверами:" -msgid "Topology is disconnected" -msgstr "Топология отключена" +msgid "Request must be a dict" +msgstr "Запрос должен принадлежать к типу словаря (dict)" -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "Управление топологией требует уровня домена не ниже {0}" +msgid "Request is missing \"method\"" +msgstr "В запросе не указан метод (\"method\")" -msgid "Topology suffix" -msgstr "Суффикс топологии" - -msgid "Topology suffixes" -msgstr "Суффиксы топологии" - -msgid "Total number of variables env (>= count)" -msgstr "Количество переменных env (>= count)" - -msgid "Transport Certificate" -msgstr "Сертификат транспорта" - -msgid "True" -msgstr "Да" - -msgid "True if not all results were returned" -msgstr "Значение True, если были возвращены не все результаты" - -msgid "True means the operation was successful" -msgstr "Значение True означает, что операция выполнена успешно" - -msgid "Trust" -msgstr "Отношение доверия" - -msgid "Trust Settings" -msgstr "Параметры отношения доверия" - -msgid "Trust direction" -msgstr "Направление отношения доверия" - -msgid "Trust setup" -msgstr "Настройка отношения доверия" - -msgid "Trust status" -msgstr "Состояние отношения доверия" - -msgid "Trust type" -msgstr "Тип отношения доверия" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "Тип отношения доверия (ad для Active Directory, значение по умолчанию)" - -msgid "Trusted domain" -msgstr "Доверенный домен" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"Доверенный домен %(domain)s находится среди доменов области (realm) IPA. Его " -"необходимо удалить до установления отношения доверия. Смотрите команду \"ipa " -"realmdomains-mod --del-domain\"." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"Доверенным доменом и учётной записью администратора используются разные " -"области (realms)" - -msgid "Trusted domain did not return a unique object" -msgstr "Доверенным доменом не возвращён уникальный объект" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "Доверенным доменом не возвращён корректный SID объекта" - -msgid "Trusted domain partner" -msgstr "Партнёр доверенного домена" - -msgid "Trusted domains" -msgstr "Доверенные домены" - -msgid "Trusted for delegation" -msgstr "Доверено для делегирования" - -msgid "Trusted forest" -msgstr "Доверенный лес" - -msgid "Trusted to authenticate as user" -msgstr "Доверие для аутентификации в качестве пользователя" - -msgid "Trusting forest" -msgstr "Доверяющий лес" - -msgid "Trusts" -msgstr "Отношения доверия" - -msgid "Two factor authentication (password + OTP)" -msgstr "Двухфакторная аутентификация (пароль + OTP)" - -msgid "Two-way trust" -msgstr "Двустороннее отношение доверия" - -msgid "Type" -msgstr "Тип" - -msgid "Type Covered" -msgstr "Охваченные типы" - -msgid "Type Map" -msgstr "Список сопоставления типов" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "Тип объекта IPA (устанавливает фильтр целей subtree и objectClass)" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" -"Тип объекта IPA (user (пользователь), group (группа), host (узел), hostgroup " -"(группа узлов), service (служба), netgroup (сетевая группа), dns)" - -msgid "Type of the token" -msgstr "Тип токена" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" -"Тип диапазона идентификаторов доверенного домена, одно из разрешённых " -"значений" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" -"Тип диапазона идентификаторов доверенного домена, один из следующих: ipa-ad-" -"trust-posix, ipa-ad-trust" - -msgid "Types of supported user authentication" -msgstr "Поддерживаемые типы аутентификации пользователей" - -msgid "UID" -msgstr "UID" - -msgid "UPN suffixes" -msgstr "Суффиксы UPN" - -msgid "URI" -msgstr "Универсальный код ресурса (URI)" - -msgid "URL" -msgstr "URL-адрес" - -msgid "UUID" -msgstr "UUID" - -msgid "Un-apply" -msgstr "Отменить применение" - -msgid "Un-apply ID Views from hosts" -msgstr "Отменить применение представлений ID к узлам" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "Отменить применение представлений ID к узлам групп узлов" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "Отменить применение представления ID '${primary_key}' к узлам" - -msgid "Un-apply from host groups" -msgstr "Отменить применение к группам узлов" - -msgid "Un-apply from hosts" -msgstr "Отменить применение к узлам" - -msgid "Unable to communicate with CMS" -msgstr "Не удалось обменяться данными с CMS" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Не удалось обменяться данными с CMS (состояние %d)" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "Не удалось создать личную группу. Группа \"%(group)s\" уже существует." - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "Не удалось найти IPA-сервер, используя %s\n" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Не удалось определить, существует ли уже учётная запись Kerberos %s. " -"Используйте команду \"ipa user-mod\", чтобы установить её параметры вручную." - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Не удалось определить корневое DN %s\n" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" -"Не удалось показать QR-код с помощью настроенного шифрования вывода. " -"Используйте URI токена для настройки вашего устройства OTP" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Не удалось включить SSL в LDAP\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Не удалось создать кэш учётных данных Kerberos\n" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "Не удалось инициализировать сеанс STARTTLS\n" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "Не удалось инициализировать подключение к LDAP-серверу %1$s: %2$s\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Не удалось инициализировать библиотеку ldap!\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "Не удалось присоединить узел: кэш учётных данных Kerberos не найден\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"Не удалось присоединить узел: учётная запись пользователя Kerberos не " -"найдена, пароль узла не указан.\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"Не удалось присоединить узел: ошибка инициализации Kerberos-контекста\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Не удалось обработать учётную запись\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Не удалось обработать имя учётной записи\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Не удалось обработать учётную запись: %1$s (%2$d)\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Не удалось удалить запись\n" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "Не удалось определить контроллер домена для домена {domain}. " - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "Не удалось задать LDAP_OPT_PROTOCOL_VERSION\n" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "Не удалось задать LDAP_OPT_X_SASL_NOCANON\n" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "Не удалось задать LDAP_OPT_X_TLS_CACERTFILE\n" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "Не удалось задать LDAP_OPT_X_TLS_PROTOCOL_MIN\n" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "Не удалось задать LDAP_OPT_X_TLS_REQUIRE_CERT\n" - -msgid "Unable to verify write permissions to the AD" -msgstr "Не удалось проверить разрешения на запись в AD" - -msgid "Undelete a delete user account." -msgstr "Восстановить удалённую учётную запись пользователя." - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Учётная запись пользователя \"%(value)s\" возвращена после удаления" - -msgid "Undo" -msgstr "Отменить" - -msgid "Undo All" -msgstr "Отменить все" - -msgid "Undo all changes in this field." -msgstr "Отменить все изменения в этом поле." - -msgid "Undo this change." -msgstr "Отменить это изменение." - -msgid "Unenroll this host from IPA server" -msgstr "Отменить регистрацию этого узла на IPA-сервере" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Не удалось отменить регистрацию.\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Отмена регистрации выполнена успешно.\n" - -msgid "Unique ID" -msgstr "Уникальный идентификатор" - -msgid "Unknown" -msgstr "Неизвестно" - -msgid "Unknown Error" -msgstr "Неизвестная ошибка" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Неизвестный параметр: %(option)s" - -msgid "Unlock" -msgstr "Разблокировать" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Учётная запись \"%(value)s\" разблокирована" - -msgid "Unmatched" -msgstr "Соответствие не установлено" - -msgid "Unprovision" -msgstr "Отменить подготовку" - -msgid "Unprovisioning host" -msgstr "Отмена подготовки узла" - -msgid "Unprovisioning service" -msgstr "Отмена подготовки службы" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "Нераспознанные атрибуты: %(attrs)s" - -msgid "Unresolved rules in --rules" -msgstr "Непригодные к обработке правила в --rules" - -msgid "Unrevoked" -msgstr "Отзыв отменён" - -msgid "Unsaved Changes" -msgstr "Несохранённые изменения" - -msgid "Unselect All" -msgstr "Отменить выбор" - -msgid "Unspecified" -msgstr "Не указана" - -msgid "Unsupported value" -msgstr "Неподдерживаемое значение" - -msgid "Update" -msgstr "Обновить" - -msgid "Update DNS entries" -msgstr "Обновить записи DNS" - -msgid "Update System DNS Records" -msgstr "Обновить записи DNS системы" - -msgid "Update location and IPA server DNS records" -msgstr "Обновить записи расположений и DNS-серверов IPA. " - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "Не удалось обновить системную запись \"%(record)s\". Ошибка: %(error)s" - -msgid "User" -msgstr "Пользователь" - -msgid "User Group" -msgstr "Группа пользователей" - -msgid "User Groups" -msgstr "Группы пользователей" - -msgid "User ID" -msgstr "ID пользователя" - -msgid "User ID Number" -msgstr "Номер ID пользователя" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "ID пользователя (если не указан, система назначит его самостоятельно)" - -msgid "User ID override" -msgstr "Переопределение ID пользователя" - -msgid "User ID overrides" -msgstr "Переопределения ID пользователя" - -msgid "User Login" -msgstr "Имя учётной записи пользователя" - -msgid "User Options" -msgstr "Параметры пользователя" - -msgid "User Vaults" -msgstr "Хранилища пользователей" - -msgid "User attribute" -msgstr "Атрибут пользователя" - -msgid "User attributes for SMB services" -msgstr "Пользовательские атрибуты для служб SMB" - -msgid "User authentication types" -msgstr "Типы аутентификации пользователей" - -msgid "User categories" -msgstr "Категории пользователей" - -msgid "User category" -msgstr "Категория пользователей" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Категория пользователей (семантика этого атрибута предназначена для " -"локального разбора)" - -msgid "User category the ACL applies to" -msgstr "Категория пользователей, к которой применяется ACL" - -msgid "User category the rule applies to" -msgstr "Категория пользователей, к которой применяется правило" - -msgid "User container" -msgstr "Контейнер пользователей" - -msgid "User group" -msgstr "Группа пользователей" - -msgid "User group ACI grants access to" -msgstr "Группа пользователей, доступ к которой предоставляет ACI" - -msgid "User group rule" -msgstr "Правило группы пользователей" - -msgid "User group rules" -msgstr "Правила группы пользователей" - -msgid "User group to apply delegation to" -msgstr "Группа пользователей, к которой следует применить делегирование" - -msgid "User group to apply permissions to" -msgstr "Группа пользователей, к которой следует применить разрешения" - -msgid "User group to apply permissions to (sets target)" -msgstr "" -"Группа пользователей, к которой следует применить разрешения (устанавливает " -"target)" - -msgid "User login" -msgstr "Имя учётной записи пользователя" - -msgid "User logins" -msgstr "Имена входа пользователя" - -msgid "User name" -msgstr "Имя пользователя" - -msgid "User object class" -msgstr "Класс объекта пользователя" - -msgid "User object overrides" -msgstr "Приоритет объекта пользователя" - -msgid "User password" -msgstr "Пароль пользователя" - -msgid "User password expiration" -msgstr "Окончание действия пароля пользователя" - -msgid "User search fields" -msgstr "Поля поиска пользователей" - -msgid "User to override" -msgstr "Пользователь, которого следует переопределить" - -msgid "User-friendly description of action performed" -msgstr "Понятное пользователю описание выполненного действия" - -msgid "User-specified attributes to which the permission applies" -msgstr "Определённые пользователем атрибуты, к которым применяется разрешение" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" -"Определённые пользователем атрибуты, к которым явно не применяется разрешение" - -msgid "Username" -msgstr "Имя пользователя" - -msgid "Username of the user vault" -msgstr "Имя пользователя хранилища пользователей" - -msgid "Users" -msgstr "Пользователи" - -msgid "Users allowed to create keytab" -msgstr "Пользователи, которым разрешено создавать таблицу ключей" - -msgid "Users allowed to retrieve keytab" -msgstr "Пользователи, которым разрешено получать таблицу ключей" - -msgid "Valid Certificate Present" -msgstr "Имеется действительный сертификат" - -msgid "Valid from" -msgstr "Действителен с" - -msgid "Valid not after from" -msgstr "Действующий не позднее, чем с" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "Действующий не позднее, чем с этой даты (ГГГГ-мм-дд)" - -msgid "Valid not after to" -msgstr "Действующий не позднее, чем до" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "Действующий не позднее, чем до этой даты (ГГГГ-мм-дд)" - -msgid "Valid not before from" -msgstr "Действующий не ранее, чем с" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "Действующий не ранее, чем с этой даты (ГГГГ-мм-дд)" - -msgid "Valid not before to" -msgstr "Действующий не ранее, чем до" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "Действующий не ранее, чем до этой даты (ГГГГ-мм-дд)" - -msgid "Valid to" -msgstr "Действителен до" - -msgid "Validation error" -msgstr "Ошибка подтверждения" - -msgid "Validity" -msgstr "Действительность" - -msgid "Validity end" -msgstr "Окончание срока действия" - -msgid "Validity start" -msgstr "Начало срока действия" - -msgid "Vault" -msgstr "Хранилище" - -msgid "Vault Container" -msgstr "Контейнер хранилищ" - -msgid "Vault Containers" -msgstr "Контейнеры хранилищ" - -msgid "Vault Type" -msgstr "Тип хранилища" - -msgid "Vault configuration" -msgstr "Конфигурация хранилища" - -msgid "Vault data encrypted with session key" -msgstr "Данные хранилища, зашифрованные ключом сеанса" - -msgid "Vault description" -msgstr "Описание хранилища" - -msgid "Vault name" -msgstr "Имя хранилища" - -msgid "Vault password" -msgstr "Пароль хранилища" - -msgid "Vault private key" -msgstr "Закрытый ключ хранилища" - -msgid "Vault public key" -msgstr "Открытый ключ хранилища" - -msgid "Vault salt" -msgstr "Соль хранилища" - -msgid "Vault service" -msgstr "Служба хранилища" - -msgid "Vault type" -msgstr "Тип хранилища" - -msgid "Vault user" -msgstr "Пользователь хранилища" - -msgid "Vaults" -msgstr "Хранилища" - -msgid "Vaults Config" -msgstr "Конфигурация хранилищ" - -msgid "Vendor" -msgstr "Поставщик" - -msgid "Verify Password" -msgstr "Проверить пароль" - -msgid "Verify Principal Password" -msgstr "Проверка пароля учётной записи" - -msgid "Version" -msgstr "Версия" - -msgid "Vertical Precision" -msgstr "Вертикальная точность" - -msgid "Via Service" -msgstr "Служба для использования" - -msgid "View" -msgstr "Показать" - -msgid "View Certificate" -msgstr "Просмотреть сертификат" - -msgid "Waiting for confirmation by remote side" -msgstr "Ожидание подтверждения удалённой стороной" - -msgid "Warning" -msgstr "Предупреждение" - -msgid "Warning unrecognized encryption type.\n" -msgstr "Предупреждение: неопознанный тип шифрования.\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "Предупреждение: неопознанный тип соли.\n" - -msgid "Warning: Consider service replication" -msgstr "Предупреждение: рекомендуется использовать репликацию служб" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Предупреждение: не удалось преобразовать тип (№%d)\n" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Предупреждение: случайные пароли не поддерживают типы соли (см. параметр -" -"P)\n" - -msgid "Weight" -msgstr "Вес" - -msgid "Weight for server services" -msgstr "Вес служб сервера" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" -"При переносе группы, которая уже существует в домене IPA, перезаписать GID " -"группы и сообщить об успешном выполнении" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "Включена или отключена пре-аутентификация (PKINIT)" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" -"Активно ли соглашение о репликации, то есть выполняется ли репликация по " -"этому соглашению" - -msgid "Whether to store certs issued using this profile" -msgstr "" -"Определяет, следует ли сохранять сертификаты, выданные с помощью этого " -"профиля" - -msgid "Who" -msgstr "Кто" - -msgid "Working" -msgstr "В процессе" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" -"Записать сертификат (цепочку сертификатов, если использовано --chain) в файл" - -msgid "Write profile configuration to file" -msgstr "Записать конфигурацию профиля в файл" - -msgid "X.509 certificate chain" -msgstr "Цепочка сертификатов X.509" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"Вы пытаетесь сослаться на личную группу, которую запрещено переопределять. " -"Попробуйте переопределить атрибут GID соответствующего пользователя." - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" -"В качестве приложения для работы с токенами OTP можно использовать FreeOTP." - -msgid "You may need to manually remove them from the tree" -msgstr "Возможно, потребуется вручную удалить их из дерева" - -msgid "You must enroll a host in order to create a host service" -msgstr "Чтобы создать службу узла, необходимо сначала зарегистрировать узел" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Необходимо указать оба параметра, rid-base и secondary-rid-base, так как " -"команда ipa-adtrust-install уже запущена." - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "Вы будете перенаправлены через ${count}s" - -msgid "You will be redirected to DNS Zone." -msgstr "Вы будете перенаправлены в зону DNS." - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Количество дней до окончания действия вашего пароля: ${days}." - -msgid "Your password has expired. Please enter a new password." -msgstr "Срок действия вашего пароля истёк. Пожалуйста, введите новый пароль." - -msgid "Your session has expired. Please log in again." -msgstr "Время вашего сеанса истекло. Пожалуйста, войдите в систему ещё раз." - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Доверительные отношения с %(domain)s разорваны. Восстановите их, выполнив " -"команду \"ipa trust-add\"." - -msgid "YubiKey slot" -msgstr "Слот YubiKey" - -msgid "ZIP" -msgstr "Индекс" - -msgid "Zone forwarders" -msgstr "Перенаправители зон" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "Найдена зона: ${zone}" - -msgid "Zone name" -msgstr "Имя зоны" - -msgid "Zone name (FQDN)" -msgstr "Имя зоны (FQDN)" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "Невозможно удалить запись зоны \"%s\"" - -msgid "Zone refresh interval" -msgstr "Интервал между обновлениями данных зоны" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "не удалось выполнить access() для %1$s: номер ошибки = %2$d\n" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "активный пользователь с именем \"%(user)s\" уже существует" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "добавлено значение атрибута в запись %(value)s" - -msgid "algorithm value: allowed interval 0-255" -msgstr "значение алгоритма: допустимый интервал 0-255" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "на всех главных серверах должна быть включена роль %(role)s" - -msgid "an internal error has occurred" -msgstr "произошла внутренняя ошибка" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "на сервере \"%(server)s\" произошла внутренняя ошибка " - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" -"ответ на запрос \"%(owner)s %(rtype)s\" не содержит подписи DNSSEC (нет " -"данных RRSIG)" - -msgid "any of the configured servers" -msgstr "любой из настроенных серверов" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api не предоставляет такого пространства имён: \"%(name)s\"" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "следует указать хотя бы один из параметров: тип, пользователи, узлы" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"следует указать хотя бы одно из: type, filter, subtree, targetgroup, attrs " -"или memberof" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" -"должно присутствовать хотя бы одно значение, равное каноническому имени " -"учётной записи" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "атрибут \"%(attribute)s\" запрещён" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "атрибут \"%s\" нельзя использовать" - -msgid "attribute is not configurable" -msgstr "настройка атрибута невозможна" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "attrs и включённые атрибуты нельзя использовать вместе" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "attrs и включённые или исключённые атрибуты нельзя использовать вместе" - -msgid "automatically add the principal if it doesn't exist" -msgstr "автоматически добавить учётную запись, если она не существует" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" -"Автоматически добавить учётную запись, если она не существует (только для " -"учётных записей служб)" - -msgid "automount key" -msgstr "ключ автомонтирования" - -msgid "automount keys" -msgstr "ключи автомонтирования" - -msgid "automount location" -msgstr "расположение автомонтирования" - -msgid "automount locations" -msgstr "расположения автомонтирования" - -msgid "automount map" -msgstr "список соответствия автомонтирования" - -msgid "automount maps" -msgstr "списки соответствия автомонтирования" - -msgid "basedn" -msgstr "базовое расширяемое имя (DN)" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "Не удалось выполнить ber_init(), недопустимый элемент управления?!\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "Ошибка ber_scanf(), не удалось найти kvno?!\n" - -msgid "bind password" -msgstr "Привязка пароля " - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "может быть не длиннее %(len)d символов" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "размер должен быть не больше %(maxlength)d байт" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "может быть не длиннее %(maxlength)d символов" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "может быть не больше %(maxvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "не может быть больше %(maxvalue)s" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" -"невозможно добавить разрешение \"%(perm)s\" с типом привязки \"%(bindtype)s" -"\" в привилегию" - -msgid "cannot be empty" -msgstr "не может быть пустым" - -msgid "cannot be longer that {} characters" -msgstr "не может превышать {} символов" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "не удалось установить соединение с \"%(uri)s\": %(error)s " - -msgid "cannot delete global password policy" -msgstr "невозможно удалить глобальную политику паролей" - -msgid "cannot delete managed permissions" -msgstr "невозможно удалить управляемые разрешения" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"невозможно удалить корневой домен отношения доверия, используйте trust-del " -"для удаления самого отношения доверия" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"невозможно отключить корневой домен отношения доверия, используйте trust-del " -"для удаления самого отношения доверия" - -msgid "cannot have an empty subject" -msgstr "поле субъекта не может быть пустым" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "не удалось открыть файл конфигурации %s\n" - -msgid "cannot rename managed permissions" -msgstr "невозможно переименовать управляемые разрешения" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" -"невозможно установить тип привязки для разрешения, которое связано с " -"привилегией" - -msgid "cannot specify both raw certificate and file" -msgstr "невозможно одновременно указать код сертификата и файл с сертификатом" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "невозможно одновременно указать subject/issuer и certificate" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "невозможно одновременно указать subject/issuer и ipacertmapdata" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" -"невозможно одновременно указать полный фильтр целей и дополнительный фильтр " -"целей" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "не удалось обработать файл конфигурации %s функцией stat()\n" - -msgid "change collided with another change" -msgstr "изменение конфликтует с другим выполненным изменением" - -msgid "change to a POSIX group" -msgstr "Изменить на POSIX-группу" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" -"Изменить для добавления поддержки внешних не IPA-участников из доверенных " -"доменов" - -#, c-format -msgid "child exited with %d\n" -msgstr "дочерний процесс завершился с сообщением %d\n" - -msgid "cn is immutable" -msgstr "cn нельзя изменять" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" -"Разделённый двоеточиями список доменов, которые используются для обработки " -"кратких имён" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "Разделённый запятыми список групп служб HBAC, которые следует добавить" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "Разделённый запятыми список групп служб HBAC, которые следует удалить" - -msgid "comma-separated list of HBAC services to add" -msgstr "Разделённый запятыми список служб HBAC, которые следует добавить" - -msgid "comma-separated list of HBAC services to remove" -msgstr "Разделённый запятыми список служб HBAC, которые следует удалить" - -msgid "comma-separated list of groups to add" -msgstr "Разделённый запятыми список групп, которые следует добавить" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" -"Разделённый запятыми список групп, которые следует исключить из миграции" - -msgid "comma-separated list of groups to remove" -msgstr "Разделённый запятыми список групп, которые следует удалить" - -msgid "comma-separated list of host groups to add" -msgstr "Разделённый запятыми список групп узлов, которые следует добавить" - -msgid "comma-separated list of host groups to remove" -msgstr "Разделённый запятыми список групп узлов, которые следует удалить" - -msgid "comma-separated list of hosts to add" -msgstr "Разделённый запятыми список узлов, которые следует добавить" - -msgid "comma-separated list of hosts to remove" -msgstr "Разделённый запятыми список узлов, которые следует удалить" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" -"Разделённый запятыми список участников доверенного домена в формате DOM\\имя " -"или имя@домен" - -msgid "comma-separated list of netgroups to add" -msgstr "Разделённый запятыми список сетевых групп, которые следует добавить" - -msgid "comma-separated list of netgroups to remove" -msgstr "Разделённый запятыми список сетевых групп, которые следует удалить" - -msgid "comma-separated list of permissions" -msgstr "Разделённый запятыми список разрешений" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" -"Разделённый запятыми список разрешений, которые следует предоставить (read, " -"write, add, delete, all)" - -msgid "comma-separated list of privileges" -msgstr "Разделённый запятыми список привилегий" - -msgid "comma-separated list of privileges to add" -msgstr "Разделённый запятыми список привилегий, которые следует добавить" - -msgid "comma-separated list of privileges to remove" -msgstr "Разделённый запятыми список привилегий, которые следует удалить" - -msgid "comma-separated list of roles to add" -msgstr "Разделённый запятыми список ролей, которые следует добавить" - -msgid "comma-separated list of roles to remove" -msgstr "Разделённый запятыми список ролей, которые следует удалить" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" -"Разделённый запятыми список групп команд Sudo, которые следует добавить" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "Разделённый запятыми список групп команд Sudo, которые следует удалить" - -msgid "comma-separated list of sudo commands to add" -msgstr "Разделённый запятыми список команд Sudo, которые следует добавить" - -msgid "comma-separated list of sudo commands to remove" -msgstr "Разделённый запятыми список команд Sudo, которые следует удалить" - -msgid "comma-separated list of users to add" -msgstr "Разделённый запятыми список пользователей, которых следует добавить" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" -"Разделённый запятыми список пользователей, которых следует исключить из " -"миграции" - -msgid "comma-separated list of users to remove" -msgstr "Разделённый запятыми список пользователей, которых следует удалить" - -msgid "command" -msgstr "команда" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "команда \"%(name)s\" имеет не более %(count)d аргумента" -msgstr[1] "команда \"%(name)s\" имеет не более %(count)d аргументов" -msgstr[2] "команда \"%(name)s\" имеет не более %(count)d аргументов" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "команда \"%(name)s\" не имеет аргументов" - -msgid "commands" -msgstr "команды" - -msgid "commands cannot be added when command category='all'" -msgstr "невозможно добавить команды, когда категория команд=\"all\"" - -msgid "commands for controlling sudo configuration" -msgstr "команды управления конфигурацией Sudo" - -msgid "communication with CIFS server was unsuccessful" -msgstr "не удалось обменяться данными с сервером CIFS" - -msgid "configuration options" -msgstr "параметры конфигурации" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "запись контейнера (%(container)s) не найдена" - -msgid "default CA ACL can be only disabled" -msgstr "CA ACL по умолчанию можно только отключить" - -msgid "delegation" -msgstr "делегирование" - -msgid "delegations" -msgstr "делегирования" - -msgid "delete" -msgstr "удалить" - -msgid "description" -msgstr "описание" - -msgid "did not receive Kerberos credentials" -msgstr "не получены учётные данные Kerberos" - -msgid "does not match any of accepted formats: " -msgstr "не соответствует ни одному допустимому формату:" - -msgid "domain" -msgstr "домен" - -msgid "domain is not configured" -msgstr "домен не настроен" - -msgid "domain is not trusted" -msgstr "домен не является доверенным" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "имя домена \"%(domain)s\" должно быть нормализовано до: %(normalized)s" - -msgid "domain name cannot be longer than 255 characters" -msgstr "имя домена не может быть длиннее 255 символов" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "каждый элемент ACL должен заканчиваться точкой с запятой" - -msgid "empty DNS label" -msgstr "пустая DNS-метка" - -msgid "empty filter" -msgstr "пустой фильтр" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "enabledService/configuredService не в записи kdc ipaConfigString" - -msgid "entries" -msgstr "записи" - -msgid "entry" -msgstr "запись" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" -"ошибка преобразования данных для передачи по протоколу XML-RPC: %(error)s" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "ошибка на сервере \"%(server)s\": %(error)s" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "не удалось выполнить команду ipa-getkeytab, номер ошибки %d\n" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" -"ожидаемый формат: <0-255> <0-255> <0-65535> " -"шестнадцатеричные_цифры_равной_длины_или_дефис" - -msgid "file to store DNS records in nsupdate format" -msgstr "файл для сохранения записей DNS в формате nsupdate" - -msgid "file to store certificate in" -msgstr "Файл для сохранения сертификата" - -msgid "filename" -msgstr "имя файла" - -msgid "filter and memberof are mutually exclusive" -msgstr "filter и memberof нельзя использовать вместе" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" -"значением флагов должна быть одна из следующих букв: \"S\", \"A\", \"U\" или " -"\"P\"" - -msgid "flags value: allowed interval 0-255" -msgstr "значение флагов: допустимый интервал от 0 до 255" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" -"Принудительно создать запись NS, даже если соответствующее имя узла " -"отсутствует в DNS" - -msgid "force delete of SYSTEM permissions" -msgstr "Принудительно удалить разрешения SYSTEM" - -msgid "force host name even if not in DNS" -msgstr "" -"Принудительно установить значение имени узла, даже если имени нет в DNS" - -msgid "force principal name even if host not in DNS" -msgstr "" -"Принудительно установить значение имени учётной записи, даже если узла нет в " -"DNS" - -msgid "force principal name even if not in DNS" -msgstr "" -"принудительно установить значение имени учётной записи, даже если имени нет " -"в DNS" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" -"Принудительно создать службу, даже если объект узла для управления ей не " -"существует" - -#, c-format -msgid "fork() failed\n" -msgstr "не удалось выполнить fork()\n" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" -"формат должен быть указан следующим образом:\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" где:\n" -" d1: [0 .. 90] (градусы широты)\n" -" d2: [0 .. 180] (градусы долготы)\n" -" m1, m2: [0 .. 59] (минуты широты / долготы)\n" -" s1, s2: [0 .. 59.999] (секунды широты / долготы)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (высота в метрах)\n" -" siz, hp, vp: [0 .. 90000000.00] (размер / точность в метрах)\n" -" Подробные сведения доступны в RFC 1876" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "формат должен быть указан следующим образом: \"%(format)s\" %(rfcs)s" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"зона перенаправления \"%(fwzone)s\" не действует из-за отсутствия " -"надлежащего NS-делегирования в основной зоне \"%(authzone)s\". Добавьте NS-" -"запись \"%(ns_rec)s\" в родительскую зону \"%(authzone)s\"." - -msgid "gid cannot be set for external group" -msgstr "невозможно указать gid для внешней группы" - -msgid "givenname is required" -msgstr "следует указать имя" - -msgid "group" -msgstr "группа" - -msgid "group runAs" -msgstr "группа запуска от имени" - -msgid "group, permission and self are mutually exclusive" -msgstr "group, permission и self нельзя использовать вместе" - -msgid "groups" -msgstr "группы" - -msgid "groups to add" -msgstr "группы, которые следует добавить" - -msgid "groups to exclude from migration" -msgstr "группы, которые следует исключить из миграции" - -msgid "groups to remove" -msgstr "группы, которые следует удалить" - -msgid "host" -msgstr "узел" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"для категории узлов нельзя установить значение \"all\", когда имеются " -"разрешённые узлы" - -msgid "host group" -msgstr "группа узлов" - -msgid "host groups" -msgstr "группы узлов" - -msgid "host groups to add" -msgstr "группы узлов, которые следует добавить" - -msgid "host groups to remove" -msgstr "группы узлов, которые следует удалить" - -msgid "host masks of allowed hosts" -msgstr "Маски разрешённых узлов" - -msgid "hostgroup" -msgstr "группа узлов" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"группа узлов с именем \"%s\" уже существует. Группы узлов и сетевые группы " -"имеют общее пространство имён" - -msgid "hostgroups" -msgstr "группы узлов" - -msgid "hostname" -msgstr "имя узла" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "имя узла содержит пустую метку (точки подряд)" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" -"имя узла в субъекте запроса \"%(cn)s\" не соответствует имени или " -"псевдонимам учётной записи \"%(principal)s\"" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" -"имя узла в субъекте запроса \"%(cn)s\" не соответствует имени узла учётной " -"записи \"%(hostname)s\"" - -msgid "hosts" -msgstr "узлы" - -msgid "hosts cannot be added when host category='all'" -msgstr "невозможно добавить узлы, когда категория узлов=\"all\"" - -msgid "hosts cannot be set when type is 'group'" -msgstr "невозможно указать узлы, когда тип \"group\"" - -msgid "hosts to add" -msgstr "узлы, которые следует добавить" - -msgid "hosts to remove" -msgstr "узлы, которые следует удалить" - -msgid "id range" -msgstr "диапазон идентификаторов" - -msgid "id range type" -msgstr "тип диапазона идентификаторов" - -msgid "incomplete time value" -msgstr "неполное значение времени" - -msgid "incorrect type" -msgstr "неверный тип" - -msgid "integer to order the Sudo rules" -msgstr "Целое число для упорядочивания правил Sudo" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "недопустимое \"%(name)s\": %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "Некорректное DN (%s)" - -msgid "invalid IP address format" -msgstr "недопустимый формат IP-адреса" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"недопустимая версия IP-адреса (сейчас %(value)d, должна быть " -"%(required_value)d)!" - -msgid "invalid IP network format" -msgstr "недопустимый формат IP-сети" - -msgid "invalid Profile ID" -msgstr "недопустимый идентификатор профиля" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "недопустимый SID: {SID}" - -msgid "invalid SSH public key" -msgstr "неверный открытый ключ SSH" - -msgid "invalid address format" -msgstr "недопустимый формат адреса" - -msgid "invalid attribute name" -msgstr "недопустимое имя атрибута" - -msgid "invalid domain name" -msgstr "недопустимое имя домена" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "недопустимое имя домена: %s" - -msgid "invalid domain-name: not fully qualified" -msgstr "недействительное имя домена: не является полным" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "неправильный формат почты: %(email)s" - -msgid "invalid escape code in domain name" -msgstr "" -"недопустимая управляющая последовательность (escape code) в имени домена" - -msgid "invalid hostmask" -msgstr "недопустимая маска узла" - -msgid "invalid port number" -msgstr "недопустимый номер порта" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "неправильные разрешения команды ipa-getkeytab?\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "команда ipa-getkeytab не найдена \n" - -msgid "is required" -msgstr "следует указать" - -msgid "iterations value: allowed interval 0-65535" -msgstr "значение количества итераций: допустимый интервал от 0 до 65535" - -msgid "kerberos ticket policy settings" -msgstr "параметры политики билетов Kerberos" - -#, python-format -msgid "key %(key)s already exists" -msgstr "ключ %(key)s уже существует" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "ключ с именем %(key)s уже существует" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" -"таблица ключей является оборванной символической ссылкой и принадлежит " -"другому пользователю.\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "сертификаты krbtgt могут использовать только профиль %s" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "в левом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" - -msgid "left node and right node must not be the same" -msgstr "левый узел и правый узел должны быть разными узлами" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "левый узел не является узлом топологии: %(leftnode)s" - -msgid "left or right node has to be specified" -msgstr "следует указать левый или правый узел" - -msgid "limits exceeded for this query" -msgstr "для этого запроса превышены ограничения" - -msgid "local domain range" -msgstr "диапазон локальных доменов" - -msgid "location" -msgstr "расположение" - -msgid "locations" -msgstr "расположения" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "руководитель %(manager)s не найден" - -#, python-format -msgid "map %(map)s already exists" -msgstr "список соответствия %(map)s уже существует" - -msgid "maps not connected to /etc/auto.master:" -msgstr "списки соответствия, которые не подключены к /etc/auto.master:" - -msgid "match the common name exactly" -msgstr "точное соответствие общему имени" - -msgid "maximum serial number" -msgstr "максимальный серийный номер" - -#, python-format -msgid "member %s" -msgstr "участник %s" - -msgid "member Certificate Profile" -msgstr "Профиль сертификатов — участник" - -msgid "member HBAC service" -msgstr "служба-участник HBAC" - -msgid "member HBAC service group" -msgstr "участник группа служб HBAC" - -msgid "member group" -msgstr "группа-участник" - -msgid "member host" -msgstr "узел-участник" - -msgid "member host group" -msgstr "группа узлов — участник" - -msgid "member netgroup" -msgstr "сетевая группа — участник" - -msgid "member principal" -msgstr "учётная запись — участник" - -msgid "member privilege" -msgstr "привилегия участника" - -msgid "member role" -msgstr "роль участника" - -msgid "member service" -msgstr "служба-участник" - -msgid "member service delegation target" -msgstr "цель делегирования служб — участник" - -msgid "member sudo command" -msgstr "команда Sudo — участник" - -msgid "member sudo command group" -msgstr "группа команд — участник Sudo" - -msgid "member user" -msgstr "пользователь-участник" - -msgid "minimum serial number" -msgstr "минимальный серийный номер" - -msgid "missing base_id" -msgstr "отсутствует base_id" - -msgid "modifying primary key is not allowed" -msgstr "изменение главного ключа запрещено" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" -"точка монтирования указывается относительно родительского списка " -"соответствия, её запись не может начинаться с /" - -#, python-format -msgid "must be \"%s\"" -msgstr "должно быть \"%s\"" - -#, python-format -msgid "must be '%(value)s'" -msgstr "должно быть \"%(value)s\"" - -msgid "must be DNS name" -msgstr "должно быть DNS-именем" - -msgid "must be Kerberos principal" -msgstr "должно быть учётной записью Kerberos" - -msgid "must be TRUE or FALSE" -msgstr "должно быть TRUE или FALSE" - -msgid "must be True or False" -msgstr "должно равняться либо True, либо False" - -msgid "must be Unicode text" -msgstr "должно быть Юникод-текстом" - -msgid "must be a certificate" -msgstr "должно быть сертификатом" - -msgid "must be a certificate signing request" -msgstr "должно быть запросом подписи сертификата" - -msgid "must be a decimal number" -msgstr "должно быть десятичным числом" - -msgid "must be absolute" -msgstr "должно быть абсолютным" - -msgid "must be an integer" -msgstr "должно быть целым числом" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "размер должен быть не меньше %(minlength)d байт" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "должно быть не короче %(minlength)d символов" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "должно быть не меньше %(minvalue)d" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "должно быть не меньше %(minvalue)s" - -msgid "must be at least 1" -msgstr "должно быть не меньше 1" - -msgid "must be at least 10" -msgstr "должно быть не меньше 10" - -msgid "must be binary data" -msgstr "должно быть двоичными данными" - -msgid "must be datetime value" -msgstr "должно быть значением даты и времени (datetime)" - -msgid "must be dictionary" -msgstr "должно быть словарём" - -msgid "must be enabled only on a single master" -msgstr "должно быть включено только на одном главном сервере" - -msgid "must be enclosed in parentheses" -msgstr "должно быть заключено в скобки" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "размер должен быть точно %(length)d байт" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "должно быть точно %(length)d символов длиной" - -#, python-format -msgid "must be one of %(values)s" -msgstr "должно быть одним из следующих значений: %(values)s" - -msgid "must be relative" -msgstr "должно быть относительным" - -msgid "must contain a tuple (list, dict)" -msgstr "должно содержать кортеж (список, словарь)" - -#, python-format -msgid "must equal %r" -msgstr "должно равняться %r" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "должна быть включена роль %(role)s" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "должно соответствовать шаблону \"%(pattern)s\"" - -msgid "netgroup" -msgstr "сетевая группа" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"сетевая группа с именем \"%s\" уже существует. Группы узлов и сетевые группы " -"имеют общее пространство имён" - -msgid "netgroups" -msgstr "сетевые группы" - -msgid "netgroups to add" -msgstr "сетевые группы, которые следует добавить" - -msgid "netgroups to remove" -msgstr "сетевые группы, которые следует удалить" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "команда или раздел справки \"%(topic)s\" не обнаружены" - -msgid "no modifications to be performed" -msgstr "отсутствуют изменения для выполнения" - -msgid "no trusted domain is configured" -msgstr "отсутствуют настроенные доверенные домены" - -msgid "no trusted domain matched the specified flat name" -msgstr "указанному плоскому имени не соответствует ни один доверенный домен" - -msgid "not allowed to modify group entries" -msgstr "запрещено изменять записи групп" - -msgid "not allowed to modify user entries" -msgstr "запрещено изменять записи пользователей" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "не разрешено выполнение операции: %s" - -msgid "not allowed to perform server connection check" -msgstr "не разрешено выполнение проверки связи с сервером" - -msgid "not found" -msgstr "не найдено" - -msgid "not fully qualified" -msgstr "указано не полностью" - -msgid "not modifiable on managed permissions" -msgstr "нельзя изменять в управляемых разрешениях" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" -"класс чисел \"%(cls)s\" не входит в список допустимых классов чисел: " -"%(allowed)s" - -msgid "number of passwords" -msgstr "количество паролей" - -#, python-format -msgid "objectclass %s not found" -msgstr "класс объектов %s не найден" - -msgid "one or more values to remove" -msgstr "одно или несколько значений, которые следует удалить" - -msgid "only \"ad\" is supported" -msgstr "предусмотрена поддержка только \"ad\"" - -msgid "only available on managed permissions" -msgstr "доступно только в управляемых разрешениях" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"можно использовать только буквы, цифры, символы %(chars)s. DNS-метка не " -"может начинаться или заканчиваться символом %(chars2)s" - -msgid "only master zones can contain records" -msgstr "только главные зоны могут содержать записи" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" -"для одного имени можно использовать только одну запись CNAME (RFC 2136, " -"раздел 1.1.5)" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" -"для одного имени можно использовать только одну запись DNAME (RFC 6672, " -"раздел 2.4)" - -msgid "only one node can be specified" -msgstr "можно указать только один узел" - -msgid "operation not defined" -msgstr "операция не определена" - -#, python-format -msgid "option was renamed; use %s" -msgstr "параметр переименован; используйте %s" - -msgid "options are not allowed" -msgstr "использование параметров запрещено" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" -"порядковый номер должен иметь уникальное значение (%(order)d уже " -"использовано для %(rule)s)" - -#, c-format -msgid "out of memory\n" -msgstr "недостаточно памяти\n" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" -"данные вне зоны: имя записи должно быть поддоменом зоны или относительным " -"именем" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "пересекающиеся аргументы и параметры: %(names)s" - -#, python-format -msgid "owner %s" -msgstr "владелец %s" - -msgid "owner group" -msgstr "группа-владелец" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" -"нельзя использовать шаблон имени домена в поле владельца записей %(types)s " -"(RFC 4592, раздел 4)" - -msgid "owner service" -msgstr "служба-владелец" - -msgid "owner user" -msgstr "пользователь-владелец" +msgid "Request is missing \"params\"" +msgstr "В запросе не указаны параметры (\"params\")" msgid "params must be a list" msgstr "params должны быть списком (list)" @@ -29453,516 +31607,79 @@ msgstr "params [0] (или аргументы) должны быть списк msgid "params[1] (aka options) must be a dict" msgstr "params [1] (или параметры) должны принадлежать к типу словаря (dict)" -msgid "password" -msgstr "пароль" +#, python-format +msgid "must equal %r" +msgstr "должно равняться %r" -msgid "password policies" -msgstr "политики паролей" - -msgid "password policy" -msgstr "политика паролей" - -msgid "password to use if not using kerberos" -msgstr "пароль, который следует использовать, если не используется Kerberos" - -msgid "permission" -msgstr "Разрешение" +msgid "Hello world" +msgstr "Привет всем!" #, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "разрешение \"%(value)s\" уже существует" +msgid "%s: RADIUS proxy server not found" +msgstr "%s: прокси-сервер RADIUS не найден" -msgid "permissions" -msgstr "Разрешения" +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "Прокси-сервер RADIUS с именем \"%s\" уже существует" -msgid "pkinit" -msgstr "pkinit" +msgid "must be at least 1" +msgstr "должно быть не меньше 1" -msgid "preserve" -msgstr "сохранить" +msgid "Out of memory\n" +msgstr "Недостаточно памяти\n" -msgid "preserve and no-preserve cannot be both set" -msgstr "невозможно одновременно указать сохранение и отсутствие сохранения" +msgid "Warning unrecognized encryption type.\n" +msgstr "Предупреждение: неопознанный тип шифрования.\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "Предупреждение: неопознанный тип соли.\n" + +msgid "Out of memory!?\n" +msgstr "Недостаточно памяти!?\n" + +msgid "Enctype comparison failed!\n" +msgstr "Ошибка сравнения значений типа шифрования!\n" + +#, fuzzy +#| msgid "Password history size" +msgid "Password is too long!\n" +msgstr "Размер журнала паролей" + +msgid "Failed to create random key!\n" +msgstr "Не удалось создать случайный ключ!\n" + +msgid "Failed to create key!\n" +msgstr "Не удалось создать ключ!\n" + +msgid "Bad or unsupported salt type.\n" +msgstr "Недопустимый или неподдерживаемый тип соли.\n" #, c-format -msgid "principal not found\n" -msgstr "учётная запись не найдена\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "Не удалось инициализировать подключение к LDAP-серверу %1$s: %2$s\n" -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "учётная запись не найдена в ответе XML-RPC\n" +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "Не удалось задать LDAP_OPT_PROTOCOL_VERSION\n" -msgid "principal to add" -msgstr "учётная запись, которую следует добавить" +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "Не удалось задать LDAP_OPT_X_SASL_NOCANON\n" -msgid "principal to remove" -msgstr "учётная запись, которую следует удалить" +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "Не удалось задать LDAP_OPT_X_TLS_CACERTFILE\n" -msgid "priority cannot be set on global policy" -msgstr "невозможно установить приоритет для глобальной политики" +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "Не удалось задать LDAP_OPT_X_TLS_REQUIRE_CERT\n" -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"приоритет должен иметь уникальное значение (%(prio)d уже использовано для " -"%(gname)s)" - -msgid "privilege" -msgstr "Привилегия" - -msgid "privileged group" -msgstr "привилегированная группа" - -msgid "privileged hostgroup" -msgstr "привилегированная группа узлов" - -msgid "privileged service delegation rule" -msgstr "правило делегирования привилегированных служб" - -msgid "privileged service delegation target" -msgstr "цель делегирования привилегированных служб" - -msgid "privileges" -msgstr "Привилегии" - -msgid "privileges to add" -msgstr "привилегии, которые следует добавить" - -msgid "privileges to remove" -msgstr "привилегии, которые следует удалить" +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "Не удалось задать LDAP_OPT_X_TLS_PROTOCOL_MIN\n" msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" msgstr "" -"для категории профилей нельзя установить значение \"all\", когда имеются " -"разрешённые профили" -msgid "profiles cannot be added when profile category='all'" -msgstr "невозможно добавить профили, когда категория профилей=\"all\"" - -msgid "pyhbac is not installed." -msgstr "Пакет pyhbac не установлен." - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "pysss_murmur недоступен на сервере, base-id не предоставлен." - -msgid "python-yubico is not installed." -msgstr "python-yubico не установлен." - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "запрос \"%(owner)s %(rtype)s\" с помощью EDNS0: %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "запрос \"%(owner)s %(rtype)s\": %(error)s" - -msgid "range exists" -msgstr "диапазон существует" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" -"изменение диапазона, при котором появляются объекты с идентификаторами за " -"пределами указанного диапазона, запрещено " - -msgid "range type change" -msgstr "изменение типа диапазона" - -#, c-format -msgid "read error\n" -msgstr "ошибка чтения\n" - -#, c-format -msgid "realm not found\n" -msgstr "область (realm) не найдена\n" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" -"область (realm) или UPN-суффикс пересекается с пространством имён " -"доверенного домена" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"запись \"%(owner)s %(rtype)s\" не прошла проверку DNSSEC на сервере %(ip)s" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "удалены значения атрибута из записи %(value)s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "не удалось выполнить запрос, состояние HTTP %d" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "результат не найден в ответе XML-RPC\n" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Получить и вывести все атрибуты, возвращаемые сервером. Влияет на содержимое " -"результата исполнения команды." - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "в правом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "правый узел не является узлом топологии: %(rightnode)s" - -msgid "role" -msgstr "Роль" - -msgid "roles" -msgstr "роли" - -msgid "roles to add" -msgstr "роли, которые следует добавить" - -msgid "roles to remove" -msgstr "роли, которые следует удалить" - -msgid "runAs groups" -msgstr "группы запуска от имени" - -msgid "runAs user" -msgstr "пользователь запуска от имени" - -msgid "runAs users" -msgstr "пользователи запуска от имени" - -#, python-format -msgid "salt value: %(err)s" -msgstr "значение соли: %(err)s" - -msgid "search for POSIX groups" -msgstr "Поиск POSIX-групп" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" -"Поиск групп с поддержкой внешних не IPA-участников из доверенных доменов" - -msgid "search for managed groups" -msgstr "Поиск управляемых групп" - -msgid "search for non-POSIX groups" -msgstr "Поиск не POSIX-групп" - -msgid "search for private groups" -msgstr "Поиск личных групп" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"список результатов поиска объектов миграции был усечён сервером; возможно, " -"процесс миграции не завершён\n" - -msgid "seconds" -msgstr "в секундах" - -msgid "segment" -msgstr "сегмент" - -msgid "segments" -msgstr "сегменты" - -msgid "self service permission" -msgstr "разрешение самообслуживания" - -msgid "self service permissions" -msgstr "разрешения самообслуживания" - -msgid "server" -msgstr "сервер" - -msgid "server role" -msgstr "роль сервера" - -msgid "server roles" -msgstr "роли сервера" - -msgid "servers" -msgstr "серверы" - -msgid "service" -msgstr "служба" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" -"для категории служб нельзя установить значение \"all\", когда имеются " -"разрешённые службы" - -msgid "service delegation rule" -msgstr "правило делегирования служб" - -msgid "service delegation rules" -msgstr "правила делегирования служб" - -msgid "service delegation target" -msgstr "цель делегирования служб" - -msgid "service delegation targets" -msgstr "цели делегирования служб" - -msgid "service delegation targets to add" -msgstr "цели делегирования служб, которые следует добавить" - -msgid "service delegation targets to remove" -msgstr "цели делегирования служб, которые следует удалить" - -msgid "services" -msgstr "службы" - -msgid "services cannot be added when service category='all'" -msgstr "невозможно добавить службы, когда категория служб=\"all\"" - -msgid "services to add" -msgstr "cлужбы, которые следует добавить" - -msgid "services to remove" -msgstr "службы, которые следует удалить" - -msgid "setting Authoritative nameserver" -msgstr "установка полномочного сервера имён" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" -"не должно быть именем домена с подстановочными знаками (RFC 4592, раздел 4)" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "single label {}s are not supported" -msgstr "поддержка одноуровневых доменов {}s не предусмотрена" - -msgid "skip reverse DNS detection" -msgstr "Игнорировать обратное определение DNS" - -msgid "sn is required" -msgstr "следует указать sn" - -msgid "stage user" -msgstr "неподтверждённый пользователь" - -msgid "stage users" -msgstr "неподтверждённые пользователи" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" -"использование типа альтернативного имени субъекта %s запрещено для учётных " -"записей, которые не относятся к пользователям" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" -"использование типа альтернативного имени субъекта %s запрещено для учётных " -"записей пользователей" - -msgid "subtree and type are mutually exclusive" -msgstr "subtree и type нельзя использовать вместе" - -msgid "sudo command" -msgstr "команда Sudo" - -msgid "sudo command group" -msgstr "группа команд Sudo" - -msgid "sudo command groups" -msgstr "группы команд Sudo" - -msgid "sudo command groups to add" -msgstr "группы команд Sudo, которые следует добавить" - -msgid "sudo command groups to remove" -msgstr "группы команд Sudo, которые следует удалить" - -msgid "sudo commands" -msgstr "команды Sudo" - -msgid "sudo commands to add" -msgstr "команды Sudo, которые следует добавить" - -msgid "sudo commands to remove" -msgstr "команды Sudo, которые следует удалить" - -msgid "sudo rule" -msgstr "правило Sudo" - -msgid "sudo rules" -msgstr "правила Sudo" - -msgid "suffix" -msgstr "суффикс" - -msgid "suffixes" -msgstr "суффиксы" - -msgid "system ID View" -msgstr "системное представление ID" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" -"невозможно переопределить системные объекты IPA (например, системные группы, " -"личные группы пользователей)" - -msgid "target and targetgroup are mutually exclusive" -msgstr "target и targetgroup нельзя использовать вместе" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "IPA-сервер и удалённый домен не могут иметь общее имя NetBIOS: %s" - -msgid "the certificate with serial number " -msgstr "сертификат с серийным номером" - -msgid "the entry was deleted while being modified" -msgstr "запись была удалена во время внесения изменений" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "значение не подходит под формат времени \"ГГГГММДДЧЧММСС\"" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" -"должен быть указан хотя бы один спецификатор записи назначения (например, " -"target, targetfilter, attrs)" - -msgid "this option has been deprecated." -msgstr "этот параметр больше не поддерживается." - -msgid "this option is deprecated" -msgstr "это опция устарела" - -msgid "too many '@' characters" -msgstr "слишком много символов @" - -msgid "trust" -msgstr "отношение доверия" - -msgid "trust configuration" -msgstr "конфигурация отношений доверия" - -msgid "trust domain" -msgstr "надёжный домен" - -msgid "trust domains" -msgstr "надёжные домены" - -msgid "trust type" -msgstr "тип отношения доверия" - -msgid "trusted domain object" -msgstr "объект доверенного домена" - -msgid "trusted domain object not found" -msgstr "объект доверенного домена не найден" - -msgid "trusted domain user not found" -msgstr "пользователь доверенного домена не найден" - -msgid "trusts" -msgstr "отношения доверия" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" -"Тип объекта IPA (user (пользователь), group (группа), host (узел), hostgroup " -"(группа узлов), service (служба), netgroup (сетевая группа))" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "type, filter, subtree и targetgroup нельзя использовать вместе" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "неизвестная команда \"%(name)s\"" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s сообщает о неизвестной ошибке %(code)d: %(error)s" - -msgid "unsupported functional level" -msgstr "неподдерживаемый функциональный уровень" - -msgid "unsupported trust type" -msgstr "неподдерживаемый тип отношения доверия" - -msgid "url" -msgstr "адрес" - -msgid "user" -msgstr "пользователь" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "пользователь \"%s\" уже активен" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"для категории пользователей нельзя установить значение \"all\", когда " -"имеются разрешённые пользователи" - -msgid "users" -msgstr "пользователи" - -msgid "users and hosts cannot both be set" -msgstr "невозможно одновременно указать пользователей и узлы" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" -"невозможно добавить пользователей, когда категория запуска от имени " -"пользователей или запуска от имени групп=\"all\"" - -msgid "users cannot be added when user category='all'" -msgstr "" -"невозможно добавить пользователей, когда категория пользователей=\"all\"" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "невозможно указать пользователей, когда тип \"hostgroup\"" - -msgid "users to add" -msgstr "пользователи, которых следует добавить" - -msgid "users to exclude from migration" -msgstr "пользователи, которых следует исключить из миграции" - -msgid "users to remove" -msgstr "пользователи, которых следует удалить" - -msgid "value" -msgstr "значение" - -msgid "vault" -msgstr "хранилище" - -msgid "vaultcontainer" -msgstr "контейнер хранилищ" - -msgid "vaultcontainers" -msgstr "контейнеры хранилищ" - -msgid "vaults" -msgstr "хранилища" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: атрибут не найден" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: роль не найдена" +msgid "Unable to initialize STARTTLS session\n" +msgstr "Не удалось инициализировать сеанс STARTTLS\n" #~ msgid "" #~ "\n" @@ -30013,18 +31730,15 @@ msgstr "{role}: роль не найдена" #~ msgid "Generated CSR was empty" #~ msgstr "Созданный CSR оказался пустым" -#, python-format #~ msgid "Generation rule \"%(rulename)s\" is missing the \"rule\" key" #~ msgstr "В правиле создания \"%(rulename)s\" отсутствует ключ \"rule\"" #~ msgid "Name of CSR generation profile (if not the same as profile_id)" #~ msgstr "Имя профиля создания CSR (если не совпадает с profile_id)" -#, python-format #~ msgid "No CSR generation rules are defined for profile %(profile_id)s" #~ msgstr "Для профиля %(profile_id)s не определены правила создания CSR" -#, python-format #~ msgid "No generation rule %(rulename)s found." #~ msgstr "Правило создания %(rulename)s не найдено." @@ -30044,7 +31758,6 @@ msgstr "{role}: роль не найдена" #~ msgid "Path to private key file" #~ msgstr "Путь к файлу закрытого ключа" -#, python-format #~ msgid "Required CSR generation rule %(name)s is missing data" #~ msgstr "В обязательном правиле создания CSR %(name)s отсутствуют данные" diff --git a/po/sk.po b/po/sk.po index 92d48668c..77322dac5 100644 --- a/po/sk.po +++ b/po/sk.po @@ -3,7 +3,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:26+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Slovak\n" @@ -14,24 +14,17827 @@ msgstr "" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" + +#, c-format +msgid "Out of memory!" +msgstr "" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "This entry is already disabled" +msgid "Host is already joined.\n" +msgstr "Táto položka bola už deaktivovaná" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" +"JSON-RPC request:\n" +"%s\n" +msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "No response" +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "Bez odpovede" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "hostname" +msgstr "Priezvisko" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Server to use" +msgstr "IPA Server" + +msgid "Specifies where to store keytab information." +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "filename" +msgstr "Premenovať" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "password" +msgstr "Heslo" + +#, fuzzy +#| msgid "LDAP schema" +msgid "LDAP basedn" +msgstr "LDAP schéma" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to add" +msgid "Failed to open keytab\n" +msgstr "Zlyhalo pridanie" + +#, fuzzy, c-format +#| msgid "not found" +msgid "principal not found\n" +msgstr "Nenašlo sa" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "not found" +msgid "realm not found\n" +msgstr "Nenašlo sa" + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Realm name" +msgstr "Premenovať" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Replication configuration" +msgid "cannot open configuration file %s\n" +msgstr "Konfigurácia repliky" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Format error" +msgid "read error\n" +msgstr "Chyba formátu" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Record creation failed." +msgid "Operation failed: %s\n" +msgstr "Vytvorenie záznamu zlyhalo." + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" +msgstr "" + +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to add" +msgid "Failed to get keytab!\n" +msgstr "Zlyhalo pridanie" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Heslá sa nezhodujú!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server Name" +msgstr "Názov služby" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +#, fuzzy +#| msgid "LDAP URI" +msgid "LDAP DN" +msgstr "LDAP URI" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +#, fuzzy +#| msgid "Password" +msgid "LDAP password" +msgstr "Heslo" + +msgid "password to use if not using kerberos" +msgstr "" + +msgid "Prompt for LDAP password" +msgstr "" + +#, fuzzy +#| msgid "CA certificate" +msgid "Path to the IPA CA certificate" +msgstr "CA certifikát" + +#, fuzzy +#| msgid "CA certificate" +msgid "IPA CA certificate" +msgstr "CA certifikát" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "Enter LDAP password" +msgstr "Používateľské heslo" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New Principal Password" +msgstr "Nové heslo" + +#, fuzzy +#| msgid "Verify Password" +msgid "Verify Principal Password" +msgstr "Overiť heslo" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to add" +msgid "Failed to open Keytab\n" +msgstr "Zlyhalo pridanie" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to add" +msgid "Failed to get keytab\n" +msgstr "Zlyhalo pridanie" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Failed users/groups" +msgstr "Predvolená používateľská skupina" + +msgid "Failed service/service groups" +msgstr "" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed to remove" +msgstr "Zlyhalo pridanie" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +#, fuzzy +#| msgid "Specified Profiles" +msgid "Failed profiles" +msgstr "Špecifikované profily" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed CAs" +msgstr "Zlyhalo pridanie" + +msgid "Failed member manager" +msgstr "" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed managedby" +msgstr "Zlyhalo pridanie" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed targets" +msgstr "Zlyhalo pridanie" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed owners" +msgstr "Zlyhalo pridanie" + +msgid "Failed to add" +msgstr "Zlyhalo pridanie" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "Súbor %(file)s nenájdený" + +#, python-format +msgid "key %(key)s already exists" +msgstr "kľúč %(key)s už existuje" + +#, python-format +msgid "map %(map)s already exists" +msgstr "mapovanie %(map)s už existuje" + +#, fuzzy +#| msgid "Imported keys:" +msgid "Imported maps:" +msgstr "Importované kľúče:" + +#, python-format +msgid "Added %(map)s" +msgstr "Pridané %(map)s" + +msgid "Imported keys:" +msgstr "Importované kľúče:" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Pridané %(src)s do %(dst)s" + +msgid "Ignored keys:" +msgstr "Ignorované kľúče:" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "Ignorované %(src)s do %(dst)s" + +#, fuzzy +#| msgid "Duplicate keys skipped:" +msgid "Duplicate maps skipped:" +msgstr "Duplikované kľúče preskočené:" + +#, python-format +msgid "Skipped %(map)s" +msgstr "Preskočené %(map)s" + +msgid "Duplicate keys skipped:" +msgstr "Duplikované kľúče preskočené:" + +#, python-format +msgid "Skipped %(key)s" +msgstr "Preskočené %(key)s" + +msgid "Input file" +msgstr "" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "File to load the certificate from" +msgstr "Odstrániť certifikačný profil" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Konfigurácia profilu bola uložená do súboru '%(file)s'" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Certifikát(y) sú uložené v súbore '%(file)s'" + +msgid "Servers details:" +msgstr "Detaily serverov:" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." msgstr "" -"\n" -" Pridanie lokality:\n" -" ipa location-add lokalita --description 'Moja lokalita'\n" msgid "" "\n" -" Delete location:\n" -" ipa location-del location\n" +"YubiKey Tokens\n" +msgstr "" +"\n" +"YubiKey Tokeny\n" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"Spravovať YubiKey tokeny.\n" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"PRÍKLADY:\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "Pridať nový YubiKey OTP token." + +msgid "YubiKey slot" +msgstr "YubiKey slot" + +msgid "No free YubiKey slot!" +msgstr "Žiadny voľný YubiKey slot!" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "Odstraňovanie %(servers)s z replikačnej topológie, prosím čakajte..." + +#, fuzzy, python-format +#| msgid "Disabled Sudo Rule \"%s\"" +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Deaktivované sudo pravidlá \"%s\"" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Deaktivované sudo pravidlá \"%s\"" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "Topológia je odpojená" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "Server %(srv)s nemôže kontaktovať servery: %(replicas)s" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +msgid "Delete a user" +msgstr "Odstrániť používateľa" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Split DNS record to parts" +msgstr "IPA DNS záznamy" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "Prosím vyberte typ DNS záznamu" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Najbežnejšie typy záznamov pre tento typ zóny sú: %s\n" + +msgid "DNS resource record type" +msgstr "Typ DNS záznamu" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Nesprávny alebo nepodporovaný typ. Povolené hodnoty sú: %s" + +#, fuzzy +#| msgid "No option to delete specific record provided." +msgid "No option to modify specific record provided." +msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" + +msgid "Current DNS record contents:\n" +msgstr "Aktuálny obsah DNS záznamu:\n" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Upraviť %(name)s '%(value)s'?" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" +"Nebola zadaná ani voľba --del-all a ani voľby pre zmazanie špecifického " +"záznamu.\n" +"Príkaz help môže byť použitý pre zobrazenie podporovaných typov záznamov." + +msgid "No option to delete specific record provided." +msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" + +msgid "Delete all?" +msgstr "Odstrániť všetko?" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Odstrániť %(name)s '%(value)s'?" + +msgid "Server will check DNS forwarder(s)." +msgstr "Server skontroluje DNS forwarder(y)." + +msgid "This may take some time, please wait ..." +msgstr "Toto môže trvať nejaký čas, prosím čakajte ..." + +#, fuzzy +#| msgid "DNS forward zone" +msgid "DNS forwarder" +msgstr "DNS forward zóna" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "Synchronizovať OTP token" + +msgid "User ID" +msgstr "ID používateľa" + +msgid "Password" +msgstr "Heslo" + +msgid "First Code" +msgstr "Prvý kód" + +msgid "Second Code" +msgstr "Druhý kód" + +msgid "Token ID" +msgstr "Token ID" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Nie je možné čítať súbor '%(filename)s': %(exc)s" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Nie je možné dekódovať súbor '%(filename)s': %(exc)s" + +msgid "Invalid credentials" +msgstr "Nesprávne prihlasovacie údaje" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new vault." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +#| msgid "Change password" +msgid "Vault password" +msgstr "Zmeniť heslo" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "Heslo môže byť špecifikované len pre symetrický vault" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "Verejný kľúč môže byť špecifikovný len pre asymetrický vault" + +#, fuzzy +#| msgid "Password change complete" +msgid "Password specified multiple times" +msgstr "Zmena hesla dokončená" + +msgid "Public key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Missing vault public key" +msgstr "neplatný verejný SSH kľúč" + +#, fuzzy, python-format +#| msgid "Invalid or unsupported type. Allowed values are: %s" +msgid "Invalid or unsupported vault public key: %s" +msgstr "Nesprávny alebo nepodporovaný typ. Povolené hodnoty sú: %s" + +msgid "Modify a vault." +msgstr "Upraviť vault." + +msgid "Change password" +msgstr "Zmeniť heslo" + +#, fuzzy +#| msgid "Change password" +msgid "Old vault password" +msgstr "Zmeniť heslo" + +msgid "File containing the old vault password" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New vault password" +msgstr "Nové heslo" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Missing new vault public key" +msgstr "neplatný verejný SSH kľúč" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +#, fuzzy +#| msgid "Override inherited settings" +msgid "Override existing password" +msgstr "Potlačiť zdedené nastavenia" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +#, fuzzy +#| msgid "IPA Error" +msgid "Error" +msgstr "IPA chyba" + +#, fuzzy +#| msgid "Rule name" +msgid "Input filename" +msgstr "Názov pravidla" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "File to load the certificate from." +msgstr "Odstrániť certifikačný profil" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "ACI názov" + +msgid "Permission" +msgstr "Povolenie" + +#, fuzzy +#| msgid "User group ACI grants access to" +msgid "Permission ACI grants access to" +msgstr "ACI používateľskej skupiny udeluje prístup k" + +msgid "User group" +msgstr "Používateľská skupina" + +msgid "User group ACI grants access to" +msgstr "ACI používateľskej skupiny udeluje prístup k" + +msgid "Permissions" +msgstr "Povolenia" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "Atribúty" + +msgid "Type" +msgstr "Typ" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "Členom" + +msgid "Member of a group" +msgstr "Členom skupiny" + +msgid "Filter" +msgstr "Filter" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "Podstrom" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "Cieľová skupina" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +#, fuzzy +#| msgid "Create a new HBAC rule." +msgid "Create new ACI." +msgstr "Vytvoriť nové HBAC pravidlo" + +msgid "ACI prefix" +msgstr "" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +#, fuzzy +#| msgid "Delete a CA ACL." +msgid "Delete ACI." +msgstr "Odstrániť CA ACL." + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "True if not all results were returned" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Modify an HBAC rule." +msgid "Modify ACI." +msgstr "Upraviť HBAC pravidlo." + +#, fuzzy +#| msgid "Rename" +msgid "Rename an ACI." +msgstr "Premenovať" + +msgid "New ACI name" +msgstr "Nový ACI názov" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "Umiestnenie ACI" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +#, fuzzy +#| msgid "Keytab" +msgid "Key" +msgstr "Keytab" + +#, fuzzy +#| msgid "Automount" +msgid "Automount key name." +msgstr "Automount" + +#, fuzzy +#| msgid "Misc. Information" +msgid "Mount information" +msgstr "Rôzne informácie" + +#, fuzzy +#| msgid "Description" +msgid "description" +msgstr "Popis" + +#, fuzzy +#| msgid "location" +msgid "Location" +msgstr "lokalita" + +#, fuzzy +#| msgid "IPA location name" +msgid "Automount location name." +msgstr "Názov IPA lokality" + +msgid "Map" +msgstr "" + +#, fuzzy +#| msgid "Automount" +msgid "Automount map name." +msgstr "Automount" + +msgid "Description" +msgstr "Popis" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new automount key." +msgstr "Vytvoriť novú skupinu." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +#, fuzzy +#| msgid "Delete an OTP token." +msgid "Delete an automount key." +msgstr "Odstrániť OTP token" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "Zoznam odstránení, ktoré zlyhaly" + +#, fuzzy +#| msgid "Search for OTP token." +msgid "Search for an automount key." +msgstr "Vyhľadať OTP token" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Maximum number of entries returned" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Modify a vault." +msgid "Modify an automount key." +msgstr "Upraviť vault." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +#, fuzzy +#| msgid "Weight" +msgid "Rights" +msgstr "Váha" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +#, fuzzy +#| msgid "Employee Information" +msgid "New mount information" +msgstr "Informácie o zamestnancovi" + +msgid "Rename" +msgstr "Premenovať" + +msgid "Rename the automount key object" +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Display an automount key." +msgstr "Zobrazované meno" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new automount location." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +#| msgid "Delete an IPA location." +msgid "Delete an automount location." +msgstr "Odstrániť IPA lokalitu." + +#, fuzzy +#| msgid "Search for IPA locations." +msgid "Search for an automount location." +msgstr "Vyhľadať IPA lokalitu." + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display an automount location." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "Generate automount files for a specific location." +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new automount map." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new indirect mount point." +msgstr "Vytvoriť novú skupinu." + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +#, fuzzy +#| msgid "Delete an IPA location." +msgid "Delete an automount map." +msgstr "Odstrániť IPA lokalitu." + +#, fuzzy +#| msgid "Search for OTP token." +msgid "Search for an automount map." +msgstr "Vyhľadať OTP token" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an automount map." +msgstr "Upraviť skupinu." + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "Maximum serial number" +msgid "Maximum username length" +msgstr "Maximálne sériové číslo" + +#, fuzzy +#| msgid "Home directory" +msgid "Home directory base" +msgstr "Domovský priečinok" + +msgid "Default location of home directories" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Default shell" +msgstr "Predvolená používateľská skupina" + +#, fuzzy +#| msgid "Default group for new users not found" +msgid "Default shell for new users" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy +#| msgid "Default user group" +msgid "Default users group" +msgstr "Predvolená používateľská skupina" + +#, fuzzy +#| msgid "Default group for new users not found" +msgid "Default group for new users" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +#, fuzzy +#| msgid "Search scope" +msgid "Search size limit" +msgstr "Rozsah vyhľadávania" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +#, fuzzy +#| msgid "User categories" +msgid "User search fields" +msgstr "Kategórie používateľov" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +#, fuzzy +#| msgid "Certificate requested" +msgid "Certificate Subject base" +msgstr "Certifikačná požiadavka" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Default user objectclasses" +msgstr "Predvolená používateľská skupina" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "Password Expiration Notification (days)" +msgstr "Vypršanie hesla" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +#, fuzzy +#| msgid "Password Policies" +msgid "Password plugin features" +msgstr "Politiky hesiel" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux user map order" +msgstr "SELinux používateľ" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +#, fuzzy +#| msgid "SELinux User" +msgid "Default SELinux user" +msgstr "SELinux používateľ" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +#, fuzzy +#| msgid "Default attributes" +msgid "Default PAC types" +msgstr "Predvolené atribúty" + +msgid "Default types of PAC supported for services" +msgstr "" + +#, fuzzy +#| msgid "User authentication types" +msgid "Default user authentication types" +msgstr "Typy autentifikácie používateľa" + +#, fuzzy +#| msgid "Types of supported user authentication" +msgid "Default types of supported user authentication" +msgstr "Podporované typy autentifikácie používateľa" + +msgid "Modify configuration options." +msgstr "Upraviť konfiguračné voľby." + +msgid "Show the current configuration." +msgstr "Zobraziť konfiguračné voľby" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +#, fuzzy +#| msgid "Location name" +msgid "Delegation name" +msgstr "Názov lokality" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "Member user group" +msgstr "Členské skupiny" + +msgid "User group to apply delegation to" +msgstr "" + +#, fuzzy +#| msgid "Add a new IPA location." +msgid "Add a new delegation." +msgstr "Pridať novú IPA lokalitu." + +#, fuzzy +#| msgid "Delete an IPA location." +msgid "Delete a delegation." +msgstr "Odstrániť IPA lokalitu." + +#, fuzzy +#| msgid "Search for IPA locations." +msgid "Search for delegations." +msgstr "Vyhľadať IPA lokalitu." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a delegation." +msgstr "Upraviť skupinu." + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a delegation." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "Globálne forwardery" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " +"formátu \"IP_ADRESA port PORT\" pre každý forwarder " + +#, fuzzy +#| msgid "Password Policy" +msgid "Forward policy" +msgstr "Politika hesiel" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" +"Globálna forward politika. Nastavením na \"none\" sa deaktivuje akýkoľvek " +"nastavený globálny forwarder." + +msgid "Allow PTR sync" +msgstr "Povoliť PTR synchronizáciu" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +msgid "Zone name" +msgstr "Názov zóny" + +msgid "Zone name (FQDN)" +msgstr "Názov zóny (FQDN)" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "Aktívna zóna" + +msgid "Is zone active?" +msgstr "Je zóna aktívna?" + +msgid "Zone forwarders" +msgstr "Zónové forwardery" + +#, fuzzy +#| msgid "" +#| "Global forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " +"formátu \"IP_ADRESA port PORT\" pre každý forwarder " + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Record name" +msgstr "Názov záznamu" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "Záznamy" + +msgid "Record type" +msgstr "Typ záznamu" + +#, fuzzy +#| msgid "Record name" +msgid "Record data" +msgstr "Názov záznamu" + +#, fuzzy +#| msgid "%s record" +msgid "A record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw A records" +msgstr "Záznamy" + +#, fuzzy +#| msgid "IP Address" +msgid "A IP Address" +msgstr "IP adresa" + +msgid "IP Address" +msgstr "IP adresa" + +#, fuzzy +#| msgid "Create reverse" +msgid "A Create reverse" +msgstr "Vytvoriť reverzný" + +msgid "Create reverse record for this IP Address" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "AAAA record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw AAAA records" +msgstr "Záznamy" + +#, fuzzy +#| msgid "IP Address" +msgid "AAAA IP Address" +msgstr "IP adresa" + +#, fuzzy +#| msgid "Create reverse" +msgid "AAAA Create reverse" +msgstr "Vytvoriť reverzný" + +#, fuzzy +#| msgid "%s record" +msgid "A6 record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw A6 records" +msgstr "Záznamy" + +#, fuzzy +#| msgid "Record name" +msgid "A6 Record data" +msgstr "Názov záznamu" + +#, fuzzy +#| msgid "%s record" +msgid "AFSDB record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw AFSDB records" +msgstr "IPA DNS záznamy" + +msgid "AFSDB Subtype" +msgstr "" + +#, fuzzy +#| msgid "Subtree" +msgid "Subtype" +msgstr "Podstrom" + +msgid "AFSDB Hostname" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Hostname" +msgstr "Priezvisko" + +#, fuzzy +#| msgid "%s record" +msgid "APL record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw APL records" +msgstr "Záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "CERT record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw CERT records" +msgstr "Záznamy" + +#, fuzzy +#| msgid "Certificate Type" +msgid "CERT Certificate Type" +msgstr "Typ certifikátu" + +msgid "Certificate Type" +msgstr "Typ certifikátu" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +#, fuzzy +#| msgid "Certificate" +msgid "CERT Certificate/CRL" +msgstr "Certifikát" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate/CRL" +msgstr "Certifikát" + +#, fuzzy +#| msgid "%s record" +msgid "CNAME record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw CNAME records" +msgstr "IPA DNS záznamy" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "DHCID record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw DHCID records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "DLV record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw DLV records" +msgstr "IPA DNS záznamy" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "DNAME record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw DNAME records" +msgstr "IPA DNS záznamy" + +msgid "DNAME Target" +msgstr "" + +#, fuzzy +#| msgid "Target DN" +msgid "Target" +msgstr "Cieľové DN" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "DNSKEY record" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw DNSKEY records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "DS record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw DS records" +msgstr "IPA DNS záznamy" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "HIP record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw HIP records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "IPSECKEY record" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw IPSECKEY records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "KEY record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw KEY records" +msgstr "Záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "KX record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw KX records" +msgstr "Záznamy" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "LOC record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw LOC records" +msgstr "Záznamy" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +#, fuzzy +#| msgid "Second Code" +msgid "Seconds Latitude" +msgstr "Druhý kód" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +#, fuzzy +#| msgid "Second Code" +msgid "LOC Seconds Longitude" +msgstr "Druhý kód" + +#, fuzzy +#| msgid "Second Code" +msgid "Seconds Longitude" +msgstr "Druhý kód" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +#, fuzzy +#| msgid "Size" +msgid "LOC Size" +msgstr "Veľkosť" + +msgid "Size" +msgstr "Veľkosť" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +#, fuzzy +#| msgid "Valid Certificate Present" +msgid "Vertical Precision" +msgstr "Prítomný platný certifikát" + +#, fuzzy +#| msgid "%s record" +msgid "MX record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw MX records" +msgstr "Záznamy" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "NAPTR record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw NAPTR records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "Order" +msgid "NAPTR Order" +msgstr "Poradie" + +msgid "Order" +msgstr "Poradie" + +msgid "NAPTR Preference" +msgstr "" + +#, fuzzy +#| msgid "Preferred Language" +msgid "Preference" +msgstr "Preferovaný jazyk" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +#, fuzzy +#| msgid "Any Service" +msgid "NAPTR Service" +msgstr "Akákoľvek služba" + +msgid "Service" +msgstr "Služba" + +msgid "NAPTR Regular Expression" +msgstr "" + +#, fuzzy +#| msgid "Expression" +msgid "Regular Expression" +msgstr "Výraz" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "NS record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw NS records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "NIS domain name" +msgid "NS Hostname" +msgstr "NIS doménové meno" + +#, fuzzy +#| msgid "%s record" +msgid "NSEC record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw NSEC records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "NSEC3 record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw NSEC3 records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "PTR record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw PTR records" +msgstr "Záznamy" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "RRSIG record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw RRSIG records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "RP record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw RP records" +msgstr "Záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "SIG record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw SIG records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "SPF record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw SPF records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "SRV record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw SRV records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "Priority" +msgid "SRV Priority" +msgstr "Priorita" + +msgid "Priority" +msgstr "Priorita" + +#, fuzzy +#| msgid "Weight" +msgid "SRV Weight" +msgstr "Váha" + +msgid "Weight" +msgstr "Váha" + +#, fuzzy +#| msgid "Port" +msgid "SRV Port" +msgstr "Port" + +msgid "Port" +msgstr "Port" + +#, fuzzy +#| msgid "Target DN" +msgid "SRV Target" +msgstr "Cieľové DN" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "SSHFP record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw SSHFP records" +msgstr "IPA DNS záznamy" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +#, fuzzy +#| msgid "SSH public key fingerprint" +msgid "SSHFP Fingerprint" +msgstr "Odtlačok verejného SSH kľúča (fingerprint)" + +msgid "Fingerprint" +msgstr "" + +#, fuzzy +#| msgid "%s record" +msgid "TA record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw TA records" +msgstr "Záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "TLSA record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw TLSA records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "Certificates" +msgid "TLSA Certificate Usage" +msgstr "Certifikáty" + +#, fuzzy +#| msgid "Certificates" +msgid "Certificate Usage" +msgstr "Certifikáty" + +msgid "TLSA Selector" +msgstr "" + +#, fuzzy +#| msgid "Select All" +msgid "Selector" +msgstr "Označiť všetko" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "TLSA Certificate Association Data" +msgstr "Certifikačné autority" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Certificate Association Data" +msgstr "Certifikačné autority" + +#, fuzzy +#| msgid "%s record" +msgid "TKEY record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw TKEY records" +msgstr "Záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "TSIG record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "IPA DNS records" +msgid "Raw TSIG records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "%s record" +msgid "TXT record" +msgstr "%s záznam" + +#, fuzzy +#| msgid "Records" +msgid "Raw TXT records" +msgstr "Záznamy" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "Autoritatívny nameserver" + +msgid "Authoritative nameserver domain name" +msgstr "Doménové meno autoritatívneho nameservera" + +msgid "Administrator e-mail address" +msgstr "E-mailová adresa administrátora" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "Sériové číslo SOA záznamu" + +#, fuzzy +#| msgid "Refresh" +msgid "SOA refresh" +msgstr "Znovu načítať" + +#, fuzzy +#| msgid "SOA record serial number" +msgid "SOA record refresh time" +msgstr "Sériové číslo SOA záznamu" + +msgid "SOA retry" +msgstr "" + +#, fuzzy +#| msgid "SOA record serial number" +msgid "SOA record retry time" +msgstr "Sériové číslo SOA záznamu" + +msgid "SOA expire" +msgstr "" + +#, fuzzy +#| msgid "SOA record serial number" +msgid "SOA record expire time" +msgstr "Sériové číslo SOA záznamu" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "Dynamické aktualizácie" + +msgid "Allow dynamic updates." +msgstr "Povoliť dynamické aktualizácie" + +msgid "Allow query" +msgstr "Povoliť dotazy" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "Povoliť prenos" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +#, fuzzy +#| msgid "Modify CA configuration." +msgid "Modify global DNS configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current global DNS configuration." +msgstr "Zobraziť konfiguračné voľby" + +msgid "Create new DNS forward zone." +msgstr "Vytvoriť novú DNS forward zónu" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission value" +msgstr "Povolenie" + +msgid "Delete DNS forward zone." +msgstr "Odstrániť DNS forward zónu." + +msgid "Disable DNS Forward Zone." +msgstr "Deaktivovať DNS forward zónu." + +#, fuzzy +#| msgid "Disable DNS Forward Zone." +msgid "Enable DNS Forward Zone." +msgstr "Deaktivovať DNS forward zónu." + +msgid "Search for DNS forward zones." +msgstr "Vyhľadávať DNS forward zóny" + +msgid "Modify DNS forward zone." +msgstr "Upraviť DNS forward zónu" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "Add new DNS resource record." +msgstr "Pridať nový DNS záznam" + +msgid "Force" +msgstr "Vynútiť" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "Štrukturovane" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "Odstrániť DNS záznam" + +#, fuzzy +#| msgid "Delete DNS resource record." +msgid "Delete all associated records" +msgstr "Odstrániť DNS záznam" + +#, fuzzy +#| msgid "Delete DNS resource record." +msgid "Delete DNS record entry." +msgstr "Odstrániť DNS záznam" + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for DNS resources." +msgstr "Vyhľadať DNS servery" + +msgid "Modify a DNS resource record." +msgstr "Upraviť DNS záznam" + +#, fuzzy +#| msgid "Delete DNS resource record." +msgid "Rename the DNS resource record object" +msgstr "Odstrániť DNS záznam" + +#, fuzzy +#| msgid "Delete DNS resource record." +msgid "Display DNS resource." +msgstr "Odstrániť DNS záznam" + +#, fuzzy +#| msgid "Delete DNS zone (SOA record)." +msgid "Create new DNS zone (SOA record)." +msgstr "Odstrániť DNS zónu (SOA záznam)." + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "Odstrániť DNS zónu (SOA záznam)." + +msgid "Disable DNS Zone." +msgstr "Deaktivovať DNS zónu." + +#, fuzzy +#| msgid "Disable DNS Zone." +msgid "Enable DNS Zone." +msgstr "Deaktivovať DNS zónu." + +#, fuzzy +#| msgid "Delete DNS zone (SOA record)." +msgid "Search for DNS zones (SOA records)." +msgstr "Odstrániť DNS zónu (SOA záznam)." + +#, fuzzy +#| msgid "DNS forward zones" +msgid "Forward zones only" +msgstr "DNS forward zóny" + +#, fuzzy +#| msgid "Search for DNS forward zones." +msgid "Search for forward zones only" +msgstr "Vyhľadávať DNS forward zóny" + +#, fuzzy +#| msgid "Delete DNS zone (SOA record)." +msgid "Modify DNS zone (SOA record)." +msgstr "Odstrániť DNS zónu (SOA záznam)." + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a DNS zone (SOA record)." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "Názov pravidla" + +#, fuzzy +#| msgid "Record type" +msgid "Rule type" +msgstr "Typ záznamu" + +msgid "Rule type (allow)" +msgstr "" + +#, fuzzy +#| msgid "User categories" +msgid "User category" +msgstr "Kategórie používateľov" + +#, fuzzy +#| msgid "User categories" +msgid "User category the rule applies to" +msgstr "Kategórie používateľov" + +#, fuzzy +#| msgid "User categories" +msgid "Host category" +msgstr "Kategórie používateľov" + +msgid "Host category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service category" +msgstr "Názov služby" + +msgid "Service category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Disabled" +msgid "Enabled" +msgstr "Deaktivované" + +msgid "Users" +msgstr "Používatelia" + +msgid "User Groups" +msgstr "Používateľské skupiny" + +msgid "Hosts" +msgstr "" + +#, fuzzy +#| msgid "User Groups" +msgid "Host Groups" +msgstr "Používateľské skupiny" + +msgid "Services" +msgstr "Služby" + +#, fuzzy +#| msgid "Specified Groups" +msgid "Service Groups" +msgstr "Špecifikované skupiny" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "Vytvoriť nové HBAC pravidlo" + +msgid "Suppress processing of membership attributes." +msgstr "" + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, fuzzy +#| msgid "Member of" +msgid "member host" +msgstr "Členom" + +msgid "hosts to add" +msgstr "" + +#, fuzzy +#| msgid "Member of groups" +msgid "member host group" +msgstr "Člen skupín" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of members added" +msgstr "Počet vrátených položiek" + +msgid "Add services to an HBAC rule." +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +#| msgid "HBAC service" +msgid "member HBAC service" +msgstr "HBAC služba" + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC services to add" +msgstr "HBAC služby" + +#, fuzzy +#| msgid "HBAC service" +msgid "member HBAC service group" +msgstr "HBAC služba" + +#, fuzzy +#| msgid "HBAC service description" +msgid "HBAC service groups to add" +msgstr "HBAC popis služby" + +msgid "Add users and groups to an HBAC rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, fuzzy +#| msgid "Automember Rule" +msgid "member user" +msgstr "Automember pravidlo" + +#, fuzzy +#| msgid "Failed to add" +msgid "users to add" +msgstr "Zlyhalo pridanie" + +#, fuzzy +#| msgid "Member groups" +msgid "member group" +msgstr "Členské skupiny" + +#, fuzzy +#| msgid "groups" +msgid "groups to add" +msgstr "skupiny" + +msgid "Delete an HBAC rule." +msgstr "Odstrániť HBAC pravidlo." + +msgid "Disable an HBAC rule." +msgstr "Deaktivovať HBAC pravidlo." + +msgid "Enable an HBAC rule." +msgstr "Aktivovať HBAC pravidlo." + +msgid "Search for HBAC rules." +msgstr "Vyhľadať HBAC pravidlá." + +msgid "Modify an HBAC rule." +msgstr "Upraviť HBAC pravidlo." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of members removed" +msgstr "Počet vrátených položiek" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC services to remove" +msgstr "HBAC služby" + +#, fuzzy +#| msgid "HBAC service description" +msgid "HBAC service groups to remove" +msgstr "HBAC popis služby" + +msgid "Remove users and groups from an HBAC rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Display the properties of an HBAC rule." +msgstr "Pridať služby do HBAC pravidla." + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "Názov služby" + +msgid "HBAC service" +msgstr "HBAC služba" + +msgid "HBAC service description" +msgstr "HBAC popis služby" + +#, fuzzy +#| msgid "Member of groups" +msgid "Member of HBAC service groups" +msgstr "Člen skupín" + +msgid "Add a new HBAC service." +msgstr "Pridať novú HBAC službu." + +msgid "Delete an existing HBAC service." +msgstr "Odstrániť existujúcu HBAC službu." + +msgid "Search for HBAC services." +msgstr "Vyhľadať HBAC služby." + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "Upraviť HBAC službu." + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about an HBAC service." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service group name" +msgstr "Názov služby" + +#, fuzzy +#| msgid "HBAC service description" +msgid "HBAC service group description" +msgstr "HBAC popis služby" + +#, fuzzy +#| msgid "HBAC service" +msgid "Member HBAC service" +msgstr "HBAC služba" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new HBAC service group." +msgstr "Pridať novú HBAC službu." + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add members to an HBAC service group." +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +#| msgid "Delete an existing HBAC service." +msgid "Delete an HBAC service group." +msgstr "Odstrániť existujúcu HBAC službu." + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for an HBAC service group." +msgstr "Vyhľadať HBAC služby." + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an HBAC service group." +msgstr "Upraviť HBAC službu." + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove members from an HBAC service group." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about an HBAC service group." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Host name" +msgstr "Priezvisko" + +msgid "A description of this host" +msgstr "" + +msgid "Locality" +msgstr "Lokalita" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "Operačný systém" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +msgid "User password" +msgstr "Používateľské heslo" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +#, fuzzy +#| msgid "Change password" +msgid "Random password" +msgstr "Zmeniť heslo" + +msgid "Certificate" +msgstr "Certifikát" + +#, fuzzy +#| msgid "Base-64 encoded service certificate" +msgid "Base-64 encoded server certificate" +msgstr "Base-64 zakódovaný certifikát služby" + +#, fuzzy +#| msgid "Display name" +msgid "Principal name" +msgstr "Zobrazované meno" + +msgid "MAC address" +msgstr "MAC adresa" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "Verejný SSH kľúč" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +#| msgid "Add a new ID View." +msgid "Assigned ID View" +msgstr "Pridať nové ID View" + +#, fuzzy +#| msgid "User authentication types" +msgid "Requires pre-authentication" +msgstr "Typy autentifikácie používateľa" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +#, fuzzy +#| msgid "Member of groups" +msgid "Member of host-groups" +msgstr "Člen skupín" + +msgid "Roles" +msgstr "Role" + +#, fuzzy +#| msgid "Member of groups" +msgid "Member of netgroups" +msgstr "Člen skupín" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of Sudo rule" +msgstr "Členom skupiny" + +#, fuzzy +#| msgid "Member of a group" +msgid "Member of HBAC rule" +msgstr "Členom skupiny" + +#, fuzzy +#| msgid "Member of groups" +msgid "Indirect Member of netgroup" +msgstr "Člen skupín" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member of host-group" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member of role" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member of Sudo rule" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member of HBAC rule" +msgstr "Nepriame členstvo" + +msgid "Keytab" +msgstr "Keytab" + +#, fuzzy +#| msgid "Manager" +msgid "Managed by" +msgstr "Manažér" + +#, fuzzy +#| msgid "Manager" +msgid "Managing" +msgstr "Manažér" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +#, fuzzy +#| msgid "Add a new IPA location." +msgid "Add a new host." +msgstr "Pridať novú IPA lokalitu." + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add hosts that can manage this host." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a host." +msgstr "Odstrániť používateľa" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove entries from DNS" +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Disable the Kerberos key and SSL certificate of a service." +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for hosts." +msgstr "Vyhľadávať skupiny." + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "host group" +msgstr "Používateľská skupina" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "netgroup" +msgstr "skupina" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +#, fuzzy +#| msgid "HBAC rules" +msgid "HBAC rule" +msgstr "HBAC pravidlá" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for hosts with these member of HBAC rules." +msgstr "Vyhľadať HBAC pravidlá." + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +#, fuzzy +#| msgid "sudo rules" +msgid "sudo rule" +msgstr "sudo pravidlá" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +#, fuzzy +#| msgid "Modify information about an IPA location." +msgid "Modify information about a host." +msgstr "Upraviť informácie o IPA lokalite." + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "Aktualizovať DNS položky." + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Remove hosts that can manage this host." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a host." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "file to store certificate in" +msgstr "Revokácia certifikátu." + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "group" +msgid "Host-group" +msgstr "skupina" + +#, fuzzy +#| msgid "Member of groups" +msgid "Name of host-group" +msgstr "Člen skupín" + +msgid "A description of this host-group" +msgstr "" + +#, fuzzy +#| msgid "Member of" +msgid "Member hosts" +msgstr "Členom" + +#, fuzzy +#| msgid "Member groups" +msgid "Member host-groups" +msgstr "Členské skupiny" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member hosts" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member host-groups" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Create a new group." +msgid "Add a new hostgroup." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +#| msgid "Member of a group" +msgid "Add members to a hostgroup." +msgstr "Členom skupiny" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a hostgroup." +msgstr "Odstrániť skupinu." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for hostgroups." +msgstr "Vyhľadávať skupiny." + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a hostgroup." +msgstr "Upraviť skupinu." + +#, fuzzy +#| msgid "Member of a group" +msgid "Remove members from a hostgroup." +msgstr "Členom skupiny" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a hostgroup." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +msgid "Group name" +msgstr "Názov skupiny" + +msgid "GID" +msgstr "GID" + +msgid "Group ID Number" +msgstr "ID skupiny" + +msgid "User login" +msgstr "Prihlasovacie meno" + +msgid "UID" +msgstr "UID" + +msgid "User ID Number" +msgstr "ID používateľa" + +msgid "GECOS" +msgstr "GECOS" + +msgid "Home directory" +msgstr "Domovský priečinok" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "Názov ID View" + +#, fuzzy +#| msgid "Add a new ID View." +msgid "Add a new Group ID override." +msgstr "Pridať nové ID View" + +#, fuzzy +#| msgid "Delete an ID View." +msgid "Delete an Group ID override." +msgstr "Odstrániť ID View." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for an Group ID override." +msgstr "Vyhľadávať skupiny." + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify an Group ID override." +msgstr "Upraviť skupinu." + +msgid "Rename the Group ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about an Group ID override." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +#| msgid "Add a new ID View." +msgid "Add a new User ID override." +msgstr "Pridať nové ID View" + +#, fuzzy +#| msgid "Delete an ID View." +msgid "Delete an User ID override." +msgstr "Odstrániť ID View." + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for an User ID override." +msgstr "Vyhľadať DNS servery" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an User ID override." +msgstr "Upraviť HBAC službu." + +msgid "Rename the User ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about an User ID override." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "Add a new ID View." +msgstr "Pridať nové ID View" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +msgid "Hosts to apply the ID View to" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "hostgroups" +msgstr "skupiny" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "Odstrániť ID View." + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for an ID View." +msgstr "Vyhľadať DNS servery" + +#, fuzzy +#| msgid "Add a new ID View." +msgid "Modify an ID View." +msgstr "Pridať nové ID View" + +msgid "Rename the ID View object" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about an ID View." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "Slovník JSON zakódovaných IPA objektov" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "Slovník JSON zakódovaných IPA metód" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "Slovník JSON zakódovaných IPA príkazov" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +#, fuzzy +#| msgid "Local domain" +msgid "Join an IPA domain" +msgstr "Lokálna doména" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "IPA realm" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "Používateľské meno" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +#, fuzzy +#| msgid "kerberos ticket policy settings" +msgid "Modify Kerberos ticket policy." +msgstr "nastavenia kerberos ticket policy" + +#, fuzzy +#| msgid "kerberos ticket policy settings" +msgid "Reset Kerberos ticket policy to the default values." +msgstr "nastavenia kerberos ticket policy" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Migrate users and groups from DS to IPA." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +msgid "LDAP URI" +msgstr "LDAP URI" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +#, fuzzy +#| msgid "Change password" +msgid "bind password" +msgstr "Zmeniť heslo" + +msgid "Bind DN" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User container" +msgstr "Používateľské meno" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Group container" +msgstr "Názov skupiny" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +#, fuzzy +#| msgid "Included attributes" +msgid "Ignore user attribute" +msgstr "Zahrnuté atribúty" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +#, fuzzy +#| msgid "Included attributes" +msgid "Ignore group attribute" +msgstr "Zahrnuté atribúty" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "Prepísať GID" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "LDAP schéma" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "Pokračovať" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "CA certifikát" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Načítať CA certifikát LDAP servera zo súboru" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of variables returned (<= total)" +msgstr "Počet vrátených položiek" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of plugins loaded" +msgstr "Počet vrátených položiek" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +#, fuzzy +#| msgid "Group name" +msgid "Netgroup name" +msgstr "Názov skupiny" + +#, fuzzy +#| msgid "Group description" +msgid "Netgroup description" +msgstr "Popis skupiny" + +msgid "NIS domain name" +msgstr "NIS doménové meno" + +msgid "IPA unique ID" +msgstr "IPA unikátne ID" + +#, fuzzy +#| msgid "Member groups" +msgid "Member netgroups" +msgstr "Členské skupiny" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member netgroups" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Member of" +msgid "Member User" +msgstr "Členom" + +#, fuzzy +#| msgid "Member groups" +msgid "Member Group" +msgstr "Členské skupiny" + +#, fuzzy +#| msgid "Member of" +msgid "Member Host" +msgstr "Členom" + +#, fuzzy +#| msgid "Member groups" +msgid "Member Hostgroup" +msgstr "Členské skupiny" + +#, fuzzy +#| msgid "Create a new group." +msgid "Add a new netgroup." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +#| msgid "Member of a group" +msgid "Add members to a netgroup." +msgstr "Členom skupiny" + +#, fuzzy +#| msgid "Member groups" +msgid "member netgroup" +msgstr "Členské skupiny" + +msgid "netgroups to add" +msgstr "" + +#, fuzzy +#| msgid "Delete group." +msgid "Delete a netgroup." +msgstr "Odstrániť skupinu." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for a netgroup." +msgstr "Vyhľadávať skupiny." + +#, fuzzy +#| msgid "Search for groups." +msgid "search for managed groups" +msgstr "Vyhľadávať skupiny." + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +msgid "group" +msgstr "skupina" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a netgroup." +msgstr "Upraviť skupinu." + +#, fuzzy +#| msgid "Member of a group" +msgid "Remove members from a netgroup." +msgstr "Členom skupiny" + +msgid "netgroups to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a netgroup." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +#, fuzzy +#| msgid "Authentication" +msgid "TOTP authentication Window" +msgstr "Autentifikácia" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Token synchronization failed" +msgid "TOTP Synchronization Window" +msgstr "Synchronizácia tokenu zlyhala" + +#, fuzzy +#| msgid "Token synchronization failed" +msgid "TOTP synchronization time variance (seconds)" +msgstr "Synchronizácia tokenu zlyhala" + +#, fuzzy +#| msgid "Authentication" +msgid "HOTP Authentication Window" +msgstr "Autentifikácia" + +#, fuzzy +#| msgid "User authentication types" +msgid "HOTP authentication skip-ahead" +msgstr "Typy autentifikácie používateľa" + +#, fuzzy +#| msgid "Token synchronization failed" +msgid "HOTP Synchronization Window" +msgstr "Synchronizácia tokenu zlyhala" + +#, fuzzy +#| msgid "Token synchronization failed" +msgid "HOTP synchronization skip-ahead" +msgstr "Synchronizácia tokenu zlyhala" + +msgid "Modify OTP configuration options." +msgstr "Upraviť OTP konfiguračné voľby." + +msgid "Show the current OTP configuration." +msgstr "Zobraziť aktuálnu OTP konfiguráciu." + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "Nastaviť používateľské heslo." + +msgid "New Password" +msgstr "Nové heslo" + +msgid "Current Password" +msgstr "Súčasné heslo" + +msgid "OTP" +msgstr "OTP" + +msgid "One Time Password" +msgstr "Jednorázové heslo (OTP)" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission name" +msgstr "Povolenie" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +#, fuzzy +#| msgid "Excluded attributes" +msgid "Effective attributes" +msgstr "Vylúčené atribúty" + +msgid "All attributes to which the permission applies" +msgstr "" + +msgid "Included attributes" +msgstr "Zahrnuté atribúty" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +msgid "Excluded attributes" +msgstr "Vylúčené atribúty" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +msgid "Default attributes" +msgstr "Predvolené atribúty" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Bind rule type" +msgstr "Nesprávný typ" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "Cieľové DN" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +#, fuzzy +#| msgid "Member of groups" +msgid "Member of group" +msgstr "Člen skupín" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Deprecated; use ipapermlocation" +msgstr "Zastarané voľby" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member of roles" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "permission" +msgid "Add a new permission." +msgstr "povolenie" + +#, fuzzy +#| msgid "Search for permissions." +msgid "Add members to a permission." +msgstr "Vyhľadať povolenia." + +msgid "member privilege" +msgstr "" + +#, fuzzy +#| msgid "Failed to add" +msgid "privileges to add" +msgstr "Zlyhalo pridanie" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission flags" +msgstr "Povolenia" + +#, fuzzy +#| msgid "permission" +msgid "Delete a permission." +msgstr "povolenie" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "Vyhľadať povolenia." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a permission." +msgstr "Upraviť skupinu." + +#, fuzzy +#| msgid "Remove Permission" +msgid "Rename the permission object" +msgstr "Odstrániť povolenie" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove members from a permission." +msgstr "Odstrániť povolenie" + +msgid "privileges to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a permission." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Privilege name" +msgstr "Názov služby" + +#, fuzzy +#| msgid "Privilege Settings" +msgid "Privilege description" +msgstr "Nastavenia privilégia" + +msgid "Granting privilege to roles" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new privilege." +msgstr "Pridať novú HBAC službu." + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add members to a privilege." +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +#| msgid "Member of" +msgid "member role" +msgstr "Členom" + +#, fuzzy +#| msgid "Failed to add" +msgid "roles to add" +msgstr "Zlyhalo pridanie" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add permissions to a privilege." +msgstr "Pridať služby do HBAC pravidla." + +msgid "permission" +msgstr "povolenie" + +#, fuzzy +#| msgid "permission" +msgid "permissions" +msgstr "povolenie" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of permissions added" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Delete an ID range." +msgid "Delete a privilege." +msgstr "Zmazať ID rozsah." + +#, fuzzy +#| msgid "Search for permissions." +msgid "Search for privileges." +msgstr "Vyhľadať povolenia." + +#, fuzzy +#| msgid "Modify a vault." +msgid "Modify a privilege." +msgstr "Upraviť vault." + +msgid "Rename the privilege object" +msgstr "" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove members from a privilege" +msgstr "Odstrániť certifikáty zo služby" + +msgid "roles to remove" +msgstr "" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove permissions from a privilege." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of permissions removed" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a privilege." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "Group" +msgstr "Skupiny" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +#, fuzzy +#| msgid "Password Policies" +msgid "Password history size" +msgstr "Politiky hesiel" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +#, fuzzy +#| msgid "Reset your password." +msgid "Delete a group password policy." +msgstr "Obnoviť Vaše heslo." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for group password policies." +msgstr "Vyhľadávať skupiny." + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a group password policy." +msgstr "Upraviť skupinu." + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about password policy." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "User" +msgstr "Používateľ" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy server name" +msgstr "RADIUS proxy používateľské meno" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +#, fuzzy +#| msgid "Servers" +msgid "Server" +msgstr "Servery" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +#, fuzzy +#| msgid "No entries." +msgid "Retries" +msgstr "Žiadne položky." + +#, fuzzy +#| msgid "Types of supported user authentication" +msgid "The number of times to retry authentication" +msgstr "Podporované typy autentifikácie používateľa" + +#, fuzzy +#| msgid "User categories" +msgid "User attribute" +msgstr "Kategórie používateľov" + +msgid "The username attribute on the user object" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new RADIUS proxy server." +msgstr "Pridať novú HBAC službu." + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "Delete a RADIUS proxy server." +msgstr "RADIUS proxy používateľské meno" + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for RADIUS proxy servers." +msgstr "Vyhľadať DNS servery" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "Modify a RADIUS proxy server." +msgstr "RADIUS proxy používateľské meno" + +#, fuzzy +#| msgid "RADIUS Proxy Server Settings" +msgid "Rename the RADIUS proxy server object" +msgstr "RADIUS Proxy serverové nastavenia" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a RADIUS proxy server." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "Doména" + +#, fuzzy +#| msgid "Local domain" +msgid "Add domain" +msgstr "Lokálna doména" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete domain" +msgstr "Odstrániť všetko?" + +#, fuzzy +#| msgid "Realm Domains" +msgid "Modify realm domains." +msgstr "Realm domény" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "Názov role" + +msgid "A description of this role-group" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "Member users" +msgstr "Členské skupiny" + +msgid "Member groups" +msgstr "Členské skupiny" + +#, fuzzy +#| msgid "Privilege Settings" +msgid "Privileges" +msgstr "Nastavenia privilégia" + +#, fuzzy +#| msgid "Network Services" +msgid "Member services" +msgstr "Sieťové služby" + +#, fuzzy +#| msgid "Add a new ID View." +msgid "Add a new role." +msgstr "Pridať nové ID View" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add members to a role." +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +#| msgid "HBAC service" +msgid "member service" +msgstr "HBAC služba" + +#, fuzzy +#| msgid "Failed to add" +msgid "services to add" +msgstr "Zlyhalo pridanie" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add privileges to a role." +msgstr "Pridať služby do HBAC pravidla." + +msgid "privilege" +msgstr "" + +#, fuzzy +#| msgid "Privilege Settings" +msgid "privileges" +msgstr "Nastavenia privilégia" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of privileges added" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Delete an HBAC rule." +msgid "Delete a role." +msgstr "Odstrániť HBAC pravidlo." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for roles." +msgstr "Vyhľadávať skupiny." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a role." +msgstr "Upraviť skupinu." + +msgid "Rename the role object" +msgstr "" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove members from a role." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Certificate Hold Removed" +msgid "services to remove" +msgstr "Držanie certifikátu odstránené" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove privileges from a role." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of privileges removed" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a role." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Self-service name" +msgstr "Názov služby" + +msgid "Attributes to which the permission applies." +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new self-service permission." +msgstr "Pridať novú HBAC službu." + +#, fuzzy +#| msgid "Search for permissions." +msgid "Delete a self-service permission." +msgstr "Vyhľadať povolenia." + +#, fuzzy +#| msgid "Search for permissions." +msgid "Search for a self-service permission." +msgstr "Vyhľadať povolenia." + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify a self-service permission." +msgstr "Upraviť HBAC službu." + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a self-service permission." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "SELinux používateľ" + +#, fuzzy +#| msgid "HBAC Rules" +msgid "HBAC Rule" +msgstr "HBAC pravidlá" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a new SELinux User Map." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add users and groups to an SELinux User Map rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a SELinux User Map." +msgstr "Odstrániť používateľa" + +#, fuzzy +#| msgid "Disable a user account." +msgid "Disable an SELinux User Map rule." +msgstr "Deaktivovať používateľský účet." + +#, fuzzy +#| msgid "Enable an HBAC rule." +msgid "Enable an SELinux User Map rule." +msgstr "Aktivovať HBAC pravidlo." + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for SELinux User Maps." +msgstr "Vyhľadať DNS servery" + +#, fuzzy +#| msgid "SELinux User" +msgid "Modify a SELinux User Map." +msgstr "SELinux používateľ" + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Service principal" +msgstr "Názov služby" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new IPA new service." +msgstr "Pridať novú HBAC službu." + +msgid "force principal name even if not in DNS" +msgstr "" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add hosts that can manage this service." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +#, fuzzy +#| msgid "Delete an ID View." +msgid "Delete an IPA service." +msgstr "Odstrániť ID View." + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for IPA services." +msgstr "Vyhľadať HBAC služby." + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an existing IPA service." +msgstr "Upraviť HBAC službu." + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Remove hosts that can manage this service." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about an IPA service." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Command" +msgstr "Sudo príkazy" + +msgid "A description of this command" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Command Groups" +msgstr "Sudo príkazy" + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Create new Sudo Command." +msgstr "Vyhľadať sudo príkazy." + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Delete Sudo Command." +msgstr "Sudo príkazy" + +msgid "Search for Sudo Commands." +msgstr "Vyhľadať sudo príkazy." + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Modify Sudo Command." +msgstr "Sudo príkazy" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Display Sudo Command." +msgstr "Sudo príkazy" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Command Group" +msgstr "Sudo príkazy" + +msgid "Group description" +msgstr "Popis skupiny" + +msgid "Commands" +msgstr "Príkazy" + +#, fuzzy +#| msgid "sudo commands" +msgid "Member Sudo commands" +msgstr "sudo príkazy" + +#, fuzzy +#| msgid "Create new DNS forward zone." +msgid "Create new Sudo Command Group." +msgstr "Vytvoriť novú DNS forward zónu" + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Add members to Sudo Command Group." +msgstr "Vyhľadať sudo príkazy." + +#, fuzzy +#| msgid "sudo commands" +msgid "member sudo command" +msgstr "sudo príkazy" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo commands to add" +msgstr "sudo príkazy" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Delete Sudo Command Group." +msgstr "Sudo príkazy" + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for Sudo Command Groups." +msgstr "Vyhľadať sudo príkazy." + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify Sudo Command Group." +msgstr "Upraviť skupinu." + +msgid "Remove members from Sudo Command Group." +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo commands to remove" +msgstr "sudo príkazy" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Display Sudo Command Group." +msgstr "Sudo príkazy" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Meno" + +msgid "Last name" +msgstr "Priezvisko" + +msgid "Full name" +msgstr "Celé meno" + +msgid "Display name" +msgstr "Zobrazované meno" + +msgid "Initials" +msgstr "Iniciály" + +#, fuzzy +#| msgid "Kerberos Key" +msgid "Kerberos principal" +msgstr "Kerberos kľúč" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "E-mailová adresa" + +#, fuzzy +#| msgid "Set a user's password." +msgid "Prompt to set the user password" +msgstr "Nastaviť používateľské heslo." + +#, fuzzy +#| msgid "Set a user's password." +msgid "Generate a random user password" +msgstr "Nastaviť používateľské heslo." + +msgid "User ID Number (system will assign one if not provided)" +msgstr "ID používateľa (systém priradí automaticky ak nie je zadané) " + +msgid "Street address" +msgstr "Ulica" + +msgid "City" +msgstr "Mesto" + +msgid "State/Province" +msgstr "Štát/Provincia" + +msgid "ZIP" +msgstr "PSČ" + +msgid "Telephone Number" +msgstr "Telefónne číslo" + +msgid "Mobile Telephone Number" +msgstr "Mobilné číslo" + +msgid "Pager Number" +msgstr "Pager číslo" + +msgid "Fax Number" +msgstr "Faxové číslo" + +msgid "Org. Unit" +msgstr "Org. jednotka" + +msgid "Job Title" +msgstr "Pracovná pozícia" + +msgid "Manager" +msgstr "Manažér" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "Účet deaktivovaný" + +msgid "User authentication types" +msgstr "Typy autentifikácie používateľa" + +msgid "Types of supported user authentication" +msgstr "Podporované typy autentifikácie používateľa" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "RADIUS proxy configuration" +msgstr "RADIUS proxy konfigurácia" + +msgid "RADIUS proxy username" +msgstr "RADIUS proxy používateľské meno" + +msgid "Department Number" +msgstr "Číslo oddelenia" + +msgid "Employee Number" +msgstr "Zamestnanecké číslo" + +msgid "Employee Type" +msgstr "Typ zamestnanca" + +msgid "Preferred Language" +msgstr "Preferovaný jazyk" + +msgid "Member of groups" +msgstr "Člen skupín" + +#, fuzzy +#| msgid "Member of groups" +msgid "Indirect Member of group" +msgstr "Člen skupín" + +#, fuzzy +#| msgid "Kerberos Key" +msgid "Kerberos keys available" +msgstr "Kerberos kľúč" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new user." +msgstr "Pridať novú HBAC službu." + +#, fuzzy +#| msgid "No private group" +msgid "Don't create user private group" +msgstr "Bez privátnej skupiny" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a user." +msgstr "Odstrániť používateľa" + +msgid "Disable a user account." +msgstr "Deaktivovať používateľský účet." + +#, fuzzy +#| msgid "Disable a user account." +msgid "Enable a user account." +msgstr "Deaktivovať používateľský účet." + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for users." +msgstr "Vyhľadať DNS servery" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for users with these member of HBAC rules." +msgstr "Vyhľadať HBAC pravidlá." + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a user." +msgstr "Upraviť skupinu." + +msgid "Rename the user object" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a user." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Default (fallback) Group" +msgstr "Predvolená používateľská skupina" + +#, fuzzy +#| msgid "Default group for new users not found" +msgid "Default group for entries to land" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy +#| msgid "Automember Rule" +msgid "Add an automember rule." +msgstr "Automember pravidlo" + +msgid "Automember Rule" +msgstr "Automember pravidlo" + +#, fuzzy +#| msgid "Group Type" +msgid "Grouping Type" +msgstr "Typ skupiny" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attribute Key" +msgstr "Atribúty" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of conditions added" +msgstr "Počet vrátených položiek" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +#, fuzzy +#| msgid "Default group for new users not found" +msgid "Default (fallback) group for entries to land" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about the default (fallback) automember groups." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +#| msgid "Deleted automember rule \"%(value)s\"" +msgid "Delete an automember rule." +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for automember rules." +msgstr "Vyhľadať HBAC pravidlá." + +#, fuzzy +#| msgid "Modify an HBAC rule." +msgid "Modify an automember rule." +msgstr "Upraviť HBAC pravidlo." + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove conditions from an automember rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +msgid "Conditions that could not be removed" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of conditions removed" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about an automember rule." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "Vyhľadávanie existujúcich certifikátov." + +msgid "Match cn attribute in subject" +msgstr "" + +#, fuzzy +#| msgid "%(reason)s" +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Dôvod revokácie certifikátu (0-10)" + +msgid "minimum serial number" +msgstr "minimálne sériové číslo" + +msgid "maximum serial number" +msgstr "maximálne sériové číslo" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Maximum number of certs returned" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Take a revoked certificate off hold." +msgstr "Revokácia certifikátu." + +msgid "Serial number" +msgstr "Sériové číslo" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +#, fuzzy +#| msgid "Certificate requested" +msgid "Submit a certificate signing request." +msgstr "Certifikačná požiadavka" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "Revokácia certifikátu." + +msgid "Retrieve an existing certificate." +msgstr "Získať existujúci certifikát." + +msgid "Output filename" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "File to store the certificate in." +msgstr "Revokácia certifikátu." + +msgid "Check the status of a certificate signing request." +msgstr "" + +#, fuzzy +#| msgid "Required" +msgid "Request id" +msgstr "Povinné" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member users" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member groups" +msgstr "Nepriame členstvo" + +msgid "Create a new group." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +#| msgid "Create a new group." +msgid "Create as a non-POSIX group" +msgstr "Vytvoriť novú skupinu." + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Add members to a group." +msgstr "Členom skupiny" + +#, fuzzy +#| msgid "Serial Number" +msgid "External member" +msgstr "Sériové číslo" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +msgid "Delete group." +msgstr "Odstrániť skupinu." + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "Vyhľadávať skupiny." + +#, fuzzy +#| msgid "Search for groups." +msgid "search for private groups" +msgstr "Vyhľadávať skupiny." + +#, fuzzy +#| msgid "Search for groups." +msgid "search for POSIX groups" +msgstr "Vyhľadávať skupiny." + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "search for non-POSIX groups" +msgstr "Vyhľadávať skupiny." + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for groups with these member users." +msgstr "Vyhľadávať skupiny." + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for groups with these member of HBAC rules." +msgstr "Vyhľadať HBAC pravidlá." + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "Upraviť skupinu." + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Remove members from a group." +msgstr "Členom skupiny" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a named group." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +#| msgid "Target DN" +msgid "Target host" +msgstr "Cieľové DN" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +#, fuzzy +#| msgid "Include all disabled IPA rules into test" +msgid "Include all enabled IPA rules into test [default]" +msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" + +msgid "Include all disabled IPA rules into test" +msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "Varovanie" + +#, fuzzy +#| msgid "sudo rules" +msgid "Matched rules" +msgstr "sudo pravidlá" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +#, fuzzy +#| msgid "Replication configuration" +msgid "Result of simulation" +msgstr "Konfigurácia repliky" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "Doménové NetBIOS meno" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +msgid "NetBIOS name" +msgstr "NetBIOS meno" + +#, fuzzy +#| msgid "Domain" +msgid "Domain GUID" +msgstr "Doména" + +msgid "Fallback primary group" +msgstr "" + +msgid "Domain name" +msgstr "Doménové meno" + +#, fuzzy +#| msgid "trusted domain user not found" +msgid "Trusted domain partner" +msgstr "trust doménový užívateľ nenájdený" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain administrator" +msgstr "Active Directory doména" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain administrator's password" +msgstr "Active Directory doména" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +#, fuzzy +#| msgid "Record type" +msgid "Range type" +msgstr "Typ záznamu" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a trust." +msgstr "Odstrániť používateľa" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for trusts." +msgstr "Vyhľadávať skupiny." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a trust." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +#| msgid "Modify CA configuration." +msgid "Modify global trust configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show global trust configuration." +msgstr "Zobraziť konfiguračné voľby" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Range name" +msgstr "Premenovať" + +msgid "First Posix ID of the range" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of IDs in the range" +msgstr "Počet vrátených položiek" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "Zmazať ID rozsah." + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for ranges." +msgstr "Vyhľadávať skupiny." + +#, fuzzy +#| msgid "Modify DNS forward zone." +msgid "Modify ID range." +msgstr "Upraviť DNS forward zónu" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a range." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "Unikátne ID" + +msgid "Type of the token" +msgstr "Typ tokenu" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "Vlastník" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "Deaktivované" + +msgid "Mark the token as disabled (default: false)" +msgstr "Označiť token ako deaktivovaný (predvolené: false)" + +msgid "Validity start" +msgstr "Začiatok platnosti" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "Koniec platnosti" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +#| msgid "Serial Number" +msgid "Serial" +msgstr "Sériové číslo" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "Dĺžka platnosti TOTP token kódu" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +#, fuzzy +#| msgid "Add a new YubiKey OTP token." +msgid "Add a new OTP token." +msgstr "Pridať nový YubiKey OTP token." + +#, fuzzy +#| msgid "Deprecated options" +msgid "(deprecated)" +msgstr "Zastarané voľby" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +msgid "Delete an OTP token." +msgstr "Odstrániť OTP token" + +msgid "Search for OTP token." +msgstr "Vyhľadať OTP token" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "Upraviť OTP token" + +msgid "Rename the OTP token object" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about an OTP token." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Command category" +msgstr "Názov príkazu" + +msgid "Command category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "User categories" +msgid "RunAs User category" +msgstr "Kategórie používateľov" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo order" +msgstr "Sudo príkazy" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Allow Commands" +msgstr "Sudo príkazy" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Deny Commands" +msgstr "Sudo príkazy" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Allow Command Groups" +msgstr "Sudo príkazy" + +#, fuzzy +#| msgid "Sudo Commands" +msgid "Sudo Deny Command Groups" +msgstr "Sudo príkazy" + +#, fuzzy +#| msgid "Users" +msgid "RunAs Users" +msgstr "Používatelia" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +#, fuzzy +#| msgid "User Groups" +msgid "RunAs Groups" +msgstr "Používateľské skupiny" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +#, fuzzy +#| msgid "User Group" +msgid "RunAs External Group" +msgstr "Používateľská skupina" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "SELinux Options" +msgid "Sudo Option" +msgstr "SELinux voľby" + +#, fuzzy +#| msgid "Create a new HBAC rule." +msgid "Create new Sudo Rule." +msgstr "Vytvoriť nové HBAC pravidlo" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "member sudo command group" +msgstr "Členom skupiny" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups to add" +msgstr "sudo príkazy" + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add users and groups for Sudo to execute as." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add users and groups affected by Sudo Rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, fuzzy +#| msgid "Sudo Rules" +msgid "Delete Sudo Rule." +msgstr "Sudo pravidlá" + +#, fuzzy +#| msgid "Disabled Sudo Rule \"%s\"" +msgid "Disable a Sudo Rule." +msgstr "Deaktivované sudo pravidlá \"%s\"" + +#, fuzzy +#| msgid "Enable an HBAC rule." +msgid "Enable a Sudo Rule." +msgstr "Aktivovať HBAC pravidlo." + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for Sudo Rule." +msgstr "Vyhľadať HBAC pravidlá." + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a vault." +msgid "Modify Sudo Rule." +msgstr "Upraviť vault." + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups to remove" +msgstr "sudo príkazy" + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove an option from Sudo Rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +msgid "Remove group for Sudo to execute as." +msgstr "" + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users and groups for Sudo to execute as." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy +#| msgid "Disabled Sudo Rule \"%s\"" +msgid "Display Sudo Rule." +msgstr "Deaktivované sudo pravidlá \"%s\"" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Počet vrátených položiek" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "ACL name" +msgstr "ACI názov" + +#, fuzzy +#| msgid "Profile configuration" +msgid "Profile category" +msgstr "Configurácia profilu" + +msgid "Profile category the ACL applies to" +msgstr "" + +#, fuzzy +#| msgid "User categories" +msgid "User category the ACL applies to" +msgstr "Kategórie používateľov" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "Profily" + +#, fuzzy +#| msgid "Create a new HBAC rule." +msgid "Create a new CA ACL." +msgstr "Vytvoriť nové HBAC pravidlo" + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, fuzzy +#| msgid "Delete a CA ACL." +msgid "Add profiles to a CA ACL." +msgstr "Odstrániť CA ACL." + +#, fuzzy +#| msgid "Certificate Profile" +msgid "member Certificate Profile" +msgstr "Certifikačný profil" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Certificate Profiles to add" +msgstr "Certifikačné profily" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add services to a CA ACL." +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add users and groups to a CA ACL." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +msgid "Delete a CA ACL." +msgstr "Odstrániť CA ACL." + +msgid "Disable a CA ACL." +msgstr "Deaktivovať CA ACL." + +#, fuzzy +#| msgid "Disable a CA ACL." +msgid "Enable a CA ACL." +msgstr "Deaktivovať CA ACL." + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for CA ACLs." +msgstr "Vyhľadať HBAC pravidlá." + +#, fuzzy +#| msgid "Disable a CA ACL." +msgid "Modify a CA ACL." +msgstr "Deaktivovať CA ACL." + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove profiles from a CA ACL." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Certificate Profiles to remove" +msgstr "Certifikačné profily" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove services from a CA ACL." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users and groups from a CA ACL." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +#, fuzzy +#| msgid "Domain name" +msgid "Domain Level" +msgstr "Doménové meno" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add certificates to host entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove certificates from host entry" +msgstr "Odstrániť certifikáty zo služby" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "Pridať do predvolenej skupiny" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "Rozsah vyhľadávania" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +#, fuzzy +#| msgid "Target DN" +msgid "Target DN subtree" +msgstr "Cieľové DN" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Server name" +msgstr "Názov služby" + +#, fuzzy +#| msgid "IPA server role name" +msgid "IPA server hostname" +msgstr "Názov role servera" + +msgid "Managed suffix" +msgstr "" + +#, fuzzy +#| msgid "invalid domain name" +msgid "Min domain level" +msgstr "neplatné doménové meno" + +#, fuzzy +#| msgid "invalid domain name" +msgid "Minimum domain level" +msgstr "neplatné doménové meno" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete IPA server." +msgstr "Odstrániť používateľa" + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for IPA servers." +msgstr "Vyhľadať DNS servery" + +#, fuzzy +#| msgid "IPA Server" +msgid "Show IPA server." +msgstr "IPA Server" + +msgid "Add new certificates to a service" +msgstr "Pridať nové certifikáty k službe" + +msgid "Remove certificates from a service" +msgstr "Odstrániť certifikáty zo služby" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +#, fuzzy +#| msgid "Create a new HBAC rule." +msgid "Create a new service delegation rule." +msgstr "Vytvoriť nové HBAC pravidlo" + +msgid "Add member to a named service delegation rule." +msgstr "" + +msgid "member principal" +msgstr "" + +#, fuzzy +#| msgid "Failed to add" +msgid "principal to add" +msgstr "Zlyhalo pridanie" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +#, fuzzy +#| msgid "Delete an IPA location." +msgid "Delete service delegation." +msgstr "Odstrániť IPA lokalitu." + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for service delegations rule." +msgstr "Vyhľadať HBAC služby." + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +#, fuzzy +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove member from a named service delegation rule." +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." + +msgid "principal to remove" +msgstr "" + +#, fuzzy +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove target from a named service delegation rule." +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." + +msgid "service delegation targets to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a named service delegation rule." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for service delegation target." +msgstr "Vyhľadať HBAC služby." + +msgid "Remove member from a named service delegation target." +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a named service delegation target." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Active users" +msgid "Activate a stage user." +msgstr "Aktívni používatelia" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new stage user." +msgstr "Pridať novú HBAC službu." + +msgid "Create Stage user in from a delete user" +msgstr "" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a stage user." +msgstr "Odstrániť používateľa" + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for stage users." +msgstr "Vyhľadať DNS servery" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a stage user." +msgstr "Upraviť skupinu." + +msgid "Rename the stage user object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a stage user." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +#, fuzzy +#| msgid "Segment details" +msgid "Segment name" +msgstr "Detaily segmentu" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to strip" +msgstr "Atribúty" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to replicate" +msgstr "Atribúty" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +#, fuzzy +#| msgid "Access time" +msgid "Session timeout" +msgstr "Čas prístupu" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Replication agreement enabled" +msgstr "voľby nie sú povolené" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "Service name" +msgid "Suffix name" +msgstr "Názov služby" + +msgid "LDAP suffix to be managed" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new segment." +msgstr "Pridať novú HBAC službu." + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a segment." +msgstr "Odstrániť používateľa" + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for topology segments." +msgstr "Vyhľadať DNS servery" + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a segment." +msgstr "Upraviť skupinu." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Display a segment." +msgstr "Zobrazované meno" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for topology suffices." +msgstr "Vyhľadať HBAC služby." + +#, fuzzy +#| msgid "Modify a group." +msgid "Modify a topology suffix." +msgstr "Upraviť skupinu." + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "Uschovaný používateľ" + +msgid "Add one or more certificates to the user entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +msgid "Remove one or more certificates to the user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +msgid "Move deleted user into staged area" +msgstr "" + +#, fuzzy +#| msgid "Disable a user account." +msgid "Undelete a delete user account." +msgstr "Deaktivovať používateľský účet." + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Vault name" +msgstr "Priezvisko" + +#, fuzzy +#| msgid "Group description" +msgid "Vault description" +msgstr "Popis skupiny" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +#, fuzzy +#| msgid "SSH public key" +msgid "Public key" +msgstr "Verejný SSH kľúč" + +#, fuzzy +#| msgid "SSH public key" +msgid "Vault public key" +msgstr "Verejný SSH kľúč" + +#, fuzzy +#| msgid "Stage users" +msgid "Owner users" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "User group" +msgid "Owner groups" +msgstr "Používateľská skupina" + +#, fuzzy +#| msgid "HBAC services" +msgid "Owner services" +msgstr "HBAC služby" + +#, fuzzy +#| msgid "HBAC service" +msgid "Vault service" +msgstr "HBAC služba" + +msgid "Shared vault" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Vault user" +msgstr "Predvolená používateľská skupina" + +#, fuzzy +#| msgid "Get Certificate" +msgid "Transport Certificate" +msgstr "Získať certifikát" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add members to a vault." +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "Add owners to a vault." +msgstr "Pridať služby do HBAC pravidla." + +msgid "owner user" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "owner group" +msgstr "Používateľská skupina" + +#, fuzzy +#| msgid "Any Service" +msgid "owner service" +msgstr "Akákoľvek služba" + +msgid "Owners that could not be added" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of owners added" +msgstr "Počet vrátených položiek" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a vault." +msgstr "Odstrániť používateľa" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for vaults." +msgstr "Vyhľadávať skupiny." + +#, fuzzy +#| msgid "Disabled service \"%(value)s\"" +msgid "List all service vaults" +msgstr "Deaktivovaná služba \"%(value)s\"" + +#, fuzzy +#| msgid "Disable a user account." +msgid "List all user vaults" +msgstr "Deaktivovať používateľský účet." + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove members from a vault." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove owners from a vault." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "Owners that could not be removed" +msgstr "Certifikačné profily nemôžu byť premenované" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of owners removed" +msgstr "Počet vrátených položiek" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a vault." +msgstr "Zobraziť informácie o IPA lokalite." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show vault configuration." +msgstr "Zobraziť konfiguračné voľby" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +#, fuzzy +#| msgid "Delete an ID range." +msgid "Delete a vault container." +msgstr "Zmazať ID rozsah." + +msgid "Remove owners from a vault container." +msgstr "" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a vault container." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "ID profilu" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Certificate Profile to use" +msgstr "Certifikačné profily" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "Group description" +msgid "Profile description" +msgstr "Popis skupiny" + +msgid "Brief description of this profile" +msgstr "" + +#, fuzzy +#| msgid "Service Certificate" +msgid "Store issued certificates" +msgstr "Certifikát služby" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Search for Certificate Profiles." +msgstr "Certifikačné profily" + +msgid "Import a Certificate Profile." +msgstr "Importovať certifikačný profil" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +#, fuzzy +#| msgid "Modify CA configuration." +msgid "Modify Certificate Profile configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy +#| msgid "Profile configuration" +msgid "File containing profile configuration" +msgstr "Configurácia profilu" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Display the properties of a Certificate Profile." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy +#| msgid "Profile configuration" +msgid "Write profile configuration to file" +msgstr "Configurácia profilu" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Remove users that can manage this token." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +#, fuzzy +#| msgid "Zone name (FQDN)" +msgid "Hostname (FQDN)" +msgstr "Názov zóny (FQDN)" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "IPA server role name" +msgid "Remote server name" +msgstr "Názov role servera" + +#, fuzzy +#| msgid "IPA server role name" +msgid "Remote IPA server hostname" +msgstr "Názov role servera" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add a manager to the stage user entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove a manager to the stage user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for topology suffixes." +msgstr "Vyhľadávať skupiny." + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add a manager to the user entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove a manager to the user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Global forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " +"formátu \"IP_ADRESA port PORT\" pre každý forwarder " + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +#, fuzzy +#| msgid "SSH public key" +msgid "KEY Public Key" +msgstr "Verejný SSH kľúč" + +#, fuzzy +#| msgid "SSH public key" +msgid "Public Key" +msgstr "Verejný SSH kľúč" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "NSEC Next Domain Name" +msgstr "NIS doménové meno" + +#, fuzzy +#| msgid "Domain name" +msgid "Next Domain Name" +msgstr "Doménové meno" + +msgid "NSEC Type Map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "Typ" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "Signature Expiration" +msgstr "Vypršanie hesla" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +#, fuzzy +#| msgid "ID View Name" +msgid "SIG Signer's Name" +msgstr "Názov ID View" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +#, fuzzy +#| msgid "SOA record serial number" +msgid "SOA record class" +msgstr "Sériové číslo SOA záznamu" + +#, fuzzy +#| msgid "" +#| "Global forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " +"formátu \"IP_ADRESA port PORT\" pre každý forwarder " + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "Príkaz nie je implementovaný" + +#, fuzzy +#| msgid "Identity" +msgid "Quantity" +msgstr "Identita" + +#, fuzzy +#| msgid "Search for existing certificates." +msgid "Search for entitlement accounts." +msgstr "Vyhľadávanie existujúcich certifikátov." + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "Retrieve the entitlement certs." +msgstr "Získať existujúci certifikát." + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "Import an entitlement certificate." +msgstr "Získať existujúci certifikát." + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "Používateľské meno" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "Príkaz nie je implementovaný" + +#, fuzzy +#| msgid "Reset Password" +msgid "Registration password" +msgstr "Obnoviť heslo" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Source Host Groups" +msgstr "Vyhľadávať skupiny." + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +#, fuzzy +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +#, fuzzy +#| msgid "Member of a group" +msgid "Target members of a group" +msgstr "Členom skupiny" + +#, fuzzy +#| msgid "User group ACI grants access to" +msgid "User group to apply permissions to" +msgstr "ACI používateľskej skupiny udeluje prístup k" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission type" +msgstr "Povolenie" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +#, fuzzy +#| msgid "Active Directory domain with POSIX attributes" +msgid "Active directory domain administrator's password" +msgstr "Active Directory doména s POSIX attribútmy" + +#, fuzzy +#| msgid "GECOS" +msgid "GECOS field" +msgstr "GECOS" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"Sémantika DNS forwarderov je zmenená od IPA 4.0.\n" +"Pravdepodobne ste chceli použiť (dnsforwardzone-*).\n" +"Pre viac informácií prosím prečítajte dokumentáciu." + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"DNSSEC podpora je experimentálna.\n" +"%(additional_info)s" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s'voľba je zastaraná. %(additional_info)s" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Sémantika %(label)s bola zmenená. %(current_behavior)s\n" +"%(hint)s" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS server %(server)s: %(error)s." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS server %(server)s nepodporuje DNSSEC: %(error)s.\n" +"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS server %(server)s nepodporuje EDNS0 (RFC 6891): %(error)s.\n" +"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"DNSSEC validácia zlyhala: %(error)s.\n" +"Prosím overte Vašu DNSSEC konfiguráciu alebo deaktivujte DNSSEC validáciu na " +"všetkých IPA serveroch." + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' príkaz je zastaraný %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, fuzzy, python-format +#| msgid "Account disabled" +msgid "%(count)d variables" +msgstr "Účet deaktivovaný" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +msgid "Passwords do not match!" +msgstr "Heslá sa nezhodujú!" + +msgid "No matching entries found" +msgstr "Nenašli sa žiadne zhodné položky" + +msgid "Topic or Command" +msgstr "Téma alebo príkaz" + +#, fuzzy +#| msgid "Topic or Command" +msgid "The topic or command name." +msgstr "Téma alebo príkaz" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Topic commands:" +msgstr "Téma alebo príkaz" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "Názov príkazu" + +msgid "Positional arguments" +msgstr "Pozičný argument" + +#, python-format +msgid "Same as --%s" +msgstr "Rovnaké ako --%s" + +msgid "Deprecated options" +msgstr "Zastarané voľby" + +#, fuzzy +#| msgid "Failed to add" +msgid "No file to read" +msgstr "Zlyhalo pridanie" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "Výsledky sú skrátené, vyskúšajte viac špecifické vyhľadávanie" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Neznáma voľba: %(option)s" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "neznáma chyba %(code)d od %(server)s: %(error)s" + +msgid "an internal error has occurred" +msgstr "nastala interná chyba" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "nastala interná chyba na serveri '%(server)s'" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "neznámy príkaz '%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "chyba na serveri '%(server)s': %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "nedá sa pripojiť k '%(uri)s': %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Služba '%(service)s' nenájdená v Kerberos databáze" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +#, fuzzy +#| msgid "Validation error" +msgid "Session error" +msgstr "Chyba validácie" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Nedostatočný prístup: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' je požadované" + +#, fuzzy, python-format +#| msgid "Invalid JSON-RPC request: %(error)s" +msgid "invalid '%(name)s': %(error)s" +msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "Heslá sa nezhodujú" + +msgid "Command not implemented" +msgstr "Príkaz nie je implementovaný" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "Klient nie je nakonfigurovaný. Spustite ipa-client-install." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Nie je možné interaktívne získať %(name)s" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "Doména '%(domain)s' nie je koreňovou doménou pre les '%(forest)s'" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Táto položka už existuje" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "Tento príkaz vyžaduje root oprávnenia" + +msgid "This is already a posix group" +msgstr "Toto už je posix skupina" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +#, fuzzy +#| msgid "This entry is already disabled" +msgid "This entry is already enabled" +msgstr "Táto položka bola už deaktivovaná" + +msgid "This entry is already disabled" +msgstr "Táto položka bola už deaktivovaná" + +msgid "This entry cannot be enabled or disabled" +msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" + +msgid "This entry is not a member" +msgstr "Táto položka nie je členom" + +msgid "A group may not be a member of itself" +msgstr "Skupina nemože byť členom seba samej" + +msgid "This entry is already a member" +msgstr "Táto položka už je členom" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 dekódovanie zlyhalo: %(reason)s" + +#, fuzzy +#| msgid "A group may not be a member of itself" +msgid "A group may not be added as a member of itself" +msgstr "Skupina nemože byť členom seba samej" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "The default users group cannot be removed" +msgstr "Certifikačné profily nemôžu byť premenované" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s' nemá certifikát." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s neobsahuje '%(value)s'" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +#, fuzzy +#| msgid "This entry is already a member" +msgid "This group already allows external members" +msgstr "Táto položka už je členom" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, fuzzy, python-format +#| msgid "request failed with HTTP status %d" +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "požiadavka zlyhala s HTTP stavom %d" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(attr)s does not contain '%(value)s'" +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s neobsahuje '%(value)s'" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "zmena spôsobila kolíziu s inou zmenou" + +msgid "no modifications to be performed" +msgstr "žiadne úpravy neboli vykonané" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, fuzzy +#| msgid "options are not allowed" +msgid "modifying primary key is not allowed" +msgstr "voľby nie sú povolené" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Len jedna hodnota je povolená." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Nesprávna syntax." + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Zlý vyhľadávací filter %(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "Nakonfigurovaný časový limit bol dosiahnutý" + +msgid "Configured size limit exceeded" +msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" + +#, fuzzy +#| msgid "Configured size limit exceeded" +msgid "Configured administrative server limit exceeded" +msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Chyba formátu certifikátu: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Chyba formátu certifikátu: %(error)s" + +msgid "Already registered" +msgstr "" + +msgid "Not registered yet" +msgstr "" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s nemôže byť odstránené pretože %(label)s %(dependent)s to vyžaduje" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s nemôže byť odstránené alebo deaktivované pretože je to posledný člen " +"%(label)s %(container)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s nemôže byť ostránené/upravené: %(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "%(name)s certifikát nie je platný" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "DNS kontrola zlyhala: Očakávané {%(expected)s} prijaté {%(got)s}" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "Nesprávný typ" + +msgid "Only one value is allowed" +msgstr "Len jedna hodnota je povolená" + +msgid "this option is deprecated" +msgstr "táto voľba je zastaraná" + +msgid "must be True or False" +msgstr "musí byť True alebo False" + +msgid "must be an integer" +msgstr "musí byť integer" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "musí byť najmenej %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "môže byť najviac %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "musí byť desiatkové číslo" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "musí byť najmenej %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "môže byť najviac %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "musí byť binárny údaj" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minlength)d bytes" +msgstr "musí byť najmenej %(minvalue)d" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(maxlength)d bytes" +msgstr "môže byť najviac %(maxvalue)d" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "must be a certificate" +msgstr "Revokácia certifikátu." + +#, fuzzy +#| msgid "Certificate requested" +msgid "must be a certificate signing request" +msgstr "Certifikačná požiadavka" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "musí byť Unicode text" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Počiatočné a koncové medzery nie sú povolené" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)d" +msgid "must be at least %(minlength)d characters" +msgstr "musí byť najmenej %(minvalue)d" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(maxlength)d characters" +msgstr "môže byť najviac %(maxvalue)d" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Found '%(value)s'" +msgid "must be '%(value)s'" +msgstr "Nájdené '%(value)s'" + +#, fuzzy, python-format +#| msgid "must be at least %(minvalue)s" +msgid "must be one of %(values)s" +msgstr "musí byť najmenej %(minvalue)s" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be datetime value" +msgstr "musí byť najmenej %(minvalue)d" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be DNS name" +msgstr "musí byť integer" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be absolute" +msgstr "musí byť integer" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be relative" +msgstr "musí byť True alebo False" + +#, fuzzy +#| msgid "must be binary data" +msgid "must be dictionary" +msgstr "musí byť binárny údaj" + +msgid "must be Kerberos principal" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Malformed principal: '%(value)s'" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy +#| msgid "New password is required" +msgid "Service principal is required" +msgstr "Nové heslo je povinné" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(filename)s: file not found" +msgstr "Súbor %(file)s nenájdený" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Permission settings" +msgid "Permission denied: %(file)s" +msgstr "Nastavenia oprávnenia" + +msgid "empty DNS label" +msgstr "prázdny DNS label" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS label nemôže byť dlhší ako 63 znakov" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"povolené sú len písmená, čísla, %(chars)s . DNS label nesmie začínať alebo " +"končiť s %(chars2)s" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "príliš mnoho '@' znakov" + +#, fuzzy +#| msgid "DNS label cannot be longer that 63 characters" +msgid "cannot be longer that {} characters" +msgstr "DNS label nemôže byť dlhší ako 63 znakov" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "nie je plne kvalifikované (FQDN)" + +msgid "invalid SSH public key" +msgstr "neplatný verejný SSH kľúč" + +msgid "options are not allowed" +msgstr "voľby nie sú povolené" + +#, fuzzy +#| msgid "invalid domain name" +msgid "invalid hostmask" +msgstr "neplatné doménové meno" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "dotaz '%(owner)s %(rtype)s': %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "dotaz '%(owner)s %(rtype)s' s EDNS0: %(error)s" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"záznam '%(owner)s %(rtype)s' neprešiel DNSSEC validáciou na serveri %(ip)s" + +msgid "invalid escape code in domain name" +msgstr "neplatný escape kód v doménovom mene" + +msgid "domain name cannot be longer than 255 characters" +msgstr "doménové meno nemôže byť dlhšie ako 255 znakov" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS label nemôže byť dlhší ako 63 znakov" + +msgid "invalid domain name" +msgstr "neplatné doménové meno" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" +"doménové meno '%(domain)s' by malo byť normalizované na: %(normalized)s" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "neplatné doménové meno: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "neplatná verzia IP adresy (je %(value)d, musí byť %(required_value)d)!" + +msgid "invalid IP address format" +msgstr "neplatný formát IP adresy" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s nie je platný port" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Retrieving CA status failed: %s" +msgid "Retrieving CA cert chain failed: %s" +msgstr "Získanie CA stavu zlyhalo: %s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "požiadavka zlyhala s HTTP stavom %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Získanie CA stavu zlyhalo: %s" + +#, fuzzy, python-format +#| msgid "Retrieving CA status failed: %s" +msgid "Retrieving CA status failed with status %d" +msgstr "Získanie CA stavu zlyhalo: %s" + +#, python-format +msgid "objectclass %s not found" +msgstr "objectclass %s nenájdená" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "Replication agreement for %(hostname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +#, fuzzy +#| msgid "Authentication" +msgid "automount location" +msgstr "Autentifikácia" + +#, fuzzy +#| msgid "locations" +msgid "automount locations" +msgstr "lokality" + +#, fuzzy +#| msgid "IPA Locations" +msgid "Automount Locations" +msgstr "IPA lokality" + +#, fuzzy +#| msgid "Authentication" +msgid "Automount Location" +msgstr "Autentifikácia" + +#, fuzzy, python-format +#| msgid "Added IPA location \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted IPA location \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" +msgstr "Odstránená IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy +#| msgid "Automount" +msgid "automount map" +msgstr "Automount" + +#, fuzzy +#| msgid "Automount" +msgid "automount maps" +msgstr "Automount" + +#, fuzzy +#| msgid "Automount" +msgid "Automount Maps" +msgstr "Automount" + +#, fuzzy +#| msgid "Automount" +msgid "Automount Map" +msgstr "Automount" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified automount map \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy +#| msgid "Automount" +msgid "Automount key object." +msgstr "Automount" + +#, fuzzy +#| msgid "Automount" +msgid "automount key" +msgstr "Automount" + +#, fuzzy +#| msgid "Automount" +msgid "automount keys" +msgstr "Automount" + +#, fuzzy +#| msgid "Automount" +msgid "Automount Keys" +msgstr "Automount" + +#, fuzzy +#| msgid "Automount" +msgid "Automount Key" +msgstr "Automount" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "key %(key)s already exists" +msgid "key named %(key)s already exists" +msgstr "kľúč %(key)s už existuje" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added automember rule \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added automember rule \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted automember rule \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified OTP token \"%(value)s\"" +msgid "Modified automount key \"%(value)s\"" +msgstr "Upravený OTP token \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "nevalídne ID profilu" + +msgid "Certificate Profile" +msgstr "Certifikačný profil" + +msgid "Certificate Profiles" +msgstr "Certifikačné profily" + +msgid "Profile configuration" +msgstr "Configurácia profilu" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Certificate profiles cannot be renamed" +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Certifikačné profily nemôžu byť premenované" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Certificate profiles cannot be renamed" +msgstr "Certifikačné profily nemôžu byť premenované" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +#, fuzzy +#| msgid "User categories" +msgid "CA category" +msgstr "Kategórie používateľov" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted CA ACL \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "Odstránené CA ACL \"%(value)s\"" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Odstránené CA ACL \"%(value)s\"" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Disabled CA ACL \"%(value)s\"" +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Deaktivované CA ACL \"%(value)s\"" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Deaktivované CA ACL \"%(value)s\"" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, fuzzy, python-format +#| msgid "Search for groups." +msgid "%i users or groups added." +msgstr "Vyhľadávať skupiny." + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i service added." +msgstr "Názov služby" + +#, fuzzy, python-format +#| msgid "Service name" +msgid "%i services added." +msgstr "Názov služby" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +#, fuzzy +#| msgid "Delete a CA ACL." +msgid "Add CAs to a CA ACL." +msgstr "Odstrániť CA ACL." + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +#, fuzzy +#| msgid "Add new DNS resource record." +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "Pridať nový DNS záznam" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "EXAMPLES:\n" +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"PRÍKLADY:\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all locations:\n" +#| " ipa location-find\n" +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "neplatný formát IP siete" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "neplatný formát adresy" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "algoritmus: hodnota má povolený interval 0-255" + +msgid "flags value: allowed interval 0-255" +msgstr "flagy: hodnota má povolený interval 0-255" + +msgid "iterations value: allowed interval 0-65535" +msgstr "iterácie: hodnota má povolený interval 0-65535" + +#, python-format +msgid "salt value: %(err)s" +msgstr "salt hodnota: %(err)s" + +msgid "invalid domain-name: not fully qualified" +msgstr "neplatné doménové meno: nie je plne kvalifikované (FQDN)" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "DNS zóna %(zone)s nenájdená" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "%s záznam" + +#, fuzzy, python-format +#| msgid "%s record" +msgid "Raw %s records" +msgstr "%s záznam" + +#, python-format +msgid "%s Record" +msgstr "%s záznam" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(pozrite RFC %s pre viac detailov)" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "Vytvoriť reverzný" + +#, fuzzy, python-format +#| msgid "Cannot read file '%(filename)s': %(exc)s" +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "Nie je možné čítať súbor '%(filename)s': %(exc)s" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +#, fuzzy +#| msgid "Priority" +msgid "Priority (order)" +msgstr "Priorita" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" + +#, fuzzy +#| msgid "permission" +msgid "Managedby permission" +msgstr "povolenie" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "Len jedna hodnota je povolená" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "key %(key)s already exists" +msgid "permission \"%(value)s\" already exists" +msgstr "kľúč %(key)s už existuje" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed system permission \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "DNS zone" +msgstr "DNS zóna" + +msgid "DNS zones" +msgstr "DNS zóny" + +msgid "DNS Zones" +msgstr "DNS zóny" + +msgid "DNS Zone" +msgstr "DNS zóna" + +#, fuzzy +#| msgid "Default attributes" +msgid "Default time to live" +msgstr "Predvolené atribúty" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +#, fuzzy +#| msgid "Authoritative nameserver" +msgid "setting Authoritative nameserver" +msgstr "Autoritatívny nameserver" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +#, fuzzy +#| msgid "IPA DNS version" +msgid "" +msgstr "Verzia IPA DNS" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Odstránená DNS zóna \"%(value)s\"" + +msgid "is required" +msgstr "je povinné" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Deaktivovaná DNS zóna \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Disabled DNS zone \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Deaktivovaná DNS zóna \"%(value)s\"" + +#, fuzzy +#| msgid "DNS resource record type" +msgid "DNS resource record" +msgstr "Typ DNS záznamu" + +#, fuzzy +#| msgid "DNS resource record type" +msgid "DNS resource records" +msgstr "Typ DNS záznamu" + +#, fuzzy +#| msgid "DNS resource record type" +msgid "DNS Resource Records" +msgstr "Typ DNS záznamu" + +#, fuzzy +#| msgid "DNS resource record type" +msgid "DNS Resource Record" +msgstr "Typ DNS záznamu" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "DNS zone root record cannot be renamed" +msgstr "Certifikačné profily nemôžu byť premenované" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Odstránený záznam \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "IPA CA cannot be deleted" +msgid "Zone record '%s' cannot be deleted" +msgstr "IPA CA nemôže byť odstránené" + +#, python-format +msgid "Found '%(value)s'" +msgstr "Nájdené '%(value)s'" + +#, fuzzy, python-format +#| msgid "DNS zone %(zone)s not found" +msgid "Host '%(host)s' not found" +msgstr "DNS zóna %(zone)s nenájdená" + +msgid "DNS configuration options" +msgstr "DNS konfiguračné voľby" + +msgid "DNS Global Configuration" +msgstr "DNS globálne nastavenia" + +msgid "IPA DNS version" +msgstr "Verzia IPA DNS" + +#, fuzzy +#| msgid "DNS server" +msgid "IPA DNS servers" +msgstr "DNS server" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "Globálna DNS konfigurácia je prázdna," + +msgid "DNS forward zone" +msgstr "DNS forward zóna" + +msgid "DNS forward zones" +msgstr "DNS forward zóny" + +msgid "DNS Forward Zones" +msgstr "DNS forward zóny" + +msgid "DNS Forward Zone" +msgstr "DNS forward zóna" + +msgid "Please specify forwarders." +msgstr "Prosím špecifikujte forwardery." + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Odstránená DNS forward zóna \"%(value)s\"" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Deaktivovaná DNS forward zóna \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Disabled DNS forward zone \"%(value)s\"" +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Deaktivovaná DNS forward zóna \"%(value)s\"" + +msgid "IPA DNS records" +msgstr "IPA DNS záznamy" + +#, fuzzy +#| msgid "IPA location name" +msgid "IPA location records" +msgstr "Názov IPA lokality" + +msgid "Update location and IPA server DNS records" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Result of the command" +msgstr "sudo príkazy" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "RADIUS proxy konfigurácia" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manipulate DNS locations\n" +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Narábanie s DNS lokalitami\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "DNS server" + +#, fuzzy +#| msgid "DNS server" +msgid "DNS servers" +msgstr "DNS server" + +#, fuzzy +#| msgid "DNS server" +msgid "DNS Servers" +msgstr "DNS server" + +#, fuzzy +#| msgid "DNS server" +msgid "DNS Server" +msgstr "DNS server" + +#, fuzzy +#| msgid "Service name" +msgid "DNS Server name" +msgstr "Názov služby" + +msgid "SOA mname override" +msgstr "" + +#, fuzzy +#| msgid "Authoritative nameserver domain name" +msgid "SOA mname (authoritative server) override" +msgstr "Doménové meno autoritatívneho nameservera" + +msgid "Forwarders" +msgstr "Forwardery" + +#, fuzzy +#| msgid "" +#| "Global forwarders. A custom port can be specified for each forwarder " +#| "using a standard format \"IP_ADDRESS port PORT\"" +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " +"formátu \"IP_ADRESA port PORT\" pre každý forwarder " + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Modify CA configuration." +msgid "Modify DNS server configuration" +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +msgid "Search for DNS servers." +msgstr "Vyhľadať DNS servery" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "IPA DNS version" +msgid "IPA DNS Server is not installed" +msgstr "Verzia IPA DNS" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display configuration of a DNS server." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new DNS server." +msgstr "Pridať novú HBAC službu." + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy +#| msgid "Delete a user" +msgid "Delete a DNS server" +msgstr "Odstrániť používateľa" + +#, fuzzy, python-format +#| msgid "Deleted DNS zone \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Odstránená DNS zóna \"%(value)s\"" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC služby" + +msgid "HBAC Services" +msgstr "HBAC služby" + +msgid "HBAC Service" +msgstr "HBAC služba" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "HBAC service" +msgid "HBAC service group" +msgstr "HBAC služba" + +#, fuzzy +#| msgid "HBAC services" +msgid "HBAC service groups" +msgstr "HBAC služby" + +#, fuzzy +#| msgid "HBAC Services" +msgid "HBAC Service Groups" +msgstr "HBAC služby" + +#, fuzzy +#| msgid "HBAC Service" +msgid "HBAC Service Group" +msgstr "HBAC služba" + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Stage users" +msgid "Stage Users" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "Stage users" +msgid "Stage User" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "Stage users" +msgid "stage user" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "Stage users" +msgid "stage users" +msgstr "Predpripravení používatelia" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "givenname is required" +msgstr "'%(name)s' je požadované" + +#, fuzzy +#| msgid "is required" +msgid "sn is required" +msgstr "je povinné" + +#, fuzzy, python-format +#| msgid "can be at most %(maxvalue)d" +msgid "can be at most %(len)d characters" +msgstr "môže byť najviac %(maxvalue)d" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Entry %s not found" +msgid "Entry RDN is not 'uid'" +msgstr "Položka %s nenájdená" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "key %(key)s already exists" +msgid "active user with name \"%(user)s\" already exists" +msgstr "kľúč %(key)s už existuje" + +#, fuzzy, python-format +#| msgid "Stage users" +msgid "Stage user %s activated" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all locations:\n" +#| " ipa location-find\n" +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +#, fuzzy +#| msgid "Segment details" +msgid "segments" +msgstr "Detaily segmentu" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "value" +msgid "%(value)s" +msgstr "hodnota" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "host groups" +msgstr "skupiny" + +#, fuzzy +#| msgid "User Group" +msgid "Host Group" +msgstr "Používateľská skupina" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy +#| msgid "group" +msgid "hostgroup" +msgstr "skupina" + +#, fuzzy +#| msgid "No private group" +msgid "privileged hostgroup" +msgstr "Bez privátnej skupiny" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage YubiKey tokens.\n" +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Spravovať YubiKey tokeny.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +#, fuzzy +#| msgid "Continue" +msgid "Vault Container" +msgstr "Pokračovať" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +#, fuzzy +#| msgid "Delete a user" +msgid "Deleted vault container" +msgstr "Odstrániť používateľa" + +#, fuzzy, python-format +#| msgid "Owner" +msgid "owner %s" +msgstr "Vlastník" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "Modify a vault." +msgid "Add a vault." +msgstr "Upraviť vault." + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy +#| msgid "Profile configuration" +msgid "Vault configuration" +msgstr "Configurácia profilu" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA KRA servers" +msgstr "IPA Server" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added automember rule \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "groups" +msgid "netgroups" +msgstr "skupiny" + +#, fuzzy +#| msgid "groups" +msgid "Netgroups" +msgstr "skupiny" + +#, fuzzy +#| msgid "group" +msgid "Netgroup" +msgstr "skupina" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added netgroup \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified netgroup \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "One Time Password" +msgid "One time password commands" +msgstr "Jednorázové heslo (OTP)" + +msgid "OTP configuration options" +msgstr "OTP konfiguračné voľby" + +msgid "OTP Configuration" +msgstr "OTP konfigurácia" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Zmenené heslo pre \"%(value)s\"" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "RADIUS Proxy Server Settings" +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "RADIUS Proxy serverové nastavenia" + +#, fuzzy +#| msgid "RADIUS Proxy Server Settings" +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "RADIUS Proxy serverové nastavenia" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete location:\n" +#| " ipa location-del location\n" +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" msgstr "" "\n" " Odstránenie lokality:\n" " ipa location-del lokalita\n" +#, fuzzy +#| msgid "invalid domain name" +msgid "invalid attribute name" +msgstr "neplatné doménové meno" + +#, fuzzy +#| msgid "invalid domain name" +msgid "invalid port number" +msgstr "neplatné doménové meno" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy server" +msgstr "RADIUS proxy používateľské meno" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS proxy servers" +msgstr "RADIUS proxy používateľské meno" + +#, fuzzy +#| msgid "RADIUS Proxy Server Settings" +msgid "RADIUS Servers" +msgstr "RADIUS Proxy serverové nastavenia" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Server" +msgstr "IPA Server" + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Deleted ACI \"%(value)s\"" +msgid "A list of ACI values" +msgstr "Odstránené ACI \"%(value)s\"" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "is required" +msgid "ACI prefix is required" +msgstr "je povinné" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "Entry %s does not exist" +msgid "Group '%s' does not exist" +msgstr "Položka %s neexistuje" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Syntax Error: %(error)s" +msgstr "Chyba formátu certifikátu: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "neplatné DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI s názvom \"%s\" nenájdené" + +#, fuzzy +#| msgid "IPA object" +msgid "ACI object." +msgstr "IPA objekt" + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Vytvorené ACI \"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Odstránené ACI \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "Vytvorené ACI \"%(value)s\"" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "musí byť najmenej %(minvalue)d" + +msgid "configuration options" +msgstr "konfiguračné voľby" + +msgid "Configuration" +msgstr "Konfigurácia" + +msgid "Maximum hostname length" +msgstr "" + +#, fuzzy +#| msgid "IPA trust" +msgid "IPA masters" +msgstr "IPA trust" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA CA servers" +msgstr "IPA Server" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "IPA DNS version" +msgid "Hidden IPA DNS servers" +msgstr "Verzia IPA DNS" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "voľby nie sú povolené" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "neplatné doménové meno: %s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +#, fuzzy +#| msgid "Entry %s does not exist" +msgid "The group doesn't exist" +msgstr "Položka %s neexistuje" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%s\" not allowed" +msgstr "voľby nie sú povolené" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "chyba na serveri '%(server)s': %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "skupiny" + +msgid "User Group" +msgstr "Používateľská skupina" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy +#| msgid "No private group" +msgid "privileged group" +msgstr "Bez privátnej skupiny" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Not a managed group" +msgstr "Vytvoriť novú skupinu." + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Permissions\n" +msgstr "Povolenia" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +#, fuzzy +#| msgid "A SYSTEM permission may not be modified or removed" +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "permission" +msgid "" +"\n" +"Managed permissions\n" +msgstr "povolenie" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "must be enclosed in parentheses" +msgstr "musí byť integer" + +#, fuzzy, python-format +#| msgid "\"%s\" is not a valid permission type" +msgid "\"%s\" is not an object type" +msgstr "\"%s\" nie je platný typ povolenia" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\" nie je platný typ povolenia" + +#, fuzzy, python-format +#| msgid "Deprecated options" +msgid "Deprecated; use %s" +msgstr "Zastarané voľby" + +#, fuzzy, python-format +#| msgid "A SYSTEM permission may not be modified or removed" +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" + +#, python-format +msgid "Entry %s not found" +msgstr "Položka %s nenájdená" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "ACI pre oprávnenie %(name)s sa nenašlo v %(dn)s " + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "%s: skupina nenájdená" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "Bad search filter %(info)s" +msgid "Bad search filter" +msgstr "Zlý vyhľadávací filter %(info)s" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Položka %s neexistuje" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI pre oprávnenie %s sa nenašlo" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified permission \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP tokeny\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Manage YubiKey tokens.\n" +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Spravovať YubiKey tokeny.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "OTP token" + +msgid "OTP tokens" +msgstr "OTP tokeny" + +msgid "OTP Tokens" +msgstr "OTP tokeny" + +msgid "OTP Token" +msgstr "OTP token" + +msgid "URI" +msgstr "URI" + +#, fuzzy, python-format +#| msgid "Modified OTP token \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "Upravený OTP token \"%(value)s\"" + +#, fuzzy +#| msgid "IPA CA cannot be deleted" +msgid "cannot be empty" +msgstr "IPA CA nemôže byť odstránené" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Odstránený OTP token \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Upravený OTP token \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "" +"\n" +"Sudo Rules\n" +msgstr "Sudo pravidlá" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +#, fuzzy +#| msgid "this option is deprecated" +msgid "this option has been deprecated." +msgstr "táto voľba je zastaraná" + +msgid "sudo rules" +msgstr "sudo pravidlá" + +msgid "Sudo Rules" +msgstr "Sudo pravidlá" + +#, fuzzy +#| msgid "Sudo Rules" +msgid "Sudo Rule" +msgstr "Sudo pravidlá" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added HBAC rule \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, fuzzy, python-format +#| msgid "Deleted HBAC rule \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Odstránené HBAC pravidlo \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified HBAC rule \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +#, fuzzy +#| msgid "Users" +msgid "users" +msgstr "Používatelia" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Príkazy" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Príkazy" + +msgid "runAs user" +msgstr "" + +#, fuzzy +#| msgid "Preserved users" +msgid "runAs users" +msgstr "Uschovaní používatelia" + +#, fuzzy +#| msgid "groups" +msgid "group runAs" +msgstr "skupiny" + +#, fuzzy +#| msgid "groups" +msgid "runAs groups" +msgstr "skupiny" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command" +msgstr "sudo príkazy" + +msgid "sudo commands" +msgstr "sudo príkazy" + +msgid "Sudo Commands" +msgstr "Sudo príkazy" + +#, fuzzy, python-format +#| msgid "Added IPA location \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted DNS zone \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Odstránená DNS zóna \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command group" +msgstr "sudo príkazy" + +#, fuzzy +#| msgid "sudo commands" +msgid "sudo command groups" +msgstr "sudo príkazy" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +#, fuzzy +#| msgid "Realm Domains" +msgid "Realm domains" +msgstr "Realm domény" + +msgid "Realm Domains" +msgstr "Realm domény" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +#, fuzzy +#| msgid "IPA CA cannot be deleted" +msgid "IPA server domain cannot be omitted" +msgstr "IPA CA nemôže byť odstránené" + +#, fuzzy +#| msgid "IPA CA cannot be deleted" +msgid "IPA server domain cannot be deleted" +msgstr "IPA CA nemôže byť odstránené" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "nastavenia kerberos ticket policy" + +#, fuzzy +#| msgid "kerberos ticket policy settings" +msgid "Kerberos Ticket Policy" +msgstr "nastavenia kerberos ticket policy" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy username" +msgid "RADIUS max renew" +msgstr "RADIUS proxy používateľské meno" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"IPA lokality\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Narábanie s DNS lokalitami\n" + msgid "" "\n" " Find all locations:\n" @@ -52,104 +17855,81 @@ msgstr "" msgid "" "\n" -"EXAMPLES:\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" msgstr "" "\n" -"PRÍKLADY:\n" +" Pridanie lokality:\n" +" ipa location-add lokalita --description 'Moja lokalita'\n" msgid "" "\n" -"IPA locations\n" +" Delete location:\n" +" ipa location-del location\n" msgstr "" "\n" -"IPA lokality\n" +" Odstránenie lokality:\n" +" ipa location-del lokalita\n" -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Spravovať YubiKey tokeny.\n" +msgid "location" +msgstr "lokalita" -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Narábanie s DNS lokalitami\n" +msgid "locations" +msgstr "lokality" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP tokeny\n" +msgid "IPA Locations" +msgstr "IPA lokality" -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"YubiKey Tokeny\n" +msgid "IPA Location" +msgstr "IPA lokalita" + +msgid "Location name" +msgstr "Názov lokality" + +msgid "IPA location name" +msgstr "Názov IPA lokality" + +msgid "IPA Location description" +msgstr "Popis IPA lokality" + +msgid "Servers" +msgstr "Servery" + +msgid "Servers that belongs to the IPA location" +msgstr "Servery patriace do IPA lokality" + +msgid "Advertised by servers" +msgstr "Oznamované servermi" + +msgid "List of servers which advertise the given location" +msgstr "Zoznam serverov oznamujúcich danú lokalitu" + +msgid "Add a new IPA location." +msgstr "Pridať novú IPA lokalitu." #, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\" nie je platný typ povolenia" +msgid "Added IPA location \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "${count} certifikátov prítomných" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} položiek odstránených" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} item(s) deaktivovaných" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} položiek odstránneých" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} option(s) odstránených" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} používateľov obnovených" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} users(s) predpripravených" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Nastavenia pre ${entity} ${primary_key}" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} je členom:" +msgid "Delete an IPA location." +msgstr "Odstrániť IPA lokalitu." #, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s neobsahuje '%(value)s'" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Odstránená IPA lokalita \"%(value)s\"" + +msgid "IPA Server" +msgstr "IPA Server" + +msgid "Modify information about an IPA location." +msgstr "Upraviť informácie o IPA lokalite." #, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Nesprávna syntax." +msgid "Modified IPA location \"%(value)s\"" +msgstr "Upravená IPA lokalita \"%(value)s\"" -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Len jedna hodnota je povolená." - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" +msgid "Search for IPA locations." +msgstr "Vyhľadať IPA lokalitu." #, python-format msgid "%(count)d IPA location matched" @@ -158,106 +17938,3196 @@ msgstr[0] "%(count)d IPA lokalita nájdená" msgstr[1] "%(count)d IPA lokalít nájdených" msgstr[2] "%(count)d IPA lokalít nájdených" -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" +msgid "Display information about an IPA location." +msgstr "Zobraziť informácie o IPA lokalite." -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" +msgid "Servers in location" +msgstr "Servery v lokalite." -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s nemôže byť odstránené pretože %(label)s %(dependent)s to vyžaduje" - -#, python-format +#, fuzzy +#| msgid "LDAP schema" msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" +"\n" +"API Schema\n" +msgstr "LDAP schéma" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" msgstr "" -"%(key)s nemôže byť odstránené alebo deaktivované pretože je to posledný člen " -"%(label)s %(container)s" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Show specific location:\n" +#| " ipa location-show location\n" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Zobrazenie špecifickej lokality:\n" +" ipa location-show lokalita\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "Názov" + +#, fuzzy +#| msgid "Authentication" +msgid "Documentation" +msgstr "Autentifikácia" + +msgid "Exclude from" +msgstr "" + +#, fuzzy +#| msgid "Included attributes" +msgid "Include in" +msgstr "Zahrnuté atribúty" #, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s nemôže byť ostránené/upravené: %(reason)s" +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" -#, python-format -msgid "%(line)s" -msgstr "%(line)s" +msgid "Help topic" +msgstr "" -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s certifikát nie je platný" +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Povolenie" -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" nenájdené" +msgid "Parameters" +msgstr "" -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Record name" +msgid "Method name" +msgstr "Názov záznamu" #, python-format msgid "%(pkey)s: %(oname)s not found" msgstr "%(pkey)s: %(oname)s nenájdený" -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s nie je platný port" +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a command." +msgstr "Zobraziť informácie o IPA lokalite." -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for commands." +msgstr "Vyhľadať sudo príkazy." -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s nie je POSIX užívateľ" +msgid "Return command defaults" +msgstr "" -#, python-format -msgid "%s Record" -msgstr "%s záznam" +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a class." +msgstr "Zobraziť informácie o IPA lokalite." -#, python-format -msgid "%s record" -msgstr "%s záznam" +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "Search for classes." +msgstr "Vyhľadať HBAC pravidlá." -#, python-format -msgid "%s: group not found" -msgstr "%s: skupina nenájdená" +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "Display information about a help topic." +msgstr "Zobraziť informácie o IPA lokalite." -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: používateľ je už uschovaný" +#, fuzzy +#| msgid "Search for groups." +msgid "Search for help topics." +msgstr "Vyhľadávať skupiny." + +msgid "Required" +msgstr "Povinné" + +#, fuzzy +#| msgid "value" +msgid "Multi-value" +msgstr "hodnota" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "ACI názov" + +#, fuzzy +#| msgid "Change password" +msgid "Confirm (password)" +msgstr "Zmeniť heslo" + +msgid "Default" +msgstr "" + +#, fuzzy +#| msgid "Default user group" +msgid "Default from" +msgstr "Predvolená používateľská skupina" + +msgid "Label" +msgstr "" + +#, fuzzy +#| msgid "Advertised by servers" +msgid "Convert on server" +msgstr "Oznamované servermi" + +#, fuzzy +#| msgid "Options" +msgid "Option group" +msgstr "Voľby" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Pozičný argument" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a command parameter." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a command output." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +#| msgid "Search for Sudo Commands." +msgid "Search for command outputs." +msgstr "Vyhľadať sudo príkazy." + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "ID rozsahy" + +msgid "ID Range" +msgstr "ID rozsah" + +#, fuzzy +#| msgid "Local domain" +msgid "local domain range" +msgstr "Lokálna doména" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory domain range" +msgstr "Active Directory doména" + +#, fuzzy +#| msgid "Active Directory domain with POSIX attributes" +msgid "Active Directory trust range with POSIX attributes" +msgstr "Active Directory doména s POSIX attribútmy" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +#, fuzzy +#| msgid "trusted domain object not found" +msgid "Specified trusted domain name could not be found." +msgstr "trust doménový objekt nenájdený" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ID View \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Modify DNS forward zone." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Upraviť DNS forward zónu" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +#, fuzzy +#| msgid "Remove Permission" +msgid "self service permission" +msgstr "Odstrániť povolenie" + +#, fuzzy +#| msgid "Search for permissions." +msgid "self service permissions" +msgstr "Vyhľadať povolenia." + +#, fuzzy +#| msgid "Remove Permission" +msgid "Self Service Permissions" +msgstr "Odstrániť povolenie" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Self Service Permission" +msgstr "Odstrániť povolenie" + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added selfservice \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified selfservice \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "IPA server role name" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Názov role servera" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Role" +msgid "server role" +msgstr "Server rola" + +#, fuzzy +#| msgid "Server Roles" +msgid "server roles" +msgstr "Serverové role" + +#, fuzzy +#| msgid "Server Roles" +msgid "IPA Server Roles" +msgstr "Serverové role" + +#, fuzzy +#| msgid "Server Role" +msgid "IPA Server Role" +msgstr "Server rola" + +msgid "IPA server role name" +msgstr "Názov role servera" + +#, fuzzy +#| msgid "Rule status" +msgid "Role status" +msgstr "Stav pravidla" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +#, fuzzy +#| msgid "IPA server role name" +msgid "Find a server role on a server(s)" +msgstr "Názov role servera" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Included attributes" +msgid "Include IPA master entries" +msgstr "Zahrnuté atribúty" + +#, fuzzy +#| msgid "Roles" +msgid "roles" +msgstr "Role" + +msgid "IPA role name" +msgstr "Názov IPA role" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" #, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "'${port}' nie je valídny port" +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" #, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' príkaz je zastaraný %(additional_info)s" +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux User Map rule" +msgstr "SELinux používateľ" + +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux User Map rules" +msgstr "SELinux používateľ" + +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux User Maps" +msgstr "SELinux používateľ" + +#, fuzzy +#| msgid "SELinux User" +msgid "SELinux User Map" +msgstr "SELinux používateľ" #, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s' nemá certifikát." +msgid "HBAC rule %(rule)s not found" +msgstr "HBAC pravidlo %(rule)s nenájdené" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: rola nenájdená" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Certifikačné autority" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "Získať existujúci certifikát." + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "Nešpecifikované" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +#, fuzzy +#| msgid "Certificate Hold" +msgid " * 6 - certificateHold\n" +msgstr "Držanie certifikátu" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" #, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' je požadované" +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" #, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s'voľba je zastaraná. %(additional_info)s" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "Base-64 zakódovaný certifikát." + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "Certifikát" + +#, fuzzy +#| msgid "CA certificate" +msgid "X.509 certificate chain" +msgstr "CA certifikát" + +msgid "Subject" +msgstr "" + +#, fuzzy +#| msgid "Email address" +msgid "Subject email address" +msgstr "E-mailová adresa" + +msgid "Subject DNS name" +msgstr "" + +#, fuzzy +#| msgid "Street address" +msgid "Subject X.400 address" +msgstr "Ulica" + +#, fuzzy +#| msgid "Home directory" +msgid "Subject directory name" +msgstr "Domovský priečinok" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +#, fuzzy +#| msgid "IP Address" +msgid "Subject IP Address" +msgstr "IP adresa" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +msgid "Subject Kerberos principal name" +msgstr "" + +msgid "Subject Other Name" +msgstr "" + +#, fuzzy +#| msgid "Issue" +msgid "Issuer" +msgstr "Vydať" + +#, fuzzy +#| msgid "Issue" +msgid "Issuer DN" +msgstr "Vydať" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "Sériové číslo (hexadecimálne)" + +#, fuzzy +#| msgid "Rule status" +msgid "Request status" +msgstr "Stav pravidla" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" #, python-format -msgid "(see RFC %s for details)" -msgstr "(pozrite RFC %s pre viac detailov)" +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "Zastarané voľby" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Stav" + +msgid "Revoked" +msgstr "" + +#, fuzzy +#| msgid "Replication configuration" +msgid "Revocation reason" +msgstr "Konfigurácia repliky" + +#, fuzzy +#| msgid "Reason for revoking the certificate (0-10)" +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "Dôvod revokácie certifikátu (0-10)" + +#, fuzzy, python-format +#| msgid "Owner" +msgid "Owner %s" +msgstr "Vlastník" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Certifikát so sériovým číslom %(serial)s vydaný CA '%(ca)s' sa nenašiel" + +#, fuzzy +#| msgid "\"%s\" is not a valid permission type" +msgid "7 is not a valid revocation reason" +msgstr "\"%s\" nie je platný typ povolenia" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Add one or more certificates to the user entry" +msgid "Search for certificates with these owner %s." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Add one or more certificates to the user entry" +msgid "Search for certificates without these owner %s." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy +#| msgid "ID Views" +msgid "ID View" +msgstr "ID Views" + +#, fuzzy +#| msgid "ID Views" +msgid "system ID View" +msgstr "ID Views" + +msgid "ID Views" +msgstr "ID Views" + +#, fuzzy +#| msgid "User categories" +msgid "User object overrides" +msgstr "Kategórie používateľov" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "Nenašlo sa" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "hodnota" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "IPA objekt" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +#| msgid "Add a new ID View." +msgid "Add a new ID override." +msgstr "Pridať nové ID View" + +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy +#| msgid "Delete an ID View." +msgid "Delete an ID override." +msgstr "Odstrániť ID View." + +#, fuzzy, python-format +#| msgid "Deleted ID View \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify an ID override." +msgstr "Upraviť HBAC službu." + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +msgid "ID override" +msgstr "" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "ID overrides cannot be renamed" +msgstr "Certifikačné profily nemôžu byť premenované" + +#, fuzzy +#| msgid "Search for DNS servers." +msgid "Search for an ID override." +msgstr "Vyhľadať DNS servery" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about an ID override." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +#| msgid "User ID Number" +msgid "User ID override" +msgstr "ID používateľa" + +#, fuzzy +#| msgid "User ID Number" +msgid "User ID overrides" +msgstr "ID používateľa" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64 zakódovaný používateľský certifikát" + +#, fuzzy +#| msgid "Group ID Number" +msgid "Group ID override" +msgstr "ID skupiny" + +#, fuzzy +#| msgid "Group ID Number" +msgid "Group ID overrides" +msgstr "ID skupiny" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted ID View \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy, python-format +#| msgid "Added ID View \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted ID View \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Automember Rule" +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "Automember pravidlo" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all locations:\n" +#| " ipa location-find\n" +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "Automember Rule" +msgid "Auto Membership Rule" +msgstr "Automember pravidlo" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" nenájdené" + +#, fuzzy, python-format +#| msgid "%(port)s is not a valid port" +msgid "%s is not a valid attribute." +msgstr "%(port)s nie je platný port" + +#, fuzzy +#| msgid "Added automember rule \"%(value)s\"" +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, fuzzy +#| msgid "Auto member rule: %s not found!" +msgid "Auto Membership is not configured" +msgstr "Automember pravidlo: %s nenájdené!" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added IPA location \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Automember pravidlo: %s nenájdené!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added automember rule \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, fuzzy +#| msgid "Deleted automember rule \"%(value)s\"" +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, fuzzy +#| msgid "Search for HBAC rules." +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "Vyhľadať HBAC pravidlá." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Display information about an IPA location." +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "Úloha obnovenia automember členstva začala" + +msgid "Automember rebuild membership task completed" +msgstr "Úloha obnovenia automember členstva dokončená" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "Automember" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "Certifikačné autority" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "Certifikačná autorita" + +msgid "Certificate Authorities" +msgstr "Certifikačné autority" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "ID autority" + +msgid "Dogtag Authority ID" +msgstr "ID Dogtag autority" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +#, fuzzy +#| msgid "Search for groups." +msgid "Search for CAs." +msgstr "Vyhľadávať skupiny." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "Display the properties of a CA." +msgstr "" + +#, fuzzy +#| msgid "Create a new group." +msgid "Create a CA." +msgstr "Vytvoriť novú skupinu." + +#, fuzzy, python-format +#| msgid "Created ACI \"%(value)s\"" +msgid "Created CA \"%(value)s\"" +msgstr "Vytvorené ACI \"%(value)s\"" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted ACI \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "Odstránené ACI \"%(value)s\"" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "IPA CA nemôže byť odstránené" + +msgid "Must be disabled first" +msgstr "" + +msgid "Modify CA configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +#, fuzzy +#| msgid "Disable a CA ACL." +msgid "Disable a CA." +msgstr "Deaktivovať CA ACL." + +#, fuzzy, python-format +#| msgid "Disabled CA ACL \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "Deaktivované CA ACL \"%(value)s\"" + +#, fuzzy +#| msgid "IPA CA cannot be deleted" +msgid "IPA CA cannot be disabled" +msgstr "IPA CA nemôže byť odstránené" + +#, fuzzy +#| msgid "Disable a CA ACL." +msgid "Enable a CA." +msgstr "Deaktivovať CA ACL." + +#, fuzzy, python-format +#| msgid "Enabled HBAC rule \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "Použiť" + +#, fuzzy +#| msgid "Direct Membership" +msgid "Rebuild auto membership" +msgstr "Priame členstvo" + +#, fuzzy +#| msgid "Are you sure you want to enable ${object}?" +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" + +#, fuzzy +#| msgid "Are you sure you want to delete ${object}?" +msgid "Are you sure you want to proceed with the action?" +msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" + +msgid "Actions" +msgstr "Akcie" + +msgid "Add" +msgstr "Pridať" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) deleted" +msgid "${count} item(s) added" +msgstr "${count} položiek odstránených" + +msgid "Direct Membership" +msgstr "Priame členstvo" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "Nepriame členstvo" + +msgid "No entries." +msgstr "Žiadne položky." + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Zobrazených ${start} až ${end} z ${total} položiek." + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} položiek odstránneých" + +msgid "Show Results" +msgstr "Zobraz výsledky" + +#, fuzzy +#| msgid "Authentication" +msgid "Authentication indicators" +msgstr "Autentifikácia" + +#, fuzzy +#| msgid "Authentication" +msgid "Authentication indicator" +msgstr "Autentifikácia" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "Dvojfaktorová autentifikácia (heslo + OTP)" + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +#, fuzzy +#| msgid "Active zone" +msgid "Activate" +msgstr "Aktívna zóna" + +msgid "Add and Add Another" +msgstr "Pridať a pridať ďalšie" + +msgid "Add and Close" +msgstr "Pridať a zavrieť" + +msgid "Add and Edit" +msgstr "Pridať a upraviť" + +#, fuzzy +#| msgid "Add and Edit" +msgid "Add Many" +msgstr "Pridať a upraviť" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "Zrušiť" + +msgid "Clear" +msgstr "" + +#, fuzzy +#| msgid "Refresh the page." +msgid "Clear all fields on the page." +msgstr "Znovu načítať stránku." + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "Deaktivovať" + +msgid "Download" +msgstr "" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Download certificate as PEM formatted file." +msgstr "Odstrániť certifikačný profil" + +msgid "Edit" +msgstr "Upraviť" + +#, fuzzy +#| msgid "Disable" +msgid "Enable" +msgstr "Deaktivovať" + +msgid "Find" +msgstr "Hľadať" + +#, fuzzy +#| msgid "Set" +msgid "Get" +msgstr "Nastaviť" + +msgid "Hide" +msgstr "Skryť" + +msgid "Issue" +msgstr "Vydať" + +msgid "Match" +msgstr "" + +#, fuzzy +#| msgid "Search for existing certificates." +msgid "Match users according to certificate." +msgstr "Vyhľadávanie existujúcich certifikátov." + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "OK" + +msgid "Refresh" +msgstr "Znovu načítať" + +msgid "Reload current settings from the server." +msgstr "Znovu načítať aktuálne nastavenia zo servera." + +msgid "Delete" +msgstr "Odstrániť" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "Obnoviť heslo" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset Password and Log in" +msgstr "Obnoviť heslo" + +msgid "Restore" +msgstr "Obnoviť" + +msgid "Retry" +msgstr "" + +msgid "Revert" +msgstr "Vrátiť" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "Uložiť" + +msgid "Set" +msgstr "Nastaviť" + +msgid "Show" +msgstr "Zobraziť" + +#, fuzzy +#| msgid "Stage users" +msgid "Stage" +msgstr "Predpripravení používatelia" + +msgid "Update" +msgstr "Aktualizovať" + +#, fuzzy +#| msgid "ID Views" +msgid "View" +msgstr "ID Views" + +#, fuzzy +#| msgid "Confirmation" +msgid "Customization" +msgstr "Potvrdenie" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "Zbaliť všetko" + +msgid "Expand All" +msgstr "Rozbaliť všetko" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "Nastavenia identity" + +#, fuzzy +#| msgid "Role Settings" +msgid "Record Settings" +msgstr "Nastavenia role" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Nastavenia pre ${entity} ${primary_key}" + +msgid "Back to Top" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${entity} ${primary_key} Settings" +msgid "${entity} ${primary_key} updated" +msgstr "Nastavenia pre ${entity} ${primary_key}" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +#, fuzzy +#| msgid "Custom value" +msgid "Add custom value" +msgstr "Vlastná hodnota" + +#, fuzzy +#| msgid "Disable" +msgid "Available" +msgstr "Deaktivovať" + +#, fuzzy +#| msgid "Record creation failed." +msgid "Some operations failed." +msgstr "Vytvorenie záznamu zlyhalo." + +#, fuzzy +#| msgid "Validation error" +msgid "Operations Error" +msgstr "Chyba validácie" + +msgid "Confirmation" +msgstr "Potvrdenie" + +msgid "Custom value" +msgstr "Vlastná hodnota" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"Táto stránka obsahuje neuložené zmeny. Prosím uložte alebo vráťte zmeny späť." + +msgid "Unsaved Changes" +msgstr "Neuložené zmeny" + +#, fuzzy, python-brace-format +#| msgid "Identity" +msgid "Edit ${entity}" +msgstr "Identita" + +msgid "Hide details" +msgstr "Skryť detaily" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "Redirection" +msgstr "Domovský priečinok" + +msgid "Select entries to be removed." +msgstr "" + +#, fuzzy +#| msgid "Show Results" +msgid "Result" +msgstr "Zobraz výsledky" + +msgid "Show details" +msgstr "Zobraziť detaily" + +msgid "Success" +msgstr "Úspech" + +msgid "Validation error" +msgstr "Chyba validácie" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "Znovu načítať stránku." + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Nastala chyba (${error})" + +msgid "HTTP Error" +msgstr "Chyba HTTP" + +msgid "Internal Error" +msgstr "Vnútorná chyba" + +msgid "IPA Error" +msgstr "IPA chyba" + +msgid "No response" +msgstr "Bez odpovede" + +msgid "Unknown Error" +msgstr "Neznáma chyba" + +msgid "URL" +msgstr "URL" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} is a member of:" +msgid "${primary_key} is managed by:" +msgstr "${primary_key} je členom:" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} is a member of:" +msgid "${primary_key} members:" +msgstr "${primary_key} je členom:" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} je členom:" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} is a member of:" +msgid "${primary_key} member managers:" +msgstr "${primary_key} je členom:" + +msgid "Settings" +msgstr "Nastavenia" + +msgid "Search" +msgstr "Vyhľadávanie" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "Zdedené z konfigurácie servera" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Override inherited settings" +msgstr "Potlačiť zdedené nastavenia" + +msgid "PAD" +msgstr "" + +#, fuzzy +#| msgid "Authentication" +msgid "Authenticating" +msgstr "Autentifikácia" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "No Valid Certificate" +msgid "Log In Using Certificate" +msgstr "Žiadny platný certifikát" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +#, fuzzy +#| msgid "Format error" +msgid "Log out error" +msgstr "Chyba formátu" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "Synchronizovať OTP Token" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +#| msgid "User password" +msgid "number of passwords" +msgstr "Používateľské heslo" + +msgid "seconds" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Migrating" +msgstr "Konfigurácia" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#, fuzzy +#| msgid "Password reset was not successful." +msgid "Password migration was not successful" +msgstr "Nastavenie hesla nebolo úspešné" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +#, fuzzy +#| msgid "The username, password or token codes are not correct" +msgid "The password or username you entered is incorrect" +msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" + +#, fuzzy +#| msgid "Password reset was not successful." +msgid "Password migration was successful" +msgstr "Nastavenie hesla nebolo úspešné" + +#, fuzzy +#| msgid "Attributes" +msgid "Attribute" +msgstr "Atribúty" + +msgid "Add delegation" +msgstr "" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove delegations" +msgstr "Odstrániť povolenie" + +#, fuzzy +#| msgid "permission" +msgid "Add permission" +msgstr "povolenie" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove permissions" +msgstr "Odstrániť povolenie" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "Nastavenia role" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add services into role '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Server Roles" +msgid "Remove roles" +msgstr "Serverové role" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from role '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Remove services from role '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "HBAC service description" +msgid "Add self service permission" +msgstr "HBAC popis služby" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove self service permissions" +msgstr "Odstrániť povolenie" + +#, fuzzy +#| msgid "HBAC rules" +msgid "Add rule" +msgstr "HBAC pravidlá" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to delete ${object}?" +msgid "Are you sure you want to change default group?" +msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" + +#, fuzzy +#| msgid "Default user group" +msgid "Default host group" +msgstr "Predvolená používateľská skupina" + +msgid "Default user group" +msgstr "Predvolená používateľská skupina" + +msgid "Exclusive" +msgstr "" + +msgid "Expression" +msgstr "Výraz" + +msgid "Host group rule" +msgstr "" + +#, fuzzy +#| msgid "sudo rules" +msgid "Host group rules" +msgstr "sudo pravidlá" + +msgid "Inclusive" +msgstr "" + +#, fuzzy +#| msgid "Automember Rule" +msgid "Remove auto membership rules" +msgstr "Automember pravidlo" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User group rule" +msgstr "Používateľská skupina" + +#, fuzzy +#| msgid "User group" +msgid "User group rules" +msgstr "Používateľská skupina" + +#, fuzzy +#| msgid "Automount" +msgid "Add automount key" +msgstr "Automount" + +msgid "Remove automount keys" +msgstr "" + +#, fuzzy +#| msgid "Add a new IPA location." +msgid "Add automount location" +msgstr "Pridať novú IPA lokalitu." + +#, fuzzy +#| msgid "Account Settings" +msgid "Automount Location Settings" +msgstr "Nastavenia účtu" + +#, fuzzy +#| msgid "Servers in location" +msgid "Remove automount locations" +msgstr "Servery v lokalite." + +#, fuzzy +#| msgid "Automount" +msgid "Add automount map" +msgstr "Automount" + +#, fuzzy +#| msgid "Group Type" +msgid "Map Type" +msgstr "Typ skupiny" + +msgid "Direct" +msgstr "Priame" + +msgid "Indirect" +msgstr "Nepriame" + +msgid "Remove automount maps" +msgstr "" + +#, fuzzy +#| msgid "Certificate Authority" +msgid "Add certificate authority" +msgstr "Certifikačná autorita" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Remove certificate authorities" +msgstr "Certifikačné autority" + +msgid "Add CA ACL" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Pridať služby do HBAC pravidla." + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "Všetko" + +msgid "Any CA" +msgstr "Akákoľvek CA" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "Akákoľvek služba" + +msgid "Any Profile" +msgstr "Akýkoľvek profil" + +msgid "Anyone" +msgstr "Každý" + +msgid "Rule status" +msgstr "Stav pravidla" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +#, fuzzy +#| msgid "Delete a CA ACL." +msgid "Remove CA ACLs" +msgstr "Odstrániť CA ACL." + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove certificates from a service" +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "Odstrániť certifikáty zo služby" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "Špecifikované CA" + +#, fuzzy +#| msgid "Specified Services and Groups" +msgid "Specified Hosts and Groups" +msgstr "Špecifikované služby a skupiny" + +msgid "Specified Profiles" +msgstr "Špecifikované profily" + +msgid "Specified Services and Groups" +msgstr "Špecifikované služby a skupiny" + +#, fuzzy +#| msgid "Specified Services and Groups" +msgid "Specified Users and Groups" +msgstr "Špecifikované služby a skupiny" + +msgid "Permitted to have certificates issued" +msgstr "" + +#, fuzzy +#| msgid "Certificate Profiles" +msgid "Remove certificate profiles" +msgstr "Certifikačné profily" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "Certifikáty" + +msgid "Certificate Hold" +msgstr "Držanie certifikátu" + +#, fuzzy +#| msgid "Replication configuration" +msgid "Cessation of Operation" +msgstr "Konfigurácia repliky" + +#, fuzzy +#| msgid "Command name" +msgid "Common Name" +msgstr "Názov príkazu" + +#, fuzzy +#| msgid "Added certificates to user \"%(value)s\"" +msgid "the certificate with serial number " +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +msgid "Maximum serial number" +msgstr "Maximálne sériové číslo" + +msgid "Minimum serial number" +msgstr "Minimálne sériové číslo" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +#, fuzzy +#| msgid "Validation error" +msgid "Valid not after from" +msgstr "Chyba validácie" + +#, fuzzy +#| msgid "Validity start" +msgid "Valid not after to" +msgstr "Začiatok platnosti" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "Získať certifikát" + +msgid "Certificate Hold Removed" +msgstr "Držanie certifikátu odstránené" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for host '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for service '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for user '${primary_key}'" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, fuzzy +#| msgid "New Certificate" +msgid "Issue new certificate" +msgstr "Nový certifikát" + +#, fuzzy +#| msgid "Issue" +msgid "Issued By" +msgstr "Vydať" + +#, fuzzy +#| msgid "Issue" +msgid "Issued On" +msgstr "Vydať" + +#, fuzzy +#| msgid "Issue" +msgid "Issued To" +msgstr "Vydať" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "Žiadny platný certifikát" + +msgid "New Certificate" +msgstr "Nový certifikát" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "Poznámka" + +msgid "Organization" +msgstr "Organizácia" + +msgid "Organizational Unit" +msgstr "Organizačná jednotka" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "${count} certifikátov prítomných" + +#, fuzzy +#| msgid "Privilege Settings" +msgid "Privilege Withdrawn" +msgstr "Nastavenia privilégia" + +msgid "Reason for Revocation" +msgstr "Dôvod pre revokáciu" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate hold" +msgstr "Revokácia certifikátu." + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" #, python-brace-format msgid "" @@ -279,28 +21149,554 @@ msgstr "" "-----END NEW CERTIFICATE REQUEST-----) do textového poľa nižšie: " -msgid "A SYSTEM permission may not be modified or removed" -msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" -msgid "A group may not be a member of itself" -msgstr "Skupina nemože byť členom seba samej" +msgid "Certificate requested" +msgstr "Certifikačná požiadavka" -msgid "ACI" -msgstr "ACI" +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Revoke certificate" +msgstr "Revokácia certifikátu." -msgid "ACI name" -msgstr "ACI názov" +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI pre oprávnenie %s sa nenašlo" +msgid "Certificate Revoked" +msgstr "Certifikát revokovaný" -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI s názvom \"%s\" nenájdené" +msgid "REVOKED" +msgstr "" -msgid "ACIs" -msgstr "ACI" +msgid "Serial Number" +msgstr "Sériové číslo" + +msgid "Serial Number (hex)" +msgstr "Sériové číslo (hexadecimálne)" + +#, fuzzy +#| msgid "SSH public key fingerprint" +msgid "SHA1 Fingerprint" +msgstr "Odtlačok verejného SSH kľúča (fingerprint)" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "Nešpecifikované" + +msgid "Valid Certificate Present" +msgstr "Prítomný platný certifikát" + +#, fuzzy +#| msgid "Validation error" +msgid "Valid from" +msgstr "Chyba validácie" + +#, fuzzy +#| msgid "Validity" +msgid "Valid to" +msgstr "Platnosť" + +msgid "Validity" +msgstr "Platnosť" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Certifikát pre ${entity} ${primary_key}" + +msgid "View Certificate" +msgstr "Prezrieť certifikát" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "Certifikát" + +#, fuzzy +#| msgid "Certificate Authority" +msgid "Certificate For Match" +msgstr "Certifikačná autorita" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Mapping Match" +msgstr "Typ certifikátu" + +msgid "Matched Users" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User Login" +msgstr "Prihlasovacie meno" + +#, fuzzy +#| msgid "Add new certificates to a service" +msgid "Add certificate identity mapping rule" +msgstr "Pridať nové certifikáty k službe" + +#, fuzzy +#| msgid "CA certificate" +msgid "Add certificate mapping data" +msgstr "CA certifikát" + +#, fuzzy +#| msgid "Certificate Hold" +msgid "Certificate mapping data" +msgstr "Držanie certifikátu" + +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "Konfigurácia" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove certificate mapping data" +msgstr "Odstrániť certifikáty zo služby" + +msgid "Issuer and subject" +msgstr "" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove certificate identity mapping rules" +msgstr "Odstrániť certifikáty zo služby" + +msgid "Group Options" +msgstr "Voľby skupiny" + +msgid "Search Options" +msgstr "Voľby vyhľadávania" + +msgid "SELinux Options" +msgstr "SELinux voľby" + +#, fuzzy +#| msgid "Service Options" +msgid "Server Options" +msgstr "Voľby služieb" + +msgid "Service Options" +msgstr "Voľby služieb" + +msgid "User Options" +msgstr "Voľby používateľov" + +#, fuzzy +#| msgid "Forwarders" +msgid "Forward first" +msgstr "Forwardery" + +#, fuzzy +#| msgid "Account disabled" +msgid "Forwarding disabled" +msgstr "Účet deaktivovaný" + +#, fuzzy +#| msgid "DNS Forward Zone" +msgid "Forward only" +msgstr "DNS forward zóna" + +msgid "Options" +msgstr "Voľby" + +#, fuzzy +#| msgid "Update DNS entries" +msgid "Update System DNS Records" +msgstr "Aktualizovať DNS položky." + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +#, fuzzy +#| msgid "DNS forward zone" +msgid "Add DNS forward zone" +msgstr "DNS forward zóna" + +#, fuzzy +#| msgid "DNS forward zones" +msgid "Remove DNS forward zones" +msgstr "DNS forward zóny" + +#, fuzzy +#| msgid "Add new DNS resource record." +msgid "Add DNS resource record" +msgstr "Pridať nový DNS záznam" + +msgid "DNS record was deleted because it contained no data." +msgstr "DNS záznam bol odstránený pretože neobsahoval žiadne údaje." + +msgid "Other Record Types" +msgstr "Ostatné typy záznamov" + +msgid "Address not valid, can't redirect" +msgstr "Neplatná adresa, nemôžem presmerovať" + +msgid "Create dns record" +msgstr "Vytvoriť DNS záznam" + +msgid "Creating record." +msgstr "Vytváranie záznamu." + +msgid "Record creation failed." +msgstr "Vytvorenie záznamu zlyhalo." + +#, fuzzy +#| msgid "Creating record." +msgid "Checking if record exists." +msgstr "Vytváranie záznamu." + +msgid "Record not found." +msgstr "Záznam nenájdený" + +msgid "Redirection to PTR record" +msgstr "Presmerovanie na PTR záznam" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "Zóna nájdená: ${zone}" + +msgid "Target reverse zone not found." +msgstr "Cieľová reverzná zóna nenájdená." + +#, fuzzy +#| msgid "DNS zones" +msgid "Fetching DNS zones." +msgstr "DNS zóny" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +#, fuzzy +#| msgid "Delete DNS resource record." +msgid "Remove DNS resource records" +msgstr "Odstrániť DNS záznam" + +msgid "Standard Record Types" +msgstr "Štandardné typy záznamov" + +msgid "Records for DNS Zone" +msgstr "Záznamy pre DNS zónu" + +msgid "Record Type" +msgstr "Typ záznamu" + +#, fuzzy +#| msgid "DNS zone" +msgid "Add DNS zone" +msgstr "DNS zóna" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "Ste si istý/istá, že chcete pridať povolenie pre DNS zónu ${object}?" + +msgid "DNS Zone Settings" +msgstr "Nastavenia DNS zóny" + +#, fuzzy +#| msgid "DNS zones" +msgid "Remove DNS zones" +msgstr "DNS zóny" + +msgid "Remove Permission" +msgstr "Odstrániť povolenie" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" +"Ste si istý/istá, že chcete odstrániť povolenie pre DNS zónu ${object}?" + +msgid "Skip DNS check" +msgstr "Preskočiť DNS kontrolu" + +#, fuzzy +#| msgid "Skip DNS check" +msgid "Skip overlap check" +msgstr "Preskočiť DNS kontrolu" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +#, fuzzy +#| msgid "Authoritative nameserver" +msgid "Authoritative nameserver change" +msgstr "Autoritatívny nameserver" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "Používateľská skupina" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "Nastavenia skupiny" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "Skupiny" + +#, fuzzy +#| msgid "User categories" +msgid "Group categories" +msgstr "Kategórie používateľov" + +msgid "Change to external group" +msgstr "" + +#, fuzzy +#| msgid "Target group" +msgid "Change to POSIX group" +msgstr "Cieľová skupina" + +#, fuzzy +#| msgid "POSIX" +msgid "Non-POSIX" +msgstr "POSIX" + +msgid "POSIX" +msgstr "POSIX" + +#, fuzzy +#| msgid "Member groups" +msgid "Remove user groups" +msgstr "Členské skupiny" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from user group '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove services from user group '${primary_key}'" +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "Typ skupiny" + +#, fuzzy +#| msgid "HBAC rules" +msgid "Add HBAC rule" +msgstr "HBAC pravidlá" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +#| msgid "Access time" +msgid "Accessing" +msgstr "Čas prístupu" + +#, fuzzy +#| msgid "HBAC rules" +msgid "Remove HBAC rules" +msgstr "HBAC pravidlá" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, fuzzy +#| msgid "Service" +msgid "Via Service" +msgstr "Služba" + +msgid "Who" +msgstr "Kto" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add HBAC service" +msgstr "HBAC služba" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "Remove HBAC services" +msgstr "HBAC služby" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add HBAC service group" +msgstr "Pridať novú HBAC službu." + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "HBAC services" +msgid "Remove HBAC service groups" +msgstr "HBAC služby" + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." msgid "Access Denied" msgstr "Prístup odmietnutý" @@ -308,31 +21704,598 @@ msgstr "Prístup odmietnutý" msgid "Access Granted" msgstr "Prístup povolený" -#, python-format -msgid "Access granted: %s" -msgstr "Prístup povolený: %s" +#, fuzzy +#| msgid "Disabled" +msgid "Include Disabled" +msgstr "Deaktivované" -msgid "Access time" -msgstr "Čas prístupu" +#, fuzzy +#| msgid "Included attributes" +msgid "Include Enabled" +msgstr "Zahrnuté atribúty" -msgid "Account" -msgstr "Účet" +msgid "HBAC Test" +msgstr "HBAC test" -msgid "Account Settings" -msgstr "Nastavenia účtu" +msgid "Matched" +msgstr "" -msgid "Account Status" -msgstr "Stav účtu" +msgid "Missing values: " +msgstr "" -msgid "Account disabled" -msgstr "Účet deaktivovaný" +#, fuzzy +#| msgid "Run Test" +msgid "New Test" +msgstr "Spustiť test" -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Účet deaktivovaný: %(disabled)s" +msgid "Rules" +msgstr "Pravidlá" -msgid "Actions" -msgstr "Akcie" +msgid "Run Test" +msgstr "Spustiť test" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Pridať služby do HBAC pravidla." + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Get Certificate" +msgid "Host Certificate" +msgstr "Získať certifikát" + +#, fuzzy +#| msgid "Name" +msgid "Host Name" +msgstr "Názov" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +#| msgid "Trust Settings" +msgid "Host Settings" +msgstr "Trust nastavenia" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +#| msgid "Set OTP" +msgid "Generate OTP" +msgstr "Nastaviť OTP" + +#, fuzzy +#| msgid "Second OTP" +msgid "Generated OTP" +msgstr "Druhé OTP" + +msgid "Kerberos Key" +msgstr "Kerberos kľúč" + +msgid "Kerberos Key Not Present" +msgstr "Kerberos kľúč nie je prítomný" + +#, fuzzy +#| msgid "Kerberos Key Not Present" +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Kerberos kľúč nie je prítomný" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password" +msgstr "Jednorázové heslo (OTP)" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Not Present" +msgstr "Jednorázové heslo (OTP)" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Present" +msgstr "Jednorázové heslo (OTP)" + +#, fuzzy +#| msgid "Set OTP" +msgid "Reset OTP" +msgstr "Nastaviť OTP" + +#, fuzzy +#| msgid "One Time Password" +msgid "Reset One-Time Password" +msgstr "Jednorázové heslo (OTP)" + +msgid "Set OTP" +msgstr "Nastaviť OTP" + +#, fuzzy +#| msgid "OTP Token" +msgid "OTP set" +msgstr "OTP token" + +#, fuzzy +#| msgid "One Time Password" +msgid "Set One-Time Password" +msgstr "Jednorázové heslo (OTP)" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove hosts" +msgstr "Odstrániť povolenie" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +#, fuzzy +#| msgid "permission" +msgid "Unprovision" +msgstr "povolenie" + +#, fuzzy +#| msgid "Are you sure you want to unlock user ${object}?" +msgid "Are you sure you want to unprovision this host?" +msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +#| msgid "Add to default group" +msgid "Add host group" +msgstr "Pridať do predvolenej skupiny" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group Settings" +msgid "Host Group Settings" +msgstr "Nastavenia skupiny" + +#, fuzzy +#| msgid "Member of groups" +msgid "Remove host groups" +msgstr "Člen skupín" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User categories" +msgid "User to override" +msgstr "Kategórie používateľov" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +#, fuzzy +#| msgid "Profiles" +msgid "Profile" +msgstr "Profily" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +#, fuzzy +#| msgid "Add a new ID View." +msgid "Add ID view" +msgstr "Pridať nové ID View" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} is a member of:" +msgid "${primary_key} applies to:" +msgstr "${primary_key} je členom:" + +msgid "Applied to hosts" +msgstr "" + +#, fuzzy +#| msgid "Add to default group" +msgid "Apply to host groups" +msgstr "Pridať do predvolenej skupiny" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} is a member of:" +msgid "${primary_key} overrides:" +msgstr "${primary_key} je členom:" + +#, fuzzy +#| msgid "ID Views" +msgid "Remove ID views" +msgstr "ID Views" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +#, fuzzy +#| msgid "Apply" +msgid "Un-apply" +msgstr "Použiť" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to enable selected entries?" +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "Ste si istý/istá, že chcete aktivovať vybrané položky?" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#, fuzzy +#| msgid "Add to default group" +msgid "Add netgroup" +msgstr "Pridať do predvolenej skupiny" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +msgid "Netgroup Settings" +msgstr "Netgroup nastavenia" + +#, fuzzy +#| msgid "Member groups" +msgid "Remove netgroups" +msgstr "Členské skupiny" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "OTP token" +msgid "Add OTP token" +msgstr "OTP token" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Configure your token" +msgstr "Konfigurácia" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "Nastavenia pre OTP token" + +msgid "Disable token" +msgstr "Deaktiovať token" + +#, fuzzy +#| msgid "Disable token" +msgid "Enable token" +msgstr "Deaktiovať token" + +#, fuzzy +#| msgid "OTP tokens" +msgid "Remove OTP tokens" +msgstr "OTP tokeny" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "Zobraziť QR kód" + +#, fuzzy +#| msgid "DNS configuration options" +msgid "Show configuration uri" +msgstr "DNS konfiguračné voľby" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Add Custom Attribute" +msgstr "Atribúty" + +msgid "Permission settings" +msgstr "Nastavenia oprávnenia" + +#, fuzzy +#| msgid "Attributes" +msgid "Attribute breakdown" +msgstr "Atribúty" + +msgid "Privilege Settings" +msgstr "Nastavenia privilégia" + +#, fuzzy +#| msgid "SSH public key:" +msgid "Public key:" +msgstr "Verejný SSH kľuč" + +#, fuzzy +#| msgid "SSH public key" +msgid "Set public key" +msgstr "Verejný SSH kľúč" + +msgid "Show/Set key" +msgstr "Zobraziť/Nastaviť kľúč" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "Modifikované" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +#| msgid "password policies" +msgid "Add password policy" +msgstr "Politky hesiel" + +msgid "Password Policy" +msgstr "Politika hesiel" + +#, fuzzy +#| msgid "password policies" +msgid "Remove password policies" +msgstr "Politky hesiel" + +#, fuzzy +#| msgid "ID Range" +msgid "Add ID range" +msgstr "ID rozsah" + +msgid "Range Settings" +msgstr "Nastavenie rozsahu" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +#, fuzzy +#| msgid "ID Ranges" +msgid "Range size" +msgstr "ID rozsahy" + +#, fuzzy +#| msgid "Domain" +msgid "Domain SID" +msgstr "Doména" + +msgid "Secondary RID base" +msgstr "" + +#, fuzzy +#| msgid "ID Ranges" +msgid "Remove ID ranges" +msgstr "ID rozsahy" msgid "Active Directory domain" msgstr "Active Directory doména" @@ -340,147 +22303,620 @@ msgstr "Active Directory doména" msgid "Active Directory domain with POSIX attributes" msgstr "Active Directory doména s POSIX attribútmy" +msgid "Detect" +msgstr "Detekovať" + +msgid "Local domain" +msgstr "Lokálna doména" + +msgid "IPA trust" +msgstr "IPA trust" + msgid "Active Directory winsync" msgstr "Active Directory winsync" -msgid "Active users" -msgstr "Aktívni používatelia" +#, fuzzy +#| msgid "DNS server" +msgid "Add RADIUS server" +msgstr "DNS server" -msgid "Active zone" -msgstr "Aktívna zóna" +msgid "RADIUS Proxy Server Settings" +msgstr "RADIUS Proxy serverové nastavenia" -msgid "Add" -msgstr "Pridať" +msgid "Remove RADIUS servers" +msgstr "" -msgid "Add a new HBAC service." -msgstr "Pridať novú HBAC službu." +msgid "Check DNS" +msgstr "Skontrolovať DNS" -msgid "Add a new ID View." -msgstr "Pridať nové ID View" +msgid "Do you also want to perform DNS check?" +msgstr "" -msgid "Add a new IPA location." -msgstr "Pridať novú IPA lokalitu." +msgid "Force Update" +msgstr "Vynútiť aktualizáciu" -msgid "Add a new YubiKey OTP token." -msgstr "Pridať nový YubiKey OTP token." +#, fuzzy +#| msgid "SELinux User" +msgid "Add SELinux user map" +msgstr "SELinux používateľ" -msgid "Add and Add Another" -msgstr "Pridať a pridať ďalšie" +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" -msgid "Add and Close" -msgstr "Pridať a zavrieť" +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" -msgid "Add and Edit" -msgstr "Pridať a upraviť" +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" -msgid "Add new DNS resource record." -msgstr "Pridať nový DNS záznam" +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" -msgid "Add new certificates to a service" -msgstr "Pridať nové certifikáty k službe" +msgid "Remove selinux user maps" +msgstr "" -msgid "Add one or more certificates to the user entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" -msgid "Add services to an HBAC rule." -msgstr "Pridať služby do HBAC pravidla." +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" -msgid "Add to default group" -msgstr "Pridať do predvolenej skupiny" +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" -msgid "Add users and groups to an HBAC rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" -msgid "Add users that can manage this token." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." +msgid "Server Roles" +msgstr "Serverové role" -#, python-format -msgid "Added %(map)s" -msgstr "Pridané %(map)s" +msgid "Server Role" +msgstr "Server rola" -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Pridané %(src)s do %(dst)s" +msgid "Warning: Consider service replication" +msgstr "" -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" +#, fuzzy +#| msgid "Delete a user" +msgid "Delete Server" +msgstr "Odstrániť používateľa" -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" +#, fuzzy +#| msgid "HBAC service" +msgid "Add service" +msgstr "HBAC služba" -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" +msgid "Service Certificate" +msgstr "Certifikát služby" -msgid "Address not valid, can't redirect" -msgstr "Neplatná adresa, nemôžem presmerovať" +msgid "Service Settings" +msgstr "Nastavenia služby" -msgid "Administrator e-mail address" -msgstr "E-mailová adresa administrátora" +#, fuzzy +#| msgid "Permission settings" +msgid "Provisioning" +msgstr "Nastavenia oprávnenia" -msgid "Advertised by servers" -msgstr "Oznamované servermi" +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove services" +msgstr "Odstrániť povolenie" -msgid "All" -msgstr "Všetko" +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to restore selected users?" +msgid "Are you sure you want to unprovision this service?" +msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +#| msgid "Service Options" +msgid "Service unprovisioned" +msgstr "Voľby služieb" + +#, fuzzy +#| msgid "Kerberos Key Not Present" +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Kerberos kľúč nie je prítomný" + +msgid "SSH public keys" +msgstr "Verejné SSH kľúče" + +msgid "SSH public key:" +msgstr "Verejný SSH kľuč" + +msgid "Set SSH key" +msgstr "Nastaviť SSH kľúč" + +#, fuzzy +#| msgid "Are you sure you want to restore selected users?" +msgid "Are you sure you want to activate selected users?" +msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to disable ${object}?" +msgid "Are you sure you want to activate ${object}?" +msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" + +#, fuzzy, python-brace-format +#| msgid "${count} users(s) staged" +msgid "${count} user(s) activated" +msgstr "${count} users(s) predpripravených" + +#, fuzzy +#| msgid "Stage users" +msgid "Add stage user" +msgstr "Predpripravení používatelia" + +msgid "Stage users" +msgstr "Predpripravení používatelia" + +msgid "Preserved users" +msgstr "Uschovaní používatelia" + +#, fuzzy +#| msgid "Preserved users" +msgid "Remove preserved users" +msgstr "Uschovaní používatelia" + +#, fuzzy +#| msgid "Stage users" +msgid "Remove stage users" +msgstr "Predpripravení používatelia" + +#, fuzzy +#| msgid "Are you sure you want to restore selected users?" +msgid "Are you sure you want to stage selected users?" +msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "${count} users(s) predpripravených" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to disable ${object}?" +msgid "Are you sure you want to stage ${object}?" +msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" + +msgid "Are you sure you want to restore selected users?" +msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" + +#, fuzzy, python-brace-format +#| msgid "Are you sure you want to delete ${object}?" +msgid "Are you sure you want to restore ${object}?" +msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "${count} používateľov obnovených" + +msgid "User categories" +msgstr "Kategórie používateľov" + +#, fuzzy +#| msgid "sudo commands" +msgid "Add sudo command" +msgstr "sudo príkazy" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Remove sudo commands" +msgstr "sudo príkazy" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Add sudo command group" +msgstr "sudo príkazy" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "sudo commands" +msgid "Remove sudo command groups" +msgstr "sudo príkazy" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "sudo rules" +msgid "Add sudo rule" +msgstr "sudo pravidlá" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" msgid "Allow" msgstr "Povoliť" -msgid "Allow PTR sync" -msgstr "Povoliť PTR synchronizáciu" - -msgid "Allow dynamic updates." -msgstr "Povoliť dynamické aktualizácie" - -msgid "Allow query" -msgstr "Povoliť dotazy" - -msgid "Allow transfer" -msgstr "Povoliť prenos" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Nastala chyba (${error})" - -msgid "Any CA" -msgstr "Akákoľvek CA" - msgid "Any Command" msgstr "Akýkoľvek príkaz" msgid "Any Group" msgstr "Akákoľvek skupina" -msgid "Any Profile" -msgstr "Akýkoľvek profil" +#, fuzzy +#| msgid "Sudo Commands" +msgid "Run Commands" +msgstr "Sudo príkazy" -msgid "Any Service" -msgstr "Akákoľvek služba" +msgid "Deny" +msgstr "Zakázať" -msgid "Anyone" -msgstr "Každý" +#, fuzzy +#| msgid "Access time" +msgid "Access this host" +msgstr "Čas prístupu" -msgid "Apply" -msgstr "Použiť" +msgid "Option added" +msgstr "Voľba pridaná" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "${count} option(s) odstránených" + +#, fuzzy +#| msgid "sudo rules" +msgid "Remove sudo rules" +msgstr "sudo pravidlá" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +#, fuzzy +#| msgid "Specified Services and Groups" +msgid "Specified Commands and Groups" +msgstr "Špecifikované služby a skupiny" + +msgid "Specified Groups" +msgstr "Špecifikované skupiny" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove sudo options" +msgstr "Odstrániť povolenie" + +#, fuzzy +#| msgid "Automember" +msgid "Autogenerated" +msgstr "Automember" + +msgid "Segment details" +msgstr "Detaily segmentu" + +msgid "Replication configuration" +msgstr "Konfigurácia repliky" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +#, fuzzy +#| msgid "Add a new IPA location." +msgid "Add IPA location" +msgstr "Pridať novú IPA lokalitu." + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA locations\n" +msgid "Remove IPA locations" +msgstr "" +"\n" +"IPA lokality\n" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "Účet" + +#, fuzzy +#| msgid "IPA trust" +msgid "Add trust" +msgstr "IPA trust" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "Trust nastavenia" + +msgid "Establish using" +msgstr "" + +#, fuzzy +#| msgid "Local domain" +msgid "Fetch domains" +msgstr "Lokálna doména" + +#, fuzzy +#| msgid "Change password" +msgid "Pre-shared password" +msgstr "Zmeniť heslo" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove trusts" +msgstr "Odstrániť povolenie" + +#, fuzzy +#| msgid "Realm Domains" +msgid "Remove domains" +msgstr "Realm domény" + +#, fuzzy +#| msgid "Trust Settings" +msgid "Trust direction" +msgstr "Trust nastavenia" + +#, fuzzy +#| msgid "Rule status" +msgid "Trust status" +msgstr "Stav pravidla" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "User attributes for SMB services" +msgstr "Vyhľadať HBAC služby." + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "Nastavenia účtu" + +msgid "Account Status" +msgstr "Stav účtu" + +msgid "Active users" +msgstr "Aktívni používatelia" + +#, fuzzy +#| msgid "Active users" +msgid "Add user" +msgstr "Aktívni používatelia" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Pridať služby do HBAC pravidla." + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "Nastavenia kontaktných údajov" + +msgid "Delete mode" +msgstr "Mód odstránenia" + +msgid "Employee Information" +msgstr "Informácie o zamestnancovi" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "Vypršanie hesla" + +msgid "Mailing Address" +msgstr "Poštová adresa" + +msgid "Misc. Information" +msgstr "Rôzne informácie" + +msgid "delete" +msgstr "odstrániť" + +msgid "preserve" +msgstr "uschovať" + +msgid "No private group" +msgstr "Bez privátnej skupiny" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove users" +msgstr "Odstrániť povolenie" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" #, python-brace-format msgid "" @@ -491,44 +22927,404 @@ msgstr "" "okamžite." #, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "Ste si istý/istá, že chcete pridať povolenie pre DNS zónu ${object}?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Ste si istý/istá, že chcete odstrániť vybrané položky?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" - -msgid "Are you sure you want to disable selected entries?" -msgstr "Ste si istý/istá, že chcete deaktivovať vybrané položky?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Ste si istý/istá, že chcete aktivovať vybrané položky?" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgid "Click to ${action}" msgstr "" -"Ste si istý/istá, že chcete odstrániť povolenie pre DNS zónu ${object}?" -msgid "Are you sure you want to restore selected users?" -msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" +msgid "Unlock" +msgstr "Odomknúť" #, python-brace-format msgid "Are you sure you want to unlock user ${object}?" msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" -msgid "Attributes" -msgstr "Atribúty" +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +#, fuzzy +#| msgid "Member of" +msgid "Members" +msgstr "Členom" + +msgid "My User Vaults" +msgstr "" + +#, fuzzy +#| msgid "Owner" +msgid "Owners" +msgstr "Vlastník" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "Služby" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +#, fuzzy +#| msgid "Group Type" +msgid "Vault Type" +msgstr "Typ skupiny" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "User Groups" +msgid "User Vaults" +msgstr "Používateľské skupiny" + +msgid "Current password is required" +msgstr "Súčasné heslo je povinné" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "Prvé OTP" + +msgid "New password is required" +msgstr "Nové heslo je povinné" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "Synchronizácia tokenu zlyhala" + +msgid "The username, password or token codes are not correct" +msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" + +msgid "Token was synchronized" +msgstr "Token bol zosynchronizovaný" + +msgid "Password change complete" +msgstr "Zmena hesla dokončená" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +msgid "Passwords must match" +msgstr "Heslá sa musia zhodovať" + +msgid "Password reset was not successful." +msgstr "Nastavenie hesla nebolo úspešné" + +msgid "Reset your password." +msgstr "Obnoviť Vaše heslo." + +msgid "Second OTP" +msgstr "Druhé OTP" + +msgid "Verify Password" +msgstr "Overiť heslo" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Ste si istý/istá, že chcete odstrániť vybrané položky?" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "${count} položiek odstránených" + +msgid "Are you sure you want to disable selected entries?" +msgstr "Ste si istý/istá, že chcete deaktivovať vybrané položky?" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "${count} item(s) deaktivovaných" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Ste si istý/istá, že chcete aktivovať vybrané položky?" + +#, fuzzy, python-brace-format +#| msgid "${count} item(s) disabled" +msgid "${count} item(s) enabled" +msgstr "${count} item(s) deaktivovaných" + +msgid "Some entries were not deleted" +msgstr "Niektoré položky neboli odstránené" + +msgid "Quick Links" +msgstr "Rýchle odkazy" + +msgid "Select All" +msgstr "Označiť všetko" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "Odznačiť všetko" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" msgid "Audit" msgstr "Audit" @@ -536,1059 +23332,111 @@ msgstr "Audit" msgid "Authentication" msgstr "Autentifikácia" -msgid "Authoritative nameserver" -msgstr "Autoritatívny nameserver" - -msgid "Authoritative nameserver domain name" -msgstr "Doménové meno autoritatívneho nameservera" - -msgid "Authority ID" -msgstr "ID autority" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Automember pravidlo: %s nenájdené!" - -msgid "Automember" -msgstr "Automember" - -msgid "Automember Rule" -msgstr "Automember pravidlo" - -msgid "Automember rebuild membership task completed" -msgstr "Úloha obnovenia automember členstva dokončená" - -msgid "Automember rebuild membership task started" -msgstr "Úloha obnovenia automember členstva začala" - msgid "Automount" msgstr "Automount" -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Zlý vyhľadávací filter %(info)s" - -msgid "Base-64 encoded certificate." -msgstr "Base-64 zakódovaný certifikát." - -msgid "Base-64 encoded service certificate" -msgstr "Base-64 zakódovaný certifikát služby" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64 zakódovaný používateľský certifikát" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 dekódovanie zlyhalo: %(reason)s" - -msgid "CA certificate" -msgstr "CA certifikát" - -msgid "Cancel" -msgstr "Zrušiť" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Nie je možné dekódovať súbor '%(filename)s': %(exc)s" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Nie je možné čítať súbor '%(filename)s': %(exc)s" - -msgid "Certificate" -msgstr "Certifikát" - -msgid "Certificate Authorities" -msgstr "Certifikačné autority" - -msgid "Certificate Authority" -msgstr "Certifikačná autorita" - -msgid "Certificate Hold" -msgstr "Držanie certifikátu" - -msgid "Certificate Hold Removed" -msgstr "Držanie certifikátu odstránené" - -msgid "Certificate Profile" -msgstr "Certifikačný profil" - -msgid "Certificate Profiles" -msgstr "Certifikačné profily" - -msgid "Certificate Revoked" -msgstr "Certifikát revokovaný" - -msgid "Certificate Type" -msgstr "Typ certifikátu" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Chyba formátu certifikátu: %(error)s" - -msgid "Certificate profiles cannot be renamed" -msgstr "Certifikačné profily nemôžu byť premenované" - -msgid "Certificate requested" -msgstr "Certifikačná požiadavka" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Certifikát so sériovým číslom %(serial)s vydaný CA '%(ca)s' sa nenašiel" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Certifikát(y) sú uložené v súbore '%(file)s'" - -msgid "Certificates" -msgstr "Certifikáty" - -msgid "Change password" -msgstr "Zmeniť heslo" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Zmenené heslo pre \"%(value)s\"" - -msgid "Check DNS" -msgstr "Skontrolovať DNS" - -msgid "City" -msgstr "Mesto" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Klient nie je nakonfigurovaný. Spustite ipa-client-install." - -msgid "Collapse All" -msgstr "Zbaliť všetko" - -msgid "Command name" -msgstr "Názov príkazu" - -msgid "Command not implemented" -msgstr "Príkaz nie je implementovaný" - -msgid "Commands" -msgstr "Príkazy" - -msgid "Configuration" -msgstr "Konfigurácia" - -msgid "Configured size limit exceeded" -msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" - -msgid "Configured time limit exceeded" -msgstr "Nakonfigurovaný časový limit bol dosiahnutý" - -msgid "Confirmation" -msgstr "Potvrdenie" - -msgid "Contact Settings" -msgstr "Nastavenia kontaktných údajov" - -msgid "Continue" -msgstr "Pokračovať" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Nie je možné interaktívne získať %(name)s" - -msgid "Create a new HBAC rule." -msgstr "Vytvoriť nové HBAC pravidlo" - -msgid "Create a new group." -msgstr "Vytvoriť novú skupinu." - -msgid "Create dns record" -msgstr "Vytvoriť DNS záznam" - -msgid "Create new DNS forward zone." -msgstr "Vytvoriť novú DNS forward zónu" - -msgid "Create reverse" -msgstr "Vytvoriť reverzný" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Vytvorené ACI \"%(value)s\"" - -msgid "Creating record." -msgstr "Vytváranie záznamu." - -msgid "Current DNS record contents:\n" -msgstr "Aktuálny obsah DNS záznamu:\n" - -msgid "Current Password" -msgstr "Súčasné heslo" - -msgid "Current password is required" -msgstr "Súčasné heslo je povinné" - -msgid "Custom value" -msgstr "Vlastná hodnota" - msgid "DNS" msgstr "DNS" -msgid "DNS Forward Zone" -msgstr "DNS forward zóna" - -msgid "DNS Forward Zones" -msgstr "DNS forward zóny" - -msgid "DNS Global Configuration" -msgstr "DNS globálne nastavenia" - -msgid "DNS Zone" -msgstr "DNS zóna" - -msgid "DNS Zone Settings" -msgstr "Nastavenia DNS zóny" - -msgid "DNS Zones" -msgstr "DNS zóny" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "DNS kontrola zlyhala: Očakávané {%(expected)s} prijaté {%(got)s}" - -msgid "DNS configuration options" -msgstr "DNS konfiguračné voľby" - -msgid "DNS forward zone" -msgstr "DNS forward zóna" - -msgid "DNS forward zones" -msgstr "DNS forward zóny" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +msgid "Host-Based Access Control" msgstr "" -"Sémantika DNS forwarderov je zmenená od IPA 4.0.\n" -"Pravdepodobne ste chceli použiť (dnsforwardzone-*).\n" -"Pre viac informácií prosím prečítajte dokumentáciu." - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS label nemôže byť dlhší ako 63 znakov" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS label nemôže byť dlhší ako 63 znakov" - -msgid "DNS record was deleted because it contained no data." -msgstr "DNS záznam bol odstránený pretože neobsahoval žiadne údaje." - -msgid "DNS resource record type" -msgstr "Typ DNS záznamu" - -msgid "DNS server" -msgstr "DNS server" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS server %(server)s nepodporuje DNSSEC: %(error)s.\n" -"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS server %(server)s nepodporuje EDNS0 (RFC 6891): %(error)s.\n" -"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS server %(server)s: %(error)s." - -msgid "DNS zone" -msgstr "DNS zóna" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "DNS zóna %(zone)s nenájdená" - -msgid "DNS zones" -msgstr "DNS zóny" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"DNSSEC podpora je experimentálna.\n" -"%(additional_info)s" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"DNSSEC validácia zlyhala: %(error)s.\n" -"Prosím overte Vašu DNSSEC konfiguráciu alebo deaktivujte DNSSEC validáciu na " -"všetkých IPA serveroch." - -msgid "Default attributes" -msgstr "Predvolené atribúty" - -msgid "Default group for new users not found" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -msgid "Default user group" -msgstr "Predvolená používateľská skupina" - -msgid "Delete" -msgstr "Odstrániť" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Odstrániť %(name)s '%(value)s'?" - -msgid "Delete DNS forward zone." -msgstr "Odstrániť DNS forward zónu." - -msgid "Delete DNS resource record." -msgstr "Odstrániť DNS záznam" - -msgid "Delete DNS zone (SOA record)." -msgstr "Odstrániť DNS zónu (SOA záznam)." - -msgid "Delete a CA ACL." -msgstr "Odstrániť CA ACL." - -msgid "Delete a Certificate Profile." -msgstr "Odstrániť certifikačný profil" - -msgid "Delete a user" -msgstr "Odstrániť používateľa" - -msgid "Delete all?" -msgstr "Odstrániť všetko?" - -msgid "Delete an HBAC rule." -msgstr "Odstrániť HBAC pravidlo." - -msgid "Delete an ID View." -msgstr "Odstrániť ID View." - -msgid "Delete an ID range." -msgstr "Zmazať ID rozsah." - -msgid "Delete an IPA location." -msgstr "Odstrániť IPA lokalitu." - -msgid "Delete an OTP token." -msgstr "Odstrániť OTP token" - -msgid "Delete an existing HBAC service." -msgstr "Odstrániť existujúcu HBAC službu." - -msgid "Delete group." -msgstr "Odstrániť skupinu." - -msgid "Delete mode" -msgstr "Mód odstránenia" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Odstránené ACI \"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Odstránené CA ACL \"%(value)s\"" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Odstránená DNS forward zóna \"%(value)s\"" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Odstránená DNS zóna \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Odstránené HBAC pravidlo \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Odstránená IPA lokalita \"%(value)s\"" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Odstránený OTP token \"%(value)s\"" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Odstránený záznam \"%(value)s\"" - -msgid "Deny" -msgstr "Zakázať" - -msgid "Department Number" -msgstr "Číslo oddelenia" - -msgid "Deprecated options" -msgstr "Zastarané voľby" - -msgid "Description" -msgstr "Popis" - -msgid "Detect" -msgstr "Detekovať" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "Slovník JSON zakódovaných IPA príkazov" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "Slovník JSON zakódovaných IPA metód" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Slovník JSON zakódovaných IPA objektov" - -msgid "Direct" -msgstr "Priame" - -msgid "Direct Membership" -msgstr "Priame členstvo" - -msgid "Disable" -msgstr "Deaktivovať" - -msgid "Disable DNS Forward Zone." -msgstr "Deaktivovať DNS forward zónu." - -msgid "Disable DNS Zone." -msgstr "Deaktivovať DNS zónu." - -msgid "Disable a CA ACL." -msgstr "Deaktivovať CA ACL." - -msgid "Disable a user account." -msgstr "Deaktivovať používateľský účet." - -msgid "Disable an HBAC rule." -msgstr "Deaktivovať HBAC pravidlo." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." - -msgid "Disable token" -msgstr "Deaktiovať token" - -msgid "Disabled" -msgstr "Deaktivované" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Deaktivované CA ACL \"%(value)s\"" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Deaktivovaná DNS forward zóna \"%(value)s\"" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Deaktivovaná DNS zóna \"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Deaktivované HBAC pravidlo \"%(value)s\"" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Deaktivované sudo pravidlá \"%s\"" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Deaktivovaná služba \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "Display information about a DNS forward zone." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "Display information about an IPA location." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "Display name" -msgstr "Zobrazované meno" - -msgid "Dogtag Authority ID" -msgstr "ID Dogtag autority" - -msgid "Domain" -msgstr "Doména" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "Doména '%(domain)s' nie je koreňovou doménou pre les '%(forest)s'" - -msgid "Domain NetBIOS name" -msgstr "Doménové NetBIOS meno" - -msgid "Domain name" -msgstr "Doménové meno" - -msgid "Duplicate keys skipped:" -msgstr "Duplikované kľúče preskočené:" - -msgid "Dynamic update" -msgstr "Dynamické aktualizácie" - -msgid "Edit" -msgstr "Upraviť" - -msgid "Email address" -msgstr "E-mailová adresa" - -msgid "Employee Information" -msgstr "Informácie o zamestnancovi" - -msgid "Employee Number" -msgstr "Zamestnanecké číslo" - -msgid "Employee Type" -msgstr "Typ zamestnanca" - -msgid "Enable an HBAC rule." -msgstr "Aktivovať HBAC pravidlo." - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Položka %s neexistuje" - -#, python-format -msgid "Entry %s not found" -msgstr "Položka %s nenájdená" - -msgid "Excluded attributes" -msgstr "Vylúčené atribúty" - -msgid "Expand All" -msgstr "Rozbaliť všetko" - -msgid "Expression" -msgstr "Výraz" - -msgid "Failed to add" -msgstr "Zlyhalo pridanie" - -msgid "Fax Number" -msgstr "Faxové číslo" - -#, python-format -msgid "File %(file)s not found" -msgstr "Súbor %(file)s nenájdený" - -msgid "Filter" -msgstr "Filter" - -msgid "Find" -msgstr "Hľadať" - -msgid "First Code" -msgstr "Prvý kód" - -msgid "First OTP" -msgstr "Prvé OTP" - -msgid "First name" -msgstr "Meno" - -msgid "Force" -msgstr "Vynútiť" - -msgid "Force Update" -msgstr "Vynútiť aktualizáciu" - -msgid "Format error" -msgstr "Chyba formátu" - -msgid "Forwarders" -msgstr "Forwardery" - -#, python-format -msgid "Found '%(value)s'" -msgstr "Nájdené '%(value)s'" - -msgid "Full name" -msgstr "Celé meno" - -msgid "GECOS" -msgstr "GECOS" - -msgid "GID" -msgstr "GID" - -msgid "Get Certificate" -msgstr "Získať certifikát" - -msgid "Global DNS configuration is empty" -msgstr "Globálna DNS konfigurácia je prázdna," - -msgid "Global forwarders" -msgstr "Globálne forwardery" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " -"formátu \"IP_ADRESA port PORT\" pre každý forwarder " - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" -"Globálna forward politika. Nastavením na \"none\" sa deaktivuje akýkoľvek " -"nastavený globálny forwarder." - -msgid "Group ID Number" -msgstr "ID skupiny" - -msgid "Group Options" -msgstr "Voľby skupiny" - -msgid "Group Settings" -msgstr "Nastavenia skupiny" - -msgid "Group Type" -msgstr "Typ skupiny" - -msgid "Group description" -msgstr "Popis skupiny" - -msgid "Group name" -msgstr "Názov skupiny" - -msgid "Groups" -msgstr "Skupiny" - -msgid "HBAC Rules" -msgstr "HBAC pravidlá" - -msgid "HBAC Service" -msgstr "HBAC služba" - -msgid "HBAC Services" -msgstr "HBAC služby" - -msgid "HBAC Test" -msgstr "HBAC test" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "HBAC pravidlo %(rule)s nenájdené" - -msgid "HBAC rules" -msgstr "HBAC pravidlá" - -msgid "HBAC service" -msgstr "HBAC služba" - -msgid "HBAC service description" -msgstr "HBAC popis služby" - -msgid "HBAC services" -msgstr "HBAC služby" - -msgid "HTTP Error" -msgstr "Chyba HTTP" - -msgid "Hide" -msgstr "Skryť" - -msgid "Hide details" -msgstr "Skryť detaily" - -msgid "Home directory" -msgstr "Domovský priečinok" - -msgid "ID Range" -msgstr "ID rozsah" - -msgid "ID Ranges" -msgstr "ID rozsahy" - -msgid "ID View Name" -msgstr "Názov ID View" - -msgid "ID Views" -msgstr "ID Views" - -msgid "IP Address" -msgstr "IP adresa" - -msgid "IPA CA cannot be deleted" -msgstr "IPA CA nemôže byť odstránené" - -msgid "IPA DNS records" -msgstr "IPA DNS záznamy" - -msgid "IPA DNS version" -msgstr "Verzia IPA DNS" - -msgid "IPA Error" -msgstr "IPA chyba" - -msgid "IPA Location" -msgstr "IPA lokalita" - -msgid "IPA Location description" -msgstr "Popis IPA lokality" - -msgid "IPA Locations" -msgstr "IPA lokality" - -msgid "IPA Server" -msgstr "IPA Server" - -msgid "IPA location name" -msgstr "Názov IPA lokality" - -msgid "IPA object" -msgstr "IPA objekt" - -msgid "IPA role name" -msgstr "Názov IPA role" - -msgid "IPA server role name" -msgstr "Názov role servera" - -msgid "IPA trust" -msgstr "IPA trust" - -msgid "IPA unique ID" -msgstr "IPA unikátne ID" msgid "Identity" msgstr "Identita" -msgid "Identity Settings" -msgstr "Nastavenia identity" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "Ignorované %(src)s do %(dst)s" - -msgid "Ignored keys:" -msgstr "Ignorované kľúče:" - -msgid "Import a Certificate Profile." -msgstr "Importovať certifikačný profil" - -msgid "Imported keys:" -msgstr "Importované kľúče:" - -msgid "Include all disabled IPA rules into test" -msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" - -msgid "Included attributes" -msgstr "Zahrnuté atribúty" - -msgid "Indirect" -msgstr "Nepriame" - -msgid "Indirect Membership" -msgstr "Nepriame členstvo" - -msgid "Inherited from server configuration" -msgstr "Zdedené z konfigurácie servera" - -msgid "Initials" -msgstr "Iniciály" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Nedostatočný prístup: %(info)s" - -msgid "Internal Error" -msgstr "Vnútorná chyba" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" - -msgid "Invalid LDAP URI." -msgstr "Neplatná LDAP URI." - -msgid "Invalid credentials" -msgstr "Nesprávne prihlasovacie údaje" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Nesprávny alebo nepodporovaný typ. Povolené hodnoty sú: %s" - -msgid "Is zone active?" -msgstr "Je zóna aktívna?" - -msgid "Issue" -msgstr "Vydať" - -msgid "Job Title" -msgstr "Pracovná pozícia" - -msgid "Kerberos Key" -msgstr "Kerberos kľúč" - -msgid "Kerberos Key Not Present" -msgstr "Kerberos kľúč nie je prítomný" - -msgid "Keytab" -msgstr "Keytab" - -msgid "LDAP URI" -msgstr "LDAP URI" - -msgid "LDAP schema" -msgstr "LDAP schéma" - -msgid "Last name" -msgstr "Priezvisko" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Počiatočné a koncové medzery nie sú povolené" - -msgid "Length of TOTP token code validity" -msgstr "Dĺžka platnosti TOTP token kódu" - -msgid "List of deletions that failed" -msgstr "Zoznam odstránení, ktoré zlyhaly" - -msgid "List of servers which advertise the given location" -msgstr "Zoznam serverov oznamujúcich danú lokalitu" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Načítať CA certifikát LDAP servera zo súboru" - -msgid "Local domain" -msgstr "Lokálna doména" - -msgid "Locality" -msgstr "Lokalita" - -msgid "Location name" -msgstr "Názov lokality" - -msgid "Location of the ACI" -msgstr "Umiestnenie ACI" - -msgid "MAC address" -msgstr "MAC adresa" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Mailing Address" -msgstr "Poštová adresa" - -msgid "Malformed DN" -msgstr "Poškodené DN" - -msgid "Manager" -msgstr "Manažér" - -msgid "Mark the token as disabled (default: false)" -msgstr "Označiť token ako deaktivovaný (predvolené: false)" - -msgid "Maximum serial number" -msgstr "Maximálne sériové číslo" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Maximálna hodnota je ${value}" - -msgid "Member groups" -msgstr "Členské skupiny" - -msgid "Member of" -msgstr "Členom" - -msgid "Member of a group" -msgstr "Členom skupiny" - -msgid "Member of groups" -msgstr "Člen skupín" - -msgid "Minimum serial number" -msgstr "Minimálne sériové číslo" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Minimálna hodnota je ${value}" - -msgid "Misc. Information" -msgstr "Rôzne informácie" - -msgid "Mobile Telephone Number" -msgstr "Mobilné číslo" - -msgid "Modified" -msgstr "Modifikované" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Upravená IPA lokalita \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Upravený OTP token \"%(value)s\"" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Upraviť %(name)s '%(value)s'?" - -msgid "Modify CA configuration." -msgstr "Upraviť CA konfiguráciu." - -msgid "Modify DNS forward zone." -msgstr "Upraviť DNS forward zónu" - -msgid "Modify OTP configuration options." -msgstr "Upraviť OTP konfiguračné voľby." - -msgid "Modify a DNS resource record." -msgstr "Upraviť DNS záznam" - -msgid "Modify a OTP token." -msgstr "Upraviť OTP token" - -msgid "Modify a group." -msgstr "Upraviť skupinu." - -msgid "Modify a vault." -msgstr "Upraviť vault." - -msgid "Modify an HBAC rule." -msgstr "Upraviť HBAC pravidlo." - -msgid "Modify an HBAC service." -msgstr "Upraviť HBAC službu." - -msgid "Modify configuration options." -msgstr "Upraviť konfiguračné voľby." - -msgid "Modify information about an IPA location." -msgstr "Upraviť informácie o IPA lokalite." - -msgid "NIS domain name" -msgstr "NIS doménové meno" - -msgid "Name" -msgstr "Názov" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Nebola zadaná ani voľba --del-all a ani voľby pre zmazanie špecifického " -"záznamu.\n" -"Príkaz help môže byť použitý pre zobrazenie podporovaných typov záznamov." - -msgid "NetBIOS name" -msgstr "NetBIOS meno" - -msgid "Netgroup Settings" -msgstr "Netgroup nastavenia" - msgid "Network Services" msgstr "Sieťové služby" -msgid "New ACI name" -msgstr "Nový ACI názov" +msgid "Policy" +msgstr "Politika" -msgid "New Certificate" -msgstr "Nový certifikát" +msgid "Role-Based Access Control" +msgstr "" -msgid "New Password" -msgstr "Nové heslo" +msgid "Sudo" +msgstr "" -msgid "New password is required" -msgstr "Nové heslo je povinné" +msgid "Topology" +msgstr "" + +#, fuzzy +#| msgid "Trust Settings" +msgid "Trusts" +msgstr "Trust nastavenia" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +#| msgid "First OTP" +msgid "First" +msgstr "Prvé OTP" + +#, fuzzy +#| msgid "Last name" +msgid "Last" +msgstr "Priezvisko" msgid "Next" msgstr "Ďalšie" -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." +msgid "Page" +msgstr "Strana" -msgid "No Valid Certificate" -msgstr "Žiadny platný certifikát" +msgid "Prev" +msgstr "Predcházajúce" -msgid "No entries." -msgstr "Žiadne položky." +msgid "Undo" +msgstr "Vrátiť späť" -msgid "No free YubiKey slot!" -msgstr "Žiadny voľný YubiKey slot!" +msgid "Undo this change." +msgstr "Vrátiť späť túto zmenu." -msgid "No matching entries found" -msgstr "Nenašli sa žiadne zhodné položky" +msgid "Undo All" +msgstr "Vrátiť späť všetko" -msgid "No option to delete specific record provided." -msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" +msgid "Undo all changes in this field." +msgstr "" -msgid "No private group" -msgstr "Bez privátnej skupiny" +msgid "Text does not match field pattern" +msgstr "" -msgid "No response" -msgstr "Bez odpovede" +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a decimal number" +msgstr "musí byť desiatkové číslo" + +msgid "Format error" +msgstr "Chyba formátu" + +#, fuzzy +#| msgid "must be an integer" +msgid "Must be an integer" +msgstr "musí byť integer" msgid "Not a valid IP address" msgstr "Neplatná IP adresa" @@ -1599,1053 +23447,2855 @@ msgstr "Neplatná IPv4 adresa" msgid "Not a valid IPv6 address" msgstr "Neplatná IPv6 adresa" +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Maximálna hodnota je ${value}" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Minimálna hodnota je ${value}" + msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" msgstr "Neplatná sieťová adresa (príklady: 2001:db8::/64, 192.0.2.0/24)" -msgid "Note" -msgstr "Poznámka" - -msgid "Number of entries returned" -msgstr "Počet vrátených položiek" - -msgid "OK" -msgstr "OK" - -msgid "OTP" -msgstr "OTP" - -msgid "OTP Configuration" -msgstr "OTP konfigurácia" - -msgid "OTP Token" -msgstr "OTP token" - -msgid "OTP Token Settings" -msgstr "Nastavenia pre OTP token" - -msgid "OTP Tokens" -msgstr "OTP tokeny" - -msgid "OTP configuration options" -msgstr "OTP konfiguračné voľby" - -msgid "OTP token" -msgstr "OTP token" - -msgid "OTP tokens" -msgstr "OTP tokeny" - -msgid "One Time Password" -msgstr "Jednorázové heslo (OTP)" - -msgid "Only one value is allowed" -msgstr "Len jedna hodnota je povolená" - -msgid "Operating system" -msgstr "Operačný systém" - -msgid "Option added" -msgstr "Voľba pridaná" - -msgid "Options" -msgstr "Voľby" - -msgid "Order" -msgstr "Poradie" - -msgid "Org. Unit" -msgstr "Org. jednotka" - -msgid "Organization" -msgstr "Organizácia" - -msgid "Organizational Unit" -msgstr "Organizačná jednotka" - -msgid "Other Record Types" -msgstr "Ostatné typy záznamov" - -msgid "Override inherited settings" -msgstr "Potlačiť zdedené nastavenia" - -msgid "Overwrite GID" -msgstr "Prepísať GID" - -msgid "Owner" -msgstr "Vlastník" - -msgid "POSIX" -msgstr "POSIX" - -msgid "Page" -msgstr "Strana" - -msgid "Pager Number" -msgstr "Pager číslo" - -msgid "Password" -msgstr "Heslo" - -msgid "Password Policies" -msgstr "Politiky hesiel" - -msgid "Password Policy" -msgstr "Politika hesiel" - -msgid "Password can be specified only for symmetric vault" -msgstr "Heslo môže byť špecifikované len pre symetrický vault" - -msgid "Password change complete" -msgstr "Zmena hesla dokončená" - -msgid "Password expiration" -msgstr "Vypršanie hesla" - -msgid "Password reset was not successful." -msgstr "Nastavenie hesla nebolo úspešné" - -msgid "Passwords do not match" -msgstr "Heslá sa nezhodujú" - -msgid "Passwords do not match!" -msgstr "Heslá sa nezhodujú!" - -msgid "Passwords must match" -msgstr "Heslá sa musia zhodovať" - -msgid "Permission" -msgstr "Povolenie" - -msgid "Permission settings" -msgstr "Nastavenia oprávnenia" - -msgid "Permissions" -msgstr "Povolenia" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Prosím vyberte typ DNS záznamu" - -msgid "Please specify forwarders." -msgstr "Prosím špecifikujte forwardery." - -msgid "Policy" -msgstr "Politika" - -msgid "Port" -msgstr "Port" - -msgid "Positional arguments" -msgstr "Pozičný argument" - -msgid "Preferred Language" -msgstr "Preferovaný jazyk" - -msgid "Preserved user" -msgstr "Uschovaný používateľ" - -msgid "Preserved users" -msgstr "Uschovaní používatelia" - -msgid "Prev" -msgstr "Predcházajúce" - -msgid "Priority" -msgstr "Priorita" - -msgid "Privilege Settings" -msgstr "Nastavenia privilégia" - -msgid "Profile ID" -msgstr "ID profilu" - -msgid "Profile configuration" -msgstr "Configurácia profilu" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Konfigurácia profilu bola uložená do súboru '%(file)s'" - -msgid "Profiles" -msgstr "Profily" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "Verejný kľúč môže byť špecifikovný len pre asymetrický vault" - -msgid "Quick Links" -msgstr "Rýchle odkazy" - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "RADIUS Proxy Server Settings" -msgstr "RADIUS Proxy serverové nastavenia" - -msgid "RADIUS proxy configuration" -msgstr "RADIUS proxy konfigurácia" - -msgid "RADIUS proxy username" -msgstr "RADIUS proxy používateľské meno" - -msgid "Range Settings" -msgstr "Nastavenie rozsahu" - -msgid "Realm Domains" -msgstr "Realm domény" - -msgid "Reason for Revocation" -msgstr "Dôvod pre revokáciu" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Dôvod revokácie certifikátu (0-10)" - -msgid "Record Type" -msgstr "Typ záznamu" - -msgid "Record creation failed." -msgstr "Vytvorenie záznamu zlyhalo." - -msgid "Record name" -msgstr "Názov záznamu" - -msgid "Record not found." -msgstr "Záznam nenájdený" - -msgid "Record type" -msgstr "Typ záznamu" - -msgid "Records" -msgstr "Záznamy" - -msgid "Records for DNS Zone" -msgstr "Záznamy pre DNS zónu" - -msgid "Redirection to PTR record" -msgstr "Presmerovanie na PTR záznam" - -msgid "Refresh" -msgstr "Znovu načítať" - -msgid "Refresh the page." -msgstr "Znovu načítať stránku." - -msgid "Reload current settings from the server." -msgstr "Znovu načítať aktuálne nastavenia zo servera." - -msgid "Remove Permission" -msgstr "Odstrániť povolenie" - -msgid "Remove certificates from a service" -msgstr "Odstrániť certifikáty zo služby" - -msgid "Remove one or more certificates to the user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -msgid "Remove users and groups from an HBAC rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "Odstraňovanie %(servers)s z replikačnej topológie, prosím čakajte..." - -msgid "Rename" -msgstr "Premenovať" - -msgid "Replication configuration" -msgstr "Konfigurácia repliky" - -msgid "Required" -msgstr "Povinné" +#, fuzzy +#| msgid "Format error" +msgid "Parse error" +msgstr "Chyba formátu" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a positive number" +msgstr "musí byť desiatkové číslo" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "'${port}' nie je valídny port" msgid "Required field" msgstr "Povinné pole" -msgid "Reset Password" -msgstr "Obnoviť heslo" - -msgid "Reset your password." -msgstr "Obnoviť Vaše heslo." - -msgid "Restore" -msgstr "Obnoviť" - -msgid "Results are truncated, try a more specific search" -msgstr "Výsledky sú skrátené, vyskúšajte viac špecifické vyhľadávanie" - -msgid "Retrieve an existing certificate." -msgstr "Získať existujúci certifikát." - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Získanie CA stavu zlyhalo: %s" - -msgid "Revert" -msgstr "Vrátiť" - -msgid "Revoke a certificate." -msgstr "Revokácia certifikátu." - -msgid "Role Settings" -msgstr "Nastavenia role" - -msgid "Role name" -msgstr "Názov role" - -msgid "Roles" -msgstr "Role" - -msgid "Rule name" -msgstr "Názov pravidla" - -msgid "Rule status" -msgstr "Stav pravidla" - -msgid "Rules" -msgstr "Pravidlá" - -msgid "Run Test" -msgstr "Spustiť test" - -msgid "SELinux Options" -msgstr "SELinux voľby" - -msgid "SELinux User" -msgstr "SELinux používateľ" - -msgid "SID" -msgstr "SID" - -msgid "SOA record serial number" -msgstr "Sériové číslo SOA záznamu" - -msgid "SSH public key" -msgstr "Verejný SSH kľúč" - -msgid "SSH public key fingerprint" -msgstr "Odtlačok verejného SSH kľúča (fingerprint)" - -msgid "SSH public key:" -msgstr "Verejný SSH kľuč" - -msgid "SSH public keys" -msgstr "Verejné SSH kľúče" - -#, python-format -msgid "Same as --%s" -msgstr "Rovnaké ako --%s" - -msgid "Save" -msgstr "Uložiť" - -msgid "Search" -msgstr "Vyhľadávanie" - -msgid "Search Options" -msgstr "Voľby vyhľadávania" - -msgid "Search for DNS forward zones." -msgstr "Vyhľadávať DNS forward zóny" - -msgid "Search for DNS servers." -msgstr "Vyhľadať DNS servery" - -msgid "Search for HBAC rules." -msgstr "Vyhľadať HBAC pravidlá." - -msgid "Search for HBAC services." -msgstr "Vyhľadať HBAC služby." - -msgid "Search for IPA locations." -msgstr "Vyhľadať IPA lokalitu." - -msgid "Search for OTP token." -msgstr "Vyhľadať OTP token" - -msgid "Search for Sudo Commands." -msgstr "Vyhľadať sudo príkazy." - -msgid "Search for existing certificates." -msgstr "Vyhľadávanie existujúcich certifikátov." - -msgid "Search for groups." -msgstr "Vyhľadávať skupiny." - -msgid "Search for permissions." -msgstr "Vyhľadať povolenia." - -msgid "Search scope" -msgstr "Rozsah vyhľadávania" - -msgid "Second Code" -msgstr "Druhý kód" - -msgid "Second OTP" -msgstr "Druhé OTP" - -msgid "Segment details" -msgstr "Detaily segmentu" - -msgid "Select All" -msgstr "Označiť všetko" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Sémantika %(label)s bola zmenená. %(current_behavior)s\n" -"%(hint)s" - -msgid "Serial Number" -msgstr "Sériové číslo" - -msgid "Serial Number (hex)" -msgstr "Sériové číslo (hexadecimálne)" - -msgid "Serial number" -msgstr "Sériové číslo" - -msgid "Serial number (hex)" -msgstr "Sériové číslo (hexadecimálne)" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "Server %(srv)s nemôže kontaktovať servery: %(replicas)s" - -msgid "Server Role" -msgstr "Server rola" - -msgid "Server Roles" -msgstr "Serverové role" - -msgid "Server will check DNS forwarder(s)." -msgstr "Server skontroluje DNS forwarder(y)." - -msgid "Servers" -msgstr "Servery" - -msgid "Servers details:" -msgstr "Detaily serverov:" - -msgid "Servers in location" -msgstr "Servery v lokalite." - -msgid "Servers that belongs to the IPA location" -msgstr "Servery patriace do IPA lokality" - -msgid "Service" -msgstr "Služba" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Služba '%(service)s' nenájdená v Kerberos databáze" - -msgid "Service Certificate" -msgstr "Certifikát služby" - -msgid "Service Options" -msgstr "Voľby služieb" - -msgid "Service Settings" -msgstr "Nastavenia služby" - -msgid "Service name" -msgstr "Názov služby" - -msgid "Services" -msgstr "Služby" - -msgid "Set" -msgstr "Nastaviť" - -msgid "Set OTP" -msgstr "Nastaviť OTP" - -msgid "Set SSH key" -msgstr "Nastaviť SSH kľúč" - -msgid "Set a user's password." -msgstr "Nastaviť používateľské heslo." - -msgid "Settings" -msgstr "Nastavenia" - -msgid "Show" -msgstr "Zobraziť" - -msgid "Show QR code" -msgstr "Zobraziť QR kód" - -msgid "Show Results" -msgstr "Zobraz výsledky" - -msgid "Show details" -msgstr "Zobraziť detaily" - -msgid "Show the current OTP configuration." -msgstr "Zobraziť aktuálnu OTP konfiguráciu." - -msgid "Show the current configuration." -msgstr "Zobraziť konfiguračné voľby" - -msgid "Show/Set key" -msgstr "Zobraziť/Nastaviť kľúč" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Zobrazených ${start} až ${end} z ${total} položiek." - -msgid "Size" -msgstr "Veľkosť" - -msgid "Skip DNS check" -msgstr "Preskočiť DNS kontrolu" - -#, python-format -msgid "Skipped %(key)s" -msgstr "Preskočené %(key)s" - -#, python-format -msgid "Skipped %(map)s" -msgstr "Preskočené %(map)s" - -msgid "Some entries were not deleted" -msgstr "Niektoré položky neboli odstránené" - -msgid "Specified CAs" -msgstr "Špecifikované CA" - -msgid "Specified Groups" -msgstr "Špecifikované skupiny" - -msgid "Specified Profiles" -msgstr "Špecifikované profily" - -msgid "Specified Services and Groups" -msgstr "Špecifikované služby a skupiny" - -msgid "Stage users" -msgstr "Predpripravení používatelia" - -msgid "Standard Record Types" -msgstr "Štandardné typy záznamov" - -msgid "State/Province" -msgstr "Štát/Provincia" - -msgid "Status" -msgstr "Stav" - -msgid "Street address" -msgstr "Ulica" - -msgid "Structured" -msgstr "Štrukturovane" - -msgid "Subtree" -msgstr "Podstrom" - -msgid "Success" -msgstr "Úspech" - -msgid "Sudo Commands" -msgstr "Sudo príkazy" - -msgid "Sudo Rules" -msgstr "Sudo pravidlá" - -msgid "Sync OTP Token" -msgstr "Synchronizovať OTP Token" - -msgid "Synchronize an OTP token." -msgstr "Synchronizovať OTP token" - -msgid "Target DN" -msgstr "Cieľové DN" - -msgid "Target group" -msgstr "Cieľová skupina" - -msgid "Target reverse zone not found." -msgstr "Cieľová reverzná zóna nenájdená." - -msgid "Telephone Number" -msgstr "Telefónne číslo" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "ACI pre oprávnenie %(name)s sa nenašlo v %(dn)s " - -msgid "The IPA realm" -msgstr "IPA realm" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Najbežnejšie typy záznamov pre tento typ zóny sú: %s\n" - -msgid "The username, password or token codes are not correct" -msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" - -msgid "This command requires root access" -msgstr "Tento príkaz vyžaduje root oprávnenia" - -msgid "This entry already exists" -msgstr "Táto položka už existuje" - -msgid "This entry cannot be enabled or disabled" -msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" - -msgid "This entry is already a member" -msgstr "Táto položka už je členom" - -msgid "This entry is already disabled" -msgstr "Táto položka bola už deaktivovaná" - -msgid "This entry is not a member" -msgstr "Táto položka nie je členom" - -msgid "This is already a posix group" -msgstr "Toto už je posix skupina" - -msgid "This may take some time, please wait ..." -msgstr "Toto môže trvať nejaký čas, prosím čakajte ..." - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" -"Táto stránka obsahuje neuložené zmeny. Prosím uložte alebo vráťte zmeny späť." - -msgid "Token ID" -msgstr "Token ID" - -msgid "Token synchronization failed" -msgstr "Synchronizácia tokenu zlyhala" - -msgid "Token was synchronized" -msgstr "Token bol zosynchronizovaný" - -msgid "Topic or Command" -msgstr "Téma alebo príkaz" - -msgid "Topology is disconnected" -msgstr "Topológia je odpojená" - -msgid "Trust Settings" -msgstr "Trust nastavenia" - -msgid "Two factor authentication (password + OTP)" -msgstr "Dvojfaktorová autentifikácia (heslo + OTP)" - -msgid "Type" -msgstr "Typ" - -msgid "Type of the token" -msgstr "Typ tokenu" - -msgid "Types of supported user authentication" -msgstr "Podporované typy autentifikácie používateľa" - -msgid "UID" -msgstr "UID" - -msgid "URI" -msgstr "URI" - -msgid "URL" -msgstr "URL" - -msgid "Undo" -msgstr "Vrátiť späť" - -msgid "Undo All" -msgstr "Vrátiť späť všetko" - -msgid "Undo this change." -msgstr "Vrátiť späť túto zmenu." - -msgid "Unique ID" -msgstr "Unikátne ID" - -msgid "Unknown Error" -msgstr "Neznáma chyba" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Neznáma voľba: %(option)s" - -msgid "Unlock" -msgstr "Odomknúť" - -msgid "Unsaved Changes" -msgstr "Neuložené zmeny" - -msgid "Unselect All" -msgstr "Odznačiť všetko" - -msgid "Unspecified" -msgstr "Nešpecifikované" - msgid "Unsupported value" msgstr "Nepodporovaná hodnota" -msgid "Update" -msgstr "Aktualizovať" +#, fuzzy +#| msgid "Roles" +msgid "Role" +msgstr "Role" -msgid "Update DNS entries" -msgstr "Aktualizovať DNS položky." +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" -msgid "User" -msgstr "Používateľ" +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" -msgid "User Group" -msgstr "Používateľská skupina" +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" -msgid "User Groups" -msgstr "Používateľské skupiny" +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" -msgid "User ID" -msgstr "ID používateľa" +#, fuzzy +#| msgid "IPA Server" +msgid "" +"\n" +"IPA servers\n" +msgstr "IPA Server" -msgid "User ID Number" -msgstr "ID používateľa" +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" -msgid "User ID Number (system will assign one if not provided)" -msgstr "ID používateľa (systém priradí automaticky ak nie je zadané) " +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all locations:\n" +#| " ipa location-find\n" +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Nájdenie všetkých lokalít:\n" +" ipa location-find\n" -msgid "User Options" -msgstr "Voľby používateľov" +#, fuzzy +#| msgid "" +#| "\n" +#| " Show specific location:\n" +#| " ipa location-show location\n" +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Zobrazenie špecifickej lokality:\n" +" ipa location-show lokalita\n" -msgid "User authentication types" -msgstr "Typy autentifikácie používateľa" +#, fuzzy +#| msgid "Servers" +msgid "server" +msgstr "Servery" -msgid "User categories" -msgstr "Kategórie používateľov" +#, fuzzy +#| msgid "Servers" +msgid "servers" +msgstr "Servery" -msgid "User group" -msgstr "Používateľská skupina" +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Servers" +msgstr "IPA Server" -msgid "User group ACI grants access to" -msgstr "ACI používateľskej skupiny udeluje prístup k" +#, fuzzy +#| msgid "Servers in location" +msgid "Server location" +msgstr "Servery v lokalite." -msgid "User login" -msgstr "Prihlasovacie meno" - -msgid "User name" -msgstr "Používateľské meno" - -msgid "User password" -msgstr "Používateľské heslo" - -msgid "Username" -msgstr "Používateľské meno" - -msgid "Users" -msgstr "Používatelia" - -msgid "Valid Certificate Present" -msgstr "Prítomný platný certifikát" - -msgid "Validation error" -msgstr "Chyba validácie" - -msgid "Validity" -msgstr "Platnosť" - -msgid "Validity end" -msgstr "Koniec platnosti" - -msgid "Validity start" -msgstr "Začiatok platnosti" - -msgid "Verify Password" -msgstr "Overiť heslo" - -msgid "View Certificate" -msgstr "Prezrieť certifikát" - -msgid "Warning" -msgstr "Varovanie" - -msgid "Weight" -msgstr "Váha" +#, fuzzy +#| msgid "Service Settings" +msgid "Service weight" +msgstr "Nastavenia služby" msgid "Weight for server services" msgstr "Váha pre služby servera" -msgid "Who" -msgstr "Kto" +#, fuzzy +#| msgid "Service Certificate" +msgid "Service relative weight" +msgstr "Certifikát služby" -msgid "YubiKey slot" -msgstr "YubiKey slot" +#, fuzzy +#| msgid "Weight for server services" +msgid "Relative weight for server services (counts per location)" +msgstr "Váha pre služby servera" -msgid "ZIP" -msgstr "PSČ" +#, fuzzy +#| msgid "Disabled service \"%(value)s\"" +msgid "Enabled server roles" +msgstr "Deaktivovaná služba \"%(value)s\"" -msgid "Zone forwarders" -msgstr "Zónové forwardery" +msgid "List of enabled roles" +msgstr "" -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "Zóna nájdená: ${zone}" +#, fuzzy +#| msgid "Modify information about an IPA location." +msgid "Modify information about an IPA server." +msgstr "Upraviť informácie o IPA lokalite." -msgid "Zone name" -msgstr "Názov zóny" +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." -msgid "Zone name (FQDN)" -msgstr "Názov zóny (FQDN)" +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" -msgid "algorithm value: allowed interval 0-255" -msgstr "algoritmus: hodnota má povolený interval 0-255" +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" -msgid "an internal error has occurred" -msgstr "nastala interná chyba" +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" #, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "nastala interná chyba na serveri '%(server)s'" +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" #, python-format -msgid "can be at most %(maxvalue)d" -msgstr "môže byť najviac %(maxvalue)d" +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "chyba na serveri '%(server)s': %(error)s" #, python-format -msgid "can be at most %(maxvalue)s" -msgstr "môže byť najviac %(maxvalue)s" +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" #, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "nedá sa pripojiť k '%(uri)s': %(error)s" +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" -msgid "change collided with another change" -msgstr "zmena spôsobila kolíziu s inou zmenou" +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, fuzzy +#| msgid "Some entries were not deleted" +msgid "Server has already been deleted" +msgstr "Niektoré položky neboli odstránené" + +msgid "Agreements deleted" +msgstr "" + +#, fuzzy +#| msgid "Some entries were not deleted" +msgid "Following segments were not deleted:" +msgstr "Niektoré položky neboli odstránené" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "Stav" + +#, fuzzy +#| msgid "Servers" +msgid "Server state" +msgstr "Servery" + +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Zmenené heslo pre \"%(value)s\"" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "Member principals" +msgstr "Členské skupiny" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, fuzzy, python-format +#| msgid "Member of" +msgid "member %s" +msgstr "Členom" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove member from a named service delegation." +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy +#| msgid "Add services to an HBAC rule." +msgid "service delegation rule" +msgstr "Pridať služby do HBAC pravidla." + +#, fuzzy +#| msgid "Service Options" +msgid "service delegation rules" +msgstr "Voľby služieb" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation rules" +msgstr "Voľby služieb" + +#, fuzzy +#| msgid "Service Options" +msgid "Service delegation rule" +msgstr "Voľby služieb" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "service delegation target" +msgstr "" + +#, fuzzy +#| msgid "Service Settings" +msgid "service delegation targets" +msgstr "Nastavenia služby" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation targets" +msgstr "Nastavenia služby" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service delegation target" +msgstr "Nastavenia služby" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "Poškodené DN" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s nie je POSIX užívateľ" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "Neplatná LDAP URI." + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete location:\n" +#| " ipa location-del location\n" +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Odstránenie lokality:\n" +" ipa location-del lokalita\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Disable the Kerberos key and SSL certificate of a service." +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Base-64 encoded user certificate" +msgid "Base-64 encoded host certificate" +msgstr "Base-64 zakódovaný používateľský certifikát" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "Odtlačok verejného SSH kľúča (fingerprint)" + +#, fuzzy +#| msgid "Authentication" +msgid "Authentication Indicators" +msgstr "Autentifikácia" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, fuzzy +#| msgid "No A, AAAA, SSHFP or PTR records found." +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "" msgid "cn is immutable" msgstr "cn je nemeniteľné" -msgid "configuration options" -msgstr "konfiguračné voľby" +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +#, fuzzy, python-format +#| msgid "Disabled service \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "Deaktivovaná služba \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add new principal alias to host entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove principal alias from a host entry" +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Modify an HBAC service." +msgid "Modify Class of Service entry" +msgstr "Upraviť HBAC službu." + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for HBAC services." +msgid "Search for Class of Service entry" +msgstr "Vyhľadať HBAC služby." + +#, fuzzy +#| msgid "password policies" +msgid "password policy" +msgstr "Politky hesiel" + +msgid "password policies" +msgstr "Politky hesiel" + +msgid "Password Policies" +msgstr "Politiky hesiel" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Používateľské meno" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "IPA trust" +msgid "trust" +msgstr "IPA trust" + +#, fuzzy +#| msgid "IPA trust" +msgid "trusts" +msgstr "IPA trust" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "invalid Profile ID" +msgid "invalid SID: {SID}" +msgstr "nevalídne ID profilu" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +#, fuzzy +#| msgid "Domain" +msgid "domain" +msgstr "Doména" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +#, fuzzy +#| msgid "Realm Domains" +msgid "Realm-domain mismatch" +msgstr "Realm domény" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +#, fuzzy +#| msgid "ID Range" +msgid "id range" +msgstr "ID rozsah" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +#, fuzzy +#| msgid "Range Settings" +msgid "range exists" +msgstr "Nastavenie rozsahu" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted group \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, fuzzy +#| msgid "Profile configuration" +msgid "trust configuration" +msgstr "Configurácia profilu" + +#, fuzzy +#| msgid "DNS Global Configuration" +msgid "Global Trust Configuration" +msgstr "DNS globálne nastavenia" + +#, fuzzy +#| msgid "IPA trust" +msgid "IPA AD trust agents" +msgstr "IPA trust" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +#, fuzzy +#| msgid "Unsupported value" +msgid "unsupported trust type" +msgstr "Nepodporovaná hodnota" + +#, fuzzy, python-format +#| msgid "Modified ACI \"%(value)s\"" +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Upravené ACI \"%(value)s\"" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +#, fuzzy +#| msgid "trusted domain user not found" +msgid "trust domains" +msgstr "trust doménový užívateľ nenájdený" + +#, fuzzy +#| msgid "trusted domain user not found" +msgid "Trusted domains" +msgstr "trust doménový užívateľ nenájdený" + +#, fuzzy +#| msgid "trusted domain user not found" +msgid "Trusted domain" +msgstr "trust doménový užívateľ nenájdený" + +#, fuzzy +#| msgid "Domain name" +msgid "Domain enabled" +msgstr "Doménové meno" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, fuzzy, python-format +#| msgid "Enabled HBAC rule \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +#, fuzzy +#| msgid "Certificate Authority" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "Certifikačná autorita" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +#, fuzzy +#| msgid "Modify configuration options." +msgid "Certificate Identity Mapping configuration options" +msgstr "Upraviť konfiguračné voľby." + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +#, fuzzy +#| msgid "Modify CA configuration." +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Upraviť CA konfiguráciu." + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Zobraziť konfiguračné voľby" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Certificate Identity Mapping Rules" +msgstr "Certifikačné autority" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rule" +msgstr "Typ certifikátu" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "Certificate Identity Mapping Rule name" +msgstr "Certifikačné profily nemôžu byť premenované" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Rule used to map the certificate with a user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" +msgstr[2] "" + +#, fuzzy +#| msgid "Display information about a DNS forward zone." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Zobraziť informácie o DNS forward zóne" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Odstrániť certifikačný profil" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "Prihlasovacie meno" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +#, fuzzy +#| msgid "Privilege Settings" +msgid "Privilege" +msgstr "Nastavenia privilégia" + +#, fuzzy, python-format +#| msgid "Added HBAC rule \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, fuzzy, python-format +#| msgid "Deleted profile \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified HBAC rule \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy +#| msgid "Malformed DN" +msgid "Malformed principal" +msgstr "Poškodené DN" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "service" +msgstr "Služba" + +#, fuzzy +#| msgid "Services" +msgid "services" +msgstr "Služby" + +#, fuzzy +#| msgid "Service Options" +msgid "Service principal alias" +msgstr "Voľby služieb" + +msgid "Base-64 encoded service certificate" +msgstr "Base-64 zakódovaný certifikát služby" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new IPA service." +msgstr "Pridať novú HBAC službu." + +#, fuzzy, python-format +#| msgid "Added HBAC service \"%(value)s\"" +msgid "Added service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +msgid "force principal name even if host not in DNS" +msgstr "" + +#, fuzzy +#| msgid "Skip DNS check" +msgid "Skip host check" +msgstr "Preskočiť DNS kontrolu" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new SMB service." +msgstr "Pridať novú HBAC službu." + +#, fuzzy +#| msgid "NetBIOS name" +msgid "SMB service NetBIOS name" +msgstr "NetBIOS meno" + +#, fuzzy, python-format +#| msgid "Deleted HBAC service \"%(value)s\"" +msgid "Deleted service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, fuzzy, python-format +#| msgid "Modified HBAC service \"%(value)s\"" +msgid "Modified service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, fuzzy, python-format +#| msgid "%(count)d HBAC rule matched" +#| msgid_plural "%(count)d HBAC rules matched" +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Deaktivovaná služba \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Add new certificates to a service" +msgid "Add new principal alias to a service" +msgstr "Pridať nové certifikáty k službe" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove principal alias from a service" +msgstr "Odstrániť certifikáty zo služby" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "location" +msgid "delegation" +msgstr "lokalita" + +#, fuzzy +#| msgid "locations" +msgid "delegations" +msgstr "lokality" + +#, fuzzy +#| msgid "locations" +msgid "Delegations" +msgstr "lokality" + +#, fuzzy +#| msgid "location" +msgid "Delegation" +msgstr "lokalita" + +#, fuzzy, python-format +#| msgid "Added IPA location \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Deleted IPA location \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Odstránená IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Modified IPA location \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Upravená IPA lokalita \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%(count)d IPA location matched" +#| msgid_plural "%(count)d IPA locations matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d IPA lokalita nájdená" +msgstr[1] "%(count)d IPA lokalít nájdených" +msgstr[2] "%(count)d IPA lokalít nájdených" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "HBAC pravidlá" + +msgid "HBAC Rules" +msgstr "HBAC pravidlá" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Odstránené HBAC pravidlo \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d HBAC pravidlo nájdené" +msgstr[1] "%(count)d HBAC pravidiel nájdených" +msgstr[2] "%(count)d HBAC pravidiel nájdených" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Deaktivované HBAC pravidlo \"%(value)s\"" + +msgid "Access time" +msgstr "Čas prístupu" + +#, fuzzy +#| msgid "Add users and groups to an HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "Prístup povolený: %s" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +#, fuzzy +#| msgid "Member groups" +msgid "Member service groups" +msgstr "Členské skupiny" + +#, fuzzy +#| msgid "HBAC services" +msgid "Member HBAC service groups" +msgstr "HBAC služby" + +msgid "Member ID user overrides" +msgstr "" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member ID user overrides" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member permissions" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member HBAC service" +msgstr "Nepriame členstvo" + +#, fuzzy +#| msgid "Indirect Membership" +msgid "Indirect Member HBAC service group" +msgstr "Nepriame členstvo" + +msgid "Invalid format. Should be name=value" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" + +msgid "entry" +msgstr "" + +#, fuzzy +#| msgid "No entries." +msgid "entries" +msgstr "Žiadne položky." + +msgid "Entry" +msgstr "" #, python-format msgid "container entry (%(container)s) not found" msgstr "kontajner (%(container)s) nenájdený" -msgid "delete" -msgstr "odstrániť" +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" + +#, fuzzy, python-format +#| msgid "key %(key)s already exists" +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "kľúč %(key)s už existuje" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "voľby nie sú povolené" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgid "these attributes are not allowed: %(attrs)s" msgstr "" -"doménové meno '%(domain)s' by malo byť normalizované na: %(normalized)s" -msgid "domain name cannot be longer than 255 characters" -msgstr "doménové meno nemôže byť dlhšie ako 255 znakov" +msgid "attribute is not configurable" +msgstr "" -msgid "empty DNS label" -msgstr "prázdny DNS label" +msgid "No such attribute on this entry" +msgstr "" #, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "chyba na serveri '%(server)s': %(error)s" +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" -msgid "flags value: allowed interval 0-255" -msgstr "flagy: hodnota má povolený interval 0-255" - -msgid "group" -msgstr "skupina" - -msgid "groups" -msgstr "skupiny" - -msgid "incorrect type" -msgstr "Nesprávný typ" +msgid "the entry was deleted while being modified" +msgstr "" #, python-format -msgid "invalid DN (%s)" -msgstr "neplatné DN (%s)" +msgid "%s" +msgstr "" -msgid "invalid IP address format" -msgstr "neplatný formát IP adresy" +#, fuzzy, python-format +#| msgid "Failed to add" +msgid "%s to add" +msgstr "Zlyhalo pridanie" #, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "neplatná verzia IP adresy (je %(value)d, musí byť %(required_value)d)!" - -msgid "invalid IP network format" -msgstr "neplatný formát IP siete" - -msgid "invalid Profile ID" -msgstr "nevalídne ID profilu" - -msgid "invalid SSH public key" -msgstr "neplatný verejný SSH kľúč" - -msgid "invalid address format" -msgstr "neplatný formát adresy" - -msgid "invalid domain name" -msgstr "neplatné doménové meno" +msgid "%s to remove" +msgstr "" #, python-format -msgid "invalid domain-name: %s" -msgstr "neplatné doménové meno: %s" +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" -msgid "invalid domain-name: not fully qualified" -msgstr "neplatné doménové meno: nie je plne kvalifikované (FQDN)" +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "added attribute value to entry %(value)s" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "musí byť True alebo False" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "Vypršanie hesla" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "Domovský priečinok" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory Drive" +msgstr "Domovský priečinok" #, python-format msgid "invalid e-mail format: %(email)s" msgstr "neplatný formát e-mailovej adresy: %(email)s" -msgid "invalid escape code in domain name" -msgstr "neplatný escape kód v doménovom mene" - -msgid "is required" -msgstr "je povinné" - -msgid "iterations value: allowed interval 0-65535" -msgstr "iterácie: hodnota má povolený interval 0-65535" - -msgid "kerberos ticket policy settings" -msgstr "nastavenia kerberos ticket policy" - -#, python-format -msgid "key %(key)s already exists" -msgstr "kľúč %(key)s už existuje" - -msgid "location" -msgstr "lokalita" - -msgid "locations" -msgstr "lokality" - #, python-format msgid "manager %(manager)s not found" msgstr "manažér %(manager)s nenájdený" -#, python-format -msgid "map %(map)s already exists" -msgstr "mapovanie %(map)s už existuje" +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Issuer of the certificate" +msgstr "Revokácia certifikátu." -msgid "maximum serial number" -msgstr "maximálne sériové číslo" +#, fuzzy +#| msgid "Service Certificate" +msgid "Subject of the certificate" +msgstr "Certifikát služby" -msgid "minimum serial number" -msgstr "minimálne sériové číslo" +msgid "cannot have an empty subject" +msgstr "" -msgid "must be True or False" -msgstr "musí byť True alebo False" +msgid "cannot specify both subject/issuer and certificate" +msgstr "" -msgid "must be Unicode text" -msgstr "musí byť Unicode text" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" -msgid "must be a decimal number" -msgstr "musí byť desiatkové číslo" +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the user entry." +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" -msgid "must be an integer" -msgstr "musí byť integer" +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added group \"%(value)s\"" +msgid "Added user \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +#, fuzzy +#| msgid "Default group for new users not found" +msgid "Default group for new users is not POSIX" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +#, fuzzy, python-format +#| msgid "Deleted record \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "Odstránený záznam \"%(value)s\"" #, python-format -msgid "must be at least %(minvalue)d" -msgstr "musí byť najmenej %(minvalue)d" +msgid "%s: user is already preserved" +msgstr "%s: používateľ je už uschovaný" + +#, fuzzy, python-format +#| msgid "Modified group \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +#, fuzzy, python-format +#| msgid "%s: user is already preserved" +msgid "user \"%s\" is already active" +msgstr "%s: používateľ je už uschovaný" + +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" #, python-format -msgid "must be at least %(minvalue)s" -msgstr "musí byť najmenej %(minvalue)s" +msgid "Disabled user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" -msgid "must be binary data" -msgstr "musí byť binárny údaj" +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" -msgid "no modifications to be performed" -msgstr "žiadne úpravy neboli vykonané" +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" -msgid "not found" -msgstr "Nenašlo sa" +#, fuzzy, python-format +#| msgid "Disabled user account \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" -msgid "not fully qualified" -msgstr "nie je plne kvalifikované (FQDN)" +#, fuzzy +#| msgid "Failed to add" +msgid "Failed logins" +msgstr "Zlyhalo pridanie" + +#, fuzzy +#| msgid "User authentication types" +msgid "Last successful authentication" +msgstr "Typy autentifikácie používateľa" + +#, fuzzy +#| msgid "User authentication types" +msgid "Last failed authentication" +msgstr "Typy autentifikácie používateľa" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, fuzzy, python-format +#| msgid "salt value: %(err)s" +msgid "%(host)s failed: %(error)s" +msgstr "salt hodnota: %(err)s" #, python-format -msgid "objectclass %s not found" -msgstr "objectclass %s nenájdená" +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Účet deaktivovaný: %(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add new principal alias to the user entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove principal alias from the user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +#, fuzzy +#| msgid "Unsupported value" +msgid "unsupported functional level" +msgstr "Nepodporovaná hodnota" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" #, python-format msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" msgstr "" -"povolené sú len písmená, čísla, %(chars)s . DNS label nesmie začínať alebo " -"končiť s %(chars2)s" -msgid "options are not allowed" -msgstr "voľby nie sú povolené" +#, fuzzy +#| msgid "trusted domain user not found" +msgid "no trusted domain is configured" +msgstr "trust doménový užívateľ nenájdený" -msgid "password policies" -msgstr "Politky hesiel" +#, fuzzy +#| msgid "trusted domain user not found" +msgid "domain is not configured" +msgstr "trust doménový užívateľ nenájdený" -msgid "permission" -msgstr "povolenie" - -msgid "pkinit" -msgstr "pkinit" - -msgid "preserve" -msgstr "uschovať" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "dotaz '%(owner)s %(rtype)s' s EDNS0: %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "dotaz '%(owner)s %(rtype)s': %(error)s" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgid "SID is not valid" msgstr "" -"záznam '%(owner)s %(rtype)s' neprešiel DNSSEC validáciou na serveri %(ip)s" -#, python-format -msgid "request failed with HTTP status %d" -msgstr "požiadavka zlyhala s HTTP stavom %d" +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" -#, python-format -msgid "salt value: %(err)s" -msgstr "salt hodnota: %(err)s" +msgid "SID does not match any trusted domain" +msgstr "" -msgid "sudo commands" -msgstr "sudo príkazy" +#, fuzzy +#| msgid "Trust Settings" +msgid "Trust setup" +msgstr "Trust nastavenia" -msgid "sudo rules" -msgstr "sudo pravidlá" +#, fuzzy +#| msgid "trusted domain user not found" +msgid "Our domain is not configured" +msgstr "trust doménový užívateľ nenájdený" -msgid "this option is deprecated" -msgstr "táto voľba je zastaraná" +#, fuzzy +#| msgid "trusted domain user not found" +msgid "No trusted domain is not configured" +msgstr "trust doménový užívateľ nenájdený" -msgid "too many '@' characters" -msgstr "príliš mnoho '@' znakov" +#, fuzzy +#| msgid "trusted domain object not found" +msgid "trusted domain object" +msgstr "trust doménový objekt nenájdený" + +#, fuzzy +#| msgid "trusted domain user not found" +msgid "domain is not trusted" +msgstr "trust doménový užívateľ nenájdený" + +msgid "no trusted domain matched the specified flat name" +msgstr "" msgid "trusted domain object not found" msgstr "trust doménový objekt nenájdený" +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + msgid "trusted domain user not found" msgstr "trust doménový užívateľ nenájdený" -#, python-format -msgid "unknown command '%(name)s'" -msgstr "neznámy príkaz '%(name)s'" +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +#, fuzzy +#| msgid "Invalid credentials" +msgid "CIFS credentials object" +msgstr "Nesprávne prihlasovacie údaje" #, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "neznáma chyba %(code)d od %(server)s: %(error)s" +msgid "CIFS server %(host)s denied your credentials" +msgstr "" -msgid "value" -msgstr "hodnota" +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" #, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: rola nenájdená" +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +#, fuzzy +#| msgid "Invalid credentials" +msgid "Credentials" +msgstr "Nesprávne prihlasovacie údaje" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +#, fuzzy +#| msgid "Trust Settings" +msgid "Trusting forest" +msgstr "Trust nastavenia" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +#, fuzzy +#| msgid "Unknown Error" +msgid "Unknown" +msgstr "Neznáma chyba" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Non-Active Directory domain" +msgstr "Active Directory doména" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "Request must be a dict" +msgstr "musí byť integer" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "params must be a list" +msgstr "musí byť integer" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, fuzzy, python-format +#| msgid "RADIUS Proxy Server Settings" +msgid "%s: RADIUS proxy server not found" +msgstr "RADIUS Proxy serverové nastavenia" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 1" +msgstr "musí byť najmenej %(minvalue)d" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "Password is too long!\n" +msgstr "Vypršanie hesla" + +msgid "Failed to create random key!\n" +msgstr "" + +#, fuzzy +#| msgid "Failed to add" +msgid "Failed to create key!\n" +msgstr "Zlyhalo pridanie" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/tg.po b/po/tg.po index 6ae92fd22..4ce7d166d 100644 --- a/po/tg.po +++ b/po/tg.po @@ -7,7 +7,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2019-11-11 10:26+0000\n" "Last-Translator: Copied by Zanata \n" "Language-Team: Tajik\n" @@ -18,308 +18,23933 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "ACI name" -msgstr "Номи ACI" - -msgid "ACI prefix" -msgstr "Префикси ACI" - -msgid "ACIs" -msgstr "ACIs" - -msgid "Add" -msgstr "Илова кардан" - -msgid "Allow" -msgstr "Иҷозат додан" - -msgid "Already registered" -msgstr "Ааллакай қайд карда шуд" - -msgid "Attribute" -msgstr "Аттрибут" - -msgid "Attributes" -msgstr "Аттрибутҳо" - -msgid "Audit" -msgstr "Назорат" - -msgid "Available" -msgstr "Дастрас" - -msgid "Cancel" -msgstr "Бекор кардан" - -msgid "City" -msgstr "Шаҳр" - -msgid "Class" -msgstr "Синф" - -msgid "Close" -msgstr "Пӯшидан" - -msgid "Commands" -msgstr "Фармонҳо" - -msgid "Configuration" -msgstr "Ҷӯрсозӣ" - -msgid "Data" -msgstr "Маълумот" - -msgid "Delete" -msgstr "Нест кардан" - -msgid "Delete all?" -msgstr "Ҳамаро нест мекунед?" - -msgid "Description" -msgstr "Шарҳ" - -msgid "Display name" -msgstr "Номи намоишӣ" - -msgid "Enabled" -msgstr "Фаъолшуда" - -msgid "Entry" -msgstr "Вуруд" - -msgid "Error" -msgstr "Хатогӣ" - -msgid "Fax Number" -msgstr "Рақами факс" - -#, python-format -msgid "File %(file)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Filter" -msgstr "Полоишгар" - -msgid "Find" -msgstr "Ёфтан" - -msgid "First name" -msgstr "Ном" - -msgid "Force" -msgstr "Маҷбурӣ" - -msgid "General" -msgstr "Умумӣ" - -msgid "Get" -msgstr "Гирифтан" - -msgid "Group" -msgstr "Гурӯҳ" - -msgid "Groups" -msgstr "Гуруҳҳо" - -msgid "Host Name" -msgstr "Номи мизбон" - -msgid "Host name" -msgstr "Номи мизбон" - -msgid "Hostname" -msgstr "Номи мизбон" - -msgid "IPA Server" -msgstr "Сервери IPA" - -msgid "Initials" -msgstr "Ному насаб" - -msgid "Issue" -msgstr "Барориш" - -msgid "Issued By" -msgstr "Додааст:" - -msgid "Issued To" -msgstr "Додашудааст ба:" - -msgid "Issuer" -msgstr "Диҳанда" - -msgid "Job Title" -msgstr "Вазифа" - -msgid "Key" -msgstr "Тугма" - -msgid "LDAP DN" -msgstr "LDAP DN" - -msgid "LDAP password" -msgstr "Пароли LDAP" - -msgid "Last name" -msgstr "Насаб" - -msgid "Location" -msgstr "Макон" - -msgid "Manager" -msgstr "Диспетчер" - -msgid "New Password" -msgstr "Пароли нав" - -msgid "Note" -msgstr "Эзоҳ" - -msgid "OK" -msgstr "Хуб" - -msgid "Organization" -msgstr "Ташкилот" - #, c-format -msgid "Out of Memory!\n" +msgid "Out of memory!\n" msgstr "Берун аз хотира!\n" -msgid "Out of memory\n" -msgstr "Берун аз хотира \n" +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "" #, c-format -msgid "Out of memory \n" -msgstr "Берун аз хотира \n" +msgid "No write permissions on keytab file '%s'\n" +msgstr "" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "" #, c-format msgid "Out of memory!" msgstr "Берун аз хотира!" #, c-format -msgid "Out of memory!\n" +msgid "Unable to enable SSL in LDAP\n" +msgstr "" + +msgid "SASL Bind failed\n" +msgstr "" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" + +#, c-format +msgid "No values for %s" +msgstr "" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Host is already joined.\n" +msgstr "" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" + +#, c-format +msgid "fork() failed\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "" + +#, c-format +msgid "child exited with %d\n" +msgstr "" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "" + +msgid "Quiet mode. Only errors are displayed." +msgstr "" + +msgid "Unenroll this host from IPA server" +msgstr "" + +msgid "Hostname of this server" +msgstr "" + +msgid "hostname" +msgstr "номи мизбон" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Server to use" +msgstr "Сервери IPA" + +msgid "Specifies where to store keytab information." +msgstr "" + +msgid "filename" +msgstr "номи файл" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" + +msgid "LDAP password (if not using Kerberos)" +msgstr "" + +msgid "password" +msgstr "парол" + +#, fuzzy +#| msgid "LDAP password" +msgid "LDAP basedn" +msgstr "Пароли LDAP" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Removing principal %s\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "File %(file)s not found" +msgid "principal not found\n" +msgstr "Файли %(file)s пайдо нашуд." + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "File %(file)s not found" +msgid "realm not found\n" +msgstr "Файли %(file)s пайдо нашуд." + +msgid "Print debugging information" +msgstr "" + +msgid "Debugging output" +msgstr "" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "Kerberos Service Principal Name" +msgstr "" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "" + +msgid "Remove all principals in this realm" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Realm name" +msgstr "Азнавномгузорӣ" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "" + +#, c-format +msgid "out of memory\n" +msgstr "берун аз хотира\n" + +#, c-format +msgid "read error\n" +msgstr "хатогии хониш\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "" + +#, c-format +msgid "Out of memory \n" +msgstr "Берун аз хотира \n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "" + +msgid "Simple bind failed\n" +msgstr "" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "" + +#, c-format +msgid "Timeout exceeded." +msgstr "" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "" + +#, c-format +msgid "Missing reply control!\n" +msgstr "" + +#, c-format +msgid "Out of Memory!\n" msgstr "Берун аз хотира!\n" -msgid "Out of memory!?\n" -msgstr "Аз хотира берун шуд!?\n" +#, c-format +msgid "Failed to create control!\n" +msgstr "" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "" + +msgid "Failed to decode control reply!\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "Паролҳо номувофиқанд!" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "" + +msgid "Output only on errors" +msgstr "" + +msgid "Contact this specific KDC Server" +msgstr "" + +msgid "Server Name" +msgstr "Номи сервер" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "" + +msgid "Comma separated encryption types list" +msgstr "" + +msgid "Show the list of permitted encryption types and exit" +msgstr "" + +msgid "Permitted Encryption Types" +msgstr "" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" + +msgid "LDAP DN" +msgstr "LDAP DN" + +msgid "DN to bind as if not using kerberos" +msgstr "" + +msgid "LDAP password" +msgstr "Пароли LDAP" + +msgid "password to use if not using kerberos" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Prompt for LDAP password" +msgstr "Пароли LDAP" + +msgid "Path to the IPA CA certificate" +msgstr "" + +msgid "IPA CA certificate" +msgstr "" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Enter LDAP password" +msgstr "Пароли LDAP" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New Principal Password" +msgstr "Пароли нав" + +msgid "Verify Principal Password" +msgstr "" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" + +#, c-format +msgid "Failed to create key material\n" +msgstr "" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "" + +msgid "Failed members" +msgstr "" + +msgid "Failed source hosts/hostgroups" +msgstr "" + +msgid "Failed hosts/hostgroups" +msgstr "" + +msgid "Failed users/groups" +msgstr "" + +msgid "Failed service/service groups" +msgstr "" + +msgid "Failed to remove" +msgstr "" + +msgid "Failed RunAs" +msgstr "" + +msgid "Failed RunAsGroup" +msgstr "" + +msgid "Failed profiles" +msgstr "" + +msgid "Failed CAs" +msgstr "" + +msgid "Failed member manager" +msgstr "" + +msgid "Failed managedby" +msgstr "" + +msgid "Failed allowed to retrieve keytab" +msgstr "" + +msgid "Failed allowed to create keytab" +msgstr "" + +msgid "Failed targets" +msgstr "" + +msgid "Failed owners" +msgstr "" + +msgid "Failed to add" +msgstr "" + +msgid "maps not connected to /etc/auto.master:" +msgstr "" + +msgid "Import automount files for a specific location." +msgstr "" + +msgid "Master file" +msgstr "" + +msgid "Automount master file." +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" + +#, python-format +msgid "File %(file)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "key %(key)s already exists" +msgstr "" + +#, python-format +msgid "map %(map)s already exists" +msgstr "" + +msgid "Imported maps:" +msgstr "" + +#, python-format +msgid "Added %(map)s" +msgstr "" + +msgid "Imported keys:" +msgstr "" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "" + +msgid "Ignored keys:" +msgstr "" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "" + +msgid "Duplicate maps skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(map)s" +msgstr "" + +msgid "Duplicate keys skipped:" +msgstr "" + +#, python-format +msgid "Skipped %(key)s" +msgstr "" + +msgid "Input file" +msgstr "" + +msgid "File to load the certificate from" +msgstr "" + +msgid "cannot specify both raw certificate and file" +msgstr "" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "" + +msgid "Servers details:" +msgstr "" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" + +msgid "python-yubico is not installed." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "Add a new YubiKey OTP token." +msgstr "" + +msgid "YubiKey slot" +msgstr "" + +msgid "No free YubiKey slot!" +msgstr "" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" + +msgid "Topology is disconnected" +msgstr "" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" + +msgid "Maximum number of agreements per replica" +msgstr "" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a user" +msgstr "Ҳамаро нест мекунед?" + +msgid "preserve and no-preserve cannot be both set" +msgstr "" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" + +msgid "Split DNS record to parts" +msgstr "" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "" + +msgid "DNS resource record type" +msgstr "" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "" + +msgid "No option to modify specific record provided." +msgstr "" + +msgid "Current DNS record contents:\n" +msgstr "" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" + +msgid "No option to delete specific record provided." +msgstr "" + +msgid "Delete all?" +msgstr "Ҳамаро нест мекунед?" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "" + +msgid "Server will check DNS forwarder(s)." +msgstr "" + +msgid "This may take some time, please wait ..." +msgstr "" + +msgid "DNS forwarder" +msgstr "" + +msgid "file to store DNS records in nsupdate format" +msgstr "" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" + +msgid "Synchronize an OTP token." +msgstr "" + +#, fuzzy +#| msgid "User" +msgid "User ID" +msgstr "Корбар" msgid "Password" msgstr "Парол" -msgid "Passwords do not match" -msgstr "Паролҳо номувофиқанд" +#, fuzzy +#| msgid "First name" +msgid "First Code" +msgstr "Ном" -msgid "Passwords do not match!" -msgstr "Паролҳо номувофиқанд!" +msgid "Second Code" +msgstr "" + +msgid "Token ID" +msgstr "" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "" + +msgid "Invalid credentials" +msgstr "" + +msgid "Create a new vault." +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Vault password" +msgstr "парол" + +msgid "File containing the vault password" +msgstr "" + +msgid "File containing the vault public key" +msgstr "" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "" + +msgid "Public key specified multiple times" +msgstr "" + +msgid "Missing vault public key" +msgstr "" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "" + +msgid "Modify a vault." +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Change password" +msgstr "парол" + +#, fuzzy +#| msgid "password" +msgid "Old vault password" +msgstr "парол" + +msgid "File containing the old vault password" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "New vault password" +msgstr "Пароли нав" + +msgid "File containing the new vault password" +msgstr "" + +msgid "Old vault private key" +msgstr "" + +msgid "File containing the old vault private key" +msgstr "" + +msgid "File containing the new vault public key" +msgstr "" + +msgid "New public key specified multiple times" +msgstr "" + +msgid "Missing new vault public key" +msgstr "" + +msgid "Archive data into a vault." +msgstr "" + +msgid "Binary data to archive" +msgstr "" + +msgid "File containing data to archive" +msgstr "" + +msgid "Override existing password" +msgstr "" + +msgid "Input data specified multiple times" +msgstr "" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" + +msgid "Invalid vault type" +msgstr "" + +msgid "Retrieve a data from a vault." +msgstr "" + +msgid "File to store retrieved data" +msgstr "" + +msgid "Vault private key" +msgstr "" + +msgid "File containing the vault private key" +msgstr "" + +msgid "Data" +msgstr "Маълумот" + +msgid "Private key specified multiple times" +msgstr "" + +msgid "Missing vault private key" +msgstr "" + +msgid "Unrevoked" +msgstr "" + +msgid "Error" +msgstr "Хатогӣ" + +#, fuzzy +#| msgid "filename" +msgid "Input filename" +msgstr "номи файл" + +msgid "File to load the certificate from." +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "ACI name" +msgstr "Номи ACI" msgid "Permission" msgstr "Иҷозат" +msgid "Permission ACI grants access to" +msgstr "" + +msgid "User group" +msgstr "Гурӯҳи корбар" + +msgid "User group ACI grants access to" +msgstr "" + msgid "Permissions" msgstr "Иҷозатҳо" -msgid "Policy" -msgstr "Сиёсат" +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" -msgid "Principal" -msgstr "Асосӣ" +msgid "Attributes to which the permission applies" +msgstr "" + +msgid "Attributes" +msgstr "Аттрибутҳо" + +msgid "Type" +msgstr "Намуд" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" + +msgid "Member of" +msgstr "" + +msgid "Member of a group" +msgstr "" + +msgid "Filter" +msgstr "Полоишгар" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "" + +msgid "Subtree" +msgstr "" + +msgid "Subtree to apply ACI to" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Target group" +msgstr "Мақсад" + +msgid "Group to apply ACI to" +msgstr "" + +msgid "Target your own entry (self)" +msgstr "" + +msgid "Apply ACI to your own entry (self)" +msgstr "" + +msgid "Create new ACI." +msgstr "" + +msgid "ACI prefix" +msgstr "Префикси ACI" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" + +msgid "Test the ACI syntax but don't write anything" +msgstr "" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" + +msgid "User-friendly description of action performed" +msgstr "" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete ACI." +msgstr "Нест кардан" + +msgid "True means the operation was successful" +msgstr "" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" + +msgid "A string searched in all relevant object attributes" +msgstr "" + +msgid "Primary key only" +msgstr "" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" + +msgid "Number of entries returned" +msgstr "" + +msgid "True if not all results were returned" +msgstr "" + +msgid "Modify ACI." +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Rename an ACI." +msgstr "Азнавномгузорӣ" + +#, fuzzy +#| msgid "ACI name" +msgid "New ACI name" +msgstr "Номи ACI" + +msgid "Display a single ACI given an ACI name." +msgstr "" + +msgid "Location of the ACI" +msgstr "" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "Тугма" + +msgid "Automount key name." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Mount information" +msgstr "Ҷӯрсозӣ" + +msgid "description" +msgstr "шарҳ" + +msgid "Location" +msgstr "Макон" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "Шарҳ" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +msgid "Delete an automount key." +msgstr "" + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "" + +msgid "Search for an automount key." +msgstr "" + +msgid "Time Limit" +msgstr "" + +msgid "Time limit of search in seconds" +msgstr "" + +msgid "Size Limit" +msgstr "" + +msgid "Maximum number of entries returned" +msgstr "" + +msgid "Modify an automount key." +msgstr "" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" msgid "Rename" msgstr "Азнавномгузорӣ" +msgid "Rename the automount key object" +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Display an automount key." +msgstr "Номи намоишӣ" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +msgid "Search for an automount location." +msgstr "" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +msgid "Delete an automount map." +msgstr "" + +msgid "Search for an automount map." +msgstr "" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +msgid "Modify an automount map." +msgstr "" + +msgid "Display an automount map." +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Default users group" +msgstr "Гурӯҳи корбар" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +msgid "Search size limit" +msgstr "" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +msgid "Default types of supported user authentication" +msgstr "" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" + +msgid "Attributes to which the delegation applies" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member user group" +msgstr "Гурӯҳи корбар" + +msgid "User group to apply delegation to" +msgstr "" + +msgid "Add a new delegation." +msgstr "" + +msgid "Delete a delegation." +msgstr "" + +msgid "Search for delegations." +msgstr "" + +msgid "Modify a delegation." +msgstr "" + +msgid "Display information about a delegation." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Host name" +msgid "Zone name" +msgstr "Номи мизбон" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Record name" +msgstr "Азнавномгузорӣ" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +msgid "Record type" +msgstr "" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "AFSDB Hostname" +msgstr "Номи мизбон" + +msgid "Hostname" +msgstr "Номи мизбон" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "CNAME Hostname" +msgstr "Номи мизбон" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "DNAME Target" +msgstr "Мақсад" + +msgid "Target" +msgstr "Мақсад" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "NAPTR Service" +msgstr "Хидмат" + +msgid "Service" +msgstr "Хидмат" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "NS Hostname" +msgstr "Номи мизбон" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "PTR Hostname" +msgstr "Номи мизбон" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "SRV Target" +msgstr "Мақсад" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +#, fuzzy +#| msgid "Select All" +msgid "Selector" +msgstr "Интихоби ҳама" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +#, fuzzy +#| msgid "Data" +msgid "Text Data" +msgstr "Маълумот" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "SOA record serial number" +msgstr "Рақами силсилавӣ" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +#, fuzzy +#| msgid "Allow" +msgid "Allow query" +msgstr "Иҷозат додан" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission value" +msgstr "Иҷозат" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +msgid "Search for DNS forward zones." +msgstr "" + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +msgid "Display information about a DNS forward zone." +msgstr "" + +msgid "Add new DNS resource record." +msgstr "" + +msgid "Force" +msgstr "Маҷбурӣ" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +msgid "Delete DNS resource record." +msgstr "" + +msgid "Delete all associated records" +msgstr "" + +msgid "Delete DNS record entry." +msgstr "" + +msgid "Search for DNS resources." +msgstr "" + +msgid "Modify a DNS resource record." +msgstr "" + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +msgid "Disable DNS Zone." +msgstr "" + +msgid "Enable DNS Zone." +msgstr "" + +msgid "Search for DNS zones (SOA records)." +msgstr "" + +msgid "Forward zones only" +msgstr "" + +msgid "Search for forward zones only" +msgstr "" + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Rule name" +msgstr "Азнавномгузорӣ" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User category" +msgstr "Номи корбар" + +msgid "User category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Host category" +msgstr "Номи мизбон" + +msgid "Host category the rule applies to" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "Service category" +msgstr "Хидмат" + +msgid "Service category the rule applies to" +msgstr "" + +msgid "Enabled" +msgstr "Фаъолшуда" + +#, fuzzy +#| msgid "User" +msgid "Users" +msgstr "Корбар" + +#, fuzzy +#| msgid "User group" +msgid "User Groups" +msgstr "Гурӯҳи корбар" + +#, fuzzy +#| msgid "Hostname" +msgid "Hosts" +msgstr "Номи мизбон" + +#, fuzzy +#| msgid "Groups" +msgid "Host Groups" +msgstr "Гуруҳҳо" + +#, fuzzy +#| msgid "Service" +msgid "Services" +msgstr "Хидмат" + +#, fuzzy +#| msgid "Service" +msgid "Service Groups" +msgstr "Хидмат" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "member host" +msgstr "" + +msgid "hosts to add" +msgstr "" + +msgid "member host group" +msgstr "" + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +msgid "Number of members added" +msgstr "" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +msgid "member user" +msgstr "" + +msgid "users to add" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "member group" +msgstr "Гурӯҳи корбар" + +msgid "groups to add" +msgstr "" + +msgid "Delete an HBAC rule." +msgstr "" + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +msgid "Search for HBAC rules." +msgstr "" + +msgid "Modify an HBAC rule." +msgstr "" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +msgid "Number of members removed" +msgstr "" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Service name" +msgstr "Номи сервер" + +#, fuzzy +#| msgid "Service" +msgid "HBAC service" +msgstr "Хидмат" + +#, fuzzy +#| msgid "description" +msgid "HBAC service description" +msgstr "шарҳ" + +msgid "Member of HBAC service groups" +msgstr "" + +msgid "Add a new HBAC service." +msgstr "" + +msgid "Delete an existing HBAC service." +msgstr "" + +msgid "Search for HBAC services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +msgid "Modify an HBAC service." +msgstr "" + +msgid "Display information about an HBAC service." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Service group name" +msgstr "Номи сервер" + +msgid "HBAC service group description" +msgstr "" + +msgid "Member HBAC service" +msgstr "" + +msgid "Add a new HBAC service group." +msgstr "" + +msgid "Add members to an HBAC service group." +msgstr "" + +msgid "Delete an HBAC service group." +msgstr "" + +msgid "Search for an HBAC service group." +msgstr "" + +msgid "Modify an HBAC service group." +msgstr "" + +msgid "Remove members from an HBAC service group." +msgstr "" + +msgid "Display information about an HBAC service group." +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "Номи мизбон" + +msgid "A description of this host" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Locality" +msgstr "Макон" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "User password" +msgstr "парол" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "Random password" +msgstr "парол" + +msgid "Certificate" +msgstr "" + +msgid "Base-64 encoded server certificate" +msgstr "" + +#, fuzzy +#| msgid "Principal" +msgid "Principal name" +msgstr "Асосӣ" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +msgid "SSH public key" +msgstr "" + +msgid "Class" +msgstr "Синф" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +msgid "Requires pre-authentication" +msgstr "" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +msgid "Member of host-groups" +msgstr "" + +msgid "Roles" +msgstr "" + +msgid "Member of netgroups" +msgstr "" + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +msgid "Indirect Member of netgroup" +msgstr "" + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +#, fuzzy +#| msgid "Manager" +msgid "Managed by" +msgstr "Диспетчер" + +#, fuzzy +#| msgid "Manager" +msgid "Managing" +msgstr "Диспетчер" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +msgid "Hosts allowed to create keytab" +msgstr "" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +msgid "Add a new host." +msgstr "" + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a host." +msgstr "Ҳамаро нест мекунед?" + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +msgid "Search for hosts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "host group" +msgstr "Гурӯҳи корбар" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "netgroup" +msgstr "Гурӯҳи корбар" + +msgid "Search for hosts with these member of netgroups." +msgstr "" + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "host" +msgstr "номи мизбон" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +msgid "Modify information about a host." +msgstr "" + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +msgid "Display information about a host." +msgstr "" + +msgid "file to store certificate in" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Host-group" +msgstr "Гурӯҳи корбар" + +msgid "Name of host-group" +msgstr "" + +msgid "A description of this host-group" +msgstr "" + +msgid "Member hosts" +msgstr "" + +msgid "Member host-groups" +msgstr "" + +msgid "Indirect Member hosts" +msgstr "" + +msgid "Indirect Member host-groups" +msgstr "" + +msgid "Add a new hostgroup." +msgstr "" + +msgid "Add members to a hostgroup." +msgstr "" + +msgid "Delete a hostgroup." +msgstr "" + +msgid "Search for hostgroups." +msgstr "" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +msgid "Modify a hostgroup." +msgstr "" + +msgid "Remove members from a hostgroup." +msgstr "" + +msgid "Display information about a hostgroup." +msgstr "" + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +#, fuzzy +#| msgid "Group" +msgid "Group name" +msgstr "Гурӯҳ" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User login" +msgstr "Номи корбар" + +msgid "UID" +msgstr "" + +#, fuzzy +#| msgid "Serial Number" +msgid "User ID Number" +msgstr "Рақами силсилавӣ" + +msgid "GECOS" +msgstr "" + +msgid "Home directory" +msgstr "" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +msgid "Add a new Group ID override." +msgstr "" + +msgid "Delete an Group ID override." +msgstr "" + +msgid "Search for an Group ID override." +msgstr "" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +msgid "Modify an Group ID override." +msgstr "" + +msgid "Rename the Group ID override object" +msgstr "" + +msgid "Display information about an Group ID override." +msgstr "" + +msgid "Add a new User ID override." +msgstr "" + +msgid "Delete an User ID override." +msgstr "" + +msgid "Search for an User ID override." +msgstr "" + +msgid "Modify an User ID override." +msgstr "" + +msgid "Rename the User ID override object" +msgstr "" + +msgid "Display information about an User ID override." +msgstr "" + +msgid "Add a new ID View." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "hosts" +msgstr "номи мизбон" + +msgid "Hosts to apply the ID View to" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "hostgroups" +msgstr "Гуруҳҳо" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +msgid "Hosts that this ID View was applied to." +msgstr "" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +msgid "Delete an ID View." +msgstr "" + +msgid "Search for an ID View." +msgstr "" + +msgid "Modify an ID View." +msgstr "" + +msgid "Rename the ID View object" +msgstr "" + +msgid "Display information about an ID View." +msgstr "" + +msgid "Enumerate all the hosts the view applies to." +msgstr "" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "Номи корбар" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +#, fuzzy +#| msgid "LDAP DN" +msgid "LDAP URI" +msgstr "LDAP DN" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "bind password" +msgstr "парол" + +msgid "Bind DN" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User container" +msgstr "Номи корбар" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore user attribute" +msgstr "" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "Ignore group attribute" +msgstr "" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +msgid "CA certificate" +msgstr "" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "" + +msgid "Forward to server instead of running locally" +msgstr "" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" + +msgid "Dictionary mapping variable name to value" +msgstr "" + +msgid "Total number of variables env (>= count)" +msgstr "" + +msgid "Number of variables returned (<= total)" +msgstr "" + +msgid "Show all loaded plugins." +msgstr "" + +msgid "Dictionary mapping plugin names to bases" +msgstr "" + +msgid "Number of plugins loaded" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "Netgroup name" +msgstr "Номи корбар" + +#, fuzzy +#| msgid "description" +msgid "Netgroup description" +msgstr "шарҳ" + +msgid "NIS domain name" +msgstr "" + +msgid "IPA unique ID" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member netgroups" +msgstr "Гурӯҳи корбар" + +msgid "Indirect Member netgroups" +msgstr "" + +msgid "Member User" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member Group" +msgstr "Гурӯҳи корбар" + +msgid "Member Host" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member Hostgroup" +msgstr "Гурӯҳи корбар" + +msgid "Add a new netgroup." +msgstr "" + +msgid "Add members to a netgroup." +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "member netgroup" +msgstr "Гурӯҳи корбар" + +msgid "netgroups to add" +msgstr "" + +msgid "Delete a netgroup." +msgstr "" + +msgid "Search for a netgroup." +msgstr "" + +msgid "search for managed groups" +msgstr "" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +#, fuzzy +#| msgid "Group" +msgid "group" +msgstr "Гурӯҳ" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "" + +msgid "Remove members from a netgroup." +msgstr "" + +msgid "netgroups to remove" +msgstr "" + +msgid "Display information about a netgroup." +msgstr "" + +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "Пароли нав" + +#, fuzzy +#| msgid "New Password" +msgid "Current Password" +msgstr "Пароли нав" + +msgid "OTP" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "One Time Password" +msgstr "Пароли нав" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission name" +msgstr "Иҷозат" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Effective attributes" +msgstr "Аттрибутҳо" + +msgid "All attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Included attributes" +msgstr "Аттрибутҳо" + +msgid "User-specified attributes to which the permission applies" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Excluded attributes" +msgstr "Аттрибутҳо" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Default attributes" +msgstr "Аттрибутҳо" + +msgid "Attributes to which the permission applies by default" +msgstr "" + +msgid "Bind rule type" +msgstr "" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Target DN" +msgstr "Мақсад" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member of group" +msgstr "Гурӯҳи корбар" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +msgid "Deprecated; use ipapermlocation" +msgstr "" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +msgid "Add a new permission." +msgstr "" + +msgid "Add members to a permission." +msgstr "" + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission flags" +msgstr "Иҷозатҳо" + +#, fuzzy +#| msgid "Permission" +msgid "Delete a permission." +msgstr "Иҷозат" + +msgid "force delete of SYSTEM permissions" +msgstr "" + +msgid "Search for permissions." +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Modify a permission." +msgstr "Иҷозат" + +msgid "Rename the permission object" +msgstr "" + +msgid "Remove members from a permission." +msgstr "" + +msgid "privileges to remove" +msgstr "" + +msgid "Display information about a permission." +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Privilege name" +msgstr "номи файл" + +#, fuzzy +#| msgid "description" +msgid "Privilege description" +msgstr "шарҳ" + +msgid "Granting privilege to roles" +msgstr "" + +msgid "Add a new privilege." +msgstr "" + +msgid "Add members to a privilege." +msgstr "" + +msgid "member role" +msgstr "" + +msgid "roles to add" +msgstr "" + +msgid "Add permissions to a privilege." +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "permission" +msgstr "Иҷозат" + +#, fuzzy +#| msgid "Permissions" +msgid "permissions" +msgstr "Иҷозатҳо" + +msgid "Number of permissions added" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a privilege." +msgstr "Ҳамаро нест мекунед?" + +msgid "Search for privileges." +msgstr "" + +msgid "Modify a privilege." +msgstr "" + +msgid "Rename the privilege object" +msgstr "" + +msgid "Remove members from a privilege" +msgstr "" + +msgid "roles to remove" +msgstr "" + +msgid "Remove permissions from a privilege." +msgstr "" + +msgid "Number of permissions removed" +msgstr "" + +msgid "Display information about a privilege." +msgstr "" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "Гурӯҳ" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Lockout duration" +msgstr "Макон" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +msgid "Add a new group password policy." +msgstr "" + +msgid "Delete a group password policy." +msgstr "" + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +msgid "Modify a group password policy." +msgstr "" + +msgid "Display information about password policy." +msgstr "" + +msgid "User" +msgstr "Корбар" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "" + +msgid "A description of this RADIUS proxy server" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "Server" +msgstr "Хидмат" + +msgid "The hostname or IP (with or without port)" +msgstr "" + +msgid "Secret" +msgstr "" + +msgid "The secret used to encrypt data" +msgstr "" + +msgid "Timeout" +msgstr "" + +msgid "The total timeout across all retries (in seconds)" +msgstr "" + +#, fuzzy +#| msgid "Retry" +msgid "Retries" +msgstr "Кӯшиш" + +msgid "The number of times to retry authentication" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "User attribute" +msgstr "Аттрибут" + +msgid "The username attribute on the user object" +msgstr "" + +msgid "Add a new RADIUS proxy server." +msgstr "" + +msgid "Delete a RADIUS proxy server." +msgstr "" + +msgid "Search for RADIUS proxy servers." +msgstr "" + +msgid "Modify a RADIUS proxy server." +msgstr "" + +msgid "Rename the RADIUS proxy server object" +msgstr "" + +msgid "Display information about a RADIUS proxy server." +msgstr "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete domain" +msgstr "Ҳамаро нест мекунед?" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Role name" +msgstr "Азнавномгузорӣ" + +msgid "A description of this role-group" +msgstr "" + +msgid "Member users" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member groups" +msgstr "Гурӯҳи корбар" + +msgid "Privileges" +msgstr "" + +msgid "Member services" +msgstr "" + +msgid "Add a new role." +msgstr "" + +msgid "Add members to a role." +msgstr "" + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +msgid "Add privileges to a role." +msgstr "" + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +msgid "Number of privileges added" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a role." +msgstr "Ҳамаро нест мекунед?" + +msgid "Search for roles." +msgstr "" + +msgid "Modify a role." +msgstr "" + +msgid "Rename the role object" +msgstr "" + +msgid "Remove members from a role." +msgstr "" + +msgid "services to remove" +msgstr "" + +msgid "Remove privileges from a role." +msgstr "" + +msgid "Number of privileges removed" +msgstr "" + +msgid "Display information about a role." +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "Self-service name" +msgstr "Номи корбар" + +msgid "Attributes to which the permission applies." +msgstr "" + +msgid "Add a new self-service permission." +msgstr "" + +msgid "Delete a self-service permission." +msgstr "" + +msgid "Search for a self-service permission." +msgstr "" + +msgid "Modify a self-service permission." +msgstr "" + +msgid "Display information about a self-service permission." +msgstr "" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "" + +msgid "HBAC Rule" +msgstr "" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" + +msgid "Create a new SELinux User Map." +msgstr "" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +msgid "Delete a SELinux User Map." +msgstr "" + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +msgid "Search for SELinux User Maps." +msgstr "" + +msgid "Modify a SELinux User Map." +msgstr "" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "Асосӣ" + +#, fuzzy +#| msgid "Principal" +msgid "Service principal" +msgstr "Асосӣ" + +msgid "PAC type" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" + +msgid "Add a new IPA new service." +msgstr "" + +msgid "force principal name even if not in DNS" +msgstr "" + +msgid "Add hosts that can manage this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Delete an IPA service." +msgstr "" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +msgid "Search for IPA services." +msgstr "" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +msgid "Display information about an IPA service." +msgstr "" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Sudo Command" +msgstr "Фармонҳо" + +msgid "A description of this command" +msgstr "" + +msgid "Sudo Command Groups" +msgstr "" + +msgid "Create new Sudo Command." +msgstr "" + +msgid "Delete Sudo Command." +msgstr "" + +msgid "Search for Sudo Commands." +msgstr "" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +msgid "Modify Sudo Command." +msgstr "" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Group description" +msgstr "шарҳ" + +msgid "Commands" +msgstr "Фармонҳо" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +msgid "Add members to Sudo Command Group." +msgstr "" + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +msgid "Delete Sudo Command Group." +msgstr "" + +msgid "Search for Sudo Command Groups." +msgstr "" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +msgid "Modify Sudo Command Group." +msgstr "" + +msgid "Remove members from Sudo Command Group." +msgstr "" + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "Ном" + +msgid "Last name" +msgstr "Насаб" + +#, fuzzy +#| msgid "First name" +msgid "Full name" +msgstr "Ном" + +msgid "Display name" +msgstr "Номи намоишӣ" + +msgid "Initials" +msgstr "Ному насаб" + +msgid "Kerberos principal" +msgstr "" + +msgid "Kerberos principal expiration" +msgstr "" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "Шаҳр" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "Рамзи ZIP" + +#, fuzzy +#| msgid "Serial Number" +msgid "Telephone Number" +msgstr "Рақами силсилавӣ" + +msgid "Mobile Telephone Number" +msgstr "" + +#, fuzzy +#| msgid "Fax Number" +msgid "Pager Number" +msgstr "Рақами факс" + +msgid "Fax Number" +msgstr "Рақами факс" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "Вазифа" + +msgid "Manager" +msgstr "Диспетчер" + +msgid "Car License" +msgstr "" + +msgid "Account disabled" +msgstr "" + +msgid "User authentication types" +msgstr "" + +msgid "Types of supported user authentication" +msgstr "" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "RADIUS proxy configuration" +msgstr "Ҷӯрсозӣ" + +msgid "RADIUS proxy username" +msgstr "" + +#, fuzzy +#| msgid "Serial Number" +msgid "Department Number" +msgstr "Рақами силсилавӣ" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Member of groups" +msgstr "Гурӯҳи корбар" + +msgid "Indirect Member of group" +msgstr "" + +msgid "Kerberos keys available" +msgstr "" + +msgid "Add a new user." +msgstr "" + +msgid "Don't create user private group" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a user." +msgstr "Ҳамаро нест мекунед?" + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +msgid "Search for users." +msgstr "" + +msgid "Self" +msgstr "" + +msgid "Display user record for current Kerberos principal" +msgstr "" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +msgid "Search for users with these member of netgroups." +msgstr "" + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +msgid "Modify a user." +msgstr "" + +msgid "Rename the user object" +msgstr "" + +msgid "Display information about a user." +msgstr "" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +msgid "Grouping to which the rule applies" +msgstr "" + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "Attribute Key" +msgstr "Аттрибут" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +msgid "Number of conditions added" +msgstr "" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +msgid "Display information about the default (fallback) automember groups." +msgstr "" + +msgid "Delete an automember rule." +msgstr "" + +msgid "Search for automember rules." +msgstr "" + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +msgid "Number of conditions removed" +msgstr "" + +msgid "Display information about an automember rule." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +msgid "Match cn attribute in subject" +msgstr "" + +msgid "Reason" +msgstr "" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "minimum serial number" +msgstr "Рақами силсилавӣ" + +#, fuzzy +#| msgid "Serial number" +msgid "maximum serial number" +msgstr "Рақами силсилавӣ" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "" + +msgid "Take a revoked certificate off hold." +msgstr "" + +msgid "Serial number" +msgstr "Рақами силсилавӣ" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +msgid "Submit a certificate signing request." +msgstr "" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +msgid "Revoke a certificate." +msgstr "" + +msgid "Retrieve an existing certificate." +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Output filename" +msgstr "номи файл" + +msgid "File to store the certificate in." +msgstr "" + +msgid "Check the status of a certificate signing request." +msgstr "" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +msgid "Create a new group." +msgstr "" + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +msgid "Add members to a group." +msgstr "" + +#, fuzzy +#| msgid "Serial Number" +msgid "External member" +msgstr "Рақами силсилавӣ" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete group." +msgstr "Нест кардан" + +msgid "Detach a managed group from a user." +msgstr "" + +msgid "Search for groups." +msgstr "" + +msgid "search for private groups" +msgstr "" + +msgid "search for POSIX groups" +msgstr "" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +msgid "search for non-POSIX groups" +msgstr "" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +msgid "Modify a group." +msgstr "" + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +msgid "Remove members from a group." +msgstr "" + +msgid "Display information about a named group." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Target host" +msgstr "Мақсад" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "NetBIOS name" +msgstr "Номи ACI" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Domain name" +msgstr "Номи намоишӣ" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a trust." +msgstr "Ҳамаро нест мекунед?" + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +msgid "Search for trusts." +msgstr "" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +msgid "Display information about a trust." +msgstr "" + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Rename" +msgid "Range name" +msgstr "Азнавномгузорӣ" + +msgid "First Posix ID of the range" +msgstr "" + +msgid "Number of IDs in the range" +msgstr "" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "" + +msgid "Search for ranges." +msgstr "" + +msgid "Modify ID range." +msgstr "" + +msgid "Display information about a range." +msgstr "" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Disabled" +msgstr "Фаъолшуда" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +#, fuzzy +#| msgid "Validity" +msgid "Validity start" +msgstr "Саҳеҳият" + +msgid "First date/time the token can be used" +msgstr "" + +#, fuzzy +#| msgid "Validity" +msgid "Validity end" +msgstr "Саҳеҳият" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +#, fuzzy +#| msgid "Serial Number" +msgid "Serial" +msgstr "Рақами силсилавӣ" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +msgid "Add a new OTP token." +msgstr "" + +msgid "(deprecated)" +msgstr "" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +msgid "Delete an OTP token." +msgstr "" + +msgid "Search for OTP token." +msgstr "" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +msgid "Modify a OTP token." +msgstr "" + +msgid "Rename the OTP token object" +msgstr "" + +msgid "Display information about an OTP token." +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "" + +msgid "Command category the rule applies to" +msgstr "" + +msgid "RunAs User category" +msgstr "" + +msgid "RunAs User category the rule applies to" +msgstr "" + +msgid "RunAs Group category" +msgstr "" + +msgid "RunAs Group category the rule applies to" +msgstr "" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Host Masks" +msgstr "Номи мизбон" + +msgid "Sudo Allow Commands" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Sudo Deny Commands" +msgstr "Фармонҳо" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "RunAs Groups" +msgstr "Гуруҳҳо" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "member sudo command group" +msgstr "" + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +msgid "Search for Sudo Rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Display Sudo Rule." +msgstr "Номи намоишӣ" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "ACL name" +msgstr "Номи ACI" + +msgid "Profile category" +msgstr "" + +msgid "Profile category the ACL applies to" +msgstr "" + +msgid "User category the ACL applies to" +msgstr "" + +msgid "Host category the ACL applies to" +msgstr "" + +msgid "Service category the ACL applies to" +msgstr "" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +msgid "Certificate Profiles to add" +msgstr "" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +msgid "Search for CA ACLs." +msgstr "" + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +msgid "Remove services from a CA ACL." +msgstr "" + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +msgid "Remove certificates from host entry" +msgstr "" + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +msgid "Add to default group" +msgstr "" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +#, fuzzy +#| msgid "Search" +msgid "Search scope" +msgstr "Ҷустуҷӯ" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server name" +msgstr "Номи сервер" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA server hostname" +msgstr "Сервери IPA" + +msgid "Managed suffix" +msgstr "" + +msgid "Min domain level" +msgstr "" + +msgid "Minimum domain level" +msgstr "" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "Delete IPA server." +msgstr "Сервери IPA" + +msgid "Search for IPA servers." +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "Show IPA server." +msgstr "Сервери IPA" + +msgid "Add new certificates to a service" +msgstr "" + +msgid "Remove certificates from a service" +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +#, fuzzy +#| msgid "Target" +msgid "Allowed Target" +msgstr "Мақсад" + +msgid "Create a new service delegation rule." +msgstr "" + +msgid "Add member to a named service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "Principal" +msgid "member principal" +msgstr "Асосӣ" + +#, fuzzy +#| msgid "Principal" +msgid "principal to add" +msgstr "Асосӣ" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +msgid "Delete service delegation." +msgstr "" + +msgid "Search for service delegations rule." +msgstr "" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +msgid "Remove member from a named service delegation rule." +msgstr "" + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +msgid "Display information about a named service delegation rule." +msgstr "" + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +msgid "Delete service delegation target." +msgstr "" + +msgid "Search for service delegation target." +msgstr "" + +msgid "Remove member from a named service delegation target." +msgstr "" + +msgid "Display information about a named service delegation target." +msgstr "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +msgid "Add a new stage user." +msgstr "" + +msgid "Create Stage user in from a delete user" +msgstr "" + +msgid "Delete a stage user." +msgstr "" + +msgid "Search for stage users." +msgstr "" + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +msgid "Modify a stage user." +msgstr "" + +msgid "Rename the stage user object" +msgstr "" + +msgid "Display information about a stage user." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +msgid "Segment name" +msgstr "" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to strip" +msgstr "Аттрибутҳо" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to replicate" +msgstr "Аттрибутҳо" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +msgid "Replication agreement enabled" +msgstr "" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +#, fuzzy +#| msgid "filename" +msgid "Suffix name" +msgstr "номи файл" + +msgid "LDAP suffix to be managed" +msgstr "" + +msgid "Add a new segment." +msgstr "" + +msgid "Delete a segment." +msgstr "" + +msgid "Search for topology segments." +msgstr "" + +msgid "Modify a segment." +msgstr "" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +#, fuzzy +#| msgid "Display name" +msgid "Display a segment." +msgstr "Номи намоишӣ" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +msgid "Delete a topology suffix." +msgstr "" + +msgid "Search for topology suffices." +msgstr "" + +msgid "Modify a topology suffix." +msgstr "" + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +#, fuzzy +#| msgid "Last name" +msgid "Vault name" +msgstr "Насаб" + +#, fuzzy +#| msgid "description" +msgid "Vault description" +msgstr "шарҳ" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +msgid "Vault public key" +msgstr "" + +msgid "Owner users" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Owner groups" +msgstr "Гурӯҳи корбар" + +msgid "Owner services" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "Vault service" +msgstr "Хидмат" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +msgid "Transport Certificate" +msgstr "" + +msgid "Service name of the service vault" +msgstr "" + +msgid "Username of the user vault" +msgstr "" + +msgid "Add members to a vault." +msgstr "" + +msgid "Add owners to a vault." +msgstr "" + +msgid "owner user" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "owner group" +msgstr "Гурӯҳи корбар" + +#, fuzzy +#| msgid "Service" +msgid "owner service" +msgstr "Хидмат" + +msgid "Owners that could not be added" +msgstr "" + +msgid "Number of owners added" +msgstr "" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +#, fuzzy +#| msgid "Delete all?" +msgid "Delete a vault." +msgstr "Ҳамаро нест мекунед?" + +msgid "Search for vaults." +msgstr "" + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +msgid "Remove members from a vault." +msgstr "" + +msgid "Remove owners from a vault." +msgstr "" + +msgid "Owners that could not be removed" +msgstr "" + +msgid "Number of owners removed" +msgstr "" + +msgid "Display information about a vault." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Show vault configuration." +msgstr "Ҷӯрсозӣ" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +msgid "Delete a vault container." +msgstr "" + +msgid "Remove owners from a vault container." +msgstr "" + +msgid "Display information about a vault container." +msgstr "" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Profile description" +msgstr "шарҳ" + +msgid "Brief description of this profile" +msgstr "" + +msgid "Store issued certificates" +msgstr "" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +msgid "Delete a Certificate Profile." +msgstr "" + +msgid "Search for Certificate Profiles." +msgstr "" + +msgid "Import a Certificate Profile." +msgstr "" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "Hostname (FQDN)" +msgstr "Номи мизбон" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Remote server name" +msgstr "Номи сервер" + +msgid "Remote IPA server hostname" +msgstr "" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +msgid "Search for topology suffixes." +msgstr "" + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +msgid "NSEC Next Domain Name" +msgstr "" + +msgid "Next Domain Name" +msgstr "" + +msgid "NSEC Type Map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Type Map" +msgstr "Намуд" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Signer's Name" +msgstr "Номи сервер" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +msgid "Consume an entitlement." +msgstr "" + +msgid "Quantity" +msgstr "" + +msgid "Search for entitlement accounts." +msgstr "" + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +msgid "Username" +msgstr "Номи корбар" + +msgid "Enrollment UUID (not implemented)" +msgstr "" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Source host category" +msgstr "" + +msgid "Source host category the rule applies to" +msgstr "" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +msgid "Target members of a group" +msgstr "" + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Permission type" +msgstr "Иҷозат" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "" + +#, python-format +msgid "%(count)d variables" +msgstr "" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "" + +msgid "Passwords do not match!" +msgstr "Паролҳо номувофиқанд!" + +msgid "No matching entries found" +msgstr "" + +msgid "Topic or Command" +msgstr "" + +msgid "The topic or command name." +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Topic commands:" +msgstr "Фармонҳо" + +msgid "To get command help, use:" +msgstr "" + +msgid " ipa --help" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "Command name" +msgstr "Фармонҳо" + +msgid "Positional arguments" +msgstr "" + +#, python-format +msgid "Same as --%s" +msgstr "" + +msgid "Deprecated options" +msgstr "" + +msgid "No file to read" +msgstr "" + +msgid "A dictionary representing an LDAP entry" +msgstr "" + +msgid "A list of LDAP entries" +msgstr "" + +msgid "All commands should at least have a result" +msgstr "" + +msgid "Results are truncated, try a more specific search" +msgstr "" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "" + +msgid "an internal error has occurred" +msgstr "" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "" + +msgid "did not receive Kerberos credentials" +msgstr "" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" + +msgid "No credentials cache found" +msgstr "" + +msgid "Ticket expired" +msgstr "" + +msgid "Credentials cache permissions incorrect" +msgstr "" + +msgid "Bad format in credentials cache" +msgstr "" + +msgid "Cannot resolve KDC for requested realm" +msgstr "" + +msgid "Session error" +msgstr "" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "" + +#, python-format +msgid "'%(name)s' is required" +msgstr "" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "" + +msgid "Passwords do not match" +msgstr "Паролҳо номувофиқанд" + +msgid "Command not implemented" +msgstr "" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" + +#, python-format +msgid "%(reason)s" +msgstr "" + +msgid "This entry already exists" +msgstr "" + +msgid "You must enroll a host in order to create a host service" +msgstr "" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" + +msgid "This command requires root access" +msgstr "" + +msgid "This is already a posix group" +msgstr "" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" + +msgid "This entry is already enabled" +msgstr "" + +msgid "This entry is already disabled" +msgstr "" + +msgid "This entry cannot be enabled or disabled" +msgstr "" + +msgid "This entry is not a member" +msgstr "" + +msgid "A group may not be a member of itself" +msgstr "" + +msgid "This entry is already a member" +msgstr "" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "" + +msgid "A group may not be added as a member of itself" +msgstr "" + +msgid "The default users group cannot be removed" +msgstr "" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" + +msgid "A managed group cannot have a password policy." +msgstr "" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" + +msgid "This group already allows external members" +msgstr "" + +msgid "This group cannot be posix because it is external" +msgstr "" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "" + +msgid "change collided with another change" +msgstr "" + +msgid "no modifications to be performed" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(info)s" +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" + +msgid "limits exceeded for this query" +msgstr "" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "" + +msgid "Not allowed on non-leaf entry" +msgstr "" + +msgid "LDAP timeout" +msgstr "" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" + +msgid "Configured time limit exceeded" +msgstr "" + +msgid "Configured size limit exceeded" +msgstr "" + +msgid "Configured administrative server limit exceeded" +msgstr "" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Syntax Error: %(error)s" +msgid "Certificate format error: %(error)s" +msgstr "Хатогии синтаксисӣ: %(error)s" + +msgid "Already registered" +msgstr "Ааллакай қайд карда шуд" + +#, fuzzy +#| msgid "Already registered" +msgid "Not registered yet" +msgstr "Ааллакай қайд карда шуд" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" + +#, python-format +msgid "%(exception)s" +msgstr "" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "" + +msgid "Only one value is allowed" +msgstr "" + +msgid "this option is deprecated" +msgstr "" + +msgid "must be True or False" +msgstr "" + +msgid "must be an integer" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "" + +msgid "must be a decimal number" +msgstr "" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "" + +msgid "must be binary data" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "" + +msgid "must be a certificate" +msgstr "" + +msgid "must be a certificate signing request" +msgstr "" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" + +msgid "must be Unicode text" +msgstr "" + +msgid "Leading and trailing spaces are not allowed" +msgstr "" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "" + +#, python-format +msgid "must be '%(value)s'" +msgstr "" + +#, python-format +msgid "must be one of %(values)s" +msgstr "" + +msgid "must be datetime value" +msgstr "" + +msgid "does not match any of accepted formats: " +msgstr "" + +msgid "incomplete time value" +msgstr "" + +msgid "must be DNS name" +msgstr "" + +msgid "must be absolute" +msgstr "" + +msgid "must be relative" +msgstr "" + +msgid "must be dictionary" +msgstr "" + +msgid "must be Kerberos principal" +msgstr "" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "" + +msgid "Service principal is required" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(filename)s: file not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "" + +msgid "Exceeded number of tries to forward a request." +msgstr "" + +msgid "Filename is empty" +msgstr "" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "" + +msgid "empty DNS label" +msgstr "" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" + +msgid "single label {}s are not supported" +msgstr "" + +msgid "too many '@' characters" +msgstr "" + +msgid "cannot be longer that {} characters" +msgstr "" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "" + +msgid "not fully qualified" +msgstr "" + +msgid "invalid SSH public key" +msgstr "" + +msgid "options are not allowed" +msgstr "" + +msgid "invalid hostmask" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" + +msgid "invalid escape code in domain name" +msgstr "" + +msgid "domain name cannot be longer than 255 characters" +msgstr "" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "" + +msgid "invalid domain name" +msgstr "" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" + +msgid "invalid IP address format" +msgstr "" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "" + +#, python-format +msgid "objectclass %s not found" +msgstr "" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Automount Location" +msgstr "Макон" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +msgid "invalid Profile ID" +msgstr "" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Profile configuration" +msgstr "Ҷӯрсозӣ" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "" + +msgid "Certificate profiles cannot be renamed" +msgstr "" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "" + +msgid "CA category the ACL applies to" +msgstr "" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +msgid "Remove CAs from a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +msgid "invalid address format" +msgstr "" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +msgid "invalid domain-name: not fully qualified" +msgstr "" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "DNS zone %(zone)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +msgid "Invalid number of parts!" +msgstr "" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Managedby permission" +msgstr "Иҷозат" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +msgid "Only one zone type is allowed per zone name" +msgstr "" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "" +msgstr "Сервери IPA" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "" + +msgid "is required" +msgstr "" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, python-format +msgid "Found '%(value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "Host '%(host)s' not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, fuzzy +#| msgid "Configuration" +msgid "DNS configuration options" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +#| msgid "Configuration" +msgid "DNS Global Configuration" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA DNS version" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA DNS servers" +msgstr "Сервери IPA" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA DNS records" +msgstr "Сервери IPA" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "" +"\n" +"DNS server configuration\n" +msgstr "Ҷӯрсозӣ" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS server" +msgstr "Сервери IPA" + +msgid "DNS servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS Servers" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "IPA Server" +msgid "DNS Server" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "Server Name" +msgid "DNS Server name" +msgstr "Номи сервер" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "" + +msgid "Search for DNS servers." +msgstr "" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "" + +msgid "IPA DNS Server is not installed" +msgstr "" + +msgid "Display configuration of a DNS server." +msgstr "" + +msgid "Add a new DNS server." +msgstr "" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "" + +msgid "Delete a DNS server" +msgstr "" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +msgid "Unable to communicate with CMS" +msgstr "" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "HBAC services" +msgstr "Хидмат" + +#, fuzzy +#| msgid "Service" +msgid "HBAC Services" +msgstr "Хидмат" + +#, fuzzy +#| msgid "Service" +msgid "HBAC Service" +msgstr "Хидмат" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "" + +#, fuzzy +#| msgid "User group" +msgid "HBAC service group" +msgstr "Гурӯҳи корбар" + +#, fuzzy +#| msgid "User group" +msgid "HBAC service groups" +msgstr "Гурӯҳи корбар" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "" + +msgid "givenname is required" +msgstr "" + +msgid "sn is required" +msgstr "" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(value)s" +msgstr "" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "host groups" +msgstr "Гурӯҳи корбар" + +#, fuzzy +#| msgid "Group" +msgid "Host Group" +msgstr "Гурӯҳ" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "hostgroup" +msgstr "Гурӯҳи корбар" + +msgid "privileged hostgroup" +msgstr "" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +msgid "Host is not supported" +msgstr "" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Vault configuration" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA KRA servers" +msgstr "Сервери IPA" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "" + +msgid "Retrieve data from a vault." +msgstr "" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "netgroups" +msgstr "Гуруҳҳо" + +#, fuzzy +#| msgid "Groups" +msgid "Netgroups" +msgstr "Гуруҳҳо" + +#, fuzzy +#| msgid "User group" +msgid "Netgroup" +msgstr "Гурӯҳи корбар" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "" + +msgid "One time password commands" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP configuration options" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +#| msgid "Configuration" +msgid "OTP Configuration" +msgstr "Ҷӯрсозӣ" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +msgid "PKINIT status" +msgstr "" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "invalid port number" +msgstr "Рақами силсилавӣ" + +msgid "RADIUS proxy server" +msgstr "" + +msgid "RADIUS proxy servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Servers" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "IPA Server" +msgid "RADIUS Server" +msgstr "Сервери IPA" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "" + +msgid "A list of ACI values" +msgstr "" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "ACI prefix" +msgid "ACI prefix is required" +msgstr "Префикси ACI" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Хатогии синтаксисӣ: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "ACIs" + +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACIs" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "must be at least 10" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "configuration options" +msgstr "Ҷӯрсозӣ" + +msgid "Configuration" +msgstr "Ҷӯрсозӣ" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA CA servers" +msgstr "Сервери IPA" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "Hidden IPA DNS servers" +msgstr "Сервери IPA" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +msgid "Empty domain is not allowed" +msgstr "" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "groups" +msgstr "Гуруҳҳо" + +#, fuzzy +#| msgid "User group" +msgid "User Group" +msgstr "Гурӯҳи корбар" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "" + +msgid "gid cannot be set for external group" +msgstr "" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "" + +msgid "privileged group" +msgstr "" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "" + +msgid "not allowed to modify user entries" +msgstr "" + +msgid "not allowed to modify group entries" +msgstr "" + +msgid "Not a managed group" +msgstr "" + +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Permissions\n" +msgstr "Иҷозатҳо" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "" +"\n" +"Managed permissions\n" +msgstr "Иҷозатҳо" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "" + +#, python-format +msgid "Deprecated; use %s" +msgstr "" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "Entry %s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +msgid "Bad search filter" +msgstr "" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "" + +msgid "cannot delete managed permissions" +msgstr "" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "" + +msgid "cannot rename managed permissions" +msgstr "" + +msgid "not modifiable on managed permissions" +msgstr "" + +msgid "only available on managed permissions" +msgstr "" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "" + +msgid "cannot be empty" +msgstr "" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +#, fuzzy +#| msgid "Sudo" +msgid "Sudo Rule" +msgstr "Sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" + +msgid "users" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "command" +msgstr "Фармонҳо" + +#, fuzzy +#| msgid "Commands" +msgid "commands" +msgstr "Фармонҳо" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +msgid "group runAs" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "runAs groups" +msgstr "Гурӯҳи корбар" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Commands" +msgid "sudo command" +msgstr "Фармонҳо" + +#, fuzzy +#| msgid "Commands" +msgid "sudo commands" +msgstr "Фармонҳо" + +#, fuzzy +#| msgid "Commands" +msgid "Sudo Commands" +msgstr "Фармонҳо" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "" + +msgid "sudo command groups" +msgstr "" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +msgid "RADIUS max renew" +msgstr "" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "" +"\n" +"IPA locations\n" +msgstr "Макон" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "location" +msgstr "Макон" + +#, fuzzy +#| msgid "Location" +msgid "locations" +msgstr "Макон" + +#, fuzzy +#| msgid "Location" +msgid "IPA Locations" +msgstr "Макон" + +#, fuzzy +#| msgid "Location" +msgid "IPA Location" +msgstr "Макон" + +#, fuzzy +#| msgid "Location" +msgid "Location name" +msgstr "Макон" + +msgid "IPA location name" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "IPA Location description" +msgstr "шарҳ" + +#, fuzzy +#| msgid "Service" +msgid "Servers" +msgstr "Хидмат" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +msgid "Add a new IPA location." +msgstr "" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "" + +msgid "Delete an IPA location." +msgstr "" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "" + +msgid "IPA Server" +msgstr "Сервери IPA" + +msgid "Modify information about an IPA location." +msgstr "" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "" + +msgid "Search for IPA locations." +msgstr "" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "" + +msgid "Display information about an IPA location." +msgstr "" + +msgid "Servers in location" +msgstr "" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Name" +msgstr "Номи мизбон" + +#, fuzzy +#| msgid "Location" +msgid "Documentation" +msgstr "Макон" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "Иҷозат" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "hostname" +msgid "Method name" +msgstr "номи мизбон" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +msgid "Display information about a command." +msgstr "" + +msgid "Search for commands." +msgstr "" + +msgid "Return command defaults" +msgstr "" + +msgid "Display information about a class." +msgstr "" + +msgid "Search for classes." +msgstr "" + +msgid "Display information about a help topic." +msgstr "" + +msgid "Search for help topics." +msgstr "" + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "ACI name" +msgid "CLI name" +msgstr "Номи ACI" + +#, fuzzy +#| msgid "password" +msgid "Confirm (password)" +msgstr "парол" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +msgid "Option group" +msgstr "" + +msgid "Sensitive" +msgstr "" + +msgid "Positional argument" +msgstr "" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command parameter." +msgstr "" + +msgid "Search command parameters." +msgstr "" + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "" + +msgid "Display information about a command output." +msgstr "" + +msgid "Search for command outputs." +msgstr "" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +msgid "local domain range" +msgstr "" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + +msgid "self service permission" +msgstr "" + +msgid "self service permissions" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Self Service Permissions" +msgstr "Иҷозатҳо" + +#, fuzzy +#| msgid "Permission" +msgid "Self Service Permission" +msgstr "Иҷозат" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "" + +#, fuzzy +#| msgid "IPA Server" +msgid "" +"\n" +"IPA server roles\n" +msgstr "Сервери IPA" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "server role" +msgstr "Номи сервер" + +#, fuzzy +#| msgid "Server Name" +msgid "server roles" +msgstr "Номи сервер" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Server Roles" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Server Role" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA server role name" +msgstr "Сервери IPA" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +msgid "IPA role name" +msgstr "" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "HBAC rule %(rule)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "File %(file)s not found" +msgid "{role}: role not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +msgid "Base-64 encoded certificate." +msgstr "" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "Мавзӯъ" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DNS name" +msgstr "Мавзӯъ" + +msgid "Subject X.400 address" +msgstr "" + +msgid "Subject directory name" +msgstr "" + +msgid "Subject EDI Party name" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject URI" +msgstr "Мавзӯъ" + +msgid "Subject IP Address" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject OID" +msgstr "Мавзӯъ" + +#, fuzzy +#| msgid "Subject" +msgid "Subject UPN" +msgstr "Мавзӯъ" + +msgid "Subject Kerberos principal name" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Subject Other Name" +msgstr "Номи сервер" + +msgid "Issuer" +msgstr "Диҳанда" + +#, fuzzy +#| msgid "Issuer" +msgid "Issuer DN" +msgstr "Диҳанда" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +#, fuzzy +#| msgid "Serial number" +msgid "Serial number (hex)" +msgstr "Рақами силсилавӣ" + +msgid "Request status" +msgstr "" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +msgid "'add' option" +msgstr "" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "Ҳолат" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +msgid "7 is not a valid revocation reason" +msgstr "" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +#, fuzzy +#| msgid "View" +msgid "ID View" +msgstr "Намоиш" + +msgid "system ID View" +msgstr "" + +#, fuzzy +#| msgid "View" +msgid "ID Views" +msgstr "Намоиш" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +msgid "Hosts the view applies to" +msgstr "" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +msgid "Add a new ID override." +msgstr "" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "" + +msgid "Delete an ID override." +msgstr "" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "" + +msgid "Modify an ID override." +msgstr "" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +msgid "Search for an ID override." +msgstr "" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "" + +msgid "Display information about an ID override." +msgstr "" + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +msgid "Base-64 encoded user certificate" +msgstr "" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "%s is not a valid attribute." +msgstr "" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +#, fuzzy +#| msgid "Subject" +msgid "Subject DN" +msgstr "Мавзӯъ" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +msgid "Search for CAs." +msgstr "" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Modify CA configuration." +msgstr "Ҷӯрсозӣ" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "" + +msgid "IPA CA cannot be disabled" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Enable a CA." +msgstr "Фаъолшуда" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Actions" +msgstr "Макон" + +msgid "Add" +msgstr "Илова кардан" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +msgid "No entries." +msgstr "" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +msgid "RADIUS" +msgstr "" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "Бекор кардан" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "Пӯшидан" + +#, fuzzy +#| msgid "Available" +msgid "Disable" +msgstr "Дастрас" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Enable" +msgstr "Фаъолшуда" + +msgid "Find" +msgstr "Ёфтан" + +msgid "Get" +msgstr "Гирифтан" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "Барориш" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "Хуб" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "Нест кардан" + +msgid "Remove hold" +msgstr "" + msgid "Reset" msgstr "Бозсозӣ" +#, fuzzy +#| msgid "New Password" +msgid "Reset Password" +msgstr "Пароли нав" + +msgid "Reset Password and Log in" +msgstr "" + msgid "Restore" msgstr "Барқароркунӣ" msgid "Retry" msgstr "Кӯшиш" -msgid "Search" -msgstr "Ҷустуҷӯ" +msgid "Revert" +msgstr "" -msgid "Select All" -msgstr "Интихоби ҳама" +msgid "Revoke" +msgstr "" -msgid "Serial Number" -msgstr "Рақами силсилавӣ" +msgid "Save" +msgstr "" -msgid "Serial number" -msgstr "Рақами силсилавӣ" +#, fuzzy +#| msgid "Get" +msgid "Set" +msgstr "Гирифтан" -msgid "Server Name" -msgstr "Номи сервер" +msgid "Show" +msgstr "" -msgid "Service" -msgstr "Хидмат" - -msgid "Settings" -msgstr "Танзимотҳо" - -msgid "Status" -msgstr "Ҳолат" - -msgid "Subject" -msgstr "Мавзӯъ" - -msgid "Sudo" -msgstr "Sudo" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Хатогии синтаксисӣ: %(error)s" - -msgid "Target" -msgstr "Мақсад" - -msgid "Type" -msgstr "Намуд" +msgid "Stage" +msgstr "" msgid "Update" msgstr "Ҷадидсозӣ" -msgid "User" -msgstr "Корбар" +msgid "View" +msgstr "Намоиш" -msgid "User group" +#, fuzzy +#| msgid "Configuration" +msgid "Customization" +msgstr "Ҷӯрсозӣ" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "Умумӣ" + +#, fuzzy +#| msgid "Settings" +msgid "Identity Settings" +msgstr "Танзимотҳо" + +#, fuzzy +#| msgid "Settings" +msgid "Record Settings" +msgstr "Танзимотҳо" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "Дастрас" + +msgid "Some operations failed." +msgstr "" + +msgid "Operations Error" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Confirmation" +msgstr "Ҷӯрсозӣ" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +#, fuzzy +#| msgid "description" +msgid "Redirection" +msgstr "шарҳ" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +msgid "Validation error" +msgstr "" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "" + +#, fuzzy +#| msgid "Error" +msgid "HTTP Error" +msgstr "Хатогӣ" + +msgid "Internal Error" +msgstr "" + +#, fuzzy +#| msgid "Error" +msgid "IPA Error" +msgstr "Хатогӣ" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "Танзимотҳо" + +msgid "Search" +msgstr "Ҷустуҷӯ" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Add Kerberos Principal Alias" +msgstr "" + +msgid "New kerberos principal alias" +msgstr "" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +msgid "Kerberos Principal you entered is expired" +msgstr "" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "" + +msgid "seconds" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Migrating" +msgstr "Ҷӯрсозӣ" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +msgid "Password migration was not successful" +msgstr "" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +msgid "Password migration was successful" +msgstr "" + +msgid "Attribute" +msgstr "Аттрибут" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Add permission" +msgstr "Иҷозат" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Permissions" +msgid "Remove permissions" +msgstr "Иҷозатҳо" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Role Settings" +msgstr "Танзимотҳо" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +msgid "Add self service permission" +msgstr "" + +msgid "Remove self service permissions" +msgstr "" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +msgid "Default host group" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Default user group" msgstr "Гурӯҳи корбар" -msgid "User name" -msgstr "Номи корбар" +msgid "Exclusive" +msgstr "" -msgid "Username" -msgstr "Номи корбар" +#, fuzzy +#| msgid "Permission" +msgid "Expression" +msgstr "Иҷозат" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "User group rule" +msgstr "Гурӯҳи корбар" + +#, fuzzy +#| msgid "User group" +msgid "User group rules" +msgstr "Гурӯҳи корбар" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +#, fuzzy +#| msgid "Type" +msgid "Map Type" +msgstr "Намуд" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Allow" +msgid "All" +msgstr "Иҷозат додан" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "Any Service" +msgstr "Хидмат" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +#, fuzzy +#| msgid "Principal" +msgid "Add principal" +msgstr "Асосӣ" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +msgid "Certificates" +msgstr "" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +#| msgid "Host Name" +msgid "Common Name" +msgstr "Номи мизбон" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +#, fuzzy +#| msgid "Issued To" +msgid "Issued on from" +msgstr "Додашудааст ба:" + +#, fuzzy +#| msgid "Issued To" +msgid "Issued on to" +msgstr "Додашудааст ба:" + +#, fuzzy +#| msgid "Serial number" +msgid "Maximum serial number" +msgstr "Рақами силсилавӣ" + +#, fuzzy +#| msgid "Serial number" +msgid "Minimum serial number" +msgstr "Рақами силсилавӣ" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +msgid "Get Certificate" +msgstr "" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +msgid "Issue new certificate" +msgstr "" + +msgid "Issued By" +msgstr "Додааст:" + +#, fuzzy +#| msgid "Issued By" +msgid "Issued On" +msgstr "Додааст:" + +msgid "Issued To" +msgstr "Додашудааст ба:" + +msgid "Key Compromise" +msgstr "" + +msgid "No Valid Certificate" +msgstr "" + +msgid "New Certificate" +msgstr "" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "Эзоҳ" + +msgid "Organization" +msgstr "Ташкилот" + +#, fuzzy +#| msgid "Organization" +msgid "Organizational Unit" +msgstr "Ташкилот" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +msgid "Remove certificate hold" +msgstr "" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "" + +msgid "Revoke certificate" +msgstr "" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "Рақами силсилавӣ" + +#, fuzzy +#| msgid "Serial Number" +msgid "Serial Number (hex)" +msgstr "Рақами силсилавӣ" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +#, fuzzy +#| msgid "Validity" +msgid "Valid to" +msgstr "Саҳеҳият" msgid "Validity" msgstr "Саҳеҳият" -msgid "View" -msgstr "Намоиш" +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" -msgid "ZIP" -msgstr "Рамзи ZIP" +msgid "View Certificate" +msgstr "" -msgid "description" -msgstr "шарҳ" +msgid "Certificate Data" +msgstr "" -msgid "filename" -msgstr "номи файл" +msgid "Certificate For Match" +msgstr "" -msgid "hostname" -msgstr "номи мизбон" +msgid "Certificate Mapping Match" +msgstr "" -#, c-format -msgid "out of memory\n" -msgstr "берун аз хотира\n" +msgid "Matched Users" +msgstr "" -msgid "password" +#, fuzzy +#| msgid "User name" +msgid "User Login" +msgstr "Номи корбар" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "Ҷӯрсозӣ" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +msgid "Remove certificate identity mapping rules" +msgstr "" + +#, fuzzy +#| msgid "Groups" +msgid "Group Options" +msgstr "Гуруҳҳо" + +#, fuzzy +#| msgid "Search" +msgid "Search Options" +msgstr "Ҷустуҷӯ" + +msgid "SELinux Options" +msgstr "" + +msgid "Server Options" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "Service Options" +msgstr "Хидмат" + +#, fuzzy +#| msgid "Description" +msgid "User Options" +msgstr "Шарҳ" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +msgid "Options" +msgstr "" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "DNS Zone Settings" +msgstr "Танзимотҳо" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Remove Permission" +msgstr "Иҷозат" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "Гурӯҳи корбар" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Group Settings" +msgstr "Танзимотҳо" + +msgid "External" +msgstr "" + +msgid "Groups" +msgstr "Гуруҳҳо" + +msgid "Group categories" +msgstr "" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +#| msgid "User group" +msgid "Remove user groups" +msgstr "Гурӯҳи корбар" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Group" +msgid "Group Type" +msgstr "Гурӯҳ" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "Via Service" +msgstr "Хидмат" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Include Enabled" +msgstr "Фаъолшуда" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "" + +msgid "Host Name" +msgstr "Номи мизбон" + +msgid "Delete Key, Unprovision" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Host Settings" +msgstr "Танзимотҳо" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +#, fuzzy +#| msgid "General" +msgid "Generate OTP" +msgstr "Умумӣ" + +#, fuzzy +#| msgid "General" +msgid "Generated OTP" +msgstr "Умумӣ" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "One-Time Password" +msgstr "Пароли нав" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +#, fuzzy +#| msgid "Reset" +msgid "Reset OTP" +msgstr "Бозсозӣ" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "Set One-Time Password" +msgstr "Пароли нав" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +msgid "Unprovision" +msgstr "" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +msgid "Add host group" +msgstr "" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +msgid "Enter trusted group name." +msgstr "" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +msgid "Add netgroup" +msgstr "" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Hostname" +msgid "Host" +msgstr "Номи мизбон" + +#, fuzzy +#| msgid "Settings" +msgid "Netgroup Settings" +msgstr "Танзимотҳо" + +msgid "Remove netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "" + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Configure your token" +msgstr "Ҷӯрсозӣ" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "OTP Token Settings" +msgstr "Танзимотҳо" + +msgid "Disable token" +msgstr "" + +#, fuzzy +#| msgid "Enabled" +msgid "Enable token" +msgstr "Фаъолшуда" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Show configuration uri" +msgstr "Ҷӯрсозӣ" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +#| msgid "Attribute" +msgid "Add Custom Attribute" +msgstr "Аттрибут" + +#, fuzzy +#| msgid "Permissions" +msgid "Permission settings" +msgstr "Иҷозатҳо" + +#, fuzzy +#| msgid "Attribute" +msgid "Attribute breakdown" +msgstr "Аттрибут" + +#, fuzzy +#| msgid "Settings" +msgid "Privilege Settings" +msgstr "Танзимотҳо" + +msgid "Public key:" +msgstr "" + +msgid "Set public key" +msgstr "" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Add password policy" +msgstr "Пароли LDAP" + +#, fuzzy +#| msgid "Password" +msgid "Password Policy" +msgstr "Парол" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Range Settings" +msgstr "Танзимотҳо" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +#, fuzzy +#| msgid "Location" +msgid "Local domain" +msgstr "Макон" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +msgid "Add RADIUS server" +msgstr "" + +msgid "RADIUS Proxy Server Settings" +msgstr "" + +msgid "Remove RADIUS servers" +msgstr "" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +#, fuzzy +#| msgid "Update" +msgid "Force Update" +msgstr "Ҷадидсозӣ" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Roles" +msgstr "Номи сервер" + +#, fuzzy +#| msgid "Server Name" +msgid "Server Role" +msgstr "Номи сервер" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delete Server" +msgstr "Нест кардан" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "Add service" +msgstr "Хидмат" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Service Settings" +msgstr "Танзимотҳо" + +#, fuzzy +#| msgid "Permission" +msgid "Provisioning" +msgstr "Иҷозат" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +msgid "Service unprovisioned" +msgstr "" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +msgid "SSH public keys" +msgstr "" + +msgid "SSH public key:" +msgstr "" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +msgid "User categories" +msgstr "" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +msgid "Remove sudo command groups" +msgstr "" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "Иҷозат додан" + +#, fuzzy +#| msgid "Commands" +msgid "Any Command" +msgstr "Фармонҳо" + +#, fuzzy +#| msgid "Group" +msgid "Any Group" +msgstr "Гурӯҳ" + +#, fuzzy +#| msgid "Commands" +msgid "Run Commands" +msgstr "Фармонҳо" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +#, fuzzy +#| msgid "Configuration" +msgid "Replication configuration" +msgstr "Ҷӯрсозӣ" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Trust Settings" +msgstr "Танзимотҳо" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Pre-shared password" +msgstr "Пароли LDAP" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +msgid "Trust direction" +msgstr "" + +msgid "Trust status" +msgstr "" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +msgid "User attributes for SMB services" +msgstr "" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Account Settings" +msgstr "Танзимотҳо" + +#, fuzzy +#| msgid "Status" +msgid "Account Status" +msgstr "Ҳолат" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "Settings" +msgid "Contact Settings" +msgstr "Танзимотҳо" + +#, fuzzy +#| msgid "Delete" +msgid "Delete mode" +msgstr "Нест кардан" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "delete" +msgstr "Нест кардан" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +msgid "Members" +msgstr "" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "Service Vaults" +msgstr "Хидмат" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User Vaults" +msgstr "Номи корбар" + +msgid "Current password is required" +msgstr "" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +#, fuzzy +#| msgid "First name" +msgid "First OTP" +msgstr "Ном" + +#, fuzzy +#| msgid "New Password" +msgid "New password is required" +msgstr "Пароли нав" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "Паролҳо номувофиқанд" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +#, fuzzy +#| msgid "New Password" +msgid "Verify Password" +msgstr "Пароли нав" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "Интихоби ҳама" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +#, fuzzy +#| msgid "Select All" +msgid "Unselect All" +msgstr "Интихоби ҳама" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "Назорат" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "Network Services" +msgstr "Хидмат" + +msgid "Policy" +msgstr "Сиёсат" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +#, fuzzy +#| msgid "First name" +msgid "First" +msgstr "Ном" + +#, fuzzy +#| msgid "Last name" +msgid "Last" +msgstr "Насаб" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +msgid "Must be a decimal number" +msgstr "" + +#, fuzzy +#| msgid "read error\n" +msgid "Format error" +msgstr "хатогии хониш\n" + +msgid "Must be an integer" +msgstr "" + +msgid "Not a valid IP address" +msgstr "" + +msgid "Not a valid IPv4 address" +msgstr "" + +msgid "Not a valid IPv6 address" +msgstr "" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +#, fuzzy +#| msgid "read error\n" +msgid "Parse error" +msgstr "хатогии хониш\n" + +msgid "Must be a positive number" +msgstr "" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "" + +#, fuzzy +#| msgid "IPA Server" +msgid "" +"\n" +"IPA servers\n" +msgstr "Сервери IPA" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "server" +msgstr "Сервери IPA" + +msgid "servers" +msgstr "" + +#, fuzzy +#| msgid "IPA Server" +msgid "IPA Servers" +msgstr "Сервери IPA" + +#, fuzzy +#| msgid "Server Name" +msgid "Server location" +msgstr "Номи сервер" + +#, fuzzy +#| msgid "Service" +msgid "Service weight" +msgstr "Хидмат" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +msgid "Modify information about an IPA server." +msgstr "" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +msgid "Server has already been deleted" +msgstr "" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, python-format +msgid "must be \"%s\"" +msgstr "" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "Ҳолат" + +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "Номи сервер" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "Principal" +msgid "Member principals" +msgstr "Асосӣ" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "" + +msgid "Add target to a named service delegation." +msgstr "" + +#, python-format +msgid "member %s" +msgstr "" + +msgid "Remove member from a named service delegation." +msgstr "" + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation rule" +msgstr "" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "" + +msgid "privileged service delegation target" +msgstr "" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "" + +#, fuzzy +#| msgid "Principal" +msgid "Principal alias" +msgstr "Асосӣ" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +msgid "Delete Class of Service entry" +msgstr "" + +msgid "Modify Class of Service entry" +msgstr "" + +msgid "Display Class of Service entry" +msgstr "" + +msgid "Search for Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "password" +msgid "password policy" msgstr "парол" +#, fuzzy +#| msgid "password" +msgid "password policies" +msgstr "парол" + +#, fuzzy +#| msgid "Password" +msgid "Password Policies" +msgstr "Парол" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "Номи корбар" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +msgid "cannot delete global password policy" +msgstr "" + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "" + +msgid "missing base_id" +msgstr "" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "" + +#, fuzzy +#| msgid "Configuration" +msgid "trust configuration" +msgstr "Ҷӯрсозӣ" + +#, fuzzy +#| msgid "Configuration" +msgid "Global Trust Configuration" +msgstr "Ҷӯрсозӣ" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +msgid "Domain enabled" +msgstr "" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +msgid "not allowed to remotely add agent" +msgstr "" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User logins" +msgstr "Номи корбар" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +msgid "Malformed principal" +msgstr "" + +msgid "{} is required by the IPA master" +msgstr "" + +#, fuzzy +#| msgid "Service" +msgid "service" +msgstr "Хидмат" + +#, fuzzy +#| msgid "Service" +msgid "services" +msgstr "Хидмат" + +msgid "Service principal alias" +msgstr "" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +msgid "Add a new IPA service." +msgstr "" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +msgid "Add a new SMB service." +msgstr "" + +msgid "SMB service NetBIOS name" +msgstr "" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to a service" +msgstr "" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from a service" +msgstr "" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +msgid "Delegations" +msgstr "" + +#, fuzzy +#| msgid "Delete" +msgid "Delegation" +msgstr "Нест кардан" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "" + +msgid "The deny type has been deprecated." +msgstr "" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +msgid "Indirect Member permissions" +msgstr "" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "" + +#, fuzzy +#| msgid "Entry" +msgid "entry" +msgstr "Вуруд" + +msgid "entries" +msgstr "" + +msgid "Entry" +msgstr "Вуруд" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +msgid "No such attribute on this entry" +msgstr "" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +msgid "must be TRUE or FALSE" +msgstr "" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "File %(file)s not found" +msgid "manager %(manager)s not found" +msgstr "Файли %(file)s пайдо нашуд." + +msgid "Issuer of the certificate" +msgstr "" + +msgid "Subject of the certificate" +msgstr "" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "%s: user is already preserved" +msgstr "" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +msgid "Time now" +msgstr "" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "" + +msgid "Remove principal alias from the user entry" +msgstr "" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +msgid "must be enabled only on a single master" +msgstr "" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +msgid "domain is not configured" +msgstr "" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +msgid "SID does not match any trusted domain" +msgstr "" + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +#, fuzzy +#| msgid "Initials" +msgid "Credentials" +msgstr "Ному насаб" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +msgid "Request must be a dict" +msgstr "" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +msgid "params must be a list" +msgstr "" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "" + +msgid "must be at least 1" +msgstr "" + +msgid "Out of memory\n" +msgstr "Берун аз хотира \n" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "Аз хотира берун шуд!?\n" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Password is too long!\n" +msgstr "Паролҳо номувофиқанд!" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + #, c-format -msgid "read error\n" -msgstr "хатогии хониш\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "" diff --git a/po/tr.po b/po/tr.po index 352026c1a..fe83011d1 100644 --- a/po/tr.po +++ b/po/tr.po @@ -6,7 +6,7 @@ msgid "" msgstr "" "Project-Id-Version: freeipa 4.9.0.dev202006101925+gitba7974bfd\n" "Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue\n" -"POT-Creation-Date: 2020-12-23 16:29+0200\n" +"POT-Creation-Date: 2021-01-27 10:47+0200\n" "PO-Revision-Date: 2020-08-29 11:29+0000\n" "Last-Translator: Oğuz Ersen \n" "Language-Team: Turkish \".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" + +msgid "Key" +msgstr "" + +msgid "Automount key name." +msgstr "" + +msgid "Mount information" +msgstr "" + +#, fuzzy +#| msgid "Description" +msgid "description" +msgstr "Açıklama" + +msgid "Location" +msgstr "" + +msgid "Automount location name." +msgstr "" + +msgid "Map" +msgstr "" + +msgid "Automount map name." +msgstr "" + +msgid "Description" +msgstr "Açıklama" + +msgid "Create a new automount key." +msgstr "" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete an automount key." +msgstr "Bir ağ grubunu sil." + +msgid "Continuous mode: Don't stop on errors." +msgstr "" + +msgid "List of deletions that failed" +msgstr "Başarısız olan silmelerin listesi" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an automount key." +msgstr "Bir ağ grubu ara." + +msgid "Time Limit" +msgstr "Zaman Sınırı" + +#, fuzzy +#| msgid "Time limit of search in seconds (0 is unlimited)" +msgid "Time limit of search in seconds" +msgstr "Saniye cinsinden aramanın zaman sınırı (0 sınırsızdır)" + +msgid "Size Limit" +msgstr "Boyut Sınırı" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Maximum number of entries returned" +msgstr "Döndürülen girdi sayısı" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify an automount key." +msgstr "Bir ağ grubunu değiştir." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" + +msgid "Rights" +msgstr "" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" + +msgid "New mount information" +msgstr "" + +msgid "Rename" +msgstr "" + +msgid "Rename the automount key object" +msgstr "" + +msgid "Display an automount key." +msgstr "" + +msgid "Create a new automount location." +msgstr "" + +msgid "Delete an automount location." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an automount location." +msgstr "Bir ağ grubu ara." + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" + +msgid "Display an automount location." +msgstr "" + +msgid "Generate automount files for a specific location." +msgstr "" + +msgid "Create a new automount map." +msgstr "" + +msgid "Create a new indirect mount point." +msgstr "" + +msgid "Mount point" +msgstr "" + +msgid "Parent map" +msgstr "" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete an automount map." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an automount map." +msgstr "Bir ağ grubu ara." + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify an automount map." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display an automount map." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "" + +msgid "Home directory base" +msgstr "" + +msgid "Default location of home directories" +msgstr "" + +msgid "Default shell" +msgstr "" + +msgid "Default shell for new users" +msgstr "" + +#, fuzzy +#| msgid "The default users group cannot be removed" +msgid "Default users group" +msgstr "Öntanımlı kullanıcılar grubu kaldırılamaz" + +msgid "Default group for new users" +msgstr "" + +msgid "Default e-mail domain" +msgstr "" + +msgid "Search time limit" +msgstr "" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" + +#, fuzzy +#| msgid "Size Limit" +msgid "Search size limit" +msgstr "Boyut Sınırı" + +#, fuzzy +#| msgid "Maximum number of entries returned (0 is unlimited)" +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" + +msgid "User search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" + +msgid "Group search fields" +msgstr "" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" + +msgid "Enable migration mode" +msgstr "" + +msgid "Certificate Subject base" +msgstr "" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "" + +msgid "Default user objectclasses" +msgstr "" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" + +msgid "Password Expiration Notification (days)" +msgstr "" + +msgid "Number of days's notice of impending password expiration" +msgstr "" + +msgid "Password plugin features" +msgstr "" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" + +msgid "Default SELinux user" +msgstr "" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" + +msgid "Default PAC types" +msgstr "" + +msgid "Default types of PAC supported for services" +msgstr "" + +msgid "Default user authentication types" +msgstr "" + +#, fuzzy +#| msgid "The number of times to retry authentication" +msgid "Default types of supported user authentication" +msgstr "Kimlik doğrulamayı yeniden deneme sayısı" + +msgid "Modify configuration options." +msgstr "" + +msgid "Show the current configuration." +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Self-service Permissions\n" +#| "\n" +#| "A permission enables fine-grained delegation of permissions. Access " +#| "Control\n" +#| "Rules, or instructions (ACIs), grant permission to permissions to " +#| "perform\n" +#| "given tasks such as adding a user, modifying a group, etc.\n" +#| "\n" +#| "A Self-service permission defines what an object can change in its own " +#| "entry.\n" +#| "\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a self-service rule to allow users to manage their address (using " +#| "Bash\n" +#| " brace expansion):\n" +#| " ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +#| "st} \"Users manage their own address\"\n" +#| "\n" +#| " When managing the list of attributes you need to include all attributes\n" +#| " in the list, including existing ones.\n" +#| " Add telephoneNumber to the list (using Bash brace expansion):\n" +#| " ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +#| "\"Users manage their own address\"\n" +#| "\n" +#| " Display our updated rule:\n" +#| " ipa selfservice-show \"Users manage their own address\"\n" +#| "\n" +#| " Delete a rule:\n" +#| " ipa selfservice-del \"Users manage their own address\"\n" +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" +"\n" +"Self-servis İzinleri\n" +"\n" +"Bir izin, izinlerin ayrıntılı şekilde tayin edilmesini sağlar. Erişim " +"Denetim\n" +"Kuralları veya talimatları (ACI), kullanıcı ekleme, grup değiştirme vb. " +"gibi\n" +"belirli görevleri gerçekleştirme izinleri için izin verir.\n" +"\n" +"Self-servis izni, bir nesnenin kendi girdisinde neleri değiştirebileceğini " +"tanımlar.\n" +"\n" +"\n" +"ÖRNEKLER:\n" +"\n" +" Kullanıcıların adreslerini yönetmesine izin vermek için bir self-servis " +"kuralı\n" +" ekleyin (Bash küme ayracı genişletmesini kullanarak):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" Nitelikler listesini yönetirken, mevcut özellikler de dahil olmak üzere\n" +" tüm nitelikleri listeye eklemeniz gerekir.\n" +" Listeye telephoneNumber ekleyin (Bash küme ayracı genişletmesini " +"kullanarak):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Güncellenmiş kuralımızı görüntüleyin:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Bir kuralı silin:\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +#, fuzzy +#| msgid "Permission name" +msgid "Delegation name" +msgstr "İzin adı" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "Verilecek izinler (okuma, yazma) Öntanımlı: yazma." + +#, fuzzy +#| msgid "Attributes to which the permission applies." +msgid "Attributes to which the delegation applies" +msgstr "İznin geçerli olduğu nitelikler." + +msgid "Member user group" +msgstr "" + +msgid "User group to apply delegation to" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new delegation." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a delegation." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for delegations." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a delegation." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a delegation." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Forward policy" +msgstr "" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" + +msgid "Allow PTR sync" +msgstr "" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" + +msgid "Zone refresh interval" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Zone name" +msgstr "Komut adı" + +msgid "Zone name (FQDN)" +msgstr "" + +msgid "Reverse zone IP network" +msgstr "" + +msgid "IP network to create reverse zone name from" +msgstr "" + +msgid "Active zone" +msgstr "" + +msgid "Is zone active?" +msgstr "" + +msgid "Zone forwarders" +msgstr "" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Record name" +msgstr "Sunucu adı" + +msgid "Time to live" +msgstr "" + +msgid "Records" +msgstr "" + +#, fuzzy +#| msgid "incorrect type" +msgid "Record type" +msgstr "yanlış tür" + +msgid "Record data" +msgstr "" + +msgid "A record" +msgstr "" + +msgid "Raw A records" +msgstr "" + +msgid "A IP Address" +msgstr "" + +msgid "IP Address" +msgstr "" + +msgid "A Create reverse" +msgstr "" + +msgid "Create reverse record for this IP Address" +msgstr "" + +msgid "AAAA record" +msgstr "" + +msgid "Raw AAAA records" +msgstr "" + +msgid "AAAA IP Address" +msgstr "" + +msgid "AAAA Create reverse" +msgstr "" + +msgid "A6 record" +msgstr "" + +msgid "Raw A6 records" +msgstr "" + +msgid "A6 Record data" +msgstr "" + +msgid "AFSDB record" +msgstr "" + +msgid "Raw AFSDB records" +msgstr "" + +msgid "AFSDB Subtype" +msgstr "" + +msgid "Subtype" +msgstr "" + +msgid "AFSDB Hostname" +msgstr "" + +msgid "Hostname" +msgstr "" + +msgid "APL record" +msgstr "" + +msgid "Raw APL records" +msgstr "" + +msgid "CERT record" +msgstr "" + +msgid "Raw CERT records" +msgstr "" + +msgid "CERT Certificate Type" +msgstr "" + +msgid "Certificate Type" +msgstr "" + +msgid "CERT Key Tag" +msgstr "" + +msgid "Key Tag" +msgstr "" + +msgid "CERT Algorithm" +msgstr "" + +msgid "Algorithm" +msgstr "" + +msgid "CERT Certificate/CRL" +msgstr "" + +msgid "Certificate/CRL" +msgstr "" + +msgid "CNAME record" +msgstr "" + +msgid "Raw CNAME records" +msgstr "" + +msgid "CNAME Hostname" +msgstr "" + +msgid "A hostname which this alias hostname points to" +msgstr "" + +msgid "DHCID record" +msgstr "" + +msgid "Raw DHCID records" +msgstr "" + +msgid "DLV record" +msgstr "" + +msgid "Raw DLV records" +msgstr "" + +msgid "DLV Key Tag" +msgstr "" + +msgid "DLV Algorithm" +msgstr "" + +msgid "DLV Digest Type" +msgstr "" + +msgid "Digest Type" +msgstr "" + +msgid "DLV Digest" +msgstr "" + +msgid "Digest" +msgstr "" + +msgid "DNAME record" +msgstr "" + +msgid "Raw DNAME records" +msgstr "" + +msgid "DNAME Target" +msgstr "" + +msgid "Target" +msgstr "" + +msgid "DNSKEY record" +msgstr "" + +msgid "Raw DNSKEY records" +msgstr "" + +msgid "DS record" +msgstr "" + +msgid "Raw DS records" +msgstr "" + +msgid "DS Key Tag" +msgstr "" + +msgid "DS Algorithm" +msgstr "" + +msgid "DS Digest Type" +msgstr "" + +msgid "DS Digest" +msgstr "" + +msgid "HIP record" +msgstr "" + +msgid "Raw HIP records" +msgstr "" + +msgid "IPSECKEY record" +msgstr "" + +msgid "Raw IPSECKEY records" +msgstr "" + +msgid "KEY record" +msgstr "" + +msgid "Raw KEY records" +msgstr "" + +msgid "KX record" +msgstr "" + +msgid "Raw KX records" +msgstr "" + +msgid "KX Preference" +msgstr "" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" + +msgid "KX Exchanger" +msgstr "" + +msgid "A host willing to act as a key exchanger" +msgstr "" + +msgid "LOC record" +msgstr "" + +msgid "Raw LOC records" +msgstr "" + +msgid "LOC Degrees Latitude" +msgstr "" + +msgid "Degrees Latitude" +msgstr "" + +msgid "LOC Minutes Latitude" +msgstr "" + +msgid "Minutes Latitude" +msgstr "" + +msgid "LOC Seconds Latitude" +msgstr "" + +msgid "Seconds Latitude" +msgstr "" + +msgid "LOC Direction Latitude" +msgstr "" + +msgid "Direction Latitude" +msgstr "" + +msgid "LOC Degrees Longitude" +msgstr "" + +msgid "Degrees Longitude" +msgstr "" + +msgid "LOC Minutes Longitude" +msgstr "" + +msgid "Minutes Longitude" +msgstr "" + +msgid "LOC Seconds Longitude" +msgstr "" + +msgid "Seconds Longitude" +msgstr "" + +msgid "LOC Direction Longitude" +msgstr "" + +msgid "Direction Longitude" +msgstr "" + +msgid "LOC Altitude" +msgstr "" + +msgid "Altitude" +msgstr "" + +msgid "LOC Size" +msgstr "" + +msgid "Size" +msgstr "" + +msgid "LOC Horizontal Precision" +msgstr "" + +msgid "Horizontal Precision" +msgstr "" + +msgid "LOC Vertical Precision" +msgstr "" + +msgid "Vertical Precision" +msgstr "" + +msgid "MX record" +msgstr "" + +msgid "Raw MX records" +msgstr "" + +msgid "MX Preference" +msgstr "" + +msgid "MX Exchanger" +msgstr "" + +msgid "A host willing to act as a mail exchanger" +msgstr "" + +msgid "NAPTR record" +msgstr "" + +msgid "Raw NAPTR records" +msgstr "" + +msgid "NAPTR Order" +msgstr "" + +msgid "Order" +msgstr "" + +msgid "NAPTR Preference" +msgstr "" + +msgid "Preference" +msgstr "" + +msgid "NAPTR Flags" +msgstr "" + +msgid "Flags" +msgstr "" + +msgid "NAPTR Service" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "Service" +msgstr "Sunucu" + +msgid "NAPTR Regular Expression" +msgstr "" + +msgid "Regular Expression" +msgstr "" + +msgid "NAPTR Replacement" +msgstr "" + +msgid "Replacement" +msgstr "" + +msgid "NS record" +msgstr "" + +msgid "Raw NS records" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "NS Hostname" +msgstr "NIS etki alanı adı" + +msgid "NSEC record" +msgstr "" + +msgid "Raw NSEC records" +msgstr "" + +msgid "NSEC3 record" +msgstr "" + +msgid "Raw NSEC3 records" +msgstr "" + +msgid "PTR record" +msgstr "" + +msgid "Raw PTR records" +msgstr "" + +msgid "PTR Hostname" +msgstr "" + +msgid "The hostname this reverse record points to" +msgstr "" + +msgid "RRSIG record" +msgstr "" + +msgid "Raw RRSIG records" +msgstr "" + +msgid "RP record" +msgstr "" + +msgid "Raw RP records" +msgstr "" + +msgid "SIG record" +msgstr "" + +msgid "Raw SIG records" +msgstr "" + +msgid "SPF record" +msgstr "" + +msgid "Raw SPF records" +msgstr "" + +msgid "SRV record" +msgstr "" + +msgid "Raw SRV records" +msgstr "" + +msgid "SRV Priority" +msgstr "" + +msgid "Priority" +msgstr "" + +msgid "SRV Weight" +msgstr "" + +msgid "Weight" +msgstr "" + +msgid "SRV Port" +msgstr "" + +msgid "Port" +msgstr "" + +msgid "SRV Target" +msgstr "" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" + +msgid "SSHFP record" +msgstr "" + +msgid "Raw SSHFP records" +msgstr "" + +msgid "SSHFP Algorithm" +msgstr "" + +msgid "SSHFP Fingerprint Type" +msgstr "" + +msgid "Fingerprint Type" +msgstr "" + +msgid "SSHFP Fingerprint" +msgstr "" + +msgid "Fingerprint" +msgstr "" + +msgid "TA record" +msgstr "" + +msgid "Raw TA records" +msgstr "" + +msgid "TLSA record" +msgstr "" + +msgid "Raw TLSA records" +msgstr "" + +msgid "TLSA Certificate Usage" +msgstr "" + +msgid "Certificate Usage" +msgstr "" + +msgid "TLSA Selector" +msgstr "" + +msgid "Selector" +msgstr "" + +msgid "TLSA Matching Type" +msgstr "" + +msgid "Matching Type" +msgstr "" + +msgid "TLSA Certificate Association Data" +msgstr "" + +msgid "Certificate Association Data" +msgstr "" + +msgid "TKEY record" +msgstr "" + +msgid "Raw TKEY records" +msgstr "" + +msgid "TSIG record" +msgstr "" + +msgid "Raw TSIG records" +msgstr "" + +msgid "TXT record" +msgstr "" + +msgid "Raw TXT records" +msgstr "" + +msgid "TXT Text Data" +msgstr "" + +msgid "Text Data" +msgstr "" + +msgid "Authoritative nameserver" +msgstr "" + +msgid "Authoritative nameserver domain name" +msgstr "" + +msgid "Administrator e-mail address" +msgstr "" + +msgid "SOA serial" +msgstr "" + +msgid "SOA record serial number" +msgstr "" + +msgid "SOA refresh" +msgstr "" + +msgid "SOA record refresh time" +msgstr "" + +msgid "SOA retry" +msgstr "" + +msgid "SOA record retry time" +msgstr "" + +msgid "SOA expire" +msgstr "" + +msgid "SOA record expire time" +msgstr "" + +msgid "SOA minimum" +msgstr "" + +msgid "How long should negative responses be cached" +msgstr "" + +msgid "Time to live for records at zone apex" +msgstr "" + +msgid "BIND update policy" +msgstr "" + +msgid "Dynamic update" +msgstr "" + +msgid "Allow dynamic updates." +msgstr "" + +msgid "Allow query" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" + +msgid "Allow transfer" +msgstr "" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" + +msgid "Allow in-line DNSSEC signing" +msgstr "" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" + +msgid "NSEC3PARAM record" +msgstr "" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" + +msgid "Resolve a host name in DNS." +msgstr "" + +msgid "Modify global DNS configuration." +msgstr "" + +msgid "Show the current global DNS configuration." +msgstr "" + +msgid "Create new DNS forward zone." +msgstr "" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Permission name" +msgid "Permission value" +msgstr "İzin adı" + +msgid "Delete DNS forward zone." +msgstr "" + +msgid "Disable DNS Forward Zone." +msgstr "" + +msgid "Enable DNS Forward Zone." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for DNS forward zones." +msgstr "Bir ağ grubu ara." + +msgid "Modify DNS forward zone." +msgstr "" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a DNS forward zone." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add new DNS resource record." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +msgid "Force" +msgstr "" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" + +msgid "Structured" +msgstr "" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Delete DNS resource record." +msgstr "Bir RADIUS vekil sunucusunu sil." + +msgid "Delete all associated records" +msgstr "" + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Delete DNS record entry." +msgstr "Bir RADIUS vekil sunucusunu sil." + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for DNS resources." +msgstr "RADIUS vekil sunucularını ara." + +#, fuzzy +#| msgid "Modify a RADIUS proxy server." +msgid "Modify a DNS resource record." +msgstr "Bir RADIUS vekil sunucusunu değiştir." + +msgid "Rename the DNS resource record object" +msgstr "" + +msgid "Display DNS resource." +msgstr "" + +msgid "Create new DNS zone (SOA record)." +msgstr "" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" + +msgid "Add a permission for per-zone access delegation." +msgstr "" + +msgid "Delete DNS zone (SOA record)." +msgstr "" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Disable DNS Zone." +msgstr "DNS adı olmalı" + +msgid "Enable DNS Zone." +msgstr "" + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for DNS zones (SOA records)." +msgstr "RADIUS vekil sunucularını ara." + +msgid "Forward zones only" +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for forward zones only" +msgstr "Bir ağ grubu ara." + +msgid "Modify DNS zone (SOA record)." +msgstr "" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" + +msgid "Remove a permission for per-zone access delegation." +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a DNS zone (SOA record)." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Rule name" +msgstr "Sunucu adı" + +msgid "Rule type" +msgstr "" + +msgid "Rule type (allow)" +msgstr "" + +msgid "User category" +msgstr "Kullanıcı kategorisi" + +msgid "User category the rule applies to" +msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" + +msgid "Host category" +msgstr "Ana makine kategorisi" + +msgid "Host category the rule applies to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +#, fuzzy +#| msgid "User category" +msgid "Service category" +msgstr "Kullanıcı kategorisi" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Service category the rule applies to" +msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" + +msgid "Enabled" +msgstr "" + +msgid "Users" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "User Groups" +msgstr "Ağ grupları" + +msgid "Hosts" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "Host Groups" +msgstr "Ağ grupları" + +#, fuzzy +#| msgid "Server" +msgid "Services" +msgstr "Sunucu" + +#, fuzzy +#| msgid "Server" +msgid "Service Groups" +msgstr "Sunucu" + +msgid "External host" +msgstr "" + +msgid "Create a new HBAC rule." +msgstr "" + +msgid "Suppress processing of membership attributes." +msgstr "" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Member Host" +msgid "member host" +msgstr "Üye Ana Makine" + +msgid "hosts to add" +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "member host group" +msgstr "Bir ağ grubuna üye ekle." + +msgid "host groups to add" +msgstr "" + +msgid "Members that could not be added" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of members added" +msgstr "Yüklenen eklenti sayısı" + +msgid "Add services to an HBAC rule." +msgstr "" + +msgid "member HBAC service" +msgstr "" + +msgid "HBAC services to add" +msgstr "" + +msgid "member HBAC service group" +msgstr "" + +msgid "HBAC service groups to add" +msgstr "" + +msgid "Add users and groups to an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Member Host" +msgid "member user" +msgstr "Üye Ana Makine" + +msgid "users to add" +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "member group" +msgstr "Bir ağ grubuna üye ekle." + +msgid "groups to add" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete an HBAC rule." +msgstr "Bir ağ grubunu sil." + +msgid "Disable an HBAC rule." +msgstr "" + +msgid "Enable an HBAC rule." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for HBAC rules." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify an HBAC rule." +msgstr "Bir ağ grubunu değiştir." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "hosts to remove" +msgstr "" + +msgid "host groups to remove" +msgstr "" + +msgid "Members that could not be removed" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of members removed" +msgstr "Döndürülen girdi sayısı" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "" + +msgid "HBAC services to remove" +msgstr "" + +msgid "HBAC service groups to remove" +msgstr "" + +msgid "Remove users and groups from an HBAC rule." +msgstr "" + +msgid "users to remove" +msgstr "" + +msgid "groups to remove" +msgstr "" + +msgid "Display the properties of an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Service name" +msgstr "Sunucu adı" + +msgid "HBAC service" +msgstr "" + +#, fuzzy +#| msgid "self service permission" +msgid "HBAC service description" +msgstr "self servis izni" + +msgid "Member of HBAC service groups" +msgstr "" + +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add a new HBAC service." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +msgid "Delete an existing HBAC service." +msgstr "" + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for HBAC services." +msgstr "RADIUS vekil sunucularını ara." + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a RADIUS proxy server." +msgid "Modify an HBAC service." +msgstr "Bir RADIUS vekil sunucusunu değiştir." + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Display information about an HBAC service." +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Service group name" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "Netgroup description" +msgid "HBAC service group description" +msgstr "Ağ grubu açıklaması" + +#, fuzzy +#| msgid "Member Host" +msgid "Member HBAC service" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new HBAC service group." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add members to an HBAC service group." +msgstr "Bir ağ grubuna üye ekle." + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete an HBAC service group." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an HBAC service group." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify an HBAC service group." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove members from an HBAC service group." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an HBAC service group." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "Host name" +msgstr "Ana makine kategorisi" + +#, fuzzy +#| msgid "A description of this RADIUS proxy server" +msgid "A description of this host" +msgstr "Bu RADIUS vekil sunucusunun açıklaması" + +msgid "Locality" +msgstr "" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "" + +msgid "Platform" +msgstr "" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "" + +msgid "Operating system" +msgstr "" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" + +#, fuzzy +#| msgid "User category" +msgid "User password" +msgstr "Kullanıcı kategorisi" + +msgid "Password used in bulk enrollment" +msgstr "" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" + +msgid "Random password" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Certificate" +msgstr "bir sertifika olmalı" + +msgid "Base-64 encoded server certificate" +msgstr "" + +#, fuzzy +#| msgid "Permission name" +msgid "Principal name" +msgstr "İzin adı" + +msgid "MAC address" +msgstr "" + +msgid "Hardware MAC address(es) on this host" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "SSH public key" +msgstr "geçersiz SSH genel anahtarı" + +msgid "Class" +msgstr "" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +msgid "Assigned ID View" +msgstr "" + +#, fuzzy +#| msgid "The number of times to retry authentication" +msgid "Requires pre-authentication" +msgstr "Kimlik doğrulamayı yeniden deneme sayısı" + +msgid "Pre-authentication is required for the service" +msgstr "" + +msgid "Trusted for delegation" +msgstr "" + +msgid "Client credentials may be delegated to the service" +msgstr "" + +#, fuzzy +#| msgid "Member Host" +msgid "Member of host-groups" +msgstr "Üye Ana Makine" + +msgid "Roles" +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Member of netgroups" +msgstr "Bir ağ grubuna üye ekle." + +msgid "Member of Sudo rule" +msgstr "" + +msgid "Member of HBAC rule" +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Indirect Member of netgroup" +msgstr "Bir ağ grubuna üye ekle." + +msgid "Indirect Member of host-group" +msgstr "" + +msgid "Indirect Member of role" +msgstr "" + +msgid "Indirect Member of Sudo rule" +msgstr "" + +msgid "Indirect Member of HBAC rule" +msgstr "" + +msgid "Keytab" +msgstr "" + +msgid "Managed by" +msgstr "" + +msgid "Managing" +msgstr "" + +msgid "Users allowed to retrieve keytab" +msgstr "" + +msgid "Groups allowed to retrieve keytab" +msgstr "" + +msgid "Hosts allowed to retrieve keytab" +msgstr "" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "" + +msgid "Users allowed to create keytab" +msgstr "" + +msgid "Groups allowed to create keytab" +msgstr "" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "Hosts allowed to create keytab" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +msgid "Host Groups allowed to create keytab" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new host." +msgstr "Yeni bir ağ grubu ekle." + +msgid "force host name even if not in DNS" +msgstr "" + +msgid "skip reverse DNS detection" +msgstr "" + +msgid "Add the host to DNS with this IP address" +msgstr "" + +msgid "Add hosts that can manage this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a host." +msgstr "Bir ağ grubunu sil." + +msgid "Remove entries from DNS" +msgstr "" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for hosts." +msgstr "Bir ağ grubu ara." + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" + +#, fuzzy +#| msgid "Netgroup" +msgid "host group" +msgstr "Ağ grubu" + +msgid "Search for hosts with these member of host groups." +msgstr "" + +msgid "Search for hosts without these member of host groups." +msgstr "" + +msgid "netgroup" +msgstr "ağ grubu" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for hosts with these member of netgroups." +msgstr "Bir ağ grubu ara." + +msgid "Search for hosts without these member of netgroups." +msgstr "" + +msgid "role" +msgstr "" + +msgid "Search for hosts with these member of roles." +msgstr "" + +msgid "Search for hosts without these member of roles." +msgstr "" + +msgid "HBAC rule" +msgstr "" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "" + +msgid "sudo rule" +msgstr "" + +msgid "Search for hosts with these member of sudo rules." +msgstr "" + +msgid "Search for hosts without these member of sudo rules." +msgstr "" + +msgid "user" +msgstr "" + +msgid "Search for hosts with these enrolled by users." +msgstr "" + +msgid "Search for hosts without these enrolled by users." +msgstr "" + +msgid "host" +msgstr "" + +msgid "Search for hosts with these managed by hosts." +msgstr "" + +msgid "Search for hosts without these managed by hosts." +msgstr "" + +msgid "Search for hosts with these managing hosts." +msgstr "" + +msgid "Search for hosts without these managing hosts." +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Modify information about a host." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Kerberos principal name for this host" +msgstr "" + +msgid "Update DNS entries" +msgstr "" + +msgid "Remove hosts that can manage this host." +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a host." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "must be a certificate" +msgid "file to store certificate in" +msgstr "bir sertifika olmalı" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Netgroup" +msgid "Host-group" +msgstr "Ağ grubu" + +#, fuzzy +#| msgid "Netgroup" +msgid "Name of host-group" +msgstr "Ağ grubu" + +#, fuzzy +#| msgid "A description of this RADIUS proxy server" +msgid "A description of this host-group" +msgstr "Bu RADIUS vekil sunucusunun açıklaması" + +#, fuzzy +#| msgid "Member Host" +msgid "Member hosts" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Member Host" +msgid "Member host-groups" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Member Host" +msgid "Indirect Member hosts" +msgstr "Üye Ana Makine" + +msgid "Indirect Member host-groups" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new hostgroup." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add members to a hostgroup." +msgstr "Bir ağ grubuna üye ekle." + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a hostgroup." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for hostgroups." +msgstr "Bir ağ grubu ara." + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" + +msgid "Search for host groups with these member hosts." +msgstr "" + +msgid "Search for host groups without these member hosts." +msgstr "" + +msgid "Search for host groups with these member host groups." +msgstr "" + +msgid "Search for host groups without these member host groups." +msgstr "" + +msgid "Search for host groups with these member of host groups." +msgstr "" + +msgid "Search for host groups without these member of host groups." +msgstr "" + +msgid "Search for host groups with these member of netgroups." +msgstr "" + +msgid "Search for host groups without these member of netgroups." +msgstr "" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "" + +msgid "Search for host groups with these member of sudo rules." +msgstr "" + +msgid "Search for host groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a hostgroup." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove members from a hostgroup." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a hostgroup." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" +msgstr "" + +msgid "Anchor to override" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Group name" +msgstr "Ağ grubu adı" + +msgid "GID" +msgstr "" + +msgid "Group ID Number" +msgstr "" + +msgid "User login" +msgstr "" + +msgid "UID" +msgstr "" + +msgid "User ID Number" +msgstr "" + +msgid "GECOS" +msgstr "" + +#, fuzzy +#| msgid "must be dictionary" +msgid "Home directory" +msgstr "sözlük olmalı" + +msgid "Login shell" +msgstr "" + +msgid "ID View Name" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new Group ID override." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete an Group ID override." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an Group ID override." +msgstr "Bir ağ grubu ara." + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify an Group ID override." +msgstr "Bir ağ grubunu değiştir." + +msgid "Rename the Group ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an Group ID override." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add a new User ID override." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Delete an User ID override." +msgstr "Bir RADIUS vekil sunucusunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an User ID override." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Modify a RADIUS proxy server." +msgid "Modify an User ID override." +msgstr "Bir RADIUS vekil sunucusunu değiştir." + +msgid "Rename the User ID override object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an User ID override." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new ID View." +msgstr "Yeni bir ağ grubu ekle." + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" + +msgid "hosts" +msgstr "" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts to apply the ID View to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +#, fuzzy +#| msgid "Netgroups" +msgid "hostgroups" +msgstr "Ağ grupları" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts that this ID View was applied to." +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" + +msgid "Number of hosts the ID View was applied to:" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete an ID View." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an ID View." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify an ID View." +msgstr "Bir ağ grubunu değiştir." + +msgid "Rename the ID View object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an ID View." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Enumerate all the hosts the view applies to." +msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" + +msgid "Hosts to clear (any) ID View from." +msgstr "" + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" + +msgid "Hosts that ID View was cleared from." +msgstr "" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" + +msgid "Dict of I18N messages" +msgstr "" + +msgid "Export plugin meta-data for the webUI." +msgstr "" + +msgid "Name of object to export" +msgstr "" + +msgid "Name of method to export" +msgstr "" + +msgid "Name of command to export" +msgstr "" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" + +msgid "Join an IPA domain" +msgstr "" + +msgid "The hostname to register as" +msgstr "" + +msgid "The IPA realm" +msgstr "" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "User name" +msgstr "Sunucu adı" + +msgid "Manage ticket policy for specific user" +msgstr "" + +msgid "Max life" +msgstr "" + +msgid "Maximum ticket life (seconds)" +msgstr "" + +msgid "Max renew" +msgstr "" + +msgid "Maximum renewable age (seconds)" +msgstr "" + +msgid "Modify Kerberos ticket policy." +msgstr "" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "" + +msgid "Display the current Kerberos ticket policy." +msgstr "" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "" + +msgid "LDAP URI" +msgstr "" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "" + +msgid "Bind DN" +msgstr "" + +#, fuzzy +#| msgid "User category" +msgid "User container" +msgstr "Kullanıcı kategorisi" + +msgid "DN of container for users in DS relative to base DN" +msgstr "" + +msgid "Group container" +msgstr "" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "" + +msgid "User object class" +msgstr "" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" + +msgid "Group object class" +msgstr "" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "" + +msgid "Ignore user object class" +msgstr "" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" + +#, fuzzy +#| msgid "User attribute" +msgid "Ignore user attribute" +msgstr "Kullanıcı niteliği" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "" + +msgid "Ignore group object class" +msgstr "" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "" + +#, fuzzy +#| msgid "User attribute" +msgid "Ignore group attribute" +msgstr "Kullanıcı niteliği" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "" + +msgid "Overwrite GID" +msgstr "" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" + +msgid "LDAP schema" +msgstr "" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" + +msgid "Continue" +msgstr "" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" + +msgid "Base DN" +msgstr "" + +msgid "Base DN on remote LDAP server" +msgstr "" + +msgid "Ignore compat plugin" +msgstr "" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "CA certificate" +msgstr "bir sertifika olmalı" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "" + +msgid "groups to exclude from migration" +msgstr "" + +msgid "users to exclude from migration" +msgstr "" + +msgid "Lists of objects migrated; categorized by type." +msgstr "" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" + +msgid "False if migration mode was disabled." +msgstr "" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" + +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" + +msgid "Show environment variables." +msgstr "Ortam değişkenlerini göster." + +msgid "Forward to server instead of running locally" +msgstr "Yerel olarak çalışmak yerine sunucuya ilet" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "tüm nitelikleri sunucudan al ve yazdır. Komut çıktısını etkiler." + +msgid "Dictionary mapping variable name to value" +msgstr "Değişken adını değere eşleyen sözlük" + +msgid "Total number of variables env (>= count)" +msgstr "Toplam ortam değişkeni sayısı (>= count)" + +msgid "Number of variables returned (<= total)" +msgstr "Döndürülen değişken sayısı (<= total)" + +msgid "Show all loaded plugins." +msgstr "Yüklenen tüm eklentileri göster." + +#, fuzzy +#| msgid "Dictionary mapping variable name to value" +msgid "Dictionary mapping plugin names to bases" +msgstr "Değişken adını değere eşleyen sözlük" + +msgid "Number of plugins loaded" +msgstr "Yüklenen eklenti sayısı" + msgid "" "\n" "Netgroups\n" @@ -285,47 +4665,256 @@ msgstr "" " Bir ağ grubunu silin:\n" " ipa netgroup-del admins\n" +msgid "Netgroup name" +msgstr "Ağ grubu adı" + +msgid "Netgroup description" +msgstr "Ağ grubu açıklaması" + +msgid "NIS domain name" +msgstr "NIS etki alanı adı" + +msgid "IPA unique ID" +msgstr "IPA benzersiz kimliği" + +#, fuzzy +#| msgid "netgroups" +msgid "Member netgroups" +msgstr "ağ grupları" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Indirect Member netgroups" +msgstr "Bir ağ grubuna üye ekle." + +#, fuzzy +#| msgid "Member Host" +msgid "Member User" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Member Host" +msgid "Member Group" +msgstr "Üye Ana Makine" + +msgid "Member Host" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Member Host" +msgid "Member Hostgroup" +msgstr "Üye Ana Makine" + +msgid "Add a new netgroup." +msgstr "Yeni bir ağ grubu ekle." + +msgid "Add members to a netgroup." +msgstr "Bir ağ grubuna üye ekle." + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "member netgroup" +msgstr "Bir ağ grubuna üye ekle." + +#, fuzzy +#| msgid "netgroups" +msgid "netgroups to add" +msgstr "ağ grupları" + +msgid "Delete a netgroup." +msgstr "Bir ağ grubunu sil." + +msgid "Search for a netgroup." +msgstr "Bir ağ grubu ara." + +msgid "search for managed groups" +msgstr "yönetilen grupları ara" + +msgid "Search for netgroups with these member netgroups." +msgstr "" + +msgid "Search for netgroups without these member netgroups." +msgstr "" + +msgid "Search for netgroups with these member users." +msgstr "" + +msgid "Search for netgroups without these member users." +msgstr "" + +#, fuzzy +#| msgid "Netgroup" +msgid "group" +msgstr "Ağ grubu" + +msgid "Search for netgroups with these member groups." +msgstr "" + +msgid "Search for netgroups without these member groups." +msgstr "" + +msgid "Search for netgroups with these member hosts." +msgstr "" + +msgid "Search for netgroups without these member hosts." +msgstr "" + +msgid "Search for netgroups with these member host groups." +msgstr "" + +msgid "Search for netgroups without these member host groups." +msgstr "" + +msgid "Search for netgroups with these member of netgroups." +msgstr "" + +msgid "Search for netgroups without these member of netgroups." +msgstr "" + +msgid "Modify a netgroup." +msgstr "Bir ağ grubunu değiştir." + +msgid "Remove members from a netgroup." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "netgroups" +msgid "netgroups to remove" +msgstr "ağ grupları" + +msgid "Display information about a netgroup." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + msgid "" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" +"OTP configuration\n" "\n" -"Nitelikler ve girdiler arasındaki farka dikkat edin. İzinler bağımsızdır, " -"bu\n" -"nedenle bir kullanıcı ekleyebilmek, kullanıcının düzenlenebilir olacağı\n" -"anlamına gelmez.\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" + +msgid "TOTP authentication Window" +msgstr "" + +msgid "TOTP authentication time variance (seconds)" +msgstr "" + +msgid "TOTP Synchronization Window" +msgstr "" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "" + +msgid "HOTP Authentication Window" +msgstr "" + +msgid "HOTP authentication skip-ahead" +msgstr "" + +msgid "HOTP Synchronization Window" +msgstr "" + +msgid "HOTP synchronization skip-ahead" +msgstr "" + +msgid "Modify OTP configuration options." +msgstr "" + +msgid "Show the current OTP configuration." +msgstr "" + +msgid "" +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgstr "" + +msgid "" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" + +msgid "Set a user's password." +msgstr "" + +msgid "New Password" +msgstr "" + +msgid "Current Password" +msgstr "" + +msgid "OTP" +msgstr "" + +msgid "One Time Password" +msgstr "" msgid "" "\n" "Permissions\n" -msgstr "" "\n" -"İzinler\n" - -msgid "" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" "\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" +"A permission may not contain other permissions.\n" "\n" -"IPA ile birlikte öntanımlı olarak gelen izinler, \"yönetilen\" izinler " -"olarak\n" -"adlandırılabilir. Bunların geçerli oldukları öntanımlı bir nitelik kümesi " -"vardır,\n" -"ancak yönetici kümeye nitelikler ekleyebilir/kümeden nitelikleri " -"kaldırabilir.\n" - -msgid "" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" "\n" -"RADIUS Proxy Servers\n" -msgstr "" +"A permission is made up of a number of different parts:\n" "\n" -"RADIUS Vekil Sunucuları\n" - -msgid "" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" "\n" "Rights define what operations are allowed, and may be one or more\n" "of the following:\n" @@ -336,17 +4925,777 @@ msgid "" "5. add - add a new entry to the tree\n" "6. delete - delete an existing entry\n" "7. all - all permissions are granted\n" -msgstr "" "\n" -"Haklar, hangi işlemlere izin verildiğini tanımlar ve aşağıdakilerden biri\n" -"veya daha fazlası olabilir:\n" -"1. write - bir veya daha fazla nitelik yaz\n" -"2. read - bir veya daha fazla niteliği oku\n" -"3. search - bir veya daha fazla nitelik ara\n" -"4. compare - bir veya daha fazla niteliği karşılaştır\n" -"5. add - ağaca yeni bir girdi ekle\n" -"6. delete - mevcut bir girdiyi sil\n" -"7. all - tüm izinler verildi\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "Permission name" +msgstr "İzin adı" + +msgid "Granted rights" +msgstr "" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" + +#, fuzzy +#| msgid "User attribute" +msgid "Effective attributes" +msgstr "Kullanıcı niteliği" + +#, fuzzy +#| msgid "Attributes to which the permission applies." +msgid "All attributes to which the permission applies" +msgstr "İznin geçerli olduğu nitelikler." + +#, fuzzy +#| msgid "User attribute" +msgid "Included attributes" +msgstr "Kullanıcı niteliği" + +#, fuzzy +#| msgid "Attributes to which the permission applies." +msgid "User-specified attributes to which the permission applies" +msgstr "İznin geçerli olduğu nitelikler." + +#, fuzzy +#| msgid "User attribute" +msgid "Excluded attributes" +msgstr "Kullanıcı niteliği" + +#, fuzzy +#| msgid "Attributes to which the permission applies." +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "İznin geçerli olduğu nitelikler." + +#, fuzzy +#| msgid "User attribute" +msgid "Default attributes" +msgstr "Kullanıcı niteliği" + +#, fuzzy +#| msgid "Attributes to which the permission applies." +msgid "Attributes to which the permission applies by default" +msgstr "İznin geçerli olduğu nitelikler." + +#, fuzzy +#| msgid "incorrect type" +msgid "Bind rule type" +msgstr "yanlış tür" + +msgid "Subtree to apply permissions to" +msgstr "" + +msgid "Extra target filter" +msgstr "" + +msgid "Raw target filter" +msgstr "" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Member of group" +msgstr "Bir ağ grubuna üye ekle." + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "" + +msgid "User group to apply permissions to (sets target)" +msgstr "" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" + +msgid "Deprecated; use extratargetfilter" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Deprecated; use ipapermlocation" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "Deprecated; use ipapermright" +msgstr "" + +msgid "Granted to Privilege" +msgstr "" + +msgid "Indirect Member of roles" +msgstr "" + +#, fuzzy +#| msgid "Add a new self-service permission." +msgid "Add a new permission." +msgstr "Yeni bir self-servis izni ekle." + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add members to a permission." +msgstr "Bir ağ grubuna üye ekle." + +msgid "member privilege" +msgstr "" + +msgid "privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" + +msgid "Permission flags" +msgstr "İzin bayrakları" + +#, fuzzy +#| msgid "Delete a self-service permission." +msgid "Delete a permission." +msgstr "Bir self-servis iznini sil." + +msgid "force delete of SYSTEM permissions" +msgstr "" + +#, fuzzy +#| msgid "Search for a self-service permission." +msgid "Search for permissions." +msgstr "Bir self-servis izni ara." + +#, fuzzy +#| msgid "Modify a self-service permission." +msgid "Modify a permission." +msgstr "Bir self-servis iznini değiştir." + +#, fuzzy +#| msgid "Credentials cache permissions incorrect" +msgid "Rename the permission object" +msgstr "Kimlik bilgileri önbelleği izinleri yanlış" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove members from a permission." +msgstr "Bir ağ grubundan üye kaldır." + +msgid "privileges to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Display information about a permission." +msgstr "Bir self-servis izni hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Privilege name" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "Netgroup description" +msgid "Privilege description" +msgstr "Ağ grubu açıklaması" + +msgid "Granting privilege to roles" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new privilege." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add members to a privilege." +msgstr "Bir ağ grubuna üye ekle." + +#, fuzzy +#| msgid "Member Host" +msgid "member role" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "No file to read" +msgid "roles to add" +msgstr "Okunacak dosya yok" + +msgid "Add permissions to a privilege." +msgstr "" + +msgid "permission" +msgstr "izin" + +msgid "permissions" +msgstr "izinler" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of permissions added" +msgstr "Yüklenen eklenti sayısı" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a privilege." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for privileges." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a privilege." +msgstr "Bir ağ grubunu değiştir." + +msgid "Rename the privilege object" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove members from a privilege" +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "No file to read" +msgid "roles to remove" +msgstr "Okunacak dosya yok" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove permissions from a privilege." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of permissions removed" +msgstr "Döndürülen girdi sayısı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a privilege." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +#, fuzzy +#| msgid "Netgroup" +msgid "Group" +msgstr "Ağ grubu" + +msgid "Manage password policy for specific group" +msgstr "" + +msgid "Max lifetime (days)" +msgstr "" + +msgid "Maximum password lifetime (in days)" +msgstr "" + +msgid "Min lifetime (hours)" +msgstr "" + +msgid "Minimum password lifetime (in hours)" +msgstr "" + +msgid "History size" +msgstr "" + +msgid "Password history size" +msgstr "" + +msgid "Character classes" +msgstr "" + +msgid "Minimum number of character classes" +msgstr "" + +msgid "Min length" +msgstr "" + +msgid "Minimum length of password" +msgstr "" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" + +msgid "Max failures" +msgstr "" + +msgid "Consecutive failures before lockout" +msgstr "" + +msgid "Failure reset interval" +msgstr "" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" + +msgid "Lockout duration" +msgstr "" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "Add a new group password policy." +msgstr "Yönetilen bir grubun parola politikası olamaz." + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "Delete a group password policy." +msgstr "Yönetilen bir grubun parola politikası olamaz." + +msgid "Search for group password policies." +msgstr "" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "Modify a group password policy." +msgstr "Yönetilen bir grubun parola politikası olamaz." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about password policy." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "User" +msgstr "" + +msgid "Display effective policy for a specific user" +msgstr "" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "RADIUS vekil sunucusu adı" + +msgid "A description of this RADIUS proxy server" +msgstr "Bu RADIUS vekil sunucusunun açıklaması" + +msgid "Server" +msgstr "Sunucu" + +msgid "The hostname or IP (with or without port)" +msgstr "Ana makine adı veya IP (bağlantı noktasıyla birlikte veya değil)" + +msgid "Secret" +msgstr "Parola" + +msgid "The secret used to encrypt data" +msgstr "Verileri şifrelemek için kullanılan parola" + +msgid "Timeout" +msgstr "Zaman aşımı" + +msgid "The total timeout across all retries (in seconds)" +msgstr "Tüm yeniden denemelerde toplam zaman aşımı (saniye cinsinden)" + +msgid "Retries" +msgstr "Yeniden denemeler" + +msgid "The number of times to retry authentication" +msgstr "Kimlik doğrulamayı yeniden deneme sayısı" + +msgid "User attribute" +msgstr "Kullanıcı niteliği" + +msgid "The username attribute on the user object" +msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" + +msgid "Add a new RADIUS proxy server." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +msgid "Delete a RADIUS proxy server." +msgstr "Bir RADIUS vekil sunucusunu sil." + +msgid "Search for RADIUS proxy servers." +msgstr "RADIUS vekil sunucularını ara." + +msgid "Modify a RADIUS proxy server." +msgstr "Bir RADIUS vekil sunucusunu değiştir." + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Rename the RADIUS proxy server object" +msgstr "Bir RADIUS vekil sunucusunu sil." + +msgid "Display information about a RADIUS proxy server." +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "" + +msgid "Add domain" +msgstr "" + +msgid "Delete domain" +msgstr "" + +msgid "Modify realm domains." +msgstr "" + +msgid "Force adding domain even if not in DNS" +msgstr "" + +msgid "Display the list of realm domains." +msgstr "" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Role name" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "A description of this RADIUS proxy server" +msgid "A description of this role-group" +msgstr "Bu RADIUS vekil sunucusunun açıklaması" + +#, fuzzy +#| msgid "Member Host" +msgid "Member users" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Member Host" +msgid "Member groups" +msgstr "Üye Ana Makine" + +msgid "Privileges" +msgstr "" + +#, fuzzy +#| msgid "Member Host" +msgid "Member services" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new role." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add members to a role." +msgstr "Bir ağ grubuna üye ekle." + +msgid "member service" +msgstr "" + +msgid "services to add" +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add privileges to a role." +msgstr "Bir ağ grubuna üye ekle." + +msgid "privilege" +msgstr "" + +msgid "privileges" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of privileges added" +msgstr "Yüklenen eklenti sayısı" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a role." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for roles." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a role." +msgstr "Bir ağ grubunu değiştir." + +msgid "Rename the role object" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove members from a role." +msgstr "Bir ağ grubundan üye kaldır." + +msgid "services to remove" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove privileges from a role." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of privileges removed" +msgstr "Döndürülen girdi sayısı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a role." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." msgid "" "\n" @@ -413,189 +5762,6820 @@ msgstr "" " Bir kuralı silin:\n" " ipa selfservice-del \"Users manage their own address\"\n" +msgid "Self-service name" +msgstr "Self-servis adı" + +msgid "Attributes to which the permission applies." +msgstr "İznin geçerli olduğu nitelikler." + +msgid "Add a new self-service permission." +msgstr "Yeni bir self-servis izni ekle." + +msgid "Delete a self-service permission." +msgstr "Bir self-servis iznini sil." + +msgid "Search for a self-service permission." +msgstr "Bir self-servis izni ara." + +msgid "Modify a self-service permission." +msgstr "Bir self-servis iznini değiştir." + +msgid "Display information about a self-service permission." +msgstr "Bir self-servis izni hakkında bilgileri görüntüle." + msgid "" "\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" +"SELinux User Mapping\n" "\n" -"İzin verilen birkaç hedef vardır:\n" -"1. alt ağaç: bir DN; izin, bu DN altındaki alt ağaç için geçerlidir\n" -"2. hedef filtre: bir LDAP filtresi\n" -"3. hedef: Olası joker karakterli DN, iznin geçerli olduğu girdileri " -"belirtir\n" - -msgid " ipa --help" -msgstr " ipa --help" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\" geçerli bir izin türü değil" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\" bir nesne türü değil" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s, '%(value)s' içermiyor" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Geçersiz söz dizimi." - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Sadece bir değere izin veriliyor." - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d RADIUS vekil sunucusu eşleşti" -msgstr[1] "%(count)d RADIUS vekil sunucusu eşleşti" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d eklenti yüklendi" -msgstr[1] "%(count)d eklenti yüklendi" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d değişken" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" msgstr "" -"%(cver)s istemcisi '%(server)s' konumundaki %(sver)s sunucusu ile uyumsuz" -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" +msgid "SELinux User" +msgstr "" -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" +msgid "HBAC Rule" +msgstr "" -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: dosya bulunamadı" +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +msgid "Create a new SELinux User Map." +msgstr "" -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "%(key)s silinemiyor çünkü %(label)s %(dependent)s onu gerektiriyor" +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a SELinux User Map." +msgstr "Bir ağ grubunu sil." + +msgid "Disable an SELinux User Map rule." +msgstr "" + +msgid "Enable an SELinux User Map rule." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for SELinux User Maps." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a SELinux User Map." +msgstr "Bir ağ grubunu değiştir." + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "" -#, python-format msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" msgstr "" -"%(key)s, %(label)s %(container)s ögesinin son üyesi olduğu için silinemiyor " -"veya devre dışı bırakılamıyor" -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s silinemiyor/değiştirilemiyor: %(reason)s" +msgid "Principal" +msgstr "" -#, python-format -msgid "%(line)s" -msgstr "%(line)s" +#, fuzzy +#| msgid "Service principal is required" +msgid "Service principal" +msgstr "Hizmet yetkilisi gereklidir" -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s sertifikası geçerli değil" +msgid "PAC type" +msgstr "" -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s, %(principal_type)s yetkilileri için desteklenmiyor" +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s geçerli bir bağlantı noktası değil" +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add a new IPA new service." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" +msgid "force principal name even if not in DNS" +msgstr "" -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: Hatalı biçimlendirilmiş sertifika. %(reason)s" +msgid "Add hosts that can manage this service." +msgstr "" -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "%(task)s LDAP görev zaman aşımı, Görev DN: '%(task_dn)s'" +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' kullanımdan kaldırıldı. %(additional_info)s" +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s' bir sertifikaya sahip değil." +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Delete an IPA service." +msgstr "Bir RADIUS vekil sunucusunu sil." -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' gereklidir" +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s' seçeneği kullanımdan kaldırıldı. %(additional_info)s" +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" -msgid "A description of this RADIUS proxy server" +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for IPA services." +msgstr "RADIUS vekil sunucularını ara." + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" + +msgid "Search for services with these managed by hosts." +msgstr "" + +msgid "Search for services without these managed by hosts." +msgstr "" + +msgid "Modify an existing IPA service." +msgstr "" + +msgid "Remove hosts that can manage this service." +msgstr "" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Display information about an IPA service." +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Sudo Command" +msgstr "Konu veya Komut" + +#, fuzzy +#| msgid "A description of this RADIUS proxy server" +msgid "A description of this command" msgstr "Bu RADIUS vekil sunucusunun açıklaması" -msgid "A dictionary representing an LDAP entry" -msgstr "Bir LDAP girdisini temsil eden bir sözlük" - -msgid "A group may not be a member of itself" -msgstr "Bir grup, kendisinin üyesi olamaz" - -msgid "A group may not be added as a member of itself" -msgstr "Bir grup, kendisinin üyesi olarak eklenemez" - -msgid "A list of LDAP entries" -msgstr "LDAP girdilerinin bir listesi" - -msgid "A managed group cannot have a password policy." -msgstr "Yönetilen bir grubun parola politikası olamaz." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" +msgid "Sudo Command Groups" msgstr "" -"Tüm üyelerin %(verb)s olduğunu doğrularken bir sorunla karşılaşıldı: %(exc)s" -msgid "A string searched in all relevant object attributes" -msgstr "İlgili tüm nesne niteliklerinde aranan bir dizge" +msgid "Create new Sudo Command." +msgstr "" -msgid "ACI" -msgstr "ACI" +msgid "Delete Sudo Command." +msgstr "" + +#, fuzzy +#| msgid "search for managed groups" +msgid "Search for Sudo Commands." +msgstr "yönetilen grupları ara" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Modify Sudo Command." +msgstr "Konu veya Komut" + +msgid "Display Sudo Command." +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "" + +#, fuzzy +#| msgid "Netgroup description" +msgid "Group description" +msgstr "Ağ grubu açıklaması" + +#, fuzzy +#| msgid "Command name" +msgid "Commands" +msgstr "Komut adı" + +msgid "Member Sudo commands" +msgstr "" + +msgid "Create new Sudo Command Group." +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add members to Sudo Command Group." +msgstr "Bir ağ grubuna üye ekle." + +msgid "member sudo command" +msgstr "" + +msgid "sudo commands to add" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete Sudo Command Group." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "search for managed groups" +msgid "Search for Sudo Command Groups." +msgstr "yönetilen grupları ara" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify Sudo Command Group." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove members from Sudo Command Group." +msgstr "Bir ağ grubundan üye kaldır." + +msgid "sudo commands to remove" +msgstr "" + +msgid "Display Sudo Command Group." +msgstr "" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "" + +msgid "Last name" +msgstr "" + +msgid "Full name" +msgstr "" + +msgid "Display name" +msgstr "" + +msgid "Initials" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Kerberos principal" +msgstr "Kerberos yetkilisi olmalı" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Kerberos principal expiration" +msgstr "Kerberos yetkilisi olmalı" + +msgid "Email address" +msgstr "" + +msgid "Prompt to set the user password" +msgstr "" + +msgid "Generate a random user password" +msgstr "" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" + +msgid "Street address" +msgstr "" + +msgid "City" +msgstr "" + +msgid "State/Province" +msgstr "" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "" + +msgid "Mobile Telephone Number" +msgstr "" + +msgid "Pager Number" +msgstr "" + +msgid "Fax Number" +msgstr "" + +msgid "Org. Unit" +msgstr "" + +msgid "Job Title" +msgstr "" + +msgid "Manager" +msgstr "" + +msgid "Car License" +msgstr "" + +#, fuzzy +#| msgid "%(count)d variables" +msgid "Account disabled" +msgstr "%(count)d değişken" + +msgid "User authentication types" +msgstr "" + +#, fuzzy +#| msgid "The number of times to retry authentication" +msgid "Types of supported user authentication" +msgstr "Kimlik doğrulamayı yeniden deneme sayısı" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy server" +msgid "RADIUS proxy configuration" +msgstr "RADIUS vekil sunucusu" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS proxy username" +msgstr "RADIUS vekil sunucusu adı" + +msgid "Department Number" +msgstr "" + +msgid "Employee Number" +msgstr "" + +msgid "Employee Type" +msgstr "" + +msgid "Preferred Language" +msgstr "" + +#, fuzzy +#| msgid "Member Host" +msgid "Member of groups" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Indirect Member of group" +msgstr "Bir ağ grubuna üye ekle." + +msgid "Kerberos keys available" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new user." +msgstr "Yeni bir ağ grubu ekle." + +msgid "Don't create user private group" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a user." +msgstr "Bir ağ grubunu sil." + +msgid "Disable a user account." +msgstr "" + +msgid "Enable a user account." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for users." +msgstr "Bir ağ grubu ara." + +msgid "Self" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Display user record for current Kerberos principal" +msgstr "Kerberos yetkilisi olmalı" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "" + +msgid "Search for users with these member of groups." +msgstr "" + +msgid "Search for users without these member of groups." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for users with these member of netgroups." +msgstr "Bir ağ grubu ara." + +msgid "Search for users without these member of netgroups." +msgstr "" + +msgid "Search for users with these member of roles." +msgstr "" + +msgid "Search for users without these member of roles." +msgstr "" + +msgid "Search for users with these member of HBAC rules." +msgstr "" + +msgid "Search for users without these member of HBAC rules." +msgstr "" + +msgid "Search for users with these member of sudo rules." +msgstr "" + +msgid "Search for users without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a user." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "Rename the user object" +msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a user." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +#, fuzzy +#| msgid "A description of this RADIUS proxy server" +msgid "A description of this auto member rule" +msgstr "Bu RADIUS vekil sunucusunun açıklaması" + +msgid "Default (fallback) Group" +msgstr "" + +msgid "Default group for entries to land" +msgstr "" + +msgid "Add an automember rule." +msgstr "" + +msgid "Automember Rule" +msgstr "" + +msgid "Grouping Type" +msgstr "" + +#, fuzzy +#| msgid "Attributes to which the permission applies." +msgid "Grouping to which the rule applies" +msgstr "İznin geçerli olduğu nitelikler." + +msgid "Add conditions to an automember rule." +msgstr "" + +msgid "Inclusive Regex" +msgstr "" + +msgid "Exclusive Regex" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attribute Key" +msgstr "Nitelikler" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" + +msgid "Conditions that could not be added" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of conditions added" +msgstr "Yüklenen eklenti sayısı" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" + +msgid "Default (fallback) group for entries to land" +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about the default (fallback) automember groups." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Delete an automember rule." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for automember rules." +msgstr "Bir ağ grubu ara." + +msgid "Modify an automember rule." +msgstr "" + +msgid "Rebuild auto membership." +msgstr "" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "" + +msgid "Don't wait for rebuilding membership" +msgstr "" + +msgid "Remove conditions from an automember rule." +msgstr "" + +msgid "Conditions that could not be removed" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of conditions removed" +msgstr "Döndürülen girdi sayısı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an automember rule." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" + +msgid "Search for existing certificates." +msgstr "" + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "Match cn attribute in subject" +msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" + +#, fuzzy +#| msgid "%(reason)s" +msgid "Reason" +msgstr "%(reason)s" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "minimum serial number" +msgstr "bir ondalık sayı olmalı" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "maximum serial number" +msgstr "bir ondalık sayı olmalı" + +msgid "match the common name exactly" +msgstr "" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Maximum number of certs returned" +msgstr "Döndürülen girdi sayısı" + +msgid "Take a revoked certificate off hold." +msgstr "" + +#, fuzzy +#| msgid "invalid port number" +msgid "Serial number" +msgstr "geçersiz bağlantı noktası numarası" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Submit a certificate signing request." +msgstr "bir sertifika imzalama isteği olmalı" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "automatically add the principal if it doesn't exist" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Revoke a certificate." +msgstr "bir sertifika olmalı" + +msgid "Retrieve an existing certificate." +msgstr "" + +msgid "Output filename" +msgstr "" + +msgid "File to store the certificate in." +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Check the status of a certificate signing request." +msgstr "bir sertifika imzalama isteği olmalı" + +msgid "Request id" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "" + +msgid "Indirect Member users" +msgstr "" + +msgid "Indirect Member groups" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Create a new group." +msgstr "Bir ağ grubunu sil." + +msgid "Create as a non-POSIX group" +msgstr "" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add members to a group." +msgstr "Bir ağ grubuna üye ekle." + +msgid "External member" +msgstr "" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete group." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "search for managed groups" +msgid "Detach a managed group from a user." +msgstr "yönetilen grupları ara" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for groups." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "search for managed groups" +msgid "search for private groups" +msgstr "yönetilen grupları ara" + +#, fuzzy +#| msgid "search for managed groups" +msgid "search for POSIX groups" +msgstr "yönetilen grupları ara" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" + +#, fuzzy +#| msgid "search for managed groups" +msgid "search for non-POSIX groups" +msgstr "yönetilen grupları ara" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" + +msgid "Search for groups with these member users." +msgstr "" + +msgid "Search for groups without these member users." +msgstr "" + +msgid "Search for groups with these member groups." +msgstr "" + +msgid "Search for groups without these member groups." +msgstr "" + +msgid "Search for groups with these member of groups." +msgstr "" + +msgid "Search for groups without these member of groups." +msgstr "" + +msgid "Search for groups with these member of netgroups." +msgstr "" + +msgid "Search for groups without these member of netgroups." +msgstr "" + +msgid "Search for groups with these member of roles." +msgstr "" + +msgid "Search for groups without these member of roles." +msgstr "" + +msgid "Search for groups with these member of HBAC rules." +msgstr "" + +msgid "Search for groups without these member of HBAC rules." +msgstr "" + +msgid "Search for groups with these member of sudo rules." +msgstr "" + +msgid "Search for groups without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a group." +msgstr "Bir ağ grubunu değiştir." + +msgid "change to a POSIX group" +msgstr "" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" + +msgid "Rename the group object" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove members from a group." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a named group." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "" + +msgid "Target host" +msgstr "" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "" + +msgid "Include all disabled IPA rules into test" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned (0 is unlimited)" +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" + +msgid "Warning" +msgstr "" + +msgid "Matched rules" +msgstr "" + +msgid "Not matched rules" +msgstr "" + +msgid "Non-existent or invalid rules" +msgstr "" + +msgid "Result of simulation" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "" + +msgid "Domain Security Identifier" +msgstr "" + +msgid "SID blacklist incoming" +msgstr "" + +msgid "SID blacklist outgoing" +msgstr "" + +msgid "Security Identifier" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "NetBIOS name" +msgstr "Ağ grubu adı" + +msgid "Domain GUID" +msgstr "" + +msgid "Fallback primary group" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Domain name" +msgstr "Komut adı" + +msgid "Trusted domain partner" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "" + +msgid "Active Directory domain administrator" +msgstr "" + +msgid "Active Directory domain administrator's password" +msgstr "" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "" + +msgid "Shared secret for the trust" +msgstr "" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" + +msgid "Range type" +msgstr "" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a trust." +msgstr "Bir ağ grubunu sil." + +msgid "Refresh list of the domains associated with the trust" +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for trusts." +msgstr "Bir ağ grubu ara." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" + +msgid "Security Identifiers (SIDs)" +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a trust." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Modify global trust configuration." +msgstr "" + +msgid "Show global trust configuration." +msgstr "" + +msgid "Allow access from the trusted domain" +msgstr "" + +msgid "Remove information about the domain associated with the trust." +msgstr "" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "" + +msgid "Search domains of the trust" +msgstr "" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "" + +msgid "Modify trustdomain of the trust" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Range name" +msgstr "Komut adı" + +msgid "First Posix ID of the range" +msgstr "" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of IDs in the range" +msgstr "Döndürülen girdi sayısı" + +msgid "First RID of the corresponding RID range" +msgstr "" + +msgid "First RID of the secondary RID range" +msgstr "" + +msgid "Domain SID of the trusted domain" +msgstr "" + +msgid "Name of the trusted domain" +msgstr "" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete an ID range." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for ranges." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify ID range." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a range." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +#, fuzzy +#| msgid "IPA unique ID" +msgid "Unique ID" +msgstr "IPA benzersiz kimliği" + +msgid "Type of the token" +msgstr "" + +msgid "Token description (informational only)" +msgstr "" + +msgid "Owner" +msgstr "" + +msgid "Assigned user of the token (default: self)" +msgstr "" + +msgid "Assigned manager of the token (default: self)" +msgstr "" + +msgid "Disabled" +msgstr "" + +msgid "Mark the token as disabled (default: false)" +msgstr "" + +msgid "Validity start" +msgstr "" + +msgid "First date/time the token can be used" +msgstr "" + +msgid "Validity end" +msgstr "" + +msgid "Last date/time the token can be used" +msgstr "" + +msgid "Vendor" +msgstr "" + +msgid "Token vendor name (informational only)" +msgstr "" + +msgid "Model" +msgstr "" + +msgid "Token model (informational only)" +msgstr "" + +msgid "Serial" +msgstr "" + +msgid "Token serial (informational only)" +msgstr "" + +msgid "Token secret (Base32; default: random)" +msgstr "" + +msgid "Token hash algorithm" +msgstr "" + +msgid "Digits" +msgstr "" + +msgid "Number of digits each token code will have" +msgstr "" + +msgid "Clock offset" +msgstr "" + +msgid "TOTP token / IPA server time difference" +msgstr "" + +msgid "Clock interval" +msgstr "" + +msgid "Length of TOTP token code validity" +msgstr "" + +msgid "Counter" +msgstr "" + +msgid "Initial counter for the HOTP token" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new OTP token." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy +#| msgid "Deprecated options" +msgid "(deprecated)" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "Do not display QR code" +msgstr "" + +msgid "Add users that can manage this token." +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete an OTP token." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for OTP token." +msgstr "Bir ağ grubu ara." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a OTP token." +msgstr "Bir ağ grubunu değiştir." + +msgid "Rename the OTP token object" +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an OTP token." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Command category" +msgstr "Komut adı" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Command category the rule applies to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +#, fuzzy +#| msgid "User category" +msgid "RunAs User category" +msgstr "Kullanıcı kategorisi" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "RunAs User category the rule applies to" +msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" + +#, fuzzy +#| msgid "User category" +msgid "RunAs Group category" +msgstr "Kullanıcı kategorisi" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "RunAs Group category the rule applies to" +msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" + +msgid "Sudo order" +msgstr "" + +msgid "integer to order the Sudo rules" +msgstr "" + +msgid "External User" +msgstr "" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" + +msgid "Host Masks" +msgstr "" + +#, fuzzy +#| msgid "Topic or Command" +msgid "Sudo Allow Commands" +msgstr "Konu veya Komut" + +msgid "Sudo Deny Commands" +msgstr "" + +msgid "Sudo Allow Command Groups" +msgstr "" + +msgid "Sudo Deny Command Groups" +msgstr "" + +msgid "RunAs Users" +msgstr "" + +msgid "Run as a user" +msgstr "" + +msgid "Groups of RunAs Users" +msgstr "" + +msgid "Run as any user within a specified group" +msgstr "" + +msgid "RunAs External User" +msgstr "" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" + +msgid "External Groups of RunAs Users" +msgstr "" + +msgid "External Groups of users that the command can run as" +msgstr "" + +msgid "RunAs Groups" +msgstr "" + +msgid "Run with the gid of a specified POSIX group" +msgstr "" + +msgid "RunAs External Group" +msgstr "" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" + +msgid "Sudo Option" +msgstr "" + +msgid "Create new Sudo Rule." +msgstr "" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "member sudo command group" +msgstr "Bir ağ grubuna üye ekle." + +msgid "sudo command groups to add" +msgstr "" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "" + +msgid "Add group for Sudo to execute as." +msgstr "" + +msgid "Add users and groups for Sudo to execute as." +msgstr "" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "" + +msgid "Delete Sudo Rule." +msgstr "" + +msgid "Disable a Sudo Rule." +msgstr "" + +msgid "Enable a Sudo Rule." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for Sudo Rule." +msgstr "Bir ağ grubu ara." + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" + +msgid "Modify Sudo Rule." +msgstr "" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" + +msgid "sudo command groups to remove" +msgstr "" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "" + +msgid "Remove an option from Sudo Rule." +msgstr "" + +msgid "Remove group for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "" + +msgid "Display Sudo Rule." +msgstr "" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Saniye cinsinden aramanın zaman sınırı (0 sınırsızdır)" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "ACL name" +msgstr "Komut adı" + +#, fuzzy +#| msgid "Host category" +msgid "Profile category" +msgstr "Ana makine kategorisi" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Profile category the ACL applies to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "User category the ACL applies to" +msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Host category the ACL applies to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Service category the ACL applies to" +msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" + +msgid "Profiles" +msgstr "" + +msgid "Create a new CA ACL." +msgstr "" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "" + +msgid "Add profiles to a CA ACL." +msgstr "" + +msgid "member Certificate Profile" +msgstr "" + +#, fuzzy +#| msgid "%(name)s certificate is not valid" +msgid "Certificate Profiles to add" +msgstr "%(name)s sertifikası geçerli değil" + +msgid "Add services to a CA ACL." +msgstr "" + +msgid "Add users and groups to a CA ACL." +msgstr "" + +msgid "Delete a CA ACL." +msgstr "" + +msgid "Disable a CA ACL." +msgstr "" + +msgid "Enable a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for CA ACLs." +msgstr "Bir ağ grubu ara." + +msgid "Modify a CA ACL." +msgstr "" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "" + +msgid "Remove profiles from a CA ACL." +msgstr "" + +msgid "Certificate Profiles to remove" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove services from a CA ACL." +msgstr "Bir ağ grubundan üye kaldır." + +msgid "Remove users and groups from a CA ACL." +msgstr "" + +msgid "Display the properties of a CA ACL." +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned (0 is unlimited)" +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" + +#, fuzzy +#| msgid "Maximum number of entries returned (0 is unlimited)" +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" + +msgid "Query current Domain Level." +msgstr "" + +msgid "Current domain level:" +msgstr "" + +msgid "Change current Domain Level." +msgstr "" + +msgid "Domain Level" +msgstr "" + +msgid "Add certificates to host entry" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove certificates from host entry" +msgstr "Bir ağ grubundan üye kaldır." + +msgid "Fallback to AD DC LDAP" +msgstr "" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add to default group" +msgstr "Yeni bir ağ grubu ekle." + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" + +msgid "Search scope" +msgstr "" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" + +msgid "Target DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "Sunucu adı" + +msgid "IPA server hostname" +msgstr "IPA sunucusu ana makine adı" + +msgid "Managed suffix" +msgstr "" + +#, fuzzy +#| msgid "invalid domain name" +msgid "Min domain level" +msgstr "geçersiz etki alanı adı" + +#, fuzzy +#| msgid "invalid domain name" +msgid "Minimum domain level" +msgstr "geçersiz etki alanı adı" + +msgid "Max domain level" +msgstr "" + +msgid "Maximum domain level" +msgstr "" + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Delete IPA server." +msgstr "Bir RADIUS vekil sunucusunu sil." + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for IPA servers." +msgstr "RADIUS vekil sunucularını ara." + +msgid "Show IPA server." +msgstr "" + +#, fuzzy +#| msgid "%(name)s certificate is not valid" +msgid "Add new certificates to a service" +msgstr "%(name)s sertifikası geçerli değil" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove certificates from a service" +msgstr "Bir ağ grubundan üye kaldır." + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "" + +msgid "Create a new service delegation rule." +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add member to a named service delegation rule." +msgstr "Bir ağ grubuna üye ekle." + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "member principal" +msgstr "Kerberos yetkilisi olmalı" + +msgid "principal to add" +msgstr "" + +msgid "Add target to a named service delegation rule." +msgstr "" + +msgid "member service delegation target" +msgstr "" + +msgid "service delegation targets to add" +msgstr "" + +#, fuzzy +#| msgid "Delete a self-service permission." +msgid "Delete service delegation." +msgstr "Bir self-servis iznini sil." + +#, fuzzy +#| msgid "Search for a self-service permission." +msgid "Search for service delegations rule." +msgstr "Bir self-servis izni ara." + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove member from a named service delegation rule." +msgstr "Bir ağ grubundan üye kaldır." + +msgid "principal to remove" +msgstr "" + +msgid "Remove target from a named service delegation rule." +msgstr "" + +msgid "service delegation targets to remove" +msgstr "" + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Display information about a named service delegation rule." +msgstr "Bir self-servis izni hakkında bilgileri görüntüle." + +msgid "Create a new service delegation target." +msgstr "" + +msgid "Add member to a named service delegation target." +msgstr "" + +#, fuzzy +#| msgid "Delete a self-service permission." +msgid "Delete service delegation target." +msgstr "Bir self-servis iznini sil." + +#, fuzzy +#| msgid "Search for a self-service permission." +msgid "Search for service delegation target." +msgstr "Bir self-servis izni ara." + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove member from a named service delegation target." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Display information about a named service delegation target." +msgstr "Bir self-servis izni hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new stage user." +msgstr "Yeni bir ağ grubu ekle." + +msgid "Create Stage user in from a delete user" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a stage user." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for stage users." +msgstr "Bir ağ grubu ara." + +msgid "Search for stage users with these member of groups." +msgstr "" + +msgid "Search for stage users without these member of groups." +msgstr "" + +msgid "Search for stage users with these member of netgroups." +msgstr "" + +msgid "Search for stage users without these member of netgroups." +msgstr "" + +msgid "Search for stage users with these member of roles." +msgstr "" + +msgid "Search for stage users without these member of roles." +msgstr "" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" + +msgid "Search for stage users with these member of sudo rules." +msgstr "" + +msgid "Search for stage users without these member of sudo rules." +msgstr "" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a stage user." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "Rename the stage user object" +msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a stage user." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Segment name" +msgstr "Sunucu adı" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "" + +msgid "Left replication node - an IPA server" +msgstr "" + +msgid "Right node" +msgstr "" + +msgid "Right replication node - an IPA server" +msgstr "" + +msgid "Connectivity" +msgstr "" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to strip" +msgstr "Nitelikler" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Attributes to replicate" +msgstr "Nitelikler" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Session timeout" +msgstr "Oturum hatası" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" + +#, fuzzy +#| msgid "Replication agreement for %(hostname)s not found" +msgid "Replication agreement enabled" +msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "" + +msgid "LDAP suffix to be managed" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new segment." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a segment." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for topology segments." +msgstr "RADIUS vekil sunucularını ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a segment." +msgstr "Bir ağ grubunu değiştir." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" + +msgid "Initialize left node" +msgstr "" + +msgid "Initialize right node" +msgstr "" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "" + +msgid "Add a new topology suffix to be managed." +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a topology suffix." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for topology suffices." +msgstr "RADIUS vekil sunucularını ara." + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify a topology suffix." +msgstr "Bir ağ grubunu değiştir." + +msgid "Show managed suffix." +msgstr "" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" + +msgid "Preserved user" +msgstr "" + +msgid "Add one or more certificates to the user entry" +msgstr "" + +msgid "Remove one or more certificates to the user entry" +msgstr "" + +msgid "Move deleted user into staged area" +msgstr "" + +msgid "Undelete a delete user account." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "" + +#, fuzzy +#| msgid "Description" +msgid "Vault description" +msgstr "Açıklama" + +msgid "Vault type" +msgstr "" + +msgid "Salt" +msgstr "" + +msgid "Vault salt" +msgstr "" + +msgid "Public key" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Vault public key" +msgstr "geçersiz SSH genel anahtarı" + +msgid "Owner users" +msgstr "" + +#, fuzzy +#| msgid "netgroups" +msgid "Owner groups" +msgstr "ağ grupları" + +msgid "Owner services" +msgstr "" + +msgid "Vault service" +msgstr "" + +msgid "Shared vault" +msgstr "" + +msgid "Vault user" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Transport Certificate" +msgstr "bir sertifika olmalı" + +msgid "Service name of the service vault" +msgstr "" + +#, fuzzy +#| msgid "User category the rule applies to" +msgid "Username of the user vault" +msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add members to a vault." +msgstr "Bir ağ grubuna üye ekle." + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Add owners to a vault." +msgstr "Bir ağ grubuna üye ekle." + +msgid "owner user" +msgstr "" + +#, fuzzy +#| msgid "netgroup" +msgid "owner group" +msgstr "ağ grubu" + +msgid "owner service" +msgstr "" + +msgid "Owners that could not be added" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "Number of owners added" +msgstr "Yüklenen eklenti sayısı" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "" + +msgid "Nonce" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a vault." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for vaults." +msgstr "Bir ağ grubu ara." + +msgid "List all service vaults" +msgstr "" + +msgid "List all user vaults" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove members from a vault." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove owners from a vault." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "The default users group cannot be removed" +msgid "Owners that could not be removed" +msgstr "Öntanımlı kullanıcılar grubu kaldırılamaz" + +#, fuzzy +#| msgid "Number of entries returned" +msgid "Number of owners removed" +msgstr "Döndürülen girdi sayısı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a vault." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Show vault configuration." +msgstr "" + +msgid "Output file to store the transport certificate" +msgstr "" + +msgid "Add owners to a vault container." +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Delete a vault container." +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove owners from a vault container." +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a vault container." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" + +msgid "Profile ID" +msgstr "" + +msgid "Certificate Profile to use" +msgstr "" + +msgid "Two-way trust" +msgstr "" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "" + +#, fuzzy +#| msgid "Netgroup description" +msgid "Profile description" +msgstr "Ağ grubu açıklaması" + +#, fuzzy +#| msgid "A description of this RADIUS proxy server" +msgid "Brief description of this profile" +msgstr "Bu RADIUS vekil sunucusunun açıklaması" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Store issued certificates" +msgstr "bir sertifika olmalı" + +msgid "Whether to store certs issued using this profile" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Delete a Certificate Profile." +msgstr "bir sertifika olmalı" + +#, fuzzy +#| msgid "Search for a self-service permission." +msgid "Search for Certificate Profiles." +msgstr "Bir self-servis izni ara." + +#, fuzzy +#| msgid "must be a certificate" +msgid "Import a Certificate Profile." +msgstr "bir sertifika olmalı" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" + +msgid "Modify Certificate Profile configuration." +msgstr "" + +msgid "File containing profile configuration" +msgstr "" + +msgid "Display the properties of a Certificate Profile." +msgstr "" + +msgid "Write profile configuration to file" +msgstr "" + +msgid "Remove users that can manage this token." +msgstr "" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "" + +msgid "Hostname (FQDN)" +msgstr "" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "" + +msgid "Check connection to remote IPA server." +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Remote server name" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "Remote IPA server hostname" +msgstr "IPA sunucusu ana makine adı" + +msgid "suffix" +msgstr "" + +msgid "Search for servers with these managed suffixes." +msgstr "" + +msgid "Search for servers without these managed suffixes." +msgstr "" + +msgid "Add a manager to the stage user entry" +msgstr "" + +msgid "Remove a manager to the stage user entry" +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "" + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for topology suffixes." +msgstr "RADIUS vekil sunucularını ara." + +msgid "Add a manager to the user entry" +msgstr "" + +msgid "Remove a manager to the user entry" +msgstr "" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" + +msgid "Comma-separated list of attributes" +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Self-service Permissions\n" +#| "\n" +#| "A permission enables fine-grained delegation of permissions. Access " +#| "Control\n" +#| "Rules, or instructions (ACIs), grant permission to permissions to " +#| "perform\n" +#| "given tasks such as adding a user, modifying a group, etc.\n" +#| "\n" +#| "A Self-service permission defines what an object can change in its own " +#| "entry.\n" +#| "\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a self-service rule to allow users to manage their address (using " +#| "Bash\n" +#| " brace expansion):\n" +#| " ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +#| "st} \"Users manage their own address\"\n" +#| "\n" +#| " When managing the list of attributes you need to include all attributes\n" +#| " in the list, including existing ones.\n" +#| " Add telephoneNumber to the list (using Bash brace expansion):\n" +#| " ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +#| "\"Users manage their own address\"\n" +#| "\n" +#| " Display our updated rule:\n" +#| " ipa selfservice-show \"Users manage their own address\"\n" +#| "\n" +#| " Delete a rule:\n" +#| " ipa selfservice-del \"Users manage their own address\"\n" +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" +"\n" +"Self-servis İzinleri\n" +"\n" +"Bir izin, izinlerin ayrıntılı şekilde tayin edilmesini sağlar. Erişim " +"Denetim\n" +"Kuralları veya talimatları (ACI), kullanıcı ekleme, grup değiştirme vb. " +"gibi\n" +"belirli görevleri gerçekleştirme izinleri için izin verir.\n" +"\n" +"Self-servis izni, bir nesnenin kendi girdisinde neleri değiştirebileceğini " +"tanımlar.\n" +"\n" +"\n" +"ÖRNEKLER:\n" +"\n" +" Kullanıcıların adreslerini yönetmesine izin vermek için bir self-servis " +"kuralı\n" +" ekleyin (Bash küme ayracı genişletmesini kullanarak):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" Nitelikler listesini yönetirken, mevcut özellikler de dahil olmak üzere\n" +" tüm nitelikleri listeye eklemeniz gerekir.\n" +" Listeye telephoneNumber ekleyin (Bash küme ayracı genişletmesini " +"kullanarak):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Güncellenmiş kuralımızı görüntüleyin:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Bir kuralı silin:\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +#, fuzzy +#| msgid "Permissions to grant (read, write). Default is write." +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "Verilecek izinler (okuma, yazma) Öntanımlı: yazma." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" + +msgid "DNS class" +msgstr "" + +msgid "Comma-separated list of raw A records" +msgstr "" + +msgid "Comma-separated list of raw AAAA records" +msgstr "" + +msgid "Comma-separated list of raw A6 records" +msgstr "" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "" + +msgid "Comma-separated list of raw APL records" +msgstr "" + +msgid "Comma-separated list of raw CERT records" +msgstr "" + +msgid "Comma-separated list of raw CNAME records" +msgstr "" + +msgid "Comma-separated list of raw DHCID records" +msgstr "" + +msgid "Comma-separated list of raw DLV records" +msgstr "" + +msgid "Comma-separated list of raw DNAME records" +msgstr "" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "" + +msgid "Comma-separated list of raw DS records" +msgstr "" + +msgid "Comma-separated list of raw HIP records" +msgstr "" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "" + +msgid "Comma-separated list of raw KEY records" +msgstr "" + +msgid "KEY Flags" +msgstr "" + +msgid "KEY Protocol" +msgstr "" + +msgid "Protocol" +msgstr "" + +msgid "KEY Algorithm" +msgstr "" + +msgid "KEY Public Key" +msgstr "" + +msgid "Public Key" +msgstr "" + +msgid "Comma-separated list of raw KX records" +msgstr "" + +msgid "Comma-separated list of raw LOC records" +msgstr "" + +msgid "Comma-separated list of raw MX records" +msgstr "" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "" + +msgid "Comma-separated list of raw NS records" +msgstr "" + +msgid "Comma-separated list of raw NSEC records" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "NSEC Next Domain Name" +msgstr "NIS etki alanı adı" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Next Domain Name" +msgstr "NIS etki alanı adı" + +msgid "NSEC Type Map" +msgstr "" + +msgid "Type Map" +msgstr "" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "" + +msgid "Comma-separated list of raw PTR records" +msgstr "" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "" + +msgid "RRSIG Type Covered" +msgstr "" + +msgid "Type Covered" +msgstr "" + +msgid "RRSIG Algorithm" +msgstr "" + +msgid "RRSIG Labels" +msgstr "" + +msgid "Labels" +msgstr "" + +msgid "RRSIG Original TTL" +msgstr "" + +msgid "Original TTL" +msgstr "" + +msgid "RRSIG Signature Expiration" +msgstr "" + +msgid "Signature Expiration" +msgstr "" + +msgid "RRSIG Signature Inception" +msgstr "" + +msgid "Signature Inception" +msgstr "" + +msgid "RRSIG Key Tag" +msgstr "" + +msgid "RRSIG Signer's Name" +msgstr "" + +msgid "Signer's Name" +msgstr "" + +msgid "RRSIG Signature" +msgstr "" + +msgid "Signature" +msgstr "" + +msgid "Comma-separated list of raw RP records" +msgstr "" + +msgid "Comma-separated list of raw SIG records" +msgstr "" + +msgid "SIG Type Covered" +msgstr "" + +msgid "SIG Algorithm" +msgstr "" + +msgid "SIG Labels" +msgstr "" + +msgid "SIG Original TTL" +msgstr "" + +msgid "SIG Signature Expiration" +msgstr "" + +msgid "SIG Signature Inception" +msgstr "" + +msgid "SIG Key Tag" +msgstr "" + +msgid "SIG Signer's Name" +msgstr "" + +msgid "SIG Signature" +msgstr "" + +msgid "Comma-separated list of raw SPF records" +msgstr "" + +msgid "Comma-separated list of raw SRV records" +msgstr "" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "" + +msgid "Comma-separated list of raw TA records" +msgstr "" + +msgid "Comma-separated list of raw TKEY records" +msgstr "" + +msgid "Comma-separated list of raw TSIG records" +msgstr "" + +msgid "Comma-separated list of raw TXT records" +msgstr "" + +msgid "SOA time to live" +msgstr "" + +msgid "SOA record time to live" +msgstr "" + +msgid "SOA class" +msgstr "" + +msgid "SOA record class" +msgstr "" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Consume an entitlement." +msgstr "Komut uygulanmadı" + +msgid "Quantity" +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for entitlement accounts." +msgstr "Bir ağ grubu ara." + +msgid "Retrieve the entitlement certs." +msgstr "" + +msgid "Import an entitlement certificate." +msgstr "" + +msgid "UUID" +msgstr "" + +msgid "Enrollment UUID" +msgstr "" + +msgid "Register to the entitlement system." +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Username" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "Command not implemented" +msgid "Enrollment UUID (not implemented)" +msgstr "Komut uygulanmadı" + +msgid "Registration password" +msgstr "" + +msgid "Display current entitlements." +msgstr "" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" + +msgid "comma-separated list of users to add" +msgstr "" + +msgid "comma-separated list of groups to add" +msgstr "" + +msgid "comma-separated list of users to remove" +msgstr "" + +msgid "comma-separated list of groups to remove" +msgstr "" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "Source host category" +msgstr "Ana makine kategorisi" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Source host category the rule applies to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +msgid "Source Hosts" +msgstr "" + +msgid "Source Host Groups" +msgstr "" + +msgid "comma-separated list of hosts to add" +msgstr "" + +msgid "comma-separated list of host groups to add" +msgstr "" + +msgid "comma-separated list of HBAC services to add" +msgstr "" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "" + +msgid "comma-separated list of hosts to remove" +msgstr "" + +msgid "comma-separated list of host groups to remove" +msgstr "" + +msgid "comma-separated list of HBAC services to remove" +msgstr "" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Netgroups\n" +#| "\n" +#| "A netgroup is a group used for permission checking. It can contain both\n" +#| "user and host values.\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a new netgroup:\n" +#| " ipa netgroup-add --desc=\"NFS admins\" admins\n" +#| "\n" +#| " Add members to the netgroup:\n" +#| " ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +#| "\n" +#| " Remove a member from the netgroup:\n" +#| " ipa netgroup-remove-member --users=tuser2 admins\n" +#| "\n" +#| " Display information about a netgroup:\n" +#| " ipa netgroup-show admins\n" +#| "\n" +#| " Delete a netgroup:\n" +#| " ipa netgroup-del admins\n" +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" +"\n" +"Ağ grupları (netgroups)\n" +"\n" +"Bir ağ grubu, izin denetimi için kullanılan bir gruptur. Hem kullanıcı\n" +"hem de ana makine değerleri içerebilir.\n" +"\n" +"ÖRNEKLER:\n" +"\n" +" Yeni bir ağ grubu ekleyin:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Ağ grubuna üye ekleyin:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Bir üyeyi ağ grubundan kaldırın:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Bir ağ grubu hakkında bilgileri görüntüleyin:\n" +" ipa netgroup-show admins\n" +"\n" +" Bir ağ grubunu silin:\n" +" ipa netgroup-del admins\n" + +msgid "comma-separated list of netgroups to add" +msgstr "" + +msgid "comma-separated list of netgroups to remove" +msgstr "" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" + +#, fuzzy +#| msgid "Add members to a netgroup." +msgid "Target members of a group" +msgstr "Bir ağ grubuna üye ekle." + +msgid "User group to apply permissions to" +msgstr "" + +msgid "comma-separated list of privileges to add" +msgstr "" + +msgid "Add a system permission without an ACI" +msgstr "" + +#, fuzzy +#| msgid "Permission name" +msgid "Permission type" +msgstr "İzin adı" + +msgid "comma-separated list of privileges to remove" +msgstr "" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "" + +msgid "comma-separated list of permissions" +msgstr "" + +msgid "comma-separated list of roles to remove" +msgstr "" + +msgid "comma-separated list of privileges" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Self-service Permissions\n" +#| "\n" +#| "A permission enables fine-grained delegation of permissions. Access " +#| "Control\n" +#| "Rules, or instructions (ACIs), grant permission to permissions to " +#| "perform\n" +#| "given tasks such as adding a user, modifying a group, etc.\n" +#| "\n" +#| "A Self-service permission defines what an object can change in its own " +#| "entry.\n" +#| "\n" +#| "\n" +#| "EXAMPLES:\n" +#| "\n" +#| " Add a self-service rule to allow users to manage their address (using " +#| "Bash\n" +#| " brace expansion):\n" +#| " ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +#| "st} \"Users manage their own address\"\n" +#| "\n" +#| " When managing the list of attributes you need to include all attributes\n" +#| " in the list, including existing ones.\n" +#| " Add telephoneNumber to the list (using Bash brace expansion):\n" +#| " ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +#| "\"Users manage their own address\"\n" +#| "\n" +#| " Display our updated rule:\n" +#| " ipa selfservice-show \"Users manage their own address\"\n" +#| "\n" +#| " Delete a rule:\n" +#| " ipa selfservice-del \"Users manage their own address\"\n" +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Self-servis İzinleri\n" +"\n" +"Bir izin, izinlerin ayrıntılı şekilde tayin edilmesini sağlar. Erişim " +"Denetim\n" +"Kuralları veya talimatları (ACI), kullanıcı ekleme, grup değiştirme vb. " +"gibi\n" +"belirli görevleri gerçekleştirme izinleri için izin verir.\n" +"\n" +"Self-servis izni, bir nesnenin kendi girdisinde neleri değiştirebileceğini " +"tanımlar.\n" +"\n" +"\n" +"ÖRNEKLER:\n" +"\n" +" Kullanıcıların adreslerini yönetmesine izin vermek için bir self-servis " +"kuralı\n" +" ekleyin (Bash küme ayracı genişletmesini kullanarak):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" Nitelikler listesini yönetirken, mevcut özellikler de dahil olmak üzere\n" +" tüm nitelikleri listeye eklemeniz gerekir.\n" +" Listeye telephoneNumber ekleyin (Bash küme ayracı genişletmesini " +"kullanarak):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Güncellenmiş kuralımızı görüntüleyin:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Bir kuralı silin:\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "" + +msgid "comma-separated list of sudo commands to remove" +msgstr "" + +msgid "Active directory domain administrator's password" +msgstr "" + +msgid "GECOS field" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "" + +msgid "Additional instructions:" +msgstr "Ek talimatlar:" #, python-format msgid "" @@ -605,113 +12585,6 @@ msgstr "" "API Sürüm numarası gönderilmedi, ileri dönük uyumluluk garanti edilmiyor. " "Sunucunun API sürümünü varsayılıyor, %(server_version)s" -msgid "Add a new RADIUS proxy server." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -msgid "Add a new netgroup." -msgstr "Yeni bir ağ grubu ekle." - -msgid "Add a new self-service permission." -msgstr "Yeni bir self-servis izni ekle." - -msgid "Add members to a netgroup." -msgstr "Bir ağ grubuna üye ekle." - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "Additional instructions:" -msgstr "Ek talimatlar:" - -msgid "All commands should at least have a result" -msgstr "Tüm komutların en azından bir sonucu olmalıdır" - -msgid "Already registered" -msgstr "Zaten kayıtlı" - -msgid "Attributes" -msgstr "Nitelikler" - -msgid "Attributes to which the permission applies." -msgstr "İznin geçerli olduğu nitelikler." - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"DNS sistem kayıtlarının otomatik güncellenmesi başarısız oldu. Eksik " -"kayıtların listesini almak için lütfen sistem kayıtlarının güncellemesini el " -"ile yeniden çalıştırın." - -msgid "Bad format in credentials cache" -msgstr "Kimlik bilgileri önbelleğinde bozuk biçim" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Yanlış arama filtresi %(info)s" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 kod çözme başarısız oldu: %(reason)s" - -msgid "Cannot resolve KDC for requested realm" -msgstr "İstenen erişim alanı (realm) için KDC çözülemiyor" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Sertifika biçim hatası: %(error)s" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Sertifika işlemi tamamlanamıyor: %(error)s" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "İstemci yapılandırılmadı. ipa-client-install komutunu çalıştırın." - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"İstemci sürümü. Sunucunun isteği kabul edip etmeyeceğini belirlemek için " -"kullanılır." - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "'%(name)s' komutu kullanımdan kaldırıldı" - -msgid "Command name" -msgstr "Komut adı" - -msgid "Command not implemented" -msgstr "Komut uygulanmadı" - -msgid "Configured administrative server limit exceeded" -msgstr "Yapılandırılmış yönetim sunucusu sınırı aşıldı" - -msgid "Configured size limit exceeded" -msgstr "Yapılandırılmış boyut sınırı aşıldı" - -msgid "Configured time limit exceeded" -msgstr "Yapılandırılmış zaman sınırı aşıldı" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "%(name)s etkileşimli olarak alınamadı" - -msgid "Credentials cache permissions incorrect" -msgstr "Kimlik bilgileri önbelleği izinleri yanlış" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "DNS denetimi başarısız oldu: Beklenen {%(expected)s} alınan {%(got)s}" - msgid "" "DNS forwarder semantics changed since IPA 4.0.\n" "You may want to use forward zones (dnsforwardzone-*) instead.\n" @@ -721,15 +12594,29 @@ msgstr "" "Bunun yerine ileri bölgeler (dnsforwardzone-*) kullanmak isteyebilirsiniz.\n" "Daha fazla ayrıntı için belgeleri okuyun." -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS etiketi 63 karakterden uzun olamaz" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS etiketi 63 karakterden uzun olamaz" +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"DNSSEC desteği deneyseldir.\n" +"%(additional_info)s" #, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "%(host)s ana makinesinin DNS kayıt(lar)ı kaldırılamadı. (%(reason)s)" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s' seçeneği kullanımdan kaldırıldı. %(additional_info)s" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"%(label)s semantiği değişti. %(current_behavior)s\n" +"%(hint)s" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "%(server)s DNS sunucusu: %(error)s." #, python-format msgid "" @@ -739,6 +12626,16 @@ msgstr "" "%(server)s DNS sunucusu DNSSEC desteklemiyor: %(error)s.\n" "IPA sunucu(lar)ında DNSSEC doğrulaması etkinse, lütfen devre dışı bırakın." +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"\"%(fwzone)s\" ileri bölgesi, \"%(authzone)s\" yetkili bölgesinde uygun NS " +"temsilcisinin eksik olması nedeniyle etkili değildir. Lütfen \"%(authzone)s" +"\" üst bölgesine \"%(ns_rec)s\" NS kaydını ekleyin." + #, python-format msgid "" "DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" @@ -747,18 +12644,6 @@ msgstr "" "%(server)s DNS sunucusu EDNS0 desteklemiyor (RFC 6891): %(error)s.\n" "IPA sunucu(lar)ında DNSSEC doğrulaması etkinse, lütfen devre dışı bırakın." -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "%(server)s DNS sunucusu: %(error)s." - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"DNSSEC desteği deneyseldir.\n" -"%(additional_info)s" - #, python-format msgid "" "DNSSEC validation failed: %(error)s.\n" @@ -769,443 +12654,6 @@ msgstr "" "Lütfen DNSSEC yapılandırmanızı doğrulayın veya tüm IPA sunucularında DNSSEC " "doğrulamasını devre dışı bırakın." -msgid "Delete a RADIUS proxy server." -msgstr "Bir RADIUS vekil sunucusunu sil." - -msgid "Delete a netgroup." -msgstr "Bir ağ grubunu sil." - -msgid "Delete a self-service permission." -msgstr "Bir self-servis iznini sil." - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "Yönetilen bir grubun silinmesine izin verilmiyor. Önce ayrılmalıdır." - -msgid "Deprecated options" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "Description" -msgstr "Açıklama" - -msgid "Dictionary mapping variable name to value" -msgstr "Değişken adını değere eşleyen sözlük" - -msgid "Display information about a RADIUS proxy server." -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -msgid "Display information about a netgroup." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Display information about a self-service permission." -msgstr "Bir self-servis izni hakkında bilgileri görüntüle." - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "'%(domain)s' etki alanı '%(forest)s' ormanı için kök etki alanı değil" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Doğrulamak için tekrar %(label)s girin: " - -msgid "Exceeded number of tries to forward a request." -msgstr "İsteği iletme denemesi sayısı aşıldı." - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Certificate Signing Request kodu çözülemedi: %s" - -msgid "Filename is empty" -msgstr "Dosya adı boş" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"'%(forest)s' ormanının %(domains)s orman(lar)ına mevcut güveni var, bu da " -"'%(conflict)s' güvenmeyi engelliyor" - -msgid "Forward to server instead of running locally" -msgstr "Yerel olarak çalışmak yerine sunucuya ilet" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"İletme politikası bazı otomatik boş bölgelerle çakışıyor. RFC 6303 " -"tarafından belirtilen bölgeler için sorgular, iletme ve yinelemeyi yok sayar " -"ve her zaman NXDOMAIN cavaplarıyla sonuçlanır. Bu davranışı geçersiz kılmak " -"için 'only' iletme politikasını kullanın." - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" - -msgid "Host category" -msgstr "Ana makine kategorisi" - -msgid "Host category the rule applies to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA %(zone)s bölgesini yönetmiyor, lütfen kayıtları DNS sunucunuza el ile " -"ekleyin" - -msgid "IPA server hostname" -msgstr "IPA sunucusu ana makine adı" - -msgid "IPA unique ID" -msgstr "IPA benzersiz kimliği" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Yetersiz erişim: %(info)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Geçersiz JSON-RPC isteği: %(error)s" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" -"JSON-RPC isteği:\n" -"%s\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos hatası: %(major)s/%(minor)s" - -msgid "LDAP timeout" -msgstr "LDAP zaman aşımı" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Baştaki ve sondaki boşluklara izin verilmiyor" - -msgid "List of deletions that failed" -msgstr "Başarısız olan silmelerin listesi" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"\"%(ruleset)s\" eşleme kural kümesinde %(helper)s yardımcısı için birden " -"fazla kural var" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" - -msgid "Member Host" -msgstr "Üye Ana Makine" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Eksik veya geçersiz HTTP Yönlendiricisi, %(referer)s" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -msgid "Modify a RADIUS proxy server." -msgstr "Bir RADIUS vekil sunucusunu değiştir." - -msgid "Modify a netgroup." -msgstr "Bir ağ grubunu değiştir." - -msgid "Modify a self-service permission." -msgstr "Bir self-servis iznini değiştir." - -msgid "NIS domain name" -msgstr "NIS etki alanı adı" - -msgid "Netgroup" -msgstr "Ağ grubu" - -msgid "Netgroup description" -msgstr "Ağ grubu açıklaması" - -msgid "Netgroup name" -msgstr "Ağ grubu adı" - -msgid "Netgroups" -msgstr "Ağ grupları" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"%(location)s IPA konumunda DNS sunucusu yok. DNS sunucuları olmadan konum " -"beklendiği gibi çalışmıyor." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"Kurulu DNSSEC anahtar yöneticisi yok. DNSSEC anahtar yöneticisi kurulana " -"kadar DNSSEC bölge imzalama çalışmayacaktır." - -msgid "No credentials cache found" -msgstr "Kimlik bilgileri önbelleği bulunamadı" - -msgid "No file to read" -msgstr "Okunacak dosya yok" - -msgid "No matching entries found" -msgstr "Eşleşen girdi bulunamadı" - -msgid "Not allowed on non-leaf entry" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" - -msgid "Not registered yet" -msgstr "Henüz kayıtlı değil" - -msgid "Number of entries returned" -msgstr "Döndürülen girdi sayısı" - -msgid "Number of plugins loaded" -msgstr "Yüklenen eklenti sayısı" - -msgid "Number of variables returned (<= total)" -msgstr "Döndürülen değişken sayısı (<= total)" - -msgid "Only one value is allowed" -msgstr "Sadece bir değere izin veriliyor" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "PKINIT status" -msgstr "PKINIT durumu" - -msgid "Passwords do not match" -msgstr "Parolalar eşleşmiyor" - -msgid "Passwords do not match!" -msgstr "Parolalar eşleşmiyor!" - -msgid "Permission" -msgstr "İzin" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "İzin reddedildi: %(file)s" - -msgid "Permission flags" -msgstr "İzin bayrakları" - -msgid "Permission name" -msgstr "İzin adı" - -msgid "Permissions" -msgstr "İzinler" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "Verilecek izinler (okuma, yazma) Öntanımlı: yazma." - -msgid "Positional arguments" -msgstr "Konumsal argümanlar" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "Yetkili %(principal)s doğrulanamıyor: %(message)s" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "Yetkili, kullanıcı@ERİŞİM_ALANI biçiminde değil: '%(principal)s'" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Girdileri sunucuda depolandığı şekilde yazdır. Sadece çıktı biçimini etkiler." - -msgid "RADIUS Server" -msgstr "RADIUS Sunucusu" - -msgid "RADIUS Servers" -msgstr "RADIUS Sunucuları" - -msgid "RADIUS proxy server" -msgstr "RADIUS vekil sunucusu" - -msgid "RADIUS proxy server name" -msgstr "RADIUS vekil sunucusu adı" - -msgid "RADIUS proxy servers" -msgstr "RADIUS vekil sunucuları" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"'%(record)s' göreceli kayıt adı, '%(zone)s' bölge adını son ek olarak " -"içeriyor, bu da '%(fqdn)s' tam nitelikli etki alanı adıyla sonuçlanıyor. Bu " -"genellikle ad belirtiminin sonundaki noktanın eksik olmasının neden olduğu " -"bir hatadır." - -msgid "Remove members from a netgroup." -msgstr "Bir ağ grubundan üye kaldır." - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" - -msgid "Report PKINIT status on the IPA masters" -msgstr "IPA yöneticilerinde PKINIT durumunu bildir" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "%(status)s durumuyla istek başarısız oldu: %(reason)s" - -msgid "Results are truncated, try a more specific search" -msgstr "Sonuçlar kısaltıldı, daha özel bir arama yapmayı deneyin" - -msgid "Retries" -msgstr "Yeniden denemeler" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "Tüm nitelikleri sunucudan al ve yazdır. Komut çıktısını etkiler." - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "CA sertifika zinciri alınamadı: %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "CA durumunu alma %d durumuyla başarısız oldu" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "CA durumu alınamadı: %s" - -#, python-format -msgid "Same as --%s" -msgstr "--%s ile aynı" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "Şema güncel (FP '%(fingerprint)s', TTL %(ttl)s s)" - -msgid "Search for RADIUS proxy servers." -msgstr "RADIUS vekil sunucularını ara." - -msgid "Search for a netgroup." -msgstr "Bir ağ grubu ara." - -msgid "Search for a self-service permission." -msgstr "Bir self-servis izni ara." - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Arama sonucu kısaltıldı: %(reason)s" - -msgid "Secret" -msgstr "Parola" - -msgid "Self Service Permission" -msgstr "Self Servis İzni" - -msgid "Self Service Permissions" -msgstr "Self Servis İzinleri" - -msgid "Self-service name" -msgstr "Self-servis adı" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"%(label)s semantiği değişti. %(current_behavior)s\n" -"%(hint)s" - -msgid "Server" -msgstr "Sunucu" - -msgid "Server name" -msgstr "Sunucu adı" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Sunucu kaldırma işlemi iptal edildi: %(reason)s." - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"%(service)s hizmeti, yapılandırma değişikliklerini uygulamak için %(server)s " -"IPA sunucusunda yeniden başlatma gerektiriyor." - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "'%(service)s' hizmeti Kerberos veri tabanında bulunamadı" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Hizmet yetkilisi şu biçimde değil: hizmet/tam nitelikli ana makine adı: " -"%(reason)s" - -msgid "Service principal is required" -msgstr "Hizmet yetkilisi gereklidir" - -msgid "Session error" -msgstr "Oturum hatası" - -msgid "Show all loaded plugins." -msgstr "Yüklenen tüm eklentileri göster." - -msgid "Show environment variables." -msgstr "Ortam değişkenlerini göster." - -msgid "Size Limit" -msgstr "Boyut Sınırı" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"Sistem kodlaması UTF-8 olmalı, '%(encoding)s' desteklenmiyor. LC_ALL=\"C." -"UTF-8\", veya LC_ALL=\"\" ve LC_CTYPE=\"C.UTF-8\" olarak ayarlayın." - #, python-format msgid "" "The _kerberos TXT record from domain %(domain)s could not be created " @@ -1228,154 +12676,35 @@ msgstr "" "Bu, bölge IPA tarafından yönetilmiyorsa meydana gelebilir. Lütfen kaydı el " "ile kaldırın." -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "%(ca)s için bu sunucuda sertifika yok." - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "%(char)r karakterine izin verilmiyor." - -msgid "The default users group cannot be removed" -msgstr "Öntanımlı kullanıcılar grubu kaldırılamaz" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "Ana makine eklendi ancak DNS güncellemesi başarısız oldu: %(reason)s" - -msgid "The hostname or IP (with or without port)" -msgstr "Ana makine adı veya IP (bağlantı noktasıyla birlikte veya değil)" - -msgid "The number of times to retry authentication" -msgstr "Kimlik doğrulamayı yeniden deneme sayısı" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"Girdinin primary_key (birincil anahtar) değeri, örneğin bir kullanıcı için " -"'jdoe'" - msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Yetkilinin erişim alanı, bu IPA sunucusunun erişim alanıyla eşleşmiyor" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Kurulu DNSSEC anahtar yöneticisi yok. DNSSEC anahtar yöneticisi kurulana " +"kadar DNSSEC bölge imzalama çalışmayacaktır." #, python-format msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." msgstr "" -"Arama ölçütleri yeterince özel değildi. 1 tane bekleniyordu ve %(found)d " -"tane bulundu." - -msgid "The secret used to encrypt data" -msgstr "Verileri şifrelemek için kullanılan parola" - -msgid "The topic or command name." -msgstr "Konu veya komut adı." - -msgid "The total timeout across all retries (in seconds)" -msgstr "Tüm yeniden denemelerde toplam zaman aşımı (saniye cinsinden)" - -msgid "The username attribute on the user object" -msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" - -msgid "This command requires root access" -msgstr "Bu komut root erişimi gerektirir" - -msgid "This entry already exists" -msgstr "Bu girdi zaten var" - -msgid "This entry cannot be enabled or disabled" -msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" - -msgid "This entry is already a member" -msgstr "Bu girdi zaten bir üye" - -msgid "This entry is already disabled" -msgstr "Bu girdi zaten devre dışı" - -msgid "This entry is already enabled" -msgstr "Bu girdi zaten etkin" - -msgid "This entry is not a member" -msgstr "Bu girdi bir üye değil" - -msgid "This group already allows external members" -msgstr "Bu grup zaten harici üyelere izin veriyor" - -msgid "This group cannot be posix because it is external" -msgstr "Bu grup harici olduğu için posix olamaz" - -msgid "This is already a posix group" -msgstr "Bu zaten bir posix grubu" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "Bu zaten bir posix grubudur ve harici bir gruba dönüştürülemez" - -msgid "Ticket expired" -msgstr "Biletin süresi doldu" - -msgid "Time Limit" -msgstr "Zaman Sınırı" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Saniye cinsinden aramanın zaman sınırı (0 sınırsızdır)" - -msgid "Timeout" -msgstr "Zaman aşımı" - -msgid "To get command help, use:" -msgstr "Komut yardımı almak için şunu kullanın:" - -msgid "Topic commands:" -msgstr "Konu komutları:" - -msgid "Topic or Command" -msgstr "Konu veya Komut" - -msgid "Total number of variables env (>= count)" -msgstr "Toplam ortam değişkeni sayısı (>= count)" - -msgid "True if not all results were returned" -msgstr "Tüm sonuçlar döndürülmediyse True" - -msgid "True means the operation was successful" -msgstr "True, işlemin başarılı olduğu anlamına gelir" +"'%(record)s' göreceli kayıt adı, '%(zone)s' bölge adını son ek olarak " +"içeriyor, bu da '%(fqdn)s' tam nitelikli etki alanı adıyla sonuçlanıyor. Bu " +"genellikle ad belirtiminin sonundaki noktanın eksik olmasının neden olduğu " +"bir hatadır." #, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "CMS ile iletişim kurulamadı (durum %d)" +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' kullanımdan kaldırıldı. %(additional_info)s" #, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "Özel grup oluşturulamadı. '%(group)s' grubu zaten var." +msgid "%(line)s" +msgstr "%(line)s" #, python-format -msgid "Unknown option: %(option)s" -msgstr "Bilinmeyen seçenek: %(option)s" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"'%(record)s' sistem kaydının güncellenmesi şu hatayla başarısız oldu: " -"%(error)s" - -msgid "User attribute" -msgstr "Kullanıcı niteliği" - -msgid "User category" -msgstr "Kullanıcı kategorisi" - -msgid "User category the rule applies to" -msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" - -msgid "User-friendly description of action performed" -msgstr "Gerçekleştirilen eylemin kullanıcı dostu açıklaması" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "PKINIT etkin mi devre dışı mı olduğu" - -msgid "You must enroll a host in order to create a host service" -msgstr "" -"Bir ana makine hizmeti oluşturmak için bir ana makineyi kaydettirmelisiniz" +msgid "Search result has been truncated: %(reason)s" +msgstr "Arama sonucu kısaltıldı: %(reason)s" #, python-format msgid "" @@ -1385,6 +12714,152 @@ msgstr "" "%(domain)s etki alanına güveniniz bozuldu. Lütfen 'ipa trust-add' komutunu " "çalıştırarak yeniden oluşturun." +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "%(host)s ana makinesinin DNS kayıt(lar)ı kaldırılamadı. (%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"İletme politikası bazı otomatik boş bölgelerle çakışıyor. RFC 6303 " +"tarafından belirtilen bölgeler için sorgular, iletme ve yinelemeyi yok sayar " +"ve her zaman NXDOMAIN cavaplarıyla sonuçlanır. Bu davranışı geçersiz kılmak " +"için 'only' iletme politikasını kullanın." + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"'%(record)s' sistem kaydının güncellenmesi şu hatayla başarısız oldu: " +"%(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA %(zone)s bölgesini yönetmiyor, lütfen kayıtları DNS sunucunuza el ile " +"ekleyin" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"DNS sistem kayıtlarının otomatik güncellenmesi başarısız oldu. Eksik " +"kayıtların listesini almak için lütfen sistem kayıtlarının güncellemesini el " +"ile yeniden çalıştırın." + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"%(service)s hizmeti, yapılandırma değişikliklerini uygulamak için %(server)s " +"IPA sunucusunda yeniden başlatma gerektiriyor." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"%(location)s IPA konumunda DNS sunucusu yok. DNS sunucuları olmadan konum " +"beklendiği gibi çalışmıyor." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: Hatalı biçimlendirilmiş sertifika. %(reason)s" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "Ana makine eklendi ancak DNS güncellemesi başarısız oldu: %(reason)s" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "%(ca)s için bu sunucuda sertifika yok." + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d değişken" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d eklenti yüklendi" +msgstr[1] "%(count)d eklenti yüklendi" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Doğrulamak için tekrar %(label)s girin: " + +msgid "Passwords do not match!" +msgstr "Parolalar eşleşmiyor!" + +msgid "No matching entries found" +msgstr "Eşleşen girdi bulunamadı" + +msgid "Topic or Command" +msgstr "Konu veya Komut" + +msgid "The topic or command name." +msgstr "Konu veya komut adı." + +msgid "Topic commands:" +msgstr "Konu komutları:" + +msgid "To get command help, use:" +msgstr "Komut yardımı almak için şunu kullanın:" + +msgid " ipa --help" +msgstr " ipa --help" + +msgid "Command name" +msgstr "Komut adı" + +msgid "Positional arguments" +msgstr "Konumsal argümanlar" + +#, python-format +msgid "Same as --%s" +msgstr "--%s ile aynı" + +msgid "Deprecated options" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "No file to read" +msgstr "Okunacak dosya yok" + +msgid "A dictionary representing an LDAP entry" +msgstr "Bir LDAP girdisini temsil eden bir sözlük" + +msgid "A list of LDAP entries" +msgstr "LDAP girdilerinin bir listesi" + +msgid "All commands should at least have a result" +msgstr "Tüm komutların en azından bir sonucu olmalıdır" + +msgid "Results are truncated, try a more specific search" +msgstr "Sonuçlar kısaltıldı, daha özel bir arama yapmayı deneyin" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Bilinmeyen seçenek: %(option)s" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"İstemci sürümü. Sunucunun isteği kabul edip etmeyeceğini belirlemek için " +"kullanılır." + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" +"%(cver)s istemcisi '%(server)s' konumundaki %(sver)s sunucusu ile uyumsuz" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s sunucusundan bilinmeyen hata %(code)d: %(error)s" + msgid "an internal error has occurred" msgstr "dahili bir hata oluştu" @@ -1393,49 +12868,77 @@ msgid "an internal error has occurred on server at '%(server)s'" msgstr "'%(server)s' konumundaki sunucuda dahili bir hata oluştu" #, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" -"'%(owner)s %(rtype)s' sorgusunun yanıtında DNSSEC imzaları eksik (RRSIG " -"verisi yok)" - -msgid "any of the configured servers" -msgstr "yapılandırılan sunuculardan herhangi biri" +msgid "unknown command '%(name)s'" +msgstr "bilinmeyen komut '%(name)s'" #, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api, böyle bir ad uzayına sahip değil: '%(name)s'" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "standart yetkili adına eşit en az bir değer bulunmalıdır" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "en fazla %(maxlength)d bayt olabilir" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "en fazla %(maxlength)d olabilir" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "en fazla %(maxvalue)d olabilir" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "en fazla %(maxvalue)s olabilir" - -msgid "cannot be longer that {} characters" -msgstr "{} karakterden uzun olamaz" +msgid "error on server '%(server)s': %(error)s" +msgstr "'%(server)s' sunucusunda hata: %(error)s" #, python-format msgid "cannot connect to '%(uri)s': %(error)s" msgstr "'%(uri)s' adresine bağlanamıyor: %(error)s" -msgid "change collided with another change" -msgstr "değişiklik başka bir değişiklikle çakıştı" +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Geçersiz JSON-RPC isteği: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "XML-RPC aktarımı için veri dönüştürürken hata oluştu: %(error)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Eksik veya geçersiz HTTP Yönlendiricisi, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" +"Sistem kodlaması UTF-8 olmalı, '%(encoding)s' desteklenmiyor. LC_ALL=\"C." +"UTF-8\", veya LC_ALL=\"\" ve LC_CTYPE=\"C.UTF-8\" olarak ayarlayın." + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos hatası: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos kimlik bilgileri alınmadı" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "'%(service)s' hizmeti Kerberos veri tabanında bulunamadı" + +msgid "No credentials cache found" +msgstr "Kimlik bilgileri önbelleği bulunamadı" + +msgid "Ticket expired" +msgstr "Biletin süresi doldu" + +msgid "Credentials cache permissions incorrect" +msgstr "Kimlik bilgileri önbelleği izinleri yanlış" + +msgid "Bad format in credentials cache" +msgstr "Kimlik bilgileri önbelleğinde bozuk biçim" + +msgid "Cannot resolve KDC for requested realm" +msgstr "İstenen erişim alanı (realm) için KDC çözülemiyor" + +msgid "Session error" +msgstr "Oturum hatası" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "Yetkili %(principal)s doğrulanamıyor: %(message)s" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Yetersiz erişim: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "'%(name)s' komutu argüman almıyor" #, python-format msgid "command '%(name)s' takes at most %(count)d argument" @@ -1444,200 +12947,315 @@ msgstr[0] "'%(name)s' komutu en fazla %(count)d argüman alıyor" msgstr[1] "'%(name)s' komutu en fazla %(count)d argüman alıyor" #, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "'%(name)s' komutu argüman almıyor" - -msgid "did not receive Kerberos credentials" -msgstr "Kerberos kimlik bilgileri alınmadı" - -msgid "does not match any of accepted formats: " -msgstr "kabul edilen biçimlerle eşleşmiyor: " +msgid "overlapping arguments and options: %(names)s" +msgstr "çakışan argümanlar ve seçenekler: %(names)s" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" -"'%(domain)s' etki alanı adı şu şekilde normalleştirilmelidir: %(normalized)s" - -msgid "domain name cannot be longer than 255 characters" -msgstr "etki alanı adı 255 karakterden uzun olamaz" - -msgid "empty DNS label" -msgstr "boş DNS etiketi" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "XML-RPC aktarımı için veri dönüştürürken hata oluştu: %(error)s" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "'%(server)s' sunucusunda hata: %(error)s" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"\"%(fwzone)s\" ileri bölgesi, \"%(authzone)s\" yetkili bölgesinde uygun NS " -"temsilcisinin eksik olması nedeniyle etkili değildir. Lütfen \"%(authzone)s" -"\" üst bölgesine \"%(ns_rec)s\" NS kaydını ekleyin." - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " -"ayarlanamaz" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " -"grupları ortak bir ad uzayını paylaşmaktadır" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "ana makine adı boş etiket içeriyor (ardışık noktalar)" - -msgid "incomplete time value" -msgstr "eksik zaman değeri" - -msgid "incorrect type" -msgstr "yanlış tür" +msgid "'%(name)s' is required" +msgstr "'%(name)s' gereklidir" #, python-format msgid "invalid '%(name)s': %(error)s" msgstr "geçersiz '%(name)s': %(error)s" -msgid "invalid IP address format" -msgstr "geçersiz IP adresi biçimi" +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "api, böyle bir ad uzayına sahip değil: '%(name)s'" + +msgid "Passwords do not match" +msgstr "Parolalar eşleşmiyor" + +msgid "Command not implemented" +msgstr "Komut uygulanmadı" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "İstemci yapılandırılmadı. ipa-client-install komutunu çalıştırın." #, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgid "Could not get %(name)s interactively" +msgstr "%(name)s etkileşimli olarak alınamadı" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "'%(name)s' komutu kullanımdan kaldırıldı" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "'%(domain)s' etki alanı '%(forest)s' ormanı için kök etki alanı değil" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Bu girdi zaten var" + +msgid "You must enroll a host in order to create a host service" msgstr "" -"geçersiz IP adresi sürümü (olan %(value)d, olması gereken " -"%(required_value)d)!" - -msgid "invalid SSH public key" -msgstr "geçersiz SSH genel anahtarı" - -msgid "invalid attribute name" -msgstr "geçersiz nitelik adı" - -msgid "invalid domain name" -msgstr "geçersiz etki alanı adı" +"Bir ana makine hizmeti oluşturmak için bir ana makineyi kaydettirmelisiniz" #, python-format -msgid "invalid domain-name: %s" -msgstr "geçersiz etki alanı adı: %s" +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Hizmet yetkilisi şu biçimde değil: hizmet/tam nitelikli ana makine adı: " +"%(reason)s" -msgid "invalid escape code in domain name" -msgstr "etki alanı adında geçersiz kaçış kodu" +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Yetkilinin erişim alanı, bu IPA sunucusunun erişim alanıyla eşleşmiyor" -msgid "invalid hostmask" -msgstr "geçersiz ana makine maskesi" +msgid "This command requires root access" +msgstr "Bu komut root erişimi gerektirir" -msgid "invalid port number" -msgstr "geçersiz bağlantı noktası numarası" +msgid "This is already a posix group" +msgstr "Bu zaten bir posix grubu" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "Yetkili, kullanıcı@ERİŞİM_ALANI biçiminde değil: '%(principal)s'" + +msgid "This entry is already enabled" +msgstr "Bu girdi zaten etkin" + +msgid "This entry is already disabled" +msgstr "Bu girdi zaten devre dışı" + +msgid "This entry cannot be enabled or disabled" +msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" + +msgid "This entry is not a member" +msgstr "Bu girdi bir üye değil" + +msgid "A group may not be a member of itself" +msgstr "Bir grup, kendisinin üyesi olamaz" + +msgid "This entry is already a member" +msgstr "Bu girdi zaten bir üye" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 kod çözme başarısız oldu: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Bir grup, kendisinin üyesi olarak eklenemez" + +msgid "The default users group cannot be removed" +msgstr "Öntanımlı kullanıcılar grubu kaldırılamaz" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "Yönetilen bir grubun silinmesine izin verilmiyor. Önce ayrılmalıdır." + +msgid "A managed group cannot have a password policy." +msgstr "Yönetilen bir grubun parola politikası olamaz." + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s' bir sertifikaya sahip değil." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "Özel grup oluşturulamadı. '%(group)s' grubu zaten var." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Tüm üyelerin %(verb)s olduğunu doğrularken bir sorunla karşılaşıldı: %(exc)s" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s, '%(value)s' içermiyor" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"Arama ölçütleri yeterince özel değildi. 1 tane bekleniyordu ve %(found)d " +"tane bulundu." + +msgid "This group already allows external members" +msgstr "Bu grup zaten harici üyelere izin veriyor" + +msgid "This group cannot be posix because it is external" +msgstr "Bu grup harici olduğu için posix olamaz" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "Bu zaten bir posix grubudur ve harici bir gruba dönüştürülemez" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Sunucu kaldırma işlemi iptal edildi: %(reason)s." + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s, %(principal_type)s yetkilileri için desteklenmiyor" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "%(status)s durumuyla istek başarısız oldu: %(reason)s" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" +"\"%(ruleset)s\" eşleme kural kümesinde %(helper)s yardımcısı için birden " +"fazla kural var" + +#, fuzzy, python-format +#| msgid "%(attr)s does not contain '%(value)s'" +msgid "'%(attr)s' already contains one or more values" +msgstr "%(attr)s, '%(value)s' içermiyor" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "komut ya da yardım konusu '%(topic)s' yok" + +msgid "change collided with another change" +msgstr "değişiklik başka bir değişiklikle çakıştı" + +msgid "no modifications to be performed" +msgstr "yapılacak değişiklik yok" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" msgid "limits exceeded for this query" msgstr "bu sorgu için sınırlar aşıldı" +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + msgid "modifying primary key is not allowed" msgstr "birincil anahtarın değiştirilmesine izin verilmiyor" #, python-format -msgid "must be '%(value)s'" -msgstr "'%(value)s' olmalı" +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Sadece bir değere izin veriliyor." -msgid "must be DNS name" -msgstr "DNS adı olmalı" +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Geçersiz söz dizimi." -msgid "must be Kerberos principal" -msgstr "Kerberos yetkilisi olmalı" +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Yanlış arama filtresi %(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +msgid "LDAP timeout" +msgstr "LDAP zaman aşımı" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "%(task)s LDAP görev zaman aşımı, Görev DN: '%(task_dn)s'" + +msgid "Configured time limit exceeded" +msgstr "Yapılandırılmış zaman sınırı aşıldı" + +msgid "Configured size limit exceeded" +msgstr "Yapılandırılmış boyut sınırı aşıldı" + +msgid "Configured administrative server limit exceeded" +msgstr "Yapılandırılmış yönetim sunucusu sınırı aşıldı" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Sertifika işlemi tamamlanamıyor: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Sertifika biçim hatası: %(error)s" + +msgid "Already registered" +msgstr "Zaten kayıtlı" + +msgid "Not registered yet" +msgstr "Henüz kayıtlı değil" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "%(key)s silinemiyor çünkü %(label)s %(dependent)s onu gerektiriyor" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s, %(label)s %(container)s ögesinin son üyesi olduğu için silinemiyor " +"veya devre dışı bırakılamıyor" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s silinemiyor/değiştirilemiyor: %(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "%(name)s sertifikası geçerli değil" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "Şema güncel (FP '%(fingerprint)s', TTL %(ttl)s s)" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "DNS denetimi başarısız oldu: Beklenen {%(expected)s} alınan {%(got)s}" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"'%(forest)s' ormanının %(domains)s orman(lar)ına mevcut güveni var, bu da " +"'%(conflict)s' güvenmeyi engelliyor" + +msgid "incorrect type" +msgstr "yanlış tür" + +msgid "Only one value is allowed" +msgstr "Sadece bir değere izin veriliyor" + +msgid "this option is deprecated" +msgstr "bu seçenek kullanımdan kaldırıldı" msgid "must be True or False" msgstr "True veya False olmalı" -msgid "must be Unicode text" -msgstr "Unicode metni olmalı" - -msgid "must be a certificate" -msgstr "bir sertifika olmalı" - -msgid "must be a certificate signing request" -msgstr "bir sertifika imzalama isteği olmalı" - -msgid "must be a decimal number" -msgstr "bir ondalık sayı olmalı" - -msgid "must be absolute" -msgstr "mutlak olmalı" - msgid "must be an integer" msgstr "bir tam sayı olmalı" -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "en az %(minlength)d bayt olmalı" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "en az %(minlength)d karakter olmalı" - #, python-format msgid "must be at least %(minvalue)d" msgstr "en az %(minvalue)d olmalı" +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "en fazla %(maxvalue)d olabilir" + +msgid "must be a decimal number" +msgstr "bir ondalık sayı olmalı" + #, python-format msgid "must be at least %(minvalue)s" msgstr "en az %(minvalue)s olmalı" -msgid "must be binary data" -msgstr "ikili veri olmalı" - -msgid "must be datetime value" -msgstr "bir datetime değeri olmalı" - -msgid "must be dictionary" -msgstr "sözlük olmalı" - -msgid "must be enclosed in parentheses" -msgstr "parantez içine alınmalı" - #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "tam olarak %(length)d bayt olmalı" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "tam olarak %(length)d karakter olmalı" - -#, python-format -msgid "must be one of %(values)s" -msgstr "%(values)s değerlerinden biri olmalı" - -msgid "must be relative" -msgstr "göreceli olmalı" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "\"%(pattern)s\" kalıbıyla eşleşmeli" - -msgid "netgroup" -msgstr "ağ grubu" - -msgid "netgroups" -msgstr "ağ grupları" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "komut ya da yardım konusu '%(topic)s' yok" - -msgid "no modifications to be performed" -msgstr "yapılacak değişiklik yok" - -msgid "not fully qualified" -msgstr "tam nitelikli değil" +msgid "can be at most %(maxvalue)s" +msgstr "en fazla %(maxvalue)s olabilir" #, python-format msgid "" @@ -1648,8 +13266,121 @@ msgstr "" "%(allowed)s" #, python-format -msgid "objectclass %s not found" -msgstr "%s nesne sınıfı bulunamadı" +msgid "must match pattern \"%(pattern)s\"" +msgstr "\"%(pattern)s\" kalıbıyla eşleşmeli" + +msgid "must be binary data" +msgstr "ikili veri olmalı" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "en az %(minlength)d bayt olmalı" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "en fazla %(maxlength)d bayt olabilir" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "tam olarak %(length)d bayt olmalı" + +msgid "must be a certificate" +msgstr "bir sertifika olmalı" + +msgid "must be a certificate signing request" +msgstr "bir sertifika imzalama isteği olmalı" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Certificate Signing Request kodu çözülemedi: %s" + +msgid "must be Unicode text" +msgstr "Unicode metni olmalı" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Baştaki ve sondaki boşluklara izin verilmiyor" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "en az %(minlength)d karakter olmalı" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "en fazla %(maxlength)d olabilir" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "tam olarak %(length)d karakter olmalı" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "%(char)r karakterine izin verilmiyor." + +#, python-format +msgid "must be '%(value)s'" +msgstr "'%(value)s' olmalı" + +#, python-format +msgid "must be one of %(values)s" +msgstr "%(values)s değerlerinden biri olmalı" + +msgid "must be datetime value" +msgstr "bir datetime değeri olmalı" + +msgid "does not match any of accepted formats: " +msgstr "kabul edilen biçimlerle eşleşmiyor: " + +msgid "incomplete time value" +msgstr "eksik zaman değeri" + +msgid "must be DNS name" +msgstr "DNS adı olmalı" + +msgid "must be absolute" +msgstr "mutlak olmalı" + +msgid "must be relative" +msgstr "göreceli olmalı" + +msgid "must be dictionary" +msgstr "sözlük olmalı" + +msgid "must be Kerberos principal" +msgstr "Kerberos yetkilisi olmalı" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" + +msgid "Service principal is required" +msgstr "Hizmet yetkilisi gereklidir" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: dosya bulunamadı" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "" + +msgid "any of the configured servers" +msgstr "yapılandırılan sunuculardan herhangi biri" + +msgid "Exceeded number of tries to forward a request." +msgstr "İsteği iletme denemesi sayısı aşıldı." + +msgid "Filename is empty" +msgstr "Dosya adı boş" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "İzin reddedildi: %(file)s" + +msgid "empty DNS label" +msgstr "boş DNS etiketi" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS etiketi 63 karakterden uzun olamaz" #, python-format msgid "" @@ -1659,33 +13390,45 @@ msgstr "" "sadece harflere, sayılara, %(chars)s karakterlerine izin veriliyor, DNS " "etiketi %(chars2)s ile başlayamaz veya bitemez" +msgid "single label {}s are not supported" +msgstr "tek etiketli {}s desteklenmiyor" + +msgid "too many '@' characters" +msgstr "çok fazla '@' karakteri" + +msgid "cannot be longer that {} characters" +msgstr "{} karakterden uzun olamaz" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "ana makine adı boş etiket içeriyor (ardışık noktalar)" + +msgid "not fully qualified" +msgstr "tam nitelikli değil" + +msgid "invalid SSH public key" +msgstr "geçersiz SSH genel anahtarı" + msgid "options are not allowed" msgstr "seçeneklere izin verilmiyor" +msgid "invalid hostmask" +msgstr "geçersiz ana makine maskesi" + #, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "çakışan argümanlar ve seçenekler: %(names)s" - -msgid "permission" -msgstr "izin" - -msgid "permissions" -msgstr "izinler" - -msgid "pkinit" -msgstr "pkinit" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "sorgu '%(owner)s %(rtype)s': %(error)s" #, python-format msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" msgstr "sorgu '%(owner)s %(rtype)s' EDNS0 ile: %(error)s" #, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "sorgu '%(owner)s %(rtype)s': %(error)s" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" msgstr "" -"erişim alanı veya UPN son eki güvenilir etki alanı ad uzayı ile çakışıyor" +"'%(owner)s %(rtype)s' sorgusunun yanıtında DNSSEC imzaları eksik (RRSIG " +"verisi yok)" #, python-format msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" @@ -1693,41 +13436,12019 @@ msgstr "" "%(ip)s sunucusunda '%(owner)s %(rtype)s' kaydının DNSSEC doğrulaması " "başarısız oldu" +msgid "invalid escape code in domain name" +msgstr "etki alanı adında geçersiz kaçış kodu" + +msgid "domain name cannot be longer than 255 characters" +msgstr "etki alanı adı 255 karakterden uzun olamaz" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS etiketi 63 karakterden uzun olamaz" + +msgid "invalid domain name" +msgstr "geçersiz etki alanı adı" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" +"'%(domain)s' etki alanı adı şu şekilde normalleştirilmelidir: %(normalized)s" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "geçersiz etki alanı adı: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"geçersiz IP adresi sürümü (olan %(value)d, olması gereken " +"%(required_value)d)!" + +msgid "invalid IP address format" +msgstr "geçersiz IP adresi biçimi" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s geçerli bir bağlantı noktası değil" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "standart yetkili adına eşit en az bir değer bulunmalıdır" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" +"erişim alanı veya UPN son eki güvenilir etki alanı ad uzayı ile çakışıyor" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "CA sertifika zinciri alınamadı: %s" + #, python-format msgid "request failed with HTTP status %d" msgstr "istek %d HTTP durumuyla başarısız oldu" -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "tüm nitelikleri sunucudan al ve yazdır. Komut çıktısını etkiler." +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "CA durumu alınamadı: %s" -msgid "search for managed groups" +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "CA durumunu alma %d durumuyla başarısız oldu" + +#, python-format +msgid "objectclass %s not found" +msgstr "%s nesne sınıfı bulunamadı" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "CMS ile iletişim kurulamadı (durum %d)" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" + +msgid "Failed to authenticate to CA REST API" +msgstr "" + +msgid "automount location" +msgstr "" + +msgid "automount locations" +msgstr "" + +msgid "Automount Locations" +msgstr "" + +msgid "Automount Location" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added automount location \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted automount location \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "automount map" +msgstr "" + +msgid "automount maps" +msgstr "" + +msgid "Automount Maps" +msgstr "" + +msgid "Automount Map" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added automount map \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted automount map \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified automount map \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "Automount key object." +msgstr "" + +msgid "automount key" +msgstr "" + +msgid "automount keys" +msgstr "" + +msgid "Automount Keys" +msgstr "" + +msgid "Automount Key" +msgstr "" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "key named %(key)s already exists" +msgstr "Bu girdi zaten var" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added automount key \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted automount key \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified automount key \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "" + +#, fuzzy +#| msgid "invalid attribute name" +msgid "invalid Profile ID" +msgstr "geçersiz nitelik adı" + +msgid "Certificate Profile" +msgstr "" + +msgid "Certificate Profiles" +msgstr "" + +msgid "Profile configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Imported profile \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted profile \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy +#| msgid "Certificate operation cannot be completed: %(error)s" +msgid "Certificate profiles cannot be renamed" +msgstr "Sertifika işlemi tamamlanamıyor: %(error)s" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +#, fuzzy +#| msgid "Host category" +msgid "CA category" +msgstr "Ana makine kategorisi" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "CA category the ACL applies to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +msgid "CAs" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added CA ACL \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "default CA ACL can be only disabled" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy +#| msgid "host category cannot be set to 'all' while there are allowed hosts" +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " +"ayarlanamaz" + +#, fuzzy +#| msgid "host category cannot be set to 'all' while there are allowed hosts" +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" +"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " +"ayarlanamaz" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" +"izin verilen kullanıcılar varken kullanıcı kategorisi 'all' olarak " +"ayarlanamaz" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " +"ayarlanamaz" + +#, fuzzy +#| msgid "user category cannot be set to 'all' while there are allowed users" +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"izin verilen kullanıcılar varken kullanıcı kategorisi 'all' olarak " +"ayarlanamaz" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, python-format +msgid "%i user or group added." +msgstr "" + +#, python-format +msgid "%i users or groups added." +msgstr "" + +msgid "users cannot be added when user category='all'" +msgstr "" + +#, python-format +msgid "%i user or group removed." +msgstr "" + +#, python-format +msgid "%i users or groups removed." +msgstr "" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "" + +msgid "hosts cannot be added when host category='all'" +msgstr "" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "" + +#, python-format +msgid "%i service added." +msgstr "" + +#, python-format +msgid "%i services added." +msgstr "" + +msgid "services cannot be added when service category='all'" +msgstr "" + +#, python-format +msgid "%i service removed." +msgstr "" + +#, python-format +msgid "%i services removed." +msgstr "" + +#, python-format +msgid "%i profile added." +msgstr "" + +#, python-format +msgid "%i profiles added." +msgstr "" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" + +#, python-format +msgid "%i profile removed." +msgstr "" + +#, python-format +msgid "%i profiles removed." +msgstr "" + +msgid "Add CAs to a CA ACL." +msgstr "" + +#, python-format +msgid "%i CA added." +msgstr "" + +#, python-format +msgid "%i CAs added." +msgstr "" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove CAs from a CA ACL." +msgstr "Bir ağ grubundan üye kaldır." + +#, python-format +msgid "%i CA removed." +msgstr "" + +#, python-format +msgid "%i CAs removed." +msgstr "" + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "EXAMPLES:\n" +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"ÖRNEKLER:\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all servers whose entries include the string \"example.com\":\n" +#| " ipa radiusproxy-find example.com\n" +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" +"\n" +" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" +" ipa radiusproxy-find example.com\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Find all servers whose entries include the string \"example.com\":\n" +#| " ipa radiusproxy-find example.com\n" +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" +"\n" +" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Examine the configuration:\n" +#| " ipa radiusproxy-show MyRADIUS\n" +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" +"\n" +" Yapılandırmayı inceleyin:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +#, fuzzy +#| msgid "invalid IP address format" +msgid "invalid IP network format" +msgstr "geçersiz IP adresi biçimi" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "" + +#, fuzzy +#| msgid "invalid IP address format" +msgid "invalid address format" +msgstr "geçersiz IP adresi biçimi" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" + +msgid "algorithm value: allowed interval 0-255" +msgstr "" + +msgid "flags value: allowed interval 0-255" +msgstr "" + +msgid "iterations value: allowed interval 0-65535" +msgstr "" + +#, python-format +msgid "salt value: %(err)s" +msgstr "" + +#, fuzzy +#| msgid "invalid domain-name: %s" +msgid "invalid domain-name: not fully qualified" +msgstr "geçersiz etki alanı adı: %s" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" + +#, python-format +msgid "%s record" +msgstr "" + +#, python-format +msgid "Raw %s records" +msgstr "" + +#, python-format +msgid "%s Record" +msgstr "" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "" + +#, fuzzy +#| msgid "invalid port number" +msgid "Invalid number of parts!" +msgstr "geçersiz bağlantı noktası numarası" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" + +msgid "Create reverse" +msgstr "" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" + +msgid "Exchanger" +msgstr "" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" + +msgid "Priority (order)" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Relative weight for entries with the same priority." +msgstr "" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" + +msgid "Target Uniform Resource Identifier" +msgstr "" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Managed permissions\n" +msgid "Managedby permission" +msgstr "" +"\n" +"Yönetilen izinler\n" + +msgid "DNS is not configured" +msgstr "" + +msgid "cannot be used when a zone is specified" +msgstr "" + +#, fuzzy +#| msgid "Only one value is allowed" +msgid "Only one zone type is allowed per zone name" +msgstr "Sadece bir değere izin veriliyor" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added system permission \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "This entry already exists" +msgid "permission \"%(value)s\" already exists" +msgstr "Bu girdi zaten var" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Removed system permission \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "DNS zone" +msgstr "" + +msgid "DNS zones" +msgstr "" + +msgid "DNS Zones" +msgstr "" + +msgid "DNS Zone" +msgstr "" + +msgid "Default time to live" +msgstr "" + +msgid "Time to live for records without explicit TTL definition" +msgstr "" + +msgid "setting Authoritative nameserver" +msgstr "" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" + +msgid "" +msgstr "" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "is required" +msgstr "'%(name)s' gereklidir" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "DNS resource record" +msgstr "" + +msgid "DNS resource records" +msgstr "" + +msgid "DNS Resource Records" +msgstr "" + +msgid "DNS Resource Record" +msgstr "" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" + +msgid "only master zones can contain records" +msgstr "" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" + +msgid "DNS zone root record cannot be renamed" +msgstr "" + +msgid "DNS records can be only updated one at a time" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted record \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "Found '%(value)s'" +msgstr "'%(value)s' olmalı" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "Host '%(host)s' not found" +msgstr "%s nesne sınıfı bulunamadı" + +msgid "DNS configuration options" +msgstr "" + +msgid "DNS Global Configuration" +msgstr "" + +msgid "IPA DNS version" +msgstr "" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "IPA DNS servers" +msgstr "RADIUS Sunucuları" + +#, fuzzy +#| msgid "any of the configured servers" +msgid "List of IPA masters configured as DNS servers" +msgstr "yapılandırılan sunuculardan herhangi biri" + +msgid "IPA DNSSec key master" +msgstr "" + +msgid "IPA server configured as DNSSec key master" +msgstr "" + +msgid "Global DNS configuration is empty" +msgstr "" + +msgid "DNS forward zone" +msgstr "" + +msgid "DNS forward zones" +msgstr "" + +msgid "DNS Forward Zones" +msgstr "" + +msgid "DNS Forward Zone" +msgstr "" + +msgid "Please specify forwarders." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "" + +msgid "IPA DNS records" +msgstr "" + +msgid "IPA location records" +msgstr "" + +msgid "Update location and IPA server DNS records" +msgstr "" + +msgid "Result of the command" +msgstr "" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "DNS server" +msgstr "Sunucu" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "DNS servers" +msgstr "RADIUS Sunucuları" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "DNS Servers" +msgstr "RADIUS Sunucuları" + +#, fuzzy +#| msgid "RADIUS Server" +msgid "DNS Server" +msgstr "RADIUS Sunucusu" + +#, fuzzy +#| msgid "Server name" +msgid "DNS Server name" +msgstr "Sunucu adı" + +msgid "SOA mname override" +msgstr "" + +msgid "SOA mname (authoritative server) override" +msgstr "" + +msgid "Forwarders" +msgstr "" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" + +msgid "Modify DNS server configuration" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified RADIUS proxy server \"%(value)s\"" +msgid "Modified DNS server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" + +#, fuzzy +#| msgid "Search for RADIUS proxy servers." +msgid "Search for DNS servers." +msgstr "RADIUS vekil sunucularını ara." + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA DNS Server is not installed" +msgstr "IPA sunucusu ana makine adı" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Display configuration of a DNS server." +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add a new DNS server." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added new DNS server \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Delete a DNS server" +msgstr "Bir RADIUS vekil sunucusunu sil." + +#, fuzzy, python-format +#| msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgid "Deleted DNS server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" + +msgid "REST API is not logged in." +msgstr "" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" + +#, fuzzy +#| msgid "Unable to communicate with CMS (status %d)" +msgid "Unable to communicate with CMS" +msgstr "CMS ile iletişim kurulamadı (durum %d)" + +msgid "Response from CA was not valid JSON" +msgstr "" + +msgid "Host-based access control commands" +msgstr "" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "" + +msgid "HBAC Services" +msgstr "" + +msgid "HBAC Service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added HBAC service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +msgid "HBAC service group" +msgstr "" + +msgid "HBAC service groups" +msgstr "" + +msgid "HBAC Service Groups" +msgstr "" + +msgid "HBAC Service Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "" + +msgid "Stage User" +msgstr "" + +msgid "stage user" +msgstr "" + +msgid "stage users" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added stage user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "givenname is required" +msgstr "'%(name)s' gereklidir" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "sn is required" +msgstr "'%(name)s' gereklidir" + +#, fuzzy, python-format +#| msgid "can be at most %(maxlength)d characters" +msgid "can be at most %(len)d characters" +msgstr "en fazla %(maxlength)d olabilir" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted stage user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified stage user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Activate a stage user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "Entry RDN is not 'uid'" +msgstr "" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "" + +#, python-format +msgid "Stage user %s activated" +msgstr "" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Remove principal alias from the stageuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "" + +msgid "segment" +msgstr "" + +msgid "segments" +msgstr "" + +msgid "Topology Segments" +msgstr "" + +msgid "Topology Segment" +msgstr "" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "" + +msgid "left node and right node must not be the same" +msgstr "" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added segment \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted segment \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified segment \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "%(value)s" +msgstr "'%(value)s' olmalı" + +msgid "left or right node has to be specified" +msgstr "" + +msgid "only one node can be specified" +msgstr "" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" + +msgid "suffixes" +msgstr "" + +msgid "Topology suffixes" +msgstr "" + +msgid "Topology suffix" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added topology suffix \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "host groups" +msgstr "Ağ grupları" + +msgid "Host Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added hostgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "" +#| "hostgroup with name \"%s\" already exists. Hostgroups and netgroups share " +#| "a common namespace" +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " +"grupları ortak bir ad uzayını paylaşmaktadır" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Netgroup" +msgid "hostgroup" +msgstr "Ağ grubu" + +msgid "privileged hostgroup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" + +msgid "" +"\n" +"Vaults\n" +msgstr "" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Examine the configuration:\n" +#| " ipa radiusproxy-show MyRADIUS\n" +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Yapılandırmayı inceleyin:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" + +msgid "vaultcontainer" +msgstr "" + +msgid "vaultcontainers" +msgstr "" + +msgid "Vault Containers" +msgstr "" + +msgid "Vault Container" +msgstr "" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" + +#, fuzzy +#| msgid "single label {}s are not supported" +msgid "Host is not supported" +msgstr "tek etiketli {}s desteklenmiyor" + +msgid "KRA service is not enabled" +msgstr "" + +msgid "Deleted vault container" +msgstr "" + +#, python-format +msgid "owner %s" +msgstr "" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" + +msgid "vault" +msgstr "" + +msgid "vaults" +msgstr "" + +msgid "Vaults" +msgstr "" + +msgid "Vault" +msgstr "" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" + +msgid "Add a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "Vault configuration" +msgstr "" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA KRA servers" +msgstr "IPA sunucusu ana makine adı" + +msgid "IPA servers configured as key recovery agents" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Archived data into vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Retrieve data from a vault." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "No archived data." +msgstr "" + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "" + +msgid "netgroups" +msgstr "ağ grupları" + +msgid "Netgroups" +msgstr "Ağ grupları" + +msgid "Netgroup" +msgstr "Ağ grubu" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " +"grupları ortak bir ad uzayını paylaşmaktadır" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "One time password commands" +msgstr "" + +msgid "OTP configuration options" +msgstr "" + +msgid "OTP Configuration" +msgstr "" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Kerberos PKINIT özellik durumu bildirim araçları.\n" +"\n" +"Kerberos PKINIT etkinleştirilen veya devre dışı bırakılan IPA yöneticilerini " +"bildir\n" +"\n" +"ÖRNEKLER:\n" +" Tüm yöneticilerde PKINIT durumunu listele:\n" +" ipa pkinit-status\n" +"\n" +" `ipa.example.com` üzerinde PKINIT durumunu denetle:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" PKINIT devre dışı bırakılan tüm IPA yöneticilerini listele:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"PKINIT desteği hakkında daha fazla bilgi için:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "PKINIT status" +msgstr "PKINIT durumu" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "PKINIT etkin mi devre dışı mı olduğu" + +msgid "Report PKINIT status on the IPA masters" +msgstr "IPA yöneticilerinde PKINIT durumunu bildir" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"RADIUS Vekil Sunucuları\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"RADIUS Vekil Sunucularını yönetin.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA, krb5 OTP kimlik doğrulamaları için harici bir RADIUS vekil\n" +"sunucusunun kullanılmasını destekler. Bu, üçüncü taraf kimlik doğrulama\n" +"hizmetleriyle birleşme sırasında büyük bir esneklik sağlar.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Yeni bir sunucu ekleyin:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Yapılandırmayı inceleyin:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Parolayı değiştirin:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Bir yapılandırmayı silin:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "geçersiz nitelik adı" + +msgid "invalid port number" +msgstr "geçersiz bağlantı noktası numarası" + +msgid "RADIUS proxy server" +msgstr "RADIUS vekil sunucusu" + +msgid "RADIUS proxy servers" +msgstr "RADIUS vekil sunucuları" + +msgid "RADIUS Servers" +msgstr "RADIUS Sunucuları" + +msgid "RADIUS Server" +msgstr "RADIUS Sunucusu" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d RADIUS vekil sunucusu eşleşti" +msgstr[1] "%(count)d RADIUS vekil sunucusu eşleşti" + +#, fuzzy +#| msgid "A list of LDAP entries" +msgid "A list of ACI values" +msgstr "LDAP girdilerinin bir listesi" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "ACI prefix is required" +msgstr "Hizmet yetkilisi gereklidir" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" + +msgid "filter and memberof are mutually exclusive" +msgstr "" + +msgid "group, permission and self are mutually exclusive" +msgstr "" + +msgid "One of group, permission or self is required" +msgstr "" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "" + +msgid "empty filter" +msgstr "" + +#, fuzzy, python-format +#| msgid "Certificate format error: %(error)s" +msgid "Syntax Error: %(error)s" +msgstr "Sertifika biçim hatası: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "" + +msgid "ACI object." +msgstr "" + +msgid "ACIs" +msgstr "" + +msgid "ACI" +msgstr "ACI" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Created ACI \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted ACI \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified ACI \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Renamed ACI to \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "en az %(minvalue)d olmalı" + +msgid "configuration options" +msgstr "" + +msgid "Configuration" +msgstr "" + +msgid "Maximum hostname length" +msgstr "" + +msgid "IPA masters" +msgstr "" + +msgid "List of all IPA masters" +msgstr "" + +msgid "Hidden IPA masters" +msgstr "" + +msgid "List of all hidden IPA masters" +msgstr "" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA CA servers" +msgstr "IPA sunucusu ana makine adı" + +msgid "IPA servers configured as certificate authority" +msgstr "" + +msgid "Hidden IPA CA servers" +msgstr "" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "" + +msgid "IPA CA renewal master" +msgstr "" + +msgid "Renewal master for IPA certificate authority" +msgstr "" + +msgid "IPA servers configured as key recovery agent" +msgstr "" + +msgid "Hidden IPA KRA servers" +msgstr "" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" + +msgid "Domain resolution order" +msgstr "" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" + +msgid "IPA servers configured as domain name server" +msgstr "" + +msgid "Hidden IPA DNS servers" +msgstr "" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "" + +msgid "DNSec key master" +msgstr "" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "seçeneklere izin verilmiyor" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "geçersiz etki alanı adı: %s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "" + +#, fuzzy, python-format +#| msgid "options are not allowed" +msgid "attribute \"%s\" not allowed" +msgstr "seçeneklere izin verilmiyor" + +msgid "May not be empty" +msgstr "" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "'%(server)s' sunucusunda hata: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "groups" +msgstr "Ağ grupları" + +msgid "User Group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "gid cannot be set for external group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "privileged group" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to modify user entries" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to modify group entries" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +#, fuzzy +#| msgid "search for managed groups" +msgid "Not a managed group" msgstr "yönetilen grupları ara" +msgid "Add users that can manage members of this group." +msgstr "" + +msgid "Remove users that can manage members of this group." +msgstr "" + +msgid "" +"\n" +"Permissions\n" +msgstr "" +"\n" +"İzinler\n" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" +"\n" +"Bir izin, hakların ayrıntılı şekilde tayin edilmesini sağlar. İzin, 389-ds\n" +"Erişim Denetim Kuralı veya talimatı (ACI) etrafında insan tarafından\n" +"okunabilir bir sarmalayıcıdır.\n" +"Bir izin, kullanıcı ekleme, grup değiştirme vb. gibi belirli bir görevi\n" +"gerçekleştirme hakkı verir.\n" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"Bir izin başka izinler içeremez.\n" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* Bir izin okuma, yazma, ekleme, silme, arama veya karşılaştırma erişimi " +"verir.\n" +"* Bir ayrıcalık, benzer izinleri birleştirir (örneğin, bir kullanıcı " +"eklemek\n" +" için gereken tüm izinler).\n" +"* Bir rol kullanıcılara, gruplara, ana makinelere veya ana makine " +"gruplarına\n" +" bir dizi ayrıcalık verir.\n" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" +"\n" +"Bir izin birkaç farklı bölümden oluşur:\n" +"\n" +"1. İznin adı.\n" +"2. İznin hedefi.\n" +"3. İzin tarafından verilen haklar.\n" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"Haklar, hangi işlemlere izin verildiğini tanımlar ve aşağıdakilerden biri\n" +"veya daha fazlası olabilir:\n" +"1. write - bir veya daha fazla nitelik yaz\n" +"2. read - bir veya daha fazla niteliği oku\n" +"3. search - bir veya daha fazla nitelik ara\n" +"4. compare - bir veya daha fazla niteliği karşılaştır\n" +"5. add - ağaca yeni bir girdi ekle\n" +"6. delete - mevcut bir girdiyi sil\n" +"7. all - tüm izinler verildi\n" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" +"\n" +"Nitelikler ve girdiler arasındaki farka dikkat edin. İzinler bağımsızdır, " +"bu\n" +"nedenle bir kullanıcı ekleyebilmek, kullanıcının düzenlenebilir olacağı\n" +"anlamına gelmez.\n" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" +"\n" +"İzin verilen birkaç hedef vardır:\n" +"1. alt ağaç: bir DN; izin, bu DN altındaki alt ağaç için geçerlidir\n" +"2. hedef filtre: bir LDAP filtresi\n" +"3. hedef: Olası joker karakterli DN, iznin geçerli olduğu girdileri " +"belirtir\n" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" +"\n" +"Ek olarak, aşağıdaki kolaylık seçenekleri vardır.\n" +"Bu seçeneklerden birinin ayarlanması, ilgili nitelik(ler)i ayarlayacaktır.\n" +"1. type: bir nesne türü (user, group, vs.); alt ağacı ve hedef filtreyi " +"ayarlar.\n" +"2. memberof: bir grubun üyelerine uygula; hedef filtreyi ayarlar\n" +"3. targetgroup: belirli bir grubu değiştirmek için izin ver (örneğin, grup\n" +" üyeliğini yönetme hakları vermek); hedefi ayarlar.\n" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" +"\n" +"Yönetilen izinler\n" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" +"\n" +"IPA ile birlikte öntanımlı olarak gelen izinler, \"yönetilen\" izinler " +"olarak\n" +"adlandırılabilir. Bunların geçerli oldukları öntanımlı bir nitelik kümesi " +"vardır,\n" +"ancak yönetici kümeye nitelikler ekleyebilir/kümeden nitelikleri " +"kaldırabilir.\n" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"Yönetilen bir iznin silinmesine veya yeniden adlandırılmasına ve hedefinin\n" +"değiştirilmesine izin verilmez.\n" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" +"\n" +" Kullanıcıların oluşturulmasına izin veren bir izin ekleyin:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +" Grup üyeliğini yönetme yeteneği veren bir izin ekleyin:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" + +msgid "must be enclosed in parentheses" +msgstr "parantez içine alınmalı" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "\"%s\" bir nesne türü değil" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\" geçerli bir izin türü değil" + +#, fuzzy, python-format +#| msgid "Deprecated options" +msgid "Deprecated; use %s" +msgstr "Kullanımdan kaldırılan seçenekler" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "A permission may not contain other permissions.\n" +msgid "A SYSTEM permission may not be modified or removed" +msgstr "" +"\n" +"Bir izin başka izinler içeremez.\n" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "Entry %s not found" +msgstr "%s nesne sınıfı bulunamadı" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" + +#, python-format +msgid "option was renamed; use %s" +msgstr "" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "" + +#, python-format +msgid "%s: group not found" +msgstr "" + +msgid "target and targetgroup are mutually exclusive" +msgstr "" + +msgid "subtree and type are mutually exclusive" +msgstr "" + +#, fuzzy +#| msgid "Bad search filter %(info)s" +msgid "Bad search filter" +msgstr "Yanlış arama filtresi %(info)s" + +#, python-format +msgid "Entry %s does not exist" +msgstr "" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added permission \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted permission \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Managed permissions\n" +msgid "cannot delete managed permissions" +msgstr "" +"\n" +"Yönetilen izinler\n" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified permission \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Managed permissions\n" +msgid "cannot rename managed permissions" +msgstr "" +"\n" +"Yönetilen izinler\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Managed permissions\n" +msgid "not modifiable on managed permissions" +msgstr "" +"\n" +"Yönetilen izinler\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Managed permissions\n" +msgid "only available on managed permissions" +msgstr "" +"\n" +"Yönetilen izinler\n" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "" + +msgid "OTP tokens" +msgstr "" + +msgid "OTP Tokens" +msgstr "" + +msgid "OTP Token" +msgstr "" + +msgid "URI" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added OTP token \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "cannot be empty" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified OTP token \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +#, fuzzy +#| msgid "this option is deprecated" +msgid "this option has been deprecated." +msgstr "bu seçenek kullanımdan kaldırıldı" + +msgid "sudo rules" +msgstr "" + +msgid "Sudo Rules" +msgstr "" + +msgid "Sudo Rule" +msgstr "" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "host category cannot be set to 'all' while there are allowed hosts" +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " +"ayarlanamaz" + +msgid "users" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "command" +msgstr "Konu komutları:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "commands" +msgstr "Konu komutları:" + +msgid "runAs user" +msgstr "" + +msgid "runAs users" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "group runAs" +msgstr "Ağ grupları" + +#, fuzzy +#| msgid "netgroups" +msgid "runAs groups" +msgstr "ağ grupları" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "commands cannot be added when command category='all'" +msgstr "" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "" + +msgid "commands for controlling sudo configuration" +msgstr "" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo command" +msgstr "Konu komutları:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "sudo commands" +msgstr "Konu komutları:" + +#, fuzzy +#| msgid "Topic commands:" +msgid "Sudo Commands" +msgstr "Konu komutları:" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +#, fuzzy +#| msgid "search for managed groups" +msgid "sudo command group" +msgstr "yönetilen grupları ara" + +#, fuzzy +#| msgid "search for managed groups" +msgid "sudo command groups" +msgstr "yönetilen grupları ara" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "" + +msgid "Realm Domains" +msgstr "" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" + +msgid "IPA server domain cannot be omitted" +msgstr "" + +msgid "IPA server domain cannot be deleted" +msgstr "" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +msgid "Object class name" +msgstr "" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "" + +msgid "Kerberos Ticket Policy" +msgstr "" + +msgid "OTP max life" +msgstr "" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "" + +msgid "OTP max renew" +msgstr "" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" + +msgid "RADIUS max life" +msgstr "" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "RADIUS vekil sunucusu adı" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +msgid "PKINIT max life" +msgstr "" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "" + +msgid "Default ticket policy could not be read" +msgstr "" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" + +msgid "" +"\n" +"IPA locations\n" +msgstr "" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Delete a configuration:\n" +#| " ipa radiusproxy-del MyRADIUS\n" +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Bir yapılandırmayı silin:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "location" +msgstr "" + +msgid "locations" +msgstr "" + +msgid "IPA Locations" +msgstr "" + +msgid "IPA Location" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Location name" +msgstr "NIS etki alanı adı" + +#, fuzzy +#| msgid "NIS domain name" +msgid "IPA location name" +msgstr "NIS etki alanı adı" + +#, fuzzy +#| msgid "Netgroup description" +msgid "IPA Location description" +msgstr "Ağ grubu açıklaması" + +#, fuzzy +#| msgid "Server" +msgid "Servers" +msgstr "Sunucu" + +msgid "Servers that belongs to the IPA location" +msgstr "" + +msgid "Advertised by servers" +msgstr "" + +msgid "List of servers which advertise the given location" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add a new IPA location." +msgstr "Yeni bir ağ grubu ekle." + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added IPA location \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Delete an IPA location." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Server" +msgid "IPA Server" +msgstr "Sunucu" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Modify information about an IPA location." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified IPA location \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for IPA locations." +msgstr "Bir ağ grubu ara." + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an IPA location." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Server name" +msgid "Servers in location" +msgstr "Sunucu adı" + +msgid "" +"\n" +"API Schema\n" +msgstr "" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" + +msgid "Name" +msgstr "" + +msgid "Documentation" +msgstr "" + +msgid "Exclude from" +msgstr "" + +msgid "Include in" +msgstr "" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" + +msgid "Help topic" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Version" +msgstr "İzin" + +msgid "Parameters" +msgstr "" + +msgid "Method of" +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Method name" +msgstr "Ağ grubu adı" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(filename)s: dosya bulunamadı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a command." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for commands." +msgstr "Bir ağ grubu ara." + +msgid "Return command defaults" +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a class." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for classes." +msgstr "Bir ağ grubu ara." + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a help topic." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for help topics." +msgstr "Bir ağ grubu ara." + +msgid "Required" +msgstr "" + +msgid "Multi-value" +msgstr "" + +msgid "Always ask" +msgstr "" + +msgid "CLI metavar" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "CLI name" +msgstr "Komut adı" + +msgid "Confirm (password)" +msgstr "" + +msgid "Default" +msgstr "" + +msgid "Default from" +msgstr "" + +msgid "Label" +msgstr "" + +msgid "Convert on server" +msgstr "" + +#, fuzzy +#| msgid "Netgroup" +msgid "Option group" +msgstr "Ağ grubu" + +msgid "Sensitive" +msgstr "" + +#, fuzzy +#| msgid "Positional arguments" +msgid "Positional argument" +msgstr "Konumsal argümanlar" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%s nesne sınıfı bulunamadı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a command parameter." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Search command parameters." +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(filename)s: dosya bulunamadı" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about a command output." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +#, fuzzy +#| msgid "search for managed groups" +msgid "Search for command outputs." +msgstr "yönetilen grupları ara" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "" + +msgid "ID Range" +msgstr "" + +#, fuzzy +#| msgid "invalid domain name" +msgid "local domain range" +msgstr "geçersiz etki alanı adı" + +msgid "Active Directory domain range" +msgstr "" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added ID range \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" + +msgid "Specified trusted domain name could not be found." +msgstr "" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted ID range \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified ID range \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" + msgid "self service permission" msgstr "self servis izni" msgid "self service permissions" msgstr "self servis izinleri" -msgid "single label {}s are not supported" -msgstr "tek etiketli {}s desteklenmiyor" +msgid "Self Service Permissions" +msgstr "Self Servis İzinleri" -msgid "this option is deprecated" -msgstr "bu seçenek kullanımdan kaldırıldı" - -msgid "too many '@' characters" -msgstr "çok fazla '@' karakteri" +msgid "Self Service Permission" +msgstr "Self Servis İzni" #, python-format -msgid "unknown command '%(name)s'" -msgstr "bilinmeyen komut '%(name)s'" +msgid "Added selfservice \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" #, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s sunucusundan bilinmeyen hata %(code)d: %(error)s" +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" -msgid "user category cannot be set to 'all' while there are allowed users" +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "" +"\n" +"IPA server roles\n" +msgstr "IPA sunucusu ana makine adı" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "server role" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "Server name" +msgid "server roles" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA Server Roles" +msgstr "IPA sunucusu ana makine adı" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA Server Role" +msgstr "IPA sunucusu ana makine adı" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA server role name" +msgstr "IPA sunucusu ana makine adı" + +msgid "Role status" +msgstr "" + +msgid "Status of the role" +msgstr "" + +msgid "Show role status on a server" +msgstr "" + +msgid "Find a server role on a server(s)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +msgid "Include IPA master entries" +msgstr "" + +msgid "roles" +msgstr "" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "IPA role name" +msgstr "IPA sunucusu ana makine adı" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" + +msgid "SELinux User Map rule" +msgstr "" + +msgid "SELinux User Map rules" +msgstr "" + +msgid "SELinux User Maps" +msgstr "" + +msgid "SELinux User Map" +msgstr "" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-brace-format +#| msgid "%(filename)s: file not found" +msgid "{role}: role not found" +msgstr "%(filename)s: dosya bulunamadı" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "" + +msgid "pyhbac is not installed." +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" + +msgid " * 0 - unspecified\n" +msgstr "" + +msgid " * 1 - keyCompromise\n" +msgstr "" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +msgid " * 6 - certificateHold\n" +msgstr "" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr "" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" + +msgid "Issuing CA" +msgstr "" + +msgid "Name of issuing CA" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded certificate." +msgstr "bir sertifika olmalı" + +msgid "Certificate chain" +msgstr "" + +msgid "X.509 certificate chain" +msgstr "" + +msgid "Subject" +msgstr "" + +msgid "Subject email address" +msgstr "" + +#, fuzzy +#| msgid "must be DNS name" +msgid "Subject DNS name" +msgstr "DNS adı olmalı" + +msgid "Subject X.400 address" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Subject directory name" +msgstr "Sunucu adı" + +msgid "Subject EDI Party name" +msgstr "" + +msgid "Subject URI" +msgstr "" + +msgid "Subject IP Address" +msgstr "" + +msgid "Subject OID" +msgstr "" + +msgid "Subject UPN" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Subject Kerberos principal name" +msgstr "Kerberos yetkilisi olmalı" + +msgid "Subject Other Name" +msgstr "" + +msgid "Issuer" +msgstr "" + +msgid "Issuer DN" +msgstr "" + +msgid "Not Before" +msgstr "" + +msgid "Not After" +msgstr "" + +msgid "Fingerprint (SHA1)" +msgstr "" + +msgid "Fingerprint (SHA256)" +msgstr "" + +msgid "Serial number (hex)" +msgstr "" + +msgid "Request status" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Include certificate chain in output" +msgstr "bir sertifika imzalama isteği olmalı" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" + +msgid "DN commonName does not match user's login" +msgstr "" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "'add' option" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "The principal for this request doesn't exist." +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "" + +msgid "Revoked" +msgstr "" + +msgid "Revocation reason" +msgstr "" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" + +#, python-format +msgid "Owner %s" +msgstr "" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" + +#, fuzzy +#| msgid "\"%s\" is not a valid permission type" +msgid "7 is not a valid revocation reason" +msgstr "\"%s\" geçerli bir izin türü değil" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "" + +msgid "ID View" +msgstr "" + +msgid "system ID View" +msgstr "" + +msgid "ID Views" +msgstr "" + +msgid "User object overrides" +msgstr "" + +msgid "Group object overrides" +msgstr "" + +#, fuzzy +#| msgid "Host category the rule applies to" +msgid "Hosts the view applies to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added ID View \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted ID View \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified an ID View \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" + +msgid "not found" +msgstr "" + +msgid "ID View cannot be applied to IPA master" +msgstr "" + +msgid "ID View already applied" +msgstr "" + +msgid "value" +msgstr "" + +#, python-format +msgid "ID View applied to %i host." +msgstr "" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" + +msgid "IPA object" +msgstr "" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" + +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add a new ID override." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy +#| msgid "Delete a RADIUS proxy server." +msgid "Delete an ID override." +msgstr "Bir RADIUS vekil sunucusunu sil." + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Modify a RADIUS proxy server." +msgid "Modify an ID override." +msgstr "Bir RADIUS vekil sunucusunu değiştir." + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified an ID override \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "ID override" +msgstr "" + +msgid "ID overrides cannot be renamed" +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for an ID override." +msgstr "Bir ağ grubu ara." + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "Display information about an ID override." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "User ID override" +msgstr "" + +msgid "User ID overrides" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded user certificate" +msgstr "bir sertifika olmalı" + +msgid "Group ID override" +msgstr "" + +msgid "Group ID overrides" +msgstr "" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added User ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added Group ID override \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(filename)s: file not found" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(filename)s: dosya bulunamadı" + +#, fuzzy, python-format +#| msgid "%(port)s is not a valid port" +msgid "%s is not a valid attribute." +msgstr "%(port)s geçerli bir bağlantı noktası değil" + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added automember rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Auto Membership is not configured" +msgstr "" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "objectclass %s not found" +msgid "Auto member rule: %s not found!" +msgstr "%s nesne sınıfı bulunamadı" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified automember rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "" + +msgid "No default (fallback) group set" +msgstr "" + +#, fuzzy +#| msgid "Display information about a netgroup." +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Task DN" +msgstr "" + +msgid "DN of the started task" +msgstr "" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" + +msgid "users and hosts cannot both be set" +msgstr "" + +msgid "hosts cannot be set when type is 'group'" +msgstr "" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "" + +msgid "Automember rebuild membership task started" +msgstr "" + +msgid "Automember rebuild membership task completed" +msgstr "" + +#, python-format +msgid "Task DN = '%s'" +msgstr "" + +msgid "Automember" +msgstr "" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +msgid "Remove orphan automember rules" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "" + +msgid "Certificate Authorities" +msgstr "" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "" + +msgid "Authority ID" +msgstr "" + +msgid "Dogtag Authority ID" +msgstr "" + +msgid "Subject DN" +msgstr "" + +msgid "Subject Distinguished Name" +msgstr "" + +msgid "Issuer Distinguished Name" +msgstr "" + +#, fuzzy +#| msgid "Search for a netgroup." +msgid "Search for CAs." +msgstr "Bir ağ grubu ara." + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "Display the properties of a CA." +msgstr "" + +msgid "Create a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Created CA \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted CA \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Insufficient privilege to delete a CA." +msgstr "" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "" + +msgid "Must be disabled first" +msgstr "" + +#, fuzzy +#| msgid "Modify a netgroup." +msgid "Modify CA configuration." +msgstr "Bir ağ grubunu değiştir." + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified CA \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "Insufficient privilege to modify a CA." +msgstr "" + +msgid "Disable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled CA \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "IPA CA cannot be disabled" +msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" + +msgid "Enable a CA." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Enabled CA \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "" + +msgid "Rebuild auto membership" +msgstr "" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" + +msgid "Are you sure you want to proceed with the action?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "" + +#, fuzzy +#| msgid "%(exception)s" +msgid "Actions" +msgstr "%(exception)s" + +msgid "Add" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "" + +msgid "Direct Membership" +msgstr "" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "" + +msgid "Indirect Membership" +msgstr "" + +#, fuzzy +#| msgid "Retries" +msgid "No entries." +msgstr "Yeniden denemeler" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "" + +msgid "Remove" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "" + +msgid "Show Results" +msgstr "" + +msgid "Authentication indicators" +msgstr "" + +msgid "Authentication indicator" +msgstr "" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "Add Custom Authentication Indicator" +msgstr "" + +msgid "Two factor authentication (password + OTP)" +msgstr "" + +#, fuzzy +#| msgid "RADIUS Server" +msgid "RADIUS" +msgstr "RADIUS Sunucusu" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" + +msgid "About" +msgstr "" + +msgid "Activate" +msgstr "" + +msgid "Add and Add Another" +msgstr "" + +msgid "Add and Close" +msgstr "" + +msgid "Add and Edit" +msgstr "" + +msgid "Add Many" +msgstr "" + +msgid "Back" +msgstr "" + +msgid "Cancel" +msgstr "" + +msgid "Clear" +msgstr "" + +msgid "Clear all fields on the page." +msgstr "" + +msgid "Close" +msgstr "" + +msgid "Disable" +msgstr "" + +msgid "Download" +msgstr "" + +msgid "Download certificate as PEM formatted file." +msgstr "" + +msgid "Edit" +msgstr "" + +msgid "Enable" +msgstr "" + +msgid "Find" +msgstr "" + +msgid "Get" +msgstr "" + +msgid "Hide" +msgstr "" + +msgid "Issue" +msgstr "" + +msgid "Match" +msgstr "" + +msgid "Match users according to certificate." +msgstr "" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "" + +msgid "Reload current settings from the server." +msgstr "" + +msgid "Delete" +msgstr "" + +msgid "Remove hold" +msgstr "" + +msgid "Reset" +msgstr "" + +msgid "Reset Password" +msgstr "" + +msgid "Reset Password and Log in" +msgstr "" + +msgid "Restore" +msgstr "" + +#, fuzzy +#| msgid "Retries" +msgid "Retry" +msgstr "Yeniden denemeler" + +msgid "Revert" +msgstr "" + +msgid "Revoke" +msgstr "" + +msgid "Save" +msgstr "" + +#, fuzzy +#| msgid "Secret" +msgid "Set" +msgstr "Parola" + +msgid "Show" +msgstr "" + +msgid "Stage" +msgstr "" + +msgid "Update" +msgstr "" + +msgid "View" +msgstr "" + +msgid "Customization" +msgstr "" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "" + +msgid "Expand All" +msgstr "" + +msgid "General" +msgstr "" + +msgid "Identity Settings" +msgstr "" + +msgid "Record Settings" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "" + +msgid "Back to Top" +msgstr "" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "" + +msgid "Add custom value" +msgstr "" + +msgid "Available" +msgstr "" + +msgid "Some operations failed." +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Operations Error" +msgstr "Oturum hatası" + +msgid "Confirmation" +msgstr "" + +msgid "Custom value" +msgstr "" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" + +msgid "Unsaved Changes" +msgstr "" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "" + +msgid "Hide details" +msgstr "" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "" + +msgid "Prospective" +msgstr "" + +msgid "Redirection" +msgstr "" + +msgid "Select entries to be removed." +msgstr "" + +msgid "Result" +msgstr "" + +msgid "Show details" +msgstr "" + +msgid "Success" +msgstr "" + +#, fuzzy +#| msgid "Session error" +msgid "Validation error" +msgstr "Oturum hatası" + +msgid "Input form contains invalid or missing values." +msgstr "" + +msgid "Please try the following options:" +msgstr "" + +msgid "If the problem persists please contact the system administrator." +msgstr "" + +msgid "Refresh the page." +msgstr "" + +msgid "Reload the browser." +msgstr "" + +msgid "Return to the main page and retry the operation" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "an internal error has occurred" +msgid "An error has occurred (${error})" +msgstr "dahili bir hata oluştu" + +msgid "HTTP Error" +msgstr "" + +msgid "Internal Error" +msgstr "" + +msgid "IPA Error" +msgstr "" + +msgid "No response" +msgstr "" + +msgid "Unknown Error" +msgstr "" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "" + +msgid "Settings" +msgstr "" + +msgid "Search" +msgstr "" + +msgid "False" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "" + +msgid "Allowed to create keytab" +msgstr "" + +msgid "Allowed to retrieve keytab" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Add Kerberos Principal Alias" +msgstr "Kerberos yetkilisi olmalı" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "New kerberos principal alias" +msgstr "Kerberos yetkilisi olmalı" + +msgid "Remove Kerberos Alias" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "" + +msgid "Inherited from server configuration" +msgstr "" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "" + +msgid "PAD" +msgstr "" + +msgid "Authenticating" +msgstr "" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "" + +msgid "Authentication with Kerberos failed" +msgstr "" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Kerberos Principal you entered is expired" +msgstr "Hizmet yetkilisi gereklidir" + +msgid "Loading data" +msgstr "" + +msgid "Log in" +msgstr "" + +msgid "Log In Using Certificate" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Log in using personal certificate" +msgstr "bir sertifika olmalı" + +msgid "Log out" +msgstr "" + +msgid "Log out error" +msgstr "" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "" + +msgid "Sync OTP Token" +msgstr "" + +msgid "Synchronizing" +msgstr "" + +msgid "The user account you entered is locked" +msgstr "" + +#, fuzzy +#| msgid "Number of plugins loaded" +msgid "number of passwords" +msgstr "Yüklenen eklenti sayısı" + +msgid "seconds" +msgstr "" + +msgid "Migrating" +msgstr "" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#, fuzzy +#| msgid "True means the operation was successful" +msgid "Password migration was not successful" +msgstr "True, işlemin başarılı olduğu anlamına gelir" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +msgid "The password or username you entered is incorrect" +msgstr "" + +#, fuzzy +#| msgid "True means the operation was successful" +msgid "Password migration was successful" +msgstr "True, işlemin başarılı olduğu anlamına gelir" + +#, fuzzy +#| msgid "Attributes" +msgid "Attribute" +msgstr "Nitelikler" + +msgid "Add delegation" +msgstr "" + +msgid "Remove delegations" +msgstr "" + +#, fuzzy +#| msgid "permission" +msgid "Add permission" +msgstr "izin" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "permissions" +msgid "Remove permissions" +msgstr "izinler" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "" + +msgid "Add privilege" +msgstr "" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +msgid "Remove privileges" +msgstr "" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "" + +msgid "Role Settings" +msgstr "" + +msgid "Add role" +msgstr "" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +msgid "Remove roles" +msgstr "" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "self service permission" +msgid "Add self service permission" +msgstr "self servis izni" + +#, fuzzy +#| msgid "self service permissions" +msgid "Remove self service permissions" +msgstr "self servis izinleri" + +msgid "Add rule" +msgstr "" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to change default group?" +msgstr "" + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Default host group" +msgstr "Bir ağ grubunu sil." + +#, fuzzy +#| msgid "Delete a netgroup." +msgid "Default user group" +msgstr "Bir ağ grubunu sil." + +msgid "Exclusive" +msgstr "" + +#, fuzzy +#| msgid "permission" +msgid "Expression" +msgstr "izin" + +msgid "Host group rule" +msgstr "" + +msgid "Host group rules" +msgstr "" + +msgid "Inclusive" +msgstr "" + +msgid "Remove auto membership rules" +msgstr "" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "" + +msgid "User group rules" +msgstr "" + +msgid "Add automount key" +msgstr "" + +msgid "Remove automount keys" +msgstr "" + +msgid "Add automount location" +msgstr "" + +msgid "Automount Location Settings" +msgstr "" + +msgid "Remove automount locations" +msgstr "" + +msgid "Add automount map" +msgstr "" + +msgid "Map Type" +msgstr "" + +msgid "Direct" +msgstr "" + +msgid "Indirect" +msgstr "" + +msgid "Remove automount maps" +msgstr "" + +msgid "Add certificate authority" +msgstr "" + +msgid "Remove certificate authorities" +msgstr "" + +msgid "Add CA ACL" +msgstr "" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "" + +msgid "Any CA" +msgstr "" + +msgid "Any Host" +msgstr "" + +msgid "Any Service" +msgstr "" + +msgid "Any Profile" +msgstr "" + +msgid "Anyone" +msgstr "" + +msgid "Rule status" +msgstr "" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" + +msgid "Remove CA ACLs" +msgstr "" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "" + +msgid "Specified CAs" +msgstr "" + +msgid "Specified Hosts and Groups" +msgstr "" + +msgid "Specified Profiles" +msgstr "" + +msgid "Specified Services and Groups" +msgstr "" + +msgid "Specified Users and Groups" +msgstr "" + +msgid "Permitted to have certificates issued" +msgstr "" + +msgid "Remove certificate profiles" +msgstr "" + +msgid "AA Compromise" +msgstr "" + +msgid "Add principal" +msgstr "" + +msgid "Affiliation Changed" +msgstr "" + +msgid "CA Compromise" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Certificates" +msgstr "bir sertifika olmalı" + +msgid "Certificate Hold" +msgstr "" + +msgid "Cessation of Operation" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Common Name" +msgstr "Komut adı" + +msgid "the certificate with serial number " +msgstr "" + +msgid "Expires On" +msgstr "" + +msgid "Issued on from" +msgstr "" + +msgid "Issued on to" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Maximum serial number" +msgstr "bir ondalık sayı olmalı" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Minimum serial number" +msgstr "bir ondalık sayı olmalı" + +msgid "Revoked on from" +msgstr "" + +msgid "Revoked on to" +msgstr "" + +msgid "Valid not after from" +msgstr "" + +msgid "Valid not after to" +msgstr "" + +msgid "Valid not before from" +msgstr "" + +msgid "Valid not before to" +msgstr "" + +msgid "Fingerprints" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Get Certificate" +msgstr "bir sertifika olmalı" + +msgid "Certificate Hold Removed" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Issue new certificate" +msgstr "bir sertifika olmalı" + +msgid "Issued By" +msgstr "" + +msgid "Issued On" +msgstr "" + +msgid "Issued To" +msgstr "" + +msgid "Key Compromise" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "No Valid Certificate" +msgstr "bir sertifika olmalı" + +#, fuzzy +#| msgid "must be a certificate" +msgid "New Certificate" +msgstr "bir sertifika olmalı" + +msgid "Certificate in base64 or PEM format" +msgstr "" + +msgid "Note" +msgstr "" + +msgid "Organization" +msgstr "" + +msgid "Organizational Unit" +msgstr "" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "" + +msgid "Privilege Withdrawn" +msgstr "" + +msgid "Reason for Revocation" +msgstr "" + +#, fuzzy +#| msgid "%(name)s certificate is not valid" +msgid "Remove certificate hold" +msgstr "%(name)s sertifikası geçerli değil" + +msgid "Do you want to remove the certificate hold?" +msgstr "" + +msgid "Remove from CRL" +msgstr "" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Certificate requested" +msgstr "bir sertifika imzalama isteği olmalı" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Revoke certificate" +msgstr "bir sertifika olmalı" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" + +msgid "Certificate Revoked" +msgstr "" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "" + +msgid "Serial Number (hex)" +msgstr "" + +msgid "SHA1 Fingerprint" +msgstr "" + +msgid "SHA256 Fingerprint" +msgstr "" + +msgid "Superseded" +msgstr "" + +msgid "Unspecified" +msgstr "" + +msgid "Valid Certificate Present" +msgstr "" + +msgid "Valid from" +msgstr "" + +msgid "Valid to" +msgstr "" + +msgid "Validity" +msgstr "" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "View Certificate" +msgstr "bir sertifika olmalı" + +msgid "Certificate Data" +msgstr "" + +msgid "Certificate For Match" +msgstr "" + +msgid "Certificate Mapping Match" +msgstr "" + +msgid "Matched Users" +msgstr "" + +msgid "User Login" +msgstr "" + +msgid "Add certificate identity mapping rule" +msgstr "" + +msgid "Add certificate mapping data" +msgstr "" + +msgid "Certificate mapping data" +msgstr "" + +msgid "Configuration string" +msgstr "" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "" + +msgid "Remove certificate mapping data" +msgstr "" + +msgid "Issuer and subject" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate signing request" +msgid "Remove certificate identity mapping rules" +msgstr "bir sertifika imzalama isteği olmalı" + +#, fuzzy +#| msgid "Netgroup description" +msgid "Group Options" +msgstr "Ağ grubu açıklaması" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Search Options" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "SELinux Options" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Server Options" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Service Options" +msgstr "Kullanımdan kaldırılan seçenekler" + +#, fuzzy +#| msgid "Description" +msgid "User Options" +msgstr "Açıklama" + +msgid "Forward first" +msgstr "" + +msgid "Forwarding disabled" +msgstr "" + +msgid "Forward only" +msgstr "" + +#, fuzzy +#| msgid "%(exception)s" +msgid "Options" +msgstr "%(exception)s" + +msgid "Update System DNS Records" +msgstr "" + +msgid "Do you want to update system DNS records?" +msgstr "" + +msgid "System DNS records updated" +msgstr "" + +msgid "Add DNS forward zone" +msgstr "" + +msgid "Remove DNS forward zones" +msgstr "" + +msgid "Add DNS resource record" +msgstr "" + +msgid "DNS record was deleted because it contained no data." +msgstr "" + +msgid "Other Record Types" +msgstr "" + +msgid "Address not valid, can't redirect" +msgstr "" + +msgid "Create dns record" +msgstr "" + +msgid "Creating record." +msgstr "" + +msgid "Record creation failed." +msgstr "" + +msgid "Checking if record exists." +msgstr "" + +msgid "Record not found." +msgstr "" + +msgid "Redirection to PTR record" +msgstr "" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "" + +msgid "Target reverse zone not found." +msgstr "" + +msgid "Fetching DNS zones." +msgstr "" + +msgid "An error occurred while fetching dns zones." +msgstr "" + +msgid "You will be redirected to DNS Zone." +msgstr "" + +msgid "Remove DNS resource records" +msgstr "" + +msgid "Standard Record Types" +msgstr "" + +msgid "Records for DNS Zone" +msgstr "" + +msgid "Record Type" +msgstr "" + +msgid "Add DNS zone" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" + +msgid "DNS Zone Settings" +msgstr "" + +msgid "Remove DNS zones" +msgstr "" + +#, fuzzy +#| msgid "Permission" +msgid "Remove Permission" +msgstr "İzin" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" + +msgid "Skip DNS check" +msgstr "" + +msgid "Skip overlap check" +msgstr "" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" + +msgid "Authoritative nameserver change" +msgstr "" + +msgid "Level" +msgstr "" + +msgid "Set Domain Level" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add user group" +msgstr "Yeni bir ağ grubu ekle." + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "" + +msgid "External" +msgstr "" + +#, fuzzy +#| msgid "Netgroups" +msgid "Groups" +msgstr "Ağ grupları" + +#, fuzzy +#| msgid "Host category" +msgid "Group categories" +msgstr "Ana makine kategorisi" + +msgid "Change to external group" +msgstr "" + +msgid "Change to POSIX group" +msgstr "" + +msgid "Non-POSIX" +msgstr "" + +msgid "POSIX" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove user groups" +msgstr "Bir ağ grubundan üye kaldır." + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "Bir ağ grubundan üye kaldır." + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "" + +msgid "Add HBAC rule" +msgstr "" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "" + +msgid "Accessing" +msgstr "" + +msgid "Remove HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "" + +msgid "Via Service" +msgstr "" + +msgid "Who" +msgstr "" + +msgid "Add HBAC service" +msgstr "" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "" + +msgid "Remove HBAC services" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "" + +msgid "Add HBAC service group" +msgstr "" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "" + +msgid "Remove HBAC service groups" +msgstr "" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "" + +msgid "Access Denied" +msgstr "" + +msgid "Access Granted" +msgstr "" + +msgid "Include Disabled" +msgstr "" + +msgid "Include Enabled" +msgstr "" + +msgid "HBAC Test" +msgstr "" + +msgid "Matched" +msgstr "" + +msgid "Missing values: " +msgstr "" + +msgid "New Test" +msgstr "" + +msgid "Rules" +msgstr "" + +msgid "Run Test" +msgstr "" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "" + +msgid "Unmatched" +msgstr "" + +msgid "Add host" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Host Certificate" +msgstr "bir sertifika olmalı" + +#, fuzzy +#| msgid "Host category" +msgid "Host Name" +msgstr "Ana makine kategorisi" + +msgid "Delete Key, Unprovision" +msgstr "" + +msgid "Host Settings" +msgstr "" + +msgid "Enrolled" +msgstr "" + +msgid "Enrollment" +msgstr "" + +msgid "Fully Qualified Host Name" +msgstr "" + +msgid "Generate OTP" +msgstr "" + +msgid "Generated OTP" +msgstr "" + +msgid "Kerberos Key" +msgstr "" + +msgid "Kerberos Key Not Present" +msgstr "" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "" + +msgid "One-Time Password" +msgstr "" + +msgid "One-Time Password Not Present" +msgstr "" + +msgid "One-Time Password Present" +msgstr "" + +msgid "Reset OTP" +msgstr "" + +msgid "Reset One-Time Password" +msgstr "" + +msgid "Set OTP" +msgstr "" + +msgid "OTP set" +msgstr "" + +msgid "Set One-Time Password" +msgstr "" + +msgid "Remove hosts" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove host '${primary_key}' from netgroups" +msgstr "Bir ağ grubundan üye kaldır." + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "" + +#, fuzzy +#| msgid "permission" +msgid "Unprovision" +msgstr "izin" + +msgid "Are you sure you want to unprovision this host?" +msgstr "" + +msgid "Unprovisioning host" +msgstr "" + +msgid "Host unprovisioned" +msgstr "" + +#, fuzzy +#| msgid "Add a new netgroup." +msgid "Add host group" +msgstr "Yeni bir ağ grubu ekle." + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "" + +msgid "Remove host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "User attribute" +msgid "User to override" +msgstr "Kullanıcı niteliği" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" + +msgid "Enter trusted user login." +msgstr "" + +msgid "Profile" +msgstr "" + +msgid "Group to override" +msgstr "" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" + +#, fuzzy +#| msgid "Netgroup name" +msgid "Enter trusted group name." +msgstr "Ağ grubu adı" + +msgid "Add ID view" +msgstr "" + +msgid "Add group ID override" +msgstr "" + +msgid "Add user ID override" +msgstr "" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "" + +msgid "Applied to hosts" +msgstr "" + +msgid "Apply to host groups" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" + +msgid "Apply to hosts" +msgstr "" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "" + +msgid "Remove ID views" +msgstr "" + +msgid "Remove user ID overrides" +msgstr "" + +msgid "Remove group ID overrides" +msgstr "" + +msgid "Un-apply from host groups" +msgstr "" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" + +msgid "Un-apply" +msgstr "" + +msgid "Un-apply from hosts" +msgstr "" + +msgid "Un-apply ID Views from hosts" +msgstr "" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" + +#, fuzzy +#| msgid "netgroup" +msgid "Add netgroup" +msgstr "ağ grubu" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "" + +#, fuzzy +#| msgid "Netgroup description" +msgid "Netgroup Settings" +msgstr "Ağ grubu açıklaması" + +#, fuzzy +#| msgid "netgroups" +msgid "Remove netgroups" +msgstr "ağ grupları" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Bir ağ grubundan üye kaldır." + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "Bir ağ grubundan üye kaldır." + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove users from netgroup '${primary_key}'" +msgstr "Bir ağ grubundan üye kaldır." + +msgid "Add OTP token" +msgstr "" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" + +msgid "Configure your token" +msgstr "" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" + +msgid "OTP Token Settings" +msgstr "" + +msgid "Disable token" +msgstr "" + +msgid "Enable token" +msgstr "" + +msgid "Remove OTP tokens" +msgstr "" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "" + +msgid "Show configuration uri" +msgstr "" + +msgid "Counter-based (HOTP)" +msgstr "" + +msgid "Time-based (TOTP)" +msgstr "" + +#, fuzzy +#| msgid "Attributes" +msgid "Add Custom Attribute" +msgstr "Nitelikler" + +#, fuzzy +#| msgid "Permission flags" +msgid "Permission settings" +msgstr "İzin bayrakları" + +#, fuzzy +#| msgid "Attributes" +msgid "Attribute breakdown" +msgstr "Nitelikler" + +msgid "Privilege Settings" +msgstr "" + +msgid "Public key:" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "Set public key" +msgstr "geçersiz SSH genel anahtarı" + +msgid "Show/Set key" +msgstr "" + +msgid "Modified: key not set" +msgstr "" + +msgid "Modified" +msgstr "" + +msgid "New: key not set" +msgstr "" + +msgid "New: key set" +msgstr "" + +msgid "Add password policy" +msgstr "" + +msgid "Password Policy" +msgstr "" + +msgid "Remove password policies" +msgstr "" + +msgid "Add ID range" +msgstr "" + +msgid "Range Settings" +msgstr "" + +msgid "Base ID" +msgstr "" + +msgid "Primary RID base" +msgstr "" + +msgid "Range size" +msgstr "" + +msgid "Domain SID" +msgstr "" + +msgid "Secondary RID base" +msgstr "" + +msgid "Remove ID ranges" +msgstr "" + +msgid "Active Directory domain" +msgstr "" + +msgid "Active Directory domain with POSIX attributes" +msgstr "" + +msgid "Detect" +msgstr "" + +msgid "Local domain" +msgstr "" + +msgid "IPA trust" +msgstr "" + +msgid "Active Directory winsync" +msgstr "" + +#, fuzzy +#| msgid "RADIUS Server" +msgid "Add RADIUS server" +msgstr "RADIUS Sunucusu" + +#, fuzzy +#| msgid "" +#| "\n" +#| "RADIUS Proxy Servers\n" +msgid "RADIUS Proxy Server Settings" +msgstr "" +"\n" +"RADIUS Vekil Sunucuları\n" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "Remove RADIUS servers" +msgstr "RADIUS Sunucuları" + +msgid "Check DNS" +msgstr "" + +msgid "Do you also want to perform DNS check?" +msgstr "" + +msgid "Force Update" +msgstr "" + +msgid "Add SELinux user map" +msgstr "" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "" + +msgid "Remove selinux user maps" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Server Roles" +msgstr "Sunucu adı" + +#, fuzzy +#| msgid "Server name" +msgid "Server Role" +msgstr "Sunucu adı" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "Delete Server" +msgstr "Sunucu" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" + +msgid "Add service" +msgstr "" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Service Certificate" +msgstr "bir sertifika olmalı" + +#, fuzzy +#| msgid "Self Service Permissions" +msgid "Service Settings" +msgstr "Self Servis İzinleri" + +#, fuzzy +#| msgid "Permission" +msgid "Provisioning" +msgstr "İzin" + +msgid "Remove services" +msgstr "" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "" + +msgid "Are you sure you want to unprovision this service?" +msgstr "" + +msgid "Unprovisioning service" +msgstr "" + +#, fuzzy +#| msgid "Self Service Permission" +msgid "Service unprovisioned" +msgstr "Self Servis İzni" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "SSH public keys" +msgstr "geçersiz SSH genel anahtarı" + +#, fuzzy +#| msgid "invalid SSH public key" +msgid "SSH public key:" +msgstr "geçersiz SSH genel anahtarı" + +msgid "Set SSH key" +msgstr "" + +msgid "Are you sure you want to activate selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "" + +msgid "Add stage user" +msgstr "" + +msgid "Stage users" +msgstr "" + +msgid "Preserved users" +msgstr "" + +msgid "Remove preserved users" +msgstr "" + +msgid "Remove stage users" +msgstr "" + +msgid "Are you sure you want to stage selected users?" +msgstr "" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "" + +msgid "Are you sure you want to restore selected users?" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "" + +#, fuzzy +#| msgid "User category" +msgid "User categories" +msgstr "Kullanıcı kategorisi" + +msgid "Add sudo command" +msgstr "" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "" + +msgid "Remove sudo commands" +msgstr "" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "" + +msgid "Add sudo command group" +msgstr "" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove sudo command groups" +msgstr "Bir ağ grubundan üye kaldır." + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "" + +msgid "Add sudo rule" +msgstr "" + +msgid "Add sudo option" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "" + +#, fuzzy +#| msgid "Command name" +msgid "Any Command" +msgstr "Komut adı" + +msgid "Any Group" +msgstr "" + +msgid "Run Commands" +msgstr "" + +msgid "Deny" +msgstr "" + +msgid "Access this host" +msgstr "" + +msgid "Option added" +msgstr "" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "" + +msgid "Remove sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "" + +msgid "Specified Commands and Groups" +msgstr "" + +msgid "Specified Groups" +msgstr "" + +msgid "Remove sudo options" +msgstr "" + +msgid "Autogenerated" +msgstr "" + +msgid "Segment details" +msgstr "" + +msgid "Replication configuration" +msgstr "" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" + +msgid "Add IPA location" +msgstr "" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +msgid "Remove IPA locations" +msgstr "" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +msgid "Add topology segment" +msgstr "" + +msgid "Remove topology segments" +msgstr "" + +msgid "Account" +msgstr "" + +msgid "Add trust" +msgstr "" + +msgid "Administrative account" +msgstr "" + +msgid "SID blocklists" +msgstr "" + +msgid "Trust Settings" +msgstr "" + +msgid "Establish using" +msgstr "" + +msgid "Fetch domains" +msgstr "" + +msgid "Pre-shared password" +msgstr "" + +msgid "Remove trusts" +msgstr "" + +msgid "Remove domains" +msgstr "" + +#, fuzzy +#| msgid "must be dictionary" +msgid "Trust direction" +msgstr "sözlük olmalı" + +#, fuzzy +#| msgid "PKINIT status" +msgid "Trust status" +msgstr "PKINIT durumu" + +msgid "Trust type" +msgstr "" + +msgid "Alternative UPN suffixes" +msgstr "" + +#, fuzzy +#| msgid "User attribute" +msgid "User attributes for SMB services" +msgstr "Kullanıcı niteliği" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +msgid "Drive to mount a home directory" +msgstr "" + +msgid "Account Settings" +msgstr "" + +msgid "Account Status" +msgstr "" + +msgid "Active users" +msgstr "" + +msgid "Add user" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "" + +msgid "Delete mode" +msgstr "" + +msgid "Employee Information" +msgstr "" + +msgid "Error changing account status" +msgstr "" + +msgid "Password expiration" +msgstr "" + +msgid "Mailing Address" +msgstr "" + +msgid "Misc. Information" +msgstr "" + +msgid "delete" +msgstr "" + +msgid "preserve" +msgstr "" + +msgid "No private group" +msgstr "" + +msgid "Remove users" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove user '${primary_key}' from netgroups" +msgstr "Bir ağ grubundan üye kaldır." + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "" + +msgid "Unlock" +msgstr "" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "" + +msgid "Add vault" +msgstr "" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +msgid "Vaults Config" +msgstr "" + +#, fuzzy +#| msgid "Member Host" +msgid "Members" +msgstr "Üye Ana Makine" + +msgid "My User Vaults" +msgstr "" + +msgid "Owners" +msgstr "" + +msgid "Remove vaults" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +msgid "Service Vaults" +msgstr "" + +msgid "Shared" +msgstr "" + +msgid "Shared Vaults" +msgstr "" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +msgid "Vault Type" +msgstr "" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "User attribute" +msgid "User Vaults" +msgstr "Kullanıcı niteliği" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "Current password is required" +msgstr "'%(name)s' gereklidir" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "" + +msgid "First OTP" +msgstr "" + +#, fuzzy +#| msgid "'%(name)s' is required" +msgid "New password is required" +msgstr "'%(name)s' gereklidir" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "" + +msgid "The username, password or token codes are not correct" +msgstr "" + +msgid "Token was synchronized" +msgstr "" + +msgid "Password change complete" +msgstr "" + +msgid "Your password has expired. Please enter a new password." +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match" +msgid "Passwords must match" +msgstr "Parolalar eşleşmiyor" + +msgid "Password reset was not successful." +msgstr "" + +msgid "Reset your password." +msgstr "" + +msgid "Second OTP" +msgstr "" + +msgid "Verify Password" +msgstr "" + +msgid "Are you sure you want to delete selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "" + +msgid "Are you sure you want to enable selected entries?" +msgstr "" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "" + +msgid "Some entries were not deleted" +msgstr "" + +msgid "Quick Links" +msgstr "" + +msgid "Select All" +msgstr "" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" + +msgid "Unselect All" +msgstr "" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "" + +msgid "Audit" +msgstr "" + +msgid "Authentication" +msgstr "" + +msgid "Automount" +msgstr "" + +msgid "DNS" +msgstr "" + +msgid "Host-Based Access Control" +msgstr "" + +msgid "Identity" +msgstr "" + +msgid "Network Services" +msgstr "" + +msgid "Policy" +msgstr "" + +msgid "Role-Based Access Control" +msgstr "" + +msgid "Sudo" +msgstr "" + +msgid "Topology" +msgstr "" + +msgid "Trusts" +msgstr "" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "" + +msgid "First" +msgstr "" + +msgid "Last" +msgstr "" + +msgid "Next" +msgstr "" + +msgid "Page" +msgstr "" + +msgid "Prev" +msgstr "" + +msgid "Undo" +msgstr "" + +msgid "Undo this change." +msgstr "" + +msgid "Undo All" +msgstr "" + +msgid "Undo all changes in this field." +msgstr "" + +msgid "Text does not match field pattern" +msgstr "" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a decimal number" +msgstr "bir ondalık sayı olmalı" + +msgid "Format error" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "Must be an integer" +msgstr "bir tam sayı olmalı" + +#, fuzzy +#| msgid "invalid IP address format" +msgid "Not a valid IP address" +msgstr "geçersiz IP adresi biçimi" + +#, fuzzy +#| msgid "invalid IP address format" +msgid "Not a valid IPv4 address" +msgstr "geçersiz IP adresi biçimi" + +#, fuzzy +#| msgid "invalid IP address format" +msgid "Not a valid IPv6 address" +msgstr "geçersiz IP adresi biçimi" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" + +msgid "Parse error" +msgstr "" + +#, fuzzy +#| msgid "must be a decimal number" +msgid "Must be a positive number" +msgstr "bir ondalık sayı olmalı" + +#, fuzzy, python-brace-format +#| msgid "%(port)s is not a valid port" +msgid "'${port}' is not a valid port" +msgstr "%(port)s geçerli bir bağlantı noktası değil" + +msgid "Required field" +msgstr "" + +msgid "Unsupported value" +msgstr "" + +msgid "Role" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added role \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted role \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified role \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy +#| msgid "IPA server hostname" +msgid "" +"\n" +"IPA servers\n" +msgstr "IPA sunucusu ana makine adı" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "Server" +msgid "server" +msgstr "Sunucu" + +#, fuzzy +#| msgid "Server" +msgid "servers" +msgstr "Sunucu" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "IPA Servers" +msgstr "RADIUS Sunucuları" + +#, fuzzy +#| msgid "Server name" +msgid "Server location" +msgstr "Sunucu adı" + +msgid "Service weight" +msgstr "" + +msgid "Weight for server services" +msgstr "" + +msgid "Service relative weight" +msgstr "" + +msgid "Relative weight for server services (counts per location)" +msgstr "" + +msgid "Enabled server roles" +msgstr "" + +msgid "List of enabled roles" +msgstr "" + +#, fuzzy +#| msgid "Display information about a RADIUS proxy server." +msgid "Modify information about an IPA server." +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified IPA server \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "Ignore topology errors" +msgstr "" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" + +msgid "Force server removal" +msgstr "" + +msgid "Force server removal even if it does not exist" +msgstr "" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "error on server '%(server)s': %(error)s" +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "'%(server)s' sunucusunda hata: %(error)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "" + +msgid "You may need to manually remove them from the tree" +msgstr "" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "" + +msgid "Ignoring topology connectivity errors." +msgstr "" + +#, fuzzy +#| msgid "This entry is already enabled" +msgid "Server has already been deleted" +msgstr "Bu girdi zaten etkin" + +msgid "Agreements deleted" +msgstr "" + +msgid "Following segments were not deleted:" +msgstr "" + +#, fuzzy, python-format +#| msgid "must be '%(value)s'" +msgid "must be \"%s\"" +msgstr "'%(value)s' olmalı" + +msgid "not allowed to perform server connection check" +msgstr "" + +msgid "Set enabled/hidden state of a server." +msgstr "" + +msgid "State" +msgstr "" + +#, fuzzy +#| msgid "Server name" +msgid "Server state" +msgstr "Sunucu adı" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "Cannot hide CA renewal master." +msgstr "" + +msgid "Cannot hide DNSSec key master." +msgstr "" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "" + +#, fuzzy +#| msgid "must be Kerberos principal" +msgid "Member principals" +msgstr "Kerberos yetkilisi olmalı" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" + +msgid "Add target to a named service delegation." +msgstr "" + +#, fuzzy, python-format +#| msgid "Member Host" +msgid "member %s" +msgstr "Üye Ana Makine" + +#, fuzzy +#| msgid "Remove members from a netgroup." +msgid "Remove member from a named service delegation." +msgstr "Bir ağ grubundan üye kaldır." + +msgid "service delegation rule" +msgstr "" + +msgid "service delegation rules" +msgstr "" + +msgid "Service delegation rules" +msgstr "" + +msgid "Service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "privileged service delegation rule" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +msgid "service delegation target" +msgstr "" + +msgid "service delegation targets" +msgstr "" + +msgid "Service delegation targets" +msgstr "" + +msgid "Service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added service delegation target \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "privileged service delegation target" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" + +msgid "Migration of LDAP search reference is not supported." +msgstr "" + +msgid "Malformed DN" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(port)s is not a valid port" +msgid "%(user)s is not a POSIX user" +msgstr "%(port)s geçerli bir bağlantı noktası değil" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" + +msgid "Invalid LDAP URI." +msgstr "" + +#, python-format +msgid "%s to exclude from migration" +msgstr "" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" + +msgid "Default group for new users not found" +msgstr "" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Base-64 encoded host certificate" +msgstr "bir sertifika olmalı" + +msgid "Principal alias" +msgstr "" + +msgid "SSH public key fingerprint" +msgstr "" + +msgid "Authentication Indicators" +msgstr "" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "Password cannot be set on enrolled host." +msgstr "" + +msgid "cn is immutable" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added certificates to host \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "" + +msgid "Add new principal alias to host entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Remove principal alias from a host entry" +msgstr "" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Delete a self-service permission." +msgid "Delete Class of Service entry" +msgstr "Bir self-servis iznini sil." + +#, fuzzy +#| msgid "Modify a self-service permission." +msgid "Modify Class of Service entry" +msgstr "Bir self-servis iznini değiştir." + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for a self-service permission." +msgid "Search for Class of Service entry" +msgstr "Bir self-servis izni ara." + +msgid "password policy" +msgstr "" + +msgid "password policies" +msgstr "" + +msgid "Password Policies" +msgstr "" + +msgid "Max repeat" +msgstr "" + +msgid "Maximum number of same consecutive characters" +msgstr "" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User category" +msgid "User check" +msgstr "Kullanıcı kategorisi" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "" + +#, fuzzy +#| msgid "A managed group cannot have a password policy." +msgid "cannot delete global password policy" +msgstr "Yönetilen bir grubun parola politikası olamaz." + +msgid "priority cannot be set on global policy" +msgstr "" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" + +msgid "AD Trust setup" +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" + +msgid "trust" +msgstr "" + +msgid "trusts" +msgstr "" + +msgid "Trust" +msgstr "" + +msgid "SID blocklist incoming" +msgstr "" + +msgid "SID blocklist outgoing" +msgstr "" + +msgid "UPN suffixes" +msgstr "" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" + +msgid "External trust" +msgstr "" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added RADIUS proxy server \"%(value)s\"" +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy +#| msgid "Permission name" +msgid "missing base_id" +msgstr "İzin adı" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" + +msgid "trust type" +msgstr "" + +msgid "only \"ad\" is supported" +msgstr "" + +msgid "domain" +msgstr "" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" + +msgid "Realm-domain mismatch" +msgstr "" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" + +msgid "Trusted domain and administrator account use different realms" +msgstr "" + +msgid "Realm administrator password should be specified" +msgstr "" + +msgid "id range type" +msgstr "" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" + +msgid "id range" +msgstr "" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" + +msgid "range exists" +msgstr "" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" + +msgid "range type change" +msgstr "" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" + +msgid "Unable to verify write permissions to the AD" +msgstr "" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted trust \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +msgid "trust configuration" +msgstr "" + +msgid "Global Trust Configuration" +msgstr "" + +msgid "IPA AD trust agents" +msgstr "" + +msgid "IPA servers configured as AD trust agents" +msgstr "" + +msgid "IPA AD trust controllers" +msgstr "" + +msgid "IPA servers configured as AD trust controllers" +msgstr "" + +msgid "unsupported trust type" +msgstr "" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "" + +msgid "SID" +msgstr "" + +msgid "sidgen_was_run" +msgstr "" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" + +msgid "trust domain" +msgstr "" + +msgid "trust domains" +msgstr "" + +msgid "Trusted domains" +msgstr "" + +msgid "Trusted domain" +msgstr "" + +#, fuzzy +#| msgid "NIS domain name" +msgid "Domain enabled" +msgstr "NIS etki alanı adı" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" + +msgid "Configure this server as a trust agent." +msgstr "" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy +#| msgid "Not allowed on non-leaf entry" +msgid "not allowed to remotely add agent" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" + +msgid "Prompt for the username" +msgstr "" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" + +msgid "Certificate Identity Mapping Rules" +msgstr "" + +msgid "Certificate Identity Mapping Rule" +msgstr "" + +msgid "Certificate Identity Mapping Rule name" +msgstr "" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" + +msgid "Matching rule" +msgstr "" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +msgstr[1] "" + +#, fuzzy +#| msgid "Display information about a self-service permission." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Bir self-servis izni hakkında bilgileri görüntüle." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" + +msgid "User logins" +msgstr "" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server matched" +#| msgid_plural "%(count)s servers matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" + +msgid "Privilege" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added privilege \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted privilege \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified privilege \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "" + +#, fuzzy +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal" +msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "" + +msgid "services" +msgstr "" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Service principal alias" +msgstr "Hizmet yetkilisi gereklidir" + +msgid "Base-64 encoded service certificate" +msgstr "" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "" + +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add a new IPA service." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "force principal name even if host not in DNS" +msgstr "" + +msgid "Skip host check" +msgstr "" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#, fuzzy +#| msgid "Add a new RADIUS proxy server." +msgid "Add a new SMB service." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +#, fuzzy +#| msgid "Self-service name" +msgid "SMB service NetBIOS name" +msgstr "Self-servis adı" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Deleted service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Modified service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d selfservice matched" +#| msgid_plural "%(count)d selfservices matched" +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Disabled service \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +msgid "Add new principal alias to a service" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added selfservice \"%(value)s\"" +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Remove principal alias from a service" +msgstr "Hizmet yetkilisi gereklidir" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "delegation" +msgstr "" + +msgid "delegations" +msgstr "" + +#, fuzzy +#| msgid "Deprecated options" +msgid "Delegations" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "Delegation" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added delegation \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted delegation \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified delegation \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy +#| msgid "Command '%(name)s' has been deprecated" +msgid "The deny type has been deprecated." +msgstr "'%(name)s' komutu kullanımdan kaldırıldı" + +msgid "HBAC rules" +msgstr "" + +msgid "HBAC Rules" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "%(count)d netgroup matched" +#| msgid_plural "%(count)d netgroups matched" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Access time" +msgstr "" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Unresolved rules in --rules" +msgstr "" + +#, python-format +msgid "Access granted: %s" +msgstr "" + +msgid "operation not defined" +msgstr "" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "" + +msgid "No such virtual command" +msgstr "" + +msgid "Member service groups" +msgstr "" + +msgid "Member HBAC service groups" +msgstr "" + +msgid "Member ID user overrides" +msgstr "" + +msgid "Indirect Member ID user overrides" +msgstr "" + +#, fuzzy +#| msgid "self service permissions" +msgid "Indirect Member permissions" +msgstr "self servis izinleri" + +msgid "Indirect Member HBAC service" +msgstr "" + +msgid "Indirect Member HBAC service group" +msgstr "" + +msgid "Invalid format. Should be name=value" +msgstr "" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" + +msgid "entry" +msgstr "" + +#, fuzzy +#| msgid "Retries" +msgid "entries" +msgstr "Yeniden denemeler" + +msgid "Entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Replication agreement for %(hostname)s not found" +msgid "container entry (%(container)s) not found" +msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" + +#, fuzzy, python-format +#| msgid "Replication agreement for %(hostname)s not found" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "" + +#, fuzzy, python-format +#| msgid "The character %(char)r is not allowed." +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "%(char)r karakterine izin verilmiyor." + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "" + +msgid "attribute is not configurable" +msgstr "" + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "No such attribute on this entry" +msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "" + +msgid "the entry was deleted while being modified" +msgstr "" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "" + +#, python-format +msgid "%s to remove" +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "" + +msgid "one or more values to remove" +msgstr "" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" + +#, fuzzy +#| msgid "must be True or False" +msgid "must be TRUE or FALSE" +msgstr "True veya False olmalı" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +msgid "User password expiration" +msgstr "" + +msgid "SMB logon script path" +msgstr "" + +msgid "SMB profile path" +msgstr "" + +msgid "SMB Home Directory" +msgstr "" + +msgid "SMB Home Directory Drive" +msgstr "" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "Replication agreement for %(hostname)s not found" +msgid "manager %(manager)s not found" +msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Issuer of the certificate" +msgstr "bir sertifika olmalı" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Subject of the certificate" +msgstr "bir sertifika olmalı" + +msgid "cannot have an empty subject" +msgstr "" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +msgid "Default group for new users is not POSIX" +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Deleted user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "%s: user is already preserved" +msgstr "Bu girdi zaten etkin" + +#, fuzzy, python-format +#| msgid "Modified netgroup \"%(value)s\"" +msgid "Modified user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Undeleted user account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "This entry is already enabled" +msgid "user \"%s\" is already active" +msgstr "Bu girdi zaten etkin" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Disabled user account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Enabled user account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, fuzzy, python-format +#| msgid "Deleted netgroup \"%(value)s\"" +msgid "Unlocked account \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +msgid "Failed logins" +msgstr "" + +msgid "Last successful authentication" +msgstr "" + +msgid "Last failed authentication" +msgstr "" + +#, fuzzy +#| msgid "Timeout" +msgid "Time now" +msgstr "Zaman aşımı" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "" + +#, python-format +msgid "%(host)s failed" +msgstr "" + +#, fuzzy, python-format +#| msgid "This entry is already disabled" +msgid "Account disabled: %(disabled)s" +msgstr "Bu girdi zaten devre dışı" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy, python-format +#| msgid "Modified selfservice \"%(value)s\"" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +msgid "Add new principal alias to the user entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Added netgroup \"%(value)s\"" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, fuzzy +#| msgid "Service principal is required" +msgid "Remove principal alias from the user entry" +msgstr "Hizmet yetkilisi gereklidir" + +#, fuzzy, python-format +#| msgid "Deleted selfservice \"%(value)s\"" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "" + +#, fuzzy +#| msgid "must be enclosed in parentheses" +msgid "must be enabled only on a single master" +msgstr "parantez içine alınmalı" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "" + +msgid "communication with CIFS server was unsuccessful" +msgstr "" + +msgid "AD domain controller" +msgstr "" + +msgid "unsupported functional level" +msgstr "" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" + +msgid "Cannot find specified domain or server name" +msgstr "" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" + +msgid "At least the domain or IP address should be specified" +msgstr "" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" + +msgid "no trusted domain is configured" +msgstr "" + +#, fuzzy +#| msgid "any of the configured servers" +msgid "domain is not configured" +msgstr "yapılandırılan sunuculardan herhangi biri" + +msgid "SID is not valid" +msgstr "" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "" + +#, fuzzy +#| msgid "does not match any of accepted formats: " +msgid "SID does not match any trusted domain" +msgstr "kabul edilen biçimlerle eşleşmiyor: " + +msgid "Trust setup" +msgstr "" + +msgid "Our domain is not configured" +msgstr "" + +msgid "No trusted domain is not configured" +msgstr "" + +msgid "trusted domain object" +msgstr "" + +msgid "domain is not trusted" +msgstr "" + +msgid "no trusted domain matched the specified flat name" +msgstr "" + +msgid "trusted domain object not found" +msgstr "" + +msgid "Object does not belong to a trusted domain" +msgstr "" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "" + +msgid "Ambiguous search, user domain was not specified" +msgstr "" + +msgid "Trusted domain did not return a unique object" +msgstr "" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "" + +msgid "trusted domain user not found" +msgstr "" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "" + +msgid "CIFS credentials object" +msgstr "" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" + +msgid "Credentials" +msgstr "" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "" + +msgid "Trusted forest" +msgstr "" + +msgid "Established and verified" +msgstr "" + +msgid "Waiting for confirmation by remote side" +msgstr "" + +msgid "Unknown" +msgstr "" + +msgid "Non-Active Directory domain" +msgstr "" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" + +#, fuzzy +#| msgid "must be a certificate" +msgid "Request must be a dict" +msgstr "bir sertifika olmalı" + +msgid "Request is missing \"method\"" +msgstr "" + +msgid "Request is missing \"params\"" +msgstr "" + +#, fuzzy +#| msgid "must be an integer" +msgid "params must be a list" +msgstr "bir tam sayı olmalı" + +msgid "params must contain [args, options]" +msgstr "" + +msgid "params[0] (aka args) must be a list" +msgstr "" + +msgid "params[1] (aka options) must be a dict" +msgstr "" + +#, python-format +msgid "must equal %r" +msgstr "" + +msgid "Hello world" +msgstr "" + +#, fuzzy, python-format +#| msgid "RADIUS proxy server name" +msgid "%s: RADIUS proxy server not found" +msgstr "RADIUS vekil sunucusu adı" + +#, fuzzy, python-format +#| msgid "RADIUS proxy server name" +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "RADIUS vekil sunucusu adı" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 1" +msgstr "en az %(minvalue)d olmalı" + +msgid "Out of memory\n" +msgstr "" + +msgid "Warning unrecognized encryption type.\n" +msgstr "" + +msgid "Warning unrecognized salt type.\n" +msgstr "" + +msgid "Out of memory!?\n" +msgstr "" + +msgid "Enctype comparison failed!\n" +msgstr "" + +#, fuzzy +#| msgid "Passwords do not match!" +msgid "Password is too long!\n" +msgstr "Parolalar eşleşmiyor!" + +msgid "Failed to create random key!\n" +msgstr "" + +msgid "Failed to create key!\n" +msgstr "" + +msgid "Bad or unsupported salt type.\n" +msgstr "" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +msgid "Unable to initialize STARTTLS session\n" msgstr "" -"izin verilen kullanıcılar varken kullanıcı kategorisi 'all' olarak " -"ayarlanamaz" diff --git a/po/uk.po b/po/uk.po index c600e579d..0e83ac3e1 100644 --- a/po/uk.po +++ b/po/uk.po @@ -21,734 +21,867 @@ msgstr "" "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n" "X-Generator: Weblate 4.3.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "Не вистачає пам'яті!\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Немає дозволу на долучення цього вузла до домену IPA.\n" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "Немає дозволу на запис до файла таблиці ключів «%s»\n" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "Невдала спроба виконання access() для %1$s: номер помилки = %2$d\n" + +#, c-format +msgid "Out of memory!" +msgstr "Не вистачає пам'яті!" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "Не вдалося увімкнути SSL у LDAP\n" + +msgid "SASL Bind failed\n" +msgstr "Помилка прив'язки SASL\n" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" +"Спроба пошуку %1$s у rootdse завершилася невдало з повідомленням про помилку " +"%2$d\n" + +#, c-format +msgid "No values for %s" +msgstr "Немає значень %s" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "Спроба пошуку namingContext IPA завершилася помилкою %d\n" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "namingContext IPA не знайдено\n" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "Не вдалося визначити кореневий DN %s\n" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Помилка реєстрування. %s\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "реєстраційного запису не знайдено у XML-RPC відповіді\n" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Вузол вже приєднано.\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "помилка curl_slist_append() для значення «%s»\n" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "помилка curl_easy_setopt()\n" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "Не вдалося розгорнути буфер у jsonrpc_handle_response" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "помилка curl_global_init()\n" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "помилка curl_easy_init()\n" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "помилка json_dumps()\n" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" +"Запит JSON-RPC:\n" +"%s\n" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "Помилка під час виконання запиту JSON-RPC: %s\n" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "Виклик JSON-RPC завершився помилкою із кодом стану: %li\n" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" +"Виклик JSON-RPC не було уповноважено. Перевірте, чи правильно вказано " +"реєстраційні дані.\n" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" +"Відповідь JSON-RPC:\n" +"%s\n" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" +"Не вдалося видобути повідомлення про помилку з відповіді JSON-RPC: %s\n" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "Не вдалося обробити відповідь JSON-RPC: %s\n" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" +"Не вдалося обробити відповідь JSON-RPC: не знайдено значення «result».\n" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "Не вдалося видобути дані з відповіді JSON-RPC: %s\n" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "помилка json_pack_ex(): %s\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Успішне скасування реєстрації.\n" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Спроба скасування реєстрації зазнала невдачі.\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "у відповіді XML-RPC не знайдено результату\n" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "Не вдалося визначити сервер IPA з %s\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"Не вдалося долучити вузол: невдала спроба ініціалізації контексту Kerberos\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"Не вдалося долучити вузол: не знайдено кешу реєстраційних даних Kerberos\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"Не вдалося долучити вузол: не знайдено реєстраційного запису користувача " +"Kerberos і не вказано пароля вузла.\n" + +#, c-format +msgid "fork() failed\n" +msgstr "невдала спроба виконання fork()\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "Не знайдено ipa-getkeytab\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "Помилкові права доступу до ipa-getkeytab?\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "спроба виконання ipa-getkeytab зазнала невдачі, номер помилки %d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "дочірній процес завершив роботу з повідомленням %d\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Помилка при визначенні адрес таблиці ключів: %s.\n" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Помилка під час отримання типової області дії Kerberos: %s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Помилка під час обробки «%1$s»: %2$s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Помилка під час отримання початкових реєстраційних даних: %s.\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Не вдалося створити кеш реєстраційних даних Kerberos\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "Помилка під час спроби збереження реєстраційних даних у кеші: %s.\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Вивести дані XML-RPC без обробки у режимі GSSAPI" + +msgid "Quiet mode. Only errors are displayed." +msgstr "«Мовчазний» режим. Буде показано лише повідомлення про помилки." + +msgid "Unenroll this host from IPA server" +msgstr "Скасувати реєстрацію цього вузла на сервері IPA" + +msgid "Hostname of this server" +msgstr "Назва вузла цього сервера" + +msgid "hostname" +msgstr "назва вузла" + +msgid "IPA Server to use" +msgstr "Сервер IPA, який слід використовувати" + +msgid "Specifies where to store keytab information." +msgstr "Визначає, де слід зберігати дані таблиці ключів." + +msgid "filename" +msgstr "назва файла" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" +"Долучити вузол у примусовому режимі. Повторне долучення виконуватиметься, " +"навіть якщо вузол вже долучено." + +msgid "LDAP password (if not using Kerberos)" +msgstr "Пароль LDAP (якщо не використовується Kerberos)" + +msgid "password" +msgstr "пароль" + +msgid "LDAP basedn" +msgstr "Базовий DN LDAP" + +msgid "basedn" +msgstr "Базовий DN" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "Не вдалося отримати FQDN вузла!\n" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Назву вузла слід вказувати повністю: %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Назва вузла не повинна бути такою: %s\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Не вдалося обробити назву реєстраційного запису\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Вилучення реєстраційного запису %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Не вдалося відкрити таблицю ключів\n" + +#, c-format +msgid "principal not found\n" +msgstr "реєстраційного запису не знайдено\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Не вдалося вилучити запис\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, fuzzy, c-format +#| msgid "Failed to get result: %s\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "Не вдалося отримати результат: %s\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Не вдалося обробити реєстраційний запис\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, c-format +msgid "realm not found\n" +msgstr "область не знайдено\n" + +msgid "Print debugging information" +msgstr "Вивести діагностичні дані" + +msgid "Debugging output" +msgstr "Діагностична інформація" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Реєстраційні записи, які слід вилучити із таблиці ключів (приклад: ftp/ftp." +"example.com@EXAMPLE.COM)" + +msgid "Kerberos Service Principal Name" +msgstr "Назва реєстраційного запису служби Kerberos" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "Файл таблиці ключів, звідки слід вилучити реєстраційні записи" + +msgid "Keytab File Name" +msgstr "Назва файла таблиці ключів" + +msgid "Remove all principals in this realm" +msgstr "Вилучити всі реєстраційні записи у цій області" + +msgid "Realm name" +msgstr "Назва області" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Невдала спроба ініціалізації контексту Kerberos\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Не вдалося відкрити таблицю ключів «%1$s»: %2$s\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Спроба закриття таблиці ключів зазнала невдачі\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "не вдалося відкрити файл налаштувань %s\n" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "не вдалося обробити функцією stat() файл налаштування %s\n" + +#, c-format +msgid "out of memory\n" +msgstr "не вистачає пам'яті\n" + +#, c-format +msgid "read error\n" +msgstr "помилка читання\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Невдала спроба ініціалізації контексту Kerberos: %1$s (%2$d)\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Не вдалося обробити реєстраційний запис: %1$s (%2$d)\n" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Жоден з ключів не прийнято KDC\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Не вистачає пам'яті \n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Не вдалося ініціалізувати бібліотеку ldap!\n" + +msgid "Simple bind failed\n" +msgstr "Невдала спроба простого прив’язування\n" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Невдала спроба виконання дії: %s\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "Не вдалося отримати результат: %s\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "Перевищено обмеження за часом." + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "Не вдалося обробити розширений результат: %s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "Не вдалося обробити результат: %s\n" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Немає списку керування відповідями!\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Немає керування відповіддю!\n" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Не вистачає пам'яті!\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Не вдалося створити керування!\n" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "Не вдалося прив’язати до сервера!\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Не вдалося отримати таблицю ключів!\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "Спроба виконання ber_init() зазнала невдачі. Некоректне керування?!\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "помилка ber_scanf(), не вдалося знайти kvno?!\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Не вдалося отримати дані щодо типу шифрування №%d\n" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "Не вдалося отримати дані щодо типу шифрування %1$s (№%2$d)\n" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "Не вдалося отримати жодного ключа" + +msgid "Failed to decode control reply!\n" +msgstr "Не вдалося декодувати контрольну відповідь!\n" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "Вказано різні паролі!\n" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "Не вдалося відкрити файл налаштувань %s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Не вдалося обробити файл налаштувань %s\n" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Не вдалося визначити таблицю ключів за символічним посиланням.\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" +"keytab є осиротілим символічним посиланням, яке належить іншому " +"користувачу.\n" + +msgid "Print as little as possible" +msgstr "Виводити мінімум даних" + +msgid "Output only on errors" +msgstr "Виводити лише повідомлення про помилки" + +msgid "Contact this specific KDC Server" +msgstr "Встановити зв’язок з вказаним сервером KDC" + +msgid "Server Name" +msgstr "Назва сервера" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Реєстраційний запис, для якого слід отримати таблицю ключів (приклад: ftp/" +"ftp.example.com@EXAMPLE.COM)" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" +"Файл таблиці ключів, до якого слід долучати новий ключ (файл буде створено, " +"якщо його не існувало)." + +msgid "Encryption types to request" +msgstr "Типи шифрування, запит щодо яких слід надсилати" + +msgid "Comma separated encryption types list" +msgstr "Список типів шифрування, відокремлених комами" + +msgid "Show the list of permitted encryption types and exit" +msgstr "Показати список дозволених типів шифрування і завершити роботу" + +msgid "Permitted Encryption Types" +msgstr "Дозволені типи шифрування" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" +"Запитати невипадковий пароль, який слід використати для реєстраційного запису" + +msgid "LDAP DN" +msgstr "DN LDAP" + +msgid "DN to bind as if not using kerberos" +msgstr "" +"DN, до якого слід виконати прив’язку, якщо не використовується kerberos" + +msgid "LDAP password" +msgstr "Пароль LDAP" + +msgid "password to use if not using kerberos" +msgstr "пароль, який слід використати, якщо не використовується kerberos" + +msgid "Prompt for LDAP password" +msgstr "Запит щодо пароля LDAP" + +msgid "Path to the IPA CA certificate" +msgstr "Шлях до сертифіката CA IPA" + +msgid "IPA CA certificate" +msgstr "Сертифікат CA IPA" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "Адреса LDAP, з якою слід встановити з’єднання. Несумісний з --server" + +msgid "url" +msgstr "адреса" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "Механізм прив’язування SASL LDAP, якщо без bindd/bindpw" + +msgid "GSSAPI|EXTERNAL" +msgstr "GSSAPI|EXTERNAL" + +msgid "Retrieve current keys without changing them" +msgstr "Отримувати поточні ключі без внесення до них змін" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "Немає основних системних типів шифрування?!\n" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Підтримувані типи шифрування:\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Попередження: не вдалося виконати перетворення типу (№%d)\n" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "Пароль до Bind вже вказано (-w).\n" + +msgid "Enter LDAP password" +msgstr "Вкажіть пароль до LDAP" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "Для використання DN bind (-w або -W) потрібен пароль до bind.\n" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "Не можна одночасно вказувати механізм SASL і DN прив’язки.\n" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "Некоректний механізм прив’язування SASL\n" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "Не можна одночасно вказувати сервер і адресу LDAP.\n" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "Не надано назви сервера, сервер недоступний\n" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "Вказано несумісні параметри (-r і -P)\n" + +msgid "New Principal Password" +msgstr "Новий пароль реєстраційного запису" + +msgid "Verify Principal Password" +msgstr "Перевірка пароля реєстраційного запису" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Попередження: для випадкових паролів типи солі (salt) не мають значення " +"(див. параметр -P)\n" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Некоректна назва реєстраційного запису служби\n" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" +"Не знайдено кешу реєстраційних даних Kerberos. Чи є у вас квиток Kerberos?\n" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" +"Не знайдено реєстраційного запису користувача Kerberos. Ви маєте ви " +"коректний кеш реєстраційних даних?\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Не вдалося відкрити таблицю ключів\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" +"Повторюємо спробу з використанням способу отримання сховища ключів, який " +"використовувався до версії 4.0…\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Не вдалося створити вихідні дані для ключа\n" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "Не вдалося отримати таблицю ключів\n" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Не вдалося додати ключ до таблиці ключів\n" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "Не вдалося закрити таблицю ключів\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Таблицю ключів успішно отримати і збережено до: %s\n" + +msgid "Failed members" +msgstr "Помилка members" + +msgid "Failed source hosts/hostgroups" +msgstr "Помилка hosts/hostgroups джерела" + +msgid "Failed hosts/hostgroups" +msgstr "Помилка hosts/hostgroups" + +msgid "Failed users/groups" +msgstr "Помилка users/groups" + +msgid "Failed service/service groups" +msgstr "Помилки служб/груп служб" + +msgid "Failed to remove" +msgstr "Спроба вилучення зазнала невдачі" + +msgid "Failed RunAs" +msgstr "Помилка запуску від імені" + +msgid "Failed RunAsGroup" +msgstr "Помилка запуску від імені групи" + +msgid "Failed profiles" +msgstr "Профілі із помилками" + +msgid "Failed CAs" +msgstr "Помилкові CA" + +msgid "Failed member manager" +msgstr "Помилка керівника учасниками" + +msgid "Failed managedby" +msgstr "Помилка managedby" + +msgid "Failed allowed to retrieve keytab" +msgstr "Не вдалося дозволити отримувати таблицю ключів" + +msgid "Failed allowed to create keytab" +msgstr "Не вдалося дозволити створювати таблицю ключів" + +msgid "Failed targets" +msgstr "Помилкові цілі" + +msgid "Failed owners" +msgstr "Записи власників із помилками" + +msgid "Failed to add" +msgstr "Не вдалося додати" + +msgid "maps not connected to /etc/auto.master:" +msgstr "карти, не з’єднані з /etc/auto.master:" + +msgid "Import automount files for a specific location." +msgstr "Імпортувати файли automount для певної адреси." + +msgid "Master file" +msgstr "Основний файл" + +msgid "Automount master file." +msgstr "Основний файл automount." + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" +"Режим неперервної обробки. Програма повідомляє про помилки, але продовжує " +"обробку." + +#, python-format +msgid "File %(file)s not found" +msgstr "Файла %(file)s не знайдено" + +#, python-format +msgid "key %(key)s already exists" +msgstr "запис ключа %(key)s вже існує" + +#, python-format +msgid "map %(map)s already exists" +msgstr "запис карти %(map)s вже існує" + +msgid "Imported maps:" +msgstr "Імпортовані карти:" + +#, python-format +msgid "Added %(map)s" +msgstr "Додано %(map)s" + +msgid "Imported keys:" +msgstr "Імпортовані ключі:" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Додано %(src)s до %(dst)s" + +msgid "Ignored keys:" +msgstr "Проігноровані ключі:" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "Проігноровано %(src)s до %(dst)s" + +msgid "Duplicate maps skipped:" +msgstr "Пропущені дублікати карт:" + +#, python-format +msgid "Skipped %(map)s" +msgstr "Пропущено %(map)s" + +msgid "Duplicate keys skipped:" +msgstr "Пропущені дублікати ключів:" + +#, python-format +msgid "Skipped %(key)s" +msgstr "Пропущено %(key)s" + +msgid "Input file" +msgstr "Вхідний файл" + +msgid "File to load the certificate from" +msgstr "Файл, з якого слід завантажити сертифікат" + +msgid "cannot specify both raw certificate and file" +msgstr "не можна одночасно вказувати код сертифіката і файл із сертифікатом" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Налаштування профілів збережено до файла «%(file)s»" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Сертифікати, що зберігаються у файлі «%(file)s»" + +msgid "Servers details:" +msgstr "Параметри сервера:" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"Режим міграції вимкнено.\n" +"Скористайтеся командою «ipa config-mod--enable-migration=TRUE», щоб " +"увімкнути його." + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Міграцію записів паролів здійснено у форматі до хешування.\n" +"IPA не вдасться створити ключі Kerberos, якщо не буде\n" +"надано текстових паролів. Всім користувачам з перенесеними\n" +"записами, доведеться пройти розпізнавання на\n" +"https://your.domain/ipa/migration/ до того, як вони зможуть\n" +"скористатися обліковими записами Kerberos." + +msgid "python-yubico is not installed." +msgstr "python-yubico не встановлено." + msgid "" "\n" +"YubiKey Tokens\n" +msgstr "" +"\n" +"Жетони YubiKey\n" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"Керування жетонами YubiKey.\n" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" +"\n" +"Цей код є розширенням до додатка otptoken, він надає підтримку " +"безпосереднього\n" +"читання та запису жетонів YubiKey.\n" + +msgid "" "\n" "EXAMPLES:\n" msgstr "" "\n" -"\n" "ПРИКЛАДИ:\n" -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -"\n" -"Приклади:\n" -" Знайти усі сервери IPA:\n" -" ipa server-find\n" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" -"\n" -"\n" -"ЗАГАЛЬНІ НАЛАШТУВАННЯ DNS\n" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Перевизначення з метою додавання у повернуте повідомлення даних щодо " -"успіху чи невдачі.\n" -" " - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Перевизначення з метою встановлення станів успіху та невдачі.\n" -" " - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Додати правило автоматичної участі.\n" -" " - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Додати умови до правила автоматичної участі.\n" -" " - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" -"\n" -" Додати новий діапазон ідентифікаторів.\n" -"\n" -" Щоб додати новий діапазон ідентифікаторів, вам слід завжди вказати\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Крім того, можна вказати\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" для нового діапазону ідентифікаторів для локального домену, а\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" слід вказати для додавання нового діапазону для довіреного домену AD.\n" -"\n" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Вилучити правило автоматичної участі.\n" -" " - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Показати дані щодо правила автоматичної участі.\n" -" " - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Показати дані щодо типових (резервних) груп автоматичної участі.\n" -" " - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -" Стан блокування облікового запису користувача\n" -"\n" -" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" -" забагато разів протягом певного проміжку часу, який визначається " -"правилами\n" -" роботи з паролями. Блокування облікового запису є тимчасовим станом, " -"його\n" -" може бути розблоковано адміністратором.\n" -"\n" -" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" -" блокування на кожному з них.\n" -"\n" -" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " -"слід\n" -" виконати порівняння кількості помилкових спроб входу та час останньої\n" -" невдалої спроби з еталонними значеннями. Обліковий запис буде " -"заблоковано,\n" -" якщо буде перевищено кількість maxfail помилкових спроб протягом " -"проміжку\n" -" часу failinterval. Відповідні значення задаються правилами обробки " -"паролів,\n" -" пов’язаними з обліковим записом користувача.\n" -"\n" -" Зміни до лічильника помилкових спроб входу вносяться, лише коли " -"користувач\n" -" виконує спробу увійти, тому може статися так, що обліковий запис " -"заблоковано,\n" -" хоча час, що минув з останньої помилкової спроби, перевищує час " -"блокування\n" -" (lockouttime), заданий правилам обробки паролів. Це означає, що " -"користувач\n" -" може увійти до системи знову. " - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Змінити запис довіри (для наступного використання).\n" -"\n" -" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" -" Додаткові варіанти буде додано у наступних випусках.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Змінити правило автоматичної участі.\n" -" " - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" -"\n" -" Внесення змін до доменів області\n" -"\n" -" Перевірка DNS: при додаванні домену до списку вручну типово\n" -" виконується перевірка DNS. Вона дає дані щодо прив'язки домену\n" -" до області IPA за рахунок перевірки того, чи містить запис TXT домену у\n" -" _kerberos TXT назву області IPA. Цю перевірку можна обійти, вказавши\n" -" параметр --force.\n" -"\n" -" Вилучення: коли вилучається домен області, який мав відповідну зону\n" -" DNS керовану IPA, також автоматично вилучається відповідний запис\n" -" TXT у зоні у _kerberos. Інші записи у зоні та сама зона лишаються\n" -" незмінними.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Вилучити умови з правила автоматичної участі.\n" -" " - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Вилучити типову (резервну) групу для невідповідних записів.\n" -" " - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Шукати правила автоматичної участі.\n" -" " - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" -"\n" -" Виконати пошук осиротілих правил автоматичної участі. Можливо, команду\n" -" слід запускати від імені привілейованого користувача, щоб отримати усі " -"правила.\n" -" " - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" -"\n" -" Шукати користувачів, яких пов’язано із наданим сертифікатом.\n" -"\n" -" Для отримання списку відповідних користувачів ця команда покладається\n" -" на дані SSSD, отже, вона може повертати кешовані дані. Докладніше про\n" -" очищення кешу SSSD можна дізнатися із документації до sss_cache.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Встановити типову (резервну) групу для невідповідних записів.\n" -" " - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -" Розблокувати обліковий запис користувача\n" -"\n" -" Обліковий запис може бути заблоковано, якщо відповідно до правил " -"безпеки\n" -" користувач перевищить обмеження на кількість введення помилкових " -"паролів\n" -" протягом певного часу. Запис блокується тимчасово, його може бути\n" -" розблоковано адміністратором." - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" Об’єкт контейнера сховищ.\n" -" " - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Об’єкт сховища.\n" -" " - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" -"\n" -" Ця команда еквівалентна до такої команди:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Додати запис місця:\n" -" ipa location-add location --description 'My location'\n" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Додати сегмент топології до суфікса «ca»:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Додати сегмент топології до суфікса «domain»:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" -"\n" -" Створити новий запис служби сертифікації, підлеглий щодо служби " -"сертифікації IPA (потребує прав доступу\n" -" «Система: Додати CA»):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" -"\n" -" Вилучити запис служби сертифікації (потребує прав доступу «Система: " -"Вилучити CA»; також потребує попереднього вимикання\n" -" CA):\n" -"\n" -" ipa ca-del puppet\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Вилучити запис місця:\n" -" ipa location-del location\n" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" -"\n" -" Вилучити сегмент топології у суфіксі «ca»:\n" -" ipa topologysegment-del ca segment_name\n" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" -"\n" -" Вилучити сегмент топології у суфіксі «domain»:\n" -" ipa topologysegment-del domain segment_name\n" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" -"\n" -" Вимкнути службу сертифікації (потребує прав доступу «Система: Змінити " -"CA»):.\n" -"\n" -" ipa ca-disable puppet\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Знайти усі місця:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Знайти усі сервери:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Знайти усі суфікси:\n" -" ipa topologysuffix-find\n" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" -"\n" -" Вивести список усіх сегментів топології у суфіксі «ca»:\n" -" ipa topologysegment-find ca\n" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" -"\n" -" Вивести список усіх сегментів топології у суфіксі «domain»:\n" -" ipa topologysegment-find domain\n" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" -"\n" -" Повторно увімкнути службу сертифікації (потребує прав доступу «Система: " -"Змінити CA»):\n" -"\n" -" ipa ca-enable puppet\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -" Показати налаштування певного сервера DNS:\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" -"\n" -" Показати неявну основну роль IPA:\n" -" ipa server-role-find --include-master\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Показати певне місце:\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Показати вказаний сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Показати стан ролі «DNS server» на сервері:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Показати стан усіх налаштованих ролей на сервері:\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Показати стан усіх ролей, назва яких містить «AD», на сервері:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Оновити налаштування для вказаного сервера DNS:\n" -" ipa dnsserver-mod\n" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -" Перевірити топологію суфікса «ca»:\n" -" ipa topologysuffix-verify ca\n" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" -"\n" -" Перевірити топологію суфікса «domain»:\n" -" ipa topologysuffix-verify domain\n" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" -"\n" -" Додавання запису LOC для example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" -"\n" -" Додати умову до правила:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " -"вузла :\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" -"\n" -" Додати запис вузла до правила:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -" Додати вузол:\n" -" ipa host-add web1.example.com\n" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" -"\n" -" Додавання поштового сервера для example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Додати новий вузол з одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -"Додати новий вузол з випадковим одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -"Додати новий вузол:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Додати новий сервер:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Додати новий жетон:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - msgid "" "\n" " Add a new token:\n" @@ -758,3083 +891,314 @@ msgstr "" " Додати новий жетон:\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -" Додати право доступу, яке надає можливість керувати участю у групах:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" -"\n" -" Додати право доступу до створення записів користувачів:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" -"\n" -" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" -" ipa sudorule-add defaults\n" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" -"\n" -" Додати стандартне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type standard\n" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Додати симетричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type symmetric --password-file пароль.txt\n" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" -"\n" -" Додати запис користувача до правила:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" -"\n" -" Додати запис користувача:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Додати асиметричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file відкритий_ключ.pem\n" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" -"\n" -" Додати умову виключення до правила для запобігання автоматичному " -"пов’язуванню:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" -"\n" -" Додавання ще одного запису за допомогою специфічних для запису MX " -"параметрів:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" -"\n" -" Додавання ще одного запису за допомогою інтерактивного режиму (у який " -"програма переходить\n" -" у відповідь на команди dnsrecord-add, dnsrecord-mod або dnsrecord-del без " -"параметрів):\n" -" ipa dnsrecord-add example.com @\n" -" Будь ласка, виберіть тип запису ресурсу DNS, який слід додати\n" -" Найпоширенішими типами для цього типу зон є: NS, MX, LOC\n" -"\n" -" Тип запису ресурсу DNS: MX\n" -" Пріоритетність MX: 30\n" -" Обмінник MX: mail3\n" -" Назва запису: example.com\n" -" Запис MX: 10 mail1, 20 mail2, 30 mail3\n" -" Запис NS: nameserver.example.com., nameserver2.example.com.\n" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" -"\n" -" Додавання нового запису A для www.example.com, крім того, створення " -"зворотного\n" -" запису у відповідній зворотній зоні. У цьому випадку запис PTR «2» вказує " -"на\n" -" www.example.com буде створено у зоні 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" -"\n" -" Додавання нового запису PTR для www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" -"\n" -" Додавання нових записів SRV для серверів LDAP. Три чверті запитів мають\n" -" надсилатися до fast.example.com, а одна чверть — на slow.example.com.\n" -" Якщо жодна зі служб не буде доступною, перемкнутися на backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" -"\n" -" Додавання нової реверсивної зони, вказаної за допомогою мережевої IP-" -"адреси:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" -"\n" -" Додавання нової зони:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" -"\n" -" Додати другий сервер назв для example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" -"\n" -" Додати об’єкт команди sudo і записати його як дозволену команду до " -"правила:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" -"\n" -" Додавання загальносистемних прав доступу, якими можна скористатися для " -"делегування привілеїв для окремих зон:\n" -" ipa dnszone-add-permission example.com\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" -"\n" -" Додати початкову групу або групу вузлів:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" -"\n" -" Додати початкове правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Додати записи учасників сховища:\n" -" ipa vault-add-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Додати записи власників сховища:\n" -" ipa vault-add-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" -"\n" -" Після внесення цих змін три п’ятих запитів має надсилатися до\n" -" fast.example.com, а дві п’ятих — до slow.example.com.\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Дозволити користувачеві створення таблиці ключів:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" -"\n" -" Дозволити користувачеві створювати таблицю ключів:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" -"\n" -" Приклад інтерактивного режиму для команди dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" Не вказано параметр вилучення певного запису.\n" -" Вилучити усі? Так/Ні (типово «Ні»): (не вилучати усі записи)\n" -" Поточний вміст запису DNS:\n" -"\n" -" Запис A: 192.0.2.2, 192.0.2.3\n" -"\n" -" Вилучити запис A «192.0.2.2»? Так/Ні (типово «Ні»):\n" -" Вилучити запис A «192.0.2.3»? Так/Ні (типово «Ні»): y\n" -" Назва запису: www\n" -" Запис A: 192.0.2.2 (Запис A 192.0.2.3 вилучено)\n" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архівувати дані до асиметричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архівувати дані до стандартного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Архівувати дані до симетричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" -" --password-file пароль.txt\n" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" -"\n" -" Змінити правила переспрямовування для external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Змінити реєстраційні дані:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Змінити постачальника:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" -"\n" -" Перевірити стан запиту щодо підписування:\n" -" ipa cert-status 10\n" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" -"\n" -" Створити правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" -"\n" -" Створити правило:\n" -" ipa sudorule-add readfiles\n" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" -"\n" -" Делегування зони sub.example до іншого сервера назв:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" -"\n" -" Вилучити правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-del rule1\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Вилучити налаштування:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Вилучити вузол:\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Вилучити жетон:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Вилучити сховище:\n" -" ipa vault-del <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -" Вилучити правило автоматичної участі:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" -"\n" -" Вилучення зони переспрямовування external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" -"\n" -" Вилучення раніше доданого сервера назв з example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" -"\n" -" Вилучення зони example.com з усіма записами ресурсів:\n" -" ipa dnszone-del example.com\n" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" -"\n" -" Вимкнути правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-disable rule1\n" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" -"\n" -" Вимикання загального переспрямовування для вказаного піддерева:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" -" ipa host-disable test.example.com\n" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" -"\n" -" Показати правило автоматичної участі:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"\n" -" Вивести дані щодо правила прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-show rule1\n" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -" Вивести загальні налаштування прив’язки сертифікатів до профілів:\n" -" ipa certmapconfig-show\n" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Вивести налаштування сховищ:\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" -"\n" -" Увімкнути правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-enable rule1\n" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" -"\n" -" Перевірити сертифікат:\n" -" ipa cert-find --file=cert.pem --all\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Перевірити налаштування:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Перевірити жетон:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" -"\n" -" Знайти записи A зі значенням 192.0.2.2 у зоні example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" -"\n" -" Знайти усі правила прив’язування сертифікатів до профілів із вказаним " -"доменом:\n" -" ipa certmaprule-find --domain example.com\n" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Знайти усіх правила автоматичної участі:\n" -" ipa automember-find\n" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" -"\n" -" Знайти усі осиротілі правила автоматичної участі:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Знайти усі осиротілі правила автоматичної участі і вилучити їх:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Знайти усі сервери, чиї запис містять рядок «example.com»:\n" -" ipa radiusproxy-find example.com\n" +msgid "Add a new YubiKey OTP token." +msgstr "Додати новий жетон OTP YubiKey." -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" -"\n" -" Знайти записи для ресурсів з «www» у назві у зоні example.com:\n" -" ipa dnsrecord-find example.com www\n" +msgid "YubiKey slot" +msgstr "Слот YubiKey" -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Знайти параметри user-find:\n" -" ipa param-find user-find\n" +msgid "No free YubiKey slot!" +msgstr "Немає вільних слотів YubiKey!" -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" -"\n" -" Знайти зону зі словом «example» у назві домену:\n" -" ipa dnszone-find example\n" +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "Вилучаємо %(servers)s з топології реплікації, будь ласка, зачекайте…" -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" -"\n" -" Переспрямувати усі запити для зони external.example.com до іншого " -"переспрямовувача\n" -" з використанням правила «first» (надсилати запити до вибраного " -"переспрямовувача і,\n" -" якщо він не відповість, скористатися загальними кореневими серверами):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Увімкнено правило sudo «%s»" -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" -"\n" -" Створити і отримати таблицю ключів служби IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Вимкнено правило «%s»" -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" -"\n" -" Якщо налаштовано загальний переспрямовувач, усі запити, для яких цей сервер " -"не є\n" -" надійним (наприклад sub.example.com) не маршрутизуватимуться до загального\n" -" переспрямовувача.\n" -" Загальні налаштування переспрямовування можна перевизначати для окремих " -"зон.\n" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "До правила sudo «%(rule)s» додано параметр «%(option)s»" -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" -"\n" -" Показати список усіх зон переспрямовування:\n" -" ipa dnsforwardzone-find\n" +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "З правила sudo «%(rule)s» вилучено параметр «%(option)s»" -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Вивести список сховищ:\n" -" ipa vault-find\n" -" [--user <користувач>|--service <служба>|--shared]\n" +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "Топологія реплікації суфікса «%(suffix)s» у порядку." -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" -"\n" -" Змінити загальні налаштування прив’язки сертифікатів до профілів:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "Топологія реплікації суфікса «%(suffix)s» містить помилки." -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" -"\n" -" Змінити правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgid "Topology is disconnected" +msgstr "Топологію від’єднано" -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" -"\n" -" Змінити ключ асиметричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закритого ключа>\n" -" --public-key-file <файл нового відкритого ключа>\n" +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "Сервер %(srv)s не може встановити зв’язок із серверами: %(replicas)s" -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" -"\n" -" Зміна загальних налаштувань DNS і встановлення списку загальних " -"переспрямовувачів:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "Перевищено рекомендовану максимальну кількість узгоджень на репліку" -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Змінити відомості щодо вузла:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" +msgid "Maximum number of agreements per replica" +msgstr "Максимальна кількість узгоджень на репліку" -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" -"\n" -" Змінити пароль до симетричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password <старий пароль>\n" -" --new-password <новий пароль>\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "Сервер «%(srv)s» має %(n)d узгоджень із такими серверами:" -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Змінити правило автоматичної участі:\n" -" ipa automember-mod\n" +msgid "Delete a user, keeping the entry available for future use" +msgstr "Вилучити користувача, зберігаючи запис для наступного використання" -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" -"\n" -" Зміна зони таким чином, щоб дозволити динамічне оновлення для власних " -"записів вузлів у області EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgid "Delete a user" +msgstr "Вилучити користувача" -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgid "preserve and no-preserve cannot be both set" msgstr "" -"\n" -" Зміна зони таким чином, щоб дозволити перенесення зони лише для локальної " -"мережі:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"не можна одночасно встановлювати ознаку зарезервованості та " +"незарезервованості" -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" +msgid "Write certificate (chain if --chain used) to file" msgstr "" -"\n" -" Змінити опис сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --desc <опис>\n" +"Записати сертифікат (ланцюжок сертифікації, якщо використано --chain) до " +"файла" -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" -"\n" -" Змінити тип сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старий пароль/закритий ключ]\n" -" [новий пароль/відкритий ключ]\n" +msgid "Split DNS record to parts" +msgstr "Поділити запис DNS на частини" -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"\n" -" Перебудувати записи участі для усіх вузлів:\n" -" ipa automember-rebuild --type=hostgroup\n" +msgid "Please choose a type of DNS resource record to be added" +msgstr "Будь ласка, виберіть тип запису ресурсу DNS, який слід додати" -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"\n" -" Перебудувати записи участі для усіх користувачів:\n" -" ipa automember-rebuild --type=group\n" +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Найпоширенішими типами для цього типу зон є: %s\n" -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -" Перебудувати записи участі для вказаних вузлів:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" +msgid "DNS resource record type" +msgstr "Тип запису ресурсу DNS" -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" -"\n" -" Перебудувати записи участі для вказаних користувачів:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Некоректний або непідтримуваний тип. Дозволені значення: %s" -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " -"змін:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgid "No option to modify specific record provided." +msgstr "Можливості внесення змін у певний запис не передбачено." -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" -"\n" -" Вилучити сертифікат зі списку відкликання:\n" -" ipa cert-remove-hold 1032\n" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" -"\n" -" Вилучити умову з правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" -"\n" -" Вилучити типову (резервну) групу призначення:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" +msgid "Current DNS record contents:\n" +msgstr "Поточний вміст запису DNS:\n" -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" -"\n" -" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " -"cert-request --add --principal=HTTP/lion.example.com example.csr\n" +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Змінити значення «%(value)s» %(name)s?" +#, python-format msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" -"\n" -" Визначити адресу вузла за назвою, якщо адреса існує (додасть типовий\n" -" домен IPA, якщо домен не включено):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +"Пропущено %(count)d %(type)s запис. Одночасно можна змінювати лише одне " +"значення на тип запису DNS." +msgstr[1] "" +"Пропущено %(count)d %(type)s записи. Одночасно можна змінювати лише одне " +"значення на тип запису DNS." +msgstr[2] "" +"Пропущено %(count)d %(type)s записів. Одночасно можна змінювати лише одне " +"значення на тип запису DNS." msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." msgstr "" -"\n" -" Отримати вже створений сертифікат:\n" -" ipa cert-show 1032\n" +"Не надано ні --del-all, ні параметрів вилучення певного запису.\n" +"Всі підтримувані типи записів можна знайти у виводі команди help." -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Отримати дані з асиметричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів> --private-key-file private.pem\n" +msgid "No option to delete specific record provided." +msgstr "Не вказано параметр вилучення певного запису." -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Отримати дані зі стандартного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" +msgid "Delete all?" +msgstr "Вилучити все?" -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Отримати дані з симетричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" -" --password-file password.txt\n" +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Вилучити значення «%(value)s» %(name)s?" -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" -"\n" -" Відкликати сертифікат (причини визначено у RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" +msgid "Server will check DNS forwarder(s)." +msgstr "Сервер перевірятиме засоби переспрямовування DNS." -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" -"\n" -" Пошук сертифікатів за датою видання\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgid "This may take some time, please wait ..." +msgstr "Це доволі тривала дія. Будь ласка, зачекайте…" -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" -"\n" -" Пошук сертифікатів за назвою вузла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" +msgid "DNS forwarder" +msgstr "Переспрямовувач DNS" -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" -"\n" -" Пошук сертифікатів, власником яких є вказаний користувач:\n" -" ipa cert-find --user=user\n" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"\n" -" Пошук відкликаних сертифікатів за причиною:\n" -" ipa cert-find --revocation-reason=5\n" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" -"\n" -" Семантика переспрямовування у IPA збігається із семантикою BIND і залежить\n" -" від типу зони:\n" -" * Основна зона: локальний BIND надає надійні відповіді для даних у " -"заданій\n" -" зоні (включено з надійними відповідями NXDOMAIN), а переспрямовування\n" -" стосуватиметься лише запитів щодо назв за межами (записами NS) зон, що\n" -" обслуговуються локально.\n" -"\n" -" * Зона переспрямовування: зона переспрямовування не містить надійних " -"даних. BIND\n" -" переспрямовує запити, на які не вдалося отримати відповіді з локального " -"кешу, до\n" -" налаштованих переспрямовувачів.\n" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" -"\n" -" Семантика параметра --forward-policy:\n" -" * none — вимкнути переспрямовування для вказаної зони.\n" -" * first — спрямувати усі запити до налаштованих переспрямовувачів. Якщо\n" -" це не спрацює, виконати перетворення за допомогою кореневих серверів " -"DNS.\n" -" * only — спрямувати усі запити до налаштованих переспрямовувачів. Якщо\n" -" це не спрацює, повернути повідомлення про помилку.\n" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" -"\n" -" Встановити переходи типу і ролі SELinux на правило:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -" Встановити типовий варіант дій для sudo:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" -"\n" -" Встановити типову (резервну) групу призначення:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Показати сховище:\n" -" ipa vault-show <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" -"\n" -" Показати зону переспрямовування external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" +msgid "file to store DNS records in nsupdate format" +msgstr "файл для зберігання записів DNS у форматі nsupdate" msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" msgstr "" -"\n" -" Показати загальні налаштування DNS:\n" -" ipa dnsconfig-show\n" +"Неможливо показати код QR за допомогою налаштованого кодування виведення " +"результатів. Будь ласка, скористайтеся адресою ключа для налаштовування " +"вашого пристрою OTP" msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." msgstr "" -"\n" -" Показати записи для ресурсу www у зоні example.com\n" -" ipa dnsrecord-show example.com www\n" +"Ширина QR-коду перевищує розмір термінала для виведення. Будь ласка, змініть " +"розміри вашого термінала." -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" -"\n" -" Показати типову (резервну) групу призначення:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" +msgid "Synchronize an OTP token." +msgstr "Синхронізувати жетон OTP." -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Показати подробиці щодо user-find:\n" -" ipa command-show user-find\n" +msgid "User ID" +msgstr "Ід. користувача" -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" -"\n" -" Показати зону example.com:\n" -" ipa dnszone-show example.com\n" +msgid "Password" +msgstr "Пароль" -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" -"\n" -" Для полегшення внесення змін можна скористатися інтерактивним режимом:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" Можливості внесення змін у певний запис не передбачено.\n" -" Поточний вміст запису DNS:\n" -"\n" -" Запис SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Змінити запис SRV «0 3 389 fast.example.com»? Так/Ні (типово «Ні»):\n" -" Змінити запис SRV «0 1 389 slow.example.com»? Так/Ні (типово «Ні»): y\n" -" Пріоритетність SRV [0]: (зберегти типове значення)\n" -" Вага SRV [1]: 2 (змінене значення)\n" -" Порт SRV [389]: (зберегти типове значення)\n" -" Призначення SRV [slow.example.com]: (зберегти типове значення)\n" -" Пропущено 1 запис SRV. Одночасно можна змінювати лише одне значення на тип " -"запису DNS.\n" -" Назва запису: _ldap._tcp\n" -" Запис SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 389 " -"slow.example.com\n" +msgid "First Code" +msgstr "Перший код" -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" -"\n" -" За цих налаштувань усі запити щодо назв поза піддеревом example.com буде\n" -" спрямовано до загальних переспрямовувачів. Для назв у межах піддерева\n" -" example.com буде використано звичайну рекурсивну (тобто з переходом за\n" -" записами NS) процедуру визначення.\n" +msgid "Second Code" +msgstr "Другий код" -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" -"\n" -" Перевірити правила автоматичної участі:\n" -" ipa hostgroup-show webservers\n" -" Група вузлів: webservers\n" -" Опис: Web Servers\n" -" Вузли-учасники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Назва групи: devel\n" -" Опис: Developers\n" -" GID: 1004200000\n" -" Користувачі-учасники: tuser\n" +msgid "Token ID" +msgstr "Ідентифікатор жетона" -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" -"\n" -" Перевірити, чи є власником сертифіката вказаний користувач:\n" -" ipa cert-find --file=cert.pem --user=user\n" +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Не вдалося прочитати файл «%(filename)s»: %(exc)s" -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* Права доступу надають можливість читати, записувати, вилучати, шукати або\n" -" порівнювати.\n" -"* Привілеї поєднують подібні права доступу (наприклад усі права доступу,\n" -" потрібні для додавання запису користувача).\n" -"* Роль надає набір привілеїв користувачам, групам, вузлам або групам " -"вузлів.\n" +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Не вдалося розшифрувати файл «%(filename)s»: %(exc)s" -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" -"\n" -"* Вузол має існувати\n" -"* Служба має існувати (або слід скористатися параметром --add " -"дляавтоматичного додавання)\n" +msgid "Invalid credentials" +msgstr "Реєстраційні дані вказано з помилками" -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" -"\n" -"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" -"потребує вузла.\n" +msgid "Create a new vault." +msgstr "Створити сховище." -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Умова є формальним виразом, використовується 389-ds для встановлення\n" -"відповідності нового вхідного запису з правилом автоматичної участі.\n" -"Якщо умові відповідає правило включення, запис додається до відповідної\n" -"групи або групи вузлів.\n" +msgid "Vault password" +msgstr "Пароль до сховища" -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Можна визначити типову групу або групу вузлів, яку буде використано для\n" -"записів, які не відповідають жодному правилу. У випадку записів " -"користувачів\n" -"ця група буде резервною групою, оскільки усіх користувачі типово є " -"учасниками\n" -"групи, вказаної у налаштуваннях IPA.\n" +msgid "File containing the vault password" +msgstr "Файл, який містить пароль до сховища" -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" -"\n" -"Запис правил доступу уможливлює точне делегування прав. Запис прав доступу\n" -"є зручною для читання обгорткою навколо правила керування доступом 389-ds\n" -"або інструкції (ACI).\n" -"Право доступу надає право виконувати специфічне завдання, зокрема додавання\n" -"запису користувача, внесення зміни до групи тощо.\n" +msgid "File containing the vault public key" +msgstr "Файл, який містить відкритий ключ сховища" -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"Запис права доступу складається з декількох різних частин:\n" -"\n" -"1. Назви запису права доступу.\n" -"2. Призначення права доступу.\n" -"3. Права, які надаються записом.\n" +msgid "Password can be specified only for symmetric vault" +msgstr "Пароль можна вказувати лише для симетричного сховища" -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"Запис прав доступу не може містити інших прав доступу.\n" +msgid "Public key can be specified only for asymmetric vault" +msgstr "Відкритий ключ можна вказувати лише для асиметричного сховища" -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" -"створити правило без визначення групи або групи вузлів.\n" +msgid "Password specified multiple times" +msgstr "Пароль вказано декілька разів" -msgid "" -"\n" -"API Schema\n" -msgstr "" -"\n" -"Схема API\n" +msgid "Public key specified multiple times" +msgstr "Відкритий ключ вказано декілька разів" -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -" Додати новий діапазон ідентифікаторів.\n" -"\n" -" Для додавання нового діапазону ідентифікаторів вам слід завжди " -"вказувати\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Крім того, може бути надано\n" -"\n" -" --rid-base\n" -" --econdary-rid-base\n" -"\n" -" для додавання нового діапазону ідентифікаторів для локального домену і\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" для додавання нового діапазону для довіреного домену AD.\n" -"\n" -" ПОПЕРЕДЖЕННЯ:\n" -"\n" -" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " -"налаштованих\n" -" для локального домену. У поточній версії додаток DNA *не може* змінити\n" -" власні налаштування на основі локальних діапазонів, встановлених за\n" -" допомогою цього сімейства команд.\n" -"\n" -" Для внесення змін щодо локального діапазону слід змінити налаштування\n" -" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"відповідно\n" -" до параметрів нового діапазону.\n" -" " +msgid "Missing vault public key" +msgstr "Не вказано відкритого ключа сховища" -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -" Додати новий діапазон ідентифікаторів.\n" -"\n" -" Для додавання нового діапазону ідентифікаторів вам слід завжди " -"вказувати\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Крім того, може бути надано\n" -"\n" -" --rid-base\n" -" --econdary-rid-base\n" -"\n" -" для додавання нового діапазону ідентифікаторів для локального домену і\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" для додавання нового діапазону для довіреного домену AD.\n" -"\n" -" ПОПЕРЕДЖЕННЯ:\n" -"\n" -" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " -"налаштованих\n" -" для локального домену. У поточній версії додаток DNA *не може* змінити\n" -" власні налаштування на основі локальних діапазонів, встановлених за\n" -" допомогою цього сімейства команд.\n" -"\n" -" Для внесення змін щодо локального діапазону слід змінити налаштування\n" -" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"відповідно\n" -" до параметрів нового діапазону.\n" -" " +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "Некоректний або непідтримуваний відкритий ключ сховища: %s" -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -" Додати новий діапазон ідентифікаторів.\n" -"\n" -" Для додавання нового діапазону ідентифікаторів вам слід завжди " -"вказувати\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Крім того, може бути надано\n" -"\n" -" --rid-base\n" -" --econdary-rid-base\n" -"\n" -" для додавання нового діапазону ідентифікаторів для локального домену і\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" для додавання нового діапазону для довіреного домену AD.\n" -"\n" -"=======\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " -"налаштованих\n" -" для локального домену. У поточній версії додаток DNA *не може* змінити\n" -" власні налаштування на основі локальних діапазонів, встановлених за\n" -" допомогою цього сімейства команд.\n" -"\n" -" Для внесення змін щодо локального діапазону слід змінити налаштування\n" -" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"відповідно\n" -" до параметрів нового діапазону.\n" -"=======\n" -" " +msgid "Modify a vault." +msgstr "Змінити сховище." -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Додати новий запис довіри для використання.\n" -"\n" -"За допомогою цієї команди можна встановити відносини довіри з\n" -"іншим доменом, який після цього вважається «довіреним». У результаті\n" -"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" -"цього домену.\n" -"\n" -"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" -"Active Directory.\n" -"\n" -"Команду можна безпечно запускати декілька разів для одного і того самого\n" -"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" -"довіри з обох боків.\n" -"\n" -"Зауважте, що якщо команда раніше виконувалася із вказаним типом діапазону\n" -"або автоматичним визначенням типу діапазону, і ви хочете налаштувати\n" -"інший тип діапазону, ймовірно, вам доведеться вилучити першй діапазон " -"ідентифікаторів\n" -"за допомогою ipa idrange-del, перш ніж ви зможете повторити команду із " -"бажаним типом.\n" -" " +msgid "Change password" +msgstr "Змінити пароль" -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" -"\n" -"Додати новий запис довіри для використання.\n" -"\n" -"За допомогою цієї команди можна встановити відносини довіри з\n" -"іншим доменом, який після цього вважається «довіреним». У результаті\n" -"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" -"цього домену.\n" -"\n" -"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" -"Active Directory.\n" -"\n" -"Команду можна безпечно запускати декілька разів для одного і того самого\n" -"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" -"довіри з обох боків.\n" -" " +msgid "Old vault password" +msgstr "Старий пароль до сховища" -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"Крім того, передбачено вказані нижче параметри.\n" -"Встановлення одного з цих параметрів призводить до встановлення відповідних " -"атрибутів.\n" -"1. type: тип об’єкта (користувач, група тощо); встановлює фільтрування за " -"піддеревом (subtree) та фільтрування за призначенням (target filter).\n" -"2. memberof: застосовувати до учасників групи; встановлює фільтр за " -"призначенням (target filter).\n" -"3. targetgroup: надає доступ до внесення змін до певної групи (зокрема, " -"доступ до\n" -" надання можливості керування участю у групі); встановлює призначення " -"(target).\n" +msgid "File containing the old vault password" +msgstr "Файл, який містить старий пароль до сховища" -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" -"\n" -"Угоди представляються сегментами топології. Типово, сегмент топології\n" -"представляється 2 угодами реплікації — по одній для кожного напрямку, " -"наприклад\n" -"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" +msgid "New vault password" +msgstr "Новий пароль до сховища" -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" -"\n" -"Усі слжуби сертифікації, окрім служби сертифікації «IPA», можна вимикати і " -"повторно вмикати. Вимикання\n" -"служби сертифікації призводить до заборони для неї видавати сертифікати, але " -"не впливає на\n" -"чинність її сертифіката.\n" +msgid "File containing the new vault password" +msgstr "Файл, який містить новий пароль до сховища" -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"До правила sudo можна додати порядок, який керуватиме порядком\n" -"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" -"Порядок визначається числовим індексом, який не повинен повторюватися.\n" +msgid "Old vault private key" +msgstr "Старий закритий ключ сховища" -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"Асиметричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою відкритого ключа.\n" -"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" +msgid "File containing the old vault private key" +msgstr "Файл, який містить старий закритий ключ сховища" -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Правило автоматичної участі.\n" +msgid "File containing the new vault public key" +msgstr "Файл, який містить новий відкритий ключ сховища" -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -"Правило автоматичної участі.\n" -"\n" -"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" -"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" -"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " -"атрибутів.\n" -"\n" -"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" -"створити правило без визначення групи або групи вузлів.\n" -"\n" -"Умова є формальним виразом, використовується 389-ds для встановлення\n" -"відповідності нового вхідного запису з правилом автоматичної участі.\n" -"Якщо умові відповідає правило включення, запис додається до відповідної\n" -"групи або групи вузлів.\n" -"\n" -"Можна визначити типову групу або групу вузлів, яку буде використано для\n" -"записів, які не відповідають жодному правилу. У випадку записів " -"користувачів\n" -"ця група буде резервною групою, оскільки усіх користувачі типово є " -"учасниками\n" -"групи, вказаної у налаштуваннях IPA.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати початкову групу або групу вузлів:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Додати початкове правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Додати умову до правила:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Додати умову виключення до правила для запобігання автоматичному " -"пов’язуванню:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Додати вузол:\n" -" ipa host-add web1.example.com\n" -"\n" -" Додати запис користувача:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Перевірити правила автоматичної участі:\n" -" ipa hostgroup-show webservers\n" -" Група вузлів: webservers\n" -" Опис: Web Servers\n" -" Вузли-учасники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Назва групи: devel\n" -" Опис: Developers\n" -" GID: 1004200000\n" -" Користувачі-учасники: tuser\n" -"\n" -" Вилучити умову з правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Змінити правило автоматичної участі:\n" -" ipa automember-mod\n" -"\n" -" Встановити типову (резервну) групу призначення:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Вилучити типову (резервну) групу призначення:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Показати типову (резервну) групу призначення:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Знайти усіх правила автоматичної участі:\n" -" ipa automember-find\n" -"\n" -" Показати правило автоматичної участі:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Вилучити правило автоматичної участі:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" +msgid "New public key specified multiple times" +msgstr "Новий відкритий ключ вказано декілька разів" -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -"Правило автоматичної участі.\n" -"\n" -"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" -"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" -"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " -"атрибутів.\n" -"\n" -"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" -"створити правило без визначення групи або групи вузлів.\n" -"\n" -"Умова є формальним виразом, використовується 389-ds для встановлення\n" -"відповідності нового вхідного запису з правилом автоматичної участі.\n" -"Якщо умові відповідає правило включення, запис додається до відповідної\n" -"групи або групи вузлів.\n" -"\n" -"Можна визначити типову групу або групу вузлів, яку буде використано для\n" -"записів, які не відповідають жодному правилу. У випадку записів " -"користувачів\n" -"ця група буде резервною групою, оскільки усіх користувачі типово є " -"учасниками\n" -"групи, вказаної у налаштуваннях IPA.\n" -"\n" -"За допомогою програми automember-rebuild ви можете повторно застосувати " -"правила\n" -"автоматичної участі до вже створених записів, тобто перебудувати схему " -"участі.\n" -"\n" -" Додати початкову групу або групу вузлів:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Додати початкове правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Додати умову до правила:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Додати умову виключення до правила для запобігання автоматичному " -"пов’язуванню:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Додати вузол:\n" -" ipa host-add web1.example.com\n" -"\n" -" Додати запис користувача:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Перевірити правила автоматичної участі:\n" -" ipa hostgroup-show webservers\n" -" Група вузлів: webservers\n" -" Опис: Web Servers\n" -" Вузли-учасники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Назва групи: devel\n" -" Опис: Developers\n" -" GID: 1004200000\n" -" Користувачі-учасники: tuser\n" -"\n" -" Вилучити умову з правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Змінити правило автоматичної участі:\n" -" ipa automember-mod\n" -"\n" -" Встановити типову (резервну) групу призначення:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Вилучити типову (резервну) групу призначення:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Показати типову (резервну) групу призначення:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Знайти усіх правила автоматичної участі:\n" -" ipa automember-find\n" -"\n" -" Показати правило автоматичної участі:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Вилучити правило автоматичної участі:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Перебудувати записи участі для усіх користувачів:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Перебудувати записи участі для усіх вузлів:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Перебудувати записи участі для вказаних користувачів:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Перебудувати записи участі для вказаних вузлів:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" +msgid "Missing new vault public key" +msgstr "Не вказано нового відкритого ключа сховища" -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" -"\n" -"Автоматичне монтування\n" -"\n" -"Зберігає налаштування automount(8) для autofs(8) у IPA.\n" -"\n" -"Основою налаштувань автоматичного монтування є файл налаштувань auto." -"master.\n" -"Це також основне місце у IPA. Декілька налаштувань auto.master можна\n" -"зберігати у окремих місцях. Місце залежить від реалізації, типовим\n" -"є місце з назвою «default». Наприклад, ви можете створити місця для\n" -"географічної області, поверху, типу тощо.\n" -"\n" -"У автоматичного монтування є три основних типи об’єктів: місця, карти і " -"ключі.\n" -"\n" -"Місце визначає набір карт, прив’язаних у auto.master. За його допомогою\n" -"можна зберігати одразу декілька налаштувань автоматичного монтування. Місце\n" -"саме собою не є дуже цікавим, це просто початок нової карти автоматичного\n" -"монтування.\n" -"\n" -"Карта є наближеним еквівалентом окремого файла автоматичного монтування, у\n" -"ній зберігаються ключі.\n" -"\n" -"Ключ — точка монтування, пов’язана з картою.\n" -"\n" -"Під час створення нового місця автоматично створюються дві карти:\n" -"auto.master і auto.direct. auto.master — коренева карта для всіх карт\n" -"автоматичного монтування місця. auto.direct — типова карта для " -"безпосередніх\n" -"монтувань, її змонтовано до /-.\n" -"\n" -"Карта автоматичного монтування може містити ключ підмонтування. Цей ключ\n" -"визначає адресу монтування у карті, що посилається на іншу карту. Такий " -"ключ\n" -"може бути додано або за допомогою команди automountmap-add-indirect --" -"parentmap\n" -"або вручну за допомогою automountkey-add зі встановленням info у значення\n" -"\"-type=autofs :<назва карти>\".\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -"Місця:\n" -"\n" -" Створення нового місця, \"Kyiv\":\n" -" ipa automountlocation-add kyiv\n" -"\n" -" Показ нового місця:\n" -" ipa automountlocation-show kyiv\n" -"\n" -" Пошук доступних місць:\n" -" ipa automountlocation-find\n" -"\n" -" Вилучення іменованого місця автоматичного монтування:\n" -" ipa automountlocation-del kyiv\n" -"\n" -" Показ того, як мають виглядати карти автоматичного монтування, якщо б вони " -"перебували у файловій системі:\n" -" ipa automountlocation-tofiles kyiv\n" -"\n" -" Імпортування вже створених налаштувань до місця:\n" -" ipa automountlocation-import kyiv /etc/auto.master\n" -"\n" -" Спроба імпортування зазнає невдачі, якщо буде знайдено дублікати " -"записів.\n" -" Щоб програма працювала безперервно (з пропусканням всіх помилок),\n" -" скористайтеся параметром --continue.\n" -"\n" -"Карти:\n" -"\n" -" Створення карти \"auto.share\":\n" -" ipa automountmap-add kyiv auto.share\n" -"\n" -" Показ нової карти:\n" -" ipa automountmap-show kyiv auto.share\n" -"\n" -" Пошук карт у місці kyiv:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Створити непряму карту з auto.share як точкою підмонтування:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" Ця команда еквівалентна до таких команд:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Вилучення карти auto.share:\n" -" ipa automountmap-del kyiv auto.share\n" -"\n" -"Ключі:\n" -"\n" -" Створення ключа для карти auto.share у місці kyiv. Карту буде\n" -" пов’язано з раніше створеною у auto.master:\n" -" ipa automountkey-add kyiv auto.master --key=/share --info=auto.share\n" -"\n" -" Створення ключа для нашої карти auto.share, змонтованого ресурсу NFS для " -"сторінок man:\n" -" ipa automountkey-add kyiv auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Знайти всі ключі для карти auto.share:\n" -" ipa automountkey-find kyiv auto.share\n" -"\n" -" Пошук всіх безпосередніх ключів автоматичного монтування:\n" -" ipa automountkey-find kyiv --key=/-\n" -"\n" -" Вилучення ключа man для карти auto.share:\n" -" ipa automountkey-del kyiv auto.share --key=man\n" +msgid "Archive data into a vault." +msgstr "Архівувати дані до сховища." -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"За правами власності сховища поділяються на три категорії:\n" -"* приватні сховища користувачів\n" -"* сховища служб\n" -"* сховища спільного використання\n" +msgid "Binary data to archive" +msgstr "Двійкові дані для архівування" -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"За механізмами захисту сховища поділяються на три\n" -"типи:\n" -"* стандартні сховища\n" -"* симетричні сховища\n" -"* асиметричні сховища\n" +msgid "File containing data to archive" +msgstr "Файл, що містить дані для архівування" -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"Основний користувач\n" -"\n" -"Містить загальні визначення щодо користувача або користувача етапу.\n" +msgid "Override existing password" +msgstr "Перевизначити наявний пароль" -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" -"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" -"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " -"атрибутів.\n" +msgid "Input data specified multiple times" +msgstr "Вхідні дані вказано декілька разів" +#, python-format msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" msgstr "" -"\n" -"Усі записи служб сертифікації (окрім служби «IPA») можна вилучати. Вилучення " -"запису служби сертифікації\n" -"призводить до відкликання її підписувального сертифіката і вилучення " -"закритого ключа.\n" +"Об’єм даних перевищує обмеження. Поточне обмеження об’єму сховища — " +"%(limit)d Б" -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" -"\n" -"Служби сертифікації увімкнено при створенні, але їхнє використання " -"регулюється ACL служб сертифікації,\n" -"якщо у оператора немає дозволу обходити ACL служб сертифікації (CA).\n" +msgid "Invalid vault type" +msgstr "Некоректний тип сховища" -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" -"\n" -"Прив’язка сертифікатів до профілів\n" +msgid "Retrieve a data from a vault." +msgstr "Отримати дані зі сховища." -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" -"і форматі PEM.\n" +msgid "File to store retrieved data" +msgstr "Файл для зберігання отриманих даних" -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" -"\n" -"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" -"причиною відкликання, датами чинності та датою видання.\n" +msgid "Vault private key" +msgstr "Закритий ключ сховища" -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" -"\n" -"Класи для керування довіреними приєднаннями за допомогою викликів DCE-RPC\n" -"\n" -"Код цього модуля жорстко залежить від вмісту пакунка samba4-python\n" -"та обгорток для мови Python у Samba4.\n" +msgid "File containing the vault private key" +msgstr "Файл, який містить закритий ключ сховища" -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Довіра між областями\n" -"\n" -"Керування відносинами довіри між доменами IPA і Active Directory.\n" -"\n" -"З метою надання доступу користувачам віддаленого домену до ресурсів у " -"домені\n" -"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" -"підтримку довіри лише між доменами IPA і Active Directory під керуванням " -"Windows\n" -"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " -"або\n" -"новішої версії.\n" -"\n" -"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " -"доменах,\n" -"IPA і Active Directory, щоб домени могли виявити один одного. " -"Працездатність\n" -"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" -"іншому домені за допомогою записів DNS.\n" -"\n" -"Приклад:\n" -"\n" -"1. Встановити довіру між областями з Active Directory за допомогою " -"реєстраційних\n" -" даних адміністратора AD:\n" -"\n" -" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" -"password\n" -"\n" -"2. Показати список всіх наявних відносин довіри:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показати подробиці щодо певних відносин довіри:\n" -"\n" -" ipa trust-show <домен.ad>\n" -"\n" -"4. Вилучити наявні відносини довіри:\n" -"\n" -" ipa trust-del <домен.ad>\n" -"\n" -"Щойно відносини довіри буде встановлено, віддалених користувачів слід " -"прив’язати\n" -"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" -"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " -"потім\n" -"цю групу має бути включено до однієї з локальних груп POSIX.\n" -"\n" -"Приклади:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " -"POSIX\n" -" довіреного домену:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " -"ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " -"ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external для " -"перегляду їхніх SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" -"\n" -"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" -"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " -"Після\n" -"цього створені ідентифікатори використовуються для обміну даними з\n" -"довіреним доменом певного типу.\n" -"\n" -"1. Показати налаштування довіри загального рівня для типів довіри Active " -"Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" -" встановити іншу резервну основну групу (GID резервної основної групи\n" -" використовується як GID основного користувача, якщо користувача\n" -" розпізнано у домені IPA, але він не має жодного вже встановленого\n" -" основного GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Повернути для резервної основної групи значення типової прихованої групи\n" -" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" +msgid "Data" +msgstr "Дані" -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Довіра між областями\n" -"\n" -"Керування відносинами довіри між доменами IPA і Active Directory.\n" -"\n" -"З метою надання доступу користувачам віддаленого домену до ресурсів у " -"домені\n" -"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" -"підтримку довіри лише між доменами IPA і Active Directory під керуванням " -"Windows\n" -"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " -"або\n" -"новішої версії.\n" -"\n" -"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " -"доменах,\n" -"IPA і Active Directory, щоб домени могли виявити один одного. " -"Працездатність\n" -"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" -"іншому домені за допомогою записів DNS.\n" -"\n" -"Приклад:\n" -"\n" -"1. Встановити довіру між областями з Active Directory за допомогою " -"реєстраційних\n" -" даних адміністратора AD:\n" -"\n" -" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" -"password\n" -"\n" -"2. Показати список всіх наявних відносин довіри:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показати подробиці щодо певних відносин довіри:\n" -"\n" -" ipa trust-show <домен.ad>\n" -"\n" -"4. Вилучити наявні відносини довіри:\n" -"\n" -" ipa trust-del <домен.ad>\n" -"\n" -"Щойно відносини довіри буде встановлено, віддалених користувачів слід " -"прив’язати\n" -"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" -"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " -"потім\n" -"цю групу має бути включено до однієї з локальних груп POSIX.\n" -"\n" -"Приклади:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " -"POSIX\n" -" довіреного домену:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " -"ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " -"ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external для " -"перегляду їхніх SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" -"\n" -"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" -"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " -"Після\n" -"цього створені ідентифікатори використовуються для обміну даними з\n" -"довіреним доменом певного типу.\n" -"\n" -"1. Показати налаштування довіри загального рівня для типів довіри Active " -"Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" -" встановити іншу резервну основну групу (GID резервної основної групи\n" -" використовується як GID основного користувача, якщо користувача\n" -" розпізнано у домені IPA, але він не має жодного вже встановленого\n" -" основного GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Повернути для резервної основної групи значення типової прихованої групи\n" -" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" +msgid "Private key specified multiple times" +msgstr "Закритий ключ вказано декілька разів" -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" -"\n" -"Налаштування DNS, що передаються до скрипту командного рядка для " -"встановлення,\n" -"зберігаються у локальному файлі налаштувань на кожному з серверів IPA, де\n" -"налаштовано службу DNS. Ці локальні параметри можна перевизначити за " -"допомогою\n" -"загальних налаштувань, що зберігаються на сервері LDAP:\n" +msgid "Missing vault private key" +msgstr "Не вказано закритого ключа сховища" -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" -"\n" -"Налаштування сервера DNS\n" +msgid "Unrevoked" +msgstr "Відкликання скасовано" -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" -"\n" -"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " -"Спосіб\n" -"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" -"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" -"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" -"керування виконується централізовано за допомогою команд «ipa topology*».\n" +msgid "Error" +msgstr "Помилка" -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" -"\n" -"Дати обробляються як дати за Гринвічем, відповідно до дат визначених " -"усертифікатах.\n" +msgid "Input filename" +msgstr "Назва вхідного файла" -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"Вилучення або перейменування керованих прав доступу, а також зміну " -"призначення\n" -"таких прав, заборонено.\n" +msgid "File to load the certificate from." +msgstr "Файл, з якого слід завантажити сертифікат." msgid "" "\n" @@ -4096,693 +1460,922 @@ msgstr "" "слід включити всі вже створені атрибути. Під час внесення змін до aci\n" "targetattr ЗАМІНЮЄ поточні атрибути, а не додає ці атрибути.\n" +msgid "ACI name" +msgstr "Назва ACI" + +msgid "Permission" +msgstr "Права доступу" + +msgid "Permission ACI grants access to" +msgstr "ACI прав доступу надає доступ до" + +msgid "User group" +msgstr "Група користувачів" + +msgid "User group ACI grants access to" +msgstr "Група користувачів, до якої надає доступ ACI" + +msgid "Permissions" +msgstr "Права доступу" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "Права доступу, які слід надати (read, write, add, delete, all)" + +msgid "Attributes to which the permission applies" +msgstr "Атрибути, до яких застосовується правило доступу" + +msgid "Attributes" +msgstr "Атрибути" + +msgid "Type" +msgstr "Тип" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" +"тип об’єкта IPA (user (користувач), group (група), host (вузол), hostgroup " +"(група вузлів), service (служба), netgroup (мережева група))" + +msgid "Member of" +msgstr "Учасник" + +msgid "Member of a group" +msgstr "Учасник групи" + +msgid "Filter" +msgstr "Фільтр" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Припустимий фільтр LDAP (наприклад, ou=Engineering)" + +msgid "Subtree" +msgstr "Піддерево" + +msgid "Subtree to apply ACI to" +msgstr "Піддерево, до якого слід застосувати ACI" + +msgid "Target group" +msgstr "Цільова група" + +msgid "Group to apply ACI to" +msgstr "Група, до якої слід застосувати ACI" + +msgid "Target your own entry (self)" +msgstr "Виконати над власним записом (self)" + +msgid "Apply ACI to your own entry (self)" +msgstr "Застосувати ACI до вашого власного запису (self)" + +msgid "Create new ACI." +msgstr "Створити запис ACI." + +msgid "ACI prefix" +msgstr "префікс ACI" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" +"Префікс, за яким визначається тип ACI (permission, delegation, selfservice, " +"none)" + +msgid "Test the ACI syntax but don't write anything" +msgstr "Перевірити синтаксис ACI, але не виконувати запису" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Отримати і вивести всі атрибути з сервера. Стосується лише виводу команд." + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Вивести записи у формі, у якій вони зберігаються на сервері. Стосується лише " +"формату виведення даних." + +msgid "User-friendly description of action performed" +msgstr "Зручний для користувача опис дії, що виконується" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" +"Значення primary_key (основного ключа) запису, наприклад, «iivanenko» для " +"користувача" + +msgid "Delete ACI." +msgstr "Вилучити ACI." + +msgid "True means the operation was successful" +msgstr "True означає, що дію було виконано успішно" + msgid "" "\n" -"Directory Server Access Control Instructions (ACIs)\n" +"Search for ACIs.\n" "\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" +" Returns a list of ACIs\n" "\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" +" EXAMPLES:\n" "\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" "\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" "\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" "\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" +"Пошук ACI.\n" "\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" +" Повертає список ACI\n" "\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" +" ПРИКЛАДИ:\n" "\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" +" Знайти усі ACI, які застосовуються безпосередньо до учасників групи " +"ipausers:\n" +" ipa aci-find --memberof=ipausers\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" +" Знайти усі ACI, які надають доступ add:\n" +" ipa aci-find --permissions=add\n" "\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" +" Зауважте, що команда пошуку виконує пошук вказаного тексту лише у\n" +" наборі ACI, а не визначає, чи буде застосовано щось у ACI.\n" +" Наприклад, у результаті пошуку memberof=ipausers буде знайдено усі ACI,\n" +" у яких memberof містить ipausers. Але можуть існувати інші ACI, які\n" +" застосовуються до учасників цієї групи опосередковано.\n" +" " + +msgid "A string searched in all relevant object attributes" +msgstr "" +"Рядок, пошук якого відбуватиметься у всіх відповідних атрибутах об’єктів" + +msgid "Primary key only" +msgstr "Лише первинний ключ" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "Результати мають містити лише атрибут основного ключа («name»)" + +msgid "Number of entries returned" +msgstr "Кількість повернутих записів" + +msgid "True if not all results were returned" +msgstr "True, якщо повернуто було всі результати" + +msgid "Modify ACI." +msgstr "Змінити запис ACI." + +msgid "Rename an ACI." +msgstr "Перейменувати запис ACI." + +msgid "New ACI name" +msgstr "Нова назва ACI" + +msgid "Display a single ACI given an ACI name." +msgstr "Показати окремий запис ACI за вказаною назвою ACI." + +msgid "Location of the ACI" +msgstr "Розташування ACI" + +msgid "" "\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" "\n" "EXAMPLES:\n" "\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" +"Locations:\n" "\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" "\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" "\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" "\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" "\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" "\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" "\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" "\n" +"Maps:\n" "\n" -"The show command shows the raw 389-ds ACI.\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" "\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" msgstr "" "\n" -"Інструкції керування доступом до сервера каталогів (ACI)\n" +"Автоматичне монтування\n" "\n" -"ACI використовуються для надання або заборони доступу до даних. Поточну\n" -"версію цього модуля розроблено з метою надання, а не заборони доступу.\n" +"Зберігає налаштування automount(8) для autofs(8) у IPA.\n" "\n" -"Команди aci розроблено для надання прав доступу до оновлення вже\n" -"створених записів та додавання або вилучення записів. Метою ACI, які\n" -"постачаються з IPA є створення набору низькорівневих прав доступу до " -"особливих\n" -"груп, які називаються групами завдань. Ці низькорівневі права доступу\n" -"можна поєднувати у ролі, які надаватимуть ширший доступ. Ролі є іншим типом\n" -"груп, який називається групами ролей.\n" +"Основою налаштувань автоматичного монтування є файл налаштувань auto." +"master.\n" +"Це також основне місце у IPA. Декілька налаштувань auto.master можна\n" +"зберігати у окремих місцях. Місце залежить від реалізації, типовим\n" +"є місце з назвою «default». Наприклад, ви можете створити місця для\n" +"географічної області, поверху, типу тощо.\n" "\n" -"Наприклад, якщо у вас є групи завдань, які надають доступ до додавання або " -"зміни записів\n" -"користувачів, ви можете створити роль, адміністратора користувачів " -"(useradmin).\n" -"Далі, можна призначати користувачів до ролі useradmin, щоб надати їм доступ " -"до операцій,\n" -"визначених групами завдань.\n" +"У автоматичного монтування є три основних типи об’єктів: місця, карти і " +"ключі.\n" "\n" -"Ви можете створити ACI, які надаватимуть дозволи так, що користувачі групи A " -"зможуть\n" -"записувати атрибути для групи B.\n" +"Місце визначає набір карт, прив’язаних у auto.master. За його допомогою\n" +"можна зберігати одразу декілька налаштувань автоматичного монтування. Місце\n" +"саме собою не є дуже цікавим, це просто початок нової карти автоматичного\n" +"монтування.\n" "\n" -"Параметр типу визначає карту, яка застосовується до всіх записів у списках " -"користувачів, груп та\n" -"розташування вузла. Основним призначенням є надання прав доступу на " -"додавання\n" -"(створення нових записів).\n" +"Карта є наближеним еквівалентом окремого файла автоматичного монтування, у\n" +"ній зберігаються ключі.\n" "\n" -"ACI складається з трьох частин:\n" -"1. призначення\n" -"2. прав доступу\n" -"3. правил прив’язування\n" +"Ключ — точка монтування, пов’язана з картою.\n" "\n" -"Призначення — набір правил, який визначає, які з об’єктів LDAP є " -"призначенням.\n" -"Призначення може включати список атрибутів, області цієї ієрархії LDAP або\n" -"фільтра LDAP.\n" +"Під час створення нового місця автоматично створюються дві карти:\n" +"auto.master і auto.direct. auto.master — коренева карта для всіх карт\n" +"автоматичного монтування місця. auto.direct — типова карта для " +"безпосередніх\n" +"монтувань, її змонтовано до /-.\n" "\n" -"До призначень включаються:\n" -"- attrs: список атрибутів, яких стосується призначення;\n" -"- type: тип об’єктів (користувач, група, вузол, служба тощо);\n" -"- memberof: учасники групи;\n" -"- targetgroup: надати доступ до зміни певної групи. Ця частина в основному\n" -" розроблена для надання дозволу користувачам на додавання або вилучення " -"учасників\n" -" певної групи.\n" -"- filter: чинний фільтр LDAP, використаний для звуження області " -"призначення.\n" -"- subtree: використовується для застосування правила для цілого набору " -"об’єктів.\n" -" Наприклад, для надання доступу на додавання користувачів вам слід надати " -"право\n" -" доступу \"add\" до підієрархії\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. Параметр subtree\n" -" є безпечним для об’єктів, які можуть не стосуватися параметром type.\n" -"\n" -"Права доступу визначають набір доступних ACI записів, можуть містити з " -"одного\n" -"або декількох варіантів:\n" -"1. write - запис одного або декількох атрибутів;\n" -"2. read - читання одного або декількох атрибутів;\n" -"3. add - додавання нового запису до ієрархії;\n" -"4. delete - вилучення наявного запису;\n" -"5. all - надання всіх прав доступу.\n" -"\n" -"Зауважте відмінність між атрибутами та записами. Права доступу є " -"незалежними,\n" -"отже можливість додавання користувача не означає можливості зміни " -"параметрів\n" -"його облікового запису.\n" -"\n" -"Правило прив’язування визначає, кому це ACI надає права доступу. Сервер " -"LDAP\n" -"надає можливість визначати будь-який коректний запис LDAP, але вам варто " -"використовувати\n" -"групи завдань, щоб права можна було без проблем спільно використовувати для " -"декількох ролей.\n" -"\n" -"Повніший опис керування доступом можна знайти тут:\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" +"Карта автоматичного монтування може містити ключ підмонтування. Цей ключ\n" +"визначає адресу монтування у карті, що посилається на іншу карту. Такий " +"ключ\n" +"може бути додано або за допомогою команди automountmap-add-indirect --" +"parentmap\n" +"або вручну за допомогою automountkey-add зі встановленням info у значення\n" +"\"-type=autofs :<назва карти>\".\n" "\n" "ПРИКЛАДИ:\n" "\n" -"ЗАУВАЖЕННЯ: у поточній версії ACI додаються за допомогою додатка прав " -"доступу.\n" -"Ці приклади мають продемонструвати роботу різних параметрів, але у поточній\n" -"версії це завдання виконується за допомогою команди надання прав доступу " -"(останній приклад).\n" +"Місця:\n" "\n" -" Додавання ACI для надання доступу групі \"secretaries\" до оновлення адреси " -"будь-якого користувача:\n" -" ipa group-add --desc=\"Офісні секретарки\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Секретарки записують адреси\"\n" +" Створення нового місця, \"Kyiv\":\n" +" ipa automountlocation-add kyiv\n" "\n" -" Показ нового ACI:\n" -" ipa aci-show --prefix=none \"Секретарки записують адреси\"\n" +" Показ нового місця:\n" +" ipa automountlocation-show kyiv\n" "\n" -" Додавання ACI, яке надасть доступ учасникам групи \"addusers\" доступ до " -"додавання нових користувачів:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Додавання користувачів\"\n" +" Пошук доступних місць:\n" +" ipa automountlocation-find\n" "\n" -" Додавання ACI, яке надасть доступ учасникам групи \"editors\" до керування " -"записами\n" -"учасників групи \"admins\":\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Редактори керують адміністраторами\"\n" +" Вилучення іменованого місця автоматичного монтування:\n" +" ipa automountlocation-del kyiv\n" "\n" -" Додавання ACI, яке надасть доступ учасникам групи \"admins\" до зміни " -"поштової адреси та індексу користувачів групи \"editors\":\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"Адміністратори редагують адреси " -"редакторів\"\n" +" Показ того, як мають виглядати карти автоматичного монтування, якщо б вони " +"перебували у файловій системі:\n" +" ipa automountlocation-tofiles kyiv\n" "\n" -" Додавання ACI, яке надасть доступ групі \"admins\" до зміни поштової адреси " -"та індексу всіх, хто працює начальником:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Зміна адрес тих, хто працює начальником\"\n" +" Імпортування вже створених налаштувань до місця:\n" +" ipa automountlocation-import kyiv /etc/auto.master\n" "\n" -" Додавання повністю нового типу записів до IPA, який не визначається жодним " -"з параметрів --type, створення прав доступу:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Додавання помаранчевих записів\" " -"add_orange\n" +" Спроба імпортування зазнає невдачі, якщо буде знайдено дублікати " +"записів.\n" +" Щоб програма працювала безперервно (з пропусканням всіх помилок),\n" +" скористайтеся параметром --continue.\n" "\n" +"Карти:\n" "\n" -"Команда show показує прості 389-ds ACI.\n" +" Створення карти \"auto.share\":\n" +" ipa automountmap-add kyiv auto.share\n" "\n" -"ВАЖЛИВО: під час зміни атрибутів призначення вже створеного ACI вам\n" -"слід включити всі вже створені атрибути. Під час внесення змін до aci\n" -"targetattr ЗАМІНЮЄ поточні атрибути, а не додає ці атрибути.\n" +" Показ нової карти:\n" +" ipa automountmap-show kyiv auto.share\n" +"\n" +" Пошук карт у місці kyiv:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Створити непряму карту з auto.share як точкою підмонтування:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" Ця команда еквівалентна до таких команд:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Вилучення карти auto.share:\n" +" ipa automountmap-del kyiv auto.share\n" +"\n" +"Ключі:\n" +"\n" +" Створення ключа для карти auto.share у місці kyiv. Карту буде\n" +" пов’язано з раніше створеною у auto.master:\n" +" ipa automountkey-add kyiv auto.master --key=/share --info=auto.share\n" +"\n" +" Створення ключа для нашої карти auto.share, змонтованого ресурсу NFS для " +"сторінок man:\n" +" ipa automountkey-add kyiv auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Знайти всі ключі для карти auto.share:\n" +" ipa automountkey-find kyiv auto.share\n" +"\n" +" Пошук всіх безпосередніх ключів автоматичного монтування:\n" +" ipa automountkey-find kyiv --key=/-\n" +"\n" +" Вилучення ключа man для карти auto.share:\n" +" ipa automountkey-del kyiv auto.share --key=man\n" + +msgid "Key" +msgstr "Ключ" + +msgid "Automount key name." +msgstr "Назва ключа автоматичного монтування." + +msgid "Mount information" +msgstr "Інформація щодо монтування" + +msgid "description" +msgstr "опис" + +msgid "Location" +msgstr "Запис" + +msgid "Automount location name." +msgstr "Адреса автомонтування." + +msgid "Map" +msgstr "Карта" + +msgid "Automount map name." +msgstr "Назва карти автоматичного монтування." + +msgid "Description" +msgstr "Опис" + +msgid "Create a new automount key." +msgstr "Створити ключ автоматичного монтування." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Встановити атрибут для пари назва/значення. Формат: атрибут=значення.\n" +"Для атрибутів з багатьма значенням команда замінює вже вказані значення." + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Додати пару атрибут/значення. Формат: атрибут=значення. Атрибут має бути\n" +"частиною схеми." + +msgid "Delete an automount key." +msgstr "Вилучити ключ автоматичного монтування." + +msgid "Continuous mode: Don't stop on errors." +msgstr "Режим неперервної роботи: не зупинятися у разі помилок." + +msgid "List of deletions that failed" +msgstr "Список вилучень, які не вдалося виконати" + +msgid "Search for an automount key." +msgstr "Виконати пошук ключа автоматичного монтування." + +msgid "Time Limit" +msgstr "Обмеження часу" + +msgid "Time limit of search in seconds" +msgstr "Обмеження часу пошуку у секундах" + +msgid "Size Limit" +msgstr "Обмеження розміру" + +msgid "Maximum number of entries returned" +msgstr "Максимальна кількість повернутих записів" + +msgid "Modify an automount key." +msgstr "Змінити ключ автоматичного монтування." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Вилучити парну атрибут-значення. Цей параметр буде використано\n" +"останнім, після всіх встановлень і додавань." + +msgid "Rights" +msgstr "Права" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Показати права доступу цього запису (потребує --all). Докладніше про це " +"можна дізнатися зі сторінки довідника (man) ipa." + +msgid "New mount information" +msgstr "Інформація нового монтування" + +msgid "Rename" +msgstr "Перейменувати" + +msgid "Rename the automount key object" +msgstr "Перейменувати об’єкт ключа автоматичного монтування" + +msgid "Display an automount key." +msgstr "Показати ключ автоматичного монтування." + +msgid "Create a new automount location." +msgstr "Створити новий запис автоматичного монтування." + +msgid "Delete an automount location." +msgstr "Вилучити запис автоматичного монтування." + +msgid "Search for an automount location." +msgstr "Шукати запис автоматичного монтування." + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "Результати мають містити лише атрибут основного ключа («location»)" + +msgid "Display an automount location." +msgstr "Показати запис автоматичного монтування." + +msgid "Generate automount files for a specific location." +msgstr "Створити файли automount для певної адреси." + +msgid "Create a new automount map." +msgstr "Створити карту автомонтування." + +msgid "Create a new indirect mount point." +msgstr "Створити опосередковану точку монтування." + +msgid "Mount point" +msgstr "Точка монтування" + +msgid "Parent map" +msgstr "Батьківська карта" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" +"Назва батьківської карти автомонтування (типове значення: auto.master)." + +msgid "Delete an automount map." +msgstr "Вилучити карту автоматичного монтування." + +msgid "Search for an automount map." +msgstr "Виконати пошук карти автоматичного монтування." + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "Результати мають містити лише атрибут основного ключа («map»)" + +msgid "Modify an automount map." +msgstr "Змінити карту автоматичного монтування." + +msgid "Display an automount map." +msgstr "Показати карту автоматичного монтування." msgid "" "\n" -"Domain Name System (DNS)\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" msgstr "" "\n" -"Система назв доменів (DNS)\n" +"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " +"виклику процедури\n" +"\n" +"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"де у файлі batch_request.json міститься десь такий код:\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " +"спосіб. На початку ви побачите таке:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далі буде вкладена відповідь для кожного методу команди IPA, який було " +"надіслано у запиті\n" + +msgid "Nested Methods to execute" +msgstr "Вкладені методи, які слід виконати" msgid "" "\n" -"Domain Name System (DNS)\n" +"Server configuration\n" "\n" -"Manage DNS zone and resource records.\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" "\n" +"NOTES:\n" "\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" "\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " +"Some attributes are read-only, provided only for information purposes. " "These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" +"include:\n" "\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" "\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" msgstr "" "\n" -"Система назв доменів (DNS)\n" +"Налаштування сервера\n" "\n" -"Керування записами зон та ресурсів DNS.\n" +"Керування типовими значеннями, які використовує IPA, та деякими з\n" +"придатних до зміни параметрів.\n" "\n" -"ВИКОРИСТАННЯ СТРУКТУРОВАНИХ ПАРАМЕТРІВ ДЛЯ ОКРЕМИХ ТИПІВ\n" +"ЗАУВАЖЕННЯ:\n" "\n" -"Існує багато структурованих типів RR DNS, для яких дані DNS, що " -"зберігаються\n" -"на сервері LDAP, не є скалярним значенням, наприклад дані щодо IP-адресу " -"або\n" -"назву домену, а структурою даних, яка часто може бути складною. Прикладом\n" -"може бути запис LOC [RFC1876], який складається з багатьох обов’язкових і\n" -"необов’язкових частин (градусів, мінут, секунд широти і довготи, висоти\n" -"та похибки).\n" +"Тут зберігається значення параметра сповіщення щодо паролів\n" +"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" +"не використовується для сповіщення користувачів щодо завершення строку дії\n" +"пароля.\n" "\n" -"Робота з такими записами DNS без помилки і введення некоректного значення\n" -"може бути складною. Модуль DNS надає у ваше розпорядження абстракцію над\n" -"цими необробленими записами і спосіб керування кожним з типів RR за\n" -"допомогою специфічних параметрів. Для кожного з підтримуваних типів\n" -"RR у модулі DNS передбачено стандартний параметр для роботи із\n" -"необробленими записами за допомогою формату --<тип_rr>-rec, наприклад,\n" -"--mx-rec та зі спеціальними параметрами для кожної із частин структури RR\n" -"за допомогою формату --<тип_rr>-<назва_частини>, наприклад --mx-preference\n" -"та --mx-exchanger.\n" +"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" +"інформування. Серед цих атрибутів:\n" "\n" -"Під час додавання запису можна скористатися специфічними для RR параметрами\n" -"або стандартним параметром для необробленого значення. Втім, поєднувати\n" -"ці варіанти у одній дії із додавання не можна. Під час внесення змін до\n" -"наявного запису можна скористатися для зміни однієї частини запису DNS\n" -"новими специфічними параметрами RR, причому для визначення зміненого\n" -"значення буде використано стандартний варіант необробленого значення.\n" -"У наведеному нижче прикладі продемонстровано зміну пріоритетності запису\n" -"MX з 0 на 1 у записі без внесення змін до обмінника:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" +" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" +" встановлення.\n" +"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" +" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" "\n" +"Під час встановлення списку пріоритетності для користувачів SELinux може " +"виникнути\n" +"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Додавання нової зони:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" +" Показати основні налаштування сервера:\n" +" ipa config-show\n" "\n" -" Додавання загальносистемних прав доступу, якими можна скористатися для " -"делегування привілеїв для окремих зон:\n" -" ipa dnszone-add-permission example.com\n" +" Показати всі параметри налаштування:\n" +" ipa config-show --all\n" "\n" -" Зміна зони таким чином, щоб дозволити динамічне оновлення для власних " -"записів вузлів у області EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +" Змінити максимальну довжину імені користувача на 99 символів:\n" +" ipa config-mod --maxusername=99\n" "\n" -" Ця команда еквівалентна до такої команди:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" +" Збільшити типовий час і максимальне обмеження на розмір пошуку\n" +" сервера IPA:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" "\n" -" Зміна зони таким чином, щоб дозволити перенесення зони лише для локальної " -"мережі:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +" Встановити типовий домен електронної пошти користувачів:\n" +" ipa config-mod --emaildomain=example.com\n" "\n" -" Додавання нової реверсивної зони, вказаної за допомогою мережевої IP-" -"адреси:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" +" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" +" працездатною:\n" +" ipa config-mod --enable-migration=TRUE\n" "\n" -" Додати другий сервер назв для example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +" Визначити пріоритетність користувачів у карті SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "Maximum username length" +msgstr "Максимальна довжина імені користувача" + +msgid "Home directory base" +msgstr "Адреса домашніх каталогів" + +msgid "Default location of home directories" +msgstr "Типова адреса домашніх каталогів" + +msgid "Default shell" +msgstr "Типова оболонка" + +msgid "Default shell for new users" +msgstr "Типова оболонка для нових користувачів" + +msgid "Default users group" +msgstr "Типова група користувачів" + +msgid "Default group for new users" +msgstr "Типова група для нових користувачів" + +msgid "Default e-mail domain" +msgstr "Типовий домен ел. пошти" + +msgid "Search time limit" +msgstr "Обмеження часу пошуку" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" +"Максимальний проміжок часу (у секундах) для виконання однієї дії з пошуку " +"(>0, -1 — без обмежень)" + +msgid "Search size limit" +msgstr "Обмеження розміру пошуку" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Максимальна кількість записів результатів пошуку (-1 — без обмежень)" + +msgid "User search fields" +msgstr "Поля пошуку користувачів" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" +"Відокремлений комами список полів, за якими виконуватиметься пошук " +"користувачів" + +msgid "Group search fields" +msgstr "Поля пошуку груп" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Відокремлений комами список полів, за якими виконуватиметься пошук груп" + +msgid "Enable migration mode" +msgstr "Увімкнути режим міграції" + +msgid "Certificate Subject base" +msgstr "Базовий об’єкт сертифікації" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "Основа для створення записів об’єктів сертифікації (OU=Test,O=Example)" + +msgid "Default group objectclasses" +msgstr "Типові класи об’єктів групи" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Типові класи об’єктів груп (список класів, відокремлених комами)" + +msgid "Default user objectclasses" +msgstr "Типові класи об’єктів користувачів" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" +"Типові класи об’єктів користувачів (список класів, відокремлених комами)" + +msgid "Password Expiration Notification (days)" +msgstr "Сповіщення про вичерпання строку дії пароля (у днях)" + +msgid "Number of days's notice of impending password expiration" +msgstr "Сповіщення про кількість днів, які залишилися до завершення дії пароля" + +msgid "Password plugin features" +msgstr "Можливості додатка паролів" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Додаткові хеші для створення у додатку паролів" + +msgid "SELinux user map order" +msgstr "Порядок карт користувачів SELinux" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" +"Порядок у збільшенні пріоритетності користувачів SELinux, відокремлений $" + +msgid "Default SELinux user" +msgstr "Типовий користувач SELinux" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" +"Типовий користувач SELinux, якщо не буде знайдено відповідного у правилі " +"карти SELinux" + +msgid "Default PAC types" +msgstr "Типові типи PAC" + +msgid "Default types of PAC supported for services" +msgstr "Типові типи PAC, підтримувані для служб" + +msgid "Default user authentication types" +msgstr "Типові типи розпізнавання користувачів" + +msgid "Default types of supported user authentication" +msgstr "Типові типи підтримуваного розпізнавання користувачів" + +msgid "Modify configuration options." +msgstr "Змінити параметри налаштування." + +msgid "Show the current configuration." +msgstr "Показати поточні налаштування." + +msgid "" "\n" -" Додавання поштового сервера для example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"Group to Group Delegation\n" "\n" -" Додавання ще одного запису за допомогою специфічних для запису MX " -"параметрів:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" "\n" -" Додавання ще одного запису за допомогою інтерактивного режиму (у який " -"програма переходить\n" -" у відповідь на команди dnsrecord-add, dnsrecord-mod або dnsrecord-del без " -"параметрів):\n" -" ipa dnsrecord-add example.com @\n" -" Будь ласка, виберіть тип запису ресурсу DNS, який слід додати\n" -" Найпоширенішими типами для цього типу зон є: NS, MX, LOC\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" "\n" -" Тип запису ресурсу DNS: MX\n" -" Пріоритетність MX: 30\n" -" Обмінник MX: mail3\n" -" Назва запису: example.com\n" -" Запис MX: 10 mail1, 20 mail2, 30 mail3\n" -" Запис NS: nameserver.example.com., nameserver2.example.com.\n" +"EXAMPLES:\n" "\n" -" Вилучення раніше доданого сервера назв з example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" -" Додавання запису LOC для example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" -" Додавання нового запису A для www.example.com, крім того, створення " -"зворотного\n" -" запису у відповідній зворотній зоні. У цьому випадку запис PTR «2» вказує " -"на\n" -" www.example.com буде створено у зоні 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-" -"reverse\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" "\n" -" Додавання нового запису PTR для www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" "\n" -" Додавання нових записів SRV для серверів LDAP. Три чверті запитів мають\n" -" надсилатися до fast.example.com, а одна чверть — на slow.example.com.\n" -" Якщо жодна зі служб не буде доступною, перемкнутися на backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" +"Міжгрупове уповноваження\n" "\n" -" Для полегшення внесення змін можна скористатися інтерактивним режимом:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" Можливості внесення змін у певний запис не передбачено.\n" -" Поточний вміст запису DNS:\n" +"Права доступу може бути точно налаштовано. Правила керування доступом\n" +"або інструкції (ACI), надання дозволу на виконання певних завдань, зокрема\n" +"додавання користувача, внесення змін до групи тощо.\n" "\n" -" Запис SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" +"Міжгрупові уповноваження надають учасникам однієї групи можливість\n" +"оновлювати набір атрибутів учасників іншої групи.\n" "\n" -" Змінити запис SRV «0 3 389 fast.example.com»? Так/Ні (типово «Ні»):\n" -" Змінити запис SRV «0 1 389 slow.example.com»? Так/Ні (типово «Ні»): y\n" -" Пріоритетність SRV [0]: (зберегти типове значення)\n" -" Вага SRV [1]: 2 (змінене значення)\n" -" Порт SRV [389]: (зберегти типове значення)\n" -" Призначення SRV [slow.example.com]: (зберегти типове значення)\n" -" Пропущено 1 запис SRV. Одночасно можна змінювати лише одне значення на тип " -"запису DNS.\n" -" Назва запису: _ldap._tcp\n" -" Запис SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 389 " -"slow.example.com\n" +"ПРИКЛАДИ:\n" "\n" -" Після внесення цих змін три п’ятих запитів має надсилатися до\n" -" fast.example.com, а дві п’ятих — до slow.example.com.\n" +" Додати правило уповноваження, яке надасть змогу керівникам (managers)\n" +" редагувати адреси співробітників:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" -" Приклад інтерактивного режиму для команди dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" Не вказано параметр вилучення певного запису.\n" -" Вилучити усі? Так/Ні (типово «Ні»): (не вилучати усі записи)\n" -" Поточний вміст запису DNS:\n" +" Під час керування списком атрибутів слід включати всі атрибути списку\n" +" разом з вже створеними. Додавання до списку postalCode:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" -" Запис A: 192.0.2.2, 192.0.2.3\n" +" Показ нашого оновленого правила:\n" +" ipa delegation-show \"managers edit employees' street\"\n" "\n" -" Вилучити запис A «192.0.2.2»? Так/Ні (типово «Ні»):\n" -" Вилучити запис A «192.0.2.3»? Так/Ні (типово «Ні»): y\n" -" Назва запису: www\n" -" Запис A: 192.0.2.2 (Запис A 192.0.2.3 вилучено)\n" -"\n" -" Показати зону example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Знайти зону зі словом «example» у назві домену:\n" -" ipa dnszone-find example\n" -"\n" -" Знайти записи для ресурсів з «www» у назві у зоні example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Знайти записи A зі значенням 10.10.0.1 у зоні example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Показати записи для ресурсу www у зоні example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Делегування зони sub.example до іншого сервера назв:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Якщо налаштовано загальний переспрямовувач, усі запити, для яких цей сервер " -"не є\n" -" надійним (наприклад sub.example.com) не маршрутизуватимуться до загального\n" -" переспрямовувача. Щоб змінити поведінку лише для зони example.com\n" -" і переспрямувати запит безпосередньо до ns.sub.example.com, можна вимкнути\n" -" загальне переспрямовування для окремої зони:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Переспрямувати усі запити для зони external.com до іншого сервера назв\n" -" за правилами «first» (надіслати запити до вибраного переспрямовувача,\n" -" а якщо він не відповів, використати загальні засоби визначення):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Вилучити зону example.com із усіма записами ресурсів:\n" -" ipa dnszone-del example.com\n" -"\n" -" Визначити адресу за назвою вузла, щоб визначити, чи він існує (додасть\n" -" типовий домен IPA, якщо його не включено):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"ЗАГАЛЬНІ НАЛАШТУВАННЯ DNS\n" -"\n" -"Налаштування DNS, що передаються до скрипту командного рядка для " -"встановлення,\n" -"зберігаються у локальному файлі налаштувань на кожному з серверів IPA, де\n" -"налаштовано службу DNS. Ці локальні параметри можна перевизначити за " -"допомогою\n" -"загальних налаштувань, що зберігаються на сервері LDAP:\n" -"\n" -" Показати загальні налаштування DNS:\n" -" ipa dnsconfig-show\n" -"\n" -" Зміна загальних налаштувань DNS і встановлення списку загальних " -"переспрямовувачів:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +" Вилучення правила:\n" +" ipa delegation-del \"managers edit employees' street\"\n" + +msgid "Delegation name" +msgstr "Назва уповноваження" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" +"Права доступу, які слід надати (read, write). Типовими є права доступу write." + +msgid "Attributes to which the delegation applies" +msgstr "Атрибути, до яких застосовується уповноваження" + +msgid "Member user group" +msgstr "Учасник групи користувачів" + +msgid "User group to apply delegation to" +msgstr "Група користувачів, до якої слід застосувати уповноваження" + +msgid "Add a new delegation." +msgstr "Додати нове уповноваження." + +msgid "Delete a delegation." +msgstr "Вилучити уповноваження." + +msgid "Search for delegations." +msgstr "Пошук уповноважень." + +msgid "Modify a delegation." +msgstr "Змінити уповноваження." + +msgid "Display information about a delegation." +msgstr "Показати дані щодо уповноваження." msgid "" "\n" @@ -5295,1602 +2888,820 @@ msgstr "" "переспрямовувачів:\n" " ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"РЕЄСТРАЦІЯ:\n" -"\n" -"Передбачено три сценарії реєстрації нових клієнтів:\n" -"\n" -"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" -" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" -" учасником групи admins.\n" -"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" -" існувати. Обмежений адміністратор виконує роль з привілеями\n" -" Host Enrollment.\n" -"3. Вузол було створено з одноразовим паролем.\n" +msgid "Global forwarders" +msgstr "Загальні переспрямовувачі" msgid "" -"\n" -"EXAMPLES:\n" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" msgstr "" -"\n" -"ПРИКЛАДИ:\n" +"Переспрямовувачі загального рівня. Для кожного переспрямовувача можна " +"вказати нетиповий порт за допомогою стандартного формату: «IP_АДРЕСА port " +"ПОРТ»" + +msgid "Forward policy" +msgstr "Правила переспрямовування" msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." msgstr "" -"\n" -"Іменування\n" -"\n" -"Керування іменуванням для клієнтських комп’ютерів\n" -"\n" -"Іменуванням можна керувати або шляхом реєстрації на сервері іменування\n" -"з визначенням імені користувача і пароля, або вручну, імпортуванням " -"сертифікатів\n" -"іменування. Сертифікат іменування містить вбудовані дані, зокрема те, як\n" -"слід іменувати продукт, щодо кількості та дат чинності.\n" -"\n" -"Сервер іменування керує кількістю доступних іменувань клієнтів.\n" -"Для позначення іменувань як таких, що використовуються сервером IPA, ви " -"надаєте\n" -"кількість, а система позначає їх як використані на сервері іменування.\n" -"\n" -" Зареєструватися на сервері іменування:\n" -" ipa entitle-register consumer\n" -"\n" -" Імпортувати сертифікат іменування:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Показати поточні іменування:\n" -" ipa entitle-status\n" -"\n" -" Отримати подробиці щодо сертифікатів іменування:\n" -" ipa entitle-get\n" -"\n" -" Вжити деякі іменування із сервера іменувань:\n" -" ipa entitle-consume 50\n" -"\n" -"Реєстраційним ідентифікатором є унікальний ідентифікатор (UUID). Цей " -"ідентифікатор\n" -"буде ІМПОРТОВАНО, якщо ви скористалися entitle-import.\n" -"\n" -"Зміни у /etc/rhsm/rhsm.conf для набуття чинності потребуватимуть перезапуску " -"служби httpd.\n" +"Загальні правил переспрямовування. Щоб вимкнути будь-які переспрямовувачі на " +"загальному рівні, встановіть значення «none»." + +msgid "Allow PTR sync" +msgstr "Дозволити PTR-синхронізацію" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "Дозволити синхронізацію прямих (A, AAAA) і зворотних (PTR) записів" + +msgid "Zone refresh interval" +msgstr "Інтервал між оновленнями даних зони" + +msgid "Zone name" +msgstr "Назва зони" + +msgid "Zone name (FQDN)" +msgstr "Назва зони (FQDN)" + +msgid "Reverse zone IP network" +msgstr "Мережа IP зворотної зони" + +msgid "IP network to create reverse zone name from" +msgstr "Мережа IP для створення зворотних назв зони" + +msgid "Active zone" +msgstr "Активна зона" + +msgid "Is zone active?" +msgstr "Чи є зона активною?" + +msgid "Zone forwarders" +msgstr "Переспрямовувачі зон" msgid "" -"\n" -"Get information about installed IPA servers.\n" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" msgstr "" -"\n" -"Отримати дані щодо встановлених серверів IPA.\n" +"Переспрямовувачі для окремої зони. Можна вказати нетиповий порт для кожного " +"переспрямовувача у стандартному форматі: «IP_АДРЕСА port ПОРТ»" msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." msgstr "" -"\n" -"Отримати стан ролей (сервер DNS, CA тощо), що надається основними серверами " -"IPA.\n" +"Умовні правила переспрямування для окремої зони. Встановіть значення «none» " +"для вимикання переспрямовувача загального рівня для цієї зони. Якщо ви " +"встановите це значення, умовні переспрямовувачі зони не братимуться до уваги." + +msgid "Record name" +msgstr "Назва запису" + +msgid "Time to live" +msgstr "Строк дії" + +msgid "Records" +msgstr "Записи" + +msgid "Record type" +msgstr "Тип запису" + +msgid "Record data" +msgstr "Дані запису" + +msgid "A record" +msgstr "запис A" + +msgid "Raw A records" +msgstr "Прості записи A" + +msgid "A IP Address" +msgstr "IP-адреса A" + +msgid "IP Address" +msgstr "IP-адреса" + +msgid "A Create reverse" +msgstr "Створити зворотний A" + +msgid "Create reverse record for this IP Address" +msgstr "Створити зворотний запис для цієї IP-адреси" + +msgid "AAAA record" +msgstr "запис AAAA" + +msgid "Raw AAAA records" +msgstr "Прості записи AAAA" + +msgid "AAAA IP Address" +msgstr "IP-адреса AAAA" + +msgid "AAAA Create reverse" +msgstr "Створити зворотний запис AAAA" + +msgid "A6 record" +msgstr "Запис A6" + +msgid "Raw A6 records" +msgstr "Прості записи A6" + +msgid "A6 Record data" +msgstr "Дані запису A6" + +msgid "AFSDB record" +msgstr "Запис AFSDB" + +msgid "Raw AFSDB records" +msgstr "Прості записи AFSDB" + +msgid "AFSDB Subtype" +msgstr "Підтип AFSDB" + +msgid "Subtype" +msgstr "Підтип" + +msgid "AFSDB Hostname" +msgstr "Назва вузла AFSDB" + +msgid "Hostname" +msgstr "Назва вузла" + +msgid "APL record" +msgstr "запис APL" + +msgid "Raw APL records" +msgstr "Прості записи APL" + +msgid "CERT record" +msgstr "запис CERT" + +msgid "Raw CERT records" +msgstr "Прості записи CERT" + +msgid "CERT Certificate Type" +msgstr "Тип сертифіката CERT" + +msgid "Certificate Type" +msgstr "Тип сертифіката" + +msgid "CERT Key Tag" +msgstr "Мітка ключа CERT" + +msgid "Key Tag" +msgstr "Мітка ключа" + +msgid "CERT Algorithm" +msgstr "Алгоритм CERT" + +msgid "Algorithm" +msgstr "Алгоритм" + +msgid "CERT Certificate/CRL" +msgstr "Сертифікат або CRL CERT" + +msgid "Certificate/CRL" +msgstr "Сертифікат/CRL" + +msgid "CNAME record" +msgstr "запис CNAME" + +msgid "Raw CNAME records" +msgstr "Прості записи CNAME" + +msgid "CNAME Hostname" +msgstr "Назва вузла CNAME" + +msgid "A hostname which this alias hostname points to" +msgstr "Назва вузла на яку вказує цей псевдонім вузла" + +msgid "DHCID record" +msgstr "запис DHCID" + +msgid "Raw DHCID records" +msgstr "Прості записи DHCID" + +msgid "DLV record" +msgstr "Запис DLV" + +msgid "Raw DLV records" +msgstr "Прості записи DLV" + +msgid "DLV Key Tag" +msgstr "Мітка ключа DLV" + +msgid "DLV Algorithm" +msgstr "Алгоритм DLV" + +msgid "DLV Digest Type" +msgstr "Тип контрольної суми DLV" + +msgid "Digest Type" +msgstr "Тип контрольної суми" + +msgid "DLV Digest" +msgstr "Контрольна сума DLV" + +msgid "Digest" +msgstr "Контрольна сума" + +msgid "DNAME record" +msgstr "Запис DNAME" + +msgid "Raw DNAME records" +msgstr "Прості записи DNAME" + +msgid "DNAME Target" +msgstr "Ціль DNAME" + +msgid "Target" +msgstr "Ціль" + +msgid "DNSKEY record" +msgstr "Запис DNSKEY" + +msgid "Raw DNSKEY records" +msgstr "Прості записи DNSKEY" + +msgid "DS record" +msgstr "Запис DS" + +msgid "Raw DS records" +msgstr "Прості записи DS" + +msgid "DS Key Tag" +msgstr "Мітка ключа DS" + +msgid "DS Algorithm" +msgstr "Алгоритм DS" + +msgid "DS Digest Type" +msgstr "Тип контрольної суми DS" + +msgid "DS Digest" +msgstr "Контрольна сума DS" + +msgid "HIP record" +msgstr "Запис HIP" + +msgid "Raw HIP records" +msgstr "Прості записи HIP" + +msgid "IPSECKEY record" +msgstr "Запис IPSECKEY" + +msgid "Raw IPSECKEY records" +msgstr "Прості записи IPSECKEY" + +msgid "KEY record" +msgstr "Запис KEY" + +msgid "Raw KEY records" +msgstr "Прості записи KEY" + +msgid "KX record" +msgstr "Запис KX" + +msgid "Raw KX records" +msgstr "Прості записи KX" + +msgid "KX Preference" +msgstr "Пріоритетність KX" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" +"Пріоритет цього обмінника. Записи з меншим значенням мають вищий пріоритет." + +msgid "KX Exchanger" +msgstr "Обмінник KX" + +msgid "A host willing to act as a key exchanger" +msgstr "Вузол, який може працювати як обмінник ключів" + +msgid "LOC record" +msgstr "Запис LOC" + +msgid "Raw LOC records" +msgstr "Прості записи LOC" + +msgid "LOC Degrees Latitude" +msgstr "Градуси широти LOC" + +msgid "Degrees Latitude" +msgstr "Градуси широти" + +msgid "LOC Minutes Latitude" +msgstr "Мінути широти LOC" + +msgid "Minutes Latitude" +msgstr "Мінути широти" + +msgid "LOC Seconds Latitude" +msgstr "Секунди широти LOC" + +msgid "Seconds Latitude" +msgstr "Секунди широти" + +msgid "LOC Direction Latitude" +msgstr "Півкуля широти LOC" + +msgid "Direction Latitude" +msgstr "Півкуля широти" + +msgid "LOC Degrees Longitude" +msgstr "Градуси довготи LOC" + +msgid "Degrees Longitude" +msgstr "Градуси довготи" + +msgid "LOC Minutes Longitude" +msgstr "Мінути довготи LOC" + +msgid "Minutes Longitude" +msgstr "Мінути довготи" + +msgid "LOC Seconds Longitude" +msgstr "Секунди довготи LOC" + +msgid "Seconds Longitude" +msgstr "Секунди довготи" + +msgid "LOC Direction Longitude" +msgstr "Півкуля довготи LOC" + +msgid "Direction Longitude" +msgstr "Півкуля довготи" + +msgid "LOC Altitude" +msgstr "Висота LOC" + +msgid "Altitude" +msgstr "Висота" + +msgid "LOC Size" +msgstr "Розмір LOC" + +msgid "Size" +msgstr "Розмір" + +msgid "LOC Horizontal Precision" +msgstr "Точність за горизонталлю LOC" + +msgid "Horizontal Precision" +msgstr "Точність за горизонталлю" + +msgid "LOC Vertical Precision" +msgstr "Точність за вертикаллю LOC" + +msgid "Vertical Precision" +msgstr "Точність за вертикаллю" + +msgid "MX record" +msgstr "Запис MX" + +msgid "Raw MX records" +msgstr "Прості записи MX" + +msgid "MX Preference" +msgstr "Пріоритетність MX" + +msgid "MX Exchanger" +msgstr "Обмінник MX" + +msgid "A host willing to act as a mail exchanger" +msgstr "Вузол, який може працювати як обмінник поштовими даними" + +msgid "NAPTR record" +msgstr "Запис NAPTR" + +msgid "Raw NAPTR records" +msgstr "Прості записи NAPTR" + +msgid "NAPTR Order" +msgstr "Порядок NAPTR" + +msgid "Order" +msgstr "Порядок" + +msgid "NAPTR Preference" +msgstr "Пріоритетність NAPTR" + +msgid "Preference" +msgstr "Пріоритет" + +msgid "NAPTR Flags" +msgstr "Прапорці NAPTR" + +msgid "Flags" +msgstr "Прапорці" + +msgid "NAPTR Service" +msgstr "Служба NAPTR" + +msgid "Service" +msgstr "Служба" + +msgid "NAPTR Regular Expression" +msgstr "Формальний вираз NAPTR" + +msgid "Regular Expression" +msgstr "Формальний вираз" + +msgid "NAPTR Replacement" +msgstr "Замінник NAPTR" + +msgid "Replacement" +msgstr "Заміна" + +msgid "NS record" +msgstr "Запис NS" + +msgid "Raw NS records" +msgstr "Прості записи NS" + +msgid "NS Hostname" +msgstr "Назва вузла NS" + +msgid "NSEC record" +msgstr "запис NSEC" + +msgid "Raw NSEC records" +msgstr "Прості записи NSEC" + +msgid "NSEC3 record" +msgstr "Запис NSEC3" + +msgid "Raw NSEC3 records" +msgstr "Прості записи NSEC3" + +msgid "PTR record" +msgstr "Запис PTR" + +msgid "Raw PTR records" +msgstr "Прості записи PTR" + +msgid "PTR Hostname" +msgstr "Назва вузла PTR" + +msgid "The hostname this reverse record points to" +msgstr "Назва вузла, на яку вказує цей зворотний запис" + +msgid "RRSIG record" +msgstr "Запис RRSIG" + +msgid "Raw RRSIG records" +msgstr "Прості записи RRSIG" + +msgid "RP record" +msgstr "Запис RP" + +msgid "Raw RP records" +msgstr "Прості записи RP" + +msgid "SIG record" +msgstr "Запис SIG" + +msgid "Raw SIG records" +msgstr "Прості записи SIG" + +msgid "SPF record" +msgstr "Запис SPF" + +msgid "Raw SPF records" +msgstr "Прості записи SPF" + +msgid "SRV record" +msgstr "Запис SRV" + +msgid "Raw SRV records" +msgstr "Прості записи SRV" + +msgid "SRV Priority" +msgstr "Пріоритетність SRV" + +msgid "Priority" +msgstr "Пріоритет" + +msgid "SRV Weight" +msgstr "Вага SRV" + +msgid "Weight" +msgstr "Вага" + +msgid "SRV Port" +msgstr "Порт SRV" + +msgid "Port" +msgstr "Порт" + +msgid "SRV Target" +msgstr "Ціль SRV" msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" msgstr "" -"\n" -"Міжгрупове уповноваження\n" -"\n" -"Права доступу може бути точно налаштовано. Правила керування доступом\n" -"або інструкції (ACI), надання дозволу на виконання певних завдань, зокрема\n" -"додавання користувача, внесення змін до групи тощо.\n" -"\n" -"Міжгрупові уповноваження надають учасникам однієї групи можливість\n" -"оновлювати набір атрибутів учасників іншої групи.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати правило уповноваження, яке надасть змогу керівникам (managers)\n" -" редагувати адреси співробітників:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Під час керування списком атрибутів слід включати всі атрибути списку\n" -" разом з вже створеними. Додавання до списку postalCode:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Показ нашого оновленого правила:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Вилучення правила:\n" -" ipa delegation-del \"managers edit employees' street\"\n" +"Доменна назва вузла призначення або '.', якщо служба є явно недоступною на " +"цьому домені" + +msgid "SSHFP record" +msgstr "Запис SSHFP" + +msgid "Raw SSHFP records" +msgstr "Прості записи SSHFP" + +msgid "SSHFP Algorithm" +msgstr "Алгоритм SSHFP" + +msgid "SSHFP Fingerprint Type" +msgstr "Тип відбитка SSHFP" + +msgid "Fingerprint Type" +msgstr "Тип відбитка" + +msgid "SSHFP Fingerprint" +msgstr "Відбиток SSHFP" + +msgid "Fingerprint" +msgstr "Відбиток" + +msgid "TA record" +msgstr "Запис TA" + +msgid "Raw TA records" +msgstr "Прості записи TA" + +msgid "TLSA record" +msgstr "Запис TLSA" + +msgid "Raw TLSA records" +msgstr "Прості записи TLSA" + +msgid "TLSA Certificate Usage" +msgstr "Використання сертифіката TLSA" + +msgid "Certificate Usage" +msgstr "Використання сертифіката" + +msgid "TLSA Selector" +msgstr "Селектор TLSA" + +msgid "Selector" +msgstr "Селектор" + +msgid "TLSA Matching Type" +msgstr "Відповідний тип TLSA" + +msgid "Matching Type" +msgstr "Відповідний тип" + +msgid "TLSA Certificate Association Data" +msgstr "Дані прив’язки сертифікатів TLSA" + +msgid "Certificate Association Data" +msgstr "Дані прив’язки сертифікатів" + +msgid "TKEY record" +msgstr "Запис TKEY" + +msgid "Raw TKEY records" +msgstr "Прості записи TKEY" + +msgid "TSIG record" +msgstr "Запис TSIG" + +msgid "Raw TSIG records" +msgstr "Прості записи TSIG" + +msgid "TXT record" +msgstr "Запис TXT" + +msgid "Raw TXT records" +msgstr "Прості записи TXT" + +msgid "TXT Text Data" +msgstr "Текстові дані TXT" + +msgid "Text Data" +msgstr "Текстові дані" + +msgid "Authoritative nameserver" +msgstr "Основний сервер назв" + +msgid "Authoritative nameserver domain name" +msgstr "Назва домену основного сервера назв" + +msgid "Administrator e-mail address" +msgstr "Адреса електронної пошти адміністратора" + +msgid "SOA serial" +msgstr "Серійний номер SOA" + +msgid "SOA record serial number" +msgstr "Серійний номер запису SOA" + +msgid "SOA refresh" +msgstr "Освіження SOA" + +msgid "SOA record refresh time" +msgstr "Час оновлення запису SOA" + +msgid "SOA retry" +msgstr "Повторення спроби SOA" + +msgid "SOA record retry time" +msgstr "Проміжок між повторними спробами для запису SOA" + +msgid "SOA expire" +msgstr "Застарівання SOA" + +msgid "SOA record expire time" +msgstr "Час завершення строку дії запису SOA" + +msgid "SOA minimum" +msgstr "Мінімальний SOA" + +msgid "How long should negative responses be cached" +msgstr "Тривалість кешування відмов" + +msgid "Time to live for records at zone apex" +msgstr "Час життя записів у апексі зони" + +msgid "BIND update policy" +msgstr "Правила оновлення BIND" + +msgid "Dynamic update" +msgstr "Динамічне оновлення" + +msgid "Allow dynamic updates." +msgstr "Дозволити динамічні оновлення." + +msgid "Allow query" +msgstr "Дозволити запит" msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" msgstr "" -"\n" -"Міжгрупове уповноваження\n" -"\n" -"Права доступу може бути точно налаштовано. Правила керування доступом\n" -"або інструкції (ACI), надання дозволу на виконання певних завдань, зокрема\n" -"додавання користувача, внесення змін до групи тощо.\n" -"\n" -"Міжгрупові уповноваження надають учасникам однієї групи можливість\n" -"оновлювати набір атрибутів учасників іншої групи.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати правило уповноваження, яке надасть змогу керівникам (managers)\n" -" редагувати адреси співробітників:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Під час керування списком атрибутів слід включати всі атрибути списку\n" -" разом з вже створеними. Додавання до списку postalCode:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Показ нашого оновленого правила:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Вилучення правила:\n" -" ipa delegation-del \"managers edit employees' street\"\n" +"Список відокремлених крапкою з комою записів IP-адрес або мереж, яким надано " +"доступ до надсилання запитів" + +msgid "Allow transfer" +msgstr "Дозволити перенесення" msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" msgstr "" -"\n" -"Групи команд sudo\n" -"\n" -"Керування групами команд sudo.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову групу команд sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Вилучити групу команд sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показ групи команд sudo:\n" -" ipa group-show localadmins\n" +"Список відокремлених крапкою з комою записів IP-адрес або мереж, яким надано " +"доступ до перенесення зони" msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" msgstr "" -"\n" -"Групи команд sudo\n" -"\n" -"Керування групами команд sudo.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову групу команд sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Вилучити групу команд sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показ групи команд sudo:\n" -" ipa sudocmdgroup-show admincmds\n" +"Дозволити у зоні синхронізацію прямих (A, AAAA) і зворотних (PTR) записів" + +msgid "Allow in-line DNSSEC signing" +msgstr "Дозволити вбудоване підписування DNSSEC" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "Дозволити вбудоване підписування DNSSEC записів у зоні" + +msgid "NSEC3PARAM record" +msgstr "Запис NSEC3PARAM" msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" msgstr "" -"\n" -"Групи команд sudo\n" -"\n" -"Керування групами команд sudo.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову групу команд sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Вилучити групу команд sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показ групи команд sudo:\n" -" ipa group-show localadmins\n" +"Запис NSEC3PARAM для зони у такому форматі: алгоритм_хешування прапорці " +"ітерації сіль" -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Групи вузлів.\n" -"\n" -"Керування групами вузлів. Корисні для застосування керування\n" -"до декількох вузлів на основі заснованого на вузлах керування\n" -"доступом (Host-based Access Control або HBAC).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " -"дужках):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Додавання групи вузлів як учасника іншої групи вузлів:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Вилучення вузла з групи вузлів:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показ списку групи вузлів:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Додавання керівника учасниками:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Вилучення керівника учасниками\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Вилучення групи вузлів:\n" -" ipa hostgroup-del baltimore\n" +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу DNS." -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Групи вузлів.\n" -"\n" -"Керування групами вузлів. Корисні для застосування керування\n" -"до декількох вузлів на основі заснованого на вузлах керування\n" -"доступом (Host-based Access Control або HBAC).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " -"дужках):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Додавання групи вузлів як учасника іншої групи вузлів:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Вилучення вузла з групи вузлів:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показ списку групи вузлів:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Вилучення групи вузлів:\n" -" ipa hostgroup-del baltimore\n" +msgid "Resolve a host name in DNS." +msgstr "Визначити назву вузла у DNS." -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Групи вузлів.\n" -"\n" -"Керування групами вузлів. Корисні для застосування керування\n" -"до декількох вузлів на основі заснованого на вузлах керування\n" -"доступом (Host-based Access Control або HBAC).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Додавання учасників до групи вузлів:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Додавання групи вузлів як учасника іншої групи вузлів:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Вилучення вузла з групи вузлів:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показ списку групи вузлів:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Вилучення групи вузлів:\n" -" ipa hostgroup-del baltimore\n" +msgid "Modify global DNS configuration." +msgstr "Змінити загальні налаштування DNS." -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Групи користувачів\n" -"\n" -"Керування групами користувачів, групами або службами. Типово нові групи є " -"групами POSIX. Ви можете\n" -"додати параметр --nonposix до команди group-add з метою позначення нової\n" -"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " -"group-mod\n" -"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" -"перетворювати на групи не-POSIX.\n" -"\n" -"Кожна група повинна мати опис.\n" -"\n" -"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " -"підтримку\n" -"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" -"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" -"таку не вказано.\n" -"\n" -"\n" -"Учасниками груп можуть бути користувачі, інші групи і служби Kerberos. У\n" -"середовищах POSIX як учасників груп можна бути бачити лише користувачів, " -"але\n" -"для керування у межах IPA може бути використано вкладені групи і групи\n" -"служб.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Додавання нової групи не-POSIX:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Перетворити групу не-POSIX на групу posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Вилучення групи:\n" -" ipa group-del unixadmins\n" -"\n" -" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Додати список користувачів до групи \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Додавання служб Kerberos до групи «printer admins»:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Вилучення користувача з групи \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показати інформацію щодо іменованої групи.\n" -" ipa group-show localadmins\n" -"\n" -"Керівниками учасників груп є користувачі або групи, які можуть додавати " -"учасників\n" -"до групи або вилучати учасників з групи.\n" -"\n" -" Дозволити користувачу «test2» додавати або вилучати учасників з групи " -"«localadmins»:\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Відкликати права керування учасниками для користувача «test2» з " -"«localadmins»:\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" -"користувачів з довірених доменів до локальних груп POSIX з метою\n" -"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" -"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" -"слід пізніше включити до одної з груп POSIX.\n" -"\n" -"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" -"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" -"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" -"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" -"допомогою використання Загального каталогу довіреного домену.\n" -"\n" -"Приклад:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" -"відповідної локальної групи POSIX:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" -"групи ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " -"визначити\n" -"їхні SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +msgid "Show the current global DNS configuration." +msgstr "Показати поточні загальні налаштування DNS." -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Групи користувачів\n" -"\n" -"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " -"можете\n" -"додати параметр --nonposix до команди group-add з метою позначення нової\n" -"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " -"group-mod\n" -"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" -"перетворювати на групи не-POSIX.\n" -"\n" -"Кожна група повинна мати опис.\n" -"\n" -"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " -"підтримку\n" -"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" -"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" -"таку не вказано.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Додавання нової групи не-POSIX:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Перетворити групу не-POSIX на групу posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Вилучення групи:\n" -" ipa group-del unixadmins\n" -"\n" -" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Додати список користувачів до групи \"localadmins\":\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Вилучення користувача з групи \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показати інформацію щодо іменованої групи.\n" -" ipa group-show localadmins\n" -"\n" -"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" -"користувачів з довірених доменів до локальних груп POSIX з метою\n" -"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" -"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" -"слід пізніше включити до одної з груп POSIX.\n" -"\n" -"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" -"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" -"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" -"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" -"допомогою використання Загального каталогу довіреного домену.\n" -"\n" -"Приклад:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" -"відповідної локальної групи POSIX:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" -"групи ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " -"визначити\n" -"їхні SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +msgid "Create new DNS forward zone." +msgstr "Створити зону переспрямовування DNS." -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +msgid "Add a permission for per-forward zone access delegation." msgstr "" -"\n" -"Групи користувачів\n" -"\n" -"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " -"можете\n" -"додати параметр --nonposix до команди group-add з метою позначення нової\n" -"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " -"group-mod\n" -"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" -"перетворювати на групи не-POSIX.\n" -"\n" -"Кожна група повинна мати опис.\n" -"\n" -"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " -"підтримку\n" -"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" -"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" -"таку не вказано.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Додавання нової групи не-POSIX:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Перетворити групу не-POSIX на групу posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Вилучення групи:\n" -" ipa group-del unixadmins\n" -"\n" -" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Додати список користувачів до групи \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Вилучення користувача з групи \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показати інформацію щодо іменованої групи.\n" -" ipa group-show localadmins\n" -"\n" -"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" -"користувачів з довірених доменів до локальних груп POSIX з метою\n" -"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" -"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" -"слід пізніше включити до одної з груп POSIX.\n" -"\n" -"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" -"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" -"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" -"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" -"допомогою використання Загального каталогу довіреного домену.\n" -"\n" -"Приклад:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" -"відповідної локальної групи POSIX:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" -"групи ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " -"визначити\n" -"їхні SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"Додати право доступу до делегування доступу на основі окремих зон " +"переспрямовування." -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Групи користувачів\n" -"\n" -"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " -"можете\n" -"додати параметр --nonposix до команди group-add з метою позначення нової\n" -"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " -"group-mod\n" -"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" -"перетворювати на групи не-POSIX.\n" -"\n" -"Кожна група повинна мати опис.\n" -"\n" -"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " -"підтримку\n" -"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" -"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" -"таку не вказано.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Додавання нової групи не-POSIX:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Перетворити групу не-POSIX на групу posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Вилучення групи:\n" -" ipa group-del unixadmins\n" -"\n" -" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Додати список користувачів до групи \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Вилучення користувача з групи \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показати інформацію щодо іменованої групи.\n" -" ipa group-show localadmins\n" -"\n" -"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" -"користувачів з довірених доменів до локальних груп POSIX з метою\n" -"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" -"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" -"слід пізніше включити до одної з груп POSIX.\n" -"\n" -"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" -"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" -"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" -"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" -"допомогою використання Загального каталогу довіреного домену.\n" -"\n" -"Приклад:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" -"відповідної локальної групи POSIX:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" -"групи ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " -"визначити\n" -"їхні SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +msgid "Permission value" +msgstr "Значення прав доступу" -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" -"\n" -"Групи служб HBAC\n" -"\n" -"Групи служб HBAC можуть містити будь-яку кількість окремих служб\n" -"або «учасників». Кожна з груп повинна мати опис.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи служб HBAC:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Додавання учасників до групи служб HBAC:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Показ даних щодо вказаної групи:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Вилучення групи служб HBAC:\n" -" ipa hbacsvcgroup-del login\n" +msgid "Delete DNS forward zone." +msgstr "Вилучити зону переспрямовування DNS." -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" -"\n" -"Групи служб HBAC\n" -"\n" -"Групи служб HBAC можуть містити будь-яку кількість окремих служб\n" -"або «учасників». Кожна з груп повинна мати опис.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи служб HBAC:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Додавання учасників до групи служб HBAC:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Показ даних щодо вказаної групи:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Додавання нової групи до групи «login»:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Вилучення групи служб HBAC:\n" -" ipa hbacsvcgroup-del login\n" +msgid "Disable DNS Forward Zone." +msgstr "Вимкнути зону переспрямовування DNS." -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" -"\n" -"Служби HBAC\n" -"\n" -"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" -"відповідати назві служби, з якою працює PAM.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову службу HBAC:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Змінити вже створену службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" -" службу FTP і щойно додану службу tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Вилучення служби HBAC:\n" -" ipa hbacsvc-del tftp\n" +msgid "Enable DNS Forward Zone." +msgstr "Увімкнути зону переспрямовування DNS." -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" -"\n" -"Служби HBAC\n" -"\n" -"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" -"відповідати назві служби, з якою працює PAM.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову службу HBAC:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Змінити вже створену службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" -" службу FTP і щойно додану службу tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Вилучення служби HBAC:\n" -" ipa hbacsvc-del tftp\n" -"\n" +msgid "Search for DNS forward zones." +msgstr "Пошук зон переспрямовування DNS." -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" +msgid "Modify DNS forward zone." +msgstr "Змінити зону переспрямовування DNS." + +msgid "Remove a permission for per-forward zone access delegation." msgstr "" -"\n" -"Керування доступом на основі вузлів\n" -"\n" -"Керуйте тим, хто, на яких вузлах і з яких вузлів зможе отримувати доступ\n" -"до певних служб. Ви можете скористатися HBAC для визначення\n" -"користувачів і груп на вузлі походження запиту зможе отримувати\n" -"доступ до певної служби або групи служб.\n" -"\n" -"Ви також можете визначити категорію користувачів та вузли призначення.\n" -"У поточній версії можливі варіанти\n" -"обмежено варіантом \"all\", але перелік варіантів може бути\n" -"розширено у майбутніх версіях.\n" -"\n" -"Вузли призначення та вузли походження у правилах HBAC мають бути\n" -"вузлами, керованими IPA.\n" -"\n" -"Доступними службами і групами служб є служби, керовані hbacsvc\n" -"та додатками hbacsvcgroup, відповідно.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створення правила \"test1\", яке надає всім користувачам доступ\n" -" до вузла \"server\" звідусюди:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Показ властивостей вказаного правила HBAC:\n" -" ipa hbacrule-show test1\n" -"\n" -" Створення правила для певної служби. Це правило надасть користувачу john\n" -" доступ до служби sshd у будь-якій системі звідусіль:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Створення правила для нової групи служб. Користувачу john\n" -" надається доступ до служби FTP у будь-якій системі звідусіль:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --type=allow --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Вимикання вказаного правила HBAC:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Вилучення вказаного правила HBAC:\n" -" ipa hbacrule-del allow_server\n" +"Вилучити права доступу до делегування доступу для окремих зон " +"переспрямовування." + +msgid "Display information about a DNS forward zone." +msgstr "Показ даних щодо зони переспрямовування DNS." + +msgid "Add new DNS resource record." +msgstr "Додати новий запис ресурсу DNS." + +msgid "Force" +msgstr "Примусово" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" +"примусово створити запис сервера назв, навіть якщо відповідної назви вузла " +"немає у DNS" + +msgid "Structured" +msgstr "Структурована" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "Обробити всі записи DNS і повернути дані у структурованій формі" + +msgid "Delete DNS resource record." +msgstr "Вилучити запис ресурсу DNS." + +msgid "Delete all associated records" +msgstr "Вилучити всі пов’язані записи" + +msgid "Delete DNS record entry." +msgstr "Вилучити пункт запису DNS." + +msgid "Search for DNS resources." +msgstr "Шукати ресурси DNS." + +msgid "Modify a DNS resource record." +msgstr "Змінити запис ресурсу DNS." + +msgid "Rename the DNS resource record object" +msgstr "Перейменувати об’єкт запису ресурсу DNS" + +msgid "Display DNS resource." +msgstr "Показати ресурс DNS." + +msgid "Create new DNS zone (SOA record)." +msgstr "Створити зону DNS (запис SOA)." + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" +"Примусово створити зону DNS, навіть якщо не вдається визначити адресу " +"сервера назв." + +msgid "Add a permission for per-zone access delegation." +msgstr "Додати права доступу до надання доступу до окремих зон." + +msgid "Delete DNS zone (SOA record)." +msgstr "Вилучити зону DNS (запис SOA)." + +msgid "Disable DNS Zone." +msgstr "Вимкнути зону DNS." + +msgid "Enable DNS Zone." +msgstr "Увімкнути зону DNS." + +msgid "Search for DNS zones (SOA records)." +msgstr "Пошук зон DNS (записів SOA)." + +msgid "Forward zones only" +msgstr "Лише прямі зони" + +msgid "Search for forward zones only" +msgstr "Шукати лише прямі зони" + +msgid "Modify DNS zone (SOA record)." +msgstr "Змінити зону DNS (запис SOA)." + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" +"Примусово змінити сервер назв, навіть якщо запису сервера назв немає у DNS" + +msgid "Remove a permission for per-zone access delegation." +msgstr "Вилучити права доступу до надання доступу до окремих зон." + +msgid "Display information about a DNS zone (SOA record)." +msgstr "Показати дані щодо зони DNS (запису SOA)." msgid "" "\n" @@ -6991,144 +3802,308 @@ msgstr "" " Вилучення вказаного правила HBAC:\n" " ipa hbacrule-del allow_server\n" -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Вузли/Комп’ютери\n" -"\n" -"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " -"контекстах:\n" -"- записи служб, пов’язані з певним вузлом\n" -"- вузол зберігає реєстраційні дані вузол/служба\n" -"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" -"- для усіх зареєстрованих клієнтів створюється запис вузла\n" +msgid "Rule name" +msgstr "Назва правила" + +msgid "Rule type" +msgstr "Тип правила" + +msgid "Rule type (allow)" +msgstr "Тип правила (allow)" + +msgid "User category" +msgstr "Категорія користувачів" + +msgid "User category the rule applies to" +msgstr "Категорія користувачів, до якої застосовується правило" + +msgid "Host category" +msgstr "Категорія вузлів" + +msgid "Host category the rule applies to" +msgstr "Категорія вузлів, до якої застосовується правило" + +msgid "Service category" +msgstr "Категорія служб" + +msgid "Service category the rule applies to" +msgstr "Категорія служб, до якої застосовується правило" + +msgid "Enabled" +msgstr "Увімкнено" + +msgid "Users" +msgstr "Користувачі" + +msgid "User Groups" +msgstr "Групи користувачів" + +msgid "Hosts" +msgstr "Вузли" + +msgid "Host Groups" +msgstr "Групи вузлів" + +msgid "Services" +msgstr "Служби" + +msgid "Service Groups" +msgstr "Групи служб" + +msgid "External host" +msgstr "Зовнішній вузол" + +msgid "Create a new HBAC rule." +msgstr "Створити правило HBAC." + +msgid "Suppress processing of membership attributes." +msgstr "Придушити обробку атрибутів участі." + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Додати вузли призначення та групи вузлів до правила HBAC." + +msgid "member host" +msgstr "вузол-учасник" + +msgid "hosts to add" +msgstr "вузли для додавання" + +msgid "member host group" +msgstr "група вузлів учасника" + +msgid "host groups to add" +msgstr "групи вузлів для додавання" + +msgid "Members that could not be added" +msgstr "Учасники, записи яких не вдалося додати" + +msgid "Number of members added" +msgstr "Кількість доданих учасників" + +msgid "Add services to an HBAC rule." +msgstr "Додати служби до правила HBAC." + +msgid "member HBAC service" +msgstr "служба HBAC учасника" + +msgid "HBAC services to add" +msgstr "служби HBAC для додавання" + +msgid "member HBAC service group" +msgstr "група служб учасника HBAC" + +msgid "HBAC service groups to add" +msgstr "група служб HBAC для додавання" + +msgid "Add users and groups to an HBAC rule." +msgstr "Додати користувачів та групи до правила HBAC." + +msgid "member user" +msgstr "користувач учасника" + +msgid "users to add" +msgstr "користувачі для додавання" + +msgid "member group" +msgstr "група учасника" + +msgid "groups to add" +msgstr "групи для додавання" + +msgid "Delete an HBAC rule." +msgstr "Вилучити правило HBAC." + +msgid "Disable an HBAC rule." +msgstr "Вимкнути правило HBAC." + +msgid "Enable an HBAC rule." +msgstr "Увімкнути правило HBAC." + +msgid "Search for HBAC rules." +msgstr "Шукати правила HBAC." + +msgid "Modify an HBAC rule." +msgstr "Змінити правило HBAC." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Вилучити вузли призначення та групи вузлів з правила HBAC." + +msgid "hosts to remove" +msgstr "вузли для вилучення" + +msgid "host groups to remove" +msgstr "групи вузлів для вилучення" + +msgid "Members that could not be removed" +msgstr "Учасники, записи яких не вдалося вилучити" + +msgid "Number of members removed" +msgstr "Кількість вилучених учасників" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Вилучити служби та групи служб з правила HBAC." + +msgid "HBAC services to remove" +msgstr "служби HBAC для вилучення" + +msgid "HBAC service groups to remove" +msgstr "групи служб HBAC для вилучення" + +msgid "Remove users and groups from an HBAC rule." +msgstr "Вилучити користувачів і групи з правила HBAC." + +msgid "users to remove" +msgstr "користувачі, записи яких слід вилучити" + +msgid "groups to remove" +msgstr "групи для вилучення" + +msgid "Display the properties of an HBAC rule." +msgstr "Показати властивості правила HBAC." msgid "" "\n" -"Hosts/Machines\n" +"HBAC Services\n" "\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" msgstr "" "\n" -"Вузли/Комп’ютери\n" +"Служби HBAC\n" "\n" -"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " -"контекстах:\n" -"- записи служб, пов’язані з певним вузлом\n" -"- вузол зберігає реєстраційні дані вузол/служба\n" -"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" -"- для усіх зареєстрованих клієнтів створюється запис вузла\n" -"\n" -"РЕЄСТРАЦІЯ:\n" -"\n" -"Передбачено три сценарії реєстрації нових клієнтів:\n" -"\n" -"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" -" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" -" учасником групи admins.\n" -"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" -" існувати. Обмежений адміністратор виконує роль з привілеями\n" -" Host Enrollment.\n" -"3. Вузол було створено з одноразовим паролем.\n" -"\n" -"Вузлу можна надати роль лише один раз. Якщо клієнту вже надано роль і\n" -"роль слід змінити, запис вузла має бути вилучено і створено повторно.\n" -"Зауважте, що повторне створення запису вузла призведе до вилучення усіх\n" -"служб для вузла, а усі сертифікати SSL, пов’язані із цими службами\n" -"буде відкликано.\n" -"\n" -"Запис вузла може, якщо потрібно, містити дані щодо його розташування,\n" -"типу операційної системи тощо.\n" +"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" +"відповідати назві служби, з якою працює PAM.\n" "\n" "ПРИКЛАДИ:\n" "\n" +" Додати нову службу HBAC:\n" +" ipa hbacsvc-add tftp\n" "\n" -"Додати новий вузол:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" +" Змінити вже створену службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -" Вилучити вузол:\n" -" ipa host-del test.example.com\n" +" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" +" службу FTP і щойно додану службу tftp:\n" +" ipa hbacsvc-find ftp\n" "\n" -" Додати новий вузол з одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +" Вилучення служби HBAC:\n" +" ipa hbacsvc-del tftp\n" + +msgid "Service name" +msgstr "Назва служби" + +msgid "HBAC service" +msgstr "Служба HBAC" + +msgid "HBAC service description" +msgstr "Опис служби HBAC" + +msgid "Member of HBAC service groups" +msgstr "Учасник груп служб HBAC" + +msgid "Add a new HBAC service." +msgstr "Додати нову службу HBAC." + +msgid "Delete an existing HBAC service." +msgstr "Вилучити вже створену службу HBAC." + +msgid "Search for HBAC services." +msgstr "Шукати служби HBAC." + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "Результати мають містити лише атрибут основного ключа («service»)" + +msgid "Modify an HBAC service." +msgstr "Змінити службу HBAC." + +msgid "Display information about an HBAC service." +msgstr "Показати дані щодо служби HBAC." + +msgid "" "\n" -"Додати новий вузол з випадковим одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" +"HBAC Service Groups\n" "\n" -" Змінити відомості щодо вузла:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" "\n" -" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " -"змін:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"EXAMPLES:\n" "\n" -"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" -" ipa host-disable test.example.com\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" "\n" -"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " -"вузла :\n" -" ipa host-add-managedby --hosts=test2 test\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" +"\n" +"Групи служб HBAC\n" +"\n" +"Групи служб HBAC можуть містити будь-яку кількість окремих служб\n" +"або «учасників». Кожна з груп повинна мати опис.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи служб HBAC:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Додавання учасників до групи служб HBAC:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Показ даних щодо вказаної групи:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Вилучення групи служб HBAC:\n" +" ipa hbacsvcgroup-del login\n" + +msgid "Service group name" +msgstr "Назва групи служб" + +msgid "HBAC service group description" +msgstr "Опис групи служб HBAC" + +msgid "Member HBAC service" +msgstr "Служба HBAC учасника" + +msgid "Add a new HBAC service group." +msgstr "Додати нову групу служб HBAC." + +msgid "Add members to an HBAC service group." +msgstr "Додати учасників до групи служб HBAC." + +msgid "Delete an HBAC service group." +msgstr "Вилучити групу служб HBAC." + +msgid "Search for an HBAC service group." +msgstr "Шукати групу служб HBAC." + +msgid "Modify an HBAC service group." +msgstr "Змінити групу служб HBAC." + +msgid "Remove members from an HBAC service group." +msgstr "Вилучити учасників з групи служб HBAC." + +msgid "Display information about an HBAC service group." +msgstr "Показати дані щодо групи служб HBAC." msgid "" "\n" @@ -7262,6 +4237,437 @@ msgstr "" " Дозволити користувачеві створення таблиці ключів:\n" " ipa host-allow-create-keytab test2 --users=tuser1\n" +msgid "Host name" +msgstr "Назва вузла" + +msgid "A description of this host" +msgstr "Опис цього вузла" + +msgid "Locality" +msgstr "Адреса" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Адреса розташування вузла (наприклад, «Київ, Україна»)" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Розташування вузла (наприклад, «Lab 2»)" + +msgid "Platform" +msgstr "Платформа" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Апаратна платформа вузла (наприклад, «Lenovo T61»)" + +msgid "Operating system" +msgstr "Операційна система" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Операційна система вузла і її версія (наприклад, «Fedora 9\")" + +msgid "User password" +msgstr "Пароль користувача" + +msgid "Password used in bulk enrollment" +msgstr "Пароль для загального керування реєстраційними записами" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" +"Створити випадковий пароль, який буде використано для загальної реєстрації" + +msgid "Random password" +msgstr "Випадковий пароль" + +msgid "Certificate" +msgstr "Сертифікат" + +msgid "Base-64 encoded server certificate" +msgstr "Сертифікат сервера у кодуванні Base-64" + +msgid "Principal name" +msgstr "Назва реєстраційного запису" + +msgid "MAC address" +msgstr "MAC-адреса" + +msgid "Hardware MAC address(es) on this host" +msgstr "Апаратні MAC-адреси цього вузла" + +msgid "SSH public key" +msgstr "Відкритий ключ SSH" + +msgid "Class" +msgstr "Клас" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Категорія вузлів (семантика розташування цього атрибуту призначена для " +"локальної обробки)" + +msgid "Assigned ID View" +msgstr "Перегляд призначених ідентифікаторів" + +msgid "Requires pre-authentication" +msgstr "Вимагає попереднього розпізнавання" + +msgid "Pre-authentication is required for the service" +msgstr "Для роботи з цією службою потрібне попереднє розпізнавання" + +msgid "Trusted for delegation" +msgstr "Довірено для уповноваження" + +msgid "Client credentials may be delegated to the service" +msgstr "Реєстраційні дані клієнта може бути передано службі" + +msgid "Member of host-groups" +msgstr "Учасник host-groups" + +msgid "Roles" +msgstr "Ролі" + +msgid "Member of netgroups" +msgstr "Мережеві групи «member of»" + +msgid "Member of Sudo rule" +msgstr "Правило Sudo «member of»" + +msgid "Member of HBAC rule" +msgstr "Правило HBAC «member of»" + +msgid "Indirect Member of netgroup" +msgstr "Опосередкована група «member of»" + +msgid "Indirect Member of host-group" +msgstr "Опосередкований учасник групи вузлів" + +msgid "Indirect Member of role" +msgstr "Опосередкована роль «member of»" + +msgid "Indirect Member of Sudo rule" +msgstr "Опосередковане правило sudo «member of»" + +msgid "Indirect Member of HBAC rule" +msgstr "Опосередковане правило HBAC «member of»" + +msgid "Keytab" +msgstr "Таблиця ключів" + +msgid "Managed by" +msgstr "Керується" + +msgid "Managing" +msgstr "Керування" + +msgid "Users allowed to retrieve keytab" +msgstr "Користувачі, яким дозволено отримувати таблицю ключів" + +msgid "Groups allowed to retrieve keytab" +msgstr "Групи, яким дозволено отримувати таблицю ключів" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Вузли, яким дозволено отримувати таблицю ключів" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Групи вузлів, яким дозволено отримувати таблицю ключів" + +msgid "Users allowed to create keytab" +msgstr "Користувачі, яким дозволено створення таблиці ключів" + +msgid "Groups allowed to create keytab" +msgstr "Групи, яким дозволено створення таблиці ключів" + +msgid "Hosts allowed to create keytab" +msgstr "Вузли, яким дозволено створення таблиці ключів" + +msgid "Host Groups allowed to create keytab" +msgstr "Групи вузлів, яким дозволено створення таблиці ключів" + +msgid "Add a new host." +msgstr "Додати новий запис вузла." + +msgid "force host name even if not in DNS" +msgstr "примусове значення назви вузла, навіть якщо назви немає у DNS" + +msgid "skip reverse DNS detection" +msgstr "пропустити зворотне визначення DNS" + +msgid "Add the host to DNS with this IP address" +msgstr "Додати запис вузла до DNS з цією IP-адресою" + +msgid "Add hosts that can manage this host." +msgstr "Додати записи вузлів, які можуть керувати цим вузлом." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Дозволити користувачам, групам, вузлам і групам вузлів створювати таблицю " +"ключів цього вузла." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Дозволити користувачам, групам, вузлам і групам вузлів отримувати таблицю " +"ключів цього вузла." + +msgid "Delete a host." +msgstr "Вилучити вузол." + +msgid "Remove entries from DNS" +msgstr "Вилучити записи з DNS" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "Вимкнути ключ Kerberos, сертифікат SSL і всі служби на вузлі." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Заборонити користувачам, групам, вузлам і групам вузлів створювати таблицю " +"ключів цього вузла." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"Заборонити користувачам, групам, вузлам і групам вузлів отримувати таблицю " +"ключів цього вузла." + +msgid "Search for hosts." +msgstr "Шукати вузли." + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "Результати мають містити лише атрибут основного ключа («hostname»)" + +msgid "host group" +msgstr "група вузлів" + +msgid "Search for hosts with these member of host groups." +msgstr "Шукати вузли із вказаними групами вузлів участі." + +msgid "Search for hosts without these member of host groups." +msgstr "Шукати вузли без вказаних груп вузлів участі." + +msgid "netgroup" +msgstr "мережева група" + +msgid "Search for hosts with these member of netgroups." +msgstr "Шукати вузли із вказаними мережевими групами участі." + +msgid "Search for hosts without these member of netgroups." +msgstr "Шукати вузли без вказаних мережевих груп участі." + +msgid "role" +msgstr "роль" + +msgid "Search for hosts with these member of roles." +msgstr "Шукати вузли із вказаними ролями участі." + +msgid "Search for hosts without these member of roles." +msgstr "Шукати вузли без вказаних ролей участі." + +msgid "HBAC rule" +msgstr "Правило HBAC" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "Шукати вузли із цими правилами HBAC участі." + +msgid "Search for hosts without these member of HBAC rules." +msgstr "Шукати вузли без цих правил HBAC участі." + +msgid "sudo rule" +msgstr "правило sudo" + +msgid "Search for hosts with these member of sudo rules." +msgstr "Шукати вузли із цими правилами sudo участі." + +msgid "Search for hosts without these member of sudo rules." +msgstr "Шукати вузли без цих правил sudo участі." + +msgid "user" +msgstr "користувач" + +msgid "Search for hosts with these enrolled by users." +msgstr "Шукати вузли з цими користувачами, якими надано ролі." + +msgid "Search for hosts without these enrolled by users." +msgstr "Шукати вузли без цих користувачів, якими надано ролі." + +msgid "host" +msgstr "вузол" + +msgid "Search for hosts with these managed by hosts." +msgstr "Шукати вузли із цими керованими вузлами." + +msgid "Search for hosts without these managed by hosts." +msgstr "Шукати вузли без цих керованих вузлів." + +msgid "Search for hosts with these managing hosts." +msgstr "Шукати вузли із цими керівними вузлами." + +msgid "Search for hosts without these managing hosts." +msgstr "Шукати вузли без цих керівних вузлів." + +msgid "Modify information about a host." +msgstr "Змінити дані щодо вузла." + +msgid "Kerberos principal name for this host" +msgstr "Назва реєстраційного запису Kerberos для цього вузла" + +msgid "Update DNS entries" +msgstr "Оновити записи DNS" + +msgid "Remove hosts that can manage this host." +msgstr "Вилучити записи вузлів, які можуть керувати цим вузлом." + +msgid "Display information about a host." +msgstr "Показати дані щодо вузла." + +msgid "file to store certificate in" +msgstr "файл, у якому зберігатимуться дані сертифіката" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Групи вузлів.\n" +"\n" +"Керування групами вузлів. Корисні для застосування керування\n" +"до декількох вузлів на основі заснованого на вузлах керування\n" +"доступом (Host-based Access Control або HBAC).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " +"дужках):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Додавання групи вузлів як учасника іншої групи вузлів:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Вилучення вузла з групи вузлів:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показ списку групи вузлів:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Вилучення групи вузлів:\n" +" ipa hostgroup-del baltimore\n" + +msgid "Host-group" +msgstr "Група вузлів" + +msgid "Name of host-group" +msgstr "Назва групи вузлів" + +msgid "A description of this host-group" +msgstr "Опис цієї групи вузлів" + +msgid "Member hosts" +msgstr "Вузли-учасники" + +msgid "Member host-groups" +msgstr "Учасник host-groups" + +msgid "Indirect Member hosts" +msgstr "Вузли з опосередкованою участю" + +msgid "Indirect Member host-groups" +msgstr "Групи вузлів з опосередкованою участю" + +msgid "Add a new hostgroup." +msgstr "Додати нову групу вузлів." + +msgid "Add members to a hostgroup." +msgstr "Додати записи до групи вузлів." + +msgid "Delete a hostgroup." +msgstr "Вилучити групу вузлів." + +msgid "Search for hostgroups." +msgstr "Шукати групи вузлів." + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" +"Результати мають містити лише атрибут основного ключа («hostgroup-name»)" + +msgid "Search for host groups with these member hosts." +msgstr "Шукати групи вузлів із цими вузлами-учасниками." + +msgid "Search for host groups without these member hosts." +msgstr "Шукати групи вузлів без цих вузлів-учасників." + +msgid "Search for host groups with these member host groups." +msgstr "Шукати групи вузлів із цими групами вузлів-учасників." + +msgid "Search for host groups without these member host groups." +msgstr "Шукати групи вузлів без цих груп вузлів-учасників." + +msgid "Search for host groups with these member of host groups." +msgstr "Шукати групи вузлів із цими групами вузлів участі." + +msgid "Search for host groups without these member of host groups." +msgstr "Шукати групи вузлів без цих груп вузлів участі." + +msgid "Search for host groups with these member of netgroups." +msgstr "Шукати групи вузлів із вказаними мережевими групами участі." + +msgid "Search for host groups without these member of netgroups." +msgstr "Шукати групи вузлів без вказаних мережевих груп учасників." + +msgid "Search for host groups with these member of HBAC rules." +msgstr "Шукати групи вузлів із цими правилами HBAC участі." + +msgid "Search for host groups without these member of HBAC rules." +msgstr "Шукати групи вузлів без цього учасника правил HBAC." + +msgid "Search for host groups with these member of sudo rules." +msgstr "Шукати групи вузлів із цим учасником правил sudo." + +msgid "Search for host groups without these member of sudo rules." +msgstr "Шукати групи вузлів без вказаних учасників правил sudo." + +msgid "Modify a hostgroup." +msgstr "Змінити групу вузлів." + +msgid "Remove members from a hostgroup." +msgstr "Вилучити записи з групи вузлів." + +msgid "Display information about a hostgroup." +msgstr "Показати дані щодо групи вузлів." + msgid "" "\n" "ID Views\n" @@ -7285,1635 +4691,196 @@ msgstr "" "перенесення даних із застарілих\n" "систем або інших рішень для керування профілями.\n" +msgid "Anchor to override" +msgstr "Прив’язка для перевизначення" + +msgid "Group name" +msgstr "Назва групи" + +msgid "GID" +msgstr "GID" + +msgid "Group ID Number" +msgstr "Ід. номер групи" + +msgid "User login" +msgstr "Користувач" + +msgid "UID" +msgstr "UID" + +msgid "User ID Number" +msgstr "Номер ідентифікатора користувача" + +msgid "GECOS" +msgstr "GECOS" + +msgid "Home directory" +msgstr "Домашній каталог" + +msgid "Login shell" +msgstr "Оболонка входу" + +msgid "ID View Name" +msgstr "Назва перегляду ідентифікаторів" + +msgid "Add a new Group ID override." +msgstr "Додати нове перевизначення ідентифікаторів групи." + +msgid "Delete an Group ID override." +msgstr "Вилучити перевизначення ідентифікаторів групи." + +msgid "Search for an Group ID override." +msgstr "Шукати перевизначення ідентифікаторів групи." + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "Результати мають містити лише атрибут основного ключа («anchor»)" + +msgid "Modify an Group ID override." +msgstr "Змінити перевизначення ідентифікаторів групи." + +msgid "Rename the Group ID override object" +msgstr "Перейменувати об’єкт перевизначення ідентифікатора групи" + +msgid "Display information about an Group ID override." +msgstr "Показати дані щодо перевизначення ідентифікаторів групи." + +msgid "Add a new User ID override." +msgstr "Додати нове перевизначення ідентифікатора користувача." + +msgid "Delete an User ID override." +msgstr "Вилучити перевизначення ідентифікатора користувача." + +msgid "Search for an User ID override." +msgstr "Шукати перевизначення ідентифікатора користувача." + +msgid "Modify an User ID override." +msgstr "Змінити перевизначення ідентифікатора користувача." + +msgid "Rename the User ID override object" +msgstr "Перейменувати об’єкт перевизначення ідентифікатора користувача" + +msgid "Display information about an User ID override." +msgstr "Показати дані щодо перевизначення ідентифікатора користувача." + +msgid "Add a new ID View." +msgstr "Додати новий перегляд ідентифікаторів." + msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." msgstr "" -"\n" -"Діапазони ідентифікаторів\n" -"\n" -"Керування діапазонами ідентифікаторів, використаних для відображення\n" -"ідентифікаторів POSIX на SID, і навпаки.\n" -"\n" -"За допомогою цієї програми можна керувати обома типами діапазонів " -"ідентифікаторів:\n" -"\n" -" - діапазони ідентифікаторів локального домену\n" -" - діапазони ідентифікаторів довірених віддалених доменів\n" -"\n" -"Обидва типи мають такі спільні атрибути:\n" -"\n" -" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" -" - range-size: розмір діапазону\n" -"\n" -"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " -"ідентифікатори\n" -"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" -"\n" -"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" -" - rid-base: перший RID(*) відповідного діапазону RID\n" -" - secondary-rid-base: перший RID вторинного діапазону RID\n" -"\n" -"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" -" - rid-base: перший RID відповідного діапазону RID\n" -" - dom_sid: SID довіреного домену\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" -"\n" -"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" -"ідентифікаторів слід вказати SID домену.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" -"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" -"довіреного домену.\n" -"\n" -"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" -"значеннями:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" -"13999999. Отже RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" -"\n" -"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" -"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" -"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" -"RID.\n" -"\n" -" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"Дані з діапазонів ідентифікаторів локального домену використовуються\n" -"сервером IPA на внутрішньому рівні для призначення SID користувачам і " -"групам\n" -"IPA. SID буде збережено у об’єктах користувача або групи.\n" -"\n" -"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" -"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" -"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " -"1000007.\n" -"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" -"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" -"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" -"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" -"того, щоб повністю позбутися конфліктів.\n" -"\n" -"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " -"слід\n" -"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " -"RID,\n" -"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" -"base\n" -"або secondary-rid-base, відповідно, і додати base-id.\n" -"\n" -"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" -"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" -"для локального домену буде створено під час встановлення або оновлення\n" -"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" -"створено разом з записом довіри командою «ipa trust-add ...».\n" -"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" -"\n" -"ВИПАДКИ ВИКОРИСТАННЯ:\n" -"\n" -" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" -"\n" -" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" -" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" -" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" -"\n" -" Додавання додаткового діапазону ідентифікаторів для локального домену\n" -"\n" -" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " -"додатком\n" -" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" -" POSIX, має бути створено новий діапазон для додавання нових " -"користувачів\n" -" та груп. (У поточній версії між цим командним інтерфейсом і додатком " -"DNA\n" -" немає безпосереднього зв’язку, але у майбутній версії може бути " -"передбачено\n" -" можливість внесення змін і до налаштувань додатка DNS.)\n" -"\n" -"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" -"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" -"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" -"файловій системі і використовуються для керування доступом, можлива " -"ситуація,\n" -"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" -"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" -"у іншому домені.\n" -"\n" -"(*) RID типово є останнім цілим числом SID користувача або групи, перед " -"якими\n" -"має бути вказано SID домену. Наприклад, якщо SID домену " -"S-1-5-21-123-456-789, а\n" -"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " -"користувача\n" -"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" -"використовуються для користувачів і груп.\n" -"\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" -"налаштованих для локального домену. У поточній версії додаток DNA *не " -"можна*\n" -"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" -"за допомогою цього сімейства команд.\n" -"\n" -"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" -"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " -"«cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" -"він відповідав новому діапазону.\n" +"Застосовує перегляд ідентифікаторів до вказаних вузлів або поточних " +"учасників вказаних груп вузлів. Якщо до вузла застосовується якийсь інший " +"перегляд ідентифікаторів, його буде перевизначено." + +msgid "hosts" +msgstr "вузли" + +msgid "Hosts to apply the ID View to" +msgstr "Вузли, до яких слід застосувати перегляд ідентифікаторів" + +msgid "hostgroups" +msgstr "групи вузлів" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" +"Групи вузлів, до чиїх вузлів буде застосовано перегляд ідентифікаторів. Будь " +"ласка, зауважте, що перегляд не застосовується автоматично до жодних вузлів, " +"доданих до групи вузлів після виконання команди idview-apply." + +msgid "Hosts that this ID View was applied to." +msgstr "Вузли, до яких було застосовано цей перегляд ідентифікаторів." + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" +"Вузли або групи вузлів, до яких не можна застосувати цей перегляд " +"ідентифікаторів." + +msgid "Number of hosts the ID View was applied to:" +msgstr "Кількість вузлів, до яких застосовано перегляд ідентифікаторів:" + +msgid "Delete an ID View." +msgstr "Вилучити перегляд ідентифікаторів." + +msgid "Search for an ID View." +msgstr "Шукати перегляд ідентифікаторів." + +msgid "Modify an ID View." +msgstr "Змінити перегляд ідентифікаторів." + +msgid "Rename the ID View object" +msgstr "Перейменувати об’єкт перегляду ідентифікатора" + +msgid "Display information about an ID View." +msgstr "Показати дані щодо перегляду ідентифікаторів." + +msgid "Enumerate all the hosts the view applies to." +msgstr "Пронумерувати усі вузли, до яких застосовний перегляд." + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" +"Знімає перегляд ідентифікаторів із вказаних вузлів або поточних учасників " +"вказаних груп вузлів." + +msgid "Hosts to clear (any) ID View from." +msgstr "Вузли, з яких слід зняти (будь-який) перегляд ідентифікаторів." + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" +"Групи вузлів, для вузлів яких знято обробку переглядами ідентифікаторів. " +"Зауважте, що після запуску команди idview-unapply перегляд з будь-якого " +"вузла, доданого до групи вузлів, не зніматиметься автоматично." + +msgid "Hosts that ID View was cleared from." +msgstr "Вузли, з яких знято перегляд ідентифікаторів." + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" +"Вузли або групи вузлів, з яких не можна зняти перегляд ідентифікаторів." + +msgid "Number of hosts that had a ID View was unset:" +msgstr "Кількість вузлів, з яких знято перегляд ідентифікаторів:" msgid "" "\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" +"Plugins not accessible directly through the CLI, commands used internally\n" msgstr "" "\n" -"Діапазони ідентифікаторів\n" -"\n" -"Керування діапазонами ідентифікаторів, використаних для відображення\n" -"ідентифікаторів POSIX на SID, і навпаки.\n" -"\n" -"За допомогою цієї програми можна керувати обома типами діапазонів " -"ідентифікаторів:\n" -"\n" -" - діапазони ідентифікаторів локального домену\n" -" - діапазони ідентифікаторів довірених віддалених доменів\n" -"\n" -"Обидва типи мають такі спільні атрибути:\n" -"\n" -" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" -" - range-size: розмір діапазону\n" -"\n" -"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " -"ідентифікатори\n" -"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" -"\n" -"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" -" - rid-base: перший RID(*) відповідного діапазону RID\n" -" - secondary-rid-base: перший RID вторинного діапазону RID\n" -"\n" -"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" -" - rid-base: перший RID відповідного діапазону RID\n" -" - dom_sid: SID довіреного домену\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" -"\n" -"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" -"ідентифікаторів слід вказати SID домену.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" -"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" -"довіреного домену.\n" -"\n" -"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" -"значеннями:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" -"13999999. Отже RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" -"\n" -"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" -"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" -"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" -"RID.\n" -"\n" -" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"Дані з діапазонів ідентифікаторів локального домену використовуються\n" -"сервером IPA на внутрішньому рівні для призначення SID користувачам і " -"групам\n" -"IPA. SID буде збережено у об’єктах користувача або групи.\n" -"\n" -"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" -"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" -"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " -"1000007.\n" -"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" -"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" -"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" -"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" -"того, щоб повністю позбутися конфліктів.\n" -"\n" -"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " -"слід\n" -"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " -"RID,\n" -"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" -"base\n" -"або secondary-rid-base, відповідно, і додати base-id.\n" -"\n" -"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" -"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" -"для локального домену буде створено під час встановлення або оновлення\n" -"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" -"створено разом з записом довіри командою «ipa trust-add ...».\n" -"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" -"\n" -"ВИПАДКИ ВИКОРИСТАННЯ:\n" -"\n" -" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" -"\n" -" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" -" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" -" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" -"\n" -" Додавання додаткового діапазону ідентифікаторів для локального домену\n" -"\n" -" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " -"додатком\n" -" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" -" POSIX, має бути створено новий діапазон для додавання нових " -"користувачів\n" -" та груп. (У поточній версії між цим командним інтерфейсом і додатком " -"DNA\n" -" немає безпосереднього зв’язку, але у майбутній версії може бути " -"передбачено\n" -" можливість внесення змін і до налаштувань додатка DNS.)\n" -"\n" -"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" -"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" -"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" -"файловій системі і використовуються для керування доступом, можлива " -"ситуація,\n" -"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" -"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" -"у іншому домені.\n" -"\n" -"(*) RID типово є останнім цілим числом SID користувача або групи, перед " -"якими\n" -"має бути вказано SID домену. Наприклад, якщо SID домену " -"S-1-5-21-123-456-789, а\n" -"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " -"користувача\n" -"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" -"використовуються для користувачів і груп.\n" -"\n" -"=======\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" -"налаштованих для локального домену. У поточній версії додаток DNA *не " -"можна*\n" -"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" -"за допомогою цього сімейства команд.\n" -"\n" -"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" -"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " -"«cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" -"він відповідав новому діапазону.\n" -"=======\n" +"Інтерфейс командного рядка не надає безпосереднього доступу до додатків, " +"команди використано для внутрішньої обробки\n" -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" -"\n" -"Діапазони ідентифікаторів\n" -"\n" -"Керування діапазонами ідентифікаторів, використаних для відображення\n" -"ідентифікаторів POSIX на SID, і навпаки.\n" -"\n" -"За допомогою цієї програми можна керувати обома типами діапазонів " -"ідентифікаторів:\n" -"\n" -" - діапазони ідентифікаторів локального домену\n" -" - діапазони ідентифікаторів довірених віддалених доменів\n" -"\n" -"Обидва типи мають такі спільні атрибути:\n" -"\n" -" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" -" - range-size: розмір діапазону\n" -"\n" -"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " -"ідентифікатори\n" -"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" -"\n" -"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" -" - rid-base: перший RID(*) відповідного діапазону RID\n" -" - secondary-rid-base: перший RID вторинного діапазону RID\n" -"\n" -"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" -" - rid-base: перший RID відповідного діапазону RID\n" -" - dom_sid: SID довіреного домену\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" -"\n" -"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" -"ідентифікаторів слід вказати SID домену.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" -"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" -"довіреного домену.\n" -"\n" -"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" -"значеннями:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" -"13999999. Отже RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" -"\n" -"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" -"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" -"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" -"RID.\n" -"\n" -" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"Дані з діапазонів ідентифікаторів локального домену використовуються\n" -"сервером IPA на внутрішньому рівні для призначення SID користувачам і " -"групам\n" -"IPA. SID буде збережено у об’єктах користувача або групи.\n" -"\n" -"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" -"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" -"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " -"1000007.\n" -"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" -"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" -"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" -"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" -"того, щоб повністю позбутися конфліктів.\n" -"\n" -"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " -"слід\n" -"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " -"RID,\n" -"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" -"base\n" -"або secondary-rid-base, відповідно, і додати base-id.\n" -"\n" -"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" -"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" -"для локального домену буде створено під час встановлення або оновлення\n" -"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" -"створено разом з записом довіри командою «ipa trust-add ...».\n" -"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" -"\n" -"ВИПАДКИ ВИКОРИСТАННЯ:\n" -"\n" -" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" -"\n" -" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" -" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" -" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" -"\n" -" Додавання додаткового діапазону ідентифікаторів для локального домену\n" -"\n" -" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " -"додатком\n" -" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" -" POSIX, має бути створено новий діапазон для додавання нових " -"користувачів\n" -" та груп. (У поточній версії між цим командним інтерфейсом і додатком " -"DNA\n" -" немає безпосереднього зв’язку, але у майбутній версії може бути " -"передбачено\n" -" можливість внесення змін і до налаштувань додатка DNS.)\n" -"\n" -"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" -"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" -"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" -"файловій системі і використовуються для керування доступом, можлива " -"ситуація,\n" -"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" -"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" -"у іншому домені.\n" -"\n" -"(*) RID типово є останнім цілим числом SID користувача або групи, перед " -"якими\n" -"має бути вказано SID домену. Наприклад, якщо SID домену " -"S-1-5-21-123-456-789, а\n" -"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " -"користувача\n" -"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" -"використовуються для користувачів і груп.\n" -"\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" -"налаштованих для локального домену. У поточній версії додаток DNA *не " -"можна*\n" -"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" -"за допомогою цього сімейства команд.\n" -"\n" -"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" -"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " -"«cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" -"він відповідав новому діапазону.\n" +msgid "Dict of I18N messages" +msgstr "Словник перекладених повідомлень" -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" -"\n" -"Діапазони ідентифікаторів\n" -"\n" -"Керування діапазонами ідентифікаторів, використаних для відображення\n" -"ідентифікаторів POSIX на SID, і навпаки.\n" -"\n" -"За допомогою цієї програми можна керувати обома типами діапазонів " -"ідентифікаторів:\n" -"\n" -" - діапазони ідентифікаторів локального домену\n" -" - діапазони ідентифікаторів довірених віддалених доменів\n" -"\n" -"Обидва типи мають такі спільні атрибути:\n" -"\n" -" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" -" - range-size: розмір діапазону\n" -"\n" -"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " -"ідентифікатори\n" -"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" -"\n" -"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" -" - rid-base: перший RID(*) відповідного діапазону RID\n" -" - secondary-rid-base: перший RID вторинного діапазону RID\n" -"\n" -"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" -" - rid-base: перший RID відповідного діапазону RID\n" -" - dom_sid: SID довіреного домену\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" -"\n" -"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" -"ідентифікаторів слід вказати SID домену.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" -"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" -"довіреного домену.\n" -"\n" -"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" -"значеннями:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" -"13999999. Отже RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" -"\n" -"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" -"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" -"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" -"RID.\n" -"\n" -" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"Дані з діапазонів ідентифікаторів локального домену використовуються\n" -"сервером IPA на внутрішньому рівні для призначення SID користувачам і " -"групам\n" -"IPA. SID буде збережено у об’єктах користувача або групи.\n" -"\n" -"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" -"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" -"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " -"1000007.\n" -"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" -"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" -"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" -"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" -"того, щоб повністю позбутися конфліктів.\n" -"\n" -"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " -"слід\n" -"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " -"RID,\n" -"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" -"base\n" -"або secondary-rid-base, відповідно, і додати base-id.\n" -"\n" -"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" -"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" -"для локального домену буде створено під час встановлення або оновлення\n" -"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" -"створено разом з записом довіри командою «ipa trust-add ...».\n" -"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" -"\n" -"ВИПАДКИ ВИКОРИСТАННЯ:\n" -"\n" -" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" -"\n" -" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" -" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" -" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" -"\n" -" Додавання додаткового діапазону ідентифікаторів для локального домену\n" -"\n" -" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " -"додатком\n" -" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" -" POSIX, має бути створено новий діапазон для додавання нових " -"користувачів\n" -" та груп. (У поточній версії між цим командним інтерфейсом і додатком " -"DNA\n" -" немає безпосереднього зв’язку, але у майбутній версії може бути " -"передбачено\n" -" можливість внесення змін і до налаштувань додатка DNS.)\n" -"\n" -"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" -"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" -"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" -"файловій системі і використовуються для керування доступом, можлива " -"ситуація,\n" -"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" -"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" -"у іншому домені.\n" -"\n" -"(*) RID типово є останнім цілим числом SID користувача або групи, перед " -"якими\n" -"має бути вказано SID домену. Наприклад, якщо SID домену " -"S-1-5-21-123-456-789, а\n" -"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " -"користувача\n" -"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" -"використовуються для користувачів і груп.\n" +msgid "Export plugin meta-data for the webUI." +msgstr "Експортувати метадані додатка для webUI." -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" -"\n" -"Дії з сертифікатами IPA\n" +msgid "Name of object to export" +msgstr "Назва об’єкта, який слід експортувати" -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" -"\n" -"Дії з сертифікатами IPA\n" -"\n" -"Реалізує набір команд для керування сертифікатами серверів SSL.\n" -"\n" -"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" -"і форматі PEM.\n" -"\n" -"Якщо використовується модуль самопідписування, призначення у CSR має\n" -"збігатися із призначенням, вказаним на сервері. Служба сертифікації dogtag\n" -"використовує лише значення CN CSR і примусово встановлює\n" -"решту параметрів призначення за налаштуваннями сервера.\n" -"\n" -"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" -"потребує вузла.\n" -"\n" -"Для того, щоб створити запит щодо сертифіката:\n" -"\n" -"* Вузол має існувати\n" -"* Служба має існувати (або слід скористатися параметром --add " -"дляавтоматичного додавання)\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " -"cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Отримати вже створений сертифікат:\n" -" ipa cert-show 1032\n" -"\n" -" Відкликати сертифікат (причини визначено у RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Вилучити сертифікат зі списку відкликання:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Перевірити стан запиту щодо підписування:\n" -" ipa cert-status 10\n" -"\n" -"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" -"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" -"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" -"сертифікат не одразу.\n" -"\n" -"Передбачено підтримку таких причин відкликання:\n" -"\n" -" * 0 - не визначено\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " -"5280:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +msgid "Name of method to export" +msgstr "Назва методу, який буде експортовано" -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" -"\n" -"Дії з сертифікатами IPA\n" -"\n" -"Реалізує набір команд для керування сертифікатами серверів SSL.\n" -"\n" -"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" -"і форматі PEM.\n" -"\n" -"Якщо використовується автопідписний модуль, призначення CSR має збігатися\n" -"з призначенням на сервері. Служба сертифікації використовує лише CN\n" -"CSR і примусово визначає призначення.\n" -"\n" -"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" -"потребує вузла.\n" -"\n" -"Для того, щоб створити запит щодо сертифіката:\n" -"\n" -"* Вузол має існувати\n" -"* Служба має існувати (або слід скористатися параметром --add для\n" -"автоматичного додавання)\n" -"\n" -"ПОШУК:\n" -"\n" -"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" -"причиною відкликання, датами чинності та датою видання.\n" -"\n" -"Якщо пошук виконується за датою _від, використовується порівняння >=, а " -"якщо\n" -"виконується пошук _до дати — порівняння <=. Поєднання обох пошуків " -"призводить\n" -"до пошуку з логічним поєднанням ТА.\n" -"\n" -"Дати обробляються як дати за Гринвічем, відповідно до дат визначених у\n" -"сертифікатах.\n" -"\n" -"Формат дати є таким: РРРР-мм-дд.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створити запит щодо нового сертифіката і додати реєстраційний запис:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Отримати вже створений сертифікат:\n" -" ipa cert-show 1032\n" -"\n" -" Відкликати сертифікат (причини визначено у RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Вилучити сертифікат зі списку відкликання:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Перевірити стан запиту щодо підписування:\n" -" ipa cert-status 10\n" -"\n" -" Пошук сертифікатів за назвою вузла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Пошук відкликаних сертифікатів за причиною:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Пошук сертифікатів за датою видання\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" -"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" -"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" -"сертифікат не одразу.\n" -"\n" -"Передбачено підтримку таких причин відкликання:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " -"5280:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +msgid "Name of command to export" +msgstr "Назва команди для експортування" -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" -"\n" -"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" -"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" -"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" -"сертифікат не одразу.\n" +msgid "Dict of JSON encoded IPA Objects" +msgstr "Словник закодованих JSON об’єктів IPA" -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"Місця IPA\n" +msgid "Dict of JSON encoded IPA Methods" +msgstr "Словник JSON-закодованих методів IPA" -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" -"\n" -"У IPA передбачено визначений binddn для використання з sudo, який " -"розташовано у\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" -" Users: користувачі або групи, які можуть викликати sudo.\n" -" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" -" Allow Command: специфічні команди, які можна виконувати за допомогою " -"sudo.\n" -" Deny Command: специфічні команди, які не можна виконувати за допомогою " -"sudo.\n" -" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " -"команди.\n" -" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " -"виконання команд.\n" -" Options: різноманітні параметри sudoers, які можуть змінити поведінку " -"sudo.\n" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Ролі сервера IPA\n" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" -"\n" -"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" -"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " -"із доменом дані\n" -"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" -" містяться дані для компонента сервера сертифікатів.\n" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"Сервери IPA\n" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -"Сервери IPA\n" -"\n" -"Отримати дані щодо встановлених серверів IPA.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Знайти усі сервери:\n" -" ipa server-find\n" -"\n" -" Показати вказаний сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " -"розпізнавання.\n" -"За допомогою цього коду уможливлюється керування жетонами OTP.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"У IPA передбачено підтримку зовнішнього проксі-сервера RADIUS для\n" -"виконання розпізнавання OTP krb5. Це надає системі значної гнучкості\n" -"з метою інтеграції зі сторонніми службами розпізнавання.\n" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" -"\n" -"У IPA передбачено підтримку використання сертифікатів для розпізнавання. " -"Сертифікати\n" -"можуть зберігатися або у записі користувача (весь сертифікат у атрибуті\n" -"usercertificate), або просто прив’язуватися до запису користувача.\n" -"Цей код уможливлює керування правилами доступу до прив’язування сертифіката " -"до\n" -"запису користувача.\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" -"\n" -"Реалізує набір команд для керування сертифікатами серверів SSL.\n" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" -"\n" -"Для того, щоб створити запит щодо сертифіката:\n" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" -"\n" -"Робота з такими записами DNS без помилки і введення некоректного значення\n" -"може бути складною. Модуль DNS надає у ваше розпорядження абстракцію над\n" -"цими необробленими записами і спосіб керування кожним з типів RR за\n" -"допомогою специфічних параметрів. Для кожного з підтримуваних типів\n" -"RR у модулі DNS передбачено стандартний параметр для роботи із\n" -"необробленими записами за допомогою формату --<тип_rr>-rec, наприклад,\n" -"--mx-rec та зі спеціальними параметрами для кожної із частин структури RR\n" -"за допомогою формату --<тип_rr>-<назва_частини>, наприклад --mx-preference\n" -"та --mx-exchanger.\n" +msgid "Dict of JSON encoded IPA Commands" +msgstr "Словник закодованих JSON команд IPA" msgid "" "\n" @@ -8922,84 +4889,20 @@ msgstr "" "\n" "Долучення до домену IPA\n" -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Засоби звітування щодо стану можливості PKINIT Kerberos\n" -"\n" -"Звітування щодо того, увімкнено чи вимкнено PKINIT у Kerberos на основних " -"елементах IPA\n" -"\n" -"ПРИКЛАДИ:\n" -" Вивести список станів PKINIT для усіх основних елементів:\n" -" ipa pkinit-status\n" -"\n" -" Перевірити стан PKINIT на «ipa.example.com»:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" Вивести список усіх основних елементів IPA із вимкненим PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"Докладніші дані щодо підтримки PKINIT:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgid "Join an IPA domain" +msgstr "Долучитися до домену IPA" -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" -"\n" -"Параметри pkinit Kerberos\n" -"\n" -"Вмикання або вимикання анонімного pkinit за допомогою реєстраційного\n" -"запису WELLKNOWN/ANONYMOUS@REALM. Має бути встановлено сервер з\n" -"підтримкою pkinit.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Вмикання анонімного pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Вимикання анонімного pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"Щоб дізнатися більше про анонімний pkinit відвідайте цю сторінку:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgid "The hostname to register as" +msgstr "Назва вузла для реєстрації" + +msgid "The IPA realm" +msgstr "Область IPA" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Апаратна платформа вузла (наприклад, «Lenovo T61»)" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Операційна система вузла і її версія (наприклад, «Fedora 9»)" msgid "" "\n" @@ -9078,549 +4981,32 @@ msgstr "" " Зміна окремих правил для користувача «admin»:\n" " ipa krbtpolicy-mod admin --maxlife=3600\n" -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" -"\n" -" Стан блокування облікового запису користувача\n" -"\n" -" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" -" забагато разів протягом певного проміжку часу, який визначається " -"правилами\n" -" роботи з паролями. Блокування облікового запису є тимчасовим станом, " -"його\n" -" може бути розблоковано адміністратором.\n" -"\n" -" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" -" блокування на кожному з них.\n" -"\n" -" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " -"слід\n" -" виконати порівняння кількості помилкових спроб входу та час останньої\n" -" невдалої спроби з еталонними значеннями. Обліковий запис буде " -"заблоковано,\n" -" якщо буде перевищено кількість maxfail помилкових спроб протягом " -"проміжку\n" -" часу failinterval. Відповідні значення задаються правилами обробки " -"паролів,\n" -" пов’язаними з обліковим записом користувача.\n" -"\n" -" Зміни до лічильника помилкових спроб входу вносяться, лише коли " -"користувач\n" -" виконує спробу увійти, тому може статися так, що обліковий запис " -"заблоковано,\n" -" хоча час, що минув з останньої помилкової спроби, перевищує час " -"блокування\n" -" (lockouttime), заданий правилам обробки паролів. Це означає, що " -"користувач\n" -" може увійти до системи знову.\n" -" " +msgid "User name" +msgstr "Ім'я користувача" -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" -"\n" -"Керування правилами ACL CA.\n" -"\n" -"Цим додатком можна скористатися для визначення правил керування тим,\n" -"які служби сертифікації та профілі можна використовувати для видавання\n" -"сертифікатів певним реєстраційним записам або група реєстраційних\n" -"записів.\n" -"\n" -"ОБЛАСТЬ ДІЇ РЕЄСТРАЦІЙНИХ ЗАПИСІВ ОБ’ЄКТА:\n" -"\n" -"Щоб запит щодо сертифікації було задоволено, реєстраційні записи,\n" -"які є об’єктом запиту щодо сертифікації (необов’язково ті самі,\n" -"що і реєстраційний запис, з якого надсилається запит щодо сертифікації)\n" -"має бути включено до області дії ACL служби сертифікації, що\n" -"також включає службу сертифікації та профіль призначення.\n" -"\n" -"Користувачів можна включати за іменем, групою або категорією\n" -"«усі користувачі». Вузли можна включати за назвою, групою вузлів\n" -"або категорією «усі вузли». Служби можна включати за назвою служби\n" -"або категорією «усі служби». ACL служб сертифікації може бути\n" -"пов’язано із одним типом реєстраційних записів або із декількома\n" -"типами.\n" -"\n" -"ОБЛАСТЬ ДІЇ СЛУЖБИ СЕРТИФІКАЦІЇ:\n" -"\n" -"ACL служби сертифікації може бути пов’язано із однією або\n" -"декількома службами сертифікації за назвою або за категорією\n" -"«усі CA». З міркувань сумісності ACL служби сертифікації без\n" -"прив’язки до служби сертифікації вважається таким, що пов’язано\n" -"із службою сертифікації «ipa» (і лише з цією службою сертифікації).\n" -"\n" -"ОБЛАСТЬ ДІЇ ПРОФІЛІВ:\n" -"\n" -"ACL служби сертифікації може бути пов’язано із одним або декількома\n" -"профілями за ідентифікатором профілю. Ідентифікатором профілю\n" -"вважається рядок без пробілів і символів пунктуації, що починається\n" -"із літери і є послідовністю літер, цифр та символів підкреслювання\n" -"(«_»).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створити ACL служби сертифікації «test», який надає доступ усім\n" -" користувачам до профілю «UserCert» на усіх службах сертифікації:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Вивести властивості вказаного за назвою ACL служби сертифікації:\n" -" ipa caacl-show test\n" -"\n" -" Створити ACL служби сертифікації, який надаватиме змогу\n" -" користувачеві «alice» використовувати профіль «DNP3» на «DNP3-CA»:\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Вимкнути ACL служби сертифікації:\n" -" ipa caacl-disable test\n" -"\n" -" Вилучити ACL служби сертифікації:\n" -" ipa caacl-del test\n" +msgid "Manage ticket policy for specific user" +msgstr "Керування правилами обробки квитків певного користувача" -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" -"\n" -"Керування правилами CA ACL.\n" -"\n" -"Цей додаток призначено для визначення правил, що керують тим,\n" -"які реєстраційні записи можуть мати сертифікати, випущені за\n" -"допомогою даного профілю сертифікатів.\n" -"\n" -"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" -"\n" -"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" -"що починається з літери і складається з послідовності літер, цифр, та " -"символів підкреслювання («_»).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створити CA ACL «test», який надає доступ усім користувачам до\n" -" профілю «UserCert»:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Показати усі властивості вказаного за назвою CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Створити CA ACL, який надає користувачеві «alice» право\n" -" використовувати профіль «DNP3»:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Вимкнути певний CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Вилучити певний CA ACL:\n" -" ipa caacl-del test\n" +msgid "Max life" +msgstr "Макс. строк дії" -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" -"\n" -"Керування службами сертифікації\n" +msgid "Maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка (у секундах)" -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" -"\n" -"Керування налаштуваннями і правилами прив’язки сертифікатів до профілів.\n" +msgid "Max renew" +msgstr "Макс. вік поновлення" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" -"\n" -"Керування профілями сертифікатів\n" -"\n" -"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" -"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" -"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" -"і розширень, які буде надано сертифікатом.\n" -"\n" -"Форматом профілю сертифікатів є список значень, які може обробляти\n" -"Dogtag або система сертифікації служби сертифікації Red Hat.\n" -"\n" -"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" -"\n" -"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" -"що починається з літери і складається з послідовності літер, цифр, та " -"символів підкреслювання («_»).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Вилучити профіль сертифікатів:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показати дані щодо профілю:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Зберегти налаштування профілю до файла:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Шукати профілі, у яких не зберігаються сертифікати:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" -"\n" -"Налаштування профілю зберігаються у вигляді простого списку\n" -"властивостей, що використовується системою сертифікації Dogtag.\n" -"Підтримки формату XML не передбачено.\n" -"\n" -"Профілів, які керуються IPA, стосуються такі обмеження:\n" -"\n" -"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" -" містити значення, що збігається з ідентифікатором, вказаним у рядку " -"команди.\n" -"\n" -"- Значенням поля «classId» має бути «caEnrollImpl»\n" -"\n" -"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" -"\n" -"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" -" клас «certOutputImpl».\n" +msgid "Maximum renewable age (seconds)" +msgstr "Максимальний вік, протягом якого можливе поновлення (у секундах)" -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" -"\n" -"Керування профілями сертифікатів\n" -"\n" -"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" -"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" -"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" -"і розширень, які буде надано сертифікатом.\n" -"\n" -"Форматом профілю сертифікатів є список значень, які може обробляти\n" -"Dogtag або система сертифікації служби сертифікації Red Hat.\n" -"\n" -"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" -"\n" -"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" -"що починається з літери і складається з послідовності літер, цифр, та " -"символів підкреслювання («_»).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Вилучити профіль сертифікатів:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показати дані щодо профілю:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Зберегти налаштування профілю до файла:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Шукати профілі, у яких не зберігаються сертифікати:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" -"\n" -"Налаштування профілю зберігаються у вигляді простого списку\n" -"властивостей, що використовується системою сертифікації Dogtag.\n" -"Підтримки формату XML не передбачено.\n" -"\n" -"Профілів, які керуються IPA, стосуються такі обмеження:\n" -"\n" -"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" -" містити значення, що збігається з ідентифікатором, вказаним у рядку " -"команди.\n" -"\n" -"- Значенням поля «classId» має бути «caEnrollImpl»\n" -"\n" -"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" -"\n" -"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" -" клас «certOutputImpl».\n" -"\n" +msgid "Modify Kerberos ticket policy." +msgstr "Змінити правила квитків Kerberos." -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" -"\n" -"Керування записами зон та ресурсів DNS.\n" +msgid "Reset Kerberos ticket policy to the default values." +msgstr "Відновити типові правила квитків Kerberos." -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Керування жетонами OTP.\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Керування проксі-серверами RADIUS.\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Керування жетонами YubiKey.\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Керування сховищами.\n" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"Керовані права доступу\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Робота з місцями DNS\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Керування налаштуваннями сервера DNS\n" +msgid "Display the current Kerberos ticket policy." +msgstr "Показати поточні правила квитків Kerberos." msgid "" "\n" @@ -9816,206 +5202,135 @@ msgstr "" "додаватиметься резюме щодо кожного оновлення типової групи\n" "користувачів.\n" +msgid "Migrate users and groups from DS to IPA." +msgstr "Перенести дані користувачів і груп з DS до IPA." + +msgid "LDAP URI" +msgstr "URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "URI LDAP сервера DS, з якого здійснюватиметься міграція" + +msgid "bind password" +msgstr "пароль прив’язки" + +msgid "Bind DN" +msgstr "DN для прив'язки" + +msgid "User container" +msgstr "Контейнер користувачів" + +msgid "DN of container for users in DS relative to base DN" +msgstr "DN контейнера користувачів у DS відносно до основного DN" + +msgid "Group container" +msgstr "Контейнер груп" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "DN контейнера груп у DS відносно до основного DN" + +msgid "User object class" +msgstr "Клас об’єктів користувача" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "Класи об’єктів, використаних для пошуку записів користувачів у DS" + +msgid "Group object class" +msgstr "Клас об’єктів групи" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "Класи об’єктів, використаних для пошуку записів груп у DS" + +msgid "Ignore user object class" +msgstr "Ігнорувати клас об’єктів користувача" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "Класи об’єктів, які буде проігноровано для записів користувачів у DS" + +msgid "Ignore user attribute" +msgstr "Ігнорувати атрибут користувача" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "Атрибути, які буде проігноровано для записів користувачів у DS" + +msgid "Ignore group object class" +msgstr "Ігнорувати клас об’єктів групи" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "Класи об’єктів, які буде проігноровано для записів груп у DS" + +msgid "Ignore group attribute" +msgstr "Ігнорувати атрибут групи" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "Атрибути, які буде проігноровано для записів груп у DS" + +msgid "Overwrite GID" +msgstr "Перезаписати ідентифікатор групи" + msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" msgstr "" -"\n" -"Перехід на IPA\n" -"\n" -"Перенесення користувачів і груп з сервера LDAP на IPA.\n" -"\n" -"Надсилає запит LDAP до віддаленого сервера з метою пошуку користувачів\n" -"і груп у контейнері. З метою перенесення паролів вам слід прив’язатися\n" -"до сервера від імені користувача, який може читати атрибут userPassword\n" -"на сервері. Перелік таких користувачів зазвичай обмежено адміністраторами\n" -"вищого рівня, зокрема cn=Directory Manager на 389-ds (типовий користувач\n" -"bind).\n" -"\n" -"Типовим контейнером користувачів є ou=People.\n" -"\n" -"Типовим контейнером груп є ou=Groups.\n" -"\n" -"Записи користувачів і груп, які вже створено на сервері IPA буде\n" -"пропущено.\n" -"\n" -"Дві схеми LDAP визначають спосіб зберігання записів учасників групи:\n" -"RFC2307 і RFC2307bis. RFC2307bis використовує атрибути member і\n" -"uniquemember для визначення учасників групи, RFC2307 використовує\n" -"memberUid. Типовою є схема RFC2307bis.\n" -"\n" -"За допомогою додатка compat IPA може повторно форматувати дані для систем,\n" -"де не передбачено підтримки RFC2307bis. Рекомендується вимикати цей додаток\n" -"під час перенесення, щоб зменшити навантаження на систему. Ви зможете\n" -"увімкнути його після перенесення. Щоб перенести дані з увімкненим додатком\n" -"скористайтеся параметром «--with-compat».\n" -"\n" -"Перенесені користувачі не матимуть реєстраційних записів Kerberos,\n" -"перенесено буде лише пароль LDAP. Щоб завершити процес перенесення,\n" -"користувачам слід відкрити сторінку\n" -"http://ipa.example.com/ipa/migration і пройти розпізнавання за\n" -"допомогою пароля LDAP з метою створення запису реєстраційних даних\n" -"Kerberos.\n" -"\n" -"Типово перенесення вимкнено. Для його вмикання скористайтеся командою\n" -"ipa config-mod:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Якщо основний DN не буде надано за допомогою --basedn, IPA " -"використовуватиме\n" -"значення defaultNamingContext, якщо його встановлено, або перше значення у\n" -"наборі namingContexts у кореневій теці віддаленого сервера LDAP.\n" -"\n" -"Записи користувачів додають до типової групи користувачів. Процес такого\n" -"додавання може бути доволі тривалим, отже під час перенесення він " -"виконується\n" -"у пакетному режимі, пакетами по 100 користувачів. У результаті буде певний\n" -"період, коли записи користувачів вже буде додано до IPA, але ці користувачі\n" -"ще не будуть учасниками типової групи користувачів.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Найпростіше перенесення з типовими параметрами:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Визначення контейнерів користувача і групи. Можна скористатися для\n" -" перенесення даних користувача і групи з сервера IPA версії 1:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Оскільки на сервері IPA версії 2 вже передбачено попередньо\n" -" визначені групи, які можуть збігатися з групами, які переносяться з\n" -" сервера (IPA версії 1), наприклад admins, ipausers, користувачів з\n" -" таких груп може бути перенесено до невідомої (unknown) групи на\n" -" новому сервері IPA версії 2.\n" -" Скористайтеся параметром --group-overwrite-gid для перезапису\n" -" ідентифікатора групи вже створених груп для запобігання цій\n" -" незручності:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Перенесені дані користувачів та груп можуть містити класи об’єктів та " -"супутні\n" -" атрибути, невідомі серверу IPA версії 2. Ці класти об’єктів та атрибутів\n" -" може бути виключено з процедури перенесення даних:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"ВЕДЕННЯ ЖУРНАЛУ\n" -"\n" -"Під час перенесення повідомлення з попередженнями та записами помилок\n" -"додаватимуться до журналу помилок Apache. З відповідним файлом слід\n" -"ознайомитися після завершення перенесення для виправлення та виявлення\n" -"помилок, які могли статися.\n" -"\n" -"Для кожного пакета зі 100 перенесених записів користувачів буде показано\n" -"інформаційне повідомлення, призначене для оцінки поступу обробки та\n" -"визначення її тривалості.\n" -"\n" -"Якщо визначено рівень ведення журналу debug за допомогою встановлення\n" -"debug = True у /etc/ipa/default.conf або у /etc/ipa/server.conf,\n" -"для кожного перенесеного запису додаватиметься власний запис, також\n" -"додаватиметься резюме щодо кожного оновлення типової групи\n" -"користувачів.\n" +"Під час перенесення групи, яку вже створено у домені IPA буде перезаписано " +"ідентифікатор групи і повідомлено про успіх" + +msgid "LDAP schema" +msgstr "Схема LDAP" + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"Схема, використана на сервері LDAP. Підтримувані значення: RFC2307 і " +"RFC2307bis. Типове значення: RFC2307bis" + +msgid "Continue" +msgstr "Продовжити" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" +"Режим неперервної обробки. Програма повідомляє про помилки, але продовжує " +"обробку." + +msgid "Base DN" +msgstr "Кореневий DN" + +msgid "Base DN on remote LDAP server" +msgstr "Основний DN на віддаленому сервері LDAP" + +msgid "Ignore compat plugin" +msgstr "Ігнорувати додаток compat" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "Уможливлює перенесення, незважаючи на використання додатка compat" + +msgid "CA certificate" +msgstr "Сертифікат CA" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Завантажити сертифікат CA сервера LDAP з вказаного файла" + +msgid "groups to exclude from migration" +msgstr "групи, які слід виключити з перенесення" + +msgid "users to exclude from migration" +msgstr "записи користувачів, які слід виключити з перенесення" + +msgid "Lists of objects migrated; categorized by type." +msgstr "Списки об’єктів, міграцію яких виконано; впорядкований за типами." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" +"Списки об’єктів, міграцію яких не вдалося виконати; впорядкований за типами." + +msgid "False if migration mode was disabled." +msgstr "False, якщо режим міграції було вимкнено." + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" +"False, якщо перенесення зазнає невдачі через увімкнення додатка сумісності." msgid "" "\n" @@ -10024,61 +5339,34 @@ msgstr "" "\n" "Інші додатки\n" -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Змінити діапазон ідентифікаторів.\n" -"\n" -"=======\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -"Додаток DNA у 389-ds розподілятиме ідентифікатори на основі діапазонів,\n" -"налаштованих для локального домену. У поточній версії додаток DNA *не може*\n" -"переналаштуватися на основі локальних діапазонів, встановлених цим\n" -"сімейством команд.\n" -"\n" -"Для використання нового локального діапазону до налаштувань додатка DNA\n" -"слід внести зміни вручну. Зокрема, слід змінити атрибут dnaNextRange " -"'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' так, щоб\n" -"він відповідав новому діапазону.\n" -"=======\n" -" " +msgid "Show environment variables." +msgstr "Показати змінні середовища." + +msgid "Forward to server instead of running locally" +msgstr "Переспрямувати на сервер замість локального виконання" msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " +"retrieve and print all attributes from the server. Affects command output." msgstr "" -"\n" -" Змінити запис довіри (для наступного використання).\n" -"\n" -" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" -" Додаткові варіанти буде додано у наступних випусках.\n" -" " +"отримати і вивести всі атрибути з сервера. Стосується лише виводу команд." + +msgid "Dictionary mapping variable name to value" +msgstr "Відображення назви змінної на значення за словником" + +msgid "Total number of variables env (>= count)" +msgstr "Кількість змінних env (>= count)" + +msgid "Number of variables returned (<= total)" +msgstr "Кількість повернутих змінних (<= загальної)" + +msgid "Show all loaded plugins." +msgstr "Показати список завантажених додатків." + +msgid "Dictionary mapping plugin names to bases" +msgstr "Словник для встановлення відповідності назв додатків основним" + +msgid "Number of plugins loaded" +msgstr "Кількість завантажених додатків" msgid "" "\n" @@ -10127,126 +5415,107 @@ msgstr "" " Вилучення мережевої групи:\n" " ipa netgroup-del admins\n" -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" -"\n" -"Мережеві групи\n" -"\n" -"Мережева група — група для перевірки прав доступу. Може містити значення\n" -"користувачів та вузлів.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової мережевої групи:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Додавання учасників до мережевої групи:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Вилучення користувача з мережевої групи:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Показ даних щодо мережевої групи:\n" -" ipa netgroup-show admins\n" -"\n" -" Вилучення мережевої групи:\n" -" ipa netgroup-del admins\n" +msgid "Netgroup name" +msgstr "Назва мережевої групи" -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" -"\n" -"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " -"5280:\n" +msgid "Netgroup description" +msgstr "Опис мережевої групи" -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"Зауважте відмінність між атрибутами і записами. Права доступу є " -"незалежними,\n" -"отже можливість додавання запису користувача не означає, що цей запис " -"згодом\n" -"буде придатним до редагування.\n" +msgid "NIS domain name" +msgstr "Назва домену NIS" -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Жетони OTP\n" +msgid "IPA unique ID" +msgstr "Унікальний ід. IPA" -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -"Жетони OTP\n" -"\n" -"Керування жетонами OTP.\n" -"\n" -"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " -"розпізнавання.\n" -"За допомогою цього коду уможливлюється керування жетонами OTP.\n" -"\n" -" Додати новий жетон:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Перевірити жетон:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Змінити постачальника:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Вилучити жетон:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgid "Member netgroups" +msgstr "Мережеві групи учасника" + +msgid "Indirect Member netgroups" +msgstr "Опосередковані мережеві групи учасника" + +msgid "Member User" +msgstr "Користувач учасника" + +msgid "Member Group" +msgstr "Група учасника" + +msgid "Member Host" +msgstr "Вузол-учасник" + +msgid "Member Hostgroup" +msgstr "Група вузлів учасника" + +msgid "Add a new netgroup." +msgstr "Додати нову мережеву групу." + +msgid "Add members to a netgroup." +msgstr "Додати учасників до мережевої групи." + +msgid "member netgroup" +msgstr "мережева група учасника" + +msgid "netgroups to add" +msgstr "мережеві групи, які слід додати" + +msgid "Delete a netgroup." +msgstr "Вилучити мережеву групу." + +msgid "Search for a netgroup." +msgstr "Шукати мережеву групу." + +msgid "search for managed groups" +msgstr "шукати керовані групи" + +msgid "Search for netgroups with these member netgroups." +msgstr "Шукати мережеві групи з цими мережевими групами-учасниками." + +msgid "Search for netgroups without these member netgroups." +msgstr "Шукати мережеві групи без цих мережевих груп-учасників." + +msgid "Search for netgroups with these member users." +msgstr "Шукати мережеві групи з цими користувачами-учасниками." + +msgid "Search for netgroups without these member users." +msgstr "Шукати мережеві групи без цих користувачів-учасників." + +msgid "group" +msgstr "група" + +msgid "Search for netgroups with these member groups." +msgstr "Шукати мережеві групи із вказаними групами-учасниками." + +msgid "Search for netgroups without these member groups." +msgstr "Шукати мережеві групи без цих груп-учасників." + +msgid "Search for netgroups with these member hosts." +msgstr "Шукати мережеві групи з цими вузлами-учасниками." + +msgid "Search for netgroups without these member hosts." +msgstr "Шукати мережеві групи без цих вузлів-учасників." + +msgid "Search for netgroups with these member host groups." +msgstr "Шукати мережеві групи із вказаними групами вузлів-учасниками." + +msgid "Search for netgroups without these member host groups." +msgstr "Шукати мережеві групи без цих груп вузлів-учасників." + +msgid "Search for netgroups with these member of netgroups." +msgstr "Шукати мережеві групи з цими мережевими групами участі." + +msgid "Search for netgroups without these member of netgroups." +msgstr "Шукати мережеві групи без цих мережевих груп участі." + +msgid "Modify a netgroup." +msgstr "Змінити мережеву групу." + +msgid "Remove members from a netgroup." +msgstr "Вилучити учасників з мережевої групи." + +msgid "netgroups to remove" +msgstr "мережеві групи для вилучення" + +msgid "Display information about a netgroup." +msgstr "Показати дані щодо мережевої групи." msgid "" "\n" @@ -10299,217 +5568,116 @@ msgstr "" " Змінити тривалість максимального вікна синхронізації HOTP на 50:\n" " ipa hotpconfig-mod --hotp-sync-window=50\n" -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" -"\n" -"Правила паролів\n" -"\n" -"Правила паролів встановлюють обмеження щодо використання паролів IPA,\n" -"зокрема максимальний строк дії, мінімальний строк дії, кількість паролів,\n" -"які зберігатимуться у журналі, потрібна кількість класів символів (для\n" -"складних паролів) та мінімальну довжину пароля.\n" -"\n" -"Типово, визначено одні загальні правила для всіх користувачів. Ви можете\n" -"створити правило паролів, яке стосуватиметься однієї групи. Для одного\n" -"користувача може бути використано лише один набір правил паролів: груповий\n" -"або загальний. Групові правила паролів є незалежними, вони не є загальними\n" -"правилами з додаванням нетипових параметрів.\n" -"\n" -"Для кожного набору групових правил паролів має бути встановлено окреме\n" -"значення пріоритету. Якщо користувач є учасником декількох груп, для яких\n" -"встановлено правила паролів, пріоритет визначає, які з правил має бути\n" -"застосовано. Менші значення відповідають вищому пріоритету правил.\n" -"\n" -"Групові правила паролів автоматично вилучаються під час вилучення\n" -"відповідних груп.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Внесення змін до загальних правил:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Додавання нових групових правил паролів:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Показ загальних правил паролів:\n" -" ipa pwpolicy-show\n" -"\n" -" Показ групових правил паролів:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Показ правил, які має бути застосовано до певного користувача:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Внесення змін до групових правил паролів:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgid "TOTP authentication Window" +msgstr "Вікно розпізнавання TOTP" + +msgid "TOTP authentication time variance (seconds)" +msgstr "Відхилення часу розпізнавання TOTP (у секундах)" + +msgid "TOTP Synchronization Window" +msgstr "Вікно синхронізації TOTP" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "Відхилення часу синхронізації TOTP (у секундах)" + +msgid "HOTP Authentication Window" +msgstr "Вікно розпізнавання HOTP" + +msgid "HOTP authentication skip-ahead" +msgstr "Випереджальне пропускання розпізнавання HOTP" + +msgid "HOTP Synchronization Window" +msgstr "Вікно синхронізації HOTP" + +msgid "HOTP synchronization skip-ahead" +msgstr "Випереджальне пропускання синхронізації HOTP" + +msgid "Modify OTP configuration options." +msgstr "Змінити параметри налаштування OTP." + +msgid "Show the current OTP configuration." +msgstr "Показати поточні налаштування OTP." msgid "" "\n" -"Permissions\n" -msgstr "" +"YubiKey Tokens\n" "\n" -"Права доступу\n" - -msgid "" +"Manage YubiKey tokens.\n" "\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" "\n" "EXAMPLES:\n" "\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" msgstr "" "\n" -"Права доступу\n" +"Жетони YubiKey\n" "\n" -"Запис правил доступу уможливлює точне делегування прав. Запис прав доступу\n" -"є зручною для читання обгорткою навколо правила керування доступом 389-ds\n" -"або інструкції (ACI).\n" -"Право доступу надає право виконувати специфічне завдання, зокрема додавання\n" -"запису користувача, внесення зміни до групи тощо.\n" +"Керування жетонами YubiKey.\n" "\n" -"Запис прав доступу не може містити інших прав доступу.\n" -"\n" -"* Права доступу надають можливість читати, записувати, вилучати, шукати або\n" -" порівнювати.\n" -"* Привілеї поєднують подібні права доступу (наприклад усі права доступу,\n" -" потрібні для додавання запису користувача).\n" -"* Роль надає набір привілеїв користувачам, групам, вузлам або групам " -"вузлів.\n" -"\n" -"Запис права доступу складається з декількох різних частин:\n" -"\n" -"1. Назви запису права доступу.\n" -"2. Призначення права доступу.\n" -"3. Права, які надаються записом.\n" -"\n" -"Права визначають список дій, які можна виконувати. Запис прав може\n" -"бути один або може бути декілька записів з такого набору:\n" -"1. write - запис одного або декількох атрибутів\n" -"2. read - читання одного або декількох атрибутів\n" -"3. search - пошук одного або декількох атрибутів\n" -"4. compare - порівняння одного або декількох атрибутів\n" -"5. add - додавання нового запису до ієрархії\n" -"6. delete - вилучення наявного запису\n" -"7. all - надати усі права доступу\n" -"\n" -"Типово, доступ до читання надається до більшості з атрибутів, отже потреба\n" -"у визначенні прав доступу до читання має виникати доволі нечасто.\n" -"\n" -"Зауважте відмінність між атрибутами і записами. Права доступу є " -"незалежними,\n" -"отже можливість додавання запису користувача не означає, що цей запис " -"згодом\n" -"буде придатним до редагування.\n" -"\n" -"Передбачено декілька можливих призначень:\n" -"1. type: тип об’єкта (user, group тощо).\n" -"2. memberof: учасник групи або групи вузлів\n" -"3. filter: фільтр LDAP\n" -"4. subtree: фільтр LDAP, що визначає частину DIT LDAP. Є надмножиною\n" -" призначення «type».\n" -"5. targetgroup: надати доступ до зміни вказаної групи (зокрема надати " -"доступ\n" -" до керування участю у групі)\n" +"Цей код є розширенням до додатка otptoken, він надає підтримку " +"безпосереднього\n" +"читання та запису жетонів YubiKey.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Додати право доступу до створення записів користувачів:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +" Додати новий жетон:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" + +msgid "" "\n" -" Додати право доступу, яке надає можливість керувати участю у групах:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" +msgstr "" +"\n" +"Встановлення пароля користувача\n" +"\n" +"Якщо якась стороння особа змінює пароль користувача (наприклад його\n" +"відновлює допоміжний персонал), новий пароль має бути змінено під\n" +"час його першого використання. Метою такого способу дій є забезпечення\n" +"ситуації, коли пароль буде відомий лише тому, хто ним користується.\n" +"\n" +"Правила щодо паролів IPA керують частотою зміни пароля, вимогами щодо\n" +"складності пароля та об’ємом журналу зміни паролів.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Щоб скинути ваш власний пароль, виконайте команду:\n" +" ipa passwd\n" +"\n" +" Щоб змінити пароль іншого користувача, виконайте команду:\n" +" ipa passwd tuser1\n" + +msgid "Set a user's password." +msgstr "Встановити пароль користувача." + +msgid "New Password" +msgstr "Новий пароль" + +msgid "Current Password" +msgstr "Поточний пароль" + +msgid "OTP" +msgstr "OTP" + +msgid "One Time Password" +msgstr "Одноразовий пароль" msgid "" "\n" @@ -10659,17 +5827,140 @@ msgstr "" " ipa permission-add --attrs=member --permissions=write --type=group " "\"Manage Group Members\"\n" -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" +msgid "Permission name" +msgstr "Назва прав доступу" + +msgid "Granted rights" +msgstr "Надані права" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" msgstr "" -"\n" -"Права доступу, які типово встановлюються разом з IPA, можуть бути\n" -"так званими «керованим» правами доступу. Такі права доступу мають\n" -"типовий набір атрибутів, до яких вони застосовуються. Втім, адміністратор\n" -"може додавати або вилучати окремі атрибути набору.\n" +"Права доступу, які слід надати (read, search, compare, write, add, delete, " +"all)" + +msgid "Effective attributes" +msgstr "Ефективні атрибути" + +msgid "All attributes to which the permission applies" +msgstr "Усі атрибути, яких стосуються ці права доступу" + +msgid "Included attributes" +msgstr "Атрибути включення" + +msgid "User-specified attributes to which the permission applies" +msgstr "Вказані користувачем атрибути, до яких застосовується правило доступу" + +msgid "Excluded attributes" +msgstr "Атрибути виключення" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" +"Вказані користувачем атрибути, до яких права доступу явним чином не " +"застосовуватимуться" + +msgid "Default attributes" +msgstr "Типові атрибути" + +msgid "Attributes to which the permission applies by default" +msgstr "Атрибути, до яких типово застосовується правило доступу" + +msgid "Bind rule type" +msgstr "Тип правила прив’язування" + +msgid "Subtree to apply permissions to" +msgstr "Піддерево, до якого буде застосовано права доступу" + +msgid "Extra target filter" +msgstr "Додатковий фільтр призначення" + +msgid "Raw target filter" +msgstr "Фільтр призначення без обробки" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" +"Усі фільтри призначення, зокрема ті, які визначаються типом та членством" + +msgid "Target DN" +msgstr "DN призначення" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" +"Необов’язковий DN, до якого застосовуватимуться дозвіл (має належати до " +"піддерева, але може ще не існувати)" + +msgid "Member of group" +msgstr "Учасник групи" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "Цільові учасники групи (встановлює фільтр призначення memberOf)" + +msgid "User group to apply permissions to (sets target)" +msgstr "" +"Група користувачів, до якої буде застосовано права доступу (встановлює " +"target)" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "Тип об’єкта IPA (встановлює фільтри призначення subtree і objectClass)" + +msgid "Deprecated; use extratargetfilter" +msgstr "Вважається застарілою; скористайтеся extratargetfilter" + +msgid "Deprecated; use ipapermlocation" +msgstr "Вважається застарілою; скористайтеся ipapermlocation" + +msgid "Deprecated; use ipapermright" +msgstr "Вважається застарілою; скористайтеся ipapermright" + +msgid "Granted to Privilege" +msgstr "Надані привілеї" + +msgid "Indirect Member of roles" +msgstr "Опосередкований учасник roles" + +msgid "Add a new permission." +msgstr "Додати нові права доступу." + +msgid "Add members to a permission." +msgstr "Додати учасників до запису прав доступу." + +msgid "member privilege" +msgstr "привілеї учасника" + +msgid "privileges to add" +msgstr "привілеї для додавання" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "Додати системні права доступу без ACI (внутрішня команда)" + +msgid "Permission flags" +msgstr "Прапорці прав доступу" + +msgid "Delete a permission." +msgstr "Вилучити права доступу." + +msgid "force delete of SYSTEM permissions" +msgstr "примусове вилучення прав доступу SYSTEM" + +msgid "Search for permissions." +msgstr "Знайти права доступу." + +msgid "Modify a permission." +msgstr "Змінити права доступу." + +msgid "Rename the permission object" +msgstr "Перейменувати об’єкт права доступу" + +msgid "Remove members from a permission." +msgstr "Вилучити учасників із запису права доступу." + +msgid "privileges to remove" +msgstr "привілеї для вилучення" + +msgid "Display information about a permission." +msgstr "Показати дані щодо прав доступу." msgid "" "\n" @@ -10727,195 +6018,50 @@ msgstr "" " Сервер IPA версії 2.1.9. Версія API 2.20\n" " -----------------------------------------------------\n" +msgid "Ping a remote server." +msgstr "Перевірити луна-імпульсом (пінгом) віддалений сервер." + msgid "" "\n" -"Ping the remote IPA server to ensure it is running.\n" +"Kerberos pkinit options\n" "\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" "\n" "EXAMPLES:\n" "\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" "\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" msgstr "" "\n" -"Перевірка віддаленого сервера IPA з метою переконатися, що він є " -"працездатним.\n" +"Параметри pkinit Kerberos\n" "\n" -"Програма ping надсилає луна-запит до сервера IPA. Сервер повертає\n" -"дані щодо його версії. Ці дані використовуються клієнтом IPA\n" -"для підтвердження, що сервер є доступним і що він приймає запити.\n" -"\n" -"Сервер з xmlrpc_uri у /etc/ipa/default.conf перевіряється першим.\n" -"Якщо він не відповідає, клієнт намагається встановити зв’язок з\n" -"будь-яким сервером, визначеним записами SRV ldap у DNS.\n" +"Вмикання або вимикання анонімного pkinit за допомогою реєстраційного\n" +"запису WELLKNOWN/ANONYMOUS@REALM. Має бути встановлено сервер з\n" +"підтримкою pkinit.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Перевірити луна-імпульсом сервер IPA:\n" -" ipa ping\n" -" ------------------------------------------\n" -" Сервер IPA версії 2.1.9. Версія API 2.20\n" -" ------------------------------------------\n" +" Вмикання анонімного pkinit:\n" +" ipa pkinit-anonymous enable\n" "\n" -" Перевірити луна-імпульсом сервер IPA і отримати докладні дані:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" Сервер IPA версії 2.1.9. Версія API 2.20\n" -" -----------------------------------------------------\n" +" Вимикання анонімного pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"Щоб дізнатися більше про анонімний pkinit відвідайте цю сторінку:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" -"\n" -"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " -"виклику процедури\n" -"\n" -"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"де у файлі batch_request.json міститься десь такий код:\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " -"спосіб. На початку ви побачите таке:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далі буде вкладена відповідь для кожного методу команди IPA, який було " -"надіслано у запиті\n" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" -"\n" -"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " -"виклику процедури\n" -"\n" -"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"де у файлі batch_request.json міститься десь такий код:\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " -"спосіб. На початку ви побачите таке:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далі буде вкладена відповідь для кожного методу команди IPA, який було " -"надіслано у запиті\n" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" -"\n" -"Інтерфейс командного рядка не надає безпосереднього доступу до додатків, " -"команди використано для внутрішньої обробки\n" +msgid "Enable or Disable Anonymous PKINIT." +msgstr "Увімкнути або вимкнути анонімний PKINIT." msgid "" "\n" @@ -10958,19 +6104,238 @@ msgstr "" "\n" "Щоб дізнатися більше, ознайомтеся з довідною щодо ролей та прав доступу.\n" -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"Надає можливості інтроспекції програмного інтерфейсу.\n" +msgid "Privilege name" +msgstr "Назва привілею" + +msgid "Privilege description" +msgstr "Опис привілею" + +msgid "Granting privilege to roles" +msgstr "Надання привілеїв ролям" + +msgid "Add a new privilege." +msgstr "Додати новий привілей." + +msgid "Add members to a privilege." +msgstr "Додати учасників до запису привілею." + +msgid "member role" +msgstr "роль учасника" + +msgid "roles to add" +msgstr "ролі для додавання" + +msgid "Add permissions to a privilege." +msgstr "Додати права доступу до привілею." + +msgid "permission" +msgstr "права доступу" + +msgid "permissions" +msgstr "права доступу" + +msgid "Number of permissions added" +msgstr "Кількість доданих прав доступу" + +msgid "Delete a privilege." +msgstr "Вилучити привілей." + +msgid "Search for privileges." +msgstr "Знайти привілеї." + +msgid "Modify a privilege." +msgstr "Змінити привілей." + +msgid "Rename the privilege object" +msgstr "Перейменувати об’єкт привілеїв" + +msgid "Remove members from a privilege" +msgstr "Вилучити учасників з запису привілеїв" + +msgid "roles to remove" +msgstr "ролі для вилучення" + +msgid "Remove permissions from a privilege." +msgstr "Вилучити права доступу з привілею." + +msgid "Number of permissions removed" +msgstr "Кількість вилучених записів прав доступу" + +msgid "Display information about a privilege." +msgstr "Показати дані щодо привілею." msgid "" "\n" -"RADIUS Proxy Servers\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" "\n" -"Проксі-сервери RADIUS\n" +"Правила паролів\n" +"\n" +"Правила паролів встановлюють обмеження щодо використання паролів IPA,\n" +"зокрема максимальний строк дії, мінімальний строк дії, кількість паролів,\n" +"які зберігатимуться у журналі, потрібна кількість класів символів (для\n" +"складних паролів) та мінімальну довжину пароля.\n" +"\n" +"Типово, визначено одні загальні правила для всіх користувачів. Ви можете\n" +"створити правило паролів, яке стосуватиметься однієї групи. Для одного\n" +"користувача може бути використано лише один набір правил паролів: груповий\n" +"або загальний. Групові правила паролів є незалежними, вони не є загальними\n" +"правилами з додаванням нетипових параметрів.\n" +"\n" +"Для кожного набору групових правил паролів має бути встановлено окреме\n" +"значення пріоритету. Якщо користувач є учасником декількох груп, для яких\n" +"встановлено правила паролів, пріоритет визначає, які з правил має бути\n" +"застосовано. Менші значення відповідають вищому пріоритету правил.\n" +"\n" +"Групові правила паролів автоматично вилучаються під час вилучення\n" +"відповідних груп.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Внесення змін до загальних правил:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Додавання нових групових правил паролів:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Показ загальних правил паролів:\n" +" ipa pwpolicy-show\n" +"\n" +" Показ групових правил паролів:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Показ правил, які має бути застосовано до певного користувача:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Внесення змін до групових правил паролів:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" + +msgid "Group" +msgstr "Група" + +msgid "Manage password policy for specific group" +msgstr "Керування правилами обробки паролів для певної групи" + +msgid "Max lifetime (days)" +msgstr "Макс. строк дії (у днях)" + +msgid "Maximum password lifetime (in days)" +msgstr "Максимальний строк дії пароля (у днях)" + +msgid "Min lifetime (hours)" +msgstr "Мін. строк дії (у годинах)" + +msgid "Minimum password lifetime (in hours)" +msgstr "Мінімальний строк дії пароля (у годинах)" + +msgid "History size" +msgstr "Розмір журналу" + +msgid "Password history size" +msgstr "Розмір журналу паролів" + +msgid "Character classes" +msgstr "Класи символів" + +msgid "Minimum number of character classes" +msgstr "Мінімальна кількість класів символів" + +msgid "Min length" +msgstr "Мін. довжина" + +msgid "Minimum length of password" +msgstr "Мінімальна довжина пароля" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Пріоритет правил (більше число — нижчий пріоритет)" + +msgid "Max failures" +msgstr "Макс. к-ть помилок" + +msgid "Consecutive failures before lockout" +msgstr "Кількість помилок для блокування" + +msgid "Failure reset interval" +msgstr "Проміжок скидання помилок" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" +"Проміжок часу, по завершенню якого кількість помилок буде скинуто (у " +"секундах)" + +msgid "Lockout duration" +msgstr "Тривалість блокування" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Проміжок часу, протягом якого діятиме блокування (у секундах)" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "Результати мають містити лише атрибут основного ключа («cn»)" + +msgid "Add a new group password policy." +msgstr "Додати нову групу правил для паролів." + +msgid "Delete a group password policy." +msgstr "Вилучити групу правил для паролів." + +msgid "Search for group password policies." +msgstr "Знайти групу правил для паролів." + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "Результати мають містити лише атрибут основного ключа («group»)" + +msgid "Modify a group password policy." +msgstr "Змінити групу правил для паролів." + +msgid "Display information about password policy." +msgstr "Показати дані щодо групи правил для паролів." + +msgid "User" +msgstr "Користувач" + +msgid "Display effective policy for a specific user" +msgstr "Показати поточні правила для певного користувача" msgid "" "\n" @@ -11025,40 +6390,59 @@ msgstr "" " Вилучити налаштування:\n" " ipa radiusproxy-del MyRADIUS\n" -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"ПОВТОРНА РЕЄСТРАЦІЯ:\n" -"\n" -"Вузол, якому вже колись було надано певну роль, але налаштування було " -"втрачено\n" -"(наприклад через знищення віртуальної машини), можна знову зареєструвати " -"(надати роль).\n" -"\n" -"Щоб дізнатися більше, зверніться до сторінок підручника (man) щодо ipa-" -"client-install.\n" -"\n" -"Запис вузла може, якщо потрібно, зберігати відомості щодо розташування, " -"запущеної\n" -"операційної системи тощо.\n" +msgid "RADIUS proxy server name" +msgstr "Назва проксі-сервера RADIUS" -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" -"\n" -"Підняти рівень домену IPA.\n" +msgid "A description of this RADIUS proxy server" +msgstr "Опис цього проксі-сервера RADIUS" + +msgid "Server" +msgstr "Сервер" + +msgid "The hostname or IP (with or without port)" +msgstr "Назва вузла або IP-адреса (з портом або без порту)" + +msgid "Secret" +msgstr "Ключ" + +msgid "The secret used to encrypt data" +msgstr "Ключ, який використовується для шифрування даних" + +msgid "Timeout" +msgstr "Час очікування" + +msgid "The total timeout across all retries (in seconds)" +msgstr "Загальний час очікування за усіма спробами (у секундах)" + +msgid "Retries" +msgstr "Кількість спроб" + +msgid "The number of times to retry authentication" +msgstr "Кількість спроб пройти розпізнавання" + +msgid "User attribute" +msgstr "Атрибут користувача" + +msgid "The username attribute on the user object" +msgstr "Атрибут імені користувача об’єкта користувача" + +msgid "Add a new RADIUS proxy server." +msgstr "Додати новий проксі-сервер RADIUS." + +msgid "Delete a RADIUS proxy server." +msgstr "Вилучити проксі-сервер RADIUS." + +msgid "Search for RADIUS proxy servers." +msgstr "Шукати проксі-сервери RADIUS." + +msgid "Modify a RADIUS proxy server." +msgstr "Змінити запис проксі-сервера RADIUS." + +msgid "Rename the RADIUS proxy server object" +msgstr "Перейменувати об’єкт проксі-сервера RADIUS" + +msgid "Display information about a RADIUS proxy server." +msgstr "Показати дані щодо проксі-сервера RADIUS." msgid "" "\n" @@ -11101,227 +6485,23 @@ msgstr "" " Вилучити домен зі списку доменів області:\n" " ipa realmdomains-mod --del-domain=olddomain.com\n" -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Домени області\n" -"\n" -"Керування списком доменів, пов’язаних з областю IPA.\n" -"\n" -"Цей список є корисним для контролерів доменів з інших областей, які\n" -"мають встановити відносини довіри із цією областю IPA. Цим контролерам\n" -"потрібні дані щодо того, які запити слід переспрямовувати до KDC цієї\n" -"області IPA.\n" -"\n" -"Автоматичне керування: домен автоматично додається до списку доменів\n" -"області, коли створюється нова зона DNS, керована IPA. Те саме стосується\n" -"вилучення.\n" -"\n" -"Керована ззовні DNS: домени, які не керуються у DNS сервера IPA, має бути\n" -"вручну додано до списку за допомогою команди ipa realmdomains-mod.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Показати поточний список доменів області:\n" -" ipa realmdomains-show\n" -"\n" -" Замірити список доменів області:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Додати домен до списку доменів області:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Вилучити домен зі списку доменів області:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgid "Domain" +msgstr "Домен" -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" -"\n" -"Вилучення запису «%(hostname)s» призведе до нез’єднаної топології у суфіксу " -"«%(suffix)s»:\n" -"%(errors)s" +msgid "Add domain" +msgstr "Додати домен" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" -"\n" -"Топологія реплікації у суфіксі «%(suffix)s» є нез’єднаною:\n" -"%(errors)s" +msgid "Delete domain" +msgstr "Вилучити домен" -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" -"\n" -"Повернути дані щодо поточного розпізнаного профілю\n" -"\n" -"Команда визначення профілю повертає дані щодо того, як\n" -"отримати більше даних про профіль, розпізнаний для\n" -"цього запиту. Дані:\n" -"\n" -" * тип об’єкта\n" -" * команда для отримання подробиць щодо об’єкта\n" -" * аргументи та параметри, які слід передати команді\n" -"\n" -"Дані повертаються у форматі словника. Нижче, як приклад,\n" -"наведено виведення у форматі «ключ: значення».\n" -"\n" -"Приклади:\n" -"\n" -" Пошук від імені користувача IPA:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Пошук від імені користувача довіреного домену:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Пошук від імені вузла:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Пошук від імені служби Kerberos:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" +msgid "Modify realm domains." +msgstr "Змінити домени області." -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"Права визначають список дій, які можна виконувати. Запис прав може\n" -"бути один або може бути декілька записів з такого набору:\n" -"1. write - запис одного або декількох атрибутів\n" -"2. read - читання одного або декількох атрибутів\n" -"3. search - пошук одного або декількох атрибутів\n" -"4. compare - порівняння одного або декількох атрибутів\n" -"5. add - додавання нового запису до ієрархії\n" -"6. delete - вилучення наявного запису\n" -"7. all - надати усі права доступу\n" +msgid "Force adding domain even if not in DNS" +msgstr "Примусове додавання домену, навіть якщо назви немає у DNS" + +msgid "Display the list of realm domains." +msgstr "Показати список доменів області." msgid "" "\n" @@ -11404,12 +6584,159 @@ msgstr "" "користувача\n" " до типової групи користувачів IPA.\n" +msgid "Role name" +msgstr "Назва ролі" + +msgid "A description of this role-group" +msgstr "Опис цієї групи ролей" + +msgid "Member users" +msgstr "Користувачі «member»" + +msgid "Member groups" +msgstr "Групи «member»" + +msgid "Privileges" +msgstr "Привілеї" + +msgid "Member services" +msgstr "Служби учасника" + +msgid "Add a new role." +msgstr "Додати нову роль." + +msgid "Add members to a role." +msgstr "Додати учасників до запису ролі." + +msgid "member service" +msgstr "учасник служба" + +msgid "services to add" +msgstr "служби для додавання" + +msgid "Add privileges to a role." +msgstr "Додати привілеї до запису ролі." + +msgid "privilege" +msgstr "привілей" + +msgid "privileges" +msgstr "привілеї" + +msgid "Number of privileges added" +msgstr "Кількість доданих привілеїв" + +msgid "Delete a role." +msgstr "Вилучити роль." + +msgid "Search for roles." +msgstr "Знайти ролі." + +msgid "Modify a role." +msgstr "Змінити роль." + +msgid "Rename the role object" +msgstr "Перейменувати об’єкт ролі" + +msgid "Remove members from a role." +msgstr "Вилучити учасників з запису ролі." + +msgid "services to remove" +msgstr "служби для вилучення" + +msgid "Remove privileges from a role." +msgstr "Вилучити привілеї з запису ролі." + +msgid "Number of privileges removed" +msgstr "Кількість вилучених привілеїв" + +msgid "Display information about a role." +msgstr "Показати дані щодо ролі." + msgid "" "\n" -"SEARCHING:\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" msgstr "" "\n" -"ПОШУК:\n" +"Права доступу самообслуговування\n" +"\n" +"Права доступу надають змогу точно налаштувати уповноваження. За допомогою\n" +"правил керування доступом та інструкцій (ACI) надаються права доступу до\n" +"виконання вказаних завдань, зокрема додавання записів користувачів,\n" +"внесення змін до записів груп тощо.\n" +"\n" +"Права доступу самообслуговування визначають права об’єкта на внесення змін\n" +"до власного запису.\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання правила самообслуговування для уможливлення керування " +"користувачами\n" +" власною адресою (з використанням виразу Bash у фігурних дужках):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" Якщо ви керуєте списком атрибутів, вам слід включити до списку всі " +"атрибути,\n" +" зокрема вже створені. Додавання telephoneNumber до списку (з використанням " +"виразу Bash у фігурних дужках):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Показ нашого оновленого правила:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Вилучення правила:\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +msgid "Self-service name" +msgstr "Назва самообслуговування" + +msgid "Attributes to which the permission applies." +msgstr "Атрибути, до яких застосовується правило доступу." + +msgid "Add a new self-service permission." +msgstr "Додати нові права доступу автослужби." + +msgid "Delete a self-service permission." +msgstr "Вилучити права доступу автослужби." + +msgid "Search for a self-service permission." +msgstr "Шукати права доступу автослужби." + +msgid "Modify a self-service permission." +msgstr "Змінити права доступу автослужби." + +msgid "Display information about a self-service permission." +msgstr "Показати дані щодо прав доступу автослужби." msgid "" "\n" @@ -11511,793 +6838,51 @@ msgstr "" " відповідність користувачів. Типового користувача можна за допомогою\n" " програми config-show.\n" -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" -"\n" -"ПІДТРИМУВАНІ ТИПИ ЗОН\n" -"\n" -" * Основна зона (dnszone-*), містить довірені дані.\n" -" * Зона переспрямовування (dnsforwardzone-*), переспрямовує запити до " -"налаштованих засобів обробки\n" -" (набору серверів DNS).\n" +msgid "SELinux User" +msgstr "Користувач SELinux" -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" -"\n" -"Пошук ACI.\n" -"\n" -" Повертає список ACI\n" -"\n" -" ПРИКЛАДИ:\n" -"\n" -" Знайти усі ACI, які застосовуються безпосередньо до учасників групи " -"ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" Знайти усі ACI, які надають доступ add:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Зауважте, що команда пошуку виконує пошук вказаного тексту лише у\n" -" наборі ACI, а не визначає, чи буде застосовано щось у ACI.\n" -" Наприклад, у результаті пошуку memberof=ipausers буде знайдено усі ACI,\n" -" у яких memberof містить ipausers. Але можуть існувати інші ACI, які\n" -" застосовуються до учасників цієї групи опосередковано.\n" -" " +msgid "HBAC Rule" +msgstr "Правило HBAC" -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Права доступу самообслуговування\n" -"\n" -"Права доступу надають змогу точно налаштувати уповноваження. За допомогою\n" -"правил керування доступом та інструкцій (ACI) надаються права доступу до\n" -"виконання вказаних завдань, зокрема додавання записів користувачів,\n" -"внесення змін до записів груп тощо.\n" -"\n" -"Права доступу самообслуговування визначають права об’єкта на внесення змін\n" -"до власного запису.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання правила самообслуговування для уможливлення керування " -"користувачами\n" -" власною адресою (з використанням виразу Bash у фігурних дужках):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" Якщо ви керуєте списком атрибутів, вам слід включити до списку всі " -"атрибути,\n" -" зокрема вже створені. Додавання telephoneNumber до списку (з використанням " -"виразу Bash у фігурних дужках):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Показ нашого оновленого правила:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Вилучення правила:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "Правило HBAC, яке визначає користувачів, групи і групи вузлів" -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Права доступу самообслуговування\n" -"\n" -"Права доступу надають змогу точно налаштувати уповноваження. За допомогою\n" -"правил керування доступом та інструкцій (ACI) надаються права доступу до\n" -"виконання вказаних завдань, зокрема додавання записів користувачів,\n" -"внесення змін до записів груп тощо.\n" -"\n" -"Права доступу самообслуговування визначають права об’єкта на внесення змін\n" -"до власного запису.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання правила самообслуговування для уможливлення керування " -"користувачами\n" -" власною адресою:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" Якщо ви керуєте списком атрибутів, вам слід включити до списку всі " -"атрибути,\n" -" зокрема вже створені. Додавання telephoneNumber до списку:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Показ нашого оновленого правила:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Вилучення правила:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +msgid "Create a new SELinux User Map." +msgstr "Створити карту користувачів SELinux." -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgid "Add target hosts and hostgroups to an SELinux User Map rule." msgstr "" -"\n" -"Налаштування сервера\n" -"\n" -"Керування типовими значеннями, які використовує IPA, та деякими з\n" -"придатних до зміни параметрів.\n" -"\n" -"ЗАУВАЖЕННЯ:\n" -"\n" -"Тут зберігається значення параметра сповіщення щодо паролів\n" -"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" -"не використовується для сповіщення користувачів щодо завершення строку дії\n" -"пароля.\n" -"\n" -"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" -"інформування. Серед цих атрибутів:\n" -"\n" -"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" -" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" -" встановлення.\n" -"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" -" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" -"\n" -"Під час встановлення списку пріоритетності для користувачів SELinux може " -"виникнути\n" -"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Показати основні налаштування сервера:\n" -" ipa config-show\n" -"\n" -" Показати всі параметри налаштування:\n" -" ipa config-show --all\n" -"\n" -" Змінити максимальну довжину імені користувача на 99 символів:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Збільшити типовий час і максимальне обмеження на розмір пошуку\n" -" сервера IPA:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Встановити типовий домен електронної пошти користувачів:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" -" працездатною:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Визначити пріоритетність користувачів у карті SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"Додати вузли призначення та групи вузлів до правила карти користувачів " +"SELinux." -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" -"\n" -"Налаштування сервера\n" -"\n" -"Керування типовими значеннями, які використовує IPA, та деякими з\n" -"придатних до зміни параметрів.\n" -"\n" -"ЗАУВАЖЕННЯ:\n" -"\n" -"Тут зберігається значення параметра сповіщення щодо паролів\n" -"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" -"не використовується для сповіщення користувачів щодо завершення строку дії\n" -"пароля.\n" -"\n" -"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" -"інформування. Серед цих атрибутів:\n" -"\n" -"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" -" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" -" встановлення.\n" -"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" -" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" -"\n" -"Під час встановлення списку пріоритетності для користувачів SELinux може " -"виникнути\n" -"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" -"\n" -"Максимальна довжина назви вузла у Linux керується значенням\n" -"MAXHOSTNAMELEN у ядрі. Типовим значенням є 64. У деяких інших\n" -"операційних системах, наприклад у Solaris, можна використовувати у\n" -"назвах до 255 символів. Цей параметр надає гнучкості щодо довжини, але\n" -"у Linux його значення все одно обмежено максимальним можливим.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Показати основні налаштування сервера:\n" -" ipa config-show\n" -"\n" -" Показати всі параметри налаштування:\n" -" ipa config-show --all\n" -"\n" -" Змінити максимальну довжину імені користувача на 99 символів:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Змінити максимальну довжину назви вузла на 255 символів:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -"Збільшити типовий час і максимальне обмеження на розмір пошуку\n" -" сервера IPA:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Встановити типовий домен електронної пошти користувачів:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" -" працездатною:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Визначити пріоритетність користувачів у карті SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgid "Add users and groups to an SELinux User Map rule." +msgstr "Додати користувачів і групи до правила карти користувачів SELinux." -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Обмежене службами делегування\n" -"\n" -"Керування правилами, за допомогою яких можна обмежити делегування\n" -"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" -"користувача під час обміну даними з іншою службою без потреби для\n" -"користувача насправді переспрямовувати квиток для отримання квитка\n" -"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" -"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" -"доступу користувачів.\n" -"\n" -"Відповідно до угоди з іменування, до назви правила додається слово\n" -"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" -"допомагає концептуально пов’язати правила та їхні призначення.\n" -"\n" -"Правило складається з двох компонентів:\n" -" - Списку цілей (призначень), яких стосується правило\n" -" - Списку memberPrincipals, яким дозволено делегування для\n" -" цих цілей\n" -"\n" -"Запис цілі складається зі списку реєстраційних записів, які можна\n" -"делегувати.\n" -"\n" -"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" -"можна делегувати як вказаний список реєстраційних записів,\n" -"відповідно до визначеного списку цілей.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нове правило обмеженого делегування:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Додати нову ціль обмеженого делегування:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Додати реєстраційний запис до правила:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Додати нашу ціль до правила:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Додати реєстраційний запис до цілі:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Показати дані щодо іменованого правила і цілі:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Вилучити обмежене делегування:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" -"служби ldap від імені пов’язаного користувача.\n" -"\n" -"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" -"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" -"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" -"делегування, що спричинить непрацездатність усієї системи.\n" +msgid "Delete a SELinux User Map." +msgstr "Вилучити карту користувачів SELinux." -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Обмежене службами делегування\n" -"\n" -"Керування правилами, за допомогою яких можна обмежити делегування\n" -"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" -"користувача під час обміну даними з іншою службою без потреби для\n" -"користувача насправді переспрямовувати квиток для отримання квитка\n" -"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" -"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" -"доступу користувачів.\n" -"\n" -"Відповідно до угоди з іменування, до назви правила додається слово\n" -"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" -"допомагає концептуально пов’язати правила та їхні призначення.\n" -"\n" -"Правило складається з двох компонентів:\n" -" - Списку цілей (призначень), яких стосується правило\n" -" - Списку memberPrincipals, яким дозволено делегування для\n" -" цих цілей\n" -"\n" -"Запис цілі складається зі списку реєстраційних записів, які можна\n" -"делегувати.\n" -"\n" -"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" -"можна делегувати як вказаний список реєстраційних записів,\n" -"відповідно до визначеного списку цілей.\n" -"\n" -"У правилі і цілі реєстраційні дані Kerberos може бути вказано за\n" -"їхньою назвою або альтернативною назвою, область дії можна пропустити.\n" -"Крім того, вузли можна вказувати за їхніми назвами. Якщо вказані\n" -"реєстраційні дані Kerberos містять один компонент і не завершуються " -"символом\n" -"«$», запис вважатиметься назвою вузла. Назви реєстраційних даних Kerberos, " -"які\n" -"завершуються «$» типово використовуються як альтернативні назви для " -"пов'язаних\n" -"із Active Directory служб.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нове правило обмеженого делегування:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Додати нову ціль обмеженого делегування:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Додати реєстраційний запис до правила:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Додати реєстраційні дані вузла «ipa.example.com» до правила:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Додати нашу ціль до правила:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Додати реєстраційний запис до цілі:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Показати дані щодо іменованого правила і цілі:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Вилучити обмежене делегування:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" -"служби ldap від імені пов’язаного користувача.\n" -"\n" -"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" -"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" -"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" -"делегування, що спричинить непрацездатність усієї системи.\n" +msgid "Disable an SELinux User Map rule." +msgstr "Вимкнути правило карти користувачів SELinux." -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgid "Enable an SELinux User Map rule." +msgstr "Увімкнути правило карти користувачів SELinux." + +msgid "Search for SELinux User Maps." +msgstr "Шукати карти користувачів SELinux." + +msgid "Modify a SELinux User Map." +msgstr "Змінити карту користувачів SELinux." + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." msgstr "" -"\n" -"Служби\n" -"\n" -"Служба IPA — це служба, що працює на вузлі системи. У записі служби\n" -"IPA можуть зберігатися дані реєстраційного запису Kerberos, сертифікат\n" -"SSL або обидва набори даних.\n" -"\n" -"Службою IPA можна керувати безпосередньо з комп’ютера, якщо системі\n" -"цього комп’ютера надано достатні права доступу. Це стосується навіть\n" -"комп’ютерів, відмінних від тих, з якими пов’язано службу. Наприклад,\n" -"вони можуть надсилати запит щодо сертифіката SSL за допомогою\n" -"реєстраційних даних служби вузла. Для керування службою за допомогою\n" -"реєстраційних даних вузла слід віддати команду ініціалізації kinit\n" -"від імені вузла:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Додавання служби IPA надає доступ пов’язаній службі до надсилання\n" -"запитів щодо сертифікатів SSL та таблиці ключів, але створення самих\n" -"запитів є окремим кроком: відповідні дані не створюються у результаті\n" -"простого додавання служби.\n" -"\n" -"У записі служби зберігаються лише відкриті дані сертифіката; закритий\n" -"ключ не зберігається.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову службу IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Дозволити вузлу керувати сертифікатом служби IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Перевизначити типовий список підтримуваних типів PAC для служби:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Типовим випадком, коли потрібне перевизначення типу PAC є NFS.\n" -" У поточній версії ядра Linux відповідний код може працювати лише з\n" -" квитками Kerberos, розмір яких не перевищує максимально заданого.\n" -" Оскільки дані PAC можуть бути доволі об’ємними, для служб NFS\n" -" рекомендуємо встановити --pac-type=NONE.\n" -"\n" -" Вилучити службу IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Знайти усіх служби IPA, пов’язані із вузлом:\n" -" ipa service-find web.example.com\n" -"\n" -" Знайти усі служби HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Вимкнути службу ключів Kerberos і сертифіката SSL:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Надіслати запит щодо сертифіката для служби IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"Вилучити вузли призначення та групи вузлів з правила карти користувачів " +"SELinux." + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "Вилучити користувачів і групи з правила карти користувачів SELinux." + +msgid "Display the properties of a SELinux User Map rule." +msgstr "Показати властивості правила карти користувачів SELinux." msgid "" "\n" @@ -12427,122 +7012,86 @@ msgstr "" " ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" "httpd.keytab\n" -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" -"\n" -"Служби\n" -"\n" -"Служба IPA — це служба, що працює на вузлі системи. У записі служби\n" -"IPA можуть зберігатися дані реєстраційного запису Kerberos, сертифікат\n" -"SSL або обидва набори даних.\n" -"\n" -"Службою IPA можна керувати безпосередньо з комп’ютера, якщо системі\n" -"цього комп’ютера надано достатні права доступу. Це стосується навіть\n" -"комп’ютерів, відмінних від тих, з якими пов’язано службу. Наприклад,\n" -"вони можуть надсилати запит щодо сертифіката SSL за допомогою\n" -"реєстраційних даних служби вузла. Для керування службою за допомогою\n" -"реєстраційних даних вузла слід віддати команду ініціалізації kinit\n" -"від імені вузла:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Додавання служби IPA надає доступ пов’язаній службі до надсилання\n" -"запитів щодо сертифікатів SSL та таблиці ключів, але створення самих\n" -"запитів є окремим кроком: відповідні дані не створюються у результаті\n" -"простого додавання служби.\n" -"\n" -"У записі служби зберігаються лише відкриті дані сертифіката; закритий\n" -"ключ не зберігається.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову службу IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Дозволити вузлу керувати сертифікатом служби IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Перевизначити типовий список підтримуваних типів PAC для служби:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Вилучити службу IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Знайти усіх служби IPA, пов’язані із вузлом:\n" -" ipa service-find web.example.com\n" -"\n" -" Знайти усі служби HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Вимкнути службу ключів Kerberos і сертифіката SSL:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Надіслати запит щодо сертифіката для служби IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Створити і отримати вміст сховища ключів для служби IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" +msgid "Principal" +msgstr "Реєстраційний запис" + +msgid "Service principal" +msgstr "Реєстраційний запис служби" + +msgid "PAC type" +msgstr "Тип PAC" msgid "" -"\n" -"Session Support for IPA\n" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." msgstr "" -"\n" -"Підтримка сеансів для IPA\n" +"Перевизначити типовий список підтримуваних типів PAC. Скористайтеся " +"значенням «NONE», щоб вимкнути підтримку PAC для цієї служби. Це, наприклад, " +"може бути необхідним для служб NFS." + +msgid "Add a new IPA new service." +msgstr "Додати нову службу IPA." + +msgid "force principal name even if not in DNS" +msgstr "" +"примусове значення назви реєстраційного запису, навіть якщо назви немає у DNS" + +msgid "Add hosts that can manage this service." +msgstr "Додати вузли, які можуть керувати цією службою." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" +"Дозволити користувачам, групам, вузлам і групам вузлів створювати таблицю " +"ключів цієї служби." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Дозволити користувачам, групам, вузлам і групам вузлів отримувати таблицю " +"ключів цієї служби." + +msgid "Delete an IPA service." +msgstr "Вилучити службу IPA." + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Вимкнути ключ Kerberos і сертифікат SSL служби." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" +"Заборонити користувачам, групам, вузлам і групам вузлів створювати таблицю " +"ключів цієї служби." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Заборонити користувачам, групам, вузлам і групам вузлів отримувати таблицю " +"ключів цієї служби." + +msgid "Search for IPA services." +msgstr "Знайти служби IPA." + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "Результати мають містити лише атрибут основного ключа («principal»)" + +msgid "Search for services with these managed by hosts." +msgstr "Шукати служби із цими керованими вузлами." + +msgid "Search for services without these managed by hosts." +msgstr "Шукати служби без цих керованих вузлів." + +msgid "Modify an existing IPA service." +msgstr "Змінити вже створену службу IPA." + +msgid "Remove hosts that can manage this service." +msgstr "Вилучити вузли, які можуть керувати цією службою." + +msgid "Display information about an IPA service." +msgstr "Показати дані щодо служби IPA." msgid "" "\n" @@ -13743,50 +8292,1379 @@ msgstr "" "дані Kerberos видобуватимуться зі змінної середовища KRB5CCNAME,\n" "за вміст якої відповідає mod_auth_kerb. Усе інше залишається тим самим.\n" +msgid "RPC command used to log the current user out of their session." +msgstr "" +"Команда RPC, яка використовується для завершення сеансу поточного " +"користувача." + msgid "" "\n" -"Set a user's password\n" +"Sudo Commands\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"Commands used as building blocks for sudo\n" "\n" "EXAMPLES:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" msgstr "" "\n" -"Встановлення пароля користувача\n" +"Команди sudo\n" "\n" -"Якщо якась стороння особа змінює пароль користувача (наприклад його\n" -"відновлює допоміжний персонал), новий пароль має бути змінено під\n" -"час його першого використання. Метою такого способу дій є забезпечення\n" -"ситуації, коли пароль буде відомий лише тому, хто ним користується.\n" -"\n" -"Правила щодо паролів IPA керують частотою зміни пароля, вимогами щодо\n" -"складності пароля та об’ємом журналу зміни паролів.\n" +"Команди, використані як будівельні блоки для sudo\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Щоб скинути ваш власний пароль, виконайте команду:\n" -" ipa passwd\n" +" Створення запису команди\n" +" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" "\n" -" Щоб змінити пароль іншого користувача, виконайте команду:\n" -" ipa passwd tuser1\n" +" Вилучення команди\n" +" ipa sudocmd-del /usr/bin/less\n" + +msgid "Sudo Command" +msgstr "Команда sudo" + +msgid "A description of this command" +msgstr "Опис цієї команди" + +msgid "Sudo Command Groups" +msgstr "Групи команд sudo" + +msgid "Create new Sudo Command." +msgstr "Створити запис команди sudo." + +msgid "Delete Sudo Command." +msgstr "Вилучити запис команди sudo." + +msgid "Search for Sudo Commands." +msgstr "Знайти команди sudo." + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "Результати мають містити лише атрибут основного ключа («command»)" + +msgid "Modify Sudo Command." +msgstr "Змінити команду sudo." + +msgid "Display Sudo Command." +msgstr "Показати команду sudo." + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" +"\n" +"Групи команд sudo\n" +"\n" +"Керування групами команд sudo.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову групу команд sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Вилучити групу команд sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показ групи команд sudo:\n" +" ipa group-show localadmins\n" + +msgid "Sudo Command Group" +msgstr "Група команд sudo" + +msgid "Group description" +msgstr "Опис групи" + +msgid "Commands" +msgstr "Команди" + +msgid "Member Sudo commands" +msgstr "Команди учасника Sudo" + +msgid "Create new Sudo Command Group." +msgstr "Створити групу команд sudo." + +msgid "Add members to Sudo Command Group." +msgstr "Додати учасників до групи команд sudo." + +msgid "member sudo command" +msgstr "команда учасника sudo" + +msgid "sudo commands to add" +msgstr "команди sudo, які слід додати" + +msgid "Delete Sudo Command Group." +msgstr "Вилучити групу команд sudo." + +msgid "Search for Sudo Command Groups." +msgstr "Шукати групи команд sudo." + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" +"Результати мають містити лише атрибут основного ключа («suydocmdgroup-name»)" + +msgid "Modify Sudo Command Group." +msgstr "Змінити групу команд sudo." + +msgid "Remove members from Sudo Command Group." +msgstr "Вилучити учасників з групи команд sudo." + +msgid "sudo commands to remove" +msgstr "команди sudo для вилучення" + +msgid "Display Sudo Command Group." +msgstr "Показати групу команд sudo." + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" +"\n" +"Користувачі\n" +"\n" +"Керування записами користувачів. Всі користувачі є користувачами POSIX.\n" +"\n" +"У IPA передбачено підтримку широкого діапазону форматів імен\n" +"користувачів, але вам слід враховувати всі обмеження, які накладаються\n" +"вашим робочим середовищем. Наприклад, імена, що починаються з цифри, або\n" +"занадто довгі імена можуть спричинити проблеми у деяких системах UNIX.\n" +"Скористайтеся командою «ipa config-mod» для зміни формату імені\n" +"користувача, яке дозволятиметься інструментами IPA.\n" +"\n" +"Вимикання облікового запису користувача лише заборонить отримання\n" +"користувачами нових реєстраційних даних Kerberos. Всі вже отримані\n" +"реєстраційні дані не втратять своєї чинності.\n" +"\n" +"Керування паролями не є завданням цього модуля. Докладніші дані щодо\n" +"керування паролями можна отримати у відповідь на команду ipa help passwd\n" +"\n" +"Блокування облікового запису виконується окремим основним вузлом IPA.\n" +"Для визначення основного вузла, на якому було заблоковано запис, можна\n" +"скористатися командою user-status. Адміністратор має розблоковувати\n" +"користувача саме на цьому основному вузлі.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нового користувача:\n" +" ipa user-add --first=Ivan --last=Ivanenko --password tuser1\n" +"\n" +" Пошук всіх користувачів, чиї записи містять рядок «Ivan»:\n" +" ipa user-find Ivan\n" +"\n" +" Пошук всіх користувачів з іменем (не прізвищем) «Ivan»:\n" +" ipa user-find --first=Ivan\n" +"\n" +" Вимикання запису користувача:\n" +" ipa user-disable tuser1\n" +"\n" +" Вмикання запису користувача:\n" +" ipa user-enable tuser1\n" +"\n" +" Вилучення запису користувача:\n" +" ipa user-del tuser1\n" + +msgid "First name" +msgstr "Ім'я" + +msgid "Last name" +msgstr "Прізвище" + +msgid "Full name" +msgstr "Повне ім’я" + +msgid "Display name" +msgstr "Екранне ім'я" + +msgid "Initials" +msgstr "Ініціали" + +msgid "Kerberos principal" +msgstr "Реєстраційний запис Kerberos" + +msgid "Kerberos principal expiration" +msgstr "Завершення строку дії реєстраційного запису Kerberos" + +msgid "Email address" +msgstr "Адреса ел. пошти" + +msgid "Prompt to set the user password" +msgstr "Надіслати запит щодо встановлення пароля користувача" + +msgid "Generate a random user password" +msgstr "Створити випадковий пароль для користувача" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Ідентифікаційний номер користувача (система призначить його, якщо не буде " +"вказано)" + +msgid "Street address" +msgstr "Вулиця і будинок" + +msgid "City" +msgstr "Місто" + +msgid "State/Province" +msgstr "Область/провінція" + +msgid "ZIP" +msgstr "Індекс" + +msgid "Telephone Number" +msgstr "Номер телефону" + +msgid "Mobile Telephone Number" +msgstr "Номер мобільного телефону" + +msgid "Pager Number" +msgstr "Номер пейджера" + +msgid "Fax Number" +msgstr "Номер факсу" + +msgid "Org. Unit" +msgstr "Підрозділ" + +msgid "Job Title" +msgstr "Посада" + +msgid "Manager" +msgstr "Керівник" + +msgid "Car License" +msgstr "Водійська ліцензія" + +msgid "Account disabled" +msgstr "Обліковий запис вимкнено" + +msgid "User authentication types" +msgstr "Типи розпізнавання користувачів" + +msgid "Types of supported user authentication" +msgstr "Типи підтримуваного розпізнавання користувачів" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Категорія вузлів (семантику цього атрибуту призначено для локальної обробки)" + +msgid "RADIUS proxy configuration" +msgstr "Налаштування проксі RADIUS" + +msgid "RADIUS proxy username" +msgstr "Ім’я користувача проксі-сервера RADIUS" + +msgid "Department Number" +msgstr "Номер відділу" + +msgid "Employee Number" +msgstr "Номер працівника" + +msgid "Employee Type" +msgstr "Тип працівника" + +msgid "Preferred Language" +msgstr "Бажана мова" + +msgid "Member of groups" +msgstr "Групи «member of»" + +msgid "Indirect Member of group" +msgstr "Опосередкована група «member of»" + +msgid "Kerberos keys available" +msgstr "Доступні ключі Kerberos" + +msgid "Add a new user." +msgstr "Додати нового користувача." + +msgid "Don't create user private group" +msgstr "Не створювати закриту групу користувача" + +msgid "Delete a user." +msgstr "Вилучити користувача." + +msgid "Disable a user account." +msgstr "Вимкнути обліковий запис користувача." + +msgid "Enable a user account." +msgstr "Увімкнути обліковий запис користувача." + +msgid "Search for users." +msgstr "Шукати користувачів." + +msgid "Self" +msgstr "Self" + +msgid "Display user record for current Kerberos principal" +msgstr "" +"Показати запис користувача для поточного реєстраційного запису Kerberos" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "Результати мають містити лише атрибут основного ключа («login»)" + +msgid "Search for users with these member of groups." +msgstr "Шукати користувачів з вказаними групами участі." + +msgid "Search for users without these member of groups." +msgstr "Шукати користувачів без вказаних груп участі." + +msgid "Search for users with these member of netgroups." +msgstr "Шукати користувачів із вказаними мережевими групами участі." + +msgid "Search for users without these member of netgroups." +msgstr "Шукати користувачів без вказаних мережевих груп участі." + +msgid "Search for users with these member of roles." +msgstr "Шукати користувачів із вказаними ролями участі." + +msgid "Search for users without these member of roles." +msgstr "Шукати користувачів без вказаних ролей участі." + +msgid "Search for users with these member of HBAC rules." +msgstr "Шукати користувачів із цими правилами HBAC участі." + +msgid "Search for users without these member of HBAC rules." +msgstr "Шукати користувачів без цих правил HBAC участі." + +msgid "Search for users with these member of sudo rules." +msgstr "Шукати користувачів із цими правилами sudo участі." + +msgid "Search for users without these member of sudo rules." +msgstr "Шукати користувачів без цих правил sudo участі." + +msgid "Modify a user." +msgstr "Змінити параметри користувача." + +msgid "Rename the user object" +msgstr "Перейменувати об’єкт користувача" + +msgid "Display information about a user." +msgstr "Показати дані щодо користувача." + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" +"\n" +" Стан блокування облікового запису користувача\n" +"\n" +" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" +" забагато разів протягом певного проміжку часу, який визначається " +"правилами\n" +" роботи з паролями. Блокування облікового запису є тимчасовим станом, " +"його\n" +" може бути розблоковано адміністратором.\n" +"\n" +" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" +" блокування на кожному з них.\n" +"\n" +" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " +"слід\n" +" виконати порівняння кількості помилкових спроб входу та час останньої\n" +" невдалої спроби з еталонними значеннями. Обліковий запис буде " +"заблоковано,\n" +" якщо буде перевищено кількість maxfail помилкових спроб протягом " +"проміжку\n" +" часу failinterval. Відповідні значення задаються правилами обробки " +"паролів,\n" +" пов’язаними з обліковим записом користувача.\n" +"\n" +" Зміни до лічильника помилкових спроб входу вносяться, лише коли " +"користувач\n" +" виконує спробу увійти, тому може статися так, що обліковий запис " +"заблоковано,\n" +" хоча час, що минув з останньої помилкової спроби, перевищує час " +"блокування\n" +" (lockouttime), заданий правилам обробки паролів. Це означає, що " +"користувач\n" +" може увійти до системи знову.\n" +" " + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" +"\n" +" Розблокувати обліковий запис користувача\n" +"\n" +" Обліковий запис може бути заблоковано, якщо відповідно до правил " +"безпеки\n" +" користувач перевищить обмеження на кількість введення помилкових " +"паролів\n" +" протягом певного часу. Запис блокується тимчасово, його може бути\n" +" розблоковано адміністратором.\n" +" " + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +"Правило автоматичної участі.\n" +"\n" +"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" +"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" +"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " +"атрибутів.\n" +"\n" +"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" +"створити правило без визначення групи або групи вузлів.\n" +"\n" +"Умова є формальним виразом, використовується 389-ds для встановлення\n" +"відповідності нового вхідного запису з правилом автоматичної участі.\n" +"Якщо умові відповідає правило включення, запис додається до відповідної\n" +"групи або групи вузлів.\n" +"\n" +"Можна визначити типову групу або групу вузлів, яку буде використано для\n" +"записів, які не відповідають жодному правилу. У випадку записів " +"користувачів\n" +"ця група буде резервною групою, оскільки усіх користувачі типово є " +"учасниками\n" +"групи, вказаної у налаштуваннях IPA.\n" +"\n" +"За допомогою програми automember-rebuild ви можете повторно застосувати " +"правила\n" +"автоматичної участі до вже створених записів, тобто перебудувати схему " +"участі.\n" +"\n" +" Додати початкову групу або групу вузлів:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Додати початкове правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Додати умову до правила:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Додати умову виключення до правила для запобігання автоматичному " +"пов’язуванню:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Додати вузол:\n" +" ipa host-add web1.example.com\n" +"\n" +" Додати запис користувача:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Перевірити правила автоматичної участі:\n" +" ipa hostgroup-show webservers\n" +" Група вузлів: webservers\n" +" Опис: Web Servers\n" +" Вузли-учасники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Назва групи: devel\n" +" Опис: Developers\n" +" GID: 1004200000\n" +" Користувачі-учасники: tuser\n" +"\n" +" Вилучити умову з правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Змінити правило автоматичної участі:\n" +" ipa automember-mod\n" +"\n" +" Встановити типову (резервну) групу призначення:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Вилучити типову (резервну) групу призначення:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Показати типову (резервну) групу призначення:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Знайти усіх правила автоматичної участі:\n" +" ipa automember-find\n" +"\n" +" Показати правило автоматичної участі:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Вилучити правило автоматичної участі:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Перебудувати записи участі для усіх користувачів:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Перебудувати записи участі для усіх вузлів:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Перебудувати записи участі для вказаних користувачів:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Перебудувати записи участі для вказаних вузлів:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "A description of this auto member rule" +msgstr "Опис цього правила автоматичної участі" + +msgid "Default (fallback) Group" +msgstr "Типова (резервна) група" + +msgid "Default group for entries to land" +msgstr "Типова група для додавання записів" + +msgid "Add an automember rule." +msgstr "Додати правило автоматичної участі." + +msgid "Automember Rule" +msgstr "Правило автоматичної участі" + +msgid "Grouping Type" +msgstr "Тип групування" + +msgid "Grouping to which the rule applies" +msgstr "Групування, якого стосується правило" + +msgid "Add conditions to an automember rule." +msgstr "Додати умови до правила автоматичної участі." + +msgid "Inclusive Regex" +msgstr "Формальний вираз включення" + +msgid "Exclusive Regex" +msgstr "Формальний вираз виключення" + +msgid "Attribute Key" +msgstr "Ключ атрибута" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Атрибут для фільтрування за формальним виразом. Приклад: fqdn для вузла або " +"manager для користувача" + +msgid "Conditions that could not be added" +msgstr "Умови, які не вдалося додати" + +msgid "Number of conditions added" +msgstr "Кількість доданих умов" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "Вилучити типову (резервну) групу для невідповідних записів." + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "Встановити типову (резервну) групу для невідповідних записів." + +msgid "Default (fallback) group for entries to land" +msgstr "Типова (резервна) група для додавання записів" + +msgid "Display information about the default (fallback) automember groups." +msgstr "Показати дані щодо типових (резервних) груп автоматичної участі." + +msgid "Delete an automember rule." +msgstr "Вилучити правило автоматичної участі." + +msgid "Search for automember rules." +msgstr "Шукати правила автоматичної участі." + +msgid "Modify an automember rule." +msgstr "Змінити правило автоматичної участі." + +msgid "Rebuild auto membership." +msgstr "Повторне збирання правил автоматичної участі." + +msgid "Rebuild membership for all members of a grouping" +msgstr "Повторне збирання правил участі для усіх учасників угрупування" + +msgid "Rebuild membership for specified users" +msgstr "Повторне збирання правил участі для вказаних користувачів" + +msgid "Rebuild membership for specified hosts" +msgstr "Повторне збирання правил участі для вказаних вузлів" + +msgid "No wait" +msgstr "Не чекати" + +msgid "Don't wait for rebuilding membership" +msgstr "Не чекати на завершення перебудови записів участі" + +msgid "Remove conditions from an automember rule." +msgstr "Вилучити умови з правила автоматичної участі." + +msgid "Conditions that could not be removed" +msgstr "Умови, які не вдалося вилучити" + +msgid "Number of conditions removed" +msgstr "Кількість вилучених умов" + +msgid "Display information about an automember rule." +msgstr "Показати дані щодо правила автоматичної участі." + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" +"\n" +"Дії з сертифікатами IPA\n" +"\n" +"Реалізує набір команд для керування сертифікатами серверів SSL.\n" +"\n" +"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" +"і форматі PEM.\n" +"\n" +"Якщо використовується автопідписний модуль, призначення CSR має збігатися\n" +"з призначенням на сервері. Служба сертифікації використовує лише CN\n" +"CSR і примусово визначає призначення.\n" +"\n" +"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" +"потребує вузла.\n" +"\n" +"Для того, щоб створити запит щодо сертифіката:\n" +"\n" +"* Вузол має існувати\n" +"* Служба має існувати (або слід скористатися параметром --add для\n" +"автоматичного додавання)\n" +"\n" +"ПОШУК:\n" +"\n" +"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" +"причиною відкликання, датами чинності та датою видання.\n" +"\n" +"Якщо пошук виконується за датою _від, використовується порівняння >=, а " +"якщо\n" +"виконується пошук _до дати — порівняння <=. Поєднання обох пошуків " +"призводить\n" +"до пошуку з логічним поєднанням ТА.\n" +"\n" +"Дати обробляються як дати за Гринвічем, відповідно до дат визначених у\n" +"сертифікатах.\n" +"\n" +"Формат дати є таким: РРРР-мм-дд.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити запит щодо нового сертифіката і додати реєстраційний запис:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Отримати вже створений сертифікат:\n" +" ipa cert-show 1032\n" +"\n" +" Відкликати сертифікат (причини визначено у RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Вилучити сертифікат зі списку відкликання:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Перевірити стан запиту щодо підписування:\n" +" ipa cert-status 10\n" +"\n" +" Пошук сертифікатів за назвою вузла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Пошук відкликаних сертифікатів за причиною:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Пошук сертифікатів за датою видання\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" +"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" +"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" +"сертифікат не одразу.\n" +"\n" +"Передбачено підтримку таких причин відкликання:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " +"5280:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу CA." + +msgid "Search for existing certificates." +msgstr "Шукати наявні сертифікати." + +msgid "Match cn attribute in subject" +msgstr "Порівняти із атрибутом cn у темі" + +msgid "Reason" +msgstr "Підстава" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Причина відкликання сертифіката (0-10)" + +msgid "minimum serial number" +msgstr "мінімальний серійний номер" + +msgid "maximum serial number" +msgstr "максимальний серійний номер" + +msgid "match the common name exactly" +msgstr "повна відповідність загальній назві" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "Чинний не пізніше, ніж з цієї дати (РРРР-мм-дд)" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "Чинний не пізніше, ніж до цієї дати (РРРР-мм-дд)" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "Чинний не раніше від цієї дати (РРРР-мм-дд)" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "Чинний не раніше цієї дати (РРРР-мм-дд)" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "Видано з цієї дати (РРРР-мм-дд)" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "Видано до цієї дати (РРРР-мм-дд)" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "Відкликано з цієї дати (РРРР-мм-дд)" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "Відкликано до цієї дати (РРРР-мм-дд)" + +msgid "Maximum number of certs returned" +msgstr "Максимальна кількість сертифікатів у повернутому списку" + +msgid "Take a revoked certificate off hold." +msgstr "Забрати відкликаний сертифікат." + +msgid "Serial number" +msgstr "Серійний номер" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "Серійний десятковий номер або шістнадцятковий номер з префіксом 0x" + +msgid "Submit a certificate signing request." +msgstr "Надіслати запит щодо підписування сертифіката." + +msgid "CSR" +msgstr "CSR" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Реєстраційний запис служби для цього сертифіката (наприклад HTTP/test." +"example.com)" + +msgid "automatically add the principal if it doesn't exist" +msgstr "автоматично додати реєстраційний запис, якщо його не існує" + +msgid "Revoke a certificate." +msgstr "Відкликати сертифікат." + +msgid "Retrieve an existing certificate." +msgstr "Отримати вже створений сертифікат." + +msgid "Output filename" +msgstr "Назва файла виводу" + +msgid "File to store the certificate in." +msgstr "Файл, у якому зберігатимуться дані сертифіката." + +msgid "Check the status of a certificate signing request." +msgstr "Перевірити стан запиту щодо підписування сертифіката." + +msgid "Request id" +msgstr "Ід. запиту" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Групи користувачів\n" +"\n" +"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " +"можете\n" +"додати параметр --nonposix до команди group-add з метою позначення нової\n" +"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " +"group-mod\n" +"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" +"перетворювати на групи не-POSIX.\n" +"\n" +"Кожна група повинна мати опис.\n" +"\n" +"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " +"підтримку\n" +"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" +"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" +"таку не вказано.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Додавання нової групи не-POSIX:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Перетворити групу не-POSIX на групу posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Вилучення групи:\n" +" ipa group-del unixadmins\n" +"\n" +" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Додати список користувачів до групи \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Вилучення користувача з групи \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показати інформацію щодо іменованої групи.\n" +" ipa group-show localadmins\n" +"\n" +"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" +"користувачів з довірених доменів до локальних груп POSIX з метою\n" +"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" +"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" +"слід пізніше включити до одної з груп POSIX.\n" +"\n" +"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" +"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" +"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" +"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" +"допомогою використання Загального каталогу довіреного домену.\n" +"\n" +"Приклад:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" +"відповідної локальної групи POSIX:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" +"групи ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " +"визначити\n" +"їхні SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "GID (use this option to set it manually)" +msgstr "GID (за допомогою цього параметра можна встановити значення вручну)" + +msgid "Indirect Member users" +msgstr "Опосередковані користувачі «member»" + +msgid "Indirect Member groups" +msgstr "Опосередковані групи «member»" + +msgid "Create a new group." +msgstr "Створити нову групу." + +msgid "Create as a non-POSIX group" +msgstr "Створити як групу, що не відповідає POSIX" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "Дозволити додавання зовнішніх учасників поза IPA з довірених доменів" + +msgid "Add members to a group." +msgstr "Додати учасників до групи." + +msgid "External member" +msgstr "Зовнішній учасник" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "Учасники довіреного домену у форматі ДОМЕН\\ім’я або ім’я@домен" + +msgid "Delete group." +msgstr "Вилучити групу." + +msgid "Detach a managed group from a user." +msgstr "Від’єднати керовану групу від користувача." + +msgid "Search for groups." +msgstr "Шукати групи." + +msgid "search for private groups" +msgstr "шукати закриті групи" + +msgid "search for POSIX groups" +msgstr "шукати групи POSIX" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" +"шукати групи з підтримкою зовнішніх учасників поза IPA з довірених доменів" + +msgid "search for non-POSIX groups" +msgstr "шукати групи, які не є групами POSIX" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "Результати мають містити лише атрибут основного ключа («group-name»)" + +msgid "Search for groups with these member users." +msgstr "Шукати групи із вказаними користувачами-учасниками." + +msgid "Search for groups without these member users." +msgstr "Шукати групи без вказаних користувачів-учасників." + +msgid "Search for groups with these member groups." +msgstr "Шукати групи із вказаними групами-учасниками." + +msgid "Search for groups without these member groups." +msgstr "Шукати групи без вказаних груп-учасників." + +msgid "Search for groups with these member of groups." +msgstr "Шукати групи із вказаними групами участі." + +msgid "Search for groups without these member of groups." +msgstr "Шукати групи без вказаних груп участі." + +msgid "Search for groups with these member of netgroups." +msgstr "Шукати групи із вказаними мережевими групами участі." + +msgid "Search for groups without these member of netgroups." +msgstr "Шукати групи без вказаних мережевих груп участі." + +msgid "Search for groups with these member of roles." +msgstr "Шукати групи із вказаними ролями участі." + +msgid "Search for groups without these member of roles." +msgstr "Шукати групи без вказаних ролей участі." + +msgid "Search for groups with these member of HBAC rules." +msgstr "Шукати групи із цими правилами HBAC участі." + +msgid "Search for groups without these member of HBAC rules." +msgstr "Шукати групи без цих правил HBAC участі." + +msgid "Search for groups with these member of sudo rules." +msgstr "Шукати групи із цими правилами sudo участі." + +msgid "Search for groups without these member of sudo rules." +msgstr "Шукати групи без цих правил sudo участі." + +msgid "Modify a group." +msgstr "Змінити групу." + +msgid "change to a POSIX group" +msgstr "змінити на групу POSIX" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "змінити для підтримки зовнішніх учасників поза IPA з довірених доменів" + +msgid "Rename the group object" +msgstr "Перейменувати об’єкт групи" + +msgid "Remove members from a group." +msgstr "Вилучити учасників з групи." + +msgid "Display information about a named group." +msgstr "Показати дані щодо іменованої групи." msgid "" "\n" "Simulate use of Host-based access controls\n" "\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" +"HBAC rules control who can access what services on what hosts.\n" "You can use HBAC to control which users or groups can access a service,\n" "or group of services, on a target host.\n" "\n" @@ -13799,7 +9677,7 @@ msgid "" "\n" " ipa hbactest --user= --host= --service=\n" " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" +" [--sizelimit= ]\n" "\n" " --user, --host, and --service are mandatory, others are optional.\n" "\n" @@ -13824,9 +9702,6 @@ msgid "" "change it\n" " with --sizelimit option.\n" "\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" "EXAMPLES:\n" "\n" " 1. Use all enabled HBAC rules in IPA database to simulate:\n" @@ -13834,10 +9709,10 @@ msgid "" " --------------------\n" " Access granted: True\n" " --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" " 2. Disable detailed summary of how rules were applied:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" @@ -13846,60 +9721,146 @@ msgid "" " --------------------\n" "\n" " 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" " 4. Use all enabled HBAC rules in IPA database + explicitly specified " "rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" " --------------------\n" " Access granted: True\n" " --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" " 5. Test all disabled HBAC rules in IPA database:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" notmatched: new-rule\n" +" Not matched rules: new-rule\n" "\n" " 6. Test all disabled HBAC rules in IPA database + explicitly specified " "rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" " 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" " --------------------\n" " Access granted: True\n" " --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" "\n" "Імітація використання керування доступом на основі вузлів (HBAC)\n" "\n" -"Правила HBAC керують тим, хто може отримувати доступ до певних служб.\n" +"Правила HBAC керують тим, хто може отримувати доступ до певних служб на\n" +"певних вузлах.\n" "Ви можете скористатися HBAC для керування тим, які користувачі або групи\n" "на початковому вузлі можуть отримувати доступ до служби або групи служб\n" "на вузлі призначення\n" @@ -13914,7 +9875,7 @@ msgstr "" "\n" " ipa hbactest --user= --host= --service=\n" " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" +" [--sizelimit= ]\n" "\n" " --user, --host і --service є обов’язковими, інші можна не вказувати.\n" "\n" @@ -13935,9 +9896,6 @@ msgstr "" " Якщо не вказано --rules, буде виконано імітацію всіх увімкнених правил " "IPA.\n" "\n" -" Якщо вказано --srchost, його буде проігноровано. Цей параметр збережено " -"лише з міркувань сумісності.\n" -"\n" "ПРИКЛАДИ:\n" "\n" " 1. Використання всіх увімкнених правил HBAC у базі даних IPA:\n" @@ -14007,6 +9965,3362 @@ msgstr "" " невідповідне: myrule\n" " невідповідне: new-rule\n" " відповідне: allow_all\n" +"\n" +"\n" +"HBACTEST І ДОВІРЕНІ ДОМЕНИ\n" +"\n" +"Якщо у IPA налаштовано зовнішній довірений домен, правила HBAC також\n" +"застосовуються до користувачів, що отримують доступ до ресурсів IPA з\n" +"з довіреного домену. Після цього користувачі і групи довіреного домену\n" +"(на їхні SID) може бути прив’язано до зовнішніх груп, які можуть бути\n" +"учасниками груп POSIX у IPA. Такі прив’язки може бути використано у\n" +"правилах HBAC, отже уможливлення доступу до ресурсів, захищених системою\n" +"HBAC.\n" +"\n" +"Додаток hbactest здатен тестувати доступ як для локальних користувачів\n" +"IPA, так і користувачів з довірених доменів, як за повним іменем\n" +"користувача, так і за SID користувачів. У таких іменах користувачів\n" +"має бути вказано скорочено довірений домен (ДОМЕН\\Administrator) або\n" +"назву реєстраційного запису користувача (UPN), Administrator@ad.test.\n" +"\n" +"Будь ласка, зауважте, що виконувати hbactest з аргументом користувача\n" +"довіреного домену у параметрі --user можуть виконувати лише учасники\n" +"групи «trust admins».\n" +"\n" +"ПРИКЛАД:\n" +"\n" +" 1. Перевірити, чи відповідає користувач з довіреного домену,\n" +" вказаний за коротким іменем, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Відповідні правила: can_login\n" +"\n" +" 2. Перевірити, чи відповідає користувач з довіреного домену,\n" +" вказаний за назвою його домену, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Невідповідні правила: can_login\n" +"\n" +" 3. Перевірити, чи відповідає користувач з довіреного домену\n" +" вказаний за SID, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Відповідні правила: can_login\n" +"\n" +" 4. Перевірити, чи відповідає інший користувач з довіреного домену,\n" +" вказаний за SID, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Відповідні правила: can_login\n" +"\n" +" 5. Перевірити, чи відповідає інший користувач з довіреного домену,\n" +" вказаний за коротким ім’ям, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Невідповідні правила: can_login\n" + +msgid "Simulate use of Host-based access controls" +msgstr "Імітувати використання керування доступом на основі вузлів" + +msgid "Target host" +msgstr "Вузол призначення" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" +"Правила для перевірки. Якщо не вказано, вважається, що використано --enabled." + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" +"Приховати дані щодо того, які правила є відповідними, які не є відповідними " +"і які є некоректними" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "Перевірити всі увімкнені правила IPA [типова поведінка]" + +msgid "Include all disabled IPA rules into test" +msgstr "Перевірити всі вимкнені правила IPA" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" +"Максимальна кількість правил, які слід обробити, якщо не вказано параметра --" +"rules" + +msgid "Warning" +msgstr "Попередження" + +msgid "Matched rules" +msgstr "Відповідні правила" + +msgid "Not matched rules" +msgstr "Невідповідні правила" + +msgid "Non-existent or invalid rules" +msgstr "Некоректні правила або правила, яких не існує" + +msgid "Result of simulation" +msgstr "Результат імітації" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Довіра між областями\n" +"\n" +"Керування відносинами довіри між доменами IPA і Active Directory.\n" +"\n" +"З метою надання доступу користувачам віддаленого домену до ресурсів у " +"домені\n" +"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" +"підтримку довіри лише між доменами IPA і Active Directory під керуванням " +"Windows\n" +"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " +"або\n" +"новішої версії.\n" +"\n" +"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " +"доменах,\n" +"IPA і Active Directory, щоб домени могли виявити один одного. " +"Працездатність\n" +"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" +"іншому домені за допомогою записів DNS.\n" +"\n" +"Приклад:\n" +"\n" +"1. Встановити довіру між областями з Active Directory за допомогою " +"реєстраційних\n" +" даних адміністратора AD:\n" +"\n" +" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" +"password\n" +"\n" +"2. Показати список всіх наявних відносин довіри:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показати подробиці щодо певних відносин довіри:\n" +"\n" +" ipa trust-show <домен.ad>\n" +"\n" +"4. Вилучити наявні відносини довіри:\n" +"\n" +" ipa trust-del <домен.ad>\n" +"\n" +"Щойно відносини довіри буде встановлено, віддалених користувачів слід " +"прив’язати\n" +"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" +"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " +"потім\n" +"цю групу має бути включено до однієї з локальних груп POSIX.\n" +"\n" +"Приклади:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " +"POSIX\n" +" довіреного домену:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " +"ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " +"ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external для " +"перегляду їхніх SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" +"\n" +"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" +"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " +"Після\n" +"цього створені ідентифікатори використовуються для обміну даними з\n" +"довіреним доменом певного типу.\n" +"\n" +"1. Показати налаштування довіри загального рівня для типів довіри Active " +"Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" +" встановити іншу резервну основну групу (GID резервної основної групи\n" +" використовується як GID основного користувача, якщо користувача\n" +" розпізнано у домені IPA, але він не має жодного вже встановленого\n" +" основного GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Повернути для резервної основної групи значення типової прихованої групи\n" +" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +msgid "Domain NetBIOS name" +msgstr "Назва домену у NetBIOS" + +msgid "Domain Security Identifier" +msgstr "Ідентифікатор безпеки домену" + +msgid "SID blacklist incoming" +msgstr "Чорний список вхідних SID" + +msgid "SID blacklist outgoing" +msgstr "Чорний список вихідних SID" + +msgid "Security Identifier" +msgstr "Ідентифікатор безпеки" + +msgid "NetBIOS name" +msgstr "Назва NetBIOS" + +msgid "Domain GUID" +msgstr "GUID домену" + +msgid "Fallback primary group" +msgstr "Резервна основна група" + +msgid "Domain name" +msgstr "Назва домену" + +msgid "Trusted domain partner" +msgstr "Партнер довіреного домену" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "Визначити, чи було запущено ipa-adtrust-install для цієї системи" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" +"Визначити, чи налаштовано додаток сумісності схем (Schema Compatibility) на " +"обслуговування користувачів і груп довіреного домену" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "Визначити, чи було запущено ipa-adtrust-install з завданням sidgen" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" +"\n" +"Додати новий запис довіри для використання.\n" +"\n" +"За допомогою цієї команди можна встановити відносини довіри з\n" +"іншим доменом, який після цього вважається «довіреним». У результаті\n" +"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" +"цього домену.\n" +"\n" +"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" +"Active Directory.\n" +"\n" +"Команду можна безпечно запускати декілька разів для одного і того самого\n" +"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" +"довіри з обох боків.\n" +" " + +msgid "Trust type (ad for Active Directory, default)" +msgstr "Тип довіри (типовим для Active Directory є ad)" + +msgid "Active Directory domain administrator" +msgstr "Адміністратор домену Active Directory" + +msgid "Active Directory domain administrator's password" +msgstr "Пароль адміністратора домену Active Directory" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "Контролер домену Active Directory (необов’язковий)" + +msgid "Shared secret for the trust" +msgstr "Оприлюднений ключ для довіри" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" +"Перший ідентифікатор POSIX діапазону, зарезервованого для довіреного домену" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" +"Розмір діапазону ідентифікаторів, зарезервованого для довіреного домену" + +msgid "Range type" +msgstr "Тип діапазону" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" +"Тип діапазону ідентифікаторів довіреного домену, одне з таких значень: ipa-" +"ad-trust-posix, ipa-ad-trust" + +msgid "Delete a trust." +msgstr "Вилучити запис довіри." + +msgid "Refresh list of the domains associated with the trust" +msgstr "Освіжити список доменів, пов’язаних з правилом довіри" + +msgid "Search for trusts." +msgstr "Шукати записи довіри." + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "Результати мають містити лише атрибут основного ключа («realm»)" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Змінити запис довіри (для наступного використання).\n" +"\n" +" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" +" Додаткові варіанти буде додано у наступних випусках.\n" +" " + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" +"Визначати ідентифікатори безпеки користувачів та груп у довірених доменах" + +msgid "Security Identifiers (SIDs)" +msgstr "Ідентифікатори безпеки (SID)" + +msgid "Display information about a trust." +msgstr "Показати дані щодо довіри." + +msgid "Modify global trust configuration." +msgstr "Змінити налаштування довіри на загальному рівні." + +msgid "Show global trust configuration." +msgstr "Показати налаштування довіри на загальному рівні." + +msgid "Allow access from the trusted domain" +msgstr "Дозволити доступ з довіреного домену" + +msgid "Remove information about the domain associated with the trust." +msgstr "Вилучити дані щодо домену, пов’язаного з цим правилом довіри." + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "Вимкнути використання ресурсів IPA доменом правила довіри" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "Дозволити використання ресурсів IPA доменом правила довіри" + +msgid "Search domains of the trust" +msgstr "Шукати довірені домени" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "Результати мають містити лише атрибут основного ключа («domain»)" + +msgid "Modify trustdomain of the trust" +msgstr "Змінити значення довіреного домену (trustdomain) правила довіри" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" +"\n" +"Діапазони ідентифікаторів\n" +"\n" +"Керування діапазонами ідентифікаторів, використаних для відображення\n" +"ідентифікаторів POSIX на SID, і навпаки.\n" +"\n" +"За допомогою цієї програми можна керувати обома типами діапазонів " +"ідентифікаторів:\n" +"\n" +" - діапазони ідентифікаторів локального домену\n" +" - діапазони ідентифікаторів довірених віддалених доменів\n" +"\n" +"Обидва типи мають такі спільні атрибути:\n" +"\n" +" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" +" - range-size: розмір діапазону\n" +"\n" +"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " +"ідентифікатори\n" +"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" +"\n" +"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" +" - rid-base: перший RID(*) відповідного діапазону RID\n" +" - secondary-rid-base: перший RID вторинного діапазону RID\n" +"\n" +"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" +" - rid-base: перший RID відповідного діапазону RID\n" +" - dom_sid: SID довіреного домену\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" +"\n" +"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" +"ідентифікаторів слід вказати SID домену.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" +"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" +"довіреного домену.\n" +"\n" +"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" +"значеннями:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" +"13999999. Отже RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" +"\n" +"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" +"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" +"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" +"RID.\n" +"\n" +" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"Дані з діапазонів ідентифікаторів локального домену використовуються\n" +"сервером IPA на внутрішньому рівні для призначення SID користувачам і " +"групам\n" +"IPA. SID буде збережено у об’єктах користувача або групи.\n" +"\n" +"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" +"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" +"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " +"1000007.\n" +"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" +"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" +"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" +"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" +"того, щоб повністю позбутися конфліктів.\n" +"\n" +"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " +"слід\n" +"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " +"RID,\n" +"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" +"base\n" +"або secondary-rid-base, відповідно, і додати base-id.\n" +"\n" +"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" +"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" +"для локального домену буде створено під час встановлення або оновлення\n" +"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" +"створено разом з записом довіри командою «ipa trust-add ...».\n" +"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" +"\n" +"ВИПАДКИ ВИКОРИСТАННЯ:\n" +"\n" +" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" +"\n" +" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" +" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" +" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" +"\n" +" Додавання додаткового діапазону ідентифікаторів для локального домену\n" +"\n" +" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " +"додатком\n" +" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" +" POSIX, має бути створено новий діапазон для додавання нових " +"користувачів\n" +" та груп. (У поточній версії між цим командним інтерфейсом і додатком " +"DNA\n" +" немає безпосереднього зв’язку, але у майбутній версії може бути " +"передбачено\n" +" можливість внесення змін і до налаштувань додатка DNS.)\n" +"\n" +"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" +"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" +"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" +"файловій системі і використовуються для керування доступом, можлива " +"ситуація,\n" +"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" +"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" +"у іншому домені.\n" +"\n" +"(*) RID типово є останнім цілим числом SID користувача або групи, перед " +"якими\n" +"має бути вказано SID домену. Наприклад, якщо SID домену " +"S-1-5-21-123-456-789, а\n" +"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " +"користувача\n" +"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" +"використовуються для користувачів і груп.\n" +"\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" +"налаштованих для локального домену. У поточній версії додаток DNA *не " +"можна*\n" +"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" +"за допомогою цього сімейства команд.\n" +"\n" +"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" +"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " +"«cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" +"він відповідав новому діапазону.\n" + +msgid "Range name" +msgstr "Назва діапазону" + +msgid "First Posix ID of the range" +msgstr "Перший ідентифікатор POSIX діапазону" + +msgid "Number of IDs in the range" +msgstr "Кількість ідентифікаторів у діапазоні" + +msgid "First RID of the corresponding RID range" +msgstr "Перший RID відповідного діапазону RID" + +msgid "First RID of the secondary RID range" +msgstr "Перший RID вторинного діапазону RID" + +msgid "Domain SID of the trusted domain" +msgstr "SID довіреного домену" + +msgid "Name of the trusted domain" +msgstr "Назва довіреного домену" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" +"Тип діапазону ідентифікаторів. Можливі варіанти: ipa-ad-trust-posix, ipa-ad-" +"trust, ipa-local" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +" Додати новий діапазон ідентифікаторів.\n" +"\n" +" Для додавання нового діапазону ідентифікаторів вам слід завжди " +"вказувати\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Крім того, може бути надано\n" +"\n" +" --rid-base\n" +" --econdary-rid-base\n" +"\n" +" для додавання нового діапазону ідентифікаторів для локального домену і\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" для додавання нового діапазону для довіреного домену AD.\n" +"\n" +" ПОПЕРЕДЖЕННЯ:\n" +"\n" +" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " +"налаштованих\n" +" для локального домену. У поточній версії додаток DNA *не може* змінити\n" +" власні налаштування на основі локальних діапазонів, встановлених за\n" +" допомогою цього сімейства команд.\n" +"\n" +" Для внесення змін щодо локального діапазону слід змінити налаштування\n" +" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"відповідно\n" +" до параметрів нового діапазону.\n" +" " + +msgid "Delete an ID range." +msgstr "Вилучити діапазон ідентифікаторів." + +msgid "Search for ranges." +msgstr "Шукати діапазони." + +msgid "Modify ID range." +msgstr "Змінити діапазон ідентифікаторів." + +msgid "Display information about a range." +msgstr "Показати дані щодо діапазону." + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +"Жетони OTP\n" +"\n" +"Керування жетонами OTP.\n" +"\n" +"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " +"розпізнавання.\n" +"За допомогою цього коду уможливлюється керування жетонами OTP.\n" +"\n" +" Додати новий жетон:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Перевірити жетон:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Змінити постачальника:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Вилучити жетон:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "Unique ID" +msgstr "Унікальний ід." + +msgid "Type of the token" +msgstr "Тип ключа" + +msgid "Token description (informational only)" +msgstr "Опис ключа (лише інформаційний)" + +msgid "Owner" +msgstr "Власник" + +msgid "Assigned user of the token (default: self)" +msgstr "Призначений користувач ключа (типове значення: self)" + +msgid "Assigned manager of the token (default: self)" +msgstr "Призначений керівник ключа (типове значення: self)" + +msgid "Disabled" +msgstr "Вимкнено" + +msgid "Mark the token as disabled (default: false)" +msgstr "Позначення ключа як вимкненого (типове значення: false)" + +msgid "Validity start" +msgstr "Початок чинності" + +msgid "First date/time the token can be used" +msgstr "Час початку використання ключа (дата і час)" + +msgid "Validity end" +msgstr "Завершення чинності" + +msgid "Last date/time the token can be used" +msgstr "Строк дії ключа (дата і час)" + +msgid "Vendor" +msgstr "Постачальник" + +msgid "Token vendor name (informational only)" +msgstr "Назва виробника ключа (лише інформація)" + +msgid "Model" +msgstr "Модель" + +msgid "Token model (informational only)" +msgstr "Модель ключа (лише інформація)" + +msgid "Serial" +msgstr "Серійний номер" + +msgid "Token serial (informational only)" +msgstr "Серійний номер ключа (лише інформація)" + +msgid "Token secret (Base32; default: random)" +msgstr "Пароль ключа (Base32; типове значення: випадковий)" + +msgid "Token hash algorithm" +msgstr "Алгоритм хешування ключа" + +msgid "Digits" +msgstr "Цифри" + +msgid "Number of digits each token code will have" +msgstr "Кількість цифр у кожному з кодів ключа" + +msgid "Clock offset" +msgstr "Зсув годинника" + +msgid "TOTP token / IPA server time difference" +msgstr "Часова розбіжність між ключем TOTP і сервером IPA" + +msgid "Clock interval" +msgstr "Інтервал годинника" + +msgid "Length of TOTP token code validity" +msgstr "Тривалість чинності коду ключа TOTP" + +msgid "Counter" +msgstr "Лічильник" + +msgid "Initial counter for the HOTP token" +msgstr "Початковий лічильник для ключа HOTP" + +msgid "Add a new OTP token." +msgstr "Додати новий жетон OTP." + +msgid "(deprecated)" +msgstr "(застаріле)" + +msgid "Do not display QR code" +msgstr "Не показувати код QR" + +msgid "Add users that can manage this token." +msgstr "Додати записи користувачів, які можуть керувати цим жетоном." + +msgid "Delete an OTP token." +msgstr "Вилучити жетон OTP." + +msgid "Search for OTP token." +msgstr "Шукати жетон OTP." + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "Результати мають містити лише атрибут основного ключа («id»)" + +msgid "Modify a OTP token." +msgstr "Змінити жетон OTP." + +msgid "Rename the OTP token object" +msgstr "Перейменувати об’єкт жетона OTP" + +msgid "Display information about an OTP token." +msgstr "Показати інформацію щодо жетона OTP." + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +"Правила sudo\n" +"\n" +"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +"повноваження певним користувачам (або групам користувачів) на виконання\n" +"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +"користувача, зберігаючи водночас журнал виконання команд та\n" +"аргументів.\n" +"\n" +"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +" Users: користувачі або групи, які можуть викликати sudo.\n" +" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" +" Allow Command: специфічні команди, які можна виконувати за допомогою " +"sudo.\n" +" Deny Command: специфічні команди, які не можна виконувати за допомогою " +"sudo.\n" +" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +"команди.\n" +" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +"виконання команд.\n" +" Options: різноманітні параметри sudoers, які можуть змінити поведінку " +"sudo.\n" +"\n" +"До правила sudo можна додати порядок, який керуватиме порядком\n" +"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +"Порядок визначається числовим індексом, який не повинен повторюватися.\n" +"\n" +"У IPA передбачено визначений binddn для використання з sudo, який " +"розташовано у\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити правило:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Додати об’єкт команди sudo і записати його як дозволену команду до " +"правила:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Додати запис вузла до правила:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Додати запис користувача до правила:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" +" ipa sudorule-add defaults\n" +"\n" +" Встановити типовий варіант дій для sudo:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "Command category" +msgstr "Категорія команд" + +msgid "Command category the rule applies to" +msgstr "Категорія команд, до якої застосовується правило" + +msgid "RunAs User category" +msgstr "Категорія запуску від імені користувачів" + +msgid "RunAs User category the rule applies to" +msgstr "" +"Категорія запуску від імені користувачів, до якої застосовується правило" + +msgid "RunAs Group category" +msgstr "Категорія запуску від імені групи" + +msgid "RunAs Group category the rule applies to" +msgstr "Категорія запуску від імені групи, до якої застосовується правило" + +msgid "Sudo order" +msgstr "Порядок sudo" + +msgid "integer to order the Sudo rules" +msgstr "ціле число для впорядковування правил sudo" + +msgid "External User" +msgstr "Зовнішній користувач" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" +"Зовнішній користувач, до якого застосовуватиметься правило (лише sudorule-" +"find)" + +msgid "Host Masks" +msgstr "Маски вузлів" + +msgid "Sudo Allow Commands" +msgstr "Дозволені команди sudo" + +msgid "Sudo Deny Commands" +msgstr "Заборонені команди sudo" + +msgid "Sudo Allow Command Groups" +msgstr "Групи дозволених команд sudo" + +msgid "Sudo Deny Command Groups" +msgstr "Групи заборонених команд sudo" + +msgid "RunAs Users" +msgstr "Користувачі запуску від імені" + +msgid "Run as a user" +msgstr "Запуск від користувача" + +msgid "Groups of RunAs Users" +msgstr "Групи користувачів запуску від імені" + +msgid "Run as any user within a specified group" +msgstr "Запускати від імені будь-якого користувача вказаної групи" + +msgid "RunAs External User" +msgstr "Зовнішній користувач для RunAs" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" +"Зовнішній користувач, від імені якого можна віддавати команди (лише sudorule-" +"find)" + +msgid "External Groups of RunAs Users" +msgstr "Зовнішні групи користувачів для запуску від імені" + +msgid "External Groups of users that the command can run as" +msgstr "Зовнішні групи користувачів, від імені яких можна виконувати команду" + +msgid "RunAs Groups" +msgstr "Групи запуску від імені" + +msgid "Run with the gid of a specified POSIX group" +msgstr "Запускати з ідентифікатором вказаної групи POSIX" + +msgid "RunAs External Group" +msgstr "Зовнішня група для RunAs" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" +"Зовнішня група, від імені якої можна віддавати команди (лише sudorule-find)" + +msgid "Sudo Option" +msgstr "Пункт sudo" + +msgid "Create new Sudo Rule." +msgstr "Створити правило sudo." + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "Додати команди і групи команд sudo, яких стосується правило sudo." + +msgid "member sudo command group" +msgstr "учасник група команд sudo" + +msgid "sudo command groups to add" +msgstr "групи команд sudo для додавання" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Додати вузли та групи вузлів, яких стосується правило sudo." + +msgid "host masks of allowed hosts" +msgstr "маски для дозволених вузлів" + +msgid "Add an option to the Sudo Rule." +msgstr "Додати пункт до правила sudo." + +msgid "Add group for Sudo to execute as." +msgstr "Додати групу виконання до запису sudo." + +msgid "Add users and groups for Sudo to execute as." +msgstr "" +"Додати користувачів та групи для виконання команд sudo від їхнього імені." + +msgid "Add users and groups affected by Sudo Rule." +msgstr "Додати записи користувачів та груп, яких стосується правило sudo." + +msgid "Delete Sudo Rule." +msgstr "Вилучити правило sudo." + +msgid "Disable a Sudo Rule." +msgstr "Вимкнути правило sudo." + +msgid "Enable a Sudo Rule." +msgstr "Увімкнути правило sudo." + +msgid "Search for Sudo Rule." +msgstr "Знайти правило sudo." + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" +"Результати мають містити лише атрибут основного ключа («sudorule-name»)" + +msgid "Modify Sudo Rule." +msgstr "Змінити правило sudo." + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "Вилучити команди і групи команд sudo, яких стосується правило sudo." + +msgid "sudo command groups to remove" +msgstr "групи команд sudo для вилучення" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Вилучити вузли та групи вузлів, яких стосується правило sudo." + +msgid "Remove an option from Sudo Rule." +msgstr "Вилучити пункт з правила sudo." + +msgid "Remove group for Sudo to execute as." +msgstr "Вилучити групу виконання з запису sudo." + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" +"Вилучити користувачів та групи для виконання команд sudo від їхнього імені." + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Вилучити записи користувачів та груп, яких стосується правило sudo." + +msgid "Display Sudo Rule." +msgstr "Показати правило sudo." + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Обмеження часу пошуку у секундах (0 — без обмежень)" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Максимальна кількість повернутих записів (0 — без обмежень)" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Керування правилами CA ACL.\n" +"\n" +"Цей додаток призначено для визначення правил, що керують тим,\n" +"які реєстраційні записи можуть мати сертифікати, випущені за\n" +"допомогою даного профілю сертифікатів.\n" +"\n" +"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" +"\n" +"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" +"що починається з літери і складається з послідовності літер, цифр, та " +"символів підкреслювання («_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити CA ACL «test», який надає доступ усім користувачам до\n" +" профілю «UserCert»:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Показати усі властивості вказаного за назвою CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Створити CA ACL, який надає користувачеві «alice» право\n" +" використовувати профіль «DNP3»:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Вимкнути певний CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Вилучити певний CA ACL:\n" +" ipa caacl-del test\n" + +msgid "ACL name" +msgstr "Назва ACL" + +msgid "Profile category" +msgstr "Категорія профілів" + +msgid "Profile category the ACL applies to" +msgstr "Категорія профілів, до якої застосовується ACL" + +msgid "User category the ACL applies to" +msgstr "Категорія користувачів, до якої застосовується ACL" + +msgid "Host category the ACL applies to" +msgstr "Категорія вузлів, до якої застосовується ACL" + +msgid "Service category the ACL applies to" +msgstr "Категорія служб, до якої застосовується ACL" + +msgid "Profiles" +msgstr "Профілі" + +msgid "Create a new CA ACL." +msgstr "Створити запис CA ACL." + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Додати вузли і групи вузлів призначення до CA ACL." + +msgid "Add profiles to a CA ACL." +msgstr "Додати профілі до CA ACL." + +msgid "member Certificate Profile" +msgstr "учасник Профіль сертифікатів" + +msgid "Certificate Profiles to add" +msgstr "Профілі сертифікатів для додавання" + +msgid "Add services to a CA ACL." +msgstr "Додати служби до CA ACL." + +msgid "Add users and groups to a CA ACL." +msgstr "Додати користувачів і групи до CA ACL." + +msgid "Delete a CA ACL." +msgstr "Вилучити CA ACL." + +msgid "Disable a CA ACL." +msgstr "Вимкнути CA ACL." + +msgid "Enable a CA ACL." +msgstr "Увімкнути CA ACL." + +msgid "Search for CA ACLs." +msgstr "Шукати CA ACL." + +msgid "Modify a CA ACL." +msgstr "Змінити CA ACL." + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Вилучити вузли призначення та групи вузлів з CA ACL." + +msgid "Remove profiles from a CA ACL." +msgstr "Вилучити профілі із CA ACL." + +msgid "Certificate Profiles to remove" +msgstr "Профілі сертифікатів для вилучення" + +msgid "Remove services from a CA ACL." +msgstr "Вилучити служби з CA ACL." + +msgid "Remove users and groups from a CA ACL." +msgstr "Вилучити користувачів або групи з CA ACL." + +msgid "Display the properties of a CA ACL." +msgstr "Показати властивості CA ACL." + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" +"Максимальний проміжок часу (у секундах) для виконання однієї дії з пошуку " +"(-1 або 0 — без обмежень)" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" +"Максимальна кількість записів результатів пошуку (-1 або 0 — без обмежень)" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" +"\n" +"Підняти рівень домену IPA.\n" + +msgid "Query current Domain Level." +msgstr "Надіслати запити щодо поточного рівня домену." + +msgid "Current domain level:" +msgstr "Поточний рівень домену:" + +msgid "Change current Domain Level." +msgstr "Змінити поточний рівень домену." + +msgid "Domain Level" +msgstr "Рівень домену" + +msgid "Add certificates to host entry" +msgstr "Додати сертифікати до запису вузла" + +msgid "Remove certificates from host entry" +msgstr "Вилучити сертифікати із запису вузла" + +msgid "Fallback to AD DC LDAP" +msgstr "Повернення до резервного DC LDAP AD" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" +"Дозволити повернення до резервного варіанта LDAP DC AD під час визначення " +"адрес довірених об’єктів AD. Лише для двобічних відносин довіри." + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" +"Застосовує перегляд ідентифікаторів до вказаних вузлів або поточних " +"учасників вказаних груп вузлів. Якщо до вузла застосовується якийсь інший " +"перегляд ідентифікаторів, його буде перевизначено." + +msgid "Add to default group" +msgstr "Додати до типової групи" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" +"Додавати перенесені записи користувачів без групи до типової групи (типове " +"значення: true)" + +msgid "Search scope" +msgstr "Область пошуку" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" +"Область пошуку LDAP для користувачів і груп: base, onelevel або subtree. " +"Типове значення: onelevel" + +msgid "Target DN subtree" +msgstr "Піддерево DN призначення" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" +"Необов’язкове піддерево DN, куди має бути пересунуто запис (має належати до " +"піддерева, але може ще не існувати)" + +msgid "Origin DN subtree" +msgstr "Піддерево DN походження" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" +"Необов’язкове піддерево DN, звідки має бути пересунуто запис (має належати " +"до піддерева, але може ще не існувати)" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +"Сервери IPA\n" +"\n" +"Отримати дані щодо встановлених серверів IPA.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Знайти усі сервери:\n" +" ipa server-find\n" +"\n" +" Показати вказаний сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "Server name" +msgstr "Назва сервера" + +msgid "IPA server hostname" +msgstr "Назва вузла сервера IPA" + +msgid "Managed suffix" +msgstr "Керований суфікс" + +msgid "Min domain level" +msgstr "Мін. рівень домену" + +msgid "Minimum domain level" +msgstr "Мінімальний рівень домену" + +msgid "Max domain level" +msgstr "Макс. рівень домену" + +msgid "Maximum domain level" +msgstr "Максимальний рівень домену" + +msgid "Delete IPA server." +msgstr "Вилучити сервер IPA." + +msgid "Search for IPA servers." +msgstr "Шукати сервери IPA." + +msgid "Show IPA server." +msgstr "Показати сервер IPA." + +msgid "Add new certificates to a service" +msgstr "Додати нові сертифікати до запису служби" + +msgid "Remove certificates from a service" +msgstr "Вилучити сертифікати із запису служби" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Обмежене службами делегування\n" +"\n" +"Керування правилами, за допомогою яких можна обмежити делегування\n" +"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" +"користувача під час обміну даними з іншою службою без потреби для\n" +"користувача насправді переспрямовувати квиток для отримання квитка\n" +"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" +"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" +"доступу користувачів.\n" +"\n" +"Відповідно до угоди з іменування, до назви правила додається слово\n" +"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" +"допомагає концептуально пов’язати правила та їхні призначення.\n" +"\n" +"Правило складається з двох компонентів:\n" +" - Списку цілей (призначень), яких стосується правило\n" +" - Списку memberPrincipals, яким дозволено делегування для\n" +" цих цілей\n" +"\n" +"Запис цілі складається зі списку реєстраційних записів, які можна\n" +"делегувати.\n" +"\n" +"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" +"можна делегувати як вказаний список реєстраційних записів,\n" +"відповідно до визначеного списку цілей.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нове правило обмеженого делегування:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Додати нову ціль обмеженого делегування:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Додати реєстраційний запис до правила:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Додати нашу ціль до правила:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Додати реєстраційний запис до цілі:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Показати дані щодо іменованого правила і цілі:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Вилучити обмежене делегування:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" +"служби ldap від імені пов’язаного користувача.\n" +"\n" +"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" +"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" +"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" +"делегування, що спричинить непрацездатність усієї системи.\n" + +msgid "Allowed Target" +msgstr "Дозволена ціль" + +msgid "Create a new service delegation rule." +msgstr "Створити правило делегування служб." + +msgid "Add member to a named service delegation rule." +msgstr "Додати запис учасника до іменованого правила делегування служб." + +msgid "member principal" +msgstr "учасник «реєстраційний запис»" + +msgid "principal to add" +msgstr "реєстраційний запис для додавання" + +msgid "Add target to a named service delegation rule." +msgstr "Додати ціль до іменованого правила делегування служб." + +msgid "member service delegation target" +msgstr "учасник призначення делегування служб" + +msgid "service delegation targets to add" +msgstr "призначення делегування служб для додавання" + +msgid "Delete service delegation." +msgstr "Вилучити делегування служб." + +msgid "Search for service delegations rule." +msgstr "Шукати правило делегування служб." + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" +"Результати мають містити лише атрибут основного ключа («delegation-name»)" + +msgid "Remove member from a named service delegation rule." +msgstr "Вилучити запис учасника із іменованого правила делегування служб." + +msgid "principal to remove" +msgstr "реєстраційний запис для вилучення" + +msgid "Remove target from a named service delegation rule." +msgstr "Вилучити ціль із іменованого правила делегування служб." + +msgid "service delegation targets to remove" +msgstr "призначення делегування служб для вилучення" + +msgid "Display information about a named service delegation rule." +msgstr "Показати дані щодо іменованого правила делегування служб." + +msgid "Create a new service delegation target." +msgstr "Створити ціль делегування служб." + +msgid "Add member to a named service delegation target." +msgstr "Додати запис учасника до іменованого призначення делегування служб." + +msgid "Delete service delegation target." +msgstr "Вилучити ціль делегування служб." + +msgid "Search for service delegation target." +msgstr "Шукати ціль делегування служб." + +msgid "Remove member from a named service delegation target." +msgstr "Вилучити запис учасника із іменованого призначення делегування служб." + +msgid "Display information about a named service delegation target." +msgstr "Показати дані щодо іменованого призначення делегування служб." + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" +"\n" +"Користувачі етапу\n" +"\n" +"Керування записами користувачів етапу.\n" +"\n" +"Записи користувачів етапу перебувають безпосередньо у контейнері:\n" +"\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" +"Користувач не може пройти розпізнавання за допомогою цих записів\n" +"(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" +"перетворення на активні записи.\n" +"\n" +"Записи активних користувачів є користувачами Posix, що перебувають\n" +"безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" +"Користувач може пройти розпізнавання за допомогою активних записів,\n" +"якщо для них передбачено реєстраційні дані\n" +"\n" +"Вилучені записи користувачів є записами користувачів Posix, що\n" +"перебувають безпосередньо у контейнері: \"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Користувачі не можуть проходити розпізнавання за допомогою цих\n" +"записів (навіть якщо записи містять реєстраційні дані)\n" +"\n" +"Контейнер користувачів етапу містить записи\n" +" - створені командами 'stageuser-add', які є користувачами Posix\n" +" - створені зовнішньою системою забезпечення\n" +"\n" +"Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" +" - RDN запису має значення 'uid'\n" +" - ipaUniqueID має значення 'autogenerate'\n" +"\n" +"У IPA передбачено підтримку широкого діапазону форматів імен користувачів,\n" +"але слід зважати на різноманітні обмеження, які можуть стосуватися " +"середовища,\n" +"у якому ви працюєте. Наприклад, імена користувачів, що починаються з цифри,\n" +"або імена користувачів, довжина яких перевищує певну довжину, що може\n" +"призвести до проблем у деяких системах UNIX.\n" +"Для зміни формату, який дозволено інструментами IPA, скористайтеся командою\n" +"'ipa config-mod'.\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нового користувача етапу:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Додати користувача етапу з контейнера Delete\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" + +msgid "Activate a stage user." +msgstr "Активувати користувача етапу." + +msgid "Add a new stage user." +msgstr "Додати нового користувача етапу." + +msgid "Create Stage user in from a delete user" +msgstr "" +"Створити запис користувача етапу на основі вилученого запису користувача" + +msgid "Delete a stage user." +msgstr "Вилучити запис користувача етапу." + +msgid "Search for stage users." +msgstr "Шукати записи користувачів етапу." + +msgid "Search for stage users with these member of groups." +msgstr "Шукати користувачів етапу із вказаними групами участі." + +msgid "Search for stage users without these member of groups." +msgstr "Шукати користувачів етапу без вказаних груп участі." + +msgid "Search for stage users with these member of netgroups." +msgstr "Шукати користувачів етапу із вказаними мережевими групами участі." + +msgid "Search for stage users without these member of netgroups." +msgstr "Шукати користувачів етапу без вказаних мережевих груп участі." + +msgid "Search for stage users with these member of roles." +msgstr "Шукати користувачів етапу із вказаними ролями участі." + +msgid "Search for stage users without these member of roles." +msgstr "Шукати користувачів етапу без вказаних ролей участі." + +msgid "Search for stage users with these member of HBAC rules." +msgstr "Шукати користувачів етапу із цими правилами HBAC участі." + +msgid "Search for stage users without these member of HBAC rules." +msgstr "Шукати користувачів етапу без цих правил HBAC участі." + +msgid "Search for stage users with these member of sudo rules." +msgstr "Шукати користувачів етапу із цими правилами sudo участі." + +msgid "Search for stage users without these member of sudo rules." +msgstr "Шукати користувачів етапу без цих правил sudo участі." + +msgid "Modify a stage user." +msgstr "Змінити запис користувача етапу." + +msgid "Rename the stage user object" +msgstr "Перейменувати об’єкт користувача етапу" + +msgid "Display information about a stage user." +msgstr "Показати дані щодо користувача етапу." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" +"\n" +"Топологія\n" +"\n" +"Керування топологією реплікації.\n" +"\n" +"Потребує мінімального рівня домену 1.\n" + +msgid "Segment name" +msgstr "Назва сегмента" + +msgid "Arbitrary string identifying the segment" +msgstr "Довільний рядок для ідентифікації сегмента" + +msgid "Left node" +msgstr "Лівий вузол" + +msgid "Left replication node - an IPA server" +msgstr "Лівий вузол реплікації — сервер IPA" + +msgid "Right node" +msgstr "Правий вузол" + +msgid "Right replication node - an IPA server" +msgstr "Правий вузол реплікації — сервер IPA" + +msgid "Connectivity" +msgstr "Можливість з’єднання" + +msgid "Direction of replication between left and right replication node" +msgstr "Напрямок реплікації між лівим і правим вузлами реплікації" + +msgid "Attributes to strip" +msgstr "Атрибути, які слід прибрати" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" +"Розділений пробілами список атрибутів, які слід вилучати під час оновлено " +"реплікації." + +msgid "Attributes to replicate" +msgstr "Атрибути для реплікації" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" +"Атрибути, для яких не відбуватиметься реплікація до сервера споживання під " +"час часткового оновлення. Наприклад, `(objectclass=*) $ EXCLUDE " +"accountlockout memberof" + +msgid "Attributes for total update" +msgstr "Атрибути для загального оновлення" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" +"Атрибути, для яких не відбуватиметься реплікація до сервера споживання під " +"час загального оновлення. Наприклад, (objectclass=*) $ EXCLUDE accountlockout" + +msgid "Session timeout" +msgstr "Час очікування сеансу" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" +"Кількість секунд, протягом яких відбуватиметься очікування зовнішнім LDAP на " +"відповідь під час дій від віддаленої репліки, перш ніж дію буде припинено " +"через перевищення часу очікування і буде видано повідомлення щодо помилки" + +msgid "Replication agreement enabled" +msgstr "Увімкнено угоду щодо реплікації" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" +"Визначає, чи є активною угода щодо реплікації, тобто, чи відбувається " +"реплікація за цією угодою" + +msgid "Suffix name" +msgstr "Назва суфікса" + +msgid "LDAP suffix to be managed" +msgstr "Суфікс LDAP, яким слід керувати" + +msgid "Add a new segment." +msgstr "Додати новий сегмент." + +msgid "Delete a segment." +msgstr "Вилучити сегмент." + +msgid "Search for topology segments." +msgstr "Шукати сегменти топології." + +msgid "Modify a segment." +msgstr "Змінити сегмент." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" +"Надіслати запит щодо повної повторної ініціалізації вузла, щоб отримує дані " +"з іншого вузла." + +msgid "Initialize left node" +msgstr "Ініціалізувати лівий вузол" + +msgid "Initialize right node" +msgstr "Ініціалізувати правий вузол" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "Зупинити вже почате оновлення вибраних вузлів" + +msgid "Display a segment." +msgstr "Показати сегмент." + +msgid "Add a new topology suffix to be managed." +msgstr "Додати новий суфікс топології для керування." + +msgid "Delete a topology suffix." +msgstr "Вилучити суфікс топології." + +msgid "Search for topology suffices." +msgstr "Шукати суфікси топології." + +msgid "Modify a topology suffix." +msgstr "Змінити суфікс топології." + +msgid "Show managed suffix." +msgstr "Показати керований суфікс." + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" +"\n" +"Перевірити топологію реплікації для суфікса.\n" +"\n" +"Перевірки, які виконуються:\n" +" 1. перевірка того, чи є топологія роз’єднаною. Іншими словами, того, чи\n" +" пов’язано усі сервери шляхами реплікації.\n" +" 2. перевірка того, чи не перевищено кількість рекомендованих угод з\n" +" реплікації між серверами.\n" +" " + +msgid "Preserved user" +msgstr "Зарезервований користувач" + +msgid "Add one or more certificates to the user entry" +msgstr "Додати один або декілька сертифікатів до запису користувача" + +msgid "Remove one or more certificates to the user entry" +msgstr "Вилучити один або декілька сертифікатів запису користувача" + +msgid "Move deleted user into staged area" +msgstr "Пересунути вилучений запис користувача до області етапу" + +msgid "Undelete a delete user account." +msgstr "Відновити вилучений обліковий запис користувача." + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +"Сховища\n" +"\n" +"Керування сховищами.\n" +"\n" +"Сховище — безпечне місце для зберігання ключів і паролів.\n" +"\n" +"За правами власності сховища поділяються на три категорії:\n" +"* приватні сховища користувачів\n" +"* сховища служб\n" +"* сховища спільного використання\n" +"\n" +"Сховища користувачів — це сховища, власником яких є конкретний\n" +"користувач. Приватними є сховища, власником яких є поточний\n" +"користувач. Власником сховища служби є певна служба. Сховища\n" +"спільного використання належать адміністратору, але можуть\n" +"використовуватися іншими користувачами або службами.\n" +"\n" +"За механізмами захисту сховища поділяються на три\n" +"типи:\n" +"* стандартні сховища\n" +"* симетричні сховища\n" +"* асиметричні сховища\n" +"\n" +"У стандартному сховищі для передавання і зберігання реєстраційних\n" +"даних використовуються безпечні механізми. Реєстраційні дані\n" +"може бути отримано лише користувачами, які мають доступ\n" +"до сховища.\n" +"\n" +"Симетричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою пароля.\n" +"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" +"\n" +"Асиметричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою відкритого ключа.\n" +"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" +"\n" +" Вивести список сховищ:\n" +" ipa vault-find\n" +" [--user <користувач>|--service <служба>|--shared]\n" +"\n" +" Додати стандартне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type standard\n" +"\n" +" Додати симетричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type symmetric --password-file пароль.txt\n" +"\n" +" Додати асиметричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file відкритий_ключ.pem\n" +"\n" +" Показати сховище:\n" +" ipa vault-show <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +"\n" +" Змінити опис сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --desc <опис>\n" +"\n" +" Змінити тип сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старий пароль/закритий ключ]\n" +" [новий пароль/відкритий ключ]\n" +"\n" +" Змінити пароль до симетричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password <старий пароль>\n" +" --new-password <новий пароль>\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" +"\n" +" Змінити ключ асиметричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закритого ключа>\n" +" --public-key-file <файл нового відкритого ключа>\n" +"\n" +" Вилучити сховище:\n" +" ipa vault-del <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +"\n" +" Вивести налаштування сховищ:\n" +" ipa vaultconfig-show\n" +"\n" +" Архівувати дані до стандартного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" +"\n" +" Архівувати дані до симетричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" +" --password-file пароль.txt\n" +"\n" +" Архівувати дані до асиметричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" +"\n" +" Отримати дані зі стандартного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" +"\n" +" Отримати дані з симетричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" +" --password-file password.txt\n" +"\n" +" Отримати дані з асиметричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів> --private-key-file private.pem\n" +"\n" +" Додати записи власників сховища:\n" +" ipa vault-add-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" +"\n" +" Додати записи учасників сховища:\n" +" ipa vault-add-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "Vault name" +msgstr "Назва сховища" + +msgid "Vault description" +msgstr "Опис сховища" + +msgid "Vault type" +msgstr "Тип сховища" + +msgid "Salt" +msgstr "Сіль" + +msgid "Vault salt" +msgstr "«Сіль» сховища" + +msgid "Public key" +msgstr "Відкритий ключ" + +msgid "Vault public key" +msgstr "Відкритий ключ сховища" + +msgid "Owner users" +msgstr "Користувачі власника" + +msgid "Owner groups" +msgstr "Групи власника" + +msgid "Owner services" +msgstr "Служби власника" + +msgid "Vault service" +msgstr "Служба сховища" + +msgid "Shared vault" +msgstr "Сховище спільного використання" + +msgid "Vault user" +msgstr "Користувач сховища" + +msgid "Transport Certificate" +msgstr "Сертифікат передавання" + +msgid "Service name of the service vault" +msgstr "Назва служби сховища служби" + +msgid "Username of the user vault" +msgstr "Ім’я користувача сховища користувача" + +msgid "Add members to a vault." +msgstr "Додати записи учасників сховища." + +msgid "Add owners to a vault." +msgstr "Додати записи власників до сховища." + +msgid "owner user" +msgstr "користувач-власник" + +msgid "owner group" +msgstr "група-власник" + +msgid "owner service" +msgstr "служба-власник" + +msgid "Owners that could not be added" +msgstr "Власники, записи яких не вдалося додати" + +msgid "Number of owners added" +msgstr "Кількість доданих записів власників" + +msgid "Session key wrapped with transport certificate" +msgstr "Ключ сеансу, пов’язаний із сертифікатом передавання" + +msgid "Vault data encrypted with session key" +msgstr "Дані сховища зашифровано за допомогою ключа сеансу" + +msgid "Nonce" +msgstr "Цей випадок" + +msgid "Delete a vault." +msgstr "Вилучити сховище." + +msgid "Search for vaults." +msgstr "Шукати сховища." + +msgid "List all service vaults" +msgstr "Список усіх сховищ служб" + +msgid "List all user vaults" +msgstr "Список усіх сховищ користувачів" + +msgid "Remove members from a vault." +msgstr "Вилучити записи учасників сховища." + +msgid "Remove owners from a vault." +msgstr "Вилучити записи власників сховища." + +msgid "Owners that could not be removed" +msgstr "Власники, записи яких не вдалося вилучити" + +msgid "Number of owners removed" +msgstr "Кількість вилучених записів власників" + +msgid "Display information about a vault." +msgstr "Показати дані щодо сховища." + +msgid "Show vault configuration." +msgstr "Показати налаштування сховища." + +msgid "Output file to store the transport certificate" +msgstr "Файл для зберігання сертифіката передавання даних" + +msgid "Add owners to a vault container." +msgstr "Додати записи власників до контейнера сховища." + +msgid "Delete a vault container." +msgstr "Вилучити контейнер сховищ." + +msgid "Remove owners from a vault container." +msgstr "Вилучити записи власників із контейнера сховища." + +msgid "Display information about a vault container." +msgstr "Показати дані щодо контейнера сховищ." + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Реєстраційний запис для цього сертифіката (наприклад HTTP/test.example.com)" + +msgid "Profile ID" +msgstr "Ід. профілю" + +msgid "Certificate Profile to use" +msgstr "Профіль сертифіката, яким слід скористатися" + +msgid "Two-way trust" +msgstr "Двобічна довіра" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "Встановлено двобічну довіру. Типово, довіра є лише однобічною вхідною." + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"\n" +"Діапазони ідентифікаторів\n" +"\n" +"Керування діапазонами ідентифікаторів, використаних для відображення\n" +"ідентифікаторів POSIX на SID, і навпаки.\n" +"\n" +"За допомогою цієї програми можна керувати обома типами діапазонів " +"ідентифікаторів:\n" +"\n" +" - діапазони ідентифікаторів локального домену\n" +" - діапазони ідентифікаторів довірених віддалених доменів\n" +"\n" +"Обидва типи мають такі спільні атрибути:\n" +"\n" +" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" +" - range-size: розмір діапазону\n" +"\n" +"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " +"ідентифікатори\n" +"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" +"\n" +"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" +" - rid-base: перший RID(*) відповідного діапазону RID\n" +" - secondary-rid-base: перший RID вторинного діапазону RID\n" +"\n" +"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" +" - rid-base: перший RID відповідного діапазону RID\n" +" - dom_sid: SID довіреного домену\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" +"\n" +"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" +"ідентифікаторів слід вказати SID домену.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" +"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" +"довіреного домену.\n" +"\n" +"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" +"значеннями:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" +"13999999. Отже RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" +"\n" +"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" +"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" +"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" +"RID.\n" +"\n" +" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"Дані з діапазонів ідентифікаторів локального домену використовуються\n" +"сервером IPA на внутрішньому рівні для призначення SID користувачам і " +"групам\n" +"IPA. SID буде збережено у об’єктах користувача або групи.\n" +"\n" +"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" +"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" +"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " +"1000007.\n" +"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" +"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" +"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" +"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" +"того, щоб повністю позбутися конфліктів.\n" +"\n" +"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " +"слід\n" +"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " +"RID,\n" +"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" +"base\n" +"або secondary-rid-base, відповідно, і додати base-id.\n" +"\n" +"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" +"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" +"для локального домену буде створено під час встановлення або оновлення\n" +"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" +"створено разом з записом довіри командою «ipa trust-add ...».\n" +"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" +"\n" +"ВИПАДКИ ВИКОРИСТАННЯ:\n" +"\n" +" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" +"\n" +" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" +" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" +" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" +"\n" +" Додавання додаткового діапазону ідентифікаторів для локального домену\n" +"\n" +" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " +"додатком\n" +" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" +" POSIX, має бути створено новий діапазон для додавання нових " +"користувачів\n" +" та груп. (У поточній версії між цим командним інтерфейсом і додатком " +"DNA\n" +" немає безпосереднього зв’язку, але у майбутній версії може бути " +"передбачено\n" +" можливість внесення змін і до налаштувань додатка DNS.)\n" +"\n" +"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" +"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" +"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" +"файловій системі і використовуються для керування доступом, можлива " +"ситуація,\n" +"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" +"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" +"у іншому домені.\n" +"\n" +"(*) RID типово є останнім цілим числом SID користувача або групи, перед " +"якими\n" +"має бути вказано SID домену. Наприклад, якщо SID домену " +"S-1-5-21-123-456-789, а\n" +"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " +"користувача\n" +"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" +"використовуються для користувачів і груп.\n" +"\n" +"=======\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" +"налаштованих для локального домену. У поточній версії додаток DNA *не " +"можна*\n" +"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" +"за допомогою цього сімейства команд.\n" +"\n" +"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" +"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " +"«cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" +"він відповідав новому діапазону.\n" +"=======\n" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +" Додати новий діапазон ідентифікаторів.\n" +"\n" +" Для додавання нового діапазону ідентифікаторів вам слід завжди " +"вказувати\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Крім того, може бути надано\n" +"\n" +" --rid-base\n" +" --econdary-rid-base\n" +"\n" +" для додавання нового діапазону ідентифікаторів для локального домену і\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" для додавання нового діапазону для довіреного домену AD.\n" +"\n" +"=======\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " +"налаштованих\n" +" для локального домену. У поточній версії додаток DNA *не може* змінити\n" +" власні налаштування на основі локальних діапазонів, встановлених за\n" +" допомогою цього сімейства команд.\n" +"\n" +" Для внесення змін щодо локального діапазону слід змінити налаштування\n" +" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"відповідно\n" +" до параметрів нового діапазону.\n" +"=======\n" +" " + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Змінити діапазон ідентифікаторів.\n" +"\n" +"=======\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +"Додаток DNA у 389-ds розподілятиме ідентифікатори на основі діапазонів,\n" +"налаштованих для локального домену. У поточній версії додаток DNA *не може*\n" +"переналаштуватися на основі локальних діапазонів, встановлених цим\n" +"сімейством команд.\n" +"\n" +"Для використання нового локального діапазону до налаштувань додатка DNA\n" +"слід внести зміни вручну. Зокрема, слід змінити атрибут dnaNextRange " +"'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' так, щоб\n" +"він відповідав новому діапазону.\n" +"=======\n" +" " + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" +"\n" +"Керування профілями сертифікатів\n" +"\n" +"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" +"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" +"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" +"і розширень, які буде надано сертифікатом.\n" +"\n" +"Форматом профілю сертифікатів є список значень, які може обробляти\n" +"Dogtag або система сертифікації служби сертифікації Red Hat.\n" +"\n" +"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" +"\n" +"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" +"що починається з літери і складається з послідовності літер, цифр, та " +"символів підкреслювання («_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Вилучити профіль сертифікатів:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показати дані щодо профілю:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Зберегти налаштування профілю до файла:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Шукати профілі, у яких не зберігаються сертифікати:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" +"\n" +"Налаштування профілю зберігаються у вигляді простого списку\n" +"властивостей, що використовується системою сертифікації Dogtag.\n" +"Підтримки формату XML не передбачено.\n" +"\n" +"Профілів, які керуються IPA, стосуються такі обмеження:\n" +"\n" +"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" +" містити значення, що збігається з ідентифікатором, вказаним у рядку " +"команди.\n" +"\n" +"- Значенням поля «classId» має бути «caEnrollImpl»\n" +"\n" +"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" +"\n" +"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" +" клас «certOutputImpl».\n" + +msgid "Profile ID for referring to this profile" +msgstr "Ідентифікатор профілю для посилання на цей профіль" + +msgid "Profile description" +msgstr "Опис профілю" + +msgid "Brief description of this profile" +msgstr "Короткий опис профілю" + +msgid "Store issued certificates" +msgstr "Зберігати видані сертифікати" + +msgid "Whether to store certs issued using this profile" +msgstr "" +"Визначає, чи слід зберігати сертифікати, видані за допомогою цього профілю" + +msgid "Delete a Certificate Profile." +msgstr "Вилучити профіль сертифікатів." + +msgid "Search for Certificate Profiles." +msgstr "Шукати профілі сертифікатів." + +msgid "Import a Certificate Profile." +msgstr "Імпортувати профіль сертифікатів." + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" +"Назва файла профілю з необробленими даними. Підтримки формату XML не " +"передбачено." + +msgid "Modify Certificate Profile configuration." +msgstr "Змінити налаштування профілю сертифікатів." + +msgid "File containing profile configuration" +msgstr "Файл, який містить налаштування профілів" + +msgid "Display the properties of a Certificate Profile." +msgstr "Показати властивості профілю сертифікатів." + +msgid "Write profile configuration to file" +msgstr "Записати налаштування профілів до файла" + +msgid "Remove users that can manage this token." +msgstr "Вилучити записи користувачів, які можуть керувати цим жетоном." + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "Визначити назву вузла у DNS. (Застаріле)" + +msgid "Hostname (FQDN)" +msgstr "Назва вузла (FQDN)" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" +"Примусове створення зони DNS, навіть якщо вона перекриватиметься із наявною." + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" +"Примусове створення зони DNS, навіть якщо адресу сервера назв не вдається " +"визначити. (застаріле)" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Групи користувачів\n" +"\n" +"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " +"можете\n" +"додати параметр --nonposix до команди group-add з метою позначення нової\n" +"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " +"group-mod\n" +"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" +"перетворювати на групи не-POSIX.\n" +"\n" +"Кожна група повинна мати опис.\n" +"\n" +"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " +"підтримку\n" +"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" +"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" +"таку не вказано.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Додавання нової групи не-POSIX:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Перетворити групу не-POSIX на групу posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Вилучення групи:\n" +" ipa group-del unixadmins\n" +"\n" +" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Додати список користувачів до групи \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Вилучення користувача з групи \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показати інформацію щодо іменованої групи.\n" +" ipa group-show localadmins\n" +"\n" +"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" +"користувачів з довірених доменів до локальних груп POSIX з метою\n" +"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" +"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" +"слід пізніше включити до одної з груп POSIX.\n" +"\n" +"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" +"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" +"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" +"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" +"допомогою використання Загального каталогу довіреного домену.\n" +"\n" +"Приклад:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" +"відповідної локальної групи POSIX:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" +"групи ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " +"визначити\n" +"їхні SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgid "" "\n" @@ -14395,11 +13709,1978 @@ msgstr "" " Відповідні правила: allow_all\n" " Невідповідні правила: can_login\n" +msgid "Managed suffixes" +msgstr "Керовані суфікси" + +msgid "Check connection to remote IPA server." +msgstr "Перевірити з’єднання із віддаленим сервером IPA." + +msgid "Remote server name" +msgstr "Назва віддаленого сервера" + +msgid "Remote IPA server hostname" +msgstr "Назва вузла віддаленого сервера IPA" + +msgid "suffix" +msgstr "суфікс" + +msgid "Search for servers with these managed suffixes." +msgstr "Шукати сервери із цими керованими суфіксами." + +msgid "Search for servers without these managed suffixes." +msgstr "Шукати сервери без цих керованих суфіксів." + +msgid "Add a manager to the stage user entry" +msgstr "Додати керування до запису користувача етапу" + +msgid "Remove a manager to the stage user entry" +msgstr "Вилучити керування із запису користувача етапу" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +"Топологія\n" +"\n" +"Керування топологією реплікації на домені рівня 1.\n" +"\n" +"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" +"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " +"із доменом дані\n" +"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" +" містяться дані для компонента сервера сертифікатів.\n" +"\n" +"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " +"Спосіб\n" +"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" +"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" +"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" +"керування виконується централізовано за допомогою команд «ipa topology*».\n" +"\n" +"Угоди представляються сегментами топології. Типово, сегмент топології\n" +"представляється 2 угодами реплікації — по одній для кожного напрямку, " +"наприклад\n" +"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" +"\n" +"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " +"суфікса,\n" +"скористайтеся такою командою:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Приклади:\n" +" Знайти усі сервери IPA:\n" +" ipa server-find\n" +"\n" +" Знайти усі суфікси:\n" +" ipa topologysuffix-find\n" +"\n" +" Додати сегмент топології до суфікса «domain»:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Додати сегмент топології до суфікса «ca»:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Вивести список усіх сегментів топології у суфіксі «domain»:\n" +" ipa topologysegment-find domain\n" +"\n" +" Вивести список усіх сегментів топології у суфіксі «ca»:\n" +" ipa topologysegment-find ca\n" +"\n" +" Вилучити сегмент топології у суфіксі «domain»:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Вилучити сегмент топології у суфіксі «ca»:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Перевірити топологію суфікса «domain»:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Перевірити топологію суфікса «ca»:\n" +" ipa topologysuffix-verify ca\n" + +msgid "Managed LDAP suffix DN" +msgstr "DN керованого суфікса LDAP" + +msgid "Search for topology suffixes." +msgstr "Шукати суфікси топології." + +msgid "Add a manager to the user entry" +msgstr "Додати керування до запису користувача" + +msgid "Remove a manager to the user entry" +msgstr "Вилучити керування із запису користувача" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" +"\n" +"Інструкції керування доступом до сервера каталогів (ACI)\n" +"\n" +"ACI використовуються для надання або заборони доступу до даних. Поточну\n" +"версію цього модуля розроблено з метою надання, а не заборони доступу.\n" +"\n" +"Команди aci розроблено для надання прав доступу до оновлення вже\n" +"створених записів та додавання або вилучення записів. Метою ACI, які\n" +"постачаються з IPA є створення набору низькорівневих прав доступу до " +"особливих\n" +"груп, які називаються групами завдань. Ці низькорівневі права доступу\n" +"можна поєднувати у ролі, які надаватимуть ширший доступ. Ролі є іншим типом\n" +"груп, який називається групами ролей.\n" +"\n" +"Наприклад, якщо у вас є групи завдань, які надають доступ до додавання або " +"зміни записів\n" +"користувачів, ви можете створити роль, адміністратора користувачів " +"(useradmin).\n" +"Далі, можна призначати користувачів до ролі useradmin, щоб надати їм доступ " +"до операцій,\n" +"визначених групами завдань.\n" +"\n" +"Ви можете створити ACI, які надаватимуть дозволи так, що користувачі групи A " +"зможуть\n" +"записувати атрибути для групи B.\n" +"\n" +"Параметр типу визначає карту, яка застосовується до всіх записів у списках " +"користувачів, груп та\n" +"розташування вузла. Основним призначенням є надання прав доступу на " +"додавання\n" +"(створення нових записів).\n" +"\n" +"ACI складається з трьох частин:\n" +"1. призначення\n" +"2. прав доступу\n" +"3. правил прив’язування\n" +"\n" +"Призначення — набір правил, який визначає, які з об’єктів LDAP є " +"призначенням.\n" +"Призначення може включати список атрибутів, області цієї ієрархії LDAP або\n" +"фільтра LDAP.\n" +"\n" +"До призначень включаються:\n" +"- attrs: список атрибутів, яких стосується призначення;\n" +"- type: тип об’єктів (користувач, група, вузол, служба тощо);\n" +"- memberof: учасники групи;\n" +"- targetgroup: надати доступ до зміни певної групи. Ця частина в основному\n" +" розроблена для надання дозволу користувачам на додавання або вилучення " +"учасників\n" +" певної групи.\n" +"- filter: чинний фільтр LDAP, використаний для звуження області " +"призначення.\n" +"- subtree: використовується для застосування правила для цілого набору " +"об’єктів.\n" +" Наприклад, для надання доступу на додавання користувачів вам слід надати " +"право\n" +" доступу \"add\" до підієрархії\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. Параметр subtree\n" +" є безпечним для об’єктів, які можуть не стосуватися параметром type.\n" +"\n" +"Права доступу визначають набір доступних ACI записів, можуть містити з " +"одного\n" +"або декількох варіантів:\n" +"1. write - запис одного або декількох атрибутів;\n" +"2. read - читання одного або декількох атрибутів;\n" +"3. add - додавання нового запису до ієрархії;\n" +"4. delete - вилучення наявного запису;\n" +"5. all - надання всіх прав доступу.\n" +"\n" +"Зауважте відмінність між атрибутами та записами. Права доступу є " +"незалежними,\n" +"отже можливість додавання користувача не означає можливості зміни " +"параметрів\n" +"його облікового запису.\n" +"\n" +"Правило прив’язування визначає, кому це ACI надає права доступу. Сервер " +"LDAP\n" +"надає можливість визначати будь-який коректний запис LDAP, але вам варто " +"використовувати\n" +"групи завдань, щоб права можна було без проблем спільно використовувати для " +"декількох ролей.\n" +"\n" +"Повніший опис керування доступом можна знайти тут:\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +"ЗАУВАЖЕННЯ: у поточній версії ACI додаються за допомогою додатка прав " +"доступу.\n" +"Ці приклади мають продемонструвати роботу різних параметрів, але у поточній\n" +"версії це завдання виконується за допомогою команди надання прав доступу " +"(останній приклад).\n" +"\n" +" Додавання ACI для надання доступу групі \"secretaries\" до оновлення адреси " +"будь-якого користувача:\n" +" ipa group-add --desc=\"Офісні секретарки\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Секретарки записують адреси\"\n" +"\n" +" Показ нового ACI:\n" +" ipa aci-show --prefix=none \"Секретарки записують адреси\"\n" +"\n" +" Додавання ACI, яке надасть доступ учасникам групи \"addusers\" доступ до " +"додавання нових користувачів:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Додавання користувачів\"\n" +"\n" +" Додавання ACI, яке надасть доступ учасникам групи \"editors\" до керування " +"записами\n" +"учасників групи \"admins\":\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Редактори керують адміністраторами\"\n" +"\n" +" Додавання ACI, яке надасть доступ учасникам групи \"admins\" до зміни " +"поштової адреси та індексу користувачів групи \"editors\":\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"Адміністратори редагують адреси " +"редакторів\"\n" +"\n" +" Додавання ACI, яке надасть доступ групі \"admins\" до зміни поштової адреси " +"та індексу всіх, хто працює начальником:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Зміна адрес тих, хто працює начальником\"\n" +"\n" +" Додавання повністю нового типу записів до IPA, який не визначається жодним " +"з параметрів --type, створення прав доступу:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Додавання помаранчевих записів\" " +"add_orange\n" +"\n" +"\n" +"Команда show показує прості 389-ds ACI.\n" +"\n" +"ВАЖЛИВО: під час зміни атрибутів призначення вже створеного ACI вам\n" +"слід включити всі вже створені атрибути. Під час внесення змін до aci\n" +"targetattr ЗАМІНЮЄ поточні атрибути, а не додає ці атрибути.\n" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" +"права доступу, які слід надати, відокремлених комами (read, write, add, " +"delete, all)" + +msgid "Comma-separated list of attributes" +msgstr "Список атрибутів, відокремлених комами" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +"Правило автоматичної участі.\n" +"\n" +"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" +"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" +"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " +"атрибутів.\n" +"\n" +"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" +"створити правило без визначення групи або групи вузлів.\n" +"\n" +"Умова є формальним виразом, використовується 389-ds для встановлення\n" +"відповідності нового вхідного запису з правилом автоматичної участі.\n" +"Якщо умові відповідає правило включення, запис додається до відповідної\n" +"групи або групи вузлів.\n" +"\n" +"Можна визначити типову групу або групу вузлів, яку буде використано для\n" +"записів, які не відповідають жодному правилу. У випадку записів " +"користувачів\n" +"ця група буде резервною групою, оскільки усіх користувачі типово є " +"учасниками\n" +"групи, вказаної у налаштуваннях IPA.\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати початкову групу або групу вузлів:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Додати початкове правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Додати умову до правила:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Додати умову виключення до правила для запобігання автоматичному " +"пов’язуванню:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Додати вузол:\n" +" ipa host-add web1.example.com\n" +"\n" +" Додати запис користувача:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Перевірити правила автоматичної участі:\n" +" ipa hostgroup-show webservers\n" +" Група вузлів: webservers\n" +" Опис: Web Servers\n" +" Вузли-учасники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Назва групи: devel\n" +" Опис: Developers\n" +" GID: 1004200000\n" +" Користувачі-учасники: tuser\n" +"\n" +" Вилучити умову з правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Змінити правило автоматичної участі:\n" +" ipa automember-mod\n" +"\n" +" Встановити типову (резервну) групу призначення:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Вилучити типову (резервну) групу призначення:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Показати типову (резервну) групу призначення:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Знайти усіх правила автоматичної участі:\n" +" ipa automember-find\n" +"\n" +" Показати правило автоматичної участі:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Вилучити правило автоматичної участі:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" +"\n" +"Дії з сертифікатами IPA\n" +"\n" +"Реалізує набір команд для керування сертифікатами серверів SSL.\n" +"\n" +"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" +"і форматі PEM.\n" +"\n" +"Якщо використовується модуль самопідписування, призначення у CSR має\n" +"збігатися із призначенням, вказаним на сервері. Служба сертифікації dogtag\n" +"використовує лише значення CN CSR і примусово встановлює\n" +"решту параметрів призначення за налаштуваннями сервера.\n" +"\n" +"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" +"потребує вузла.\n" +"\n" +"Для того, щоб створити запит щодо сертифіката:\n" +"\n" +"* Вузол має існувати\n" +"* Служба має існувати (або слід скористатися параметром --add " +"дляавтоматичного додавання)\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " +"cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Отримати вже створений сертифікат:\n" +" ipa cert-show 1032\n" +"\n" +" Відкликати сертифікат (причини визначено у RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Вилучити сертифікат зі списку відкликання:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Перевірити стан запиту щодо підписування:\n" +" ipa cert-status 10\n" +"\n" +"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" +"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" +"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" +"сертифікат не одразу.\n" +"\n" +"Передбачено підтримку таких причин відкликання:\n" +"\n" +" * 0 - не визначено\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " +"5280:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" +"\n" +"Міжгрупове уповноваження\n" +"\n" +"Права доступу може бути точно налаштовано. Правила керування доступом\n" +"або інструкції (ACI), надання дозволу на виконання певних завдань, зокрема\n" +"додавання користувача, внесення змін до групи тощо.\n" +"\n" +"Міжгрупові уповноваження надають учасникам однієї групи можливість\n" +"оновлювати набір атрибутів учасників іншої групи.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати правило уповноваження, яке надасть змогу керівникам (managers)\n" +" редагувати адреси співробітників:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Під час керування списком атрибутів слід включати всі атрибути списку\n" +" разом з вже створеними. Додавання до списку postalCode:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Показ нашого оновленого правила:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Вилучення правила:\n" +" ipa delegation-del \"managers edit employees' street\"\n" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" +"Права доступу, які слід надати, відокремлених комами (read, write). Типовим " +"варіантом є «write» (запис)." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" +"\n" +"Система назв доменів (DNS)\n" +"\n" +"Керування записами зон та ресурсів DNS.\n" +"\n" +"ВИКОРИСТАННЯ СТРУКТУРОВАНИХ ПАРАМЕТРІВ ДЛЯ ОКРЕМИХ ТИПІВ\n" +"\n" +"Існує багато структурованих типів RR DNS, для яких дані DNS, що " +"зберігаються\n" +"на сервері LDAP, не є скалярним значенням, наприклад дані щодо IP-адресу " +"або\n" +"назву домену, а структурою даних, яка часто може бути складною. Прикладом\n" +"може бути запис LOC [RFC1876], який складається з багатьох обов’язкових і\n" +"необов’язкових частин (градусів, мінут, секунд широти і довготи, висоти\n" +"та похибки).\n" +"\n" +"Робота з такими записами DNS без помилки і введення некоректного значення\n" +"може бути складною. Модуль DNS надає у ваше розпорядження абстракцію над\n" +"цими необробленими записами і спосіб керування кожним з типів RR за\n" +"допомогою специфічних параметрів. Для кожного з підтримуваних типів\n" +"RR у модулі DNS передбачено стандартний параметр для роботи із\n" +"необробленими записами за допомогою формату --<тип_rr>-rec, наприклад,\n" +"--mx-rec та зі спеціальними параметрами для кожної із частин структури RR\n" +"за допомогою формату --<тип_rr>-<назва_частини>, наприклад --mx-preference\n" +"та --mx-exchanger.\n" +"\n" +"Під час додавання запису можна скористатися специфічними для RR параметрами\n" +"або стандартним параметром для необробленого значення. Втім, поєднувати\n" +"ці варіанти у одній дії із додавання не можна. Під час внесення змін до\n" +"наявного запису можна скористатися для зміни однієї частини запису DNS\n" +"новими специфічними параметрами RR, причому для визначення зміненого\n" +"значення буде використано стандартний варіант необробленого значення.\n" +"У наведеному нижче прикладі продемонстровано зміну пріоритетності запису\n" +"MX з 0 на 1 у записі без внесення змін до обмінника:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової зони:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Додавання загальносистемних прав доступу, якими можна скористатися для " +"делегування привілеїв для окремих зон:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Зміна зони таким чином, щоб дозволити динамічне оновлення для власних " +"записів вузлів у області EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" Ця команда еквівалентна до такої команди:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Зміна зони таким чином, щоб дозволити перенесення зони лише для локальної " +"мережі:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Додавання нової реверсивної зони, вказаної за допомогою мережевої IP-" +"адреси:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Додати другий сервер назв для example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Додавання поштового сервера для example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Додавання ще одного запису за допомогою специфічних для запису MX " +"параметрів:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Додавання ще одного запису за допомогою інтерактивного режиму (у який " +"програма переходить\n" +" у відповідь на команди dnsrecord-add, dnsrecord-mod або dnsrecord-del без " +"параметрів):\n" +" ipa dnsrecord-add example.com @\n" +" Будь ласка, виберіть тип запису ресурсу DNS, який слід додати\n" +" Найпоширенішими типами для цього типу зон є: NS, MX, LOC\n" +"\n" +" Тип запису ресурсу DNS: MX\n" +" Пріоритетність MX: 30\n" +" Обмінник MX: mail3\n" +" Назва запису: example.com\n" +" Запис MX: 10 mail1, 20 mail2, 30 mail3\n" +" Запис NS: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Вилучення раніше доданого сервера назв з example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Додавання запису LOC для example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Додавання нового запису A для www.example.com, крім того, створення " +"зворотного\n" +" запису у відповідній зворотній зоні. У цьому випадку запис PTR «2» вказує " +"на\n" +" www.example.com буде створено у зоні 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-" +"reverse\n" +"\n" +" Додавання нового запису PTR для www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Додавання нових записів SRV для серверів LDAP. Три чверті запитів мають\n" +" надсилатися до fast.example.com, а одна чверть — на slow.example.com.\n" +" Якщо жодна зі служб не буде доступною, перемкнутися на backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" Для полегшення внесення змін можна скористатися інтерактивним режимом:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" Можливості внесення змін у певний запис не передбачено.\n" +" Поточний вміст запису DNS:\n" +"\n" +" Запис SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Змінити запис SRV «0 3 389 fast.example.com»? Так/Ні (типово «Ні»):\n" +" Змінити запис SRV «0 1 389 slow.example.com»? Так/Ні (типово «Ні»): y\n" +" Пріоритетність SRV [0]: (зберегти типове значення)\n" +" Вага SRV [1]: 2 (змінене значення)\n" +" Порт SRV [389]: (зберегти типове значення)\n" +" Призначення SRV [slow.example.com]: (зберегти типове значення)\n" +" Пропущено 1 запис SRV. Одночасно можна змінювати лише одне значення на тип " +"запису DNS.\n" +" Назва запису: _ldap._tcp\n" +" Запис SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 389 " +"slow.example.com\n" +"\n" +" Після внесення цих змін три п’ятих запитів має надсилатися до\n" +" fast.example.com, а дві п’ятих — до slow.example.com.\n" +"\n" +" Приклад інтерактивного режиму для команди dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" Не вказано параметр вилучення певного запису.\n" +" Вилучити усі? Так/Ні (типово «Ні»): (не вилучати усі записи)\n" +" Поточний вміст запису DNS:\n" +"\n" +" Запис A: 192.0.2.2, 192.0.2.3\n" +"\n" +" Вилучити запис A «192.0.2.2»? Так/Ні (типово «Ні»):\n" +" Вилучити запис A «192.0.2.3»? Так/Ні (типово «Ні»): y\n" +" Назва запису: www\n" +" Запис A: 192.0.2.2 (Запис A 192.0.2.3 вилучено)\n" +"\n" +" Показати зону example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Знайти зону зі словом «example» у назві домену:\n" +" ipa dnszone-find example\n" +"\n" +" Знайти записи для ресурсів з «www» у назві у зоні example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Знайти записи A зі значенням 10.10.0.1 у зоні example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Показати записи для ресурсу www у зоні example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Делегування зони sub.example до іншого сервера назв:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Якщо налаштовано загальний переспрямовувач, усі запити, для яких цей сервер " +"не є\n" +" надійним (наприклад sub.example.com) не маршрутизуватимуться до загального\n" +" переспрямовувача. Щоб змінити поведінку лише для зони example.com\n" +" і переспрямувати запит безпосередньо до ns.sub.example.com, можна вимкнути\n" +" загальне переспрямовування для окремої зони:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Переспрямувати усі запити для зони external.com до іншого сервера назв\n" +" за правилами «first» (надіслати запити до вибраного переспрямовувача,\n" +" а якщо він не відповів, використати загальні засоби визначення):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Вилучити зону example.com із усіма записами ресурсів:\n" +" ipa dnszone-del example.com\n" +"\n" +" Визначити адресу за назвою вузла, щоб визначити, чи він існує (додасть\n" +" типовий домен IPA, якщо його не включено):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"ЗАГАЛЬНІ НАЛАШТУВАННЯ DNS\n" +"\n" +"Налаштування DNS, що передаються до скрипту командного рядка для " +"встановлення,\n" +"зберігаються у локальному файлі налаштувань на кожному з серверів IPA, де\n" +"налаштовано службу DNS. Ці локальні параметри можна перевизначити за " +"допомогою\n" +"загальних налаштувань, що зберігаються на сервері LDAP:\n" +"\n" +" Показати загальні налаштування DNS:\n" +" ipa dnsconfig-show\n" +"\n" +" Зміна загальних налаштувань DNS і встановлення списку загальних " +"переспрямовувачів:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Список загальних переспрямовувачів. Для кожного переспрямовувача можна " +"вказати нетиповий порт за допомогою стандартного формату «IP_АДРЕСА port " +"ПОРТ»" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "Інтервал між регулярними опитуваннями сервера назв щодо нових зон DNS" + +msgid "DNS class" +msgstr "Клас DNS" + +msgid "Comma-separated list of raw A records" +msgstr "Список простих записів A, відокремлених комами" + +msgid "Comma-separated list of raw AAAA records" +msgstr "Список простих записів AAAA, відокремлених комами" + +msgid "Comma-separated list of raw A6 records" +msgstr "Список простих записів A6, відокремлених комами" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "Список простих записів AFSDB, відокремлених комами" + +msgid "Comma-separated list of raw APL records" +msgstr "Список простих записів APL, відокремлених комами" + +msgid "Comma-separated list of raw CERT records" +msgstr "Список простих записів CERT, відокремлених комами" + +msgid "Comma-separated list of raw CNAME records" +msgstr "Список простих записів CNAME, відокремлених комами" + +msgid "Comma-separated list of raw DHCID records" +msgstr "Список простих записів DHCID, відокремлених комами" + +msgid "Comma-separated list of raw DLV records" +msgstr "Список простих записів DLV, відокремлених комами" + +msgid "Comma-separated list of raw DNAME records" +msgstr "Список простих записів DNAME, відокремлених комами" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "Список простих записів DNSKEY, відокремлених комами" + +msgid "Comma-separated list of raw DS records" +msgstr "Список простих записів DS, відокремлених комами" + +msgid "Comma-separated list of raw HIP records" +msgstr "Список простих записів HIP, відокремлених комами" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "Список простих записів IPSECKEY, відокремлених комами" + +msgid "Comma-separated list of raw KEY records" +msgstr "Список простих записів KEY, відокремлених комами" + +msgid "KEY Flags" +msgstr "Прапорці KEY" + +msgid "KEY Protocol" +msgstr "Протокол КЛЮЧА" + +msgid "Protocol" +msgstr "Протокол" + +msgid "KEY Algorithm" +msgstr "Алгоритм КЛЮЧА" + +msgid "KEY Public Key" +msgstr "Відкритий ключ KEY" + +msgid "Public Key" +msgstr "Відкритий ключ" + +msgid "Comma-separated list of raw KX records" +msgstr "Список простих записів KX, відокремлених комами" + +msgid "Comma-separated list of raw LOC records" +msgstr "Список простих записів LOC, відокремлених комами" + +msgid "Comma-separated list of raw MX records" +msgstr "Список простих записів MX, відокремлених комами" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "Список простих записів NAPTR, відокремлених комами" + +msgid "Comma-separated list of raw NS records" +msgstr "Список простих записів NS, відокремлених комами" + +msgid "Comma-separated list of raw NSEC records" +msgstr "Список простих записів NSEC, відокремлених комами" + +msgid "NSEC Next Domain Name" +msgstr "Наступна назва домену NSEC" + +msgid "Next Domain Name" +msgstr "Наступна назва домену" + +msgid "NSEC Type Map" +msgstr "Карта типів NSEC" + +msgid "Type Map" +msgstr "Карта типів" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "Список простих записів NSEC3, відокремлених комами" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "Список простих записів NSEC3PARAM, відокремлених комами" + +msgid "Comma-separated list of raw PTR records" +msgstr "Список простих записів PTR, відокремлених комами" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "Список простих записів RRSIG, відокремлених комами" + +msgid "RRSIG Type Covered" +msgstr "Об’єднувані типи RRSIG" + +msgid "Type Covered" +msgstr "Об’єднувані типи" + +msgid "RRSIG Algorithm" +msgstr "Алгоритм RRSIG" + +msgid "RRSIG Labels" +msgstr "Мітки RRSIG" + +msgid "Labels" +msgstr "Мітки" + +msgid "RRSIG Original TTL" +msgstr "Початковий TTL RRSIG" + +msgid "Original TTL" +msgstr "Початковий TTL" + +msgid "RRSIG Signature Expiration" +msgstr "Строк дії підпису RRSIG" + +msgid "Signature Expiration" +msgstr "Строк дії підпису" + +msgid "RRSIG Signature Inception" +msgstr "Початок підпису RRSIG" + +msgid "Signature Inception" +msgstr "Початок підпису" + +msgid "RRSIG Key Tag" +msgstr "Мітка ключа RRSIG" + +msgid "RRSIG Signer's Name" +msgstr "Ім’я підписника RRSIG" + +msgid "Signer's Name" +msgstr "Ім’я підписника" + +msgid "RRSIG Signature" +msgstr "Підпис RRSIG" + +msgid "Signature" +msgstr "Підпис" + +msgid "Comma-separated list of raw RP records" +msgstr "Список простих записів RP, відокремлених комами" + +msgid "Comma-separated list of raw SIG records" +msgstr "Список простих записів SIG, відокремлених комами" + +msgid "SIG Type Covered" +msgstr "Об’єднувані типи SIG" + +msgid "SIG Algorithm" +msgstr "Алгоритм SIG" + +msgid "SIG Labels" +msgstr "Мітки SIG" + +msgid "SIG Original TTL" +msgstr "Початковий TTL SIG" + +msgid "SIG Signature Expiration" +msgstr "Строк дії підпису SIG" + +msgid "SIG Signature Inception" +msgstr "Початок підпису SIG" + +msgid "SIG Key Tag" +msgstr "Мітка ключа SIG" + +msgid "SIG Signer's Name" +msgstr "Ім’я підписника SIG" + +msgid "SIG Signature" +msgstr "Підпис SIG" + +msgid "Comma-separated list of raw SPF records" +msgstr "Список простих записів SPF, відокремлених комами" + +msgid "Comma-separated list of raw SRV records" +msgstr "Список простих записів SRV, відокремлених комами" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "Список простих записів SSHFP, відокремлених комами" + +msgid "Comma-separated list of raw TA records" +msgstr "Список простих записів TA, відокремлених комами" + +msgid "Comma-separated list of raw TKEY records" +msgstr "Список простих записів TKEY, відокремлених комами" + +msgid "Comma-separated list of raw TSIG records" +msgstr "Список простих записів TSIG, відокремлених комами" + +msgid "Comma-separated list of raw TXT records" +msgstr "Список простих записів TXT, відокремлених комами" + +msgid "SOA time to live" +msgstr "Строк дії SOA" + +msgid "SOA record time to live" +msgstr "Строк дії запису SOA" + +msgid "SOA class" +msgstr "Клас SOA" + +msgid "SOA record class" +msgstr "Клас записів SOA" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Список переспрямовувачів для окремих зон. Для кожного переспрямовувача можна " +"вказати нетиповий порт за допомогою стандартного формату: «IP_АДРЕСА port " +"ПОРТ»" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" +"Додати запис переспрямування для сервера назв, розташованого у створеній зоні" + +msgid "" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" +msgstr "" +"\n" +"Іменування\n" +"\n" +"Керування іменуванням для клієнтських комп’ютерів\n" +"\n" +"Іменуванням можна керувати або шляхом реєстрації на сервері іменування\n" +"з визначенням імені користувача і пароля, або вручну, імпортуванням " +"сертифікатів\n" +"іменування. Сертифікат іменування містить вбудовані дані, зокрема те, як\n" +"слід іменувати продукт, щодо кількості та дат чинності.\n" +"\n" +"Сервер іменування керує кількістю доступних іменувань клієнтів.\n" +"Для позначення іменувань як таких, що використовуються сервером IPA, ви " +"надаєте\n" +"кількість, а система позначає їх як використані на сервері іменування.\n" +"\n" +" Зареєструватися на сервері іменування:\n" +" ipa entitle-register consumer\n" +"\n" +" Імпортувати сертифікат іменування:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Показати поточні іменування:\n" +" ipa entitle-status\n" +"\n" +" Отримати подробиці щодо сертифікатів іменування:\n" +" ipa entitle-get\n" +"\n" +" Вжити деякі іменування із сервера іменувань:\n" +" ipa entitle-consume 50\n" +"\n" +"Реєстраційним ідентифікатором є унікальний ідентифікатор (UUID). Цей " +"ідентифікатор\n" +"буде ІМПОРТОВАНО, якщо ви скористалися entitle-import.\n" +"\n" +"Зміни у /etc/rhsm/rhsm.conf для набуття чинності потребуватимуть перезапуску " +"служби httpd.\n" + +msgid "Consume an entitlement." +msgstr "Використати іменування." + +msgid "Quantity" +msgstr "Кількість" + +msgid "Search for entitlement accounts." +msgstr "Шукати облікові записи іменування." + +msgid "Retrieve the entitlement certs." +msgstr "Отримати сертифікати іменування." + +msgid "Import an entitlement certificate." +msgstr "Імпортувати сертифікат надання імен." + +msgid "UUID" +msgstr "UUID" + +msgid "Enrollment UUID" +msgstr "UUID надання ролей" + +msgid "Register to the entitlement system." +msgstr "Зареєструватися у системі іменування." + +msgid "Username" +msgstr "Користувач" + +msgid "Enrollment UUID (not implemented)" +msgstr "UUID надання ролі (не реалізовано)" + +msgid "Registration password" +msgstr "Пароль для реєстрації" + +msgid "Display current entitlements." +msgstr "Показати поточні іменування." + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" +"Повторно синхронізувати локальний кеш іменування із сервером іменування." + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Групи користувачів\n" +"\n" +"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " +"можете\n" +"додати параметр --nonposix до команди group-add з метою позначення нової\n" +"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " +"group-mod\n" +"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" +"перетворювати на групи не-POSIX.\n" +"\n" +"Кожна група повинна мати опис.\n" +"\n" +"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " +"підтримку\n" +"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" +"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" +"таку не вказано.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Додавання нової групи не-POSIX:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Перетворити групу не-POSIX на групу posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Вилучення групи:\n" +" ipa group-del unixadmins\n" +"\n" +" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Додати список користувачів до групи \"localadmins\":\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Вилучення користувача з групи \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показати інформацію щодо іменованої групи.\n" +" ipa group-show localadmins\n" +"\n" +"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" +"користувачів з довірених доменів до локальних груп POSIX з метою\n" +"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" +"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" +"слід пізніше включити до одної з груп POSIX.\n" +"\n" +"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" +"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" +"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" +"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" +"допомогою використання Загального каталогу довіреного домену.\n" +"\n" +"Приклад:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" +"відповідної локальної групи POSIX:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" +"групи ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " +"визначити\n" +"їхні SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" +"список учасників довіреного домену у форматі ДОМЕН\\ім’я або ім’я@домен, " +"відокремлених комами" + +msgid "comma-separated list of users to add" +msgstr "список записів користувачів, які слід додати, відокремлених комами" + +msgid "comma-separated list of groups to add" +msgstr "список груп, які слід додати, відокремлених комами" + +msgid "comma-separated list of users to remove" +msgstr "список записів користувачів, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of groups to remove" +msgstr "список груп, які слід вилучити, відокремлених комами" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" +"\n" +"Керування доступом на основі вузлів\n" +"\n" +"Керуйте тим, хто, на яких вузлах і з яких вузлів зможе отримувати доступ\n" +"до певних служб. Ви можете скористатися HBAC для визначення\n" +"користувачів і груп на вузлі походження запиту зможе отримувати\n" +"доступ до певної служби або групи служб.\n" +"\n" +"Ви також можете визначити категорію користувачів та вузли призначення.\n" +"У поточній версії можливі варіанти\n" +"обмежено варіантом \"all\", але перелік варіантів може бути\n" +"розширено у майбутніх версіях.\n" +"\n" +"Вузли призначення та вузли походження у правилах HBAC мають бути\n" +"вузлами, керованими IPA.\n" +"\n" +"Доступними службами і групами служб є служби, керовані hbacsvc\n" +"та додатками hbacsvcgroup, відповідно.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створення правила \"test1\", яке надає всім користувачам доступ\n" +" до вузла \"server\" звідусюди:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Показ властивостей вказаного правила HBAC:\n" +" ipa hbacrule-show test1\n" +"\n" +" Створення правила для певної служби. Це правило надасть користувачу john\n" +" доступ до служби sshd у будь-якій системі звідусіль:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Створення правила для нової групи служб. Користувачу john\n" +" надається доступ до служби FTP у будь-якій системі звідусіль:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --type=allow --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Вимикання вказаного правила HBAC:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Вилучення вказаного правила HBAC:\n" +" ipa hbacrule-del allow_server\n" + +msgid "Source host category" +msgstr "Категорія вузлів-джерел" + +msgid "Source host category the rule applies to" +msgstr "Категорія вузлів-джерел, якої має стосуватися правило" + +msgid "Source Hosts" +msgstr "Вузли-джерела" + +msgid "Source Host Groups" +msgstr "Групи вузлів-джерел" + +msgid "comma-separated list of hosts to add" +msgstr "список вузлів, які слід додати, відокремлених комами" + +msgid "comma-separated list of host groups to add" +msgstr "список груп вузлів, які слід додати, відокремлених комами" + +msgid "comma-separated list of HBAC services to add" +msgstr "список служб HBAC, які слід додати, відокремлених комами" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "список груп служб HBAC, які слід додати, відокремлених комами" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "Додати вузли джерела та групи вузлів з правила HBAC." + +msgid "comma-separated list of hosts to remove" +msgstr "список вузлів, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of host groups to remove" +msgstr "список груп вузлів, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of HBAC services to remove" +msgstr "список служб HBAC, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "список груп служб HBAC, які слід вилучити, відокремлених комами" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "Вилучити вузли джерела та групи вузлів з правила HBAC." + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" +"\n" +"Групи служб HBAC\n" +"\n" +"Групи служб HBAC можуть містити будь-яку кількість окремих служб\n" +"або «учасників». Кожна з груп повинна мати опис.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи служб HBAC:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Додавання учасників до групи служб HBAC:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Показ даних щодо вказаної групи:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Додавання нової групи до групи «login»:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Вилучення групи служб HBAC:\n" +" ipa hbacsvcgroup-del login\n" + msgid "" "\n" "Simulate use of Host-based access controls\n" "\n" -"HBAC rules control who can access what services on what hosts.\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" "You can use HBAC to control which users or groups can access a service,\n" "or group of services, on a target host.\n" "\n" @@ -14412,7 +15693,7 @@ msgid "" "\n" " ipa hbactest --user= --host= --service=\n" " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" +" [--srchost= ] [--sizelimit= ]\n" "\n" " --user, --host, and --service are mandatory, others are optional.\n" "\n" @@ -14437,6 +15718,9 @@ msgid "" "change it\n" " with --sizelimit option.\n" "\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" "EXAMPLES:\n" "\n" " 1. Use all enabled HBAC rules in IPA database to simulate:\n" @@ -14444,10 +15728,10 @@ msgid "" " --------------------\n" " Access granted: True\n" " --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" "\n" " 2. Disable detailed summary of how rules were applied:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" @@ -14456,146 +15740,60 @@ msgid "" " --------------------\n" "\n" " 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" "\n" " 4. Use all enabled HBAC rules in IPA database + explicitly specified " "rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" " --------------------\n" " Access granted: True\n" " --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" "\n" " 5. Test all disabled HBAC rules in IPA database:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" Not matched rules: new-rule\n" +" notmatched: new-rule\n" "\n" " 6. Test all disabled HBAC rules in IPA database + explicitly specified " "rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" "\n" " 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" " --------------------\n" " Access granted: True\n" " --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" msgstr "" "\n" "Імітація використання керування доступом на основі вузлів (HBAC)\n" "\n" -"Правила HBAC керують тим, хто може отримувати доступ до певних служб на\n" -"певних вузлах.\n" +"Правила HBAC керують тим, хто може отримувати доступ до певних служб.\n" "Ви можете скористатися HBAC для керування тим, які користувачі або групи\n" "на початковому вузлі можуть отримувати доступ до служби або групи служб\n" "на вузлі призначення\n" @@ -14610,7 +15808,7 @@ msgstr "" "\n" " ipa hbactest --user= --host= --service=\n" " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" +" [--srchost= ] [--sizelimit= ]\n" "\n" " --user, --host і --service є обов’язковими, інші можна не вказувати.\n" "\n" @@ -14631,6 +15829,9 @@ msgstr "" " Якщо не вказано --rules, буде виконано імітацію всіх увімкнених правил " "IPA.\n" "\n" +" Якщо вказано --srchost, його буде проігноровано. Цей параметр збережено " +"лише з міркувань сумісності.\n" +"\n" "ПРИКЛАДИ:\n" "\n" " 1. Використання всіх увімкнених правил HBAC у базі даних IPA:\n" @@ -14700,84 +15901,15110 @@ msgstr "" " невідповідне: myrule\n" " невідповідне: new-rule\n" " відповідне: allow_all\n" + +msgid "Source host" +msgstr "Вузол джерела" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +"Вузли/Комп’ютери\n" +"\n" +"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " +"контекстах:\n" +"- записи служб, пов’язані з певним вузлом\n" +"- вузол зберігає реєстраційні дані вузол/служба\n" +"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" +"- для усіх зареєстрованих клієнтів створюється запис вузла\n" +"\n" +"РЕЄСТРАЦІЯ:\n" +"\n" +"Передбачено три сценарії реєстрації нових клієнтів:\n" +"\n" +"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" +" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" +" учасником групи admins.\n" +"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" +" існувати. Обмежений адміністратор виконує роль з привілеями\n" +" Host Enrollment.\n" +"3. Вузол було створено з одноразовим паролем.\n" +"\n" +"Вузлу можна надати роль лише один раз. Якщо клієнту вже надано роль і\n" +"роль слід змінити, запис вузла має бути вилучено і створено повторно.\n" +"Зауважте, що повторне створення запису вузла призведе до вилучення усіх\n" +"служб для вузла, а усі сертифікати SSL, пов’язані із цими службами\n" +"буде відкликано.\n" +"\n" +"Запис вузла може, якщо потрібно, містити дані щодо його розташування,\n" +"типу операційної системи тощо.\n" +"\n" +"ПРИКЛАДИ:\n" "\n" "\n" -"HBACTEST І ДОВІРЕНІ ДОМЕНИ\n" +"Додати новий вузол:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" "\n" -"Якщо у IPA налаштовано зовнішній довірений домен, правила HBAC також\n" -"застосовуються до користувачів, що отримують доступ до ресурсів IPA з\n" -"з довіреного домену. Після цього користувачі і групи довіреного домену\n" -"(на їхні SID) може бути прив’язано до зовнішніх груп, які можуть бути\n" -"учасниками груп POSIX у IPA. Такі прив’язки може бути використано у\n" -"правилах HBAC, отже уможливлення доступу до ресурсів, захищених системою\n" -"HBAC.\n" +" Вилучити вузол:\n" +" ipa host-del test.example.com\n" "\n" -"Додаток hbactest здатен тестувати доступ як для локальних користувачів\n" -"IPA, так і користувачів з довірених доменів, як за повним іменем\n" -"користувача, так і за SID користувачів. У таких іменах користувачів\n" -"має бути вказано скорочено довірений домен (ДОМЕН\\Administrator) або\n" -"назву реєстраційного запису користувача (UPN), Administrator@ad.test.\n" +" Додати новий вузол з одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" "\n" -"Будь ласка, зауважте, що виконувати hbactest з аргументом користувача\n" -"довіреного домену у параметрі --user можуть виконувати лише учасники\n" -"групи «trust admins».\n" +"Додати новий вузол з випадковим одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" "\n" -"ПРИКЛАД:\n" +" Змінити відомості щодо вузла:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" "\n" -" 1. Перевірити, чи відповідає користувач з довіреного домену,\n" -" вказаний за коротким іменем, якомусь правилу:\n" +" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " +"змін:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" "\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Відповідні правила: can_login\n" +"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" +" ipa host-disable test.example.com\n" "\n" -" 2. Перевірити, чи відповідає користувач з довіреного домену,\n" -" вказаний за назвою його домену, якомусь правилу:\n" +"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " +"вузла :\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" "\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Невідповідні правила: can_login\n" +"Groups of hosts.\n" "\n" -" 3. Перевірити, чи відповідає користувач з довіреного домену\n" -" вказаний за SID, якомусь правилу:\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" "\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Відповідні правила: can_login\n" +"EXAMPLES:\n" "\n" -" 4. Перевірити, чи відповідає інший користувач з довіреного домену,\n" -" вказаний за SID, якомусь правилу:\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" "\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Відповідні правила: can_login\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" "\n" -" 5. Перевірити, чи відповідає інший користувач з довіреного домену,\n" -" вказаний за коротким ім’ям, якомусь правилу:\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" "\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Невідповідні правила: can_login\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Групи вузлів.\n" +"\n" +"Керування групами вузлів. Корисні для застосування керування\n" +"до декількох вузлів на основі заснованого на вузлах керування\n" +"доступом (Host-based Access Control або HBAC).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Додавання учасників до групи вузлів:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Додавання групи вузлів як учасника іншої групи вузлів:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Вилучення вузла з групи вузлів:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показ списку групи вузлів:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Вилучення групи вузлів:\n" +" ipa hostgroup-del baltimore\n" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" +"Список класів об’єктів, використаних для пошуку записів користувачів у DS, " +"відокремлених комами" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" +"Список класів об’єктів, використаних для пошуку записів груп у DS, " +"відокремлених комами" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" +"Список класів об’єктів, які буде проігноровано для записів користувачів у " +"DS, відокремлених комами" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" +"Список атрибутів, які буде проігноровано для записів користувачів у DS, " +"відокремлених комами" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" +"Список класів об’єктів, які буде проігноровано для записів груп у DS, " +"відокремлених комами" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" +"Список атрибутів, які буде проігноровано для записів груп у DS, " +"відокремлених комами" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "список груп, які слід виключити з перенесення, відокремлених комами" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" +"список записів користувачів, які слід виключити з перенесення, відокремлених " +"комами" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" +"\n" +"Мережеві групи\n" +"\n" +"Мережева група — група для перевірки прав доступу. Може містити значення\n" +"користувачів та вузлів.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової мережевої групи:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Додавання учасників до мережевої групи:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Вилучення користувача з мережевої групи:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Показ даних щодо мережевої групи:\n" +" ipa netgroup-show admins\n" +"\n" +" Вилучення мережевої групи:\n" +" ipa netgroup-del admins\n" + +msgid "comma-separated list of netgroups to add" +msgstr "список мережевих груп, які слід додати, відокремлених комами" + +msgid "comma-separated list of netgroups to remove" +msgstr "список мережевих груп, які слід вилучити, відокремлених комами" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +"Права доступу\n" +"\n" +"Запис правил доступу уможливлює точне делегування прав. Запис прав доступу\n" +"є зручною для читання обгорткою навколо правила керування доступом 389-ds\n" +"або інструкції (ACI).\n" +"Право доступу надає право виконувати специфічне завдання, зокрема додавання\n" +"запису користувача, внесення зміни до групи тощо.\n" +"\n" +"Запис прав доступу не може містити інших прав доступу.\n" +"\n" +"* Права доступу надають можливість читати, записувати, вилучати, шукати або\n" +" порівнювати.\n" +"* Привілеї поєднують подібні права доступу (наприклад усі права доступу,\n" +" потрібні для додавання запису користувача).\n" +"* Роль надає набір привілеїв користувачам, групам, вузлам або групам " +"вузлів.\n" +"\n" +"Запис права доступу складається з декількох різних частин:\n" +"\n" +"1. Назви запису права доступу.\n" +"2. Призначення права доступу.\n" +"3. Права, які надаються записом.\n" +"\n" +"Права визначають список дій, які можна виконувати. Запис прав може\n" +"бути один або може бути декілька записів з такого набору:\n" +"1. write - запис одного або декількох атрибутів\n" +"2. read - читання одного або декількох атрибутів\n" +"3. search - пошук одного або декількох атрибутів\n" +"4. compare - порівняння одного або декількох атрибутів\n" +"5. add - додавання нового запису до ієрархії\n" +"6. delete - вилучення наявного запису\n" +"7. all - надати усі права доступу\n" +"\n" +"Типово, доступ до читання надається до більшості з атрибутів, отже потреба\n" +"у визначенні прав доступу до читання має виникати доволі нечасто.\n" +"\n" +"Зауважте відмінність між атрибутами і записами. Права доступу є " +"незалежними,\n" +"отже можливість додавання запису користувача не означає, що цей запис " +"згодом\n" +"буде придатним до редагування.\n" +"\n" +"Передбачено декілька можливих призначень:\n" +"1. type: тип об’єкта (user, group тощо).\n" +"2. memberof: учасник групи або групи вузлів\n" +"3. filter: фільтр LDAP\n" +"4. subtree: фільтр LDAP, що визначає частину DIT LDAP. Є надмножиною\n" +" призначення «type».\n" +"5. targetgroup: надати доступ до зміни вказаної групи (зокрема надати " +"доступ\n" +" до керування участю у групі)\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати право доступу до створення записів користувачів:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Додати право доступу, яке надає можливість керувати участю у групах:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" +"Права доступу, які слід надати, відокремлених комами (read, write, add, " +"delete, all)" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" +"тип об’єкта IPA (user (користувач), group (група), host (вузол), hostgroup " +"(група вузлів), service (служба), netgroup (мережева група), dns)" + +msgid "Target members of a group" +msgstr "Цільові учасники групи" + +msgid "User group to apply permissions to" +msgstr "Група користувачів, до якої буде застосовано права доступу" + +msgid "comma-separated list of privileges to add" +msgstr "список привілеїв, які слід додати, відокремлених комами" + +msgid "Add a system permission without an ACI" +msgstr "Додати права доступу до системи без ACI" + +msgid "Permission type" +msgstr "Тип прав доступу" + +msgid "comma-separated list of privileges to remove" +msgstr "список привілеїв, які слід вилучити, відокремлених комами" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" +"\n" +"Перевірка віддаленого сервера IPA з метою переконатися, що він є " +"працездатним.\n" +"\n" +"Програма ping надсилає луна-запит до сервера IPA. Сервер повертає\n" +"дані щодо його версії. Ці дані використовуються клієнтом IPA\n" +"для підтвердження, що сервер є доступним і що він приймає запити.\n" +"\n" +"Сервер з xmlrpc_uri у /etc/ipa/default.conf перевіряється першим.\n" +"Якщо він не відповідає, клієнт намагається встановити зв’язок з\n" +"будь-яким сервером, визначеним записами SRV ldap у DNS.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Перевірити луна-імпульсом сервер IPA:\n" +" ipa ping\n" +" ------------------------------------------\n" +" Сервер IPA версії 2.1.9. Версія API 2.20\n" +" ------------------------------------------\n" +"\n" +" Перевірити луна-імпульсом сервер IPA і отримати докладні дані:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" Сервер IPA версії 2.1.9. Версія API 2.20\n" +" -----------------------------------------------------\n" + +msgid "comma-separated list of roles to add" +msgstr "список ролей, які слід додати, відокремлених комами" + +msgid "comma-separated list of permissions" +msgstr "список прав доступу, відокремлених комами" + +msgid "comma-separated list of roles to remove" +msgstr "список ролей, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of privileges" +msgstr "список привілеїв, відокремлених комами" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Права доступу самообслуговування\n" +"\n" +"Права доступу надають змогу точно налаштувати уповноваження. За допомогою\n" +"правил керування доступом та інструкцій (ACI) надаються права доступу до\n" +"виконання вказаних завдань, зокрема додавання записів користувачів,\n" +"внесення змін до записів груп тощо.\n" +"\n" +"Права доступу самообслуговування визначають права об’єкта на внесення змін\n" +"до власного запису.\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання правила самообслуговування для уможливлення керування " +"користувачами\n" +" власною адресою:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" Якщо ви керуєте списком атрибутів, вам слід включити до списку всі " +"атрибути,\n" +" зокрема вже створені. Додавання telephoneNumber до списку:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Показ нашого оновленого правила:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Вилучення правила:\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" +"\n" +"Служби\n" +"\n" +"Служба IPA — це служба, що працює на вузлі системи. У записі служби\n" +"IPA можуть зберігатися дані реєстраційного запису Kerberos, сертифікат\n" +"SSL або обидва набори даних.\n" +"\n" +"Службою IPA можна керувати безпосередньо з комп’ютера, якщо системі\n" +"цього комп’ютера надано достатні права доступу. Це стосується навіть\n" +"комп’ютерів, відмінних від тих, з якими пов’язано службу. Наприклад,\n" +"вони можуть надсилати запит щодо сертифіката SSL за допомогою\n" +"реєстраційних даних служби вузла. Для керування службою за допомогою\n" +"реєстраційних даних вузла слід віддати команду ініціалізації kinit\n" +"від імені вузла:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Додавання служби IPA надає доступ пов’язаній службі до надсилання\n" +"запитів щодо сертифікатів SSL та таблиці ключів, але створення самих\n" +"запитів є окремим кроком: відповідні дані не створюються у результаті\n" +"простого додавання служби.\n" +"\n" +"У записі служби зберігаються лише відкриті дані сертифіката; закритий\n" +"ключ не зберігається.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову службу IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Дозволити вузлу керувати сертифікатом служби IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Перевизначити типовий список підтримуваних типів PAC для служби:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Вилучити службу IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Знайти усіх служби IPA, пов’язані із вузлом:\n" +" ipa service-find web.example.com\n" +"\n" +" Знайти усі служби HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Вимкнути службу ключів Kerberos і сертифіката SSL:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Надіслати запит щодо сертифіката для служби IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Створити і отримати вміст сховища ключів для служби IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" +"Перевизначити типовий список підтримуваних типів PAC. Скористайтеся " +"значенням «NONE», щоб вимкнути підтримку PAC для цієї служби." + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" +"\n" +"Групи команд sudo\n" +"\n" +"Керування групами команд sudo.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову групу команд sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Вилучити групу команд sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показ групи команд sudo:\n" +" ipa group-show localadmins\n" + +msgid "comma-separated list of sudo commands to add" +msgstr "список команд sudo, які слід додати, відокремлених комами" + +msgid "comma-separated list of sudo commands to remove" +msgstr "список команд sudo, які слід вилучити, відокремлених комами" + +msgid "Active directory domain administrator's password" +msgstr "Пароль адміністратора домену Active directory" + +msgid "GECOS field" +msgstr "поле GECOS" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" +"\n" +"Діапазони ідентифікаторів\n" +"\n" +"Керування діапазонами ідентифікаторів, використаних для відображення\n" +"ідентифікаторів POSIX на SID, і навпаки.\n" +"\n" +"За допомогою цієї програми можна керувати обома типами діапазонів " +"ідентифікаторів:\n" +"\n" +" - діапазони ідентифікаторів локального домену\n" +" - діапазони ідентифікаторів довірених віддалених доменів\n" +"\n" +"Обидва типи мають такі спільні атрибути:\n" +"\n" +" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" +" - range-size: розмір діапазону\n" +"\n" +"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " +"ідентифікатори\n" +"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" +"\n" +"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" +" - rid-base: перший RID(*) відповідного діапазону RID\n" +" - secondary-rid-base: перший RID вторинного діапазону RID\n" +"\n" +"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" +" - rid-base: перший RID відповідного діапазону RID\n" +" - dom_sid: SID довіреного домену\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" +"\n" +"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" +"ідентифікаторів слід вказати SID домену.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" +"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" +"довіреного домену.\n" +"\n" +"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" +"значеннями:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" +"13999999. Отже RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" +"\n" +"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" +"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" +"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" +"RID.\n" +"\n" +" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"Дані з діапазонів ідентифікаторів локального домену використовуються\n" +"сервером IPA на внутрішньому рівні для призначення SID користувачам і " +"групам\n" +"IPA. SID буде збережено у об’єктах користувача або групи.\n" +"\n" +"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" +"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" +"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " +"1000007.\n" +"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" +"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" +"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" +"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" +"того, щоб повністю позбутися конфліктів.\n" +"\n" +"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " +"слід\n" +"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " +"RID,\n" +"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" +"base\n" +"або secondary-rid-base, відповідно, і додати base-id.\n" +"\n" +"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" +"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" +"для локального домену буде створено під час встановлення або оновлення\n" +"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" +"створено разом з записом довіри командою «ipa trust-add ...».\n" +"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" +"\n" +"ВИПАДКИ ВИКОРИСТАННЯ:\n" +"\n" +" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" +"\n" +" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" +" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" +" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" +"\n" +" Додавання додаткового діапазону ідентифікаторів для локального домену\n" +"\n" +" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " +"додатком\n" +" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" +" POSIX, має бути створено новий діапазон для додавання нових " +"користувачів\n" +" та груп. (У поточній версії між цим командним інтерфейсом і додатком " +"DNA\n" +" немає безпосереднього зв’язку, але у майбутній версії може бути " +"передбачено\n" +" можливість внесення змін і до налаштувань додатка DNS.)\n" +"\n" +"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" +"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" +"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" +"файловій системі і використовуються для керування доступом, можлива " +"ситуація,\n" +"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" +"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" +"у іншому домені.\n" +"\n" +"(*) RID типово є останнім цілим числом SID користувача або групи, перед " +"якими\n" +"має бути вказано SID домену. Наприклад, якщо SID домену " +"S-1-5-21-123-456-789, а\n" +"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " +"користувача\n" +"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" +"використовуються для користувачів і груп.\n" +"\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" +"налаштованих для локального домену. У поточній версії додаток DNA *не " +"можна*\n" +"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" +"за допомогою цього сімейства команд.\n" +"\n" +"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" +"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " +"«cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" +"він відповідав новому діапазону.\n" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +" Додати новий діапазон ідентифікаторів.\n" +"\n" +" Для додавання нового діапазону ідентифікаторів вам слід завжди " +"вказувати\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Крім того, може бути надано\n" +"\n" +" --rid-base\n" +" --econdary-rid-base\n" +"\n" +" для додавання нового діапазону ідентифікаторів для локального домену і\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" для додавання нового діапазону для довіреного домену AD.\n" +"\n" +" ПОПЕРЕДЖЕННЯ:\n" +"\n" +" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " +"налаштованих\n" +" для локального домену. У поточній версії додаток DNA *не може* змінити\n" +" власні налаштування на основі локальних діапазонів, встановлених за\n" +" допомогою цього сімейства команд.\n" +"\n" +" Для внесення змін щодо локального діапазону слід змінити налаштування\n" +" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"відповідно\n" +" до параметрів нового діапазону.\n" +" " + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" +"\n" +"Правила sudo\n" +"\n" +"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +"повноваження певним користувачам (або групам користувачів) на виконання\n" +"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +"користувача, зберігаючи водночас журнал виконання команд та\n" +"аргументів.\n" +"\n" +"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +" Users: користувачі або групи, які можуть викликати sudo.\n" +" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" +" Allow Command: специфічні команди, які можна виконувати за допомогою " +"sudo.\n" +" Deny Command: специфічні команди, які не можна виконувати за допомогою " +"sudo.\n" +" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +"команди.\n" +" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +"виконання команд.\n" +" Options: різноманітні параметри sudoers, які можуть змінити поведінку " +"sudo.\n" +"\n" +"До правила sudo можна додати порядок, який керуватиме порядком\n" +"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +"Порядок визначається числовим індексом, який не повинен повторюватися.\n" +"\n" +"У IPA передбачено визначений binddn для використання з sudo, який " +"розташовано у\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"Докладніші відомості наведено у документації з IPA щодо sudo.\n" + +msgid "comma-separated list of sudo command groups to add" +msgstr "список груп команд sudo, які слід додати, відокремлених комами" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "список груп команд sudo, які слід вилучити, відокремлених комами" + +msgid "Additional instructions:" +msgstr "Додаткові настанови:" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"Не було надіслано номера версії програмного інтерфейсу (API), сумісність з " +"найновішими версіями не можна гарантувати. Припускаємо таку версію API " +"сервера: %(server_version)s" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"З виходом версії IPA 4.0 змінилася семантика засобу переспрямовування DNS.\n" +"Вам варто перейти на використання зон переспрямовування (dnsforwardzone-*).\n" +"Докладніше про це у документації." + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"Підтримка DNSSEC є експериментальною.\n" +"%(additional_info)s" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "Параметр «%(option)s» є застарілим. %(additional_info)s" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Семантику %(label)s було змінено. %(current_behavior)s\n" +"%(hint)s" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "Сервер DNS %(server)s: %(error)s." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"На сервері DNS %(server)s не передбачено підтримки DNSSEC: %(error)s.\n" +"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"зона переспрямовування «%(fwzone)s» не є ефективною, оскільки не вказано " +"належного делегування NS у основній зоні «%(authzone)s». Будь ласка, додайте " +"запис NS «%(ns_rec)s» до батьківської зони «%(authzone)s»." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"На сервері DNS %(server)s не передбачено підтримки EDNS0 (RFC 6891): " +"%(error)s.\n" +"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Не пройдено перевірку DNSSEC: %(error)s.\n" +"Будь ласка, перевірте, чи правильно вказано налаштування DNSSEC, або " +"вимкніть перевірку DNSSEC на усіх серверах IPA." + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"Не вдалося створити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" +"Причиною може бути те, що зона не є керованою IPA. Будь ласка, створіть " +"запис вручну так, щоб він містив таке значення: «%(realm)s»" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"Не вдалося вилучити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" +"Причиною може бути те, що зона не є керованою IPA. Будь ласка, вилучіть " +"запис вручну." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Не встановлено основного ключа DNSSEC. Підписування у зоні DNSSEC не " +"працюватиме, доки не буде встановлено основний ключ DNSSEC." + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"Назва відносного запису «%(record)s» містить як суфікс назву зони " +"«%(zone)s», що дає повну назву домену «%(fqdn)s». Зазвичай, такі назви є " +"помилковими, спричиненими пропущеною крапкою наприкінці специфікації назви." + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "«%(command)s» вважається застарілою. %(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Результат пошуку обрізано: %(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Довіру до %(domain)s втрачено. Будь ласка, відновіть її за допомогою команди " +"«ipa trust-add»." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "Записи DNS вузла %(host)s не вдалося вилучити. (%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"Правила переспрямовування конфліктують із деякими автоматично порожніми " +"зонами. Запити для зон, вказаних на основі RFC 6303, ігноруватимуть " +"переспрямовування і завжди призводитимуть до відповідей NXDOMAIN. Щоб " +"перевизначити цю поведінку, скористайтеся правилами переспрямовування «only»." + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"Спроба оновлення запису системи «%(record)s» зазнала невдачі. Повідомлення " +"про помилку: %(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA не керує зоною %(zone)s. Будь ласка, додайте запис на вашому сервері DNS " +"вручну" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Спроба автоматичного оновлення записів системи DNS зазнала невдачі. Будь " +"ласка, повторно запустіть оновлення записів системи вручну, щоб отримати " +"список пропущених записів." + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"Для застосування змін у налаштуваннях службу %(service)s на сервері IPA " +"%(server)s слід перезапустити." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"Немає серверів DNS на місці IPA %(location)s. Без серверів DNS місце не " +"працюватиме як слід." + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: помилкове форматування сертифіката. %(reason)s" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" +"Запис вузла було додано, але спроба оновлення DNS зазнала невдачі: %(reason)s" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "Сертифікат %(ca)s на цьому сервері не доступний." + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d змінних" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "завантажено %(count)d додаток" +msgstr[1] "завантажено %(count)d додатки" +msgstr[2] "завантажено %(count)d додатків" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Введіть %(label)s ще раз для перевірки: " + +msgid "Passwords do not match!" +msgstr "Паролі не збігаються!" + +msgid "No matching entries found" +msgstr "Відповідних записів не знайдено" + +msgid "Topic or Command" +msgstr "Тема або команда" + +msgid "The topic or command name." +msgstr "Назва теми або команди." + +msgid "Topic commands:" +msgstr "Команди теми:" + +msgid "To get command help, use:" +msgstr "Щоб отримати довідку щодо команди, скористайтеся такою командою:" + +msgid " ipa --help" +msgstr " ipa <команда> --help" + +msgid "Command name" +msgstr "Назва команди" + +msgid "Positional arguments" +msgstr "Обов’язкові аргументи" + +#, python-format +msgid "Same as --%s" +msgstr "Те саме, що і --%s" + +msgid "Deprecated options" +msgstr "Застарілі параметри" + +msgid "No file to read" +msgstr "Немає файла для читання" + +msgid "A dictionary representing an LDAP entry" +msgstr "Словник, що відповідає запису LDAP" + +msgid "A list of LDAP entries" +msgstr "Список записів LDAP" + +msgid "All commands should at least have a result" +msgstr "Виконання всіх команд має призводити до якогось результату" + +msgid "Results are truncated, try a more specific search" +msgstr "" +"Список результатів обрізано. Спробуйте точніше визначити критерії пошуку." + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Невідомий параметр: %(option)s" + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Версія клієнта. Використовується для визначення, якщо сервер приймає запит." + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "Клієнт %(cver)s є несумісним з сервером %(sver)s на «%(server)s»" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s повідомляє про невідому помилку %(code)d: %(error)s" + +msgid "an internal error has occurred" +msgstr "сталася внутрішня помилка" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "на сервері «%(server)s» сталася внутрішня помилка" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "невідома команда: «%(name)s»" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "помилка на сервері «%(server)s»: %(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "не вдалося встановити з’єднання з «%(uri)s»: %(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "некоректний запит JSON-RPC: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" +"помилка під час розміщення даних для каналу передавання XML-RPC: %(error)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Не вказано HTTP Referer або вказано помилкове значення, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" +"Кодуванням системи має бути UTF-8, підтримки «%(encoding)s» не передбачено. " +"Встановіть такі значення змінних середовища: LC_ALL=\"C.UTF-8\" або LC_ALL=" +"\"\" і LC_CTYPE=\"C.UTF-8\"." + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Помилка Kerberos: %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "не отримано реєстраційних даних Kerberos" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "У базі даних Kerberos не виявлено служби «%(service)s»" + +msgid "No credentials cache found" +msgstr "Не знайдено кешу реєстраційних даних" + +msgid "Ticket expired" +msgstr "Сплив строк дії квитка" + +msgid "Credentials cache permissions incorrect" +msgstr "Помилкові права доступу до кешу реєстраційних даних" + +msgid "Bad format in credentials cache" +msgstr "Помилковий формат кешу реєстраційних даних" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Не вдалося визначити KDC для бажаної області (realm)" + +msgid "Session error" +msgstr "Помилка сеансу" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" +"Не вдалося виконати розпізнавання для реєстраційного запису %(principal)s: " +"%(message)s" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Недостатні права для доступу: %(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "команда «%(name)s» не приймає ніяких аргументів" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "команда «%(name)s» приймає не більше %(count)d аргументу" +msgstr[1] "команда «%(name)s» приймає не більше %(count)d аргументів" +msgstr[2] "команда «%(name)s» приймає не більше %(count)d аргументів" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "перекриття аргументів і параметрів: %(names)s" + +#, python-format +msgid "'%(name)s' is required" +msgstr "Слід вказати «%(name)s»" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "некоректне «%(name)s»: %(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "api не надає такого простору назв: «%(name)s»" + +msgid "Passwords do not match" +msgstr "Паролі не збігаються" + +msgid "Command not implemented" +msgstr "Команду не реалізовано" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" +"Клієнтську частину не налаштовано. Віддайте команду ipa-client-install." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Не вдалося отримати %(name)s у інтерактивному режимі" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "Команда «%(name)s» вважається застарілою" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "Домен «%(domain)s» не є кореневим доменом для лісу «%(forest)s»" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "Цей запис вже існує" + +msgid "You must enroll a host in order to create a host service" +msgstr "Щоб створити службу вузла, вам слід зареєструвати вузол" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Реєстраційний запис служби вказано у формі, відмінній від: служба/повна " +"назва вузла: %(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" +"Область дії реєстраційного запису не збігається з областю цього сервера IPA" + +msgid "This command requires root access" +msgstr "Для виконання цієї команди потрібні права доступу користувача root" + +msgid "This is already a posix group" +msgstr "Вже є posix-групою" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" +"Реєстраційний запис вказано у формі, відмінній від користувач@ОБЛАСТЬ: " +"«%(principal)s»" + +msgid "This entry is already enabled" +msgstr "Цей запис вже увімкнено" + +msgid "This entry is already disabled" +msgstr "Цей запис вже вимкнено" + +msgid "This entry cannot be enabled or disabled" +msgstr "Цей запис не можна вмикати або вимикати" + +msgid "This entry is not a member" +msgstr "Цього запису немає серед учасників" + +msgid "A group may not be a member of itself" +msgstr "Група не може бути елементом самої себе" + +msgid "This entry is already a member" +msgstr "Цей запис вже є серед учасників" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Помилка декодування Base64: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "Групу не може бути додано як елемент самої себе" + +msgid "The default users group cannot be removed" +msgstr "Не можна вилучати типову групу користувачів" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "Вилучення керованих груп заборонено. Спочатку групу слід від’єднати." + +msgid "A managed group cannot have a password policy." +msgstr "У керованої групи не може бути власних правил для паролів." + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "«%(entry)s» не містить сертифіката." + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "Не вдалося створити закриту групу. Група «%(group)s» вже існує." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Під час перевірки виявлено проблему, всі записи учасників %(verb)s: %(exc)s" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s не містить «%(value)s»" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"Критерій пошуку не був достатньо точним. Мало бути вказано один критерій, " +"виявлено — %(found)d." + +msgid "This group already allows external members" +msgstr "У цій групі вже дозволено зовнішніх учасників" + +msgid "This group cannot be posix because it is external" +msgstr "Ця група не може належати до груп POSIX, оскільки є зовнішньою" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" +"Ця група вже належить до груп POSIX, отже її не можна перетворити на зовнішню" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Вилучення сервера перервано: %(reason)s." + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" +"Підтримки %(operation)s для реєстраційних записів %(principal_type)s не " +"передбачено" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "Помилка під час виконання запиту, стан %(status)s: %(reason)s" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" +"Набір правил прив’язки «%(ruleset)s» містить декілька правил для допоміжного " +"засобу %(helper)s" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "«%(attr)s» вже містить одне або декілька значень" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "не виявлено ні команди, ні запису довідки «%(topic)s»" + +msgid "change collided with another change" +msgstr "зміна конфліктує з іншою внесеною зміною" + +msgid "no modifications to be performed" +msgstr "змін не внесено" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +msgid "limits exceeded for this query" +msgstr "цим запитом перевищено обмеження" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "зміну основного ключа заборонено" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: можна використовувати лише одне значення." + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: некоректний синтаксис." + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Помилковий фільтр пошуку %(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "Заборонено для записів, які не є записами листків (leaf)" + +msgid "LDAP timeout" +msgstr "Час очікування LDAP" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" +"Перевищення часу очікування на завершення завдання LDAP %(task)s, DN " +"завдання: «%(task_dn)s»" + +msgid "Configured time limit exceeded" +msgstr "Перевищено налаштоване обмеження за часом" + +msgid "Configured size limit exceeded" +msgstr "Перевищено налаштоване обмеження за розміром" + +msgid "Configured administrative server limit exceeded" +msgstr "Перевищено налаштоване обмеження адміністративного сервера" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Не вдалося завершити дію з сертифікатом: %(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Помилка форматування сертифіката: %(error)s" + +msgid "Already registered" +msgstr "Вже зареєстровано" + +msgid "Not registered yet" +msgstr "Ще не зареєстровано" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s неможливо вилучити, оскільки він потрібен для %(dependent)s %(label)s" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s не може бути вилучено або вимкнено, оскільки він є останнім у " +"%(container)s %(label)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(key)s %(label)s не можна вилучати або змінювати: %(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "Сертифікат %(name)s не є чинним" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" +"Схема не потребує оновлення (Відбиток «%(fingerprint)s», TTL %(ttl)s с)" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "На вузлі «%(hostname)s» немає відповідного запису DNS A/AAAA" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" +"Перевірка DNS зазнала невдачі: мало бути {%(expected)s}, отримано {%(got)s}" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"У лісу «%(forest)s» наявні відносини довіри з лісами %(domains)s, що не дає " +"змоги встановити довіру до «%(conflict)s»" + +msgid "incorrect type" +msgstr "помилковий тип" + +msgid "Only one value is allowed" +msgstr "Можна використовувати лише одне значення" + +msgid "this option is deprecated" +msgstr "цей параметр вважається застарілим" + +msgid "must be True or False" +msgstr "має дорівнювати True або False" + +msgid "must be an integer" +msgstr "має бути цілим числом" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "має бути числом, не меншим за %(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "не може перевищувати %(maxvalue)d" + +msgid "must be a decimal number" +msgstr "має бути десятковим числом" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "має бути принаймні %(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "не може перевищувати %(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" +"числовий клас «%(cls)s» не включено до списку дозволених числових класів: " +"%(allowed)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "має відповідати шаблону «%(pattern)s»" + +msgid "must be binary data" +msgstr "має бути бінарними даними" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "має бути розміром, не менше за %(minlength)d байтів" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "не повинне перевищувати за розміром %(maxlength)d байтів" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "має бути розміром точно у %(length)d байтів" + +msgid "must be a certificate" +msgstr "має бути сертифікатом" + +msgid "must be a certificate signing request" +msgstr "має бути запитом щодо підписування сертифіката" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" +"Помилка під час декодування запиту на підписування сертифіката (CSR): %s" + +msgid "must be Unicode text" +msgstr "має бути текстом у Unicode" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Використання пробілів на початку і у кінці заборонено" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "має бути не меншим за %(minlength)d символів довжиною" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "не повинне перевищувати %(maxlength)d символів у довжину" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "має бути точно %(length)d символів у довжину" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "Не можна використовувати символ %(char)r." + +#, python-format +msgid "must be '%(value)s'" +msgstr "має бути «%(value)s»" + +#, python-format +msgid "must be one of %(values)s" +msgstr "має бути одним з таких значень: %(values)s" + +msgid "must be datetime value" +msgstr "має бути значенням дати і часу" + +msgid "does not match any of accepted formats: " +msgstr "не відповідає жодному з прийнятних форматів: " + +msgid "incomplete time value" +msgstr "неповне часове значення" + +msgid "must be DNS name" +msgstr "має бути назвою DNS" + +msgid "must be absolute" +msgstr "має бути абсолютною" + +msgid "must be relative" +msgstr "має бути відносною" + +msgid "must be dictionary" +msgstr "має бути словником" + +msgid "must be Kerberos principal" +msgstr "має бути реєстраційним записом Kerberos" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Помилкове форматування реєстраційного запису: «%(value)s»" + +msgid "Service principal is required" +msgstr "Слід вказати реєстраційний запис служби" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: файл не знайдено" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "Не вдалося обробити параметр {item}" + +msgid "any of the configured servers" +msgstr "будь-який з налаштованих серверів" + +msgid "Exceeded number of tries to forward a request." +msgstr "Перевищено кількість спроб переспрямовування запиту." + +msgid "Filename is empty" +msgstr "Порожня назва файла" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "Доступ заборонено: %(file)s" + +msgid "empty DNS label" +msgstr "порожня мітка DNS" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "Довжина мітки DNS не повинна перевищувати 63 символи" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"можна використовувати лише літери, цифри, %(chars)s. Символ %(chars2)s не " +"повинен бути першим або останнім символом мітки DNS." + +msgid "single label {}s are not supported" +msgstr "підтримки одинарних міток {}ів не передбачено" + +msgid "too many '@' characters" +msgstr "занадто багато символів «@»" + +msgid "cannot be longer that {} characters" +msgstr "не може бути довшим за {}" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "назва вузла містить лише порожню мітку (послідовні крапки)" + +msgid "not fully qualified" +msgstr "вказано не повністю" + +msgid "invalid SSH public key" +msgstr "некоректний відкритий ключ SSH" + +msgid "options are not allowed" +msgstr "не можна використовувати параметри" + +msgid "invalid hostmask" +msgstr "некоректна маска вузлів" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "запит «%(owner)s %(rtype)s»: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "запит «%(owner)s %(rtype)s» за допомогою EDNS0: %(error)s" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" +"відповідь на запит «%(owner)s %(rtype)s» не містить підписів DNSSEC (немає " +"даних RRSIG)" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"запис «%(owner)s %(rtype)s» не пройшов перевірки DNSSEC на сервері %(ip)s" + +msgid "invalid escape code in domain name" +msgstr "некоректний керівний код у назві домену" + +msgid "domain name cannot be longer than 255 characters" +msgstr "назва домену не повинна перевищувати за довжиною 255 символів" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "Довжина мітки DNS не повинна перевищувати 63 символів" + +msgid "invalid domain name" +msgstr "некоректна назва домену" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "назву домену «%(domain)s» слід нормалізувати до %(normalized)s" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "некоректна назва домену: %s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"некоректна версія IP-адреси (маємо: %(value)d, має бути: %(required_value)d)!" + +msgid "invalid IP address format" +msgstr "некоректний формат запису IP-адреси" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s не є чинним портом" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" +"має бути надано принаймні одне значення, що є рівним канонічній назві " +"реєстраційного запису" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" +"область або суфікс UPN перекриваються із простором назв довіреного домену" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Спроба отримання ланцюжка сертифікації CA зазнала невдачі: %s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "помилка запиту зі станом HTTP %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" +"Спроба отримання даних щодо стану служби сертифікації зазнала невдачі: %s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Спроба отримання стану CA зазнала невдачі, стан %d" + +#, python-format +msgid "objectclass %s not found" +msgstr "клас об’єктів %s не знайдено" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "Не вдалося обмінятися даними з CMS (стан %d)" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "Не знайдено угоди щодо реплікації для %(hostname)s" + +msgid "Failed to authenticate to CA REST API" +msgstr "" +"Не вдалося пройти розпізнавання за допомогою програмного інтерфейсу CA REST" + +msgid "automount location" +msgstr "запис автомонтування" + +msgid "automount locations" +msgstr "записи автомонтування" + +msgid "Automount Locations" +msgstr "Записи автомонтування" + +msgid "Automount Location" +msgstr "Запис автомонтування" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Додано місце автоматичного монтування «%(value)s»" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Вилучено місце автоматичного монтування «%(value)s»" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "встановлено відповідність %(count)d місця автоматичного монтування" +msgstr[1] "встановлено відповідність %(count)d місця автоматичного монтування" +msgstr[2] "встановлено відповідність %(count)d місць автоматичного монтування" + +msgid "automount map" +msgstr "карта автомонтування" + +msgid "automount maps" +msgstr "карти автоматичного монтування" + +msgid "Automount Maps" +msgstr "Карти автоматичного монтування" + +msgid "Automount Map" +msgstr "Карта автомонтування" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Додано карту автоматичного монтування «%(value)s»" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Вилучено карту автоматичного монтування «%(value)s»" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Змінено карту автоматичного монтування «%(value)s»" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "встановлено відповідність %(count)d карти автоматичного монтування" +msgstr[1] "встановлено відповідність %(count)d карти автоматичного монтування" +msgstr[2] "встановлено відповідність %(count)d карт автоматичного монтування" + +msgid "Automount key object." +msgstr "Об’єкт ключа автоматичного монтування." + +msgid "automount key" +msgstr "ключ автомонтування" + +msgid "automount keys" +msgstr "ключі автомонтування" + +msgid "Automount Keys" +msgstr "Ключі автомонтування" + +msgid "Automount Key" +msgstr "Ключ автомонтування" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" +"Пара ключ,інформація має бути унікальною. Ключ з назвою %(key)s та " +"інформацією %(info)s вже існує." + +#, python-format +msgid "key named %(key)s already exists" +msgstr "ключ з назвою %(key)s вже існує" + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "Ключа автоматичного монтування %(key)s з інформацією %(info)s не існує" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" +"Знайдено декілька записів ключів %(key)s, скористайтеся --info для вибору " +"певного запису." + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Додано ключ автоматичного монтування «%(value)s»" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Додано опосередковану карту автоматичного монтування «%(value)s»" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" +"точка монтування вказується відносно батьківської картки, її запис не може " +"починатися з «/»" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Вилучено ключ автоматичного монтування «%(value)s»" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Змінено ключ автоматичного монтування «%(value)s»" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "встановлено відповідність %(count)d ключа автоматичного монтування" +msgstr[1] "встановлено відповідність %(count)d ключі автоматичного монтування" +msgstr[2] "встановлено відповідність %(count)d ключів автоматичного монтування" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Керування профілями сертифікатів\n" +"\n" +"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" +"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" +"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" +"і розширень, які буде надано сертифікатом.\n" +"\n" +"Форматом профілю сертифікатів є список значень, які може обробляти\n" +"Dogtag або система сертифікації служби сертифікації Red Hat.\n" +"\n" +"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" +"\n" +"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" +"що починається з літери і складається з послідовності літер, цифр, та " +"символів підкреслювання («_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Вилучити профіль сертифікатів:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показати дані щодо профілю:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Зберегти налаштування профілю до файла:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Шукати профілі, у яких не зберігаються сертифікати:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" +"\n" +"Налаштування профілю зберігаються у вигляді простого списку\n" +"властивостей, що використовується системою сертифікації Dogtag.\n" +"Підтримки формату XML не передбачено.\n" +"\n" +"Профілів, які керуються IPA, стосуються такі обмеження:\n" +"\n" +"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" +" містити значення, що збігається з ідентифікатором, вказаним у рядку " +"команди.\n" +"\n" +"- Значенням поля «classId» має бути «caEnrollImpl»\n" +"\n" +"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" +"\n" +"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" +" клас «certOutputImpl».\n" +"\n" + +msgid "CA is not configured" +msgstr "CA не налаштовано" + +msgid "invalid Profile ID" +msgstr "некоректний ідентифікатор профілю" + +msgid "Certificate Profile" +msgstr "Профіль сертифікатів" + +msgid "Certificate Profiles" +msgstr "Профілі сертифікатів" + +msgid "Profile configuration" +msgstr "Налаштування профілю" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "встановлено відповідність %(count)d профілю" +msgstr[1] "встановлено відповідність %(count)d профілів" +msgstr[2] "встановлено відповідність %(count)d профілів" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Імпортовано профіль «%(value)s»" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "У даних профілю profileId вказано декілька разів: %(values)s" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"Ідентифікатор профілю, «%(cli_value)s», не збігається із вказаним у даних " +"профілю, «%(file_value)s»" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Вилучено профіль «%(value)s»" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Стандартний профіль «%(profile_id)s» не може бути вилучено" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Змінено профіль сертифікатів «%(value)s»" + +msgid "Certificate profiles cannot be renamed" +msgstr "Профілі сертифікатів не можна перейменовувати" + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "Недостатні права доступу для внесення змін до профілю сертифікації." + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Керування правилами ACL CA.\n" +"\n" +"Цим додатком можна скористатися для визначення правил керування тим,\n" +"які служби сертифікації та профілі можна використовувати для видавання\n" +"сертифікатів певним реєстраційним записам або група реєстраційних\n" +"записів.\n" +"\n" +"ОБЛАСТЬ ДІЇ РЕЄСТРАЦІЙНИХ ЗАПИСІВ ОБ’ЄКТА:\n" +"\n" +"Щоб запит щодо сертифікації було задоволено, реєстраційні записи,\n" +"які є об’єктом запиту щодо сертифікації (необов’язково ті самі,\n" +"що і реєстраційний запис, з якого надсилається запит щодо сертифікації)\n" +"має бути включено до області дії ACL служби сертифікації, що\n" +"також включає службу сертифікації та профіль призначення.\n" +"\n" +"Користувачів можна включати за іменем, групою або категорією\n" +"«усі користувачі». Вузли можна включати за назвою, групою вузлів\n" +"або категорією «усі вузли». Служби можна включати за назвою служби\n" +"або категорією «усі служби». ACL служб сертифікації може бути\n" +"пов’язано із одним типом реєстраційних записів або із декількома\n" +"типами.\n" +"\n" +"ОБЛАСТЬ ДІЇ СЛУЖБИ СЕРТИФІКАЦІЇ:\n" +"\n" +"ACL служби сертифікації може бути пов’язано із однією або\n" +"декількома службами сертифікації за назвою або за категорією\n" +"«усі CA». З міркувань сумісності ACL служби сертифікації без\n" +"прив’язки до служби сертифікації вважається таким, що пов’язано\n" +"із службою сертифікації «ipa» (і лише з цією службою сертифікації).\n" +"\n" +"ОБЛАСТЬ ДІЇ ПРОФІЛІВ:\n" +"\n" +"ACL служби сертифікації може бути пов’язано із одним або декількома\n" +"профілями за ідентифікатором профілю. Ідентифікатором профілю\n" +"вважається рядок без пробілів і символів пунктуації, що починається\n" +"із літери і є послідовністю літер, цифр та символів підкреслювання\n" +"(«_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити ACL служби сертифікації «test», який надає доступ усім\n" +" користувачам до профілю «UserCert» на усіх службах сертифікації:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Вивести властивості вказаного за назвою ACL служби сертифікації:\n" +" ipa caacl-show test\n" +"\n" +" Створити ACL служби сертифікації, який надаватиме змогу\n" +" користувачеві «alice» використовувати профіль «DNP3» на «DNP3-CA»:\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Вимкнути ACL служби сертифікації:\n" +" ipa caacl-disable test\n" +"\n" +" Вилучити ACL служби сертифікації:\n" +" ipa caacl-del test\n" + +msgid "CA ACL" +msgstr "CA ACL" + +msgid "CA ACLs" +msgstr "CA ACL" + +msgid "CA category" +msgstr "Категорія CA" + +msgid "CA category the ACL applies to" +msgstr "Категорія CA, до якої застосовується ACL" + +msgid "CAs" +msgstr "CA" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "Додано CA ACL «%(value)s»" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Вилучено CA ACL «%(value)s»" + +msgid "default CA ACL can be only disabled" +msgstr "типовий ACL CA можна лише вимкнути" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Змінено CA ACL «%(value)s»" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"не можна встановлювати для категорії CA значення «all», доки є записи " +"дозволених CA" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" +"не можна встановлювати для категорії профілів значення «all», доки є записи " +"дозволених профілів" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" +"не можна встановлювати для категорії користувачів значення «all», доки є " +"записи дозволених користувачів" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"не можна встановлювати для категорії вузлів значення «all», доки є записи " +"дозволених вузлів" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"не можна встановлювати для категорії служб значення «all», доки є дозволені " +"служби" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "встановлено відповідність %(count)d CA ACL" +msgstr[1] "встановлено відповідність %(count)d CA ACL" +msgstr[2] "встановлено відповідність %(count)d CA ACL" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Увімкнено CA ACL «%(value)s»" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Вимкнено CA ACL «%(value)s»" + +#, python-format +msgid "%i user or group added." +msgstr "Додано %i користувача або групу." + +#, python-format +msgid "%i users or groups added." +msgstr "Додано %i користувачів або груп." + +msgid "users cannot be added when user category='all'" +msgstr "" +"не можна додавати записи користувачів, якщо категорія користувачів=«all»" + +#, python-format +msgid "%i user or group removed." +msgstr "Вилучено %i користувача або групу." + +#, python-format +msgid "%i users or groups removed." +msgstr "Вилучено %i користувачів або груп." + +#, python-format +msgid "%i host or hostgroup added." +msgstr "Додано %i вузол або групу вузлів." + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "Додано %i вузлів або груп вузлів." + +msgid "hosts cannot be added when host category='all'" +msgstr "не можна додавати записи вузлів, якщо категорія вузлів=«all»" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "Вилучено %i вузол або групу вузлів." + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "Вилучено %i вузлів або груп вузлів." + +#, python-format +msgid "%i service added." +msgstr "Додано %i службу." + +#, python-format +msgid "%i services added." +msgstr "Додано %i служб." + +msgid "services cannot be added when service category='all'" +msgstr "не можна додавати записи служб, якщо категорія служб=«all»" + +#, python-format +msgid "%i service removed." +msgstr "Вилучено %i службу." + +#, python-format +msgid "%i services removed." +msgstr "Вилучено %i служб." + +#, python-format +msgid "%i profile added." +msgstr "Додано %i профіль." + +#, python-format +msgid "%i profiles added." +msgstr "Додано %i профілів." + +msgid "profiles cannot be added when profile category='all'" +msgstr "профілі не можна додавати, якщо категорія профілів «all»" + +#, python-format +msgid "%i profile removed." +msgstr "Вилучено %i профіль." + +#, python-format +msgid "%i profiles removed." +msgstr "Вилучено %i профілів." + +msgid "Add CAs to a CA ACL." +msgstr "Додати CA до ACL CA." + +#, python-format +msgid "%i CA added." +msgstr "Додано %i CA." + +#, python-format +msgid "%i CAs added." +msgstr "Додано %i CA." + +msgid "CAs cannot be added when CA category='all'" +msgstr "Не можна додавати CA, якщо категорія CA='all'" + +msgid "Remove CAs from a CA ACL." +msgstr "Вилучити CA з ACL CA." + +#, python-format +msgid "%i CA removed." +msgstr "Вилучено %i." + +#, python-format +msgid "%i CAs removed." +msgstr "Вилучено %i CA." + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" +"Рівень домену не може бути піднято до {0}, слід розв’язати наявні конфлікти " +"реплікації." + +msgid "Server does not support domain level functionality" +msgstr "" +"На сервері не передбачено підтримки функціональних можливостей рівня домену" + +msgid "Domain Level cannot be lowered." +msgstr "Не можна знижувати рівень домену." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Не можна підняти рівень домену до {0}, оскільки на сервері {1} не " +"передбачено підтримки такого рівня." + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"Система назв доменів (DNS)\n" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" +"\n" +"Керування записами зон та ресурсів DNS.\n" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" +"\n" +"ПІДТРИМУВАНІ ТИПИ ЗОН\n" +"\n" +" * Основна зона (dnszone-*), містить довірені дані.\n" +" * Зона переспрямовування (dnsforwardzone-*), переспрямовує запити до " +"налаштованих засобів обробки\n" +" (набору серверів DNS).\n" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" +"\n" +"ВИКОРИСТАННЯ СТРУКТУРОВАНИХ ПАРАМЕТРІВ ДЛЯ ОКРЕМИХ ТИПІВ\n" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" +"\n" +"Існує багато структурованих типів RR DNS, для яких дані DNS, що " +"зберігаються\n" +"на сервері LDAP, не є скалярним значенням, наприклад дані щодо IP-адресу " +"або\n" +"назву домену, а структурою даних, яка часто може бути складною. Прикладом\n" +"може бути запис LOC [RFC1876], який складається з багатьох обов’язкових і\n" +"необов’язкових частин (градусів, мінут, секунд широти і довготи, висоти\n" +"та похибки).\n" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" +"\n" +"Робота з такими записами DNS без помилки і введення некоректного значення\n" +"може бути складною. Модуль DNS надає у ваше розпорядження абстракцію над\n" +"цими необробленими записами і спосіб керування кожним з типів RR за\n" +"допомогою специфічних параметрів. Для кожного з підтримуваних типів\n" +"RR у модулі DNS передбачено стандартний параметр для роботи із\n" +"необробленими записами за допомогою формату --<тип_rr>-rec, наприклад,\n" +"--mx-rec та зі спеціальними параметрами для кожної із частин структури RR\n" +"за допомогою формату --<тип_rr>-<назва_частини>, наприклад --mx-preference\n" +"та --mx-exchanger.\n" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" +"\n" +"Під час додавання запису можна скористатися специфічними для RR параметрами\n" +"або стандартним параметром для необробленого значення. Втім, поєднувати\n" +"ці варіанти у одній дії із додавання не можна. Під час внесення змін до\n" +"наявного запису можна скористатися для зміни однієї частини запису DNS\n" +"новими специфічними параметрами RR, причому для визначення зміненого\n" +"значення буде використано стандартний варіант необробленого значення.\n" +"У наведеному нижче прикладі продемонстровано зміну пріоритетності запису\n" +"MX з 0 на 1 у записі без внесення змін до обмінника:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"\n" +"ПРИКЛАДИ:\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" +"\n" +" Додавання нової зони:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" +"\n" +" Додавання загальносистемних прав доступу, якими можна скористатися для " +"делегування привілеїв для окремих зон:\n" +" ipa dnszone-add-permission example.com\n" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" +"\n" +" Зміна зони таким чином, щоб дозволити динамічне оновлення для власних " +"записів вузлів у області EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" +"\n" +" Ця команда еквівалентна до такої команди:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" +"\n" +" Зміна зони таким чином, щоб дозволити перенесення зони лише для локальної " +"мережі:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" +"\n" +" Додавання нової реверсивної зони, вказаної за допомогою мережевої IP-" +"адреси:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" +"\n" +" Додати другий сервер назв для example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" +"\n" +" Додавання поштового сервера для example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" +"\n" +" Додавання ще одного запису за допомогою специфічних для запису MX " +"параметрів:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" +"\n" +" Додавання ще одного запису за допомогою інтерактивного режиму (у який " +"програма переходить\n" +" у відповідь на команди dnsrecord-add, dnsrecord-mod або dnsrecord-del без " +"параметрів):\n" +" ipa dnsrecord-add example.com @\n" +" Будь ласка, виберіть тип запису ресурсу DNS, який слід додати\n" +" Найпоширенішими типами для цього типу зон є: NS, MX, LOC\n" +"\n" +" Тип запису ресурсу DNS: MX\n" +" Пріоритетність MX: 30\n" +" Обмінник MX: mail3\n" +" Назва запису: example.com\n" +" Запис MX: 10 mail1, 20 mail2, 30 mail3\n" +" Запис NS: nameserver.example.com., nameserver2.example.com.\n" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" +"\n" +" Вилучення раніше доданого сервера назв з example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" +"\n" +" Додавання запису LOC для example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" +"\n" +" Додавання нового запису A для www.example.com, крім того, створення " +"зворотного\n" +" запису у відповідній зворотній зоні. У цьому випадку запис PTR «2» вказує " +"на\n" +" www.example.com буде створено у зоні 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" +"\n" +" Додавання нового запису PTR для www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" +"\n" +" Додавання нових записів SRV для серверів LDAP. Три чверті запитів мають\n" +" надсилатися до fast.example.com, а одна чверть — на slow.example.com.\n" +" Якщо жодна зі служб не буде доступною, перемкнутися на backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" +"\n" +" Для полегшення внесення змін можна скористатися інтерактивним режимом:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" Можливості внесення змін у певний запис не передбачено.\n" +" Поточний вміст запису DNS:\n" +"\n" +" Запис SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Змінити запис SRV «0 3 389 fast.example.com»? Так/Ні (типово «Ні»):\n" +" Змінити запис SRV «0 1 389 slow.example.com»? Так/Ні (типово «Ні»): y\n" +" Пріоритетність SRV [0]: (зберегти типове значення)\n" +" Вага SRV [1]: 2 (змінене значення)\n" +" Порт SRV [389]: (зберегти типове значення)\n" +" Призначення SRV [slow.example.com]: (зберегти типове значення)\n" +" Пропущено 1 запис SRV. Одночасно можна змінювати лише одне значення на тип " +"запису DNS.\n" +" Назва запису: _ldap._tcp\n" +" Запис SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 389 " +"slow.example.com\n" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" +"\n" +" Після внесення цих змін три п’ятих запитів має надсилатися до\n" +" fast.example.com, а дві п’ятих — до slow.example.com.\n" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" +"\n" +" Приклад інтерактивного режиму для команди dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" Не вказано параметр вилучення певного запису.\n" +" Вилучити усі? Так/Ні (типово «Ні»): (не вилучати усі записи)\n" +" Поточний вміст запису DNS:\n" +"\n" +" Запис A: 192.0.2.2, 192.0.2.3\n" +"\n" +" Вилучити запис A «192.0.2.2»? Так/Ні (типово «Ні»):\n" +" Вилучити запис A «192.0.2.3»? Так/Ні (типово «Ні»): y\n" +" Назва запису: www\n" +" Запис A: 192.0.2.2 (Запис A 192.0.2.3 вилучено)\n" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" +"\n" +" Показати зону example.com:\n" +" ipa dnszone-show example.com\n" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" +"\n" +" Знайти зону зі словом «example» у назві домену:\n" +" ipa dnszone-find example\n" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" +"\n" +" Знайти записи для ресурсів з «www» у назві у зоні example.com:\n" +" ipa dnsrecord-find example.com www\n" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" +"\n" +" Знайти записи A зі значенням 192.0.2.2 у зоні example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" +"\n" +" Показати записи для ресурсу www у зоні example.com\n" +" ipa dnsrecord-show example.com www\n" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" +"\n" +" Делегування зони sub.example до іншого сервера назв:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" +"\n" +" Вилучення зони example.com з усіма записами ресурсів:\n" +" ipa dnszone-del example.com\n" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" +"\n" +" Якщо налаштовано загальний переспрямовувач, усі запити, для яких цей сервер " +"не є\n" +" надійним (наприклад sub.example.com) не маршрутизуватимуться до загального\n" +" переспрямовувача.\n" +" Загальні налаштування переспрямовування можна перевизначати для окремих " +"зон.\n" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" +"\n" +" Семантика переспрямовування у IPA збігається із семантикою BIND і залежить\n" +" від типу зони:\n" +" * Основна зона: локальний BIND надає надійні відповіді для даних у " +"заданій\n" +" зоні (включено з надійними відповідями NXDOMAIN), а переспрямовування\n" +" стосуватиметься лише запитів щодо назв за межами (записами NS) зон, що\n" +" обслуговуються локально.\n" +"\n" +" * Зона переспрямовування: зона переспрямовування не містить надійних " +"даних. BIND\n" +" переспрямовує запити, на які не вдалося отримати відповіді з локального " +"кешу, до\n" +" налаштованих переспрямовувачів.\n" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" +"\n" +" Семантика параметра --forward-policy:\n" +" * none — вимкнути переспрямовування для вказаної зони.\n" +" * first — спрямувати усі запити до налаштованих переспрямовувачів. Якщо\n" +" це не спрацює, виконати перетворення за допомогою кореневих серверів " +"DNS.\n" +" * only — спрямувати усі запити до налаштованих переспрямовувачів. Якщо\n" +" це не спрацює, повернути повідомлення про помилку.\n" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" +"\n" +" Вимикання загального переспрямовування для вказаного піддерева:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" +"\n" +" За цих налаштувань усі запити щодо назв поза піддеревом example.com буде\n" +" спрямовано до загальних переспрямовувачів. Для назв у межах піддерева\n" +" example.com буде використано звичайну рекурсивну (тобто з переходом за\n" +" записами NS) процедуру визначення.\n" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" +"\n" +" Переспрямувати усі запити для зони external.example.com до іншого " +"переспрямовувача\n" +" з використанням правила «first» (надсилати запити до вибраного " +"переспрямовувача і,\n" +" якщо він не відповість, скористатися загальними кореневими серверами):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" +"\n" +" Змінити правила переспрямовування для external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" +"\n" +" Показати зону переспрямовування external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" +"\n" +" Показати список усіх зон переспрямовування:\n" +" ipa dnsforwardzone-find\n" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" +"\n" +" Вилучення зони переспрямовування external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" +"\n" +" Визначити адресу вузла за назвою, якщо адреса існує (додасть типовий\n" +" домен IPA, якщо домен не включено):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" +"\n" +"\n" +"ЗАГАЛЬНІ НАЛАШТУВАННЯ DNS\n" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" +"\n" +"Налаштування DNS, що передаються до скрипту командного рядка для " +"встановлення,\n" +"зберігаються у локальному файлі налаштувань на кожному з серверів IPA, де\n" +"налаштовано службу DNS. Ці локальні параметри можна перевизначити за " +"допомогою\n" +"загальних налаштувань, що зберігаються на сервері LDAP:\n" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" +"\n" +" Показати загальні налаштування DNS:\n" +" ipa dnsconfig-show\n" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" +"\n" +" Зміна загальних налаштувань DNS і встановлення списку загальних " +"переспрямовувачів:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" + +msgid "invalid IP network format" +msgstr "некоректний формат запису мережі IP" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "кожен з елементів ACL має бути відокремлено від інших крапкою з комою" + +msgid "invalid address format" +msgstr "некоректний формат адреси" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" +"очікуваний формат: <0-255> <0-255> <0-65535> " +"парна_кількість_шістнадцяткових_цифр_або_дефіс" + +msgid "algorithm value: allowed interval 0-255" +msgstr "значення алгоритму: дозволеним є інтервал від 0 до 255" + +msgid "flags value: allowed interval 0-255" +msgstr "значення прапорців: дозволеним є інтервал від 0 до 255" + +msgid "iterations value: allowed interval 0-65535" +msgstr "значення кількості ітерацій: дозволеним є інтервал від 0 до 65535" + +#, python-format +msgid "salt value: %(err)s" +msgstr "значення солі: %(err)s" + +msgid "invalid domain-name: not fully qualified" +msgstr "некоректна назва домену: назва не є повною" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "не можна використовувати шаблон назви домену (RFC 4592, розділ 4)" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" +"Не вдалося отримати відповідь на запит щодо зворотної зони DNS %(revdns)s " +"від жодного із серверів назв" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" +"Зворотна зона DNS %(revzone)s для IP-адреси %(addr)s не керується цим " +"сервером" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "Зони DNS %(zone)s не знайдено" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "IP-адресу %(ip)s вже призначено у домені %(domain)s." + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" +"Зворотний запис для IP-адреси %(ip)s вже існує у зворотній зоні %(zone)s." + +#, python-format +msgid "%s record" +msgstr "Запис %s" + +#, python-format +msgid "Raw %s records" +msgstr "Необроблені записи %s" + +#, python-format +msgid "%s Record" +msgstr "Запис %s" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(докладніше про це у RFC %s)" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "«%s» є обов’язковою частиною запису DNS" + +msgid "Invalid number of parts!" +msgstr "Некоректна кількість частин!" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "Тип RR DNS «%s» не підтримується додатком bind-dyndb-ldap" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" +"формат має бути встановлено так: \"%(format)s\", відповідно до %(rfcs)s" + +msgid "Create reverse" +msgstr "Створити зворотний запис" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "Не вдалося створити зворотний запис для «%(value)s»: %(exc)s" + +msgid "Exchanger" +msgstr "Обмінник" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" +"формат має бути таким:\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (широта у градусах)\n" +" d2: [0 .. 180] (довгота у градусах)\n" +" m1, m2: [0 .. 59] (мінути широти і довготи)\n" +" s1, s2: [0 .. 59.999] (секунди широти і довготи)\n" +" alt: [-100000.00 .. 42849672.95] крок — .01 (висота у метрах)\n" +" siz, hp, vp: [0 .. 90000000.00] (розміри, точність у метрах)\n" +" Див. RFC 1876." + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "«%(required)s» має бути порожнім, якщо вказано «%(name)s»" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" +"значенням прапорців (flags) має бути одна з літер, \"S\", \"A\", \"U\" або " +"\"P\"" + +msgid "Priority (order)" +msgstr "Пріоритетність (порядок)" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" +"Менше число — вища пріоритетність. Клієнтські частини намагатимуться " +"встановити зв’язок із ттим доступноми для них сервером, у якого нижче число " +"пріоритетності." + +msgid "Relative weight for entries with the same priority." +msgstr "Відносна вага для записів із однаковою пріоритетністю." + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "значення не відповідає формату «РРРРММДДГГХХСС»" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" +"Менше число — вища пріоритетність. Клієнтські частини намагатимуться " +"встановити зв’язок із тією доступною для них адресою, у якої нижче число " +"пріоритетності." + +msgid "Target Uniform Resource Identifier" +msgstr "Універсальний ідентифікатор ресурсу призначення" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "Універсальний ідентифікатор ресурсу призначення відповідно до RFC 3986" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "Сервер назв «%(host)s» не має відповідного запису A/AAAA" + +msgid "Managedby permission" +msgstr "Права доступу managedby" + +msgid "DNS is not configured" +msgstr "DNS не налаштовано" + +msgid "cannot be used when a zone is specified" +msgstr "не можна використовувати, якщо вказано зону" + +msgid "Only one zone type is allowed per zone name" +msgstr "Можна використовувати лише один тип зони на одну назву зони" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "Додано системні права доступу «%(value)s»" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "право доступу «%(value)s» вже існує" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "Вилучено системні права доступу «%(value)s»" + +msgid "DNS zone" +msgstr "зона DNS" + +msgid "DNS zones" +msgstr "зони DNS" + +msgid "DNS Zones" +msgstr "Зони DNS" + +msgid "DNS Zone" +msgstr "Зона DNS" + +msgid "Default time to live" +msgstr "Типовий час життя" + +msgid "Time to live for records without explicit TTL definition" +msgstr "Час життя записів без явного визначення TTL" + +msgid "setting Authoritative nameserver" +msgstr "встановлення основного сервера назв" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "Використовується лише для встановлення атрибута MNAME SOA." + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "Записи NS можна редагувати у апексі зони — «@». " + +msgid "" +msgstr "<усі сервери DNS IPA>" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "Не можна задавати сервер назв для зворотної зони відносно назви DNS" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Вилучено зону DNS «%(value)s»" + +msgid "is required" +msgstr "є обов’язковим" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Вимкнено зону DNS «%(value)s»" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Увімкнено зону DNS «%(value)s»" + +msgid "DNS resource record" +msgstr "Запис ресурсу DNS" + +msgid "DNS resource records" +msgstr "Записи ресурсів DNS" + +msgid "DNS Resource Records" +msgstr "Записи ресурсів DNS" + +msgid "DNS Resource Record" +msgstr "Запис ресурсу DNS" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "запис DS не повинен перебувати у апексі зони (RFC 4035, розділ 2.4)" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" +"дані поза зоною: назва запису має бути піддоменом зони або відносною назвою" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" +"не можна використовувати шаблон назви домену у полі власника записів " +"%(types)s (RFC 4592, розділ 4)" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" +"Зворотна зона %(name)s потребує точно %(count)d компонентів IP-адрес, надано " +"%(user_count)d" + +msgid "only master zones can contain records" +msgstr "записи можуть містити лише основні зони" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" +"можна використовувати лише один запис CNAME на назву (RFC 2136, розділ 1.1.5)" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" +"Записом CNAME не можна користуватися разом з будь-якими іншими записами, " +"окрім PTR (RFC 1034, розділ 3.6.2)" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" +"можна використовувати лише один запис DNAME на назву (RFC 6672, розділ 2.4)" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"запис NS не можна використовувати разом з записом %(type)s, якщо їх не " +"розташовано у запису кореня зони (RFC 2181, розділ 6.1)" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" +"Запис DS має існувати паралельно із записом NS (RFC 4592, розділ 4.6, RFC " +"4035, розділ 2.4)" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" +"Необроблене значення для запису DNS вже було встановлено за допомогою " +"параметра «%(name)s»" + +msgid "DNS zone root record cannot be renamed" +msgstr "Кореневий запис зони DNS не можна перейменовувати" + +msgid "DNS records can be only updated one at a time" +msgstr "Записи DNS можна оновлювати лише поодинці" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Вилучено запис «%(value)s»" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "Запис зони «%s» не можна вилучати" + +#, python-format +msgid "Found '%(value)s'" +msgstr "Знайдено «%(value)s»" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Вузла «%(host)s» не знайдено" + +msgid "DNS configuration options" +msgstr "Параметри налаштування DNS" + +msgid "DNS Global Configuration" +msgstr "Загальні налаштування DNS" + +msgid "IPA DNS version" +msgstr "Версія DNS IPA" + +msgid "IPA DNS servers" +msgstr "Сервери DNS IPA" + +msgid "List of IPA masters configured as DNS servers" +msgstr "Список основних серверів IPA, які налаштовано як сервери DNS" + +msgid "IPA DNSSec key master" +msgstr "Основний сервер ключів DNSSec IPA" + +msgid "IPA server configured as DNSSec key master" +msgstr "Сервер IPA налаштований як основний сервер ключів DNSSec" + +msgid "Global DNS configuration is empty" +msgstr "Загальні налаштування DNS є порожніми" + +msgid "DNS forward zone" +msgstr "Зона переспрямовування DNS" + +msgid "DNS forward zones" +msgstr "Зони переспрямовування DNS" + +msgid "DNS Forward Zones" +msgstr "Зони переспрямовування DNS" + +msgid "DNS Forward Zone" +msgstr "Зона переспрямовування DNS" + +msgid "Please specify forwarders." +msgstr "Будь ласка, вкажіть переспрямовувачі." + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Вилучено зону переспрямовування DNS «%(value)s»" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Вимкнено зону переспрямовування DNS «%(value)s»" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Увімкнено зону переспрямовування DNS «%(value)s»" + +msgid "IPA DNS records" +msgstr "Записи DNS IPA" + +msgid "IPA location records" +msgstr "Записи місць IPA" + +msgid "Update location and IPA server DNS records" +msgstr "Оновити записи місць та серверів DNS IPA" + +msgid "Result of the command" +msgstr "Результат виконання команди" + +msgid "Dry run" +msgstr "Тестовий запуск" + +msgid "Do not update records only return expected records" +msgstr "Не оновлювати записи, лише повернути список очікуваних записів" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Налаштування сервера DNS\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Керування налаштуваннями сервера DNS\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +" Показати налаштування певного сервера DNS:\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Оновити налаштування для вказаного сервера DNS:\n" +" ipa dnsserver-mod\n" + +msgid "DNS server" +msgstr "Сервер DNS" + +msgid "DNS servers" +msgstr "Сервери DNS" + +msgid "DNS Servers" +msgstr "Сервери DNS" + +msgid "DNS Server" +msgstr "Сервер DNS" + +msgid "DNS Server name" +msgstr "Назва сервера DNS" + +msgid "SOA mname override" +msgstr "Перевизначення mname SOA" + +msgid "SOA mname (authoritative server) override" +msgstr "Перевизначити mname SOA (довірений сервер)" + +msgid "Forwarders" +msgstr "Переспрямовувачі" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Окремі переспрямовувачі для серверів. Нетиповий порт можна вказати для " +"кожного переспрямовувача за допомогою стандартної конструкції «IP_АДРЕСА " +"port ПОРТ»" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Умовні правила переспрямування для окремого сервера. Встановіть значення " +"«none» для вимикання переспрямовувача загального рівня для цієї зони. Якщо " +"ви встановите це значення, умовні переспрямовувачі зони не братимуться до " +"уваги." + +msgid "Modify DNS server configuration" +msgstr "Змінити налаштування сервера DNS" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Змінено запис сервера DNS «%(value)s»" + +msgid "Search for DNS servers." +msgstr "Шукати сервери DNS." + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "встановлено відповідність %(count)d сервера DNS" +msgstr[1] "встановлено відповідність %(count)d серверів DNS" +msgstr[2] "встановлено відповідність %(count)d серверів DNS" + +msgid "IPA DNS Server is not installed" +msgstr "Сервер DNS IPA не встановлено" + +msgid "Display configuration of a DNS server." +msgstr "Показати налаштування сервера DNS." + +msgid "Add a new DNS server." +msgstr "Додати новий запис сервера DNS." + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Додано новий запис сервера DNS «%(value)s»" + +msgid "Delete a DNS server" +msgstr "Вилучити запис сервера DNS" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Вилучено сервер DNS «%(value)s»" + +msgid "REST API is not logged in." +msgstr "Вхід до програмного інтерфейсу REST не виконано." + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" +"Відповідь від програмного інтерфейсу REST CA, що не відповідає 2xx: " +"%(status)d. %(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "Не вдалося обмінятися даними з CMS" + +msgid "Response from CA was not valid JSON" +msgstr "Відповідь від CA не була коректним кодом JSON" + +msgid "Host-based access control commands" +msgstr "Команди керування доступом на основі вузлів" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Служби HBAC\n" +"\n" +"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" +"відповідати назві служби, з якою працює PAM.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову службу HBAC:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Змінити вже створену службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" +" службу FTP і щойно додану службу tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Вилучення служби HBAC:\n" +" ipa hbacsvc-del tftp\n" +"\n" + +msgid "HBAC services" +msgstr "Служби HBAC" + +msgid "HBAC Services" +msgstr "Служби HBAC" + +msgid "HBAC Service" +msgstr "Служба HBAC" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Додано службу HBAC «%(value)s»" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Вилучено службу HBAC «%(value)s»" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Змінено службу HBAC «%(value)s»" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "встановлено відповідність %(count)d служби HBAC" +msgstr[1] "встановлено відповідність %(count)d служб HBAC" +msgstr[2] "встановлено відповідність %(count)d служб HBAC" + +msgid "HBAC service group" +msgstr "група служб HBAC" + +msgid "HBAC service groups" +msgstr "Група служб HBAC" + +msgid "HBAC Service Groups" +msgstr "Група служб HBAC" + +msgid "HBAC Service Group" +msgstr "Група служб HBAC" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Додано групу служб HBAC «%(value)s»" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Вилучено групу служб HBAC «%(value)s»" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Змінено групу служб HBAC «%(value)s»" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "встановлено відповідність %(count)d групи служб HBAC" +msgstr[1] "встановлено відповідність %(count)d груп служб HBAC" +msgstr[2] "встановлено відповідність %(count)d груп служб HBAC" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" +"\n" +"Користувачі етапу\n" +"\n" +"Керування записами користувачів етапу.\n" +"\n" +"Записи користувачів етапу перебувають безпосередньо у контейнері:\n" +"\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" +"Користувач не може пройти розпізнавання за допомогою цих записів\n" +"(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" +"перетворення на активні записи.\n" +"\n" +"Записи активних користувачів є користувачами Posix, що перебувають\n" +"безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" +"Користувач може пройти розпізнавання за допомогою активних записів,\n" +"якщо для них передбачено реєстраційні дані\n" +"\n" +"Вилучені записи користувачів є записами користувачів Posix, що\n" +"перебувають безпосередньо у контейнері: \"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Користувачі не можуть проходити розпізнавання за допомогою цих\n" +"записів (навіть якщо записи містять реєстраційні дані)\n" +"\n" +"Контейнер користувачів етапу містить записи\n" +" - створені командами 'stageuser-add', які є користувачами Posix\n" +" - створені зовнішньою системою забезпечення\n" +"\n" +"Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" +" - RDN запису має значення 'uid'\n" +" - ipaUniqueID має значення 'autogenerate'\n" +"\n" +"У IPA передбачено підтримку широкого діапазону форматів імен користувачів,\n" +"але слід зважати на різноманітні обмеження, які можуть стосуватися " +"середовища,\n" +"у якому ви працюєте. Наприклад, імена користувачів, що починаються з цифри,\n" +"або імена користувачів, довжина яких перевищує певну довжину, можуть\n" +"призвести до проблем у деяких системах UNIX.\n" +"Для зміни формату, який дозволено інструментами IPA, скористайтеся командою\n" +"'ipa config-mod'.\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нового користувача етапу:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Додати користувача етапу з контейнера вилучених користувачів\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" + +msgid "Stage Users" +msgstr "Користувачі етапу" + +msgid "Stage User" +msgstr "Користувач етапу" + +msgid "stage user" +msgstr "користувач етапу" + +msgid "stage users" +msgstr "користувачі етапу" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Додано користувача етапу «%(value)s»" + +msgid "givenname is required" +msgstr "слід вказати ім’я" + +msgid "sn is required" +msgstr "слід вказати sn" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "не повинне перевищувати %(len)d символів у довжину" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Вилучено запис користувача етапу «%(value)s»" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Змінено запис користувача етапу «%(value)s»" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "встановлено відповідність %(count)d користувача" +msgstr[1] "встановлено відповідність %(count)d користувачів" +msgstr[2] "встановлено відповідність %(count)d користувачів" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Активувати користувача етапу «%(value)s»" + +msgid "Entry RDN is not 'uid'" +msgstr "RDN запису не належить до «uid»" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "У запису немає атрибута «%(attribute)s»" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "запис активного користувача із іменем «%(user)s» вже існує" + +#, python-format +msgid "Stage user %s activated" +msgstr "Активовано користувача етапу %s" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "Додати один або декілька сертифікатів запису користувача етапу" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Додано сертифікати до запису користувача етапу «%(value)s»" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Вилучити один або декілька сертифікатів запису користувача етапу" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Вилучено сертифікати із запису користувача етапу «%(value)s»" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" +"Додати новий псевдонім реєстраційного запису до запису користувача етапу" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Додано нові псевдоніми до запису користувача етапу «%(value)s»" + +msgid "Remove principal alias from the stageuser entry" +msgstr "Вилучити псевдонім реєстраційного запису із запису користувача етапу" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Вилучено псевдоніми із запису користувача етапу «%(value)s»" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" +"Додати одну або декілька прив’язок сертифікатів до запису користувача етапу." + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" +"Вилучити одну або декілька прив’язок сертифікатів із запису користувача " +"етапу." + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" +"\n" +"Топологія\n" +"\n" +"Керування топологією реплікації на домені рівня 1.\n" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" +"\n" +"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" +"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " +"із доменом дані\n" +"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" +" містяться дані для компонента сервера сертифікатів.\n" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" +"\n" +"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " +"Спосіб\n" +"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" +"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" +"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" +"керування виконується централізовано за допомогою команд «ipa topology*».\n" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" +"\n" +"Угоди представляються сегментами топології. Типово, сегмент топології\n" +"представляється 2 угодами реплікації — по одній для кожного напрямку, " +"наприклад\n" +"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" +"\n" +"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " +"суфікса,\n" +"скористайтеся такою командою:\n" +" ipa topologysuffix-verify $suffix\n" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +"\n" +"Приклади:\n" +" Знайти усі сервери IPA:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Знайти усі суфікси:\n" +" ipa topologysuffix-find\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Додати сегмент топології до суфікса «domain»:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Додати сегмент топології до суфікса «ca»:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" +"\n" +" Вивести список усіх сегментів топології у суфіксі «domain»:\n" +" ipa topologysegment-find domain\n" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" +"\n" +" Вивести список усіх сегментів топології у суфіксі «ca»:\n" +" ipa topologysegment-find ca\n" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" +"\n" +" Вилучити сегмент топології у суфіксі «domain»:\n" +" ipa topologysegment-del domain segment_name\n" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" +"\n" +" Вилучити сегмент топології у суфіксі «ca»:\n" +" ipa topologysegment-del ca segment_name\n" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" +"\n" +" Перевірити топологію суфікса «domain»:\n" +" ipa topologysuffix-verify domain\n" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +" Перевірити топологію суфікса «ca»:\n" +" ipa topologysuffix-verify ca\n" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "Керування топологією потребує мінімального рівня домену {0} " + +msgid "segment" +msgstr "сегмент" + +msgid "segments" +msgstr "сегменти" + +msgid "Topology Segments" +msgstr "Сегменти топології" + +msgid "Topology Segment" +msgstr "Сегмент топології" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "лівий вузол не є вузлом топології: %(leftnode)s" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "правий вузол не є вузлом топології: %(rightnode)s" + +msgid "left node and right node must not be the same" +msgstr "лівий і правий вузли повинні бути різними вузлами" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "у лівому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "у правому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "встановлено відповідність %(count)d сегмента" +msgstr[1] "встановлено відповідність %(count)d сегментів" +msgstr[2] "встановлено відповідність %(count)d сегментів" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Додано сегмент «%(value)s»" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Вилучено сегмент «%(value)s»" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Змінено сегмент «%(value)s»" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +msgid "left or right node has to be specified" +msgstr "слід вказати лівий або правий вузол" + +msgid "only one node can be specified" +msgstr "можна вказувати лише один вузол" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Оновлення реплікації для сегмента: надіслано запит щодо «%(pkey)s»." + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Зупиняємо реплікацію для сегмента: надіслано запит щодо «%(pkey)s»." + +msgid "suffixes" +msgstr "суфікси" + +msgid "Topology suffixes" +msgstr "Суфікси топології" + +msgid "Topology suffix" +msgstr "Суфікс топології" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "встановлено відповідність %(count)d суфікса топології" +msgstr[1] "встановлено відповідність %(count)d суфіксів топології" +msgstr[2] "встановлено відповідність %(count)d суфіксів топології" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Вилучено суфікс топології «%(value)s»" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Додано суфікс топології «%(value)s»" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Змінено суфікс топології «%(value)s»" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"Перевірити топологію реплікації для вказаного суфікса.\n" +"\n" +"Перевірки, які виконуються:\n" +" 1. перевірка того, чи не є топологія від’єднаною. Іншими словами, чи є\n" +" шляхи реплікації між усіма серверами.\n" +" 2. перевірка того, чи немає у сервера перевищення рекомендованої\n" +" кількості узгоджень реплікації.\n" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" +"Недостатні привілеї «write» до атрибута «krbLastPwdChange» запису «%s»." + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Групи вузлів.\n" +"\n" +"Керування групами вузлів. Корисні для застосування керування\n" +"до декількох вузлів на основі заснованого на вузлах керування\n" +"доступом (Host-based Access Control або HBAC).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " +"дужках):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Додавання групи вузлів як учасника іншої групи вузлів:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Вилучення вузла з групи вузлів:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показ списку групи вузлів:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Додавання керівника учасниками:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Вилучення керівника учасниками\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Вилучення групи вузлів:\n" +" ipa hostgroup-del baltimore\n" + +msgid "host groups" +msgstr "групи вузлів" + +msgid "Host Group" +msgstr "Група вузлів" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Додано групу вузлів «%(value)s»" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Мережеву групу з назвою «%s» вже створено. Групи вузлів і мережеві групи " +"мають спільний простір назв." + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Вилучено групу вузлів «%(value)s»" + +msgid "hostgroup" +msgstr "група вузлів" + +msgid "privileged hostgroup" +msgstr "привілейована група вузлів" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Змінено групу вузлів «%(value)s»" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "встановлено відповідність %(count)d групи вузлів" +msgstr[1] "встановлено відповідність %(count)d груп вузлів" +msgstr[2] "встановлено відповідність %(count)d груп вузлів" + +msgid "Add users that can manage members of this hostgroup." +msgstr "" +"Додати записи користувачів, які можуть керувати учасниками цієї групи вузлів." + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" +"Вилучити записи користувачів, які можуть керувати учасниками цієї групи " +"вузлів." + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Сховища\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Керування сховищами.\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" +"\n" +"Сховище — безпечне місце для зберігання ключа. Одне сховище\n" +"може містити лише один ключ. При архівуванні ключа до сховища,\n" +"наявний ключ (якщо такий існує) буде перезаписано.\n" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"За правами власності сховища поділяються на три категорії:\n" +"* приватні сховища користувачів\n" +"* сховища служб\n" +"* сховища спільного використання\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Сховища користувачів — це сховища, власником яких є конкретний\n" +"користувач. Приватними є сховища, власником яких є поточний\n" +"користувач. Власником сховища служби є певна служба. Сховища\n" +"спільного використання належать адміністратору, але можуть\n" +"використовуватися іншими користувачами або службами.\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"За механізмами захисту сховища поділяються на три\n" +"типи:\n" +"* стандартні сховища\n" +"* симетричні сховища\n" +"* асиметричні сховища\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"У стандартному сховищі для передавання і зберігання реєстраційних\n" +"даних використовуються безпечні механізми. Реєстраційні дані\n" +"може бути отримано лише користувачами, які мають доступ\n" +"до сховища.\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"Симетричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою пароля.\n" +"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"Асиметричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою відкритого ключа.\n" +"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Вивести список сховищ:\n" +" ipa vault-find\n" +" [--user <користувач>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Додати стандартне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type standard\n" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Додати симетричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type symmetric --password-file пароль.txt\n" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Додати асиметричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file відкритий_ключ.pem\n" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Показати сховище:\n" +" ipa vault-show <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Змінити опис сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --desc <опис>\n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" +"\n" +" Змінити тип сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старий пароль/закритий ключ]\n" +" [новий пароль/відкритий ключ]\n" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" +"\n" +" Змінити пароль до симетричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password <старий пароль>\n" +" --new-password <новий пароль>\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" +"\n" +" Змінити ключ асиметричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закритого ключа>\n" +" --public-key-file <файл нового відкритого ключа>\n" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Вилучити сховище:\n" +" ipa vault-del <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Вивести налаштування сховищ:\n" +" ipa vaultconfig-show\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архівувати дані до стандартного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Архівувати дані до симетричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" +" --password-file пароль.txt\n" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архівувати дані до асиметричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Отримати дані зі стандартного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Отримати дані з симетричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" +" --password-file password.txt\n" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Отримати дані з асиметричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів> --private-key-file private.pem\n" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Додати записи власників сховища:\n" +" ipa vault-add-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Додати записи учасників сховища:\n" +" ipa vault-add-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" Об’єкт контейнера сховищ.\n" +" " + +msgid "vaultcontainer" +msgstr "контейнер сховищ" + +msgid "vaultcontainers" +msgstr "контейнери сховищ" + +msgid "Vault Containers" +msgstr "Контейнери сховищ" + +msgid "Vault Container" +msgstr "Контейнер сховищ" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" +"Параметри служби, спільного використання та користувача не можна вказувати " +"одночасно" + +msgid "Host is not supported" +msgstr "Підтримки вузла не передбачено" + +msgid "KRA service is not enabled" +msgstr "Службу KRA не увімкнено" + +msgid "Deleted vault container" +msgstr "Вилучено контейнер сховищ" + +#, python-format +msgid "owner %s" +msgstr "власник %s" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Об’єкт сховища.\n" +" " + +msgid "vault" +msgstr "сховище" + +msgid "vaults" +msgstr "сховища" + +msgid "Vaults" +msgstr "Сховища" + +msgid "Vault" +msgstr "Сховище" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" +"Параметри служби, спільного використання та користувача не можна вказувати " +"одночасно" + +msgid "Add a vault." +msgstr "Додати сховище." + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Додано сховище «%(value)s»" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Вилучено сховище «%(value)s»" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "встановлено відповідність %(count)d сховища" +msgstr[1] "встановлено відповідність %(count)d сховищ" +msgstr[2] "встановлено відповідність %(count)d сховищ" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" +"Параметри служби, спільного використання та користувача не можна вказувати " +"одночасно" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Змінено сховище «%(value)s»" + +msgid "Vault configuration" +msgstr "Налаштування сховища" + +msgid "IPA KRA servers" +msgstr "Сервери KRA IPA" + +msgid "IPA servers configured as key recovery agents" +msgstr "" +"Сервери IPA, налаштовані як агенти відновлення ключів (key recovery agents)" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Дані архівовано до сховища «%(value)s»" + +msgid "Retrieve data from a vault." +msgstr "Отримати дані зі сховища." + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Отримано дані зі сховища «%(value)s»" + +msgid "No archived data." +msgstr "Немає архівованих даних." + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу KRA" + +msgid "netgroups" +msgstr "мережеві групи" + +msgid "Netgroups" +msgstr "Мережеві групи" + +msgid "Netgroup" +msgstr "Мережева група" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Додано групу мережеву групу «%(value)s»" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Групу вузлів з назвою «%s» вже створено. Групи вузлів і мережеві групи мають " +"спільний простір назв." + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Вилучено мережеву групу «%(value)s»" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Змінено мережеву групу «%(value)s»" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "встановлено відповідність %(count)d групи" +msgstr[1] "встановлено відповідність %(count)d груп" +msgstr[2] "встановлено відповідність %(count)d груп" + +msgid "One time password commands" +msgstr "Команди для одноразового пароля" + +msgid "OTP configuration options" +msgstr "Параметри налаштування OTP" + +msgid "OTP Configuration" +msgstr "Налаштування OTP" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Змінити пароль «%(value)s»" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Засоби звітування щодо стану можливості PKINIT Kerberos\n" +"\n" +"Звітування щодо того, увімкнено чи вимкнено PKINIT у Kerberos на основних " +"елементах IPA\n" +"\n" +"ПРИКЛАДИ:\n" +" Вивести список станів PKINIT для усіх основних елементів:\n" +" ipa pkinit-status\n" +"\n" +" Перевірити стан PKINIT на «ipa.example.com»:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" Вивести список усіх основних елементів IPA із вимкненим PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"Докладніші дані щодо підтримки PKINIT:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" + +msgid "pkinit" +msgstr "pkinit" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "PKINIT status" +msgstr "стан PKINIT" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "Визначає, увімкнено чи вимкнено PKINIT" + +msgid "Report PKINIT status on the IPA masters" +msgstr "Звіт щодо стану PKINIT на основних елементах IPA" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "Встановлено відповідність %(count)s сервера" +msgstr[1] "Встановлено відповідність %(count)s серверів" +msgstr[2] "Встановлено відповідність %(count)s серверів" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"Проксі-сервери RADIUS\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Керування проксі-серверами RADIUS.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"У IPA передбачено підтримку зовнішнього проксі-сервера RADIUS для\n" +"виконання розпізнавання OTP krb5. Це надає системі значної гнучкості\n" +"з метою інтеграції зі сторонніми службами розпізнавання.\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Додати новий сервер:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Знайти усі сервери, чиї запис містять рядок «example.com»:\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Перевірити налаштування:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Змінити реєстраційні дані:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Вилучити налаштування:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "invalid attribute name" +msgstr "некоректна назва атрибута" + +msgid "invalid port number" +msgstr "некоректний номер порту" + +msgid "RADIUS proxy server" +msgstr "Проксі-сервер RADIUS" + +msgid "RADIUS proxy servers" +msgstr "Проксі-сервери RADIUS" + +msgid "RADIUS Servers" +msgstr "Сервери RADIUS" + +msgid "RADIUS Server" +msgstr "Сервер RADIUS" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Додано проксі-сервер RADIUS «%(value)s»" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Вилучити проксі-сервер RADIUS «%(value)s»" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Змінено запис проксі-сервера RADIUS «%(value)s»" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "Встановлено відповідність %(count)d проксі-сервера RADIUS" +msgstr[1] "Встановлено відповідність %(count)d проксі-серверів RADIUS" +msgstr[2] "Встановлено відповідність %(count)d проксі-серверів RADIUS" + +msgid "A list of ACI values" +msgstr "Список значень ACI" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "type, filter, subtree і targetgroup є взаємовиключними" + +msgid "ACI prefix is required" +msgstr "Слід вказати префікс ACI" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"слід вказати хоча б одне з: type, filter, subtree, targetgroup, attrs або " +"memberof" + +msgid "filter and memberof are mutually exclusive" +msgstr "filter і memberof не можна використовувати разом" + +msgid "group, permission and self are mutually exclusive" +msgstr "group, permission і self не можна використовувати разом" + +msgid "One of group, permission or self is required" +msgstr "Слід вказати одне зі значень, group, permission або self" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Групи з назвою «%s» не існує" + +msgid "empty filter" +msgstr "порожній фільтр" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Синтаксична помилка: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "некоректне DN (%s)" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "Не знайдено ACI з назвою «%s»" + +msgid "ACI object." +msgstr "Об'єкт ACI." + +msgid "ACIs" +msgstr "ACI" + +msgid "ACI" +msgstr "ACI" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Створено ACI «%(value)s»" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Вилучено ACI «%(value)s»" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Змінено ACI «%(value)s»" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "встановлено відповідність %(count)d ACI" +msgstr[1] "встановлено відповідність %(count)d ACI" +msgstr[2] "встановлено відповідність %(count)d ACI" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI перейменовано на «%(value)s»" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" +"\n" +"Налаштування сервера\n" +"\n" +"Керування типовими значеннями, які використовує IPA, та деякими з\n" +"придатних до зміни параметрів.\n" +"\n" +"ЗАУВАЖЕННЯ:\n" +"\n" +"Тут зберігається значення параметра сповіщення щодо паролів\n" +"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" +"не використовується для сповіщення користувачів щодо завершення строку дії\n" +"пароля.\n" +"\n" +"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" +"інформування. Серед цих атрибутів:\n" +"\n" +"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" +" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" +" встановлення.\n" +"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" +" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" +"\n" +"Під час встановлення списку пріоритетності для користувачів SELinux може " +"виникнути\n" +"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" +"\n" +"Максимальна довжина назви вузла у Linux керується значенням\n" +"MAXHOSTNAMELEN у ядрі. Типовим значенням є 64. У деяких інших\n" +"операційних системах, наприклад у Solaris, можна використовувати у\n" +"назвах до 255 символів. Цей параметр надає гнучкості щодо довжини, але\n" +"у Linux його значення все одно обмежено максимальним можливим.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Показати основні налаштування сервера:\n" +" ipa config-show\n" +"\n" +" Показати всі параметри налаштування:\n" +" ipa config-show --all\n" +"\n" +" Змінити максимальну довжину імені користувача на 99 символів:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Змінити максимальну довжину назви вузла на 255 символів:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +"Збільшити типовий час і максимальне обмеження на розмір пошуку\n" +" сервера IPA:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Встановити типовий домен електронної пошти користувачів:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" +" працездатною:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Визначити пріоритетність користувачів у карті SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "must be at least 10" +msgstr "має бути принаймні 10" + +msgid "configuration options" +msgstr "параметри налаштування" + +msgid "Configuration" +msgstr "Налаштування" + +msgid "Maximum hostname length" +msgstr "Максимальна довжина назви вузла" + +msgid "IPA masters" +msgstr "Основні вузли IPA" + +msgid "List of all IPA masters" +msgstr "Список усіх основних вузлів IPA" + +msgid "Hidden IPA masters" +msgstr "Приховані основні сервери IPA" + +msgid "List of all hidden IPA masters" +msgstr "Список усіх прихованих основних серверів IPA" + +msgid "IPA master capable of PKINIT" +msgstr "Основний IPA з можливістю PKINIT" + +msgid "IPA master which can process PKINIT requests" +msgstr "Основний IPA, який може обробляти запити PKINIT" + +msgid "IPA CA servers" +msgstr "Сервери CA IPA" + +msgid "IPA servers configured as certificate authority" +msgstr "Сервери IPA, які налаштовано як центри сертифікації" + +msgid "Hidden IPA CA servers" +msgstr "Приховані сервери CA IPA" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Приховані сервери IPA, які налаштовано як служби сертифікації" + +msgid "IPA CA renewal master" +msgstr "Основних вузол відновлення CA IPA" + +msgid "Renewal master for IPA certificate authority" +msgstr "Основний сервер відновлення для центру сертифікації IPA" + +msgid "IPA servers configured as key recovery agent" +msgstr "Сервери IPA, які налаштовано як агенти відновлення ключів" + +msgid "Hidden IPA KRA servers" +msgstr "Приховані сервери KRA IPA" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "Приховані сервери IPA, які налаштовано як агенти відновлення ключів" + +msgid "Domain resolution order" +msgstr "Порядок визначення доменів" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" +"список доменів, відокремлених двокрапками, які використовуються для обробки " +"коротких назв" + +msgid "IPA servers configured as domain name server" +msgstr "Сервери IPA, які налаштовано як сервери назв доменів (DNS)" + +msgid "Hidden IPA DNS servers" +msgstr "Приховані сервери DNS IPA" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "Приховані сервери IPA, які налаштовано як сервери назв доменів" + +msgid "DNSec key master" +msgstr "Основний сервер ключів DNSec" + +msgid "Empty domain is not allowed" +msgstr "Не можна використовувати порожні домени" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Некоректна назва домену, «%(domain)s»: %(e)s" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "На сервері немає інформації щодо домену «%(domain)s»" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Вимкнений домен «%(domain)s» не можна використовувати" + +msgid "The group doesn't exist" +msgstr "Такої групи не існує" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "не можна використовувати атрибут «%s»" + +msgid "May not be empty" +msgstr "Не може бути порожнім" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "Типовий атрибут %(obj)s, %(attr)s, не буде дозволено!" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" +"Мало бути вказано список користувачів SELinux, записи якого відокремлено " +"символом $" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "Користувач SELinux «%(user)s» є некоректним: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" +"Типового користувача типової карти користувачів SELinux немає у порядковому " +"списку" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Групи користувачів\n" +"\n" +"Керування групами користувачів, групами або службами. Типово нові групи є " +"групами POSIX. Ви можете\n" +"додати параметр --nonposix до команди group-add з метою позначення нової\n" +"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " +"group-mod\n" +"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" +"перетворювати на групи не-POSIX.\n" +"\n" +"Кожна група повинна мати опис.\n" +"\n" +"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " +"підтримку\n" +"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" +"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" +"таку не вказано.\n" +"\n" +"\n" +"Учасниками груп можуть бути користувачі, інші групи і служби Kerberos. У\n" +"середовищах POSIX як учасників груп можна бути бачити лише користувачів, " +"але\n" +"для керування у межах IPA може бути використано вкладені групи і групи\n" +"служб.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Додавання нової групи не-POSIX:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Перетворити групу не-POSIX на групу posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Вилучення групи:\n" +" ipa group-del unixadmins\n" +"\n" +" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Додати список користувачів до групи \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Додавання служб Kerberos до групи «printer admins»:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Вилучення користувача з групи \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показати інформацію щодо іменованої групи.\n" +" ipa group-show localadmins\n" +"\n" +"Керівниками учасників груп є користувачі або групи, які можуть додавати " +"учасників\n" +"до групи або вилучати учасників з групи.\n" +"\n" +" Дозволити користувачу «test2» додавати або вилучати учасників з групи " +"«localadmins»:\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Відкликати права керування учасниками для користувача «test2» з " +"«localadmins»:\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" +"користувачів з довірених доменів до локальних груп POSIX з метою\n" +"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" +"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" +"слід пізніше включити до одної з груп POSIX.\n" +"\n" +"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" +"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" +"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" +"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" +"допомогою використання Загального каталогу довіреного домену.\n" +"\n" +"Приклад:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" +"відповідної локальної групи POSIX:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" +"групи ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " +"визначити\n" +"їхні SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "groups" +msgstr "групи" + +msgid "User Group" +msgstr "Група користувачів" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Додано групу «%(value)s»" + +msgid "gid cannot be set for external group" +msgstr "Не можна встановлювати gid для зовнішньої групи" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Вилучено групу «%(value)s»" + +msgid "privileged group" +msgstr "привілейована група" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Змінено групу «%(value)s»" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "встановлено відповідність %(count)d групи" +msgstr[1] "встановлено відповідність %(count)d груп" +msgstr[2] "встановлено відповідність %(count)d груп" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Виконати дію з перевірки зовнішніх учасників без встановленої підтримки " +"Samba 4 неможливо. Переконайтеся, що вами встановлено на сервері підпакунок " +"IPA server-trust-ad." + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без налаштовування власного домену не можна виконувати дію з приєднання. " +"Спочатку запустіть ipa-adtrust-install на сервері IPA." + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Від’єднати групу «%(value)s» від користувача «%(value)s»" + +msgid "not allowed to modify user entries" +msgstr "заборонено змінювати записи користувачів" + +msgid "not allowed to modify group entries" +msgstr "заборонено змінювати записи груп" + +msgid "Not a managed group" +msgstr "Не є керованою групою" + +msgid "Add users that can manage members of this group." +msgstr "Додати записи користувачів, які можуть керувати учасниками цієї групи." + +msgid "Remove users that can manage members of this group." +msgstr "" +"Вилучити записи користувачів, які можуть керувати учасниками цієї групи." + +msgid "" +"\n" +"Permissions\n" +msgstr "" +"\n" +"Права доступу\n" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" +"\n" +"Запис правил доступу уможливлює точне делегування прав. Запис прав доступу\n" +"є зручною для читання обгорткою навколо правила керування доступом 389-ds\n" +"або інструкції (ACI).\n" +"Право доступу надає право виконувати специфічне завдання, зокрема додавання\n" +"запису користувача, внесення зміни до групи тощо.\n" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"Запис прав доступу не може містити інших прав доступу.\n" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* Права доступу надають можливість читати, записувати, вилучати, шукати або\n" +" порівнювати.\n" +"* Привілеї поєднують подібні права доступу (наприклад усі права доступу,\n" +" потрібні для додавання запису користувача).\n" +"* Роль надає набір привілеїв користувачам, групам, вузлам або групам " +"вузлів.\n" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" +"\n" +"Запис права доступу складається з декількох різних частин:\n" +"\n" +"1. Назви запису права доступу.\n" +"2. Призначення права доступу.\n" +"3. Права, які надаються записом.\n" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"Права визначають список дій, які можна виконувати. Запис прав може\n" +"бути один або може бути декілька записів з такого набору:\n" +"1. write - запис одного або декількох атрибутів\n" +"2. read - читання одного або декількох атрибутів\n" +"3. search - пошук одного або декількох атрибутів\n" +"4. compare - порівняння одного або декількох атрибутів\n" +"5. add - додавання нового запису до ієрархії\n" +"6. delete - вилучення наявного запису\n" +"7. all - надати усі права доступу\n" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" +"\n" +"Зауважте відмінність між атрибутами і записами. Права доступу є " +"незалежними,\n" +"отже можливість додавання запису користувача не означає, що цей запис " +"згодом\n" +"буде придатним до редагування.\n" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" +"\n" +"Передбачено декілька можливих призначень:\n" +"1. subtree: DN; право доступу застосовується до піддерева DN\n" +"2. target filter: фільтр LDAP\n" +"3. target: DN з можливими символами-замінниками, що визначає записи, яких " +"стосуються права доступу\n" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" +"\n" +"Крім того, передбачено вказані нижче параметри.\n" +"Встановлення одного з цих параметрів призводить до встановлення відповідних " +"атрибутів.\n" +"1. type: тип об’єкта (користувач, група тощо); встановлює фільтрування за " +"піддеревом (subtree) та фільтрування за призначенням (target filter).\n" +"2. memberof: застосовувати до учасників групи; встановлює фільтр за " +"призначенням (target filter).\n" +"3. targetgroup: надає доступ до внесення змін до певної групи (зокрема, " +"доступ до\n" +" надання можливості керування участю у групі); встановлює призначення " +"(target).\n" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" +"\n" +"Керовані права доступу\n" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" +"\n" +"Права доступу, які типово встановлюються разом з IPA, можуть бути\n" +"так званими «керованим» правами доступу. Такі права доступу мають\n" +"типовий набір атрибутів, до яких вони застосовуються. Втім, адміністратор\n" +"може додавати або вилучати окремі атрибути набору.\n" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"Вилучення або перейменування керованих прав доступу, а також зміну " +"призначення\n" +"таких прав, заборонено.\n" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" +"\n" +" Додати право доступу до створення записів користувачів:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +" Додати право доступу, яке надає можливість керувати участю у групах:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" + +msgid "must be enclosed in parentheses" +msgstr "слід брати у дужки" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "«%s» не є об’єктним типом" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "«%s» не є коректним типом прав доступу" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Застаріло; користуйтеся %s" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "Не можна змінювати чи вилучати права доступу з невідомим прапорцем %s" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "Права доступу SYSTEM не можна змінювати чи вилучати" + +#, python-format +msgid "Entry %s not found" +msgstr "Запису %s не знайдено" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "ACI для прав доступу %(name)s у %(dn)s не знайдено " + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" +"не можна одразу вказувати повне фільтрування за призначенням та фільтрування " +"за додатковими параметрами призначення" + +#, python-format +msgid "option was renamed; use %s" +msgstr "назву параметра змінено; користуйтеся новою назвою — %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "Не можна одночасно використовувати %(old_name)s і %(new_name)s" + +#, python-format +msgid "%s: group not found" +msgstr "%s: групи не знайдено" + +msgid "target and targetgroup are mutually exclusive" +msgstr "не можна одночасно використовувати target і targetgroup" + +msgid "subtree and type are mutually exclusive" +msgstr "не можна одночасно використовувати subtree і type" + +msgid "Bad search filter" +msgstr "Помилковий фільтр пошуку" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Запису %s не існує" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" +"має бути вказано хоча б один специфікатор запису призначення (наприклад " +"target, targetfilter, attrs)" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Додано права доступу «%(value)s»" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "не можна одразу вказувати attrs та атрибути включення" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "Не вдалося зберегти ACI прав доступу до %s" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Вилучено права доступу «%(value)s»" + +msgid "cannot delete managed permissions" +msgstr "неможливо вилучити керовані права доступу" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI права доступу %s не знайдено" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Змінено права доступу «%(value)s»" + +msgid "cannot rename managed permissions" +msgstr "неможливо перейменувати керовані права доступу" + +msgid "not modifiable on managed permissions" +msgstr "не можна змінювати для керованих прав доступу" + +msgid "only available on managed permissions" +msgstr "доступне лише для керованих прав доступу" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "не можна одразу вказувати attrs та атрибути включення або виключення" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" +"не можна встановлювати типу прив’язки для прав доступу, які пов’язано з " +"привілеєм" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "встановлено відповідність %(count)d запису" +msgstr[1] "встановлено відповідність %(count)d записів" +msgstr[2] "встановлено відповідність %(count)d записів" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Жетони OTP\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Керування жетонами OTP.\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " +"розпізнавання.\n" +"За допомогою цього коду уможливлюється керування жетонами OTP.\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Додати новий жетон:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Перевірити жетон:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" +"\n" +" Змінити постачальника:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Вилучити жетон:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "OTP token" +msgstr "Жетон OTP" + +msgid "OTP tokens" +msgstr "Жетони OTP" + +msgid "OTP Tokens" +msgstr "Жетони OTP" + +msgid "OTP Token" +msgstr "Жетон OTP" + +msgid "URI" +msgstr "URI" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Додано жетон OTP «%(value)s»" + +msgid "cannot be empty" +msgstr "не може бути порожнім" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Вилучено жетон OTP «%(value)s»" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Змінено жетон OTP «%(value)s»" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "встановлено відповідність %(count)d жетона OTP" +msgstr[1] "встановлено відповідність %(count)d жетони OTP" +msgstr[2] "встановлено відповідність %(count)d жетонів OTP" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" +"\n" +"Правила sudo\n" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" +"\n" +"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +"повноваження певним користувачам (або групам користувачів) на виконання\n" +"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +"користувача, зберігаючи водночас журнал виконання команд та\n" +"аргументів.\n" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +" Users: користувачі або групи, які можуть викликати sudo.\n" +" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" +" Allow Command: специфічні команди, які можна виконувати за допомогою " +"sudo.\n" +" Deny Command: специфічні команди, які не можна виконувати за допомогою " +"sudo.\n" +" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +"команди.\n" +" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +"виконання команд.\n" +" Options: різноманітні параметри sudoers, які можуть змінити поведінку " +"sudo.\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"До правила sudo можна додати порядок, який керуватиме порядком\n" +"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +"Порядок визначається числовим індексом, який не повинен повторюватися.\n" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" +"\n" +"У IPA передбачено визначений binddn для використання з sudo, який " +"розташовано у\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" +"\n" +" Створити правило:\n" +" ipa sudorule-add readfiles\n" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" +"\n" +" Додати об’єкт команди sudo і записати його як дозволену команду до " +"правила:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" +"\n" +" Додати запис вузла до правила:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" +"\n" +" Додати запис користувача до правила:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" +"\n" +" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" +" ipa sudorule-add defaults\n" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +" Встановити типовий варіант дій для sudo:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" +"\n" +" Встановити переходи типу і ролі SELinux на правило:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" + +msgid "this option has been deprecated." +msgstr "цей параметр вважається застарілим." + +msgid "sudo rules" +msgstr "правила sudo" + +msgid "Sudo Rules" +msgstr "Правила Sudo" + +msgid "Sudo Rule" +msgstr "Правило sudo" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"порядковий номер повинен мати унікальне значення (%(order)d вже використано " +"для %(rule)s)" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Додано правило sudo «%(value)s»" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Вилучено правило sudo «%(value)s»" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Змінено правило sudo «%(value)s»" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"Значенням категорії %(type)s не можна встановлювати «all», якщо існують " +"дозволені %(objects)s" + +msgid "users" +msgstr "користувачі" + +msgid "command" +msgstr "команда" + +msgid "commands" +msgstr "команди" + +msgid "runAs user" +msgstr "користувач, від імені якого виконуватиметься" + +msgid "runAs users" +msgstr "користувачі, від імені яких виконуватиметься" + +msgid "group runAs" +msgstr "група, від імені якої виконуватиметься" + +msgid "runAs groups" +msgstr "групи, від імені яких виконуватиметься" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "встановлено відповідність %(count)d правила sudo" +msgstr[1] "встановлено відповідність %(count)d правил sudo" +msgstr[2] "встановлено відповідність %(count)d правил sudo" + +msgid "commands cannot be added when command category='all'" +msgstr "не можна додавати команди, якщо категорія команд=«all»" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" +"не можна додавати записи користувачів, якщо категорія запуску від імені " +"користувачів або запуску від імені груп=«all»" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "Не можна вказувати «%(name)s» як ім’я користувача у записі RunAsUser" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "Назва групи «%(name)s» є неприйнятною для RunAsUser" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "Назва групи «%(name)s» є неприйнятною для RunAsGroup" + +msgid "commands for controlling sudo configuration" +msgstr "команди керування налаштуванням sudo" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" +"\n" +"Команди sudo\n" +"\n" +"Команди, використані як будівельні блоки для sudo\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створення запису команди\n" +" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" +"\n" +" Вилучення команди\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" + +msgid "sudo command" +msgstr "команда sudo" + +msgid "sudo commands" +msgstr "команди sudo" + +msgid "Sudo Commands" +msgstr "Команди sudo" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Додано команду sudo «%(value)s»" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Вилучено команду sudo «%(value)s»" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Змінено команду sudo «%(value)s»" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "встановлено відповідність %(count)d команди sudo" +msgstr[1] "встановлено відповідність %(count)d команд sudo" +msgstr[2] "встановлено відповідність %(count)d команд sudo" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" +"\n" +"Групи команд sudo\n" +"\n" +"Керування групами команд sudo.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову групу команд sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Вилучити групу команд sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показ групи команд sudo:\n" +" ipa sudocmdgroup-show admincmds\n" + +msgid "sudo command group" +msgstr "група команд sudo" + +msgid "sudo command groups" +msgstr "групи команд sudo" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Додано групу команд sudo «%(value)s»" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Вилучено групу команд sudo «%(value)s»" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Змінено групу команд sudo «%(value)s»" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "встановлено відповідність %(count)d групи команд sudo" +msgstr[1] "встановлено відповідність %(count)d груп команд sudo" +msgstr[2] "встановлено відповідність %(count)d груп команд sudo" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Домени області\n" +"\n" +"Керування списком доменів, пов’язаних з областю IPA.\n" +"\n" +"Цей список є корисним для контролерів доменів з інших областей, які\n" +"мають встановити відносини довіри із цією областю IPA. Цим контролерам\n" +"потрібні дані щодо того, які запити слід переспрямовувати до KDC цієї\n" +"області IPA.\n" +"\n" +"Автоматичне керування: домен автоматично додається до списку доменів\n" +"області, коли створюється нова зона DNS, керована IPA. Те саме стосується\n" +"вилучення.\n" +"\n" +"Керована ззовні DNS: домени, які не керуються у DNS сервера IPA, має бути\n" +"вручну додано до списку за допомогою команди ipa realmdomains-mod.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Показати поточний список доменів області:\n" +" ipa realmdomains-show\n" +"\n" +" Замірити список доменів області:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Додати домен до списку доменів області:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Вилучити домен зі списку доменів області:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" + +msgid "Realm domains" +msgstr "Домени області" + +msgid "Realm Domains" +msgstr "Домени області" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" +"\n" +" Внесення змін до доменів області\n" +"\n" +" Перевірка DNS: при додаванні домену до списку вручну типово\n" +" виконується перевірка DNS. Вона дає дані щодо прив'язки домену\n" +" до області IPA за рахунок перевірки того, чи містить запис TXT домену у\n" +" _kerberos TXT назву області IPA. Цю перевірку можна обійти, вказавши\n" +" параметр --force.\n" +"\n" +" Вилучення: коли вилучається домен області, який мав відповідну зону\n" +" DNS керовану IPA, також автоматично вилучається відповідний запис\n" +" TXT у зоні у _kerberos. Інші записи у зоні та сама зона лишаються\n" +" незмінними.\n" +" " + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"Запис зони DNS для кожного realmdomain має містити записи SOA або NS. Для %s " +"таких записів не виявлено" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "Вказані нижче домени не належать до цієї області: %(domains)s" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"Не вдалося виявити область таких доменів: %(domains)s. Якщо ці домени " +"належать до цієї області, будь ласка, створіть запис TXT _kerberos, що " +"міститиме «%(realm)s», на кожному з них." + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"Параметр --domain не можна використовувати разом із параметрами --add-domain " +"і --del-domain. Скористайтеся параметром --domain для визначення усього " +"списку доменів області явним чином. Щоб додати або вилучити окремі домени, " +"скористайтеся параметрами --add-domain/del-domain." + +msgid "IPA server domain cannot be omitted" +msgstr "Домен сервера IPA не можна пропускати" + +msgid "IPA server domain cannot be deleted" +msgstr "Домен сервера IPA не можна вилучати" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" +"\n" +"Повернути дані щодо поточного розпізнаного профілю\n" +"\n" +"Команда визначення профілю повертає дані щодо того, як\n" +"отримати більше даних про профіль, розпізнаний для\n" +"цього запиту. Дані:\n" +"\n" +" * тип об’єкта\n" +" * команда для отримання подробиць щодо об’єкта\n" +" * аргументи та параметри, які слід передати команді\n" +"\n" +"Дані повертаються у форматі словника. Нижче, як приклад,\n" +"наведено виведення у форматі «ключ: значення».\n" +"\n" +"Приклади:\n" +"\n" +" Пошук від імені користувача IPA:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Пошук від імені користувача довіреного домену:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Пошук від імені вузла:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Пошук від імені служби Kerberos:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" + +msgid "Describe currently authenticated identity." +msgstr "Описати поточний розпізнаний профіль." + +msgid "Object class name" +msgstr "Назва класу об’єктів" + +msgid "Function to get details" +msgstr "Функція, подробиці щодо якої слід отримати" + +msgid "Arguments to details function" +msgstr "Аргументи до функції details" + +msgid "Cannot query Directory Manager with API" +msgstr "" +"Не вдалося опитати засіб керування каталогом за допомогою програмного " +"інтерфейсу" + +msgid "kerberos ticket policy settings" +msgstr "параметри правил квитків kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Правила квитків Kerberos" + +msgid "OTP max life" +msgstr "Макс. строк дії OTP" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка ключа OTP (у секундах)" + +msgid "OTP max renew" +msgstr "Макс. вік поновлення OTP" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка ключа OTP (у " +"секундах)" + +msgid "RADIUS max life" +msgstr "Макс. строк дії RADIUS" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка RADIUS (у секундах)" + +msgid "RADIUS max renew" +msgstr "Макс. вік поновлення RADIUS" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " +"секундах)" + +msgid "PKINIT max life" +msgstr "Макс. строк дії PKINIT" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка PKINIT (у секундах)" + +msgid "PKINIT max renew" +msgstr "Макс. вік поновлення PKINIT" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " +"секундах)" + +msgid "Hardened max life" +msgstr "Макс. строк дії Hardened" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка Hardened (у секундах)" + +msgid "Hardened max renew" +msgstr "Макс. вік поновлення Hardened" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка Hardened (у " +"секундах)" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "Не вдалося прочитати правила щодо квитків для %s" + +msgid "Default ticket policy could not be read" +msgstr "Не вдалося прочитати типові правила щодо квитків" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" +"Не вдалося прочитати фільтр походження (originfilter) UPG Definition. " +"Переконайтеся, що у вас є відповідні права доступу." + +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"Місця IPA\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Робота з місцями DNS\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Знайти усі місця:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Показати певне місце:\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Додати запис місця:\n" +" ipa location-add location --description 'My location'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Вилучити запис місця:\n" +" ipa location-del location\n" + +msgid "location" +msgstr "місце" + +msgid "locations" +msgstr "місця" + +msgid "IPA Locations" +msgstr "Місця IPA" + +msgid "IPA Location" +msgstr "Місце IPA" + +msgid "Location name" +msgstr "Назва місця" + +msgid "IPA location name" +msgstr "Назва місця IPA" + +msgid "IPA Location description" +msgstr "Опис місця IPA" + +msgid "Servers" +msgstr "Сервери" + +msgid "Servers that belongs to the IPA location" +msgstr "Сервери, що належать до запису місця IPA" + +msgid "Advertised by servers" +msgstr "Повідомлено серверами" + +msgid "List of servers which advertise the given location" +msgstr "Вивести список серверів, які повідомляють про вказане місце" + +msgid "Add a new IPA location." +msgstr "Додати новий запис місця IPA." + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Додано запис місця IPA «%(value)s»" + +msgid "Delete an IPA location." +msgstr "Вилучити місце IPA." + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Вилучено запис місця IPA «%(value)s»" + +msgid "IPA Server" +msgstr "Сервер IPA" + +msgid "Modify information about an IPA location." +msgstr "Змінити дані щодо місця IPA." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Змінено запис місця IPA «%(value)s»" + +msgid "Search for IPA locations." +msgstr "Шукати місця IPA." + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "встановлено відповідність %(count)d місця IPA" +msgstr[1] "встановлено відповідність %(count)d місць IPA" +msgstr[2] "встановлено відповідність %(count)d місць IPA" + +msgid "Display information about an IPA location." +msgstr "Показати дані щодо місця IPA." + +msgid "Servers in location" +msgstr "Сервери у місці" + +msgid "" +"\n" +"API Schema\n" +msgstr "" +"\n" +"Схема API\n" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"Надає можливості інтроспекції програмного інтерфейсу.\n" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Показати подробиці щодо user-find:\n" +" ipa command-show user-find\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Знайти параметри user-find:\n" +" ipa param-find user-find\n" + +msgid "Name" +msgstr "Назва" + +msgid "Documentation" +msgstr "Документація" + +msgid "Exclude from" +msgstr "Виключити з" + +msgid "Include in" +msgstr "Включити до" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "Результати мають містити лише атрибут основного ключа («%s»)" + +msgid "Help topic" +msgstr "Тема довідки" + +msgid "Version" +msgstr "Версія" + +msgid "Parameters" +msgstr "Параметри" + +msgid "Method of" +msgstr "Метод" + +msgid "Method name" +msgstr "Назва методу" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: не знайдено %(oname)s" + +msgid "Display information about a command." +msgstr "Показати інформацію щодо команди." + +msgid "Search for commands." +msgstr "Шукати команди." + +msgid "Return command defaults" +msgstr "Повернути типові параметри команди" + +msgid "Display information about a class." +msgstr "Показати дані щодо класу." + +msgid "Search for classes." +msgstr "Шукати класи." + +msgid "Display information about a help topic." +msgstr "Показати дані щодо теми довідки." + +msgid "Search for help topics." +msgstr "Шукати у темах довідки." + +msgid "Required" +msgstr "Обов’язкове" + +msgid "Multi-value" +msgstr "Багато значень" + +msgid "Always ask" +msgstr "Завжди питати" + +msgid "CLI metavar" +msgstr "Метазмінна CLI" + +msgid "CLI name" +msgstr "Назва CLI" + +msgid "Confirm (password)" +msgstr "Підтвердження (пароль)" + +msgid "Default" +msgstr "Типовий" + +msgid "Default from" +msgstr "Типовий з" + +msgid "Label" +msgstr "Мітка" + +msgid "Convert on server" +msgstr "Перетворити на сервері" + +msgid "Option group" +msgstr "Група варіантів" + +msgid "Sensitive" +msgstr "З врахуванням" + +msgid "Positional argument" +msgstr "Позиційний аргумент" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(metaobject)s: не знайдено %(oname)s" + +msgid "Display information about a command parameter." +msgstr "Показати інформацію щодо параметра команди." + +msgid "Search command parameters." +msgstr "Шукати параметри команди." + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(command_name)s: не знайдено %(oname)s" + +msgid "Display information about a command output." +msgstr "Показати інформацію щодо даних, які виводить команда." + +msgid "Search for command outputs." +msgstr "Шукати за даними, які виводить команда." + +msgid "Store and provide schema for commands and topics" +msgstr "Збереження і надання схеми для команд і тем" + +msgid "Fingerprint of schema cached by client" +msgstr "Відбиток схеми, кешований клієнтом" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"=======\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +"Додаток DNA у 389-ds розподілятиме ідентифікатори на основі діапазонів,\n" +"налаштованих для локального домену. У поточній версії додаток DNA *не може*\n" +"переналаштуватися на основі локальних діапазонів, встановлених цим\n" +"сімейством команд.\n" +"\n" +"Для використання нового локального діапазону до налаштувань додатка DNA\n" +"слід внести зміни вручну. Зокрема, слід змінити атрибут dnaNextRange " +"'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' так, щоб\n" +"він відповідав новому діапазону.\n" +"=======\n" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" +"\n" +"Діапазони ідентифікаторів\n" +"\n" +"Керування діапазонами ідентифікаторів, використаних для відображення\n" +"ідентифікаторів POSIX на SID, і навпаки.\n" +"\n" +"За допомогою цієї програми можна керувати обома типами діапазонів " +"ідентифікаторів:\n" +"\n" +" - діапазони ідентифікаторів локального домену\n" +" - діапазони ідентифікаторів довірених віддалених доменів\n" +"\n" +"Обидва типи мають такі спільні атрибути:\n" +"\n" +" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" +" - range-size: розмір діапазону\n" +"\n" +"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " +"ідентифікатори\n" +"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" +"\n" +"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" +" - rid-base: перший RID(*) відповідного діапазону RID\n" +" - secondary-rid-base: перший RID вторинного діапазону RID\n" +"\n" +"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" +" - rid-base: перший RID відповідного діапазону RID\n" +" - dom_sid: SID довіреного домену\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" +"\n" +"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" +"ідентифікаторів слід вказати SID домену.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" +"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" +"довіреного домену.\n" +"\n" +"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" +"значеннями:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" +"13999999. Отже RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" +"\n" +"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" +"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" +"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" +"RID.\n" +"\n" +" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"Дані з діапазонів ідентифікаторів локального домену використовуються\n" +"сервером IPA на внутрішньому рівні для призначення SID користувачам і " +"групам\n" +"IPA. SID буде збережено у об’єктах користувача або групи.\n" +"\n" +"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" +"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" +"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " +"1000007.\n" +"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" +"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" +"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" +"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" +"того, щоб повністю позбутися конфліктів.\n" +"\n" +"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " +"слід\n" +"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " +"RID,\n" +"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" +"base\n" +"або secondary-rid-base, відповідно, і додати base-id.\n" +"\n" +"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" +"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" +"для локального домену буде створено під час встановлення або оновлення\n" +"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" +"створено разом з записом довіри командою «ipa trust-add ...».\n" +"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" +"\n" +"ВИПАДКИ ВИКОРИСТАННЯ:\n" +"\n" +" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" +"\n" +" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" +" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" +" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" +"\n" +" Додавання додаткового діапазону ідентифікаторів для локального домену\n" +"\n" +" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " +"додатком\n" +" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" +" POSIX, має бути створено новий діапазон для додавання нових " +"користувачів\n" +" та груп. (У поточній версії між цим командним інтерфейсом і додатком " +"DNA\n" +" немає безпосереднього зв’язку, але у майбутній версії може бути " +"передбачено\n" +" можливість внесення змін і до налаштувань додатка DNS.)\n" +"\n" +"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" +"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" +"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" +"файловій системі і використовуються для керування доступом, можлива " +"ситуація,\n" +"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" +"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" +"у іншому домені.\n" +"\n" +"(*) RID типово є останнім цілим числом SID користувача або групи, перед " +"якими\n" +"має бути вказано SID домену. Наприклад, якщо SID домену " +"S-1-5-21-123-456-789, а\n" +"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " +"користувача\n" +"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" +"використовуються для користувачів і груп.\n" + +msgid "ID Ranges" +msgstr "Діапазони ідентифікаторів" + +msgid "ID Range" +msgstr "Діапазон ідентифікаторів" + +msgid "local domain range" +msgstr "локальний діапазон доменів" + +msgid "Active Directory domain range" +msgstr "Діапазон доменів Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "Діапазон довіри Active Directory з атрибутами POSIX" + +msgid "ID range type, one of allowed values" +msgstr "Тип діапазону ідентифікаторів, одне з дозволених значень" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" +"не можна виконувати зміни діапазону, у результаті яких виникають об’єкти з " +"ідентифікаторами поза визначеним діапазоном" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Виконати дію з перевірки SID без встановленої підтримки Samba 4 неможливо. " +"Переконайтеся, що вами встановлено на сервері підпакунок IPA server-trust-ad." + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Зв’язки довіри між областями не налаштовано. Спочатку запустіть ipa-adtrust-" +"install на сервері IPA." + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "SID не розпізнано як чинний SID для довіреного домену" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +" Додати новий діапазон ідентифікаторів.\n" +"\n" +" Щоб додати новий діапазон ідентифікаторів, вам слід завжди вказати\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Крім того, можна вказати\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" для нового діапазону ідентифікаторів для локального домену, а\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" слід вказати для додавання нового діапазону для довіреного домену AD.\n" +"\n" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Додано діапазон ідентифікаторів «%(value)s»" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "Параметри dom-sid і dom-name не можна використовувати разом" + +msgid "Specified trusted domain name could not be found." +msgstr "Не вдалося знайти назву вказаного довіреного домену." + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "Параметри dom-sid/dom-name і rid-base слід використовувати разом" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"Параметр rid-base не слід використовувати, якщо типом діапазону IPA є ipa-ad-" +"trust-posix" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"Якщо вказано SID довіреного домену, типом діапазону IPA має бути ipa-ad-" +"trust або ipa-ad-trust-posix" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Параметри dom-sid/dom-name і secondary-rid-base не можна використовувати " +"разом" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"Якщо не вказано SID довіреного домену, типом діапазону IPA не може бути ipa-" +"ad-trust або ipa-ad-trust-posix." + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "Параметри secondary-rid-base і rid-base слід використовувати разом" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" +"Основний діапазон RID і вторинний діапазон RID не повинні перекриватися" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Вам слід вказати обидва параметри, rid-base і secondary-rid-base, оскільки " +"вже запущено ipa-adtrust-install." + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Вилучено діапазон ідентифікаторів «%(value)s»" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "встановлено відповідність %(count)d діапазону" +msgstr[1] "встановлено відповідність %(count)d діапазонів" +msgstr[2] "встановлено відповідність %(count)d діапазонів" + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" +"Змінити діапазон ідентифікаторів.\n" +"\n" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Змінено діапазон ідентифікаторів «%(value)s»" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Цією командою не можна скористатися для зміни розподілу ідентифікаторів для " +"локального домену IPA. Щоб дізнатися більше, скористайтеся командою «ipa " +"help idrange»." + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"Не вдалося знайти SID для вказаного довіреного домену. Будь ласка, вкажіть " +"SID безпосередньо за допомогою параметра dom-sid." + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "Параметри dom-sid і secondary-rid-base не можна використовувати разом" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "Параметри dom-sid і rid-base слід використовувати разом" + +msgid "self service permission" +msgstr "права доступу автослужби" + +msgid "self service permissions" +msgstr "права доступу до автослужби" + +msgid "Self Service Permissions" +msgstr "Права доступу до самообслуговування" + +msgid "Self Service Permission" +msgstr "Права доступу автослужби" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Додано самообслуговування «%(value)s»" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Вилучено самообслуговування «%(value)s»" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Змінено самообслуговування «%(value)s»" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "встановлено відповідність %(count)d самообслуговування" +msgstr[1] "встановлено відповідність %(count)d самообслуговування" +msgstr[2] "встановлено відповідність %(count)d самообслуговувань" + +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Ролі сервера IPA\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"Отримати стан ролей (сервер DNS, CA тощо), що надається основними серверами " +"IPA.\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" +"\n" +"Стан ролі може бути одним зі значень: enabled, configured або absent.\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Показати стан ролі «DNS server» на сервері:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Показати стан усіх ролей, назва яких містить «AD», на сервері:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Показати стан усіх налаштованих ролей на сервері:\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" +"\n" +" Показати неявну основну роль IPA:\n" +" ipa server-role-find --include-master\n" + +msgid "server role" +msgstr "роль сервера" + +msgid "server roles" +msgstr "ролі сервера" + +msgid "IPA Server Roles" +msgstr "Ролі сервера IPA" + +msgid "IPA Server Role" +msgstr "Роль сервера IPA" + +msgid "IPA server role name" +msgstr "Назва ролі сервера IPA" + +msgid "Role status" +msgstr "Стан ролі" + +msgid "Status of the role" +msgstr "Стан ролі" + +msgid "Show role status on a server" +msgstr "Показати стан ролі на сервері" + +msgid "Find a server role on a server(s)" +msgstr "Знайти роль сервера на серверах" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "встановлено відповідність %(count)s ролі сервера" +msgstr[1] "встановлено відповідність %(count)s ролей сервера" +msgstr[2] "встановлено відповідність %(count)s ролей сервера" + +msgid "Include IPA master entries" +msgstr "Включити основні записи IPA" + +msgid "roles" +msgstr "ролі" + +msgid "IPA role name" +msgstr "Назва ролі IPA" + +msgid "HBAC rule and local members cannot both be set" +msgstr "Не можна одночасно вказувати правило HBAC і локальних учасників" + +msgid "Invalid SELinux user name, must match {}" +msgstr "Некоректна назва запису користувача SELinux. Назва має відповідати {}" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" +"Некоректне значення MLS. Значення має відповідати {mls}, де максимальним " +"рівнем є {mls_max}" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" +"Некоректне значення MCS. Значення має відповідати {mcs}, де максимальною " +"категорією є {mcs_max}" + +msgid "SELinux user map list not found in configuration" +msgstr "Списку карт користувачів SELinux у налаштуваннях не виявлено" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" +"Запису користувача SELinux %(user)s не виявлено у порядковому списку (у " +"налаштуваннях)" + +msgid "SELinux User Map rule" +msgstr "Правило карти користувачів SELinux" + +msgid "SELinux User Map rules" +msgstr "Правила карти користувачів SELinux" + +msgid "SELinux User Maps" +msgstr "Карти користувачів SELinux" + +msgid "SELinux User Map" +msgstr "Карта користувачів SELinux" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Не знайдено правила HBAC %(rule)s" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Додано карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Вилучено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Змінено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "встановлено відповідність %(count)d карти користувачів SELinux" +msgstr[1] "встановлено відповідність %(count)d карт користувачів SELinux" +msgstr[2] "встановлено відповідність %(count)d карт користувачів SELinux" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Увімкнено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Вимкнено карту користувачів SELinux «%(value)s»" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: такої ролі не знайдено" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}: немає такого атрибута" + +msgid "pyhbac is not installed." +msgstr "pyhbac не встановлено." + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"Дії з сертифікатами IPA\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"Реалізує набір команд для керування сертифікатами серверів SSL.\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" +"і форматі PEM.\n" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" +"\n" +"Служба сертифікації dogtag використовує лише значення CN CSR і примусово " +"встановлює\n" +"решту параметрів призначення за налаштуваннями сервера.\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" +"потребує вузла.\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"Для того, щоб створити запит щодо сертифіката:\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* Вузол має існувати\n" +"* Служба має існувати (або слід скористатися параметром --add " +"дляавтоматичного додавання)\n" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" +"\n" +"ПОШУК:\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" +"причиною відкликання, датами чинності та датою видання.\n" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" +"\n" +"Якщо пошук виконується за датою _від, використовується порівняння >=, а " +"якщо\n" +"виконується пошук _до дати — порівняння <=. Поєднання обох пошуків " +"призводить\n" +"до пошуку з логічним поєднанням ТА.\n" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"Дати обробляються як дати за Гринвічем, відповідно до дат визначених " +"усертифікатах.\n" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" +"\n" +"Формат дати є таким: РРРР-мм-дд.\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" +"\n" +" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " +"cert-request --add --principal=HTTP/lion.example.com example.csr\n" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" +"\n" +" Отримати вже створений сертифікат:\n" +" ipa cert-show 1032\n" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" +"\n" +" Відкликати сертифікат (причини визначено у RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" +"\n" +" Вилучити сертифікат зі списку відкликання:\n" +" ipa cert-remove-hold 1032\n" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" +"\n" +" Перевірити стан запиту щодо підписування:\n" +" ipa cert-status 10\n" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" +"\n" +" Пошук сертифікатів за назвою вузла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"\n" +" Пошук відкликаних сертифікатів за причиною:\n" +" ipa cert-find --revocation-reason=5\n" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" +"\n" +" Пошук сертифікатів за датою видання\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" +"\n" +" Пошук сертифікатів, власником яких є вказаний користувач:\n" +" ipa cert-find --user=user\n" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" +"\n" +" Перевірити сертифікат:\n" +" ipa cert-find --file=cert.pem --all\n" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" +"\n" +" Перевірити, чи є власником сертифіката вказаний користувач:\n" +" ipa cert-find --file=cert.pem --user=user\n" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" +"\n" +"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" +"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" +"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" +"сертифікат не одразу.\n" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" +"\n" +"Передбачено підтримку таких причин відкликання:\n" +"\n" + +msgid " * 0 - unspecified\n" +msgstr " * 0 - не визначено\n" + +msgid " * 1 - keyCompromise\n" +msgstr " * 1 - keyCompromise\n" + +msgid " * 2 - cACompromise\n" +msgstr " * 2 - cACompromise\n" + +msgid " * 3 - affiliationChanged\n" +msgstr " * 3 - affiliationChanged\n" + +msgid " * 4 - superseded\n" +msgstr " * 4 - superseded\n" + +msgid " * 5 - cessationOfOperation\n" +msgstr " * 5 - cessationOfOperation\n" + +msgid " * 6 - certificateHold\n" +msgstr " * 6 - certificateHold\n" + +msgid " * 8 - removeFromCRL\n" +msgstr " * 8 - removeFromCRL\n" + +msgid " * 9 - privilegeWithdrawn\n" +msgstr " * 9 - privilegeWithdrawn\n" + +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" +"\n" +"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " +"5280:\n" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"Реєстраційному запису «%(principal)s» не дозволено використовувати службу " +"сертифікації «%(ca)s» із профілем «%(profile_id)s» для видання сертифікатів." + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" +"enabledService/configuredService не перебуває у записі kdc ipaConfigString" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Вузол «%(hostname)s» не є активним KDC" + +msgid "Issuing CA" +msgstr "Видавничий CA" + +msgid "Name of issuing CA" +msgstr "Назва видавничого CA" + +msgid "Base-64 encoded certificate." +msgstr "Сертифікат у кодуванні Base-64." + +msgid "Certificate chain" +msgstr "Ланцюжок сертифікації" + +msgid "X.509 certificate chain" +msgstr "Ланцюжок сертифікації X.509" + +msgid "Subject" +msgstr "Об’єкт" + +msgid "Subject email address" +msgstr "Адреса електронної пошти призначення" + +msgid "Subject DNS name" +msgstr "Назва DNS призначення" + +msgid "Subject X.400 address" +msgstr "Адреса X.400 призначення" + +msgid "Subject directory name" +msgstr "Назва каталогу призначення" + +msgid "Subject EDI Party name" +msgstr "Назва EDI Party призначення" + +msgid "Subject URI" +msgstr "Адреса призначення" + +msgid "Subject IP Address" +msgstr "IP-адреса призначення" + +msgid "Subject OID" +msgstr "OID призначення" + +msgid "Subject UPN" +msgstr "UPN призначення" + +msgid "Subject Kerberos principal name" +msgstr "Назва реєстраційного запису Kerberos призначення" + +msgid "Subject Other Name" +msgstr "Інша назва призначення" + +msgid "Issuer" +msgstr "Видавець" + +msgid "Issuer DN" +msgstr "DN видавця" + +msgid "Not Before" +msgstr "Не раніше" + +msgid "Not After" +msgstr "Не пізніше" + +msgid "Fingerprint (SHA1)" +msgstr "Відбиток (SHA1)" + +msgid "Fingerprint (SHA256)" +msgstr "Відбиток (SHA256)" + +msgid "Serial number (hex)" +msgstr "Серійний номер (шістнадцятковий)" + +msgid "Request status" +msgstr "Стан запиту" + +msgid "Include certificate chain in output" +msgstr "Включити ланцюжок сертифікації до виведення" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "" +"автоматично додати реєстраційний запис, якщо його не існує (лише " +"реєстраційні записи служб)" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "Сертифікати krbtgt можуть використовувати лише профіль %s" + +msgid "No Common Name was found in subject of request." +msgstr "У темі запиту не було знайдено загальної назви (CN)." + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "" +"назва вузла у предметі запиту «%(cn)s» не збігається із назвою або " +"альтернативними назвами реєстраційного запису «%(principal)s»" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" +"назва вузла у призначенні запиту, «%(cn)s», не збігається з назвою вузла " +"реєстраційного запису, «%(hostname)s»" + +msgid "DN commonName does not match user's login" +msgstr "У commonName DN не збігається із ім’ям користувача" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" +"emailAddress DN не збігається із жодною адресою електронної пошти користувача" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "Недостатні привілеї «write» до атрибута «userCertificate» запису «%s»." + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" +"використання типу альтернативної назви об’єкта %s заборонено для " +"реєстраційних записів користувачів" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" +"Реєстраційного запису служби для альтернативної назви об’єкта %s запиту щодо " +"сертифіката не існує" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" +"Недостатні привілеї для створення сертифіката з альтернативною назвою " +"призначення «%s»." + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" +"Реєстраційний запис «%s» у альтернативній назві об’єкта не відповідає " +"запитаному реєстраційному запису" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" +"RFC822Name не збігається зі жодною адресою електронної пошти користувача" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" +"використання типу альтернативної назви об’єкта %s заборонено для " +"реєстраційних записів, які не пов’язано із користувачами" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "Використання типу альтернативної назви об’єкта %s заборонено" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "Службу сертифікації «%s» вимкнено" + +msgid "'add' option" +msgstr "параметр «add»" + +msgid "The principal for this request doesn't exist." +msgstr "Реєстраційного запису для цього запиту не існує." + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "IP-адреса у subjectAltName (%s) є недоступною з назв DNS" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "IP-адреса у subjectAltName (%s) не містить запису PTR" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "PTR-запис для SAN IP (%s) не відповідає записам A/AAAA" + +msgid "Status" +msgstr "Стан" + +msgid "Revoked" +msgstr "Анульований" + +msgid "Revocation reason" +msgstr "Причина відкликання" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" +"Причина відкликання сертифіката (0-10). Введіть «ipa help cert», щоб " +"ознайомитися із подробицями причин відкликання. " + +#, python-format +msgid "Owner %s" +msgstr "Власник %s" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Не знайдено сертифікат із серійним номером %(serial)s, виданий CA «%(ca)s»" + +msgid "7 is not a valid revocation reason" +msgstr "7 не є коректною причиною відкликання" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "Результати мають містити лише атрибут основного ключа («сертифікат»)" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "встановлено відповідність %(count)d сертифіката" +msgstr[1] "встановлено відповідність %(count)d сертифікатів" +msgstr[2] "встановлено відповідність %(count)d сертифікатів" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "Шукати сертифікати із вказаними %s власника." + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "Шукати сертифікати, власником яких не є %s." + +msgid "ID View" +msgstr "Перегляд ідентифікаторів" + +msgid "system ID View" +msgstr "системний перегляд ідентифікаторів" + +msgid "ID Views" +msgstr "Перегляди ідентифікаторів" + +msgid "User object overrides" +msgstr "Пріоритет об’єкта користувача" + +msgid "Group object overrides" +msgstr "Пріоритет об’єкта групи" + +msgid "Hosts the view applies to" +msgstr "Вузли, до яких застосовний перегляд" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Додано перегляд ідентифікаторів «%(value)s»" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Вилучено перегляд ідентифікаторів «%(value)s»" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "Змінено перегляд ідентифікаторів «%(value)s»" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "встановлено відповідність %(count)d перегляду ідентифікаторів" +msgstr[1] "встановлено відповідність %(count)d переглядів ідентифікаторів" +msgstr[2] "встановлено відповідність %(count)d переглядів ідентифікаторів" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "Типовий перегляд довіри не може бути застосовано до вузлів" + +msgid "not found" +msgstr "не знайдено" + +msgid "ID View cannot be applied to IPA master" +msgstr "" +"Перегляд ідентифікаторів не може бути застосовано до основного сервера IPA" + +msgid "ID View already applied" +msgstr "Перегляд ідентифікаторів уже застосовано" + +msgid "value" +msgstr "значення" + +#, python-format +msgid "ID View applied to %i host." +msgstr "Перегляд ідентифікаторів застосовано до %i вузла." + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "Перегляд ідентифікаторів застосовано до %i вузлів." + +#, python-format +msgid "ID View cleared from %i host." +msgstr "Перегляд ідентифікаторів знято з %i вузла." + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "Перегляд ідентифікаторів знято з %i вузлів." + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" +"Ви намагаєтеся послатися на магічну приватну групу, яку не можна " +"перевизначати Спробуйте краще перевизначити атрибут GID запису відповідного " +"користувача." + +msgid "IPA object" +msgstr "Об’єкт IPA" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" +"системні об’єкти IPA (наприклад системні групи, приватні групи користувачів) " +"не може бути перевизначено" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Не вдалося визначити прив’язку «%(anchor)s»." + +msgid "Default Trust View cannot contain IPA users" +msgstr "Типовий перегляд довіри не може містити користувачів IPA" + +msgid "Add a new ID override." +msgstr "Додати нове перевизначення ідентифікаторів." + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Додано перевизначення ідентифікаторів «%(value)s»" + +msgid "Delete an ID override." +msgstr "Вилучити перевизначення ідентифікаторів." + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Вилучено перевизначення ідентифікатора «%(value)s»" + +msgid "Modify an ID override." +msgstr "Змінити перевизначення ідентифікатора." + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Змінено перевизначення ідентифікатора «%(value)s»" + +msgid "ID override" +msgstr "Перевизначення ідентифікатора" + +msgid "ID overrides cannot be renamed" +msgstr "Перевизначення ідентифікаторів не можна перейменовувати" + +msgid "Search for an ID override." +msgstr "Шукати перевизначення ідентифікатора." + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "встановлено відповідність %(count)d перевизначення ідентифікатора" +msgstr[1] "встановлено відповідність %(count)d перевизначень ідентифікаторів" +msgstr[2] "встановлено відповідність %(count)d перевизначень ідентифікаторів" + +msgid "Display information about an ID override." +msgstr "Показати дані щодо перевизначення ідентифікатора." + +msgid "User ID override" +msgstr "Перевизначення ідентифікатора користувача" + +msgid "User ID overrides" +msgstr "Перевизначення ідентифікатора користувача" + +msgid "Base-64 encoded user certificate" +msgstr "Сертифікат користувача у кодуванні Base-64" + +msgid "Group ID override" +msgstr "Перевизначення ідентифікатора групи" + +msgid "Group ID overrides" +msgstr "Перевизначення ідентифікатора групи" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Додати один або декілька сертифікатів запису idoverrideuser" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Додано сертифікати до запису idoverrideuser «%(value)s»" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Вилучити один або декілька сертифікатів запису idoverrideuser" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Вилучено сертифікати із запису idoverrideuser «%(value)s»" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Додано перевизначення ідентифікатора користувача «%(value)s»" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Вилучено перевизначення ідентифікатора користувача «%(value)s»" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Змінено перевизначення ідентифікатора користувача «%(value)s»" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +"встановлено відповідність %(count)d перевизначення ідентифікатора користувача" +msgstr[1] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів " +"користувачів" +msgstr[2] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів " +"користувачів" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Додано перевизначення ідентифікаторів групи «%(value)s»" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Вилучено перевизначення ідентифікаторів групи «%(value)s»" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Змінено перевизначення ідентифікаторів групи «%(value)s»" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +"встановлено відповідність %(count)d перевизначення ідентифікаторів групи" +msgstr[1] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" +msgstr[2] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Правило автоматичної участі.\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" +"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" +"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " +"атрибутів.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" +"створити правило без визначення групи або групи вузлів.\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Умова є формальним виразом, використовується 389-ds для встановлення\n" +"відповідності нового вхідного запису з правилом автоматичної участі.\n" +"Якщо умові відповідає правило включення, запис додається до відповідної\n" +"групи або групи вузлів.\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"Можна визначити типову групу або групу вузлів, яку буде використано для\n" +"записів, які не відповідають жодному правилу. У випадку записів " +"користувачів\n" +"ця група буде резервною групою, оскільки усіх користувачі типово є " +"учасниками\n" +"групи, вказаної у налаштуваннях IPA.\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"За допомогою програми automember-rebuild ви можете повторно застосувати " +"правила\n" +"автоматичної участі до вже створених записів, тобто перебудувати схему " +"участі.\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" +"\n" +" Додати початкову групу або групу вузлів:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" +"\n" +" Додати початкове правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" +"\n" +" Додати умову до правила:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" +"\n" +" Додати умову виключення до правила для запобігання автоматичному " +"пов’язуванню:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +" Додати вузол:\n" +" ipa host-add web1.example.com\n" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" +"\n" +" Додати запис користувача:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" +"\n" +" Перевірити правила автоматичної участі:\n" +" ipa hostgroup-show webservers\n" +" Група вузлів: webservers\n" +" Опис: Web Servers\n" +" Вузли-учасники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Назва групи: devel\n" +" Опис: Developers\n" +" GID: 1004200000\n" +" Користувачі-учасники: tuser\n" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" +"\n" +" Вилучити умову з правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Змінити правило автоматичної участі:\n" +" ipa automember-mod\n" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" +"\n" +" Встановити типову (резервну) групу призначення:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" +"\n" +" Вилучити типову (резервну) групу призначення:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" +"\n" +" Показати типову (резервну) групу призначення:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Знайти усіх правила автоматичної участі:\n" +" ipa automember-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" +"\n" +" Знайти усі осиротілі правила автоматичної участі:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Знайти усі осиротілі правила автоматичної участі і вилучити їх:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" +"\n" +" Показати правило автоматичної участі:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +" Вилучити правило автоматичної участі:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"\n" +" Перебудувати записи участі для усіх користувачів:\n" +" ipa automember-rebuild --type=group\n" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"\n" +" Перебудувати записи участі для усіх вузлів:\n" +" ipa automember-rebuild --type=hostgroup\n" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" +"\n" +" Перебудувати записи участі для вказаних користувачів:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +" Перебудувати записи участі для вказаних вузлів:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "Auto Membership Rule" +msgstr "Правило автоматичної участі" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s «%(oname)s» не знайдено" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s не є коректним атрибутом." + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Додати правило автоматичної участі.\n" +" " + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Додано правило автоматичної участі «%(value)s»" + +msgid "Auto Membership is not configured" +msgstr "Автоматичну участь не налаштовано" + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Додати умови до правила автоматичної участі.\n" +" " + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Додано умови до «%(value)s»" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Правило автоматичної участі: %s не знайдено!" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Перевизначення з метою додавання у повернуте повідомлення даних щодо " +"успіху чи невдачі.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Вилучити умови з правила автоматичної участі.\n" +" " + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Вилучено умови з «%(value)s»" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Перевизначення з метою встановлення станів успіху та невдачі.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Змінити правило автоматичної участі.\n" +" " + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Змінено правило автоматичної участі «%(value)s»" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Вилучити правило автоматичної участі.\n" +" " + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Вилучено правило автоматичної участі «%(value)s»" + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Шукати правила автоматичної участі.\n" +" " + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "встановлено відповідність %(count)d правила" +msgstr[1] "встановлено відповідність %(count)d правил" +msgstr[2] "встановлено відповідність %(count)d правил" + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Показати дані щодо правила автоматичної участі.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Встановити типову (резервну) групу для невідповідних записів.\n" +" " + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "Встановити типову (резервну) групу для автоматичної участі «%(value)s»" + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Вилучити типову (резервну) групу для невідповідних записів.\n" +" " + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Вилучити типову (резервну) групу для автоматичної участі «%(value)s»" + +msgid "No default (fallback) group set" +msgstr "Не встановлено типової (резервної) групи" + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Показати дані щодо типових (резервних) груп автоматичної участі.\n" +" " + +msgid "Task DN" +msgstr "DN завдання" + +msgid "DN of the started task" +msgstr "DN запущеного завдання" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "має бути вказано принаймні один з варіантів: тип, користувачі чи вузли" + +msgid "users and hosts cannot both be set" +msgstr "не можна одночасно вказувати користувачів і вузли" + +msgid "hosts cannot be set when type is 'group'" +msgstr "не можна вказувати вузли, якщо типом є «group»" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "не можна вказувати користувачів, якщо типом є «hostgroup»" + +msgid "Automember rebuild membership task started" +msgstr "Виконується завдання з перебудови записів автоматичної участі" + +msgid "Automember rebuild membership task completed" +msgstr "Завдання з перезбирання правил автоматичної участі виконано" + +#, python-format +msgid "Task DN = '%s'" +msgstr "DN завдання = «%s»" + +msgid "Automember" +msgstr "Автоматична участь" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" +"\n" +" Виконати пошук осиротілих правил автоматичної участі. Можливо, команду\n" +" слід запускати від імені привілейованого користувача, щоб отримати усі " +"правила.\n" +" " + +msgid "Remove orphan automember rules" +msgstr "Вилучити осиротілі правила автоматичної участі" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" +"\n" +"Керування службами сертифікації\n" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" +"\n" +"Підлеглі служби сертифікації (Sub-CA) можна додавати для обмежених під час " +"видання областю\n" +"сертифікатів X.509.\n" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" +"\n" +"Служби сертифікації увімкнено при створенні, але їхнє використання " +"регулюється ACL служб сертифікації,\n" +"якщо у оператора немає дозволу обходити ACL служб сертифікації (CA).\n" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" +"\n" +"Усі слжуби сертифікації, окрім служби сертифікації «IPA», можна вимикати і " +"повторно вмикати. Вимикання\n" +"служби сертифікації призводить до заборони для неї видавати сертифікати, але " +"не впливає на\n" +"чинність її сертифіката.\n" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" +"\n" +"Усі записи служб сертифікації (окрім служби «IPA») можна вилучати. Вилучення " +"запису служби сертифікації\n" +"призводить до відкликання її підписувального сертифіката і вилучення " +"закритого ключа.\n" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" +"\n" +" Створити новий запис служби сертифікації, підлеглий щодо служби " +"сертифікації IPA (потребує прав доступу\n" +" «Система: Додати CA»):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" +"\n" +" Вимкнути службу сертифікації (потребує прав доступу «Система: Змінити " +"CA»):.\n" +"\n" +" ipa ca-disable puppet\n" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" +"\n" +" Повторно увімкнути службу сертифікації (потребує прав доступу «Система: " +"Змінити CA»):\n" +"\n" +" ipa ca-enable puppet\n" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" +"\n" +" Вилучити запис служби сертифікації (потребує прав доступу «Система: " +"Вилучити CA»; також потребує попереднього вимикання\n" +" CA):\n" +"\n" +" ipa ca-del puppet\n" + +msgid "Certificate Authority" +msgstr "Центр сертифікації" + +msgid "Certificate Authorities" +msgstr "Центри сертифікації" + +msgid "Name for referencing the CA" +msgstr "Назва до посилання на CA" + +msgid "Description of the purpose of the CA" +msgstr "Опис призначення CA" + +msgid "Authority ID" +msgstr "Ід. центру" + +msgid "Dogtag Authority ID" +msgstr "Ід. Dogtag центру" + +msgid "Subject DN" +msgstr "DN призначення" + +msgid "Subject Distinguished Name" +msgstr "Унікальна назва призначення" + +msgid "Issuer Distinguished Name" +msgstr "Унікальна назва видавця" + +msgid "Search for CAs." +msgstr "Шукати CA." + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "встановлено відповідність %(count)d CA" +msgstr[1] "встановлено відповідність %(count)d CA" +msgstr[2] "встановлено відповідність %(count)d CA" + +msgid "Display the properties of a CA." +msgstr "Показати властивості CA." + +msgid "Create a CA." +msgstr "Створити запис CA." + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "Створено запис CA «%(value)s»" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Недостатні привілеї «add» для запису «%s»." + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "Нерозпізнані атрибути: %(attrs)s" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "DN призначення вже використано CA «%s»" + +msgid "Delete a CA (must be disabled first)." +msgstr "Вилучити службу сертифікації (її спочатку має бути вимкнено)." + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "Вилучено запис CA «%(value)s»" + +msgid "Insufficient privilege to delete a CA." +msgstr "Недостатні права доступу для вилучення запису CA." + +msgid "CA" +msgstr "CA" + +msgid "IPA CA cannot be deleted" +msgstr "CA IPA не може бути вилучено" + +msgid "Must be disabled first" +msgstr "Слід спочатку вимкнути" + +msgid "Modify CA configuration." +msgstr "Змінити налаштування CA." + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "Змінено CA «%(value)s»" + +msgid "Insufficient privilege to modify a CA." +msgstr "Недостатні права доступу для внесення змін до запису CA." + +msgid "Disable a CA." +msgstr "Вимкнути службу сертифікації." + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "Вимкнено службу сертифікації «%(value)s»" + +msgid "IPA CA cannot be disabled" +msgstr "Службу сертифікації IPA не можна вимикати" + +msgid "Enable a CA." +msgstr "Увімкнути службу сертифікації." + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "Увімкнено службу сертифікації «%(value)s»" + +msgid "Internationalization messages" +msgstr "Повідомлення перекладу" + +msgid "Your session has expired. Please log in again." +msgstr "" +"Строк роботи у вашому сеансі вичерпано. Будь ласка, увійдіть до системи ще " +"раз." + +msgid "Apply" +msgstr "Застосувати" + +msgid "Rebuild auto membership" +msgstr "Повторне збирання правил автоматичної участі" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Ви справді хочете перебудувати записи автоматичної участі?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "Ви справді хочете виконати цю дію?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "Ви справді хочете вилучити ${object}?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "Ви справді хочете вимкнути ${object}?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Ви справді хочете увімкнути ${object}?" + +msgid "Actions" +msgstr "Дії" + +msgid "Add" +msgstr "Додати" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "Додано ${count} записів" + +msgid "Direct Membership" +msgstr "Безпосередня участь" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "Доступний фільтр ${other_entity}" + +msgid "Indirect Membership" +msgstr "Опосередкована участь" + +msgid "No entries." +msgstr "Немає записів." + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Показано записи від ${start} до ${end} з ${total} записів." + +msgid "Remove" +msgstr "Вилучити" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "Вилучено ${count} записів" + +msgid "Show Results" +msgstr "Показати результати" + +msgid "Authentication indicators" +msgstr "Індикатори розпізнавання" + +msgid "Authentication indicator" +msgstr "Індикатор розпізнавання" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Якщо метод не вибрано, буде використано неявний метод (пароль).

Пароль + двофакторне розпізнавання: у LDAP і Kerberos " +"передбачено розпізнавання за одним із цих типів розпізнавання, а у Kerberos " +"використовується метод попереднього розпізнавання, який потребує " +"використання ccache armor.

RADIUS із іншим типом: у " +"Kerberos завжди використовується RADIUS, а у LDAP він не використовується " +"ніколи. LDAP розпізнає лише варіанти розпізнавання за паролем або " +"двофакторне розпізнавання.

" + +msgid "Add Custom Authentication Indicator" +msgstr "Додати нетиповий індикатор розпізнавання" + +msgid "Two factor authentication (password + OTP)" +msgstr "Двофакторне розпізнавання (пароль + OTP)" + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "Захищений пароль (за допомогою SPAKE або FAST)" + +msgid "Disable per-user override" +msgstr "Вимкнути перевизначення на рівні користувача" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Параметр для окремих користувачів, перевизначає загальне значення, якщо " +"буде вибрано один з варіантів.

Пароль + двофакторне " +"розпізнавання: у LDAP і Kerberos передбачено розпізнавання за одним " +"із цих типів розпізнавання, а у Kerberos використовується метод попереднього " +"розпізнавання, який потребує використання ccache armor.

RADIUS " +"із іншим типом: у Kerberos завжди використовується RADIUS, а у LDAP " +"він не використовується ніколи. LDAP розпізнає лише варіанти розпізнавання " +"за паролем або двофакторне розпізнавання.

" + +msgid "About" +msgstr "Про програму" + +msgid "Activate" +msgstr "Задіяти" + +msgid "Add and Add Another" +msgstr "Додати і додати ще" + +msgid "Add and Close" +msgstr "Додати і закрити" + +msgid "Add and Edit" +msgstr "Додати і змінити" + +msgid "Add Many" +msgstr "Додати багато" + +msgid "Back" +msgstr "Назад" + +msgid "Cancel" +msgstr "Скасувати" + +msgid "Clear" +msgstr "Спорожнити" + +msgid "Clear all fields on the page." +msgstr "Спорожнити усі поля на сторінці." + +msgid "Close" +msgstr "Закрити" + +msgid "Disable" +msgstr "Вимкнути" + +msgid "Download" +msgstr "Отримати" + +msgid "Download certificate as PEM formatted file." +msgstr "Отримати сертифікат у формі файла формату PEM." + +msgid "Edit" +msgstr "Змінити" + +msgid "Enable" +msgstr "Увімкнути" + +msgid "Find" +msgstr "Знайти" + +msgid "Get" +msgstr "Отримати" + +msgid "Hide" +msgstr "Приховати" + +msgid "Issue" +msgstr "Створити" + +msgid "Match" +msgstr "Відповідність" + +msgid "Match users according to certificate." +msgstr "Встановити відповідність користувачів за сертифікатом." + +msgid "Migrate" +msgstr "Перенести" + +msgid "OK" +msgstr "Гаразд" + +msgid "Refresh" +msgstr "Оновити" + +msgid "Reload current settings from the server." +msgstr "Перезавантажити поточні параметри з сервера." + +msgid "Delete" +msgstr "Вилучити" + +msgid "Remove hold" +msgstr "Вилучити затримання" + +msgid "Reset" +msgstr "Скинути" + +msgid "Reset Password" +msgstr "Скинути пароль" + +msgid "Reset Password and Log in" +msgstr "Скинути пароль і увійти" + +msgid "Restore" +msgstr "Відновити" + +msgid "Retry" +msgstr "Повторити" + +msgid "Revert" +msgstr "Повернути" + +msgid "Revoke" +msgstr "Відкликати" + +msgid "Save" +msgstr "Зберегти" + +msgid "Set" +msgstr "Встановити" + +msgid "Show" +msgstr "Показати" + +msgid "Stage" +msgstr "Етап" + +msgid "Update" +msgstr "Оновити" + +msgid "View" +msgstr "Перегляд" + +msgid "Customization" +msgstr "Налаштування" + +msgid "Pagination Size" +msgstr "Розмір сторінки" + +msgid "Collapse All" +msgstr "Згорнути всі" + +msgid "Expand All" +msgstr "Розгорнути всі" + +msgid "General" +msgstr "Загальне" + +msgid "Identity Settings" +msgstr "Параметри профілю" + +msgid "Record Settings" +msgstr "Параметри запису" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Параметри ${primary_key} ${entity}" + +msgid "Back to Top" +msgstr "Повернутися до початку" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "Оновлено ${primary_key} ${entity}" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity} успішно додано" + +msgid "Add custom value" +msgstr "Додати нетипове значення" + +msgid "Available" +msgstr "Доступний" + +msgid "Some operations failed." +msgstr "Деякі з дій не вдалося виконати." + +msgid "Operations Error" +msgstr "Помилка під час обробки" + +msgid "Confirmation" +msgstr "Підтвердження" + +msgid "Custom value" +msgstr "Нетипове значення" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"На цій сторінці виявлено незбережені зміни. Будь ласка, збережіть зміни або " +"скасуйте їх." + +msgid "Unsaved Changes" +msgstr "Незбережені зміни" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Змінити ${entity}" + +msgid "Hide details" +msgstr "Сховати подробиці" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, версія: ${version}" + +msgid "Prospective" +msgstr "Очікуваний" + +msgid "Redirection" +msgstr "Переспрямування" + +msgid "Select entries to be removed." +msgstr "Виберіть записи, які слід вилучити." + +msgid "Result" +msgstr "Результат" + +msgid "Show details" +msgstr "Показати подробиці" + +msgid "Success" +msgstr "Успіх" + +msgid "Validation error" +msgstr "Помилка під час перевірки" + +msgid "Input form contains invalid or missing values." +msgstr "" +"У форму введення даних не введено деякі з даних або у формі містяться " +"некоректні записи." + +msgid "Please try the following options:" +msgstr "Будь ласка, спробуйте такі параметри:" + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"Якщо проблему не вдасться усунути, зверніться до адміністратора системи." + +msgid "Refresh the page." +msgstr "Оновити сторінку." + +msgid "Reload the browser." +msgstr "Перезавантажити переглядач." + +msgid "Return to the main page and retry the operation" +msgstr "Повернутися до головної сторінки і повторити спробу" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Сталася помилка (${error})" + +msgid "HTTP Error" +msgstr "Помилка HTTP" + +msgid "Internal Error" +msgstr "Внутрішня помилка" + +msgid "IPA Error" +msgstr "Помилка IPA" + +msgid "No response" +msgstr "Немає відповіді" + +msgid "Unknown Error" +msgstr "Невідома помилка" + +msgid "URL" +msgstr "Адреса" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} керується:" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "Учасники ${primary_key}:" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} міститься у:" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "Керівники учасника ${primary_key}:" + +msgid "Settings" +msgstr "Параметри" + +msgid "Search" +msgstr "Пошук" + +msgid "False" +msgstr "Ні" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" +"Дозволити групам користувачів створювати сховище ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Дозволити групам користувачів отримувати сховище ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "Дозволити групам вузлів створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "Дозволити групам вузлів отримувати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "Дозволити вузлам створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "Дозволити вузлам отримувати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "Дозволити користувачам створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "Дозволити користувачам отримувати таблицю ключів «${primary_key}»" + +msgid "Allowed to create keytab" +msgstr "Дозволено створювати таблицю ключів" + +msgid "Allowed to retrieve keytab" +msgstr "Дозволено отримувати таблицю ключів" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" +"Заборонити групам користувачів створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Заборонити групам користувачів отримувати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "Заборонити групам вузлів створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "Заборонити групам вузлів отримувати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "Заборонити вузлам створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "Заборонити вузлам отримувати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "Заборонити користувачам створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "Заборонити користувачам отримувати таблицю ключів «${primary_key}»" + +msgid "Add Kerberos Principal Alias" +msgstr "Додати псевдонім реєстраційного запису Kerberos" + +msgid "New kerberos principal alias" +msgstr "Новий псевдонім реєстраційного запису kerberos" + +msgid "Remove Kerberos Alias" +msgstr "Вилучити псевдонім Kerberos" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "Ви хочете вилучити псевдонім kerberos ${alias}?" + +msgid "Inherited from server configuration" +msgstr "Успадковано з налаштувань сервера" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Override inherited settings" +msgstr "Перевизначити успадковані параметри" + +msgid "PAD" +msgstr "PAD" + +msgid "Authenticating" +msgstr "Розпізнавання" + +msgid "Authentication with personal certificate failed" +msgstr "Не вдалося пройти розпізнавання за особистим сертифікатом" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" +" Щоб увійти за допомогою " +"сертифіката, будь ласка, переконайтеся, що у вас є чинний " +"особистий сертифікат. " + +msgid "Continue to next page" +msgstr "Перейти до наступної сторінки" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" +" Щоб увійти за допомогою імені " +"користувача і пароля, вкажіть ці дані у відповідних полях, потім " +"натисніть кнопку «Увійти»." + +msgid "Login failed due to an unknown reason" +msgstr "Не вдалося увійти з невідомої причини" + +msgid "Logged In As" +msgstr "Вхід до системи від імені" + +msgid "Authentication with Kerberos failed" +msgstr "Не вдалося пройти розпізнавання за допомогою Kerberos" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" +" Щоб увійти до системи за допомогою " +"Kerberos, будь ласка, переконайтеся, що у вас є коректні " +"квитки (такі, які можна отримати за допомогою kinit) і налаштований належним чином браузер. " +"Далі натисніть кнопку «Увійти»." + +msgid "Loading" +msgstr "Завантаження" + +msgid "Kerberos Principal you entered is expired" +msgstr "Строк дії введених вами реєстраційних даних Kerberos вичерпано" + +msgid "Loading data" +msgstr "Завантажуємо дані" + +msgid "Log in" +msgstr "Увійти" + +msgid "Log In Using Certificate" +msgstr "Увійти за допомогою сертифіката" + +msgid "Log in using personal certificate" +msgstr "Увійти за допомогою персонального сертифіката" + +msgid "Log out" +msgstr "Вийти" + +msgid "Log out error" +msgstr "Помилка під час спроби вийти" + +msgid "Password or Password+One-Time Password" +msgstr "Пароль або Пароль+Одноразовий пароль" + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "Вас буде переспрямовано за ${count} с" + +msgid "Sync OTP Token" +msgstr "Синхронізувати жетон OTP" + +msgid "Synchronizing" +msgstr "Синхронізація" + +msgid "The user account you entered is locked" +msgstr "Введений вами обліковий запис заблоковано" + +msgid "number of passwords" +msgstr "кількість паролів" + +msgid "seconds" +msgstr "секунд" + +msgid "Migrating" +msgstr "Перенесення" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" +"Із вашим запитом виникли проблеми. Будь ласка, повторіть спробу пізніше." + +msgid "Password migration was not successful" +msgstr "Не вдалося перенести паролі" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" +"

Перенесення паролів

Якщо вас було спрямовано на цю сторінку вашим " +"адміністратором, ваші особисті дані було перенесено до нового рішення з " +"керування профілями користувачів (IPA).

Будь ласка, введіть ваші " +"реєстраційні дані до форми, щоб завершити процес. Після успішного входу до " +"системи ваш обліковий запис kerberos буде активовано.

" + +msgid "The password or username you entered is incorrect" +msgstr "Вами введено помилкове ім'я користувача або пароль" + +msgid "Password migration was successful" +msgstr "Пароль успішно перенесено" + +msgid "Attribute" +msgstr "Атрибут" + +msgid "Add delegation" +msgstr "Додати уповноваження" + +msgid "Remove delegations" +msgstr "Вилучити уповноваження" + +msgid "Add permission" +msgstr "Додати права доступу" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "Додати привілеї до дозволів «${primary_key}»" + +msgid "Remove permissions" +msgstr "Вилучити дозволи" + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "Вилучити привілеї з дозволів «${primary_key}»" + +msgid "Add privilege" +msgstr "Додати привілеї" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "Додати привілеї «${primary_key}» до дозволів" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "Додати ролі до привілеїв «${primary_key}»" + +msgid "Remove privileges" +msgstr "Вилучити привілеї" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "Вилучити привілеї «${primary_key}» з дозволів" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "Вилучити ролі з привілеїв «${primary_key}»" + +msgid "Role Settings" +msgstr "Параметри ролей" + +msgid "Add role" +msgstr "Додати роль" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "Додати групи користувачів до ролі «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "Додати вузли до ролі «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "Додати групи вузлів до ролі «${primary_key}»" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "Додати роль «${primary_key}» до привілеїв" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "Додати служби до ролі «${primary_key}»" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "Додати користувачів до ролі «${primary_key}»" + +msgid "Remove roles" +msgstr "Вилучити ролі" + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "Вилучити роль «${primary_key}» з привілеїв" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "Вилучити групи користувачів з ролі «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "Вилучити вузли з ролі «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "Вилучити групи вузлів з ролі «${primary_key}»" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "Вилучити служби з ролі «${primary_key}»" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "Вилучити користувачів з ролі «${primary_key}»" + +msgid "Add self service permission" +msgstr "Додати права автослужби" + +msgid "Remove self service permissions" +msgstr "Вилучити дозволи на самообслуговування" + +msgid "Add rule" +msgstr "Додати правило" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "Додати включну умову до «${primary_key}»" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "Додати виключну умову до «${primary_key}»" + +msgid "Are you sure you want to change default group?" +msgstr "Ви справді хочете змінити типову групу?" + +msgid "Default host group" +msgstr "Типова група вузлів" + +msgid "Default user group" +msgstr "Типова група користувачів" + +msgid "Exclusive" +msgstr "Виключна" + +msgid "Expression" +msgstr "Вираз" + +msgid "Host group rule" +msgstr "Правило групи вузлів" + +msgid "Host group rules" +msgstr "Правила груп вузлів" + +msgid "Inclusive" +msgstr "Включна" + +msgid "Remove auto membership rules" +msgstr "Вилучити правила автоматичної участі" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "Вилучити умови виключення з правила «${primary_key}»" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "Вилучити умови включення з правила «${primary_key}»" + +msgid "User group rule" +msgstr "Правило групи користувачів" + +msgid "User group rules" +msgstr "Правила груп користувачів" + +msgid "Add automount key" +msgstr "Додати ключ автомонтування" + +msgid "Remove automount keys" +msgstr "Вилучити ключі автоматичного монтування" + +msgid "Add automount location" +msgstr "Додати місце автомонтування" + +msgid "Automount Location Settings" +msgstr "Параметри запису автомонтування" + +msgid "Remove automount locations" +msgstr "Вилучити місця автоматичного монтування" + +msgid "Add automount map" +msgstr "Додати карту автомонтування" + +msgid "Map Type" +msgstr "Тип карти" + +msgid "Direct" +msgstr "Безпосередній" + +msgid "Indirect" +msgstr "Опосередкований" + +msgid "Remove automount maps" +msgstr "Вилучити карти автоматичного монтування" + +msgid "Add certificate authority" +msgstr "Додати службу сертифікації" + +msgid "Remove certificate authorities" +msgstr "Вилучити служби сертифікації" + +msgid "Add CA ACL" +msgstr "Додати ACL CA" + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "Додати служби сертифікації до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Додати групи користувачів до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "Додати групи вузлів до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "Додати вузли до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "Додати профілі сертифікації до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Додати служби до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "Додати користувачів до ACL CA «${primary_key}»" + +msgid "All" +msgstr "Всі" + +msgid "Any CA" +msgstr "Будь-який CA" + +msgid "Any Host" +msgstr "Будь-який вузол" + +msgid "Any Service" +msgstr "Будь-яка служба" + +msgid "Any Profile" +msgstr "Будь-який профіль" + +msgid "Anyone" +msgstr "Будь-хто" + +msgid "Rule status" +msgstr "Стан правила" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "Якщо не вказано CA, буде дозволено запити до типового CA." + +msgid "Remove CA ACLs" +msgstr "Вилучити ACL служб сертифікації" + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "Вилучити служби сертифікації з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Вилучити групи користувачів з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Вилучити групи вузлів з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "Вилучити вузли з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "Вилучити профілі сертифікації з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "Вилучити служби з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "Вилучити користувачів з ACL CA «${primary_key}»" + +msgid "Specified CAs" +msgstr "Вказані CA" + +msgid "Specified Hosts and Groups" +msgstr "Вказані вузли і групи" + +msgid "Specified Profiles" +msgstr "Вказані профілі" + +msgid "Specified Services and Groups" +msgstr "Вказані служби і групи" + +msgid "Specified Users and Groups" +msgstr "Вказані користувачі і групи" + +msgid "Permitted to have certificates issued" +msgstr "Дозволено мати випущений сертифікат" + +msgid "Remove certificate profiles" +msgstr "Вилучити профілі сертифікації" + +msgid "AA Compromise" +msgstr "Компрометація AA" + +msgid "Add principal" +msgstr "Додати реєстраційний запис" + +msgid "Affiliation Changed" +msgstr "Змінено місце роботи" + +msgid "CA Compromise" +msgstr "Компрометація CA" + +msgid "Certificates" +msgstr "Сертифікати" + +msgid "Certificate Hold" +msgstr "Власник сертифіката" + +msgid "Cessation of Operation" +msgstr "Скасування дії" + +msgid "Common Name" +msgstr "Звичайне ім'я" + +msgid "the certificate with serial number " +msgstr "сертифікат із серійним номером " + +msgid "Expires On" +msgstr "Строк дії" + +msgid "Issued on from" +msgstr "Видано з" + +msgid "Issued on to" +msgstr "Видано до" + +msgid "Maximum serial number" +msgstr "Максимальний серійний номер" + +msgid "Minimum serial number" +msgstr "Мінімальний серійний номер" + +msgid "Revoked on from" +msgstr "Відкликано з" + +msgid "Revoked on to" +msgstr "Відкликано до" + +msgid "Valid not after from" +msgstr "Чинний не пізніше після" + +msgid "Valid not after to" +msgstr "Чинний не пізніше до" + +msgid "Valid not before from" +msgstr "Чинний не раніше від" + +msgid "Valid not before to" +msgstr "Чинний не раніше" + +msgid "Fingerprints" +msgstr "Відбитки" + +msgid "Get Certificate" +msgstr "Отримати сертифікат" + +msgid "Certificate Hold Removed" +msgstr "Затримання сертифіката вилучено" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "Видати новий сертифікат для вузла «${primary_key}»" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "Видати новий сертифікат для служби «${primary_key}»" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "Видати новий сертифікат для користувача «${primary_key}»" + +msgid "Issue new certificate" +msgstr "Видати новий сертифікат" + +msgid "Issued By" +msgstr "Видавець" + +msgid "Issued On" +msgstr "Видано" + +msgid "Issued To" +msgstr "Видано для" + +msgid "Key Compromise" +msgstr "Компрометація ключа" + +msgid "No Valid Certificate" +msgstr "Немає чинних сертифікатів" + +msgid "New Certificate" +msgstr "Новий сертифікат" + +msgid "Certificate in base64 or PEM format" +msgstr "Сертифікат у форматі base64 або PEM" + +msgid "Note" +msgstr "Нотатка" + +msgid "Organization" +msgstr "Установа" + +msgid "Organizational Unit" +msgstr "Підрозділ установи" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "Маємо ${count} сертифікатів" + +msgid "Privilege Withdrawn" +msgstr "Привілей відкликано" + +msgid "Reason for Revocation" +msgstr "Причина відкликання" + +msgid "Remove certificate hold" +msgstr "Вилучити затримання сертифіката" + +msgid "Do you want to remove the certificate hold?" +msgstr "Хочете вилучити затримання сертифіката?" + +msgid "Remove from CRL" +msgstr "Вилучити з CRL" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" +"
  1. Створити базу даних сертифікатів або скористатися вже створеною. " +"Щоб створити нову базу даних, віддайте команду:
    # certutil -N -d " +"<шлях до бази даних>
  2. Створити CSR з призначенням " +"CN=<${cn_name}>,O=<область>, наприклад:
    # " +"certutil -R -d <шлях до бази даних> -a -g <розмір ключа> -s 'CN=" +"${cn},O=${realm}'${san}
  3. Скопіюйте і вставте CSR (від " +"-----BEGIN NEW CERTIFICATE REQUEST----- до -----END NEW " +"CERTIFICATE REQUEST-----) до області для введення тексту, розташованої " +"нижче:
" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr " -8 '${cn}'" + +msgid "Certificate requested" +msgstr "Надіслано запит щодо сертифікації" + +msgid "Revoke certificate" +msgstr "Відкликати сертифікат" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "Хочете відкликати цей сертифікат? Виберіть причину зі спадного списку." + +msgid "Certificate Revoked" +msgstr "Сертифікат відкликано" + +msgid "REVOKED" +msgstr "ВІДКЛИКАНО" + +msgid "Serial Number" +msgstr "Серійний номер" + +msgid "Serial Number (hex)" +msgstr "Серійний номер (шістнадцятковий)" + +msgid "SHA1 Fingerprint" +msgstr "Відбиток SHA1" + +msgid "SHA256 Fingerprint" +msgstr "Відбиток SHA256" + +msgid "Superseded" +msgstr "Замінено" + +msgid "Unspecified" +msgstr "Не вказано" + +msgid "Valid Certificate Present" +msgstr "Є чинний сертифікат" + +msgid "Valid from" +msgstr "Чинний з" + +msgid "Valid to" +msgstr "Чинний до" + +msgid "Validity" +msgstr "Коректність" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Сертифікат для ${primary_key} ${entity}" + +msgid "View Certificate" +msgstr "Переглянути сертифікат" + +msgid "Certificate Data" +msgstr "Дані сертифіката" + +msgid "Certificate For Match" +msgstr "Сертифікат для відповідності" + +msgid "Certificate Mapping Match" +msgstr "Відповідність за прив’язкою до сертифіката" + +msgid "Matched Users" +msgstr "Відповідні користувачі" + +msgid "User Login" +msgstr "Користувач" + +msgid "Add certificate identity mapping rule" +msgstr "Додати правило прив'язки сертифіката до профілю" + +msgid "Add certificate mapping data" +msgstr "Додати дані прив'язки сертифіката" + +msgid "Certificate mapping data" +msgstr "Дані прив’язки сертифіката" + +msgid "Configuration string" +msgstr "Рядок налаштування" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "Хочете вилучити дані прив’язки до сертифікатів ${data}?" + +msgid "Remove certificate mapping data" +msgstr "Вилучити дані прив'язки сертифіката" + +msgid "Issuer and subject" +msgstr "Видавець і призначення" + +msgid "Remove certificate identity mapping rules" +msgstr "Вилучити правила прив'язки профілів сертифікації" + +msgid "Group Options" +msgstr "Параметри групи" + +msgid "Search Options" +msgstr "Параметри пошуку" + +msgid "SELinux Options" +msgstr "Параметри SELinux" + +msgid "Server Options" +msgstr "Параметри сервера" + +msgid "Service Options" +msgstr "Параметри служби" + +msgid "User Options" +msgstr "Параметри користувача" + +msgid "Forward first" +msgstr "Спочатку переспрямувати" + +msgid "Forwarding disabled" +msgstr "Переспрямовування вимкнено" + +msgid "Forward only" +msgstr "Лише переспрямовувати" + +msgid "Options" +msgstr "Параметри" + +msgid "Update System DNS Records" +msgstr "Оновити записи DNS системи" + +msgid "Do you want to update system DNS records?" +msgstr "Хочете оновити записи DNS системи?" + +msgid "System DNS records updated" +msgstr "Оновлено записи DNS системи" + +msgid "Add DNS forward zone" +msgstr "Додати зону переспрямовування DNS" + +msgid "Remove DNS forward zones" +msgstr "Вилучити зони переспрямовування DNS" + +msgid "Add DNS resource record" +msgstr "Додати запис ресурсу DNS" + +msgid "DNS record was deleted because it contained no data." +msgstr "Запис DNS було вилучено, оскільки у ньому не містилося жодних даних." + +msgid "Other Record Types" +msgstr "Інші типи записів" + +msgid "Address not valid, can't redirect" +msgstr "Адреса є некоректною. Переспрямування неможливе." + +msgid "Create dns record" +msgstr "Створити запис DNS" + +msgid "Creating record." +msgstr "Створення запису." + +msgid "Record creation failed." +msgstr "Спроба створення запису зазнала невдачі." + +msgid "Checking if record exists." +msgstr "Перевірка, чи існує запис." + +msgid "Record not found." +msgstr "Запис не знайдено." + +msgid "Redirection to PTR record" +msgstr "Переспрямовування на запис PTR" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "Виявлено зону: ${zone}" + +msgid "Target reverse zone not found." +msgstr "Не знайдено зворотної зони призначення." + +msgid "Fetching DNS zones." +msgstr "Отримання даних щодо зон DNS." + +msgid "An error occurred while fetching dns zones." +msgstr "Під час спроби отримання даних щодо зон DNS сталася помилка." + +msgid "You will be redirected to DNS Zone." +msgstr "Вас буде переспрямовано до зони DNS." + +msgid "Remove DNS resource records" +msgstr "Вилучити записи ресурсів DNS" + +msgid "Standard Record Types" +msgstr "Стандартні типи записів" + +msgid "Records for DNS Zone" +msgstr "Записи зони DNS" + +msgid "Record Type" +msgstr "Тип запису" + +msgid "Add DNS zone" +msgstr "Додати зону DNS" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "Ви справді хочете додати права доступу для зони DNS ${object}?" + +msgid "DNS Zone Settings" +msgstr "Параметри зони DNS" + +msgid "Remove DNS zones" +msgstr "Вилучити зони DNS" + +msgid "Remove Permission" +msgstr "Вилучити права доступу" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "Ви справді хочете вилучити права доступу для зони DNS ${object}?" + +msgid "Skip DNS check" +msgstr "Пропустити перевірку DNS" + +msgid "Skip overlap check" +msgstr "Пропустити перевірку перекриття" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "Хочете перевірити, чи є адреса нового основного сервера назв у DNS" + +msgid "Authoritative nameserver change" +msgstr "Зміна основного сервера назв" + +msgid "Level" +msgstr "Рівень" + +msgid "Set Domain Level" +msgstr "Встановити рівень домену" + +msgid "Add user group" +msgstr "Додати групу користувачів" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "Додати групи користувачів до групи користувачів «${primary_key}»" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "Додати групу користувачів «${primary_key}» до списку груп користувачів" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Додати групу користувачів «${primary_key}» до правил HBAC" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "Додати групу користувачів «${primary_key}» до списку мережевих груп" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "Додати групу користувачів «${primary_key}» до списку ролей" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "Додати групу користувачів «${primary_key}» до правил sudo" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "Додати служби до групи користувачів «${primary_key}»" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "Додати користувачів до групи користувачів «${primary_key}»" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" +"Додати групи як керівників учасниками для групи користувачів «${primary_key}»" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" +"Вилучити групи з керівників учасниками для групи користувачів " +"«${primary_key}»" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" +"Додати користувачів як керівників учасниками для групи користувачів " +"«${primary_key}»" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" +"Вилучити користувачів з керівників учасниками для групи користувачів " +"«${primary_key}»" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" +"Додати перевизначення ідентифікатора користувача до групи користувачів " +"«${primary_key}»" + +msgid "Group Settings" +msgstr "Параметри групи" + +msgid "External" +msgstr "Зовнішній" + +msgid "Groups" +msgstr "Групи" + +msgid "Group categories" +msgstr "Категорії груп" + +msgid "Change to external group" +msgstr "Змінити на зовнішню групу" + +msgid "Change to POSIX group" +msgstr "Змінити на групу POSIX" + +msgid "Non-POSIX" +msgstr "Не-POSIX" + +msgid "POSIX" +msgstr "POSIX" + +msgid "Remove user groups" +msgstr "Вилучити групи користувачів" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" +"Вилучити групу користувачів «${primary_key}» зі списку груп користувачів" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "Вилучити групу користувачів «${primary_key}» зі списку мережевих груп" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "Вилучити групу користувачів «${primary_key}» зі списку ролей" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Вилучити групу користувачів «${primary_key}» зі правил HBAC" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Вилучити групу користувачів «${primary_key}» зі правил sudo" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "Вилучити групи користувачів з групи користувачів «${primary_key}»" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "Вилучити служби з групи користувачів «${primary_key}»" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "Вилучити користувачів з групи користувачів «${primary_key}»" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" +"Вилучити перевизначення ідентифікатора користувача з групи користувачів " +"«${primary_key}»" + +msgid "Group Type" +msgstr "Тип групи" + +msgid "Add HBAC rule" +msgstr "Додати правило HBAC" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Додати групи користувачів до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "Додати групи вузлів до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "Додати вузли до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "Додати групи служб HBAC до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Додати служби HBAC до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Додати користувачів до правила HBAC «${primary_key}»" + +msgid "Accessing" +msgstr "Доступ" + +msgid "Remove HBAC rules" +msgstr "Вилучити правила HBAC" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Вилучити групи користувачів з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Вилучити групи вузлів з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "Вилучити вузли з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Вилучити групи служб HBAC з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "Вилучити служби HBAC з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Вилучити користувачів з правила HBAC «${primary_key}»" + +msgid "Via Service" +msgstr "Проміжна служба" + +msgid "Who" +msgstr "Хто" + +msgid "Add HBAC service" +msgstr "Додати службу HBAC" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "Додати службу HBAC «${primary_key}» до груп служб HBAC" + +msgid "Remove HBAC services" +msgstr "Вилучити служби HBAC" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "Вилучити службу HBAC «${primary_key}» з груп служб HBAC" + +msgid "Add HBAC service group" +msgstr "Додати групу служб HBAC" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "Додати служби HBAC до групи служб HBAC «${primary_key}»" + +msgid "Remove HBAC service groups" +msgstr "Вилучити групи служб HBAC" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Вилучити служби HBAC з групи служб HBAC «${primary_key}»" + +msgid "Access Denied" +msgstr "Доступ заборонено" + +msgid "Access Granted" +msgstr "Надано доступ" + +msgid "Include Disabled" +msgstr "Включення вимкнено" + +msgid "Include Enabled" +msgstr "Включення увімкнено" + +msgid "HBAC Test" +msgstr "Тест HBAC" + +msgid "Matched" +msgstr "Встановлено відповідність" + +msgid "Missing values: " +msgstr "Пропущені значення: " + +msgid "New Test" +msgstr "Новий текст" + +msgid "Rules" +msgstr "Правила" + +msgid "Run Test" +msgstr "Запустити тест" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "Вкажіть зовнішній ${entity}" + +msgid "Unmatched" +msgstr "Невідповідний" + +msgid "Add host" +msgstr "Додати вузол" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "Додати вузол керування вузлами «${primary_key}»" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "Додати вузол «${primary_key}» до груп вузлів" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Додати вузол «${primary_key}» до правил HBAC" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "Додати вузол «${primary_key}» до мережевих груп" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "Додати вузол «${primary_key}» до ролей" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "Додати вузол «${primary_key}» до правил sudo" + +msgid "Host Certificate" +msgstr "Сертифікат вузла" + +msgid "Host Name" +msgstr "Назва вузла" + +msgid "Delete Key, Unprovision" +msgstr "Вилучити ключ, скасування передбачення" + +msgid "Host Settings" +msgstr "Параметри вузла" + +msgid "Enrolled" +msgstr "Зареєстровано" + +msgid "Enrollment" +msgstr "Реєстрація" + +msgid "Fully Qualified Host Name" +msgstr "Повна назва вузла" + +msgid "Generate OTP" +msgstr "Створити OTP" + +msgid "Generated OTP" +msgstr "Створений OTP" + +msgid "Kerberos Key" +msgstr "Ключ Kerberos" + +msgid "Kerberos Key Not Present" +msgstr "Ключа Kerberos немає" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Маємо ключ Kerberos, вузол передбачено" + +msgid "One-Time Password" +msgstr "Одноразовий пароль" + +msgid "One-Time Password Not Present" +msgstr "Одноразового пароля немає" + +msgid "One-Time Password Present" +msgstr "Є одноразовий пароль" + +msgid "Reset OTP" +msgstr "Скинути ОП" + +msgid "Reset One-Time Password" +msgstr "Скинути одноразовий пароль" + +msgid "Set OTP" +msgstr "Одноразовий пароль" + +msgid "OTP set" +msgstr "Встановлено одноразовий пароль" + +msgid "Set One-Time Password" +msgstr "Встановити одноразовий пароль" + +msgid "Remove hosts" +msgstr "Вилучити вузли" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "Вилучити вузол керування вузлами «${primary_key}»" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "Вилучити вузол «${primary_key}» з груп вузлів" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "Вилучити вузол «${primary_key}» з мережевих груп" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "Вилучити вузол «${primary_key}» з ролей" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Вилучити вузол «${primary_key}» з правил HBAC" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "Вилучити вузол «${primary_key}» з правил sudo" + +msgid "Unprovision" +msgstr "Скасування передбачення" + +msgid "Are you sure you want to unprovision this host?" +msgstr "Ви справді бажаєте скасувати передбачення цього вузла?" + +msgid "Unprovisioning host" +msgstr "Вузол скасовування передбачення" + +msgid "Host unprovisioned" +msgstr "Вузол не передбачено" + +msgid "Add host group" +msgstr "Додати групу вузлів" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "Додати вузли до групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "Додати групи вузлів до групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "Додати групу вузлів «${primary_key}» до груп вузлів" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "Додати групу вузлів «${primary_key}» до правил HBAC" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "Додати групу вузлів «${primary_key}» до мережевих груп" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "Додати групу вузлів «${primary_key}» до правил sudo" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" +"Додати групи як керівників учасниками для групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" +"Вилучити групи з керівників учасниками для групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" +"Додати користувачів як керівників учасниками для групи вузлів " +"«${primary_key}»" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" +"Вилучити користувачів з керівників учасниками для групи вузлів " +"«${primary_key}»" + +msgid "Host Group Settings" +msgstr "Параметри групи вузлів" + +msgid "Remove host groups" +msgstr "Вилучити групи вузлів" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "Вилучити групу вузлів «${primary_key}» з груп вузлів" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "Вилучити групу вузлів «${primary_key}» з мережевих груп" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Вилучити групу вузлів «${primary_key}» з правил HBAC" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "Вилучити групу вузлів «${primary_key}» з правил sudo" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "Вилучити вузли з групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "Вилучити групи вузлів з групи вузлів «${primary_key}»" + +msgid "User to override" +msgstr "Користувач для перевизначення" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" +"Введіть назву облікового запису довіреного користувача або користувача IPA. " +"Зауваження: у списку результатів пошуку не буде записів користувачів із " +"довірених доменів." + +msgid "Enter trusted user login." +msgstr "Введіть назву запису довіреного користувача." + +msgid "Profile" +msgstr "Профіль" + +msgid "Group to override" +msgstr "Група для перевизначення" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" +"Введіть назву запису довіреної групи або групи IPA. Зауваження: у списку " +"результатів пошуку не буде записів груп із довірених доменів." + +msgid "Enter trusted group name." +msgstr "Введіть назву довіреної групи." + +msgid "Add ID view" +msgstr "Додати перегляд ідентифікатора" + +msgid "Add group ID override" +msgstr "Додати перевизначення ідентифікатора групи" + +msgid "Add user ID override" +msgstr "Додати перевизначення ідентифікатора користувача" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key} застосовується до:" + +msgid "Applied to hosts" +msgstr "Застосовується до вузлів" + +msgid "Apply to host groups" +msgstr "Застосувати до груп вузлів" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" +"Застосувати ${primary_key} перегляду ідентифікаторів до вузлів груп вузлів" + +msgid "Apply to hosts" +msgstr "Застосувати до вузлів" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "Застосувати ${primary_key} перегляду ідентифікаторів до вузлів" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "${primary_key} перевизначає:" + +msgid "Remove ID views" +msgstr "Вилучити перегляди ідентифікаторів" + +msgid "Remove user ID overrides" +msgstr "Вилучити перевизначення ідентифікаторів користувачів" + +msgid "Remove group ID overrides" +msgstr "Вилучити перевизначення ідентифікаторів груп" + +msgid "Un-apply from host groups" +msgstr "Скасувати застосування до груп вузлів" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" +"Скасувати застосування переглядів ідентифікаторів до вузлів груп вузлів" + +msgid "Un-apply" +msgstr "Скасувати" + +msgid "Un-apply from hosts" +msgstr "Скасувати застосування до вузлів" + +msgid "Un-apply ID Views from hosts" +msgstr "Скасувати застосування переглядів ідентифікаторів до вузлів" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" +"Ви справді хочете скасувати застосування перегляду ідентифікаторів до " +"позначених записів?" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" +"Скасувати застосування перегляду ідентифікаторів «${primary_key}» до вузлів" + +msgid "Add netgroup" +msgstr "Додати мережеву групу" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "Додати мережеву групу «${primary_key}» до мережевих груп" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "Додати мережеві групи до мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "Додати групи користувачів до мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "Додати вузли до мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "Додати групи вузлів до мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "Додати користувачів до мережевої групи «${primary_key}»" + +msgid "Host" +msgstr "Вузол" + +msgid "Netgroup Settings" +msgstr "Параметри мережевої групи" + +msgid "Remove netgroups" +msgstr "Вилучити мережеві групи" + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "Вилучити мережеву групу «${primary_key}» з мережевих груп" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Вилучити групи користувачів з мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "Вилучити вузли з мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "Вилучити групи вузлів з мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "Вилучити мережеві групи з мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "Вилучити користувачів з мережевої групи «${primary_key}»" + +msgid "Add OTP token" +msgstr "Додати жетон OTP" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "Додати ключ керування записами користувачів OTP «${primary_key}»" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"Ви можете скористатися FreeOTP як " +"програмою для роботи з ключами OTP." + +msgid "Configure your token" +msgstr "Налаштувати ваш жетон" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" +"Налаштуйте ваш жетон скануванням QR-коду, наведеного нижче. Натисніть поле " +"QR-коду, якщо ви бачите правильні дані на пристрої, який ви хочете " +"налаштувати." + +msgid "OTP Token Settings" +msgstr "Параметри жетона OTP" + +msgid "Disable token" +msgstr "Вимкнути жетон" + +msgid "Enable token" +msgstr "Увімкнути жетон" + +msgid "Remove OTP tokens" +msgstr "Вилучити ключі OTP" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "Вилучити ключ керування записами користувачів OTP «${primary_key}»" + +msgid "Show QR code" +msgstr "Показати QR-код" + +msgid "Show configuration uri" +msgstr "Показати адресу налаштувань" + +msgid "Counter-based (HOTP)" +msgstr "На основі лічильника (HOTP)" + +msgid "Time-based (TOTP)" +msgstr "На основі часу (TOTP)" + +msgid "Add Custom Attribute" +msgstr "Додати нетиповий атрибут" + +msgid "Permission settings" +msgstr "Параметри прав доступу" + +msgid "Attribute breakdown" +msgstr "Розбиття за атрибутами" + +msgid "Privilege Settings" +msgstr "Параметри привілеїв" + +msgid "Public key:" +msgstr "Відкритий ключ:" + +msgid "Set public key" +msgstr "Встановити відкритий ключ" + +msgid "Show/Set key" +msgstr "Показати або встановити ключ" + +msgid "Modified: key not set" +msgstr "Змінено: ключ не встановлено" + +msgid "Modified" +msgstr "Змінено" + +msgid "New: key not set" +msgstr "Новий: ключ не встановлено" + +msgid "New: key set" +msgstr "Новий: ключ встановлено" + +msgid "Add password policy" +msgstr "Додати правила паролів" + +msgid "Password Policy" +msgstr "Правила для паролів" + +msgid "Remove password policies" +msgstr "Вилучити правила паролів" + +msgid "Add ID range" +msgstr "Додати діапазон ідентифікаторів" + +msgid "Range Settings" +msgstr "Параметри діапазону" + +msgid "Base ID" +msgstr "Основа ID" + +msgid "Primary RID base" +msgstr "Головна основа RID" + +msgid "Range size" +msgstr "Розмір діапазону" + +msgid "Domain SID" +msgstr "Домен SID" + +msgid "Secondary RID base" +msgstr "Вторинна основа RID" + +msgid "Remove ID ranges" +msgstr "Вилучити діапазони ідентифікаторів" + +msgid "Active Directory domain" +msgstr "Домен Active Directory" + +msgid "Active Directory domain with POSIX attributes" +msgstr "Домен Active Directory з атрибутами POSIX" + +msgid "Detect" +msgstr "Визначити" + +msgid "Local domain" +msgstr "Локальний домен" + +msgid "IPA trust" +msgstr "Довіра IPA" + +msgid "Active Directory winsync" +msgstr "winsync Active Directory" + +msgid "Add RADIUS server" +msgstr "Додати сервер RADIUS" + +msgid "RADIUS Proxy Server Settings" +msgstr "Параметри проксі-сервера RADIUS" + +msgid "Remove RADIUS servers" +msgstr "Вилучити сервери RADIUS" + +msgid "Check DNS" +msgstr "Перевірка DNS" + +msgid "Do you also want to perform DNS check?" +msgstr "Хочете також виконати перевірку DNS?" + +msgid "Force Update" +msgstr "Примусове оновлення" + +msgid "Add SELinux user map" +msgstr "Додати карту користувачів SELinux" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" +"Додати групи користувачів до прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "Додати групи вузлів до прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "Додати вузли до прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "Додати користувачів до прив'язки користувачів SELinux «${primary_key}»" + +msgid "Remove selinux user maps" +msgstr "Вилучити прив'язки користувачів selinux" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" +"Вилучити групи користувачів з прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" +"Вилучити групи вузлів з прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "Вилучити вузли з прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" +"Вилучити користувачів з прив'язки користувачів SELinux «${primary_key}»" + +msgid "Server Roles" +msgstr "Ролі сервера" + +msgid "Server Role" +msgstr "Роль сервера" + +msgid "Warning: Consider service replication" +msgstr "Попередження: вам варто скористатися реплікацією служб" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" +"Наполегливо рекомендуємо вам встановити наступні служби одразу на декількох " +"серверах:" + +msgid "Delete Server" +msgstr "Вилучити сервер" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" +"Вилучення запису сервера призведе до його остаточного вилучення з топології. " +"Зауважте, що скасувати результати виконання цієї дії неможливо." + +msgid "Add service" +msgstr "Додати службу" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "Додати службу керування вузлами «${primary_key}»" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "Додати службу «${primary_key}» до ролей" + +msgid "Service Certificate" +msgstr "Сертифікат служби" + +msgid "Service Settings" +msgstr "Параметри служби" + +msgid "Provisioning" +msgstr "Передбачення" + +msgid "Remove services" +msgstr "Вилучити служби" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "Вилучити службу «${primary_key}» з ролей" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "Вилучити службу керування вузлами «${primary_key}»" + +msgid "Are you sure you want to unprovision this service?" +msgstr "Ви справді бажаєте скасувати передбачення цієї служби?" + +msgid "Unprovisioning service" +msgstr "Служба скасовування передбачення" + +msgid "Service unprovisioned" +msgstr "Службу не передбачено" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Маємо ключ Kerberos, службу передбачено" + +msgid "SSH public keys" +msgstr "Відкриті ключі SSH" + +msgid "SSH public key:" +msgstr "Відкритий ключ SSH:" + +msgid "Set SSH key" +msgstr "Встановити ключ SSH" + +msgid "Are you sure you want to activate selected users?" +msgstr "Ви справді хочете активувати позначені записи користувачів?" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "Ви справді хочете активувати ${object}?" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "Активовано ${count} записів користувачів" + +msgid "Add stage user" +msgstr "Додати користувача етапу" + +msgid "Stage users" +msgstr "Користувачі етапу" + +msgid "Preserved users" +msgstr "Зарезервовані користувачі" + +msgid "Remove preserved users" +msgstr "Вилучити збережених користувачів" + +msgid "Remove stage users" +msgstr "Вилучити користувачів етапів" + +msgid "Are you sure you want to stage selected users?" +msgstr "Ви справді хочете зробити користувачами етапу позначених користувачів?" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "Користувачами етапу зроблено ${count} користувачів" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "Ви справді хочете виставити ${object}?" + +msgid "Are you sure you want to restore selected users?" +msgstr "Ви справді хочете відновити позначені записи користувачів?" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "Ви справді хочете відновити ${object}?" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "Відновлено ${count} записів користувачів" + +msgid "User categories" +msgstr "Категорії користувачів" + +msgid "Add sudo command" +msgstr "Додати команду sudo" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "Додати команду sudo «${primary_key}» до груп команд sudo" + +msgid "Remove sudo commands" +msgstr "Вилучити команди sudo" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "Вилучити команду sudo «${primary_key}» з груп команд sudo" + +msgid "Add sudo command group" +msgstr "Додати групу команд sudo" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "Додати команди sudo до групи команд sudo «${primary_key}»" + +msgid "Remove sudo command groups" +msgstr "Вилучити групи команд sudo" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "Вилучити команди sudo з групи команд sudo «${primary_key}»" + +msgid "Add sudo rule" +msgstr "Додати правило sudo" + +msgid "Add sudo option" +msgstr "Додати параметр sudo" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "Додати команди дозволу sudo до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "Додати групи дозволу команд sudo до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "Додати команди заборони sudo до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "Додати групи заборони команд sudo до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "Додати групи користувачів до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "Додати групи вузлів до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "Додати вузли до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "Додати користувачів RunAs до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "Додати групи користувачів RunAs до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "Додати групи RunAs до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "Додати користувачів до правила sudo «${primary_key}»" + +msgid "Allow" +msgstr "Дозволити" + +msgid "Any Command" +msgstr "Будь-яка команда" + +msgid "Any Group" +msgstr "Будь-яка група" + +msgid "Run Commands" +msgstr "Виконання команд" + +msgid "Deny" +msgstr "Відмовити" + +msgid "Access this host" +msgstr "Доступ до цього вузла" + +msgid "Option added" +msgstr "Додано параметр" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "Вилучено ${count} параметрів" + +msgid "Remove sudo rules" +msgstr "Вилучити правила sudo" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "Вилучити команди дозволу sudo з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи дозволу команд sudo з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "Вилучити команди заборони sudo з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи заборони команд sudo з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи користувачів з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи вузлів з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "Вилучити вузли з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "Вилучити користувачів RunAs з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи користувачів RunAs з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи RunAs з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "Вилучити користувачів з правила sudo «${primary_key}»" + +msgid "As Whom" +msgstr "Від імені" + +msgid "Specified Commands and Groups" +msgstr "Вказані команди і групи" + +msgid "Specified Groups" +msgstr "Вказані групи" + +msgid "Remove sudo options" +msgstr "Вилучити параметри sudo" + +msgid "Autogenerated" +msgstr "Створено автоматично" + +msgid "Segment details" +msgstr "Подробиці сегмента" + +msgid "Replication configuration" +msgstr "Налаштування реплікації" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" +"Для керованої топології потрібен мінімальний рівень домену ${domainlevel}" + +msgid "Add IPA location" +msgstr "Додати місце IPA" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "Додати сервер IPA до місця IPA «${primary_key}»" + +msgid "Remove IPA locations" +msgstr "Вилучити місця IPA" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "Вилучити сервери IPA з місця IPA «${primary_key}»" + +msgid "Add topology segment" +msgstr "Додати сегмент топології" + +msgid "Remove topology segments" +msgstr "Вилучити елементи топології" + +msgid "Account" +msgstr "Обліковий запис" + +msgid "Add trust" +msgstr "Додати довіру" + +msgid "Administrative account" +msgstr "Адміністративний обліковий запис" + +msgid "SID blocklists" +msgstr "Списки блокування SID" + +msgid "Trust Settings" +msgstr "Параметри довіри" + +msgid "Establish using" +msgstr "Встановити за допомогою" + +msgid "Fetch domains" +msgstr "Отримати домени" + +msgid "Pre-shared password" +msgstr "Попередньо оприлюднений пароль" + +msgid "Remove trusts" +msgstr "Вилучити записи довіри" + +msgid "Remove domains" +msgstr "Вилучити домени" + +msgid "Trust direction" +msgstr "Напрямок довіри" + +msgid "Trust status" +msgstr "Стан довіри" + +msgid "Trust type" +msgstr "Тип довіри" + +msgid "Alternative UPN suffixes" +msgstr "Альтернативні суфікси UPN" + +msgid "User attributes for SMB services" +msgstr "Атрибути користувача для служб SMB" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "Шлях до скрипту, який буде виконано у системі Windows під час входу" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" +"Шлях до профілю користувача у форматі UNC \\\\сервер\\спільний_ресурс\\" + +msgid "Path to a user home directory, in UNC format" +msgstr "Шлях до домашнього каталогу користувача у форматі UNC" + +msgid "Drive to mount a home directory" +msgstr "Диск монтування домашнього каталогу" + +msgid "Account Settings" +msgstr "Параметри облікового запису" + +msgid "Account Status" +msgstr "Стан облікового запису" + +msgid "Active users" +msgstr "Активні користувачі" + +msgid "Add user" +msgstr "Додати користувача" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "Додати користувача «${primary_key}» до списку груп користувачів" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Додати користувача «${primary_key}» до правил HBAC" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "Додати користувача «${primary_key}» до списку мережевих груп" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "Додати користувача «${primary_key}» до ролей" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "Додати користувача «${primary_key}» до правил sudo" + +msgid "Contact Settings" +msgstr "Параметри контакту" + +msgid "Delete mode" +msgstr "Режим вилучення" + +msgid "Employee Information" +msgstr "Відомості щодо працівника" + +msgid "Error changing account status" +msgstr "Помилка під час спроби зміни стану облікового запису" + +msgid "Password expiration" +msgstr "Обмеження терміну дії пароля" + +msgid "Mailing Address" +msgstr "Адреса ел. пошти" + +msgid "Misc. Information" +msgstr "Інша інформація" + +msgid "delete" +msgstr "вилучити" + +msgid "preserve" +msgstr "зберегти" + +msgid "No private group" +msgstr "Немає приватної групи" + +msgid "Remove users" +msgstr "Вилучити користувачів" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "Вилучити користувача «${primary_key}» з груп користувачів" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "Вилучити користувача «${primary_key}» з мережевих груп" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "Вилучити користувача «${primary_key}» з ролей" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Вилучити користувача «${primary_key}» з правил HBAC" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "Вилучити користувача «${primary_key}» з правил sudo" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"Ви справді бажаєте виконати щодо користувача дію «${action}»?
Зміни буде " +"внесено негайно." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Натисніть, щоб ${action}" + +msgid "Unlock" +msgstr "Розблокувати" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Ви справді хочете розблокувати користувача ${object}?" + +msgid "Add vault" +msgstr "Додати сховище" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "Додати групи користувачів до списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "Додати служби до списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "Додати користувачів до списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "Додати групи користувачів до списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "Додати служби до списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "Додати користувачів до списку власників сховища «${primary_key}»" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" +"Реєстраційні дані можна додавати до сховища або отримувати з нього лише за " +"допомогою інструментів командного рядка vault-archive і vault-retrieve." + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" +"Вміст сховищ типу «стандартне» можуть переглядати користувачі із вищим " +"рівнем прав доступу (адміністратори)." + +msgid "Asymmetric" +msgstr "Асиметричний" + +msgid "Vaults Config" +msgstr "Налаштування сховища" + +msgid "Members" +msgstr "Учасники" + +msgid "My User Vaults" +msgstr "Сховища користувача" + +msgid "Owners" +msgstr "Власники" + +msgid "Remove vaults" +msgstr "Вилучити сховища" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" +"Вилучити групи користувачів зі списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "Вилучити служби зі списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "Вилучити користувачів зі списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" +"Вилучити групи користувачів зі списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "Вилучити служби зі списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "Вилучити користувачів зі списку власників сховища «${primary_key}»" + +msgid "Service Vaults" +msgstr "Сховища служб" + +msgid "Shared" +msgstr "Спільне" + +msgid "Shared Vaults" +msgstr "Спільні сховища" + +msgid "Standard" +msgstr "Стандартне" + +msgid "Symmetric" +msgstr "Симетричний" + +msgid "Vault Type" +msgstr "Тип сховища" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" +"За допомогою вебінтерфейсу можна створювати лише стандартні сховища. " +"Скористайтеся командним інтерфейсом для створення інших типів сховищ." + +msgid "User Vaults" +msgstr "Сховища користувачів" + +msgid "Current password is required" +msgstr "Слід вказати поточний пароль" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Строк дії вашого пароля буде вичерпано за ${days} днів." + +msgid "First OTP" +msgstr "Перший OTP" + +msgid "New password is required" +msgstr "Слід вказати новий пароль" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" +" OTP (одноразовий пароль): створити новий код OTP для кожного з полів OTP." + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" +" OTP (одноразовий пароль): створити новий код OTP для кожного з полів OTP." + +msgid "Token synchronization failed" +msgstr "Спроба синхронізації жетонів зазнала невдачі" + +msgid "The username, password or token codes are not correct" +msgstr "Ім’я користувача, пароль або коди жетона є помилковими" + +msgid "Token was synchronized" +msgstr "Жетон синхронізовано" + +msgid "Password change complete" +msgstr "Зміну пароля завершено" + +msgid "Your password has expired. Please enter a new password." +msgstr "Термін дії вашого паролю вичерпано. Будь ласка, введіть новий пароль." + +msgid "Passwords must match" +msgstr "Паролі мають збігатися" + +msgid "Password reset was not successful." +msgstr "Не вдалося скинути пароль." + +msgid "Reset your password." +msgstr "Скинути ваш пароль." + +msgid "Second OTP" +msgstr "Другий OTP" + +msgid "Verify Password" +msgstr "Повторіть пароль" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Ви справді бажаєте вилучити позначені записи?" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "Вилучено ${count} записів" + +msgid "Are you sure you want to disable selected entries?" +msgstr "Ви справді хочете вимкнути позначені записи?" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "Вимкнено ${count} записів" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Ви справді бажаєте увімкнути позначені записи?" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "Увімкнено ${count} записів" + +msgid "Some entries were not deleted" +msgstr "Деякі з записів не вилучено" + +msgid "Quick Links" +msgstr "Швидкі посилання" + +msgid "Select All" +msgstr "Вибрати все" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"За запитом повернуто більше за налаштоване максимальне значення результатів. " +"Показано лише перші ${counter} результатів." + +msgid "Unselect All" +msgstr "Скасувати вибір всього" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" +"

Налаштування браузера для Kerberos

\n" +"\n" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" +"

Firefox

\n" +"\n" +"

\n" +" Ви можете налаштувати Firefox на використання Kerberos для " +"служби універсального входу. Нижче наведено настанови, які допоможуть вам " +"налаштувати ваш браузер на надсилання реєстраційних даних Kerberos до " +"відповідного центру розповсюдження ключів, який надає доступ до служи " +"універсального входу.\n" +"

\n" +"\n" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" +"
    \n" +"
  1. \n" +"

    \n" +"Імпортування " +"сертифіката служби сертифікації (CA)\n" +"

    \n" +"

    \n" +" Переконайтеся, що вами позначено усі три поля для " +"позначок.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" У полі адреси Firefox введіть about:config, щоб " +"програма показала список поточних параметрів налаштувань.\n" +"
    3. \n" +"
  3. \n" +" У полі фільтрування введіть negotiate, щоб " +"фільтрувати список параметрів.\n" +"
    4. \n" +"
  4. \n" +" Двічі клацніть на пункті network.negotiate-auth." +"trusted-uris, щоб відкрити діалогову панель для введення значення " +"рядка.\n" +"
    5. \n" +"
  5. \n" +" Введіть назву домену, на якому ви хочете проходити " +"розпізнавання, наприклад, .example.com.\n" +"
    6. \n" +"
  6. Повернутися до інтернет-інтерфейсу
    7. \n" +"
\n" +"\n" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" +"

Chrome

\n" +"\n" +"

\n" +" Ви можете налаштувати Chrome на використання Kerberos для служби " +"універсального входу. Нижче наведено настанови, які допоможуть вам " +"налаштувати ваш браузер на надсилання реєстраційних даних Kerberos до " +"відповідного центру розповсюдження ключів, який надає доступ до служи " +"універсального входу.\n" +"

\n" +"\n" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" +"

Імпортування сертифіката служби сертифікації

\n" +"
    \n" +"
  1. \n" +" Отримайте сертифікат служби сертифікації. Крім того, якщо вузол є також клієнтом IdM, можете просто взяти цей " +"сертифікат з /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Натисніть кнопку меню із підказкою Налаштування та " +"керування Google Chrome, яку типово розташовано у верхньому правому " +"куті вікна Chrome, потім натисніть Налаштування.\n" +"
    3. \n" +"
  3. \n" +" Натисніть пункт Розширені, щоб отримати доступ до " +"ширшого списку параметрів, потім натисніть кнопку Керування " +"сертифікатами, яку розташовано у списку із заголовком «HTTPS/SSL».\n" +"
    4. \n" +"
  4. \n" +" На вкладці Центри сертифікації натисніть кнопку " +"Імпортувати у нижній частині сторінки.\n" +"
    5. \n" +"
  5. Виберіть сертифікат служби сертифікації, який ви отримали на першому " +"кроці.
    6. \n" +"
\n" +"\n" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" +"

\n" +" Вмикання SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) для використання розпізнавання Kerberos\n" +" у Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Переконайтеся, що у вас є потрібний каталог, за допомогою " +"такої команди:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Створіть файл /etc/opt/chrome/policies/managed/" +"mydomainjson із правами доступу на запис, обмеженими адміністратором " +"системи або root, із таким рядком вмісту:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*example.com\" }\n" +"
    \n" +"
    \n" +" Зробити це можна за допомогою такої команди:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com.\" }' > /etc/opt/chrome/" +"policies/managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Зауваження: якщо ви користуєтеся Chromium, скористайтеся " +"/etc/chromium/policies/managed/ замість /etc/opt/chrome/" +"policies/managed/ для двох кроків налаштовування для SPNEGO Chrome.\n" +"

    \n" +"
\n" +"\n" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" +"

Internet Explorer

\n" +"

ПОПЕРЕДЖЕННЯ: підтримку браузера Internet Explorer " +"припинено.

\n" +"

\n" +" Якщо ви здатні увійти до робочої станції за допомогою вашого " +"ключа kerberos, ви можете скористатися отриманим квитком у Internet " +"Explorer.\n" +"

\n" +"

\n" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" +"Увійдіть до системи Windows за допомогою облікового запису вашої " +"області Kerberos (адміністративного домену)\n" +"

\n" +"

\n" +"У Internet Explorer виберіть меню «Інструменти», потім пункт " +"«Параметри інтернету».\n" +"

\n" +"
\n" +"
    \n" +"
  1. Відкрийте вкладку «Безпека»
    2. \n" +"
  2. Натисніть «Локальна мережа»
    3. \n" +"
  3. Натисніть «Сайти»
    4. \n" +"
  4. Натисніть «Додатково»
    5. \n" +"
  5. Додайте ваш домен до списку
    6. \n" +"
\n" +"
    \n" +"
  1. Відкрийте вкладку «Безпека»
    2. \n" +"
  2. Натисніть «Локальна мережа»
    3. \n" +"
  3. Натисніть «Нетиповий рівень»
    4. \n" +"
  4. Виберіть «Автоматичний вхід лише у локальній зоні»
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Відкрийте kerberізований сайт за допомогою IE (вам слід використати у " +"адресі повноцінну назву домену)
    2. \n" +"
  2. Ось і усе.
    3. \n" +"
\n" +"
\n" +"\n" + +msgid "Working" +msgstr "Працює" + +msgid "Audit" +msgstr "Аудит" + +msgid "Authentication" +msgstr "Розпізнавання" + +msgid "Automount" +msgstr "Автоматичне монтування" + +msgid "DNS" +msgstr "DNS" + +msgid "Host-Based Access Control" +msgstr "Керування доступом на основі вузлів" + +msgid "Identity" +msgstr "Профіль" + +msgid "Network Services" +msgstr "Мережеві служби" + +msgid "Policy" +msgstr "Правила" + +msgid "Role-Based Access Control" +msgstr "Керування доступом на основі ролей" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Topology" +msgstr "Топологія" + +msgid "Trusts" +msgstr "Записи довіри" + +msgid "True" +msgstr "Так" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"\n" +msgstr "" +"

Не вдалося перевірити ваші реєстраційні дані Kerberos

\n" +"

\n" +" Будь ласка, переконайтеся, що у вас є чинні квитки Kerberos (їх " +"можна отримати за допомогою kinit), і що ви налаштували ваш " +"браузер належним чином.\n" +"

\n" +"\n" +"

Налаштовування браузера

\n" +"\n" +"
\n" +"

\n" +" Якщо це вперше, будь ласка, налаштуйте ваш браузер.\n" +"

\n" +"
\n" + +msgid "API Browser" +msgstr "Навігатор API" + +msgid "First" +msgstr "Перший" + +msgid "Last" +msgstr "Останній" + +msgid "Next" +msgstr "Далі" + +msgid "Page" +msgstr "Сторінка" + +msgid "Prev" +msgstr "Назад" + +msgid "Undo" +msgstr "Скасувати" + +msgid "Undo this change." +msgstr "Скасувати цю зміну." + +msgid "Undo All" +msgstr "скасувати всі дії" + +msgid "Undo all changes in this field." +msgstr "Скасувати усі зміни у цьому полі." + +msgid "Text does not match field pattern" +msgstr "Текст не відповідає шаблону поля" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" +"Має бути значенням дати часу за Гринвічем (UTC) (наприклад, «2014-01-20 " +"17:58:01Z»)" + +msgid "Must be a decimal number" +msgstr "Має бути десятковим числом" + +msgid "Format error" +msgstr "Помилка форматування" + +msgid "Must be an integer" +msgstr "Має бути цілим числом" + +msgid "Not a valid IP address" +msgstr "Некоректна IP-адреса" + +msgid "Not a valid IPv4 address" +msgstr "Некоректна адреса IPv4" + +msgid "Not a valid IPv6 address" +msgstr "Некоректна адреса IPv6" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Максимальним є значення ${value}" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Мінімальним є значення ${value}" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" +"Некоректна адреса у мережі (приклади коректних адрес: 2001:db8::/64, " +"192.0.2.0/24)" + +msgid "Parse error" +msgstr "Помилка обробки" + +msgid "Must be a positive number" +msgstr "Має бути додатним числом" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "«${port}» не є коректним визначенням порту" + +msgid "Required field" +msgstr "Обов’язкове поле" + +msgid "Unsupported value" +msgstr "Непідтримуване значення" + +msgid "Role" +msgstr "Роль" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Додано роль «%(value)s»" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Вилучено роль «%(value)s»" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Змінено роль «%(value)s»" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "встановлено відповідність %(count)d ролі" +msgstr[1] "встановлено відповідність %(count)d ролей" +msgstr[2] "встановлено відповідність %(count)d ролей" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"Сервери IPA\n" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"Отримати дані щодо встановлених серверів IPA.\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Знайти усі сервери:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Показати вказаний сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "server" +msgstr "сервер" + +msgid "servers" +msgstr "сервери" + +msgid "IPA Servers" +msgstr "Сервери IPA" + +msgid "Server location" +msgstr "Місце сервера" + +msgid "Service weight" +msgstr "Вага служб" + +msgid "Weight for server services" +msgstr "Вага служб сервера" + +msgid "Service relative weight" +msgstr "Відносна вага служб" + +msgid "Relative weight for server services (counts per location)" +msgstr "Відносна вага служб для сервера (обчислюється для окремого місця)" + +msgid "Enabled server roles" +msgstr "Увімкнені ролі сервера" + +msgid "List of enabled roles" +msgstr "Список усіх увімкнених ролей" + +msgid "Modify information about an IPA server." +msgstr "Змінити дані щодо сервера IPA." + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Змінено запис сервера IPA «%(value)s»" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "встановлено відповідність %(count)d сервера IPA" +msgstr[1] "встановлено відповідність %(count)d серверів IPA" +msgstr[2] "встановлено відповідність %(count)d серверів IPA" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Вилучено сервер IPA «%(value)s»" + +msgid "Ignore topology errors" +msgstr "Ігнорувати помилки топології" + +msgid "Ignore topology connectivity problems after removal" +msgstr "Ігнорувати проблеми із з’єднуваністю топології після вилучення" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" +"Ігнорувати перевірку на те, чи є сервер, який вилучають, останнім сервером " +"CA або DNS" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Пропустити перевірку того, чи вилучено останній основний сервер CA або " +"сервер DNS" + +msgid "Force server removal" +msgstr "Примусове вилучення сервера" + +msgid "Force server removal even if it does not exist" +msgstr "Примусове вилучення сервера, навіть якщо його не існує" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"Репліка є активним основним сервером ключів DNSSEC. Вилучення може зашкодити " +"вашій системі DNS. Будь ласка, спочатку вимкніть або замініть основний " +"сервер ключів DNSSEC." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" +"Вилучення цього запису сервера залишить вашу встановлену систему без DNS." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " +"систему без KRA." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " +"систему без CA." + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "Ігноруємо ці попередження і продовжуємо процедуру вилучення" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" +"Не вдалося вилучити %(principal)s memberPrincipal із запису s4u2proxy " +"%(dn)s: %(err)s" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "Не вдалося вилучити записи назви вузла DNA для %(master)s: %(err)s" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" +"Не вдалося вилучити запис сервера %(master)s зі списку серверів: %(err)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "Не вдалося вилучити ключі Custodia для %(master)s: %(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Не вдалося вилучити реєстраційні запис або ключі сервера: %(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Не вдалося вилучити записи DNS %(hostname)s: %(err)s" + +msgid "You may need to manually remove them from the tree" +msgstr "Ймовірно, вам доведеться вилучити їх із ієрархії вручну" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "Примусово вилучаємо %(hostname)s" + +msgid "Ignoring topology connectivity errors." +msgstr "Ігноруємо помилки із з’єднуваністю топології." + +msgid "Server has already been deleted" +msgstr "Запис сервера вже вилучено" + +msgid "Agreements deleted" +msgstr "Угоди вилучено" + +msgid "Following segments were not deleted:" +msgstr "Вказані нижче сегменти не було вилучено:" + +#, python-format +msgid "must be \"%s\"" +msgstr "має бути «%s»" + +msgid "not allowed to perform server connection check" +msgstr "не дозволено виконувати перевірку з’єднання сервера" + +msgid "Set enabled/hidden state of a server." +msgstr "Встановити стан увімкнено/приховано для сервера." + +msgid "State" +msgstr "Стан" + +msgid "Server state" +msgstr "Стан сервера" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Змінено стан сервера «%(value)s»." + +msgid "Cannot hide CA renewal master." +msgstr "Не можна приховувати основний сервер оновлення CA." + +msgid "Cannot hide DNSSec key master." +msgstr "Не можна приховувати основний сервер ключів DNSSec." + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "Не можна приховувати останній увімкнений сервер %(name)s." + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Обмежене службами делегування\n" +"\n" +"Керування правилами, за допомогою яких можна обмежити делегування\n" +"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" +"користувача під час обміну даними з іншою службою без потреби для\n" +"користувача насправді переспрямовувати квиток для отримання квитка\n" +"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" +"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" +"доступу користувачів.\n" +"\n" +"Відповідно до угоди з іменування, до назви правила додається слово\n" +"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" +"допомагає концептуально пов’язати правила та їхні призначення.\n" +"\n" +"Правило складається з двох компонентів:\n" +" - Списку цілей (призначень), яких стосується правило\n" +" - Списку memberPrincipals, яким дозволено делегування для\n" +" цих цілей\n" +"\n" +"Запис цілі складається зі списку реєстраційних записів, які можна\n" +"делегувати.\n" +"\n" +"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" +"можна делегувати як вказаний список реєстраційних записів,\n" +"відповідно до визначеного списку цілей.\n" +"\n" +"У правилі і цілі реєстраційні дані Kerberos може бути вказано за\n" +"їхньою назвою або альтернативною назвою, область дії можна пропустити.\n" +"Крім того, вузли можна вказувати за їхніми назвами. Якщо вказані\n" +"реєстраційні дані Kerberos містять один компонент і не завершуються " +"символом\n" +"«$», запис вважатиметься назвою вузла. Назви реєстраційних даних Kerberos, " +"які\n" +"завершуються «$» типово використовуються як альтернативні назви для " +"пов'язаних\n" +"із Active Directory служб.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нове правило обмеженого делегування:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Додати нову ціль обмеженого делегування:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Додати реєстраційний запис до правила:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Додати реєстраційні дані вузла «ipa.example.com» до правила:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Додати нашу ціль до правила:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Додати реєстраційний запис до цілі:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Показати дані щодо іменованого правила і цілі:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Вилучити обмежене делегування:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" +"служби ldap від імені пов’язаного користувача.\n" +"\n" +"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" +"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" +"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" +"делегування, що спричинить непрацездатність усієї системи.\n" + +msgid "Allowed to Impersonate" +msgstr "Дозволено виконувати імперсонацію" + +msgid "Member principals" +msgstr "Реєстраційні записи учасників" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "Помилкове форматування реєстраційного запису: %(error)s" + +msgid "Add target to a named service delegation." +msgstr "Додати ціль до делегування іменованої служби." + +#, python-format +msgid "member %s" +msgstr "%s учасника" + +msgid "Remove member from a named service delegation." +msgstr "Вилучити запис із делегування іменованої служби." + +msgid "service delegation rule" +msgstr "правило делегування служби" + +msgid "service delegation rules" +msgstr "правила делегування служб" + +msgid "Service delegation rules" +msgstr "Правила делегування служб" + +msgid "Service delegation rule" +msgstr "Правило делегування служб" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Додано правило делегування служб «%(value)s»" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Вилучено делегування служб «%(value)s»" + +msgid "privileged service delegation rule" +msgstr "привілейоване правило делегування служб" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "встановлено відповідність %(count)d правила делегування служб" +msgstr[1] "встановлено відповідність %(count)d правил делегування служб" +msgstr[2] "встановлено відповідність %(count)d правил делегування служб" + +msgid "service delegation target" +msgstr "ціль делегування служб" + +msgid "service delegation targets" +msgstr "призначення делегування служб" + +msgid "Service delegation targets" +msgstr "Призначення делегування служб" + +msgid "Service delegation target" +msgstr "Ціль делегування служб" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Додано ціль делегування служб «%(value)s»" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Вилучено ціль делегування служб «%(value)s»" + +msgid "privileged service delegation target" +msgstr "привілейована ціль делегування служб" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "встановлено відповідність %(count)d призначення делегування служб" +msgstr[1] "встановлено відповідність %(count)d призначень делегування служб" +msgstr[2] "встановлено відповідність %(count)d призначень делегування служб" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" +"\n" +"Перехід на IPA\n" +"\n" +"Перенесення користувачів і груп з сервера LDAP на IPA.\n" +"\n" +"Надсилає запит LDAP до віддаленого сервера з метою пошуку користувачів\n" +"і груп у контейнері. З метою перенесення паролів вам слід прив’язатися\n" +"до сервера від імені користувача, який може читати атрибут userPassword\n" +"на сервері. Перелік таких користувачів зазвичай обмежено адміністраторами\n" +"вищого рівня, зокрема cn=Directory Manager на 389-ds (типовий користувач\n" +"bind).\n" +"\n" +"Типовим контейнером користувачів є ou=People.\n" +"\n" +"Типовим контейнером груп є ou=Groups.\n" +"\n" +"Записи користувачів і груп, які вже створено на сервері IPA буде\n" +"пропущено.\n" +"\n" +"Дві схеми LDAP визначають спосіб зберігання записів учасників групи:\n" +"RFC2307 і RFC2307bis. RFC2307bis використовує атрибути member і\n" +"uniquemember для визначення учасників групи, RFC2307 використовує\n" +"memberUid. Типовою є схема RFC2307bis.\n" +"\n" +"За допомогою додатка compat IPA може повторно форматувати дані для систем,\n" +"де не передбачено підтримки RFC2307bis. Рекомендується вимикати цей додаток\n" +"під час перенесення, щоб зменшити навантаження на систему. Ви зможете\n" +"увімкнути його після перенесення. Щоб перенести дані з увімкненим додатком\n" +"скористайтеся параметром «--with-compat».\n" +"\n" +"Перенесені користувачі не матимуть реєстраційних записів Kerberos,\n" +"перенесено буде лише пароль LDAP. Щоб завершити процес перенесення,\n" +"користувачам слід відкрити сторінку\n" +"http://ipa.example.com/ipa/migration і пройти розпізнавання за\n" +"допомогою пароля LDAP з метою створення запису реєстраційних даних\n" +"Kerberos.\n" +"\n" +"Типово перенесення вимкнено. Для його вмикання скористайтеся командою\n" +"ipa config-mod:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Якщо основний DN не буде надано за допомогою --basedn, IPA " +"використовуватиме\n" +"значення defaultNamingContext, якщо його встановлено, або перше значення у\n" +"наборі namingContexts у кореневій теці віддаленого сервера LDAP.\n" +"\n" +"Записи користувачів додають до типової групи користувачів. Процес такого\n" +"додавання може бути доволі тривалим, отже під час перенесення він " +"виконується\n" +"у пакетному режимі, пакетами по 100 користувачів. У результаті буде певний\n" +"період, коли записи користувачів вже буде додано до IPA, але ці користувачі\n" +"ще не будуть учасниками типової групи користувачів.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Найпростіше перенесення з типовими параметрами:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Визначення контейнерів користувача і групи. Можна скористатися для\n" +" перенесення даних користувача і групи з сервера IPA версії 1:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Оскільки на сервері IPA версії 2 вже передбачено попередньо\n" +" визначені групи, які можуть збігатися з групами, які переносяться з\n" +" сервера (IPA версії 1), наприклад admins, ipausers, користувачів з\n" +" таких груп може бути перенесено до невідомої (unknown) групи на\n" +" новому сервері IPA версії 2.\n" +" Скористайтеся параметром --group-overwrite-gid для перезапису\n" +" ідентифікатора групи вже створених груп для запобігання цій\n" +" незручності:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Перенесені дані користувачів та груп можуть містити класи об’єктів та " +"супутні\n" +" атрибути, невідомі серверу IPA версії 2. Ці класти об’єктів та атрибутів\n" +" може бути виключено з процедури перенесення даних:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"ВЕДЕННЯ ЖУРНАЛУ\n" +"\n" +"Під час перенесення повідомлення з попередженнями та записами помилок\n" +"додаватимуться до журналу помилок Apache. З відповідним файлом слід\n" +"ознайомитися після завершення перенесення для виправлення та виявлення\n" +"помилок, які могли статися.\n" +"\n" +"Для кожного пакета зі 100 перенесених записів користувачів буде показано\n" +"інформаційне повідомлення, призначене для оцінки поступу обробки та\n" +"визначення її тривалості.\n" +"\n" +"Якщо визначено рівень ведення журналу debug за допомогою встановлення\n" +"debug = True у /etc/ipa/default.conf або у /etc/ipa/server.conf,\n" +"для кожного перенесеного запису додаватиметься власний запис, також\n" +"додаватиметься резюме щодо кожного оновлення типової групи\n" +"користувачів.\n" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Реєстраційний запис Kerberos %s вже існує. Скористайтеся командою «ipa user-" +"mod», щоб встановити його параметри вручну." + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Не вдалося визначити, чи існує вже реєстраційний запис Kerberos %s. " +"Скористайтеся командою «ipa user-mod», щоб встановити його параметри вручну." + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Не вдалося додати користувача до типової групи. Додати користувача вручну " +"можна за допомогою команди «ipa group-add-member»." + +msgid "Migration of LDAP search reference is not supported." +msgstr "Підтримки перенесення посилання пошуку LDAP не передбачено." + +msgid "Malformed DN" +msgstr "Помилкове форматування DN" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s не є користувачем з групи POSIX" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" +". Перевірте ідентифікатор вже створеної групи. Скористайтеся параметром --" +"group-overwrite-gid для перезапису ідентифікатора групи" + +msgid "Invalid LDAP URI." +msgstr "Некоректна адреса LDAP." + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s, які слід виключити з перенесення" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"список результатів пошуку об’єктів міграції\n" +"було обрізано сервером; ймовірно,\n" +"процес міграції не завершено\n" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"Пошуком LDAP у %(container)s не повернуто жодного результату (основа пошуку: " +"%(search_base)s, клас об’єктів: %(objectclass)s)" + +msgid "Default group for new users not found" +msgstr "Типової групи для нових користувачів не знайдено" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" +"\n" +"Вузли/Комп’ютери\n" +"\n" +"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " +"контекстах:\n" +"- записи служб, пов’язані з певним вузлом\n" +"- вузол зберігає реєстраційні дані вузол/служба\n" +"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" +"- для усіх зареєстрованих клієнтів створюється запис вузла\n" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" +"\n" +"РЕЄСТРАЦІЯ:\n" +"\n" +"Передбачено три сценарії реєстрації нових клієнтів:\n" +"\n" +"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" +" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" +" учасником групи admins.\n" +"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" +" існувати. Обмежений адміністратор виконує роль з привілеями\n" +" Host Enrollment.\n" +"3. Вузол було створено з одноразовим паролем.\n" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" +"\n" +"ПОВТОРНА РЕЄСТРАЦІЯ:\n" +"\n" +"Вузол, якому вже колись було надано певну роль, але налаштування було " +"втрачено\n" +"(наприклад через знищення віртуальної машини), можна знову зареєструвати " +"(надати роль).\n" +"\n" +"Щоб дізнатися більше, зверніться до сторінок підручника (man) щодо ipa-" +"client-install.\n" +"\n" +"Запис вузла може, якщо потрібно, зберігати відомості щодо розташування, " +"запущеної\n" +"операційної системи тощо.\n" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" +"\n" +"Додати новий вузол:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Вилучити вузол:\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Додати новий вузол з одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +"Додати новий вузол з випадковим одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Змінити відомості щодо вузла:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " +"змін:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " +"вузла :\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Дозволити користувачеві створення таблиці ключів:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "Base-64 encoded host certificate" +msgstr "Сертифікат вузла у кодуванні Base-64" + +msgid "Principal alias" +msgstr "Псевдонім реєстраційного запису" + +msgid "SSH public key fingerprint" +msgstr "Відбиток відкритого ключа SSH" + +msgid "Authentication Indicators" +msgstr "Індикатори розпізнавання" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" +"Визначає список дозволених індикаторів розпізнавання. Скористайтеся " +"значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " +"Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на основі " +"RADIUS. Скористайтеся значенням «pkinit», щоб дозволити розпізнавання 2FA на " +"основі PKINIT. Скористайтеся значенням «hardened», щоб дозволити захищене " +"від простого перебирання розпізнавання за паролем на основі SPAKE або FAST. " +"Якщо індикатор не буде вказано, буде дозволено усі механізми." + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Додано вузол «%(value)s»" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Вилучено вузол «%(value)s»" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "Вилучити записи A, AAAA, SSHFP і PTR вузлів, керованих DNS IPA" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Не знайдено записів A, AAAA, SSHFP або PTR." + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Змінено вузол «%(value)s»" + +msgid "Password cannot be set on enrolled host." +msgstr "Не можна визначати пароль для вузла з визначеною роллю." + +msgid "cn is immutable" +msgstr "cn є незмінним" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "встановлено відповідність %(count)d вузла" +msgstr[1] "встановлено відповідність %(count)d вузлів" +msgstr[2] "встановлено відповідність %(count)d вузлів" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Вимкнено вузол «%(value)s»" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Додано сертифікати до запису вузла «%(value)s»" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Вилучено сертифікати із запису вузла «%(value)s»" + +msgid "Add new principal alias to host entry" +msgstr "Додати новий псевдонім реєстраційного запису до запису вузла" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Додано нові псевдоніми до запису вузла «%(value)s»" + +msgid "Remove principal alias from a host entry" +msgstr "Вилучити псевдонім реєстраційного запису із запису вузла" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Вилучити псевдоніми із запису вузла «%(value)s»" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" +"Клас об'єкта служби, який використовується для прив'язування правил до груп" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"пріоритет повинен мати унікальне значення (%(prio)d вже використано для " +"%(gname)s)" + +msgid "Add Class of Service entry" +msgstr "Додати запис класу служби" + +msgid "Delete Class of Service entry" +msgstr "Вилучити запис класу служби" + +msgid "Modify Class of Service entry" +msgstr "Змінити запис класу служби" + +msgid "Display Class of Service entry" +msgstr "Показати запис класу служби" + +msgid "Search for Class of Service entry" +msgstr "Шукати запис класу служби" + +msgid "password policy" +msgstr "правила для паролів" + +msgid "password policies" +msgstr "правила щодо паролів" + +msgid "Password Policies" +msgstr "Правила щодо паролів" + +msgid "Max repeat" +msgstr "Макс. повторення" + +msgid "Maximum number of same consecutive characters" +msgstr "Максимальна кількість однакових символів поспіль" + +msgid "Max sequence" +msgstr "Макс. послідовність" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "Максимальна довжина можливої послідовності з абетки (abcd)" + +msgid "Dictionary check" +msgstr "Перевірка за словником" + +msgid "Check if the password is a dictionary word" +msgstr "Перевіряти, чи є пароль словом зі словника" + +msgid "User check" +msgstr "Перевірка на ім'я користувача" + +msgid "Check if the password contains the username" +msgstr "Перевіряти, чи не міститься у паролі ім'я користувача" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" +"Якщо визначено maxrepeat, maxsequence, dictcheck або usercheck, мінімальною " +"довжиною має бути число >= 6" + +msgid "Maximum password life must be greater than minimum." +msgstr "" +"Максимальний строк дії пароля має перевищувати мінімальний строк його дії." + +msgid "cannot delete global password policy" +msgstr "неможливо вилучити загальні правила паролів" + +msgid "priority cannot be set on global policy" +msgstr "для загальних правил не може встановлювати пріоритети" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" +"\n" +"Довіра між областями\n" +"\n" +"Керування відносинами довіри між доменами IPA і Active Directory.\n" +"\n" +"З метою надання доступу користувачам віддаленого домену до ресурсів у " +"домені\n" +"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" +"підтримку довіри лише між доменами IPA і Active Directory під керуванням " +"Windows\n" +"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " +"або\n" +"новішої версії.\n" +"\n" +"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " +"доменах,\n" +"IPA і Active Directory, щоб домени могли виявити один одного. " +"Працездатність\n" +"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" +"іншому домені за допомогою записів DNS.\n" +"\n" +"Приклад:\n" +"\n" +"1. Встановити довіру між областями з Active Directory за допомогою " +"реєстраційних\n" +" даних адміністратора AD:\n" +"\n" +" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" +"password\n" +"\n" +"2. Показати список всіх наявних відносин довіри:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показати подробиці щодо певних відносин довіри:\n" +"\n" +" ipa trust-show <домен.ad>\n" +"\n" +"4. Вилучити наявні відносини довіри:\n" +"\n" +" ipa trust-del <домен.ad>\n" +"\n" +"Щойно відносини довіри буде встановлено, віддалених користувачів слід " +"прив’язати\n" +"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" +"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " +"потім\n" +"цю групу має бути включено до однієї з локальних груп POSIX.\n" +"\n" +"Приклади:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " +"POSIX\n" +" довіреного домену:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " +"ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " +"ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external для " +"перегляду їхніх SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" +"\n" +"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" +"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " +"Після\n" +"цього створені ідентифікатори використовуються для обміну даними з\n" +"довіреним доменом певного типу.\n" +"\n" +"1. Показати налаштування довіри загального рівня для типів довіри Active " +"Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" +" встановити іншу резервну основну групу (GID резервної основної групи\n" +" використовується як GID основного користувача, якщо користувача\n" +" розпізнано у домені IPA, але він не має жодного вже встановленого\n" +" основного GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Повернути для резервної основної групи значення типової прихованої групи\n" +" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr " Крім того, цю команду можуть виконати такі сервери: %(masters)s" + +msgid "AD Trust setup" +msgstr "Налаштування довіри AD" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Виконати вибрану команду без встановленої підтримки Samba 4 неможливо. " +"Переконайтеся, що вами встановлено підпакунок IPA server-trust-ad." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Вибрану команду не можна виконати без екземпляра Samba 4, встановленого у " +"цій системі. Переконайтеся, що на цьому сервері було виконано ipa-adtrust-" +"install." + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без налаштовування власного домену не можна виконувати пошук у довірених " +"доменах. Спочатку запустіть ipa-adtrust-install на сервері IPA." + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"Спроба отримати список доменів із довіреного лісу зазнала невдачі. Подробиці " +"можна знайти у error_log" + +msgid "trust" +msgstr "довіра" + +msgid "trusts" +msgstr "записи довіри" + +msgid "Trust" +msgstr "Довіра" + +msgid "SID blocklist incoming" +msgstr "Список блокування вхідних SID" + +msgid "SID blocklist outgoing" +msgstr "Список блокування вихідних SID" + +msgid "UPN suffixes" +msgstr "Суфікси UPN" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "некоректний SID: {SID}" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" +"\n" +"Додати новий запис довіри для використання.\n" +"\n" +"За допомогою цієї команди можна встановити відносини довіри з\n" +"іншим доменом, який після цього вважається «довіреним». У результаті\n" +"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" +"цього домену.\n" +"\n" +"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" +"Active Directory.\n" +"\n" +"Команду можна безпечно запускати декілька разів для одного і того самого\n" +"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" +"довіри з обох боків.\n" +"\n" +"Зауважте, що якщо команда раніше виконувалася із вказаним типом діапазону\n" +"або автоматичним визначенням типу діапазону, і ви хочете налаштувати\n" +"інший тип діапазону, ймовірно, вам доведеться вилучити першй діапазон " +"ідентифікаторів\n" +"за допомогою ipa idrange-del, перш ніж ви зможете повторити команду із " +"бажаним типом.\n" +" " + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" +"Тип діапазону ідентифікаторів довіреного домену, одне з дозволених значень" + +msgid "External trust" +msgstr "Зовнішня довіра" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Встановити зовнішню довіру до домену у іншому лісі. Довіра не переходить за " +"межі домену." + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Додано запис довіри Active Directory для області «%(value)s»" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Відновлено довіру до домену «%(value)s»" + +msgid "missing base_id" +msgstr "не вистачає base_id" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "pysss_murmur на сервері не доступний, отже base-id не надано." + +msgid "trust type" +msgstr "тип довіри" + +msgid "only \"ad\" is supported" +msgstr "передбачено підтримку лише «ad»" + +msgid "domain" +msgstr "домен" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"Не можна встановлювати довіру до AD, розгорнутою у тому самому домені, що і " +"IPA. Підтримки такої можливості не передбачено." + +msgid "Realm-domain mismatch" +msgstr "Невідповідність між областю і доменом" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Для встановлення довіри з Active Directory назва домену і назва області " +"сервера IPA мають збігатися" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"До доменів області IPA включено домен %(domain)s. Перш ніж встановлювати " +"довіру, це включення слід усунути. Див. команду «ipa realmdomains-mod --del-" +"domain»." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"Довіреним доменом і обліковим записом адміністратора використовуються різні " +"області" + +msgid "Realm administrator password should be specified" +msgstr "Має бути вказано пароль адміністратора області" + +msgid "id range type" +msgstr "тип діапазону ідентифікаторів" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"Якщо додається зв’язок довіри AD, значенням --range-type має бути лише ipa-" +"ad-trust або ipa-ad-trust-posix." + +msgid "id range" +msgstr "діапазон ідентифікаторів" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Для цього зв’язку довіри вже існує діапазон ідентифікаторів. Вам слід або " +"вилучити попередній діапазон, або виключити з команди параметри --base-id/--" +"range-size." + +msgid "range exists" +msgstr "діапазон вже існує" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Вже існує діапазон ідентифікаторів з тією самою назвою але іншим доменом " +"SID. Діапазон ідентифікаторів для нового довіреного домену має бути створено " +"вручну." + +msgid "range type change" +msgstr "зміна типу діапазону" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"Діапазон ідентифікаторів для довіреного домену вже існує, але належить до " +"іншого типу. Будь ласка, вилучіть попередній діапазон вручну або не " +"визначайте тип у примусовому порядку за допомогою параметра --range-type." + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "Не вдалося визначити контролер домену для домену {domain}. " + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"Для нього у DNS IPA визначено правила переспрямовування. Можливо, " +"переспрямовувач вказує не помилковий вузол?" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" +"IPA керує DNS. Будь ласка, переконайтеся, що поточні налаштування DNS " +"уможливлюють визначення адрес службових записів домену «{domain}». Приклади " +"налаштовування DNS за допомогою командного інтерфейсу або вебінтерфейсу " +"наведено у документації. " + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" +"Оскільки IPA не керує записами DNS, слід налаштувати DNS так, щоб система " +"визначала адресу домену «{domain}» за даними щодо вузлів IPA, і навпаки." + +msgid "Unable to verify write permissions to the AD" +msgstr "Не вдалося перевірити права доступу на запис до AD" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "Вказано недостатньо аргументів для виконання налаштовування довіри" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Вилучено запис довіри «%(value)s»" + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Змінити запис довіри (для наступного використання).\n" +"\n" +" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" +" Додаткові варіанти буде додано у наступних випусках.\n" +" " + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "Змінено довіру «%(value)s» (зміни набудуть чинності за 60 секунд)" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "встановлено відповідність %(count)d запису довіри" +msgstr[1] "встановлено відповідність %(count)d записів довіри" +msgstr[2] "встановлено відповідність %(count)d записів довіри" + +msgid "trust configuration" +msgstr "довірені налаштування" + +msgid "Global Trust Configuration" +msgstr "Загальні довірені налаштування" + +msgid "IPA AD trust agents" +msgstr "Агенти довіри AD IPA" + +msgid "IPA servers configured as AD trust agents" +msgstr "Сервери IPA, які налаштовано як агенти довіри AD" + +msgid "IPA AD trust controllers" +msgstr "Контролери довіри AD IPA" + +msgid "IPA servers configured as AD trust controllers" +msgstr "Сервери IPA, які налаштовано як контролери довіри AD" + +msgid "unsupported trust type" +msgstr "непідтримуваний тип довіри" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Змінено налаштування довіри «%(value)s»" + +msgid "SID" +msgstr "SID" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Для виконання цієї команди має існувати група «editors», але групи з такою " +"назвою не знайдено." + +msgid "trust domain" +msgstr "довірений домен" + +msgid "trust domains" +msgstr "довірені домени" + +msgid "Trusted domains" +msgstr "Довірені домени" + +msgid "Trusted domain" +msgstr "Довірений домен" + +msgid "Domain enabled" +msgstr "Домен увімкнено" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Дані щодо довіреного домену «%(value)s» вилучено" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"вилучення кореневого домену правила довіри неможливе, скористайтеся trust-" +"del для вилучення самого правила довіри" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Список довірених доменів успішно оновлено. Для отримання поточного списку " +"цих доменів скористайтеся командою trustdomain-find." + +msgid "Configure this server as a trust agent." +msgstr "Налаштувати цей сервер як довірений агент." + +msgid "Enable support for trusted domains for old clients" +msgstr "Увімкнути підтримку довірених доменів для застарілих клієнтів" + +msgid "not allowed to remotely add agent" +msgstr "заборонено віддалено додавати агентів" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Увімкнено домен довіри «%(value)s»" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"Кореневий домен правила довіри для наявного правила довіри завжди увімкнено" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Домен довіри «%(value)s» вимкнено" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"вимикання кореневого домену правила довіри неможливе, скористайтеся trust-" +"del для вилучення самого правила довіри" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" +"\n" +"Прив’язка сертифікатів до профілів\n" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" +"\n" +"Керування налаштуваннями і правилами прив’язки сертифікатів до профілів.\n" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" +"\n" +"У IPA передбачено підтримку використання сертифікатів для розпізнавання. " +"Сертифікати\n" +"можуть зберігатися або у записі користувача (весь сертифікат у атрибуті\n" +"usercertificate), або просто прив’язуватися до запису користувача.\n" +"Цей код уможливлює керування правилами доступу до прив’язування сертифіката " +"до\n" +"запису користувача.\n" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +" Вивести загальні налаштування прив’язки сертифікатів до профілів:\n" +" ipa certmapconfig-show\n" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" +"\n" +" Змінити загальні налаштування прив’язки сертифікатів до профілів:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" +"\n" +" Створити правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" +"\n" +" Змінити правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" +"\n" +" Вимкнути правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-disable rule1\n" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" +"\n" +" Увімкнути правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-enable rule1\n" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"\n" +" Вивести дані щодо правила прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-show rule1\n" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" +"\n" +" Знайти усі правила прив’язування сертифікатів до профілів із вказаним " +"доменом:\n" +" ipa certmaprule-find --domain example.com\n" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" +"\n" +" Вилучити правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-del rule1\n" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" +"Домени «%s» не можна використовувати для застосування перевірки " +"altSecurityIdentities." + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" +"До довіреного домену Active Directory має бути застосовано правило прив'язки " +"з altSecurityIdentities, але з цим правилом не пов'язано жодного домену." + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "Домен %s не є ні доменом IPA, ні довіреним доменом." + +msgid "Certificate Identity Mapping configuration options" +msgstr "Параметри налаштування прив’язки сертифікатів до профілів" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "Загальні налаштування прив’язки сертифікатів до профілів" + +msgid "Prompt for the username" +msgstr "Запит щодо імені користувача" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" +"Запитувати ім’я користувача, якщо із сертифікатом пов’язано декілька профілів" + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Змінити налаштування прив’язки сертифікатів до профілів." + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Показати поточні налаштування прив’язки сертифікатів до профілів." + +msgid "Certificate Identity Mapping Rules" +msgstr "Правила прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rule" +msgstr "Правило прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rule name" +msgstr "Назва правила прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rule description" +msgstr "Опис правила прив’язування сертифікатів до профілів" + +msgid "Mapping rule" +msgstr "Правило прив’язування" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" +"Правило, яке використовується для прив’язування сертифіката до запису " +"користувача" + +msgid "Matching rule" +msgstr "Правило відповідності" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" +"Правило, яке використовується для визначення того, чи придатний сертифікат " +"для розпізнавання" + +msgid "Domain where the user entry will be searched" +msgstr "Домен, у якому слід шукати запис користувача" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "Пріоритет правила (більше число — нижчий пріоритет)" + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "Створити правило прив’язування сертифіката до профілів." + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Додано правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Змінити правило прив’язування сертифікатів до профілів." + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Змінено правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Шукати правила прив’язування сертифікатів до профілів." + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +"Встановлено відповідність %(count)d правила прив’язування сертифікатів до " +"профілів" +msgstr[1] "" +"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " +"профілів" +msgstr[2] "" +"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " +"профілів" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Вивести дані щодо правила прив’язування сертифікатів до профілів." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Вилучити правило прив’язування сертифікатів до профілів." + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Вилучено правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "Увімкнути правило прив’язування сертифікатів до профілів." + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Увімкнено правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Вимкнути правило прив’язування сертифікатів до профілів." + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Вимкнено правило прив’язування сертифікатів до профілів «%(value)s»" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" +"Не вдалося встановити з’єднання із sssd за допомогою SystemBus. Докладніший " +"опис — у файлі error_log" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Не вдалося знайти користувачів за допомогою SystemBus. Докладніший опис — у " +"файлі error_log" + +msgid "User logins" +msgstr "Користувачі" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" +"\n" +" Шукати користувачів, яких пов’язано із наданим сертифікатом.\n" +"\n" +" Для отримання списку відповідних користувачів ця команда покладається\n" +" на дані SSSD, отже, вона може повертати кешовані дані. Докладніше про\n" +" очищення кешу SSSD можна дізнатися із документації до sss_cache.\n" +" " + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "Встановлено відповідність %(count)s користувача" +msgstr[1] "Встановлено відповідність %(count)s користувачів" +msgstr[2] "Встановлено відповідність %(count)s користувачів" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" +"неможливо додати права доступу «%(perm)s» з типом прив’язки «%(bindtype)s» " +"до привілею" + +msgid "Privilege" +msgstr "Привілей" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Додано привілей «%(value)s»" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Вилучено привілей «%(value)s»" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Змінено привілей «%(value)s»" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "встановлено відповідність %(count)d привілею" +msgstr[1] "встановлено відповідність %(count)d привілеїв" +msgstr[2] "встановлено відповідність %(count)d привілеїв" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" +"\n" +"Підтримка сеансів для IPA\n" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" +"\n" +"Служби\n" +"\n" +"Служба IPA — це служба, що працює на вузлі системи. У записі служби\n" +"IPA можуть зберігатися дані реєстраційного запису Kerberos, сертифікат\n" +"SSL або обидва набори даних.\n" +"\n" +"Службою IPA можна керувати безпосередньо з комп’ютера, якщо системі\n" +"цього комп’ютера надано достатні права доступу. Це стосується навіть\n" +"комп’ютерів, відмінних від тих, з якими пов’язано службу. Наприклад,\n" +"вони можуть надсилати запит щодо сертифіката SSL за допомогою\n" +"реєстраційних даних служби вузла. Для керування службою за допомогою\n" +"реєстраційних даних вузла слід віддати команду ініціалізації kinit\n" +"від імені вузла:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Додавання служби IPA надає доступ пов’язаній службі до надсилання\n" +"запитів щодо сертифікатів SSL та таблиці ключів, але створення самих\n" +"запитів є окремим кроком: відповідні дані не створюються у результаті\n" +"простого додавання служби.\n" +"\n" +"У записі служби зберігаються лише відкриті дані сертифіката; закритий\n" +"ключ не зберігається.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову службу IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Дозволити вузлу керувати сертифікатом служби IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Перевизначити типовий список підтримуваних типів PAC для служби:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Типовим випадком, коли потрібне перевизначення типу PAC є NFS.\n" +" У поточній версії ядра Linux відповідний код може працювати лише з\n" +" квитками Kerberos, розмір яких не перевищує максимально заданого.\n" +" Оскільки дані PAC можуть бути доволі об’ємними, для служб NFS\n" +" рекомендуємо встановити --pac-type=NONE.\n" +"\n" +" Вилучити службу IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Знайти усіх служби IPA, пов’язані із вузлом:\n" +" ipa service-find web.example.com\n" +"\n" +" Знайти усі служби HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Вимкнути службу ключів Kerberos і сертифіката SSL:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Надіслати запит щодо сертифіката для служби IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" +"\n" +" Дозволити користувачеві створювати таблицю ключів:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" +"\n" +" Створити і отримати таблицю ключів служби IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" + +msgid "Trusted to authenticate as user" +msgstr "Довіра до розпізнавання як користувача" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "Службі дозволено проходити розпізнавання від імені клієнта" + +msgid "Malformed principal" +msgstr "Помилкове форматування реєстраційного запису" + +msgid "{} is required by the IPA master" +msgstr "{} потрібен основному серверу IPA" + +msgid "service" +msgstr "служба" + +msgid "services" +msgstr "служби" + +msgid "Service principal alias" +msgstr "Альтернативна назва реєстраційного запису служби" + +msgid "Base-64 encoded service certificate" +msgstr "Сертифікат служби у кодуванні Base-64" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "Значення NONE не можна поєднувати з іншими типами PAC" + +msgid "Add a new IPA service." +msgstr "Додати нову службу IPA." + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Додано службу «%(value)s»" + +msgid "force principal name even if host not in DNS" +msgstr "" +"примусове значення назви реєстраційного запису, навіть якщо вузла немає у DNS" + +msgid "Skip host check" +msgstr "Пропустити перевірку вузла" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" +"примусове створення служби, навіть якщо об'єкта вузла для керування не існує" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "Не існує вузла «%s», до якого слід було додати службу." + +msgid "Add a new SMB service." +msgstr "Додати нову службу SMB." + +msgid "SMB service NetBIOS name" +msgstr "Назва NetBIOS служби SMB" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Вилучено службу «%(value)s»" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Змінено службу «%(value)s»" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "встановлено відповідність %(count)d служби" +msgstr[1] "встановлено відповідність %(count)d служб" +msgstr[2] "встановлено відповідність %(count)d служб" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Вимкнено службу «%(value)s»" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Додано сертифікати до реєстраційного запис служби «%(value)s»" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Вилучено сертифікати із реєстраційного запису служби «%(value)s»" + +msgid "Add new principal alias to a service" +msgstr "Додати нову альтернативну назву реєстраційного запису до служби" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Додано нові псевдоніми реєстраційного запису служби «%(value)s»" + +msgid "Remove principal alias from a service" +msgstr "Вилучити альтернативну назву реєстраційного запису зі служби" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Вилучено псевдоніми реєстраційного запису служби «%(value)s»" + +msgid "delegation" +msgstr "уповноваження" + +msgid "delegations" +msgstr "уповноваження" + +msgid "Delegations" +msgstr "Уповноваження" + +msgid "Delegation" +msgstr "Уповноваження" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "Додано уповноваження «%(value)s»" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "Вилучено уповноваження «%(value)s»" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "Змінено уповноваження «%(value)s»" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "встановлено відповідність %(count)d уповноваження" +msgstr[1] "встановлено відповідність %(count)d уповноваження" +msgstr[2] "встановлено відповідність %(count)d уповноважень" + +msgid "The deny type has been deprecated." +msgstr "Тип «deny» вважається застарілим." + +msgid "HBAC rules" +msgstr "правила HBAC" + +msgid "HBAC Rules" +msgstr "Правила HBAC" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Додано правило HBAC «%(value)s»" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Вилучено правило HBAC «%(value)s»" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Змінено правило HBAC «%(value)s»" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "встановлено відповідність %(count)d правила HBAC" +msgstr[1] "встановлено відповідність %(count)d правил HBAC" +msgstr[2] "встановлено відповідність %(count)d правил HBAC" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Увімкнено правило HBAC «%(value)s»" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Вимкнено правило HBAC «%(value)s»" + +msgid "Access time" +msgstr "Час доступу" + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Додати вузли джерела та групи вузлів до правила HBAC." msgid "" "\n" @@ -15164,773 +31391,319 @@ msgstr "" " Відповідні правила: allow_all\n" " Невідповідні правила: can_login\n" +msgid "Unresolved rules in --rules" +msgstr "Непридатні до обробки правила у --rules" + +#, python-format +msgid "Access granted: %s" +msgstr "Надано доступ: %s" + +msgid "operation not defined" +msgstr "дію не визначено" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "виконувати цю дію заборонено: %s" + +msgid "No such virtual command" +msgstr "Такої віртуальної команди не передбачено" + +msgid "Member service groups" +msgstr "Групи служб учасника" + +msgid "Member HBAC service groups" +msgstr "Групи служб HBAC учасника" + +msgid "Member ID user overrides" +msgstr "Перевизначення ідентифікатора учасника користувача" + +msgid "Indirect Member ID user overrides" +msgstr "Перевизначення ідентифікатора опосередкованого учасника користувача" + +msgid "Indirect Member permissions" +msgstr "Опосередковані права доступу учасника" + +msgid "Indirect Member HBAC service" +msgstr "Опосередкована служба HBAC учасника" + +msgid "Indirect Member HBAC service group" +msgstr "Опосередкована група служб HBAC учасника" + +msgid "Invalid format. Should be name=value" +msgstr "Некоректний формат. Правильний формат: назва=значення" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Основний вузол IPA не можна вилучати або вимикати" + +msgid "entry" +msgstr "запис" + +msgid "entries" +msgstr "записи" + +msgid "Entry" +msgstr "Запис" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "не знайдено запис контейнера (%(container)s)" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: не знайдено %(oname)s" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "%(oname)s з назвою «%(pkey)s» вже існує" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "не можна використовувати атрибут «%(attribute)s»" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "ці атрибути не можна використовувати: %(attrs)s" + +msgid "attribute is not configurable" +msgstr "атрибут не можна налаштовувати" + +msgid "No such attribute on this entry" +msgstr "У цього запису немає такого атрибута" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Перейменувати об’єкт %(ldap_obj_name)s" + +msgid "the entry was deleted while being modified" +msgstr "запис було вилучено під час внесення змін" + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s to add" +msgstr "%s для додавання" + +#, python-format +msgid "%s to remove" +msgstr "%s для вилучення" + +#, python-format msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" -"\n" -"Користувачі етапу\n" -"\n" -"Керування записами користувачів етапу.\n" -"\n" -"Записи користувачів етапу перебувають безпосередньо у контейнері:\n" -"\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувач не може пройти розпізнавання за допомогою цих записів\n" -"(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" -"перетворення на активні записи.\n" -"\n" -"Записи активних користувачів є користувачами Posix, що перебувають\n" -"безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" -"Користувач може пройти розпізнавання за допомогою активних записів,\n" -"якщо для них передбачено реєстраційні дані\n" -"\n" -"Вилучені записи користувачів є записами користувачів Posix, що\n" -"перебувають безпосередньо у контейнері: \"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувачі не можуть проходити розпізнавання за допомогою цих\n" -"записів (навіть якщо записи містять реєстраційні дані)\n" -"\n" -"Контейнер користувачів етапу містить записи\n" -" - створені командами 'stageuser-add', які є користувачами Posix\n" -" - створені зовнішньою системою забезпечення\n" -"\n" -"Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" -" - RDN запису має значення 'uid'\n" -" - ipaUniqueID має значення 'autogenerate'\n" -"\n" -"У IPA передбачено підтримку широкого діапазону форматів імен користувачів,\n" -"але слід зважати на різноманітні обмеження, які можуть стосуватися " -"середовища,\n" -"у якому ви працюєте. Наприклад, імена користувачів, що починаються з цифри,\n" -"або імена користувачів, довжина яких перевищує певну довжину, що може\n" -"призвести до проблем у деяких системах UNIX.\n" -"Для зміни формату, який дозволено інструментами IPA, скористайтеся командою\n" -"'ipa config-mod'.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нового користувача етапу:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Додати користувача етапу з контейнера Delete\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "Шукати %(searched_object)s у цих %(relationship)s %(ldap_object)s." + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "Шукати %(searched_object)s не у цих %(relationship)s %(ldap_object)s." + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "додано значення атрибута до запису %(value)s" + +#, python-format +msgid "removed attribute values from entry %(value)s" +msgstr "вилучено значення атрибутів із запису %(value)s" + +msgid "one or more values to remove" +msgstr "одне або декілька значень для вилучення" msgid "" "\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"Baseuser\n" "\n" +"This contains common definitions for user/stageuser\n" msgstr "" "\n" -"Користувачі етапу\n" -"\n" -"Керування записами користувачів етапу.\n" -"\n" -"Записи користувачів етапу перебувають безпосередньо у контейнері:\n" -"\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувач не може пройти розпізнавання за допомогою цих записів\n" -"(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" -"перетворення на активні записи.\n" -"\n" -"Записи активних користувачів є користувачами Posix, що перебувають\n" -"безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" -"Користувач може пройти розпізнавання за допомогою активних записів,\n" -"якщо для них передбачено реєстраційні дані\n" -"\n" -"Вилучені записи користувачів є записами користувачів Posix, що\n" -"перебувають безпосередньо у контейнері: \"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувачі не можуть проходити розпізнавання за допомогою цих\n" -"записів (навіть якщо записи містять реєстраційні дані)\n" -"\n" -"Контейнер користувачів етапу містить записи\n" -" - створені командами 'stageuser-add', які є користувачами Posix\n" -" - створені зовнішньою системою забезпечення\n" -"\n" -"Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" -" - RDN запису має значення 'uid'\n" -" - ipaUniqueID має значення 'autogenerate'\n" -"\n" -"У IPA передбачено підтримку широкого діапазону форматів імен користувачів,\n" -"але слід зважати на різноманітні обмеження, які можуть стосуватися " -"середовища,\n" -"у якому ви працюєте. Наприклад, імена користувачів, що починаються з цифри,\n" -"або імена користувачів, довжина яких перевищує певну довжину, можуть\n" -"призвести до проблем у деяких системах UNIX.\n" -"Для зміни формату, який дозволено інструментами IPA, скористайтеся командою\n" -"'ipa config-mod'.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нового користувача етапу:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Додати користувача етапу з контейнера вилучених користувачів\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"Основний користувач\n" "\n" +"Містить загальні визначення щодо користувача або користувача етапу.\n" + +msgid "must be TRUE or FALSE" +msgstr "має дорівнювати TRUE або FALSE" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" +"Немає класу об'єктів ipaNTUserAttrs. Через це запис користувача не може " +"містити атрибутів SMB." + +msgid "User password expiration" +msgstr "Вичерпання строку дії пароля користувача" + +msgid "SMB logon script path" +msgstr "Шлях до скрипту входу до SMB" + +msgid "SMB profile path" +msgstr "Шлях до профілю SMB" + +msgid "SMB Home Directory" +msgstr "Домашній каталог SMB" + +msgid "SMB Home Directory Drive" +msgstr "Диск домашнього каталогу SMB" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "некоректний формат адреси електронної пошти: %(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "керування %(manager)s не знайдено" + +msgid "Issuer of the certificate" +msgstr "Видавець сертифіката" + +msgid "Subject of the certificate" +msgstr "Призначення сертифіката" + +msgid "cannot have an empty subject" +msgstr "поле призначення не може бути порожнім" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "не можна вказувати одночасно subject/issuer і certificate" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "не можна вказувати одночасно subject/issuer і ipacertmapdata" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "Додати одну або декілька прив’язок сертифікатів до запису користувача." + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Додано прив’язки сертифікатів до запису користувача «%(value)s»" + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" +"Вилучити одну або декілька прив’язок сертифікатів із запису користувача." + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Вилучено прив’язки сертифікатів до запису користувача «%(value)s»" msgid "" "\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" +"Plugin to make multiple ipa calls via one remote procedure call\n" "\n" -"У стандартному сховищі для передавання і зберігання реєстраційних\n" -"даних використовуються безпечні механізми. Реєстраційні дані\n" -"може бути отримано лише користувачами, які мають доступ\n" -"до сховища.\n" - -msgid "" +"To run this code in the lite-server\n" "\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" "\n" -"Підлеглі служби сертифікації (Sub-CA) можна додавати для обмежених під час " -"видання областю\n" -"сертифікатів X.509.\n" - -msgid "" +"where the contents of the file batch_request.json follow the below example\n" "\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" "\n" -"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" -"повноваження певним користувачам (або групам користувачів) на виконання\n" -"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" -"користувача, зберігаючи водночас журнал виконання команд та\n" -"аргументів.\n" - -msgid "" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" "\n" -"Sudo Commands\n" "\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" -"\n" -"Команди sudo\n" -"\n" -"Команди, використані як будівельні блоки для sudo\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створення запису команди\n" -" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" -"\n" -" Вилучення команди\n" -" ipa sudocmd-del /usr/bin/less\n" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" +"And then a nested response for each IPA command method sent in the request\n" "\n" msgstr "" "\n" -"Команди sudo\n" +"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " +"виклику процедури\n" "\n" -"Команди, використані як будівельні блоки для sudo\n" +"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" "\n" -"ПРИКЛАДИ:\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" "\n" -" Створення запису команди\n" -" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" +"де у файлі batch_request.json міститься десь такий код:\n" "\n" -" Вилучення команди\n" -" ipa sudocmd-del /usr/bin/less\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" "\n" +"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " +"спосіб. На початку ви побачите таке:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далі буде вкладена відповідь для кожного методу команди IPA, який було " +"надіслано у запиті\n" -msgid "" -"\n" -"Sudo Rules\n" +msgid "Make multiple ipa calls via one remote procedure call" msgstr "" -"\n" -"Правила sudo\n" +"Виконати декілька викликів ipa за допомогою одного віддаленого виклику " +"процедури" + +msgid "must contain a tuple (list, dict)" +msgstr "має містити кортеж (список, словник)" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Додано користувача «%(value)s»" + +msgid "Default group for new users is not POSIX" +msgstr "Типовою групою для нових користувачів не є група POSIX" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Вилучено користувача «%(value)s»" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: запис користувача вже захищено" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Змінено користувача «%(value)s»" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Відновлено обліковий запис користувача «%(value)s»" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "користувач «%s» вже є активним" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Обліковий запис користувача етапу «%(value)s»" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Вимкнено обліковий запис користувача «%(value)s»" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Увімкнено обліковий запис користувача «%(value)s»" msgid "" "\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -"Правила sudo\n" -"\n" -"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" -"повноваження певним користувачам (або групам користувачів) на виконання\n" -"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" -"користувача, зберігаючи водночас журнал виконання команд та\n" -"аргументів.\n" -"\n" -"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" -" Users: користувачі або групи, які можуть викликати sudo.\n" -" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" -" Allow Command: специфічні команди, які можна виконувати за допомогою " -"sudo.\n" -" Deny Command: специфічні команди, які не можна виконувати за допомогою " -"sudo.\n" -" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " -"команди.\n" -" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " -"виконання команд.\n" -" Options: різноманітні параметри sudoers, які можуть змінити поведінку " -"sudo.\n" -"\n" -"До правила sudo можна додати порядок, який керуватиме порядком\n" -"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" -"Порядок визначається числовим індексом, який не повинен повторюватися.\n" -"\n" -"У IPA передбачено визначений binddn для використання з sudo, який " -"розташовано у\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створити правило:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Додати об’єкт команди sudo і записати його як дозволену команду до " -"правила:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Додати запис вузла до правила:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Додати запис користувача до правила:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" -" ipa sudorule-add defaults\n" -"\n" -" Встановити типовий варіант дій для sudo:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" -"\n" -"Правила sudo\n" -"\n" -"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" -"повноваження певним користувачам (або групам користувачів) на виконання\n" -"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" -"користувача, зберігаючи водночас журнал виконання команд та\n" -"аргументів.\n" -"\n" -"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" -" Users: користувачі або групи, які можуть викликати sudo.\n" -" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" -" Allow Command: специфічні команди, які можна виконувати за допомогою " -"sudo.\n" -" Deny Command: специфічні команди, які не можна виконувати за допомогою " -"sudo.\n" -" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " -"команди.\n" -" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " -"виконання команд.\n" -" Options: різноманітні параметри sudoers, які можуть змінити поведінку " -"sudo.\n" -"\n" -"До правила sudo можна додати порядок, який керуватиме порядком\n" -"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" -"Порядок визначається числовим індексом, який не повинен повторюватися.\n" -"\n" -"У IPA передбачено визначений binddn для використання з sudo, який " -"розташовано у\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"Докладніші відомості наведено у документації з IPA щодо sudo.\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"Симетричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою пароля.\n" -"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"За допомогою програми automember-rebuild ви можете повторно застосувати " -"правила\n" -"автоматичної участі до вже створених записів, тобто перебудувати схему " -"участі.\n" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"Формат дати є таким: РРРР-мм-дд.\n" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" -"\n" -"Служба сертифікації dogtag використовує лише значення CN CSR і примусово " -"встановлює\n" -"решту параметрів призначення за налаштуваннями сервера.\n" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" -"\n" -"Передбачено підтримку таких причин відкликання:\n" -"\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" -"\n" -"Стан ролі може бути одним зі значень: enabled, configured або absent.\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"Передбачено декілька можливих призначень:\n" -"1. subtree: DN; право доступу застосовується до піддерева DN\n" -"2. target filter: фільтр LDAP\n" -"3. target: DN з можливими символами-замінниками, що визначає записи, яких " -"стосуються права доступу\n" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" -"\n" -"Існує багато структурованих типів RR DNS, для яких дані DNS, що " -"зберігаються\n" -"на сервері LDAP, не є скалярним значенням, наприклад дані щодо IP-адресу " -"або\n" -"назву домену, а структурою даних, яка часто може бути складною. Прикладом\n" -"може бути запис LOC [RFC1876], який складається з багатьох обов’язкових і\n" -"необов’язкових частин (градусів, мінут, секунд широти і довготи, висоти\n" -"та похибки).\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" -"\n" -"Цей код є розширенням до додатка otptoken, він надає підтримку " -"безпосереднього\n" -"читання та запису жетонів YubiKey.\n" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -msgstr "" -"\n" -"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" -"\n" -"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " -"суфікса,\n" -"скористайтеся такою командою:\n" -" ipa topologysuffix-verify $suffix\n" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" -"\n" -"Топологія\n" -"\n" -"Керування топологією реплікації на домені рівня 1.\n" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -"Топологія\n" -"\n" -"Керування топологією реплікації на домені рівня 1.\n" -"\n" -"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" -"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " -"із доменом дані\n" -"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" -" містяться дані для компонента сервера сертифікатів.\n" -"\n" -"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " -"Спосіб\n" -"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" -"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" -"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" -"керування виконується централізовано за допомогою команд «ipa topology*».\n" -"\n" -"Угоди представляються сегментами топології. Типово, сегмент топології\n" -"представляється 2 угодами реплікації — по одній для кожного напрямку, " -"наприклад\n" -"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" -"\n" -"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " -"суфікса,\n" -"скористайтеся такою командою:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Приклади:\n" -" Знайти усі сервери IPA:\n" -" ipa server-find\n" -"\n" -" Знайти усі суфікси:\n" -" ipa topologysuffix-find\n" -"\n" -" Додати сегмент топології до суфікса «domain»:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Додати сегмент топології до суфікса «ca»:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Вивести список усіх сегментів топології у суфіксі «domain»:\n" -" ipa topologysegment-find domain\n" -"\n" -" Вивести список усіх сегментів топології у суфіксі «ca»:\n" -" ipa topologysegment-find ca\n" -"\n" -" Вилучити сегмент топології у суфіксі «domain»:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Вилучити сегмент топології у суфіксі «ca»:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Перевірити топологію суфікса «domain»:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Перевірити топологію суфікса «ca»:\n" -" ipa topologysuffix-verify ca\n" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" -"\n" -"Топологія\n" -"\n" -"Керування топологією реплікації.\n" -"\n" -"Потребує мінімального рівня домену 1.\n" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" -"\n" -"ВИКОРИСТАННЯ СТРУКТУРОВАНИХ ПАРАМЕТРІВ ДЛЯ ОКРЕМИХ ТИПІВ\n" - -msgid "" -"\n" -"Unlock a user account\n" +" Unlock a user account\n" "\n" " An account may become locked if the password is entered incorrectly too\n" " many times within a specific time period as controlled by password\n" " policy. A locked account is a temporary condition and may be unlocked " "by\n" -" an administrator.\n" -" " +" an administrator." msgstr "" "\n" " Розблокувати обліковий запис користувача\n" @@ -15940,2049 +31713,155 @@ msgstr "" " користувач перевищить обмеження на кількість введення помилкових " "паролів\n" " протягом певного часу. Запис блокується тимчасово, його може бути\n" -" розблоковано адміністратором.\n" -" " +" розблоковано адміністратором." + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Розблоковано обліковий запис «%(value)s»" + +msgid "Failed logins" +msgstr "Кількість невдалих спроб увійти" + +msgid "Last successful authentication" +msgstr "Останнє успішне розпізнавання" + +msgid "Last failed authentication" +msgstr "Останнє невдале розпізнавання" + +msgid "Time now" +msgstr "Поточний час" msgid "" "\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " msgstr "" "\n" -"Сховища користувачів — це сховища, власником яких є конкретний\n" -"користувач. Приватними є сховища, власником яких є поточний\n" -"користувач. Власником сховища служби є певна служба. Сховища\n" -"спільного використання належать адміністратору, але можуть\n" -"використовуватися іншими користувачами або службами.\n" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" -"\n" -"Користувачі\n" -"\n" -"Керування записами користувачів. Всі користувачі є користувачами POSIX.\n" -"\n" -"У IPA передбачено підтримку широкого діапазону форматів імен\n" -"користувачів, але вам слід враховувати всі обмеження, які накладаються\n" -"вашим робочим середовищем. Наприклад, імена, що починаються з цифри, або\n" -"занадто довгі імена можуть спричинити проблеми у деяких системах UNIX.\n" -"Скористайтеся командою «ipa config-mod» для зміни формату імені\n" -"користувача, яке дозволятиметься інструментами IPA.\n" -"\n" -"Вимикання облікового запису користувача лише заборонить отримання\n" -"користувачами нових реєстраційних даних Kerberos. Всі вже отримані\n" -"реєстраційні дані не втратять своєї чинності.\n" -"\n" -"Керування паролями не є завданням цього модуля. Докладніші дані щодо\n" -"керування паролями можна отримати у відповідь на команду ipa help passwd\n" -"\n" -"Блокування облікового запису виконується окремим основним вузлом IPA.\n" -"Для визначення основного вузла, на якому було заблоковано запис, можна\n" -"скористатися командою user-status. Адміністратор має розблоковувати\n" -"користувача саме на цьому основному вузлі.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нового користувача:\n" -" ipa user-add --first=Ivan --last=Ivanenko --password tuser1\n" -"\n" -" Пошук всіх користувачів, чиї записи містять рядок «Ivan»:\n" -" ipa user-find Ivan\n" -"\n" -" Пошук всіх користувачів з іменем (не прізвищем) «Ivan»:\n" -" ipa user-find --first=Ivan\n" -"\n" -" Вимикання запису користувача:\n" -" ipa user-disable tuser1\n" -"\n" -" Вмикання запису користувача:\n" -" ipa user-enable tuser1\n" -"\n" -" Вилучення запису користувача:\n" -" ipa user-del tuser1\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" -"\n" -"Сховище — безпечне місце для зберігання ключа. Одне сховище\n" -"може містити лише один ключ. При архівуванні ключа до сховища,\n" -"наявний ключ (якщо такий існує) буде перезаписано.\n" - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Сховища\n" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -"Сховища\n" -"\n" -"Керування сховищами.\n" -"\n" -"Сховище — безпечне місце для зберігання ключів і паролів.\n" -"\n" -"За правами власності сховища поділяються на три категорії:\n" -"* приватні сховища користувачів\n" -"* сховища служб\n" -"* сховища спільного використання\n" -"\n" -"Сховища користувачів — це сховища, власником яких є конкретний\n" -"користувач. Приватними є сховища, власником яких є поточний\n" -"користувач. Власником сховища служби є певна служба. Сховища\n" -"спільного використання належать адміністратору, але можуть\n" -"використовуватися іншими користувачами або службами.\n" -"\n" -"За механізмами захисту сховища поділяються на три\n" -"типи:\n" -"* стандартні сховища\n" -"* симетричні сховища\n" -"* асиметричні сховища\n" -"\n" -"У стандартному сховищі для передавання і зберігання реєстраційних\n" -"даних використовуються безпечні механізми. Реєстраційні дані\n" -"може бути отримано лише користувачами, які мають доступ\n" -"до сховища.\n" -"\n" -"Симетричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою пароля.\n" -"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" -"\n" -"Асиметричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою відкритого ключа.\n" -"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" -"\n" -" Вивести список сховищ:\n" -" ipa vault-find\n" -" [--user <користувач>|--service <служба>|--shared]\n" -"\n" -" Додати стандартне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type standard\n" -"\n" -" Додати симетричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type symmetric --password-file пароль.txt\n" -"\n" -" Додати асиметричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file відкритий_ключ.pem\n" -"\n" -" Показати сховище:\n" -" ipa vault-show <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -"\n" -" Змінити опис сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --desc <опис>\n" -"\n" -" Змінити тип сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старий пароль/закритий ключ]\n" -" [новий пароль/відкритий ключ]\n" -"\n" -" Змінити пароль до симетричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password <старий пароль>\n" -" --new-password <новий пароль>\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" -"\n" -" Змінити ключ асиметричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закритого ключа>\n" -" --public-key-file <файл нового відкритого ключа>\n" -"\n" -" Вилучити сховище:\n" -" ipa vault-del <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -"\n" -" Вивести налаштування сховищ:\n" -" ipa vaultconfig-show\n" -"\n" -" Архівувати дані до стандартного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" -"\n" -" Архівувати дані до симетричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" -" --password-file пароль.txt\n" -"\n" -" Архівувати дані до асиметричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" -"\n" -" Отримати дані зі стандартного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" -"\n" -" Отримати дані з симетричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" -" --password-file password.txt\n" -"\n" -" Отримати дані з асиметричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів> --private-key-file private.pem\n" -"\n" -" Додати записи власників сховища:\n" -" ipa vault-add-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" -"\n" -" Додати записи учасників сховища:\n" -" ipa vault-add-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" -"\n" -"Перевірити топологію реплікації для вказаного суфікса.\n" -"\n" -"Перевірки, які виконуються:\n" -" 1. перевірка того, чи не є топологія від’єднаною. Іншими словами, чи є\n" -" шляхи реплікації між усіма серверами.\n" -" 2. перевірка того, чи немає у сервера перевищення рекомендованої\n" -" кількості узгоджень реплікації.\n" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" -"\n" -"Перевірити топологію реплікації для суфікса.\n" -"\n" -"Перевірки, які виконуються:\n" -" 1. перевірка того, чи є топологія роз’єднаною. Іншими словами, того, чи\n" -" пов’язано усі сервери шляхами реплікації.\n" -" 2. перевірка того, чи не перевищено кількість рекомендованих угод з\n" -" реплікації між серверами.\n" -" " - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" -"\n" -"Під час додавання запису можна скористатися специфічними для RR параметрами\n" -"або стандартним параметром для необробленого значення. Втім, поєднувати\n" -"ці варіанти у одній дії із додавання не можна. Під час внесення змін до\n" -"наявного запису можна скористатися для зміни однієї частини запису DNS\n" -"новими специфічними параметрами RR, причому для визначення зміненого\n" -"значення буде використано стандартний варіант необробленого значення.\n" -"У наведеному нижче прикладі продемонстровано зміну пріоритетності запису\n" -"MX з 0 на 1 у записі без внесення змін до обмінника:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" -"\n" -"Якщо пошук виконується за датою _від, використовується порівняння >=, а " -"якщо\n" -"виконується пошук _до дати — порівняння <=. Поєднання обох пошуків " -"призводить\n" -"до пошуку з логічним поєднанням ТА.\n" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"Жетони YubiKey\n" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" -"\n" -"Жетони YubiKey\n" -"\n" -"Керування жетонами YubiKey.\n" -"\n" -"Цей код є розширенням до додатка otptoken, він надає підтримку " -"безпосереднього\n" -"читання та запису жетонів YubiKey.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати новий жетон:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" - -msgid " * 0 - unspecified\n" -msgstr " * 0 - не визначено\n" - -msgid " * 1 - keyCompromise\n" -msgstr " * 1 - keyCompromise\n" - -msgid " * 10 - aACompromise\n" -msgstr " * 10 - aACompromise\n" - -msgid " * 2 - cACompromise\n" -msgstr " * 2 - cACompromise\n" - -msgid " * 3 - affiliationChanged\n" -msgstr " * 3 - affiliationChanged\n" - -msgid " * 4 - superseded\n" -msgstr " * 4 - superseded\n" - -msgid " * 5 - cessationOfOperation\n" -msgstr " * 5 - cessationOfOperation\n" - -msgid " * 6 - certificateHold\n" -msgstr " * 6 - certificateHold\n" - -msgid " * 8 - removeFromCRL\n" -msgstr " * 8 - removeFromCRL\n" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr " * 9 - privilegeWithdrawn\n" - -msgid " ipa --help" -msgstr " ipa <команда> --help" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr " -8 '${cn}'" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr " Крім того, цю команду можуть виконати такі сервери: %(masters)s" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "«%s» не є коректним типом прав доступу" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "«%s» не є об’єктним типом" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "Маємо ${count} сертифікатів" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "Додано ${count} записів" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "Вилучено ${count} записів" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "Вимкнено ${count} записів" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "Увімкнено ${count} записів" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "Вилучено ${count} записів" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "Вилучено ${count} параметрів" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "Активовано ${count} записів користувачів" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "Відновлено ${count} записів користувачів" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "Користувачами етапу зроблено ${count} користувачів" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Параметри ${primary_key} ${entity}" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "Оновлено ${primary_key} ${entity}" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity} успішно додано" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} застосовується до:" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} міститься у:" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} керується:" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "Керівники учасника ${primary_key}:" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "Учасники ${primary_key}:" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key} перевизначає:" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, версія: ${version}" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s не містить «%(value)s»" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: некоректний синтаксис." - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: можна використовувати лише одне значення." - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(command_name)s: не знайдено %(oname)s" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"Пошуком LDAP у %(container)s не повернуто жодного результату (основа пошуку: " -"%(search_base)s, клас об’єктів: %(objectclass)s)" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -"Пропущено %(count)d %(type)s запис. Одночасно можна змінювати лише одне " -"значення на тип запису DNS." -msgstr[1] "" -"Пропущено %(count)d %(type)s записи. Одночасно можна змінювати лише одне " -"значення на тип запису DNS." -msgstr[2] "" -"Пропущено %(count)d %(type)s записів. Одночасно можна змінювати лише одне " -"значення на тип запису DNS." - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "встановлено відповідність %(count)d ACI" -msgstr[1] "встановлено відповідність %(count)d ACI" -msgstr[2] "встановлено відповідність %(count)d ACI" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "встановлено відповідність %(count)d CA ACL" -msgstr[1] "встановлено відповідність %(count)d CA ACL" -msgstr[2] "встановлено відповідність %(count)d CA ACL" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "встановлено відповідність %(count)d CA" -msgstr[1] "встановлено відповідність %(count)d CA" -msgstr[2] "встановлено відповідність %(count)d CA" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -"Встановлено відповідність %(count)d правила прив’язування сертифікатів до " -"профілів" -msgstr[1] "" -"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " -"профілів" -msgstr[2] "" -"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " -"профілів" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "встановлено відповідність %(count)d сервера DNS" -msgstr[1] "встановлено відповідність %(count)d серверів DNS" -msgstr[2] "встановлено відповідність %(count)d серверів DNS" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -"встановлено відповідність %(count)d перевизначення ідентифікаторів групи" -msgstr[1] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" -msgstr[2] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "встановлено відповідність %(count)d правила HBAC" -msgstr[1] "встановлено відповідність %(count)d правил HBAC" -msgstr[2] "встановлено відповідність %(count)d правил HBAC" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "встановлено відповідність %(count)d групи служб HBAC" -msgstr[1] "встановлено відповідність %(count)d груп служб HBAC" -msgstr[2] "встановлено відповідність %(count)d груп служб HBAC" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "встановлено відповідність %(count)d служби HBAC" -msgstr[1] "встановлено відповідність %(count)d служб HBAC" -msgstr[2] "встановлено відповідність %(count)d служб HBAC" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "встановлено відповідність %(count)d перегляду ідентифікаторів" -msgstr[1] "встановлено відповідність %(count)d переглядів ідентифікаторів" -msgstr[2] "встановлено відповідність %(count)d переглядів ідентифікаторів" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "встановлено відповідність %(count)d перевизначення ідентифікатора" -msgstr[1] "встановлено відповідність %(count)d перевизначень ідентифікаторів" -msgstr[2] "встановлено відповідність %(count)d перевизначень ідентифікаторів" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "встановлено відповідність %(count)d місця IPA" -msgstr[1] "встановлено відповідність %(count)d місць IPA" -msgstr[2] "встановлено відповідність %(count)d місць IPA" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "встановлено відповідність %(count)d сервера IPA" -msgstr[1] "встановлено відповідність %(count)d серверів IPA" -msgstr[2] "встановлено відповідність %(count)d серверів IPA" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "встановлено відповідність %(count)d жетона OTP" -msgstr[1] "встановлено відповідність %(count)d жетони OTP" -msgstr[2] "встановлено відповідність %(count)d жетонів OTP" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "Встановлено відповідність %(count)d проксі-сервера RADIUS" -msgstr[1] "Встановлено відповідність %(count)d проксі-серверів RADIUS" -msgstr[2] "Встановлено відповідність %(count)d проксі-серверів RADIUS" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "встановлено відповідність %(count)d карти користувачів SELinux" -msgstr[1] "встановлено відповідність %(count)d карт користувачів SELinux" -msgstr[2] "встановлено відповідність %(count)d карт користувачів SELinux" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "встановлено відповідність %(count)d групи команд sudo" -msgstr[1] "встановлено відповідність %(count)d груп команд sudo" -msgstr[2] "встановлено відповідність %(count)d груп команд sudo" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "встановлено відповідність %(count)d команди sudo" -msgstr[1] "встановлено відповідність %(count)d команд sudo" -msgstr[2] "встановлено відповідність %(count)d команд sudo" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "встановлено відповідність %(count)d правила sudo" -msgstr[1] "встановлено відповідність %(count)d правил sudo" -msgstr[2] "встановлено відповідність %(count)d правил sudo" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -"встановлено відповідність %(count)d перевизначення ідентифікатора користувача" -msgstr[1] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів " -"користувачів" -msgstr[2] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів " -"користувачів" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "встановлено відповідність %(count)d ключа автоматичного монтування" -msgstr[1] "встановлено відповідність %(count)d ключі автоматичного монтування" -msgstr[2] "встановлено відповідність %(count)d ключів автоматичного монтування" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "встановлено відповідність %(count)d місця автоматичного монтування" -msgstr[1] "встановлено відповідність %(count)d місця автоматичного монтування" -msgstr[2] "встановлено відповідність %(count)d місць автоматичного монтування" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "встановлено відповідність %(count)d карти автоматичного монтування" -msgstr[1] "встановлено відповідність %(count)d карти автоматичного монтування" -msgstr[2] "встановлено відповідність %(count)d карт автоматичного монтування" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "встановлено відповідність %(count)d сертифіката" -msgstr[1] "встановлено відповідність %(count)d сертифікатів" -msgstr[2] "встановлено відповідність %(count)d сертифікатів" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "встановлено відповідність %(count)d уповноваження" -msgstr[1] "встановлено відповідність %(count)d уповноваження" -msgstr[2] "встановлено відповідність %(count)d уповноважень" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "встановлено відповідність %(count)d групи" -msgstr[1] "встановлено відповідність %(count)d груп" -msgstr[2] "встановлено відповідність %(count)d груп" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "встановлено відповідність %(count)d вузла" -msgstr[1] "встановлено відповідність %(count)d вузлів" -msgstr[2] "встановлено відповідність %(count)d вузлів" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "встановлено відповідність %(count)d групи вузлів" -msgstr[1] "встановлено відповідність %(count)d груп вузлів" -msgstr[2] "встановлено відповідність %(count)d груп вузлів" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "встановлено відповідність %(count)d групи" -msgstr[1] "встановлено відповідність %(count)d груп" -msgstr[2] "встановлено відповідність %(count)d груп" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "встановлено відповідність %(count)d запису" -msgstr[1] "встановлено відповідність %(count)d записів" -msgstr[2] "встановлено відповідність %(count)d записів" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "завантажено %(count)d додаток" -msgstr[1] "завантажено %(count)d додатки" -msgstr[2] "завантажено %(count)d додатків" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "встановлено відповідність %(count)d привілею" -msgstr[1] "встановлено відповідність %(count)d привілеїв" -msgstr[2] "встановлено відповідність %(count)d привілеїв" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "встановлено відповідність %(count)d профілю" -msgstr[1] "встановлено відповідність %(count)d профілів" -msgstr[2] "встановлено відповідність %(count)d профілів" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "встановлено відповідність %(count)d діапазону" -msgstr[1] "встановлено відповідність %(count)d діапазонів" -msgstr[2] "встановлено відповідність %(count)d діапазонів" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "встановлено відповідність %(count)d ролі" -msgstr[1] "встановлено відповідність %(count)d ролей" -msgstr[2] "встановлено відповідність %(count)d ролей" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "встановлено відповідність %(count)d правила" -msgstr[1] "встановлено відповідність %(count)d правил" -msgstr[2] "встановлено відповідність %(count)d правил" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "встановлено відповідність %(count)d сегмента" -msgstr[1] "встановлено відповідність %(count)d сегментів" -msgstr[2] "встановлено відповідність %(count)d сегментів" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "встановлено відповідність %(count)d самообслуговування" -msgstr[1] "встановлено відповідність %(count)d самообслуговування" -msgstr[2] "встановлено відповідність %(count)d самообслуговувань" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "встановлено відповідність %(count)d правила делегування служб" -msgstr[1] "встановлено відповідність %(count)d правил делегування служб" -msgstr[2] "встановлено відповідність %(count)d правил делегування служб" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "встановлено відповідність %(count)d призначення делегування служб" -msgstr[1] "встановлено відповідність %(count)d призначень делегування служб" -msgstr[2] "встановлено відповідність %(count)d призначень делегування служб" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "встановлено відповідність %(count)d служби" -msgstr[1] "встановлено відповідність %(count)d служб" -msgstr[2] "встановлено відповідність %(count)d служб" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "встановлено відповідність %(count)d суфікса топології" -msgstr[1] "встановлено відповідність %(count)d суфіксів топології" -msgstr[2] "встановлено відповідність %(count)d суфіксів топології" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "встановлено відповідність %(count)d запису довіри" -msgstr[1] "встановлено відповідність %(count)d записів довіри" -msgstr[2] "встановлено відповідність %(count)d записів довіри" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "встановлено відповідність %(count)d користувача" -msgstr[1] "встановлено відповідність %(count)d користувачів" -msgstr[2] "встановлено відповідність %(count)d користувачів" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d змінних" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "встановлено відповідність %(count)d сховища" -msgstr[1] "встановлено відповідність %(count)d сховищ" -msgstr[2] "встановлено відповідність %(count)d сховищ" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "Встановлено відповідність %(count)s сервера" -msgstr[1] "Встановлено відповідність %(count)s серверів" -msgstr[2] "Встановлено відповідність %(count)s серверів" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "встановлено відповідність %(count)s ролі сервера" -msgstr[1] "встановлено відповідність %(count)s ролей сервера" -msgstr[2] "встановлено відповідність %(count)s ролей сервера" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "Встановлено відповідність %(count)s користувача" -msgstr[1] "Встановлено відповідність %(count)s користувачів" -msgstr[2] "Встановлено відповідність %(count)s користувачів" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "Клієнт %(cver)s є несумісним з сервером %(sver)s на «%(server)s»" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: файл не знайдено" - -#, python-format -msgid "%(host)s failed" -msgstr "Помилка %(host)s" +" Стан блокування облікового запису користувача\n" +"\n" +" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" +" забагато разів протягом певного проміжку часу, який визначається " +"правилами\n" +" роботи з паролями. Блокування облікового запису є тимчасовим станом, " +"його\n" +" може бути розблоковано адміністратором.\n" +"\n" +" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" +" блокування на кожному з них.\n" +"\n" +" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " +"слід\n" +" виконати порівняння кількості помилкових спроб входу та час останньої\n" +" невдалої спроби з еталонними значеннями. Обліковий запис буде " +"заблоковано,\n" +" якщо буде перевищено кількість maxfail помилкових спроб протягом " +"проміжку\n" +" часу failinterval. Відповідні значення задаються правилами обробки " +"паролів,\n" +" пов’язаними з обліковим записом користувача.\n" +"\n" +" Зміни до лічильника помилкових спроб входу вносяться, лише коли " +"користувач\n" +" виконує спробу увійти, тому може статися так, що обліковий запис " +"заблоковано,\n" +" хоча час, що минув з останньої помилкової спроби, перевищує час " +"блокування\n" +" (lockouttime), заданий правилам обробки паролів. Це означає, що " +"користувач\n" +" може увійти до системи знову. " #, python-format msgid "%(host)s failed: %(error)s" msgstr "Помилка %(host)s: %(error)s" #, python-format -msgid "%(info)s" -msgstr "%(info)s" +msgid "%(host)s failed" +msgstr "Помилка %(host)s" #, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s неможливо вилучити, оскільки він потрібен для %(dependent)s %(label)s" +msgid "Account disabled: %(disabled)s" +msgstr "Обліковий запис вимкнено: %(disabled)s" #, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s не може бути вилучено або вимкнено, оскільки він є останнім у " -"%(container)s %(label)s" +msgid "Added certificates to user \"%(value)s\"" +msgstr "Додано сертифікати до запису користувача «%(value)s»" #, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(key)s %(label)s не можна вилучати або змінювати: %(reason)s" +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Вилучено сертифікати із запису користувача «%(value)s»" + +msgid "Add new principal alias to the user entry" +msgstr "Додати новий псевдонім реєстраційного запису до запису користувача" #, python-format -msgid "%(line)s" -msgstr "%(line)s" +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Додано нові псевдоніми до запису користувача «%(value)s»" + +msgid "Remove principal alias from the user entry" +msgstr "Вилучити псевдонім реєстраційного запису із запису користувача" #, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(metaobject)s: не знайдено %(oname)s" +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Вилучити псевдоніми із запису користувача «%(value)s»" #, python-format -msgid "%(name)s certificate is not valid" -msgstr "Сертифікат %(name)s не є чинним" +msgid "all masters must have %(role)s role enabled" +msgstr "для усіх основних серверів має бути увімкнено роль %(role)s" #, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "Типовий атрибут %(obj)s, %(attr)s, не буде дозволено!" +msgid "must have %(role)s role enabled" +msgstr "має бути увімкнено роль %(role)s" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "%(oname)s з назвою «%(pkey)s» вже існує" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" -"Підтримки %(operation)s для реєстраційних записів %(principal_type)s не " -"передбачено" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s «%(oname)s» не знайдено" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: не знайдено %(oname)s" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: не знайдено %(oname)s" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s не є чинним портом" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: помилкове форматування сертифіката. %(reason)s" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" -"Перевищення часу очікування на завершення завдання LDAP %(task)s, DN " -"завдання: «%(task_dn)s»" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" -"Значенням категорії %(type)s не можна встановлювати «all», якщо існують " -"дозволені %(objects)s" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s не є користувачем з групи POSIX" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -#, python-format -msgid "%i CA added." -msgstr "Додано %i CA." - -#, python-format -msgid "%i CA removed." -msgstr "Вилучено %i." - -#, python-format -msgid "%i CAs added." -msgstr "Додано %i CA." - -#, python-format -msgid "%i CAs removed." -msgstr "Вилучено %i CA." - -#, python-format -msgid "%i host or hostgroup added." -msgstr "Додано %i вузол або групу вузлів." - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "Вилучено %i вузол або групу вузлів." - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "Додано %i вузлів або груп вузлів." - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "Вилучено %i вузлів або груп вузлів." - -#, python-format -msgid "%i profile added." -msgstr "Додано %i профіль." - -#, python-format -msgid "%i profile removed." -msgstr "Вилучено %i профіль." - -#, python-format -msgid "%i profiles added." -msgstr "Додано %i профілів." - -#, python-format -msgid "%i profiles removed." -msgstr "Вилучено %i профілів." - -#, python-format -msgid "%i service added." -msgstr "Додано %i службу." - -#, python-format -msgid "%i service removed." -msgstr "Вилучено %i службу." - -#, python-format -msgid "%i services added." -msgstr "Додано %i служб." - -#, python-format -msgid "%i services removed." -msgstr "Вилучено %i служб." - -#, python-format -msgid "%i user or group added." -msgstr "Додано %i користувача або групу." - -#, python-format -msgid "%i user or group removed." -msgstr "Вилучено %i користувача або групу." - -#, python-format -msgid "%i users or groups added." -msgstr "Додано %i користувачів або груп." - -#, python-format -msgid "%i users or groups removed." -msgstr "Вилучено %i користувачів або груп." - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s Record" -msgstr "Запис %s" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s не є коректним атрибутом." - -#, python-format -msgid "%s record" -msgstr "Запис %s" - -#, python-format -msgid "%s to add" -msgstr "%s для додавання" - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s, які слід виключити з перенесення" - -#, python-format -msgid "%s to remove" -msgstr "%s для вилучення" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "%s: проксі-сервер RADIUS не знайдено" - -#, python-format -msgid "%s: group not found" -msgstr "%s: групи не знайдено" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: запис користувача вже захищено" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "«${port}» не є коректним визначенням порту" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "«%(attr)s» вже містить одне або декілька значень" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "«%(command)s» вважається застарілою. %(additional_info)s" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "«%(entry)s» не містить сертифіката." - -#, python-format -msgid "'%(name)s' is required" -msgstr "Слід вказати «%(name)s»" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "Параметр «%(option)s» є застарілим. %(additional_info)s" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "«%(required)s» має бути порожнім, якщо вказано «%(name)s»" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "«%s» є обов’язковою частиною запису DNS" - -msgid "'add' option" -msgstr "параметр «add»" - -msgid "(deprecated)" -msgstr "(застаріле)" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(докладніше про це у RFC %s)" +msgid "must be enabled only on a single master" +msgstr "має бути увімкнено лише на одному основному" msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" -". Перевірте ідентифікатор вже створеної групи. Скористайтеся параметром --" -"group-overwrite-gid для перезапису ідентифікатора групи" - -msgid "7 is not a valid revocation reason" -msgstr "7 не є коректною причиною відкликання" - -msgid "" -msgstr "<усі сервери DNS IPA>" - -msgid "" -"

Browser Kerberos Setup

\n" "\n" -msgstr "" -"

Налаштування браузера для Kerberos

\n" +"Classes to manage trust joins using DCE-RPC calls\n" "\n" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" msgstr "" -"

Перенесення паролів

Якщо вас було спрямовано на цю сторінку вашим " -"адміністратором, ваші особисті дані було перенесено до нового рішення з " -"керування профілями користувачів (IPA).

Будь ласка, введіть ваші " -"реєстраційні дані до форми, щоб завершити процес. Після успішного входу до " -"системи ваш обліковий запис kerberos буде активовано.

" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" "\n" -"

Browser configuration

\n" +"Класи для керування довіреними приєднаннями за допомогою викликів DCE-RPC\n" "\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" -"

Не вдалося перевірити ваші реєстраційні дані Kerberos

\n" -"

\n" -" Будь ласка, переконайтеся, що у вас є чинні квитки Kerberos (їх " -"можна отримати за допомогою kinit), і що ви налаштували ваш " -"браузер належним чином.\n" -"

\n" -"\n" -"

Налаштовування браузера

\n" -"\n" -"
\n" -"

\n" -" Якщо це вперше, будь ласка, налаштуйте ваш браузер.\n" -"

\n" -"
\n" +"Код цього модуля жорстко залежить від вмісту пакунка samba4-python\n" +"та обгорток для мови Python у Samba4.\n" -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" -"

Chrome

\n" -"\n" -"

\n" -" Ви можете налаштувати Chrome на використання Kerberos для служби " -"універсального входу. Нижче наведено настанови, які допоможуть вам " -"налаштувати ваш браузер на надсилання реєстраційних даних Kerberos до " -"відповідного центру розповсюдження ключів, який надає доступ до служи " -"універсального входу.\n" -"

\n" -"\n" +msgid "CIFS server denied your credentials" +msgstr "Ваші реєстраційні дані відхилено сервером CIFS" -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" -"

Firefox

\n" -"\n" -"

\n" -" Ви можете налаштувати Firefox на використання Kerberos для " -"служби універсального входу. Нижче наведено настанови, які допоможуть вам " -"налаштувати ваш браузер на надсилання реєстраційних даних Kerberos до " -"відповідного центру розповсюдження ключів, який надає доступ до служи " -"універсального входу.\n" -"

\n" -"\n" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" -"

Internet Explorer

\n" -"

ПОПЕРЕДЖЕННЯ: підтримку браузера Internet Explorer " -"припинено.

\n" -"

\n" -" Якщо ви здатні увійти до робочої станції за допомогою вашого " -"ключа kerberos, ви можете скористатися отриманим квитком у Internet " -"Explorer.\n" -"

\n" -"

\n" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" -"

\n" -" Вмикання SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) для використання розпізнавання Kerberos\n" -" у Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Переконайтеся, що у вас є потрібний каталог, за допомогою " -"такої команди:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Створіть файл /etc/opt/chrome/policies/managed/" -"mydomainjson із правами доступу на запис, обмеженими адміністратором " -"системи або root, із таким рядком вмісту:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*example.com\" }\n" -"
    \n" -"
    \n" -" Зробити це можна за допомогою такої команди:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com.\" }' > /etc/opt/chrome/" -"policies/managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Зауваження: якщо ви користуєтеся Chromium, скористайтеся " -"/etc/chromium/policies/managed/ замість /etc/opt/chrome/" -"policies/managed/ для двох кроків налаштовування для SPNEGO Chrome.\n" -"

    \n" -"
\n" -"\n" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" -"

Імпортування сертифіката служби сертифікації

\n" -"
    \n" -"
  1. \n" -" Отримайте сертифікат служби сертифікації. Крім того, якщо вузол є також клієнтом IdM, можете просто взяти цей " -"сертифікат з /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Натисніть кнопку меню із підказкою Налаштування та " -"керування Google Chrome, яку типово розташовано у верхньому правому " -"куті вікна Chrome, потім натисніть Налаштування.\n" -"
    3. \n" -"
  3. \n" -" Натисніть пункт Розширені, щоб отримати доступ до " -"ширшого списку параметрів, потім натисніть кнопку Керування " -"сертифікатами, яку розташовано у списку із заголовком «HTTPS/SSL».\n" -"
    4. \n" -"
  4. \n" -" На вкладці Центри сертифікації натисніть кнопку " -"Імпортувати у нижній частині сторінки.\n" -"
    5. \n" -"
  5. Виберіть сертифікат служби сертифікації, який ви отримали на першому " -"кроці.
    6. \n" -"
\n" -"\n" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" -" OTP (одноразовий пароль): створити новий код OTP для кожного з полів OTP." - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" -" OTP (одноразовий пароль): створити новий код OTP для кожного з полів OTP." - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" -" Щоб увійти до системи за допомогою " -"Kerberos, будь ласка, переконайтеся, що у вас є коректні " -"квитки (такі, які можна отримати за допомогою kinit) і налаштований належним чином браузер. " -"Далі натисніть кнопку «Увійти»." - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" -" Щоб увійти за допомогою " -"сертифіката, будь ласка, переконайтеся, що у вас є чинний " -"особистий сертифікат. " - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" -" Щоб увійти за допомогою імені " -"користувача і пароля, вкажіть ці дані у відповідних полях, потім " -"натисніть кнопку «Увійти»." - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" -"
    \n" -"
  1. \n" -"

    \n" -"Імпортування " -"сертифіката служби сертифікації (CA)\n" -"

    \n" -"

    \n" -" Переконайтеся, що вами позначено усі три поля для " -"позначок.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" У полі адреси Firefox введіть about:config, щоб " -"програма показала список поточних параметрів налаштувань.\n" -"
    3. \n" -"
  3. \n" -" У полі фільтрування введіть negotiate, щоб " -"фільтрувати список параметрів.\n" -"
    4. \n" -"
  4. \n" -" Двічі клацніть на пункті network.negotiate-auth." -"trusted-uris, щоб відкрити діалогову панель для введення значення " -"рядка.\n" -"
    5. \n" -"
  5. \n" -" Введіть назву домену, на якому ви хочете проходити " -"розпізнавання, наприклад, .example.com.\n" -"
    6. \n" -"
  6. Повернутися до інтернет-інтерфейсу
    7. \n" -"
\n" -"\n" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" -"
  1. Створити базу даних сертифікатів або скористатися вже створеною. " -"Щоб створити нову базу даних, віддайте команду:
    # certutil -N -d " -"<шлях до бази даних>
  2. Створити CSR з призначенням " -"CN=<${cn_name}>,O=<область>, наприклад:
    # " -"certutil -R -d <шлях до бази даних> -a -g <розмір ключа> -s 'CN=" -"${cn},O=${realm}'${san}
  3. Скопіюйте і вставте CSR (від " -"-----BEGIN NEW CERTIFICATE REQUEST----- до -----END NEW " -"CERTIFICATE REQUEST-----) до області для введення тексту, розташованої " -"нижче:
" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Якщо метод не вибрано, буде використано неявний метод (пароль).

Пароль + двофакторне розпізнавання: у LDAP і Kerberos " -"передбачено розпізнавання за одним із цих типів розпізнавання, а у Kerberos " -"використовується метод попереднього розпізнавання, який потребує " -"використання ccache armor.

RADIUS із іншим типом: у " -"Kerberos завжди використовується RADIUS, а у LDAP він не використовується " -"ніколи. LDAP розпізнає лише варіанти розпізнавання за паролем або " -"двофакторне розпізнавання.

" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Параметр для окремих користувачів, перевизначає загальне значення, якщо " -"буде вибрано один з варіантів.

Пароль + двофакторне " -"розпізнавання: у LDAP і Kerberos передбачено розпізнавання за одним " -"із цих типів розпізнавання, а у Kerberos використовується метод попереднього " -"розпізнавання, який потребує використання ccache armor.

RADIUS " -"із іншим типом: у Kerberos завжди використовується RADIUS, а у LDAP " -"він не використовується ніколи. LDAP розпізнає лише варіанти розпізнавання " -"за паролем або двофакторне розпізнавання.

" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" -"Увійдіть до системи Windows за допомогою облікового запису вашої " -"області Kerberos (адміністративного домену)\n" -"

\n" -"

\n" -"У Internet Explorer виберіть меню «Інструменти», потім пункт " -"«Параметри інтернету».\n" -"

\n" -"
\n" -"
    \n" -"
  1. Відкрийте вкладку «Безпека»
    2. \n" -"
  2. Натисніть «Локальна мережа»
    3. \n" -"
  3. Натисніть «Сайти»
    4. \n" -"
  4. Натисніть «Додатково»
    5. \n" -"
  5. Додайте ваш домен до списку
    6. \n" -"
\n" -"
    \n" -"
  1. Відкрийте вкладку «Безпека»
    2. \n" -"
  2. Натисніть «Локальна мережа»
    3. \n" -"
  3. Натисніть «Нетиповий рівень»
    4. \n" -"
  4. Виберіть «Автоматичний вхід лише у локальній зоні»
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Відкрийте kerberізований сайт за допомогою IE (вам слід використати у " -"адресі повноцінну назву домену)
    2. \n" -"
  2. Ось і усе.
    3. \n" -"
\n" -"
\n" -"\n" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"=======\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -"Додаток DNA у 389-ds розподілятиме ідентифікатори на основі діапазонів,\n" -"налаштованих для локального домену. У поточній версії додаток DNA *не може*\n" -"переналаштуватися на основі локальних діапазонів, встановлених цим\n" -"сімейством команд.\n" -"\n" -"Для використання нового локального діапазону до налаштувань додатка DNA\n" -"слід внести зміни вручну. Зокрема, слід змінити атрибут dnaNextRange " -"'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' так, щоб\n" -"він відповідав новому діапазону.\n" -"=======\n" - -msgid "A Create reverse" -msgstr "Створити зворотний A" - -msgid "A IP Address" -msgstr "IP-адреса A" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "Права доступу SYSTEM не можна змінювати чи вилучати" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Відокремлений комами список полів, за якими виконуватиметься пошук груп" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Відокремлений комами список полів, за якими виконуватиметься пошук " -"користувачів" - -msgid "A description of this RADIUS proxy server" -msgstr "Опис цього проксі-сервера RADIUS" - -msgid "A description of this auto member rule" -msgstr "Опис цього правила автоматичної участі" - -msgid "A description of this command" -msgstr "Опис цієї команди" - -msgid "A description of this host" -msgstr "Опис цього вузла" - -msgid "A description of this host-group" -msgstr "Опис цієї групи вузлів" - -msgid "A description of this role-group" -msgstr "Опис цієї групи ролей" - -msgid "A dictionary representing an LDAP entry" -msgstr "Словник, що відповідає запису LDAP" - -msgid "A group may not be a member of itself" -msgstr "Група не може бути елементом самої себе" - -msgid "A group may not be added as a member of itself" -msgstr "Групу не може бути додано як елемент самої себе" - -msgid "A host willing to act as a key exchanger" -msgstr "Вузол, який може працювати як обмінник ключів" - -msgid "A host willing to act as a mail exchanger" -msgstr "Вузол, який може працювати як обмінник поштовими даними" - -msgid "A hostname which this alias hostname points to" -msgstr "Назва вузла на яку вказує цей псевдонім вузла" - -msgid "A list of ACI values" -msgstr "Список значень ACI" - -msgid "A list of LDAP entries" -msgstr "Список записів LDAP" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" -"Мало бути вказано список користувачів SELinux, записи якого відокремлено " -"символом $" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Список загальних переспрямовувачів. Для кожного переспрямовувача можна " -"вказати нетиповий порт за допомогою стандартного формату «IP_АДРЕСА port " -"ПОРТ»" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Список переспрямовувачів для окремих зон. Для кожного переспрямовувача можна " -"вказати нетиповий порт за допомогою стандартного формату: «IP_АДРЕСА port " -"ПОРТ»" - -msgid "A managed group cannot have a password policy." -msgstr "У керованої групи не може бути власних правил для паролів." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Під час перевірки виявлено проблему, всі записи учасників %(verb)s: %(exc)s" - -msgid "A record" -msgstr "запис A" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" -"Розділений пробілами список атрибутів, які слід вилучати під час оновлено " -"реплікації." - -msgid "A string searched in all relevant object attributes" -msgstr "" -"Рядок, пошук якого відбуватиметься у всіх відповідних атрибутах об’єктів" - -msgid "A6 Record data" -msgstr "Дані запису A6" - -msgid "A6 record" -msgstr "Запис A6" - -msgid "AA Compromise" -msgstr "Компрометація AA" - -msgid "AAAA Create reverse" -msgstr "Створити зворотний запис AAAA" - -msgid "AAAA IP Address" -msgstr "IP-адреса AAAA" - -msgid "AAAA record" -msgstr "запис AAAA" - -msgid "ACI" -msgstr "ACI" - -msgid "ACI name" -msgstr "Назва ACI" - -msgid "ACI object." -msgstr "Об'єкт ACI." - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI права доступу %s не знайдено" - -msgid "ACI prefix" -msgstr "префікс ACI" - -msgid "ACI prefix is required" -msgstr "Слід вказати префікс ACI" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "Не знайдено ACI з назвою «%s»" - -msgid "ACIs" -msgstr "ACI" - -msgid "ACL name" -msgstr "Назва ACL" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" -"AD DC не вдалося отримати доступ до жодного з контролерів домену IPA. " -"Найімовірніше, цю помилку пов’язано із проблемами з DNS або брандмауером" - -msgid "AD Trust setup" -msgstr "Налаштування довіри AD" +msgid "communication with CIFS server was unsuccessful" +msgstr "спроба обмінятися даними з сервером CIFS зазнала невдачі" msgid "AD domain controller" msgstr "Контролер домену AD" +msgid "unsupported functional level" +msgstr "непідтримуваний функціональний рівень" + msgid "" "AD domain controller complains about communication sequence. It may mean " "unsynchronized time on both sides, for example" @@ -17991,1847 +31870,19 @@ msgstr "" "наприклад, може означати розсинхронізацію часу між комп’ютерами, які " "обмінюються даними." -msgid "AFSDB Hostname" -msgstr "Назва вузла AFSDB" - -msgid "AFSDB Subtype" -msgstr "Підтип AFSDB" - -msgid "AFSDB record" -msgstr "Запис AFSDB" - -msgid "API Browser" -msgstr "Навігатор API" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"Не було надіслано номера версії програмного інтерфейсу (API), сумісність з " -"найновішими версіями не можна гарантувати. Припускаємо таку версію API " -"сервера: %(server_version)s" - -msgid "APL record" -msgstr "запис APL" - -msgid "About" -msgstr "Про програму" - -msgid "Access Denied" -msgstr "Доступ заборонено" - -msgid "Access Granted" -msgstr "Надано доступ" - -#, python-format -msgid "Access granted: %s" -msgstr "Надано доступ: %s" - -msgid "Access this host" -msgstr "Доступ до цього вузла" - -msgid "Access time" -msgstr "Час доступу" - -msgid "Accessing" -msgstr "Доступ" - -msgid "Account" -msgstr "Обліковий запис" - -msgid "Account Settings" -msgstr "Параметри облікового запису" - -msgid "Account Status" -msgstr "Стан облікового запису" - -msgid "Account disabled" -msgstr "Обліковий запис вимкнено" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Обліковий запис вимкнено: %(disabled)s" - -msgid "Actions" -msgstr "Дії" - -msgid "Activate" -msgstr "Задіяти" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Активувати користувача етапу «%(value)s»" - -msgid "Activate a stage user." -msgstr "Активувати користувача етапу." - -msgid "Active Directory domain" -msgstr "Домен Active Directory" - -msgid "Active Directory domain administrator" -msgstr "Адміністратор домену Active Directory" - -msgid "Active Directory domain administrator's password" -msgstr "Пароль адміністратора домену Active Directory" - -msgid "Active Directory domain range" -msgstr "Діапазон доменів Active Directory" - -msgid "Active Directory domain with POSIX attributes" -msgstr "Домен Active Directory з атрибутами POSIX" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "Діапазон довіри Active Directory з атрибутами POSIX" - -msgid "Active Directory winsync" -msgstr "winsync Active Directory" - -msgid "Active directory domain administrator's password" -msgstr "Пароль адміністратора домену Active directory" - -msgid "Active users" -msgstr "Активні користувачі" - -msgid "Active zone" -msgstr "Активна зона" - -msgid "Add" -msgstr "Додати" - -msgid "Add CA ACL" -msgstr "Додати ACL CA" - -msgid "Add CAs to a CA ACL." -msgstr "Додати CA до ACL CA." - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "Додати служби сертифікації до ACL CA «${primary_key}»" - -msgid "Add Class of Service entry" -msgstr "Додати запис класу служби" - -msgid "Add Custom Attribute" -msgstr "Додати нетиповий атрибут" - -msgid "Add Custom Authentication Indicator" -msgstr "Додати нетиповий індикатор розпізнавання" - -msgid "Add DNS forward zone" -msgstr "Додати зону переспрямовування DNS" - -msgid "Add DNS resource record" -msgstr "Додати запис ресурсу DNS" - -msgid "Add DNS zone" -msgstr "Додати зону DNS" - -msgid "Add HBAC rule" -msgstr "Додати правило HBAC" - -msgid "Add HBAC service" -msgstr "Додати службу HBAC" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "Додати службу HBAC «${primary_key}» до груп служб HBAC" - -msgid "Add HBAC service group" -msgstr "Додати групу служб HBAC" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "Додати групи служб HBAC до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Додати служби HBAC до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "Додати служби HBAC до групи служб HBAC «${primary_key}»" - -msgid "Add ID range" -msgstr "Додати діапазон ідентифікаторів" - -msgid "Add ID view" -msgstr "Додати перегляд ідентифікатора" - -msgid "Add IPA location" -msgstr "Додати місце IPA" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "Додати сервер IPA до місця IPA «${primary_key}»" - -msgid "Add Kerberos Principal Alias" -msgstr "Додати псевдонім реєстраційного запису Kerberos" - -msgid "Add Many" -msgstr "Додати багато" - -msgid "Add OTP token" -msgstr "Додати жетон OTP" - -msgid "Add RADIUS server" -msgstr "Додати сервер RADIUS" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "Додати групи RunAs до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "Додати групи користувачів RunAs до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "Додати користувачів RunAs до правила sudo «${primary_key}»" - -msgid "Add SELinux user map" -msgstr "Додати карту користувачів SELinux" - -msgid "Add a manager to the stage user entry" -msgstr "Додати керування до запису користувача етапу" - -msgid "Add a manager to the user entry" -msgstr "Додати керування до запису користувача" - -msgid "Add a new DNS server." -msgstr "Додати новий запис сервера DNS." - -msgid "Add a new Group ID override." -msgstr "Додати нове перевизначення ідентифікаторів групи." - -msgid "Add a new HBAC service group." -msgstr "Додати нову групу служб HBAC." - -msgid "Add a new HBAC service." -msgstr "Додати нову службу HBAC." - -msgid "Add a new ID View." -msgstr "Додати новий перегляд ідентифікаторів." - -msgid "Add a new ID override." -msgstr "Додати нове перевизначення ідентифікаторів." - -msgid "Add a new IPA location." -msgstr "Додати новий запис місця IPA." - -msgid "Add a new IPA new service." -msgstr "Додати нову службу IPA." - -msgid "Add a new IPA service." -msgstr "Додати нову службу IPA." - -msgid "Add a new OTP token." -msgstr "Додати новий жетон OTP." - -msgid "Add a new RADIUS proxy server." -msgstr "Додати новий проксі-сервер RADIUS." - -msgid "Add a new SMB service." -msgstr "Додати нову службу SMB." - -msgid "Add a new User ID override." -msgstr "Додати нове перевизначення ідентифікатора користувача." - -msgid "Add a new YubiKey OTP token." -msgstr "Додати новий жетон OTP YubiKey." - -msgid "Add a new delegation." -msgstr "Додати нове уповноваження." - -msgid "Add a new group password policy." -msgstr "Додати нову групу правил для паролів." - -msgid "Add a new host." -msgstr "Додати новий запис вузла." - -msgid "Add a new hostgroup." -msgstr "Додати нову групу вузлів." - -msgid "Add a new netgroup." -msgstr "Додати нову мережеву групу." - -msgid "Add a new permission." -msgstr "Додати нові права доступу." - -msgid "Add a new privilege." -msgstr "Додати новий привілей." - -msgid "Add a new role." -msgstr "Додати нову роль." - -msgid "Add a new segment." -msgstr "Додати новий сегмент." - -msgid "Add a new self-service permission." -msgstr "Додати нові права доступу автослужби." - -msgid "Add a new stage user." -msgstr "Додати нового користувача етапу." - -msgid "Add a new topology suffix to be managed." -msgstr "Додати новий суфікс топології для керування." - -msgid "Add a new user." -msgstr "Додати нового користувача." - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" -"Додати право доступу до делегування доступу на основі окремих зон " -"переспрямовування." - -msgid "Add a permission for per-zone access delegation." -msgstr "Додати права доступу до надання доступу до окремих зон." - -msgid "Add a system permission without an ACI" -msgstr "Додати права доступу до системи без ACI" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "Додати системні права доступу без ACI (внутрішня команда)" - -msgid "Add a vault." -msgstr "Додати сховище." - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "Додати групи дозволу команд sudo до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "Додати команди дозволу sudo до правила sudo «${primary_key}»" +msgid "Cannot find specified domain or server name" +msgstr "Не вдалося знайти домену або сервера з вказаною назвою" msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" msgstr "" -"Додати пару атрибут/значення. Формат: атрибут=значення. Атрибут має бути\n" -"частиною схеми." - -msgid "Add an automember rule." -msgstr "Додати правило автоматичної участі." - -msgid "Add an option to the Sudo Rule." -msgstr "Додати пункт до правила sudo." - -msgid "Add and Add Another" -msgstr "Додати і додати ще" - -msgid "Add and Close" -msgstr "Додати і закрити" - -msgid "Add and Edit" -msgstr "Додати і змінити" - -msgid "Add automount key" -msgstr "Додати ключ автомонтування" - -msgid "Add automount location" -msgstr "Додати місце автомонтування" - -msgid "Add automount map" -msgstr "Додати карту автомонтування" - -msgid "Add certificate authority" -msgstr "Додати службу сертифікації" - -msgid "Add certificate identity mapping rule" -msgstr "Додати правило прив'язки сертифіката до профілю" - -msgid "Add certificate mapping data" -msgstr "Додати дані прив'язки сертифіката" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "Додати профілі сертифікації до ACL CA «${primary_key}»" - -msgid "Add certificates to host entry" -msgstr "Додати сертифікати до запису вузла" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "Додати команди і групи команд sudo, яких стосується правило sudo." - -msgid "Add conditions to an automember rule." -msgstr "Додати умови до правила автоматичної участі." - -msgid "Add custom value" -msgstr "Додати нетипове значення" - -msgid "Add delegation" -msgstr "Додати уповноваження" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "Додати групи заборони команд sudo до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "Додати команди заборони sudo до правила sudo «${primary_key}»" - -msgid "Add domain" -msgstr "Додати домен" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "Додати виключну умову до «${primary_key}»" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" -"Додати запис переспрямування для сервера назв, розташованого у створеній зоні" - -msgid "Add group ID override" -msgstr "Додати перевизначення ідентифікатора групи" - -msgid "Add group for Sudo to execute as." -msgstr "Додати групу виконання до запису sudo." - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" -"Додати групи як керівників учасниками для групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" -"Додати групи як керівників учасниками для групи користувачів «${primary_key}»" - -msgid "Add host" -msgstr "Додати вузол" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Додати вузол «${primary_key}» до правил HBAC" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "Додати вузол «${primary_key}» до груп вузлів" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "Додати вузол «${primary_key}» до мережевих груп" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "Додати вузол «${primary_key}» до ролей" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "Додати вузол «${primary_key}» до правил sudo" - -msgid "Add host group" -msgstr "Додати групу вузлів" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "Додати групу вузлів «${primary_key}» до правил HBAC" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "Додати групу вузлів «${primary_key}» до груп вузлів" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "Додати групу вузлів «${primary_key}» до мережевих груп" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "Додати групу вузлів «${primary_key}» до правил sudo" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "Додати групи вузлів до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "Додати групи вузлів до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "Додати групи вузлів до прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "Додати групи вузлів до групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "Додати групи вузлів до мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "Додати групи вузлів до ролі «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "Додати групи вузлів до правила sudo «${primary_key}»" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Додати вузли та групи вузлів, яких стосується правило sudo." - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "Додати вузли до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "Додати вузли до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "Додати вузли до прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "Додати вузли до групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "Додати вузли до мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "Додати вузли до ролі «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "Додати вузли до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "Додати вузол керування вузлами «${primary_key}»" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "Додати службу керування вузлами «${primary_key}»" - -msgid "Add hosts that can manage this host." -msgstr "Додати записи вузлів, які можуть керувати цим вузлом." - -msgid "Add hosts that can manage this service." -msgstr "Додати вузли, які можуть керувати цією службою." - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "Додати включну умову до «${primary_key}»" - -msgid "Add member to a named service delegation rule." -msgstr "Додати запис учасника до іменованого правила делегування служб." - -msgid "Add member to a named service delegation target." -msgstr "Додати запис учасника до іменованого призначення делегування служб." - -msgid "Add members to Sudo Command Group." -msgstr "Додати учасників до групи команд sudo." - -msgid "Add members to a group." -msgstr "Додати учасників до групи." - -msgid "Add members to a hostgroup." -msgstr "Додати записи до групи вузлів." - -msgid "Add members to a netgroup." -msgstr "Додати учасників до мережевої групи." - -msgid "Add members to a permission." -msgstr "Додати учасників до запису прав доступу." - -msgid "Add members to a privilege." -msgstr "Додати учасників до запису привілею." - -msgid "Add members to a role." -msgstr "Додати учасників до запису ролі." - -msgid "Add members to a vault." -msgstr "Додати записи учасників сховища." - -msgid "Add members to an HBAC service group." -msgstr "Додати учасників до групи служб HBAC." - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" -"Додавати перенесені записи користувачів без групи до типової групи (типове " -"значення: true)" - -msgid "Add netgroup" -msgstr "Додати мережеву групу" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "Додати мережеву групу «${primary_key}» до мережевих груп" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "Додати мережеві групи до мережевої групи «${primary_key}»" - -msgid "Add new DNS resource record." -msgstr "Додати новий запис ресурсу DNS." - -msgid "Add new certificates to a service" -msgstr "Додати нові сертифікати до запису служби" - -msgid "Add new principal alias to a service" -msgstr "Додати нову альтернативну назву реєстраційного запису до служби" - -msgid "Add new principal alias to host entry" -msgstr "Додати новий псевдонім реєстраційного запису до запису вузла" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" -"Додати новий псевдонім реєстраційного запису до запису користувача етапу" - -msgid "Add new principal alias to the user entry" -msgstr "Додати новий псевдонім реєстраційного запису до запису користувача" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" -"Додати одну або декілька прив’язок сертифікатів до запису користувача етапу." - -msgid "Add one or more certificate mappings to the user entry." -msgstr "Додати одну або декілька прив’язок сертифікатів до запису користувача." - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Додати один або декілька сертифікатів запису idoverrideuser" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "Додати один або декілька сертифікатів запису користувача етапу" - -msgid "Add one or more certificates to the user entry" -msgstr "Додати один або декілька сертифікатів до запису користувача" - -msgid "Add owners to a vault container." -msgstr "Додати записи власників до контейнера сховища." - -msgid "Add owners to a vault." -msgstr "Додати записи власників до сховища." - -msgid "Add password policy" -msgstr "Додати правила паролів" - -msgid "Add permission" -msgstr "Додати права доступу" - -msgid "Add permissions to a privilege." -msgstr "Додати права доступу до привілею." - -msgid "Add principal" -msgstr "Додати реєстраційний запис" - -msgid "Add privilege" -msgstr "Додати привілеї" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "Додати привілеї «${primary_key}» до дозволів" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "Додати привілеї до дозволів «${primary_key}»" - -msgid "Add privileges to a role." -msgstr "Додати привілеї до запису ролі." - -msgid "Add profiles to a CA ACL." -msgstr "Додати профілі до CA ACL." - -msgid "Add role" -msgstr "Додати роль" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "Додати роль «${primary_key}» до привілеїв" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "Додати ролі до привілеїв «${primary_key}»" - -msgid "Add rule" -msgstr "Додати правило" - -msgid "Add self service permission" -msgstr "Додати права автослужби" - -msgid "Add service" -msgstr "Додати службу" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "Додати службу «${primary_key}» до ролей" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Додати служби до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "Додати служби до списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "Додати служби до списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "Додати служби до ролі «${primary_key}»" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "Додати служби до групи користувачів «${primary_key}»" - -msgid "Add services to a CA ACL." -msgstr "Додати служби до CA ACL." - -msgid "Add services to an HBAC rule." -msgstr "Додати служби до правила HBAC." - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "Додати вузли джерела та групи вузлів з правила HBAC." - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Додати вузли джерела та групи вузлів до правила HBAC." - -msgid "Add stage user" -msgstr "Додати користувача етапу" - -msgid "Add sudo command" -msgstr "Додати команду sudo" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "Додати команду sudo «${primary_key}» до груп команд sudo" - -msgid "Add sudo command group" -msgstr "Додати групу команд sudo" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "Додати команди sudo до групи команд sudo «${primary_key}»" - -msgid "Add sudo option" -msgstr "Додати параметр sudo" - -msgid "Add sudo rule" -msgstr "Додати правило sudo" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Додати вузли і групи вузлів призначення до CA ACL." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Додати вузли призначення та групи вузлів до правила HBAC." - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" -"Додати вузли призначення та групи вузлів до правила карти користувачів " -"SELinux." - -msgid "Add target to a named service delegation rule." -msgstr "Додати ціль до іменованого правила делегування служб." - -msgid "Add target to a named service delegation." -msgstr "Додати ціль до делегування іменованої служби." - -msgid "Add the host to DNS with this IP address" -msgstr "Додати запис вузла до DNS з цією IP-адресою" - -msgid "Add to default group" -msgstr "Додати до типової групи" - -msgid "Add topology segment" -msgstr "Додати сегмент топології" - -msgid "Add trust" -msgstr "Додати довіру" - -msgid "Add user" -msgstr "Додати користувача" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "Додати користувача «${primary_key}» до правил HBAC" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "Додати користувача «${primary_key}» до списку мережевих груп" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "Додати користувача «${primary_key}» до ролей" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "Додати користувача «${primary_key}» до правил sudo" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "Додати користувача «${primary_key}» до списку груп користувачів" - -msgid "Add user ID override" -msgstr "Додати перевизначення ідентифікатора користувача" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" -"Додати перевизначення ідентифікатора користувача до групи користувачів " -"«${primary_key}»" - -msgid "Add user group" -msgstr "Додати групу користувачів" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Додати групу користувачів «${primary_key}» до правил HBAC" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "Додати групу користувачів «${primary_key}» до списку мережевих груп" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "Додати групу користувачів «${primary_key}» до списку ролей" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "Додати групу користувачів «${primary_key}» до правил sudo" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "Додати групу користувачів «${primary_key}» до списку груп користувачів" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Додати групи користувачів до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Додати групи користувачів до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" -"Додати групи користувачів до прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "Додати групи користувачів до списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "Додати групи користувачів до мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "Додати групи користувачів до списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "Додати групи користувачів до ролі «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "Додати групи користувачів до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "Додати групи користувачів до групи користувачів «${primary_key}»" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "Додати записи користувачів та груп, яких стосується правило sudo." - -msgid "Add users and groups for Sudo to execute as." -msgstr "" -"Додати користувачів та групи для виконання команд sudo від їхнього імені." - -msgid "Add users and groups to a CA ACL." -msgstr "Додати користувачів і групи до CA ACL." - -msgid "Add users and groups to an HBAC rule." -msgstr "Додати користувачів та групи до правила HBAC." - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "Додати користувачів і групи до правила карти користувачів SELinux." - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" -"Додати користувачів як керівників учасниками для групи вузлів " -"«${primary_key}»" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" -"Додати користувачів як керівників учасниками для групи користувачів " -"«${primary_key}»" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "Додати користувачів до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Додати користувачів до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "Додати користувачів до прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "Додати користувачів до списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "Додати користувачів до мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "Додати користувачів до списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "Додати користувачів до ролі «${primary_key}»" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "Додати користувачів до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "Додати користувачів до групи користувачів «${primary_key}»" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "Додати ключ керування записами користувачів OTP «${primary_key}»" - -msgid "Add users that can manage members of this group." -msgstr "Додати записи користувачів, які можуть керувати учасниками цієї групи." - -msgid "Add users that can manage members of this hostgroup." -msgstr "" -"Додати записи користувачів, які можуть керувати учасниками цієї групи вузлів." - -msgid "Add users that can manage this token." -msgstr "Додати записи користувачів, які можуть керувати цим жетоном." - -msgid "Add vault" -msgstr "Додати сховище" - -#, python-format -msgid "Added %(map)s" -msgstr "Додано %(map)s" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Додано %(src)s до %(dst)s" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Додано запис довіри Active Directory для області «%(value)s»" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Додано CA ACL «%(value)s»" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Додано правило прив’язування сертифікатів до профілів «%(value)s»" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Додано перевизначення ідентифікаторів групи «%(value)s»" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Додано правило HBAC «%(value)s»" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Додано службу HBAC «%(value)s»" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Додано групу служб HBAC «%(value)s»" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Додано перегляд ідентифікаторів «%(value)s»" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Додано перевизначення ідентифікаторів «%(value)s»" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Додано діапазон ідентифікаторів «%(value)s»" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Додано запис місця IPA «%(value)s»" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Додано жетон OTP «%(value)s»" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Додано проксі-сервер RADIUS «%(value)s»" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Додано карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Додано команду sudo «%(value)s»" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Додано групу команд sudo «%(value)s»" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Додано правило sudo «%(value)s»" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Додано перевизначення ідентифікатора користувача «%(value)s»" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Додано правило автоматичної участі «%(value)s»" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Додано опосередковану карту автоматичного монтування «%(value)s»" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Додано ключ автоматичного монтування «%(value)s»" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Додано місце автоматичного монтування «%(value)s»" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Додано карту автоматичного монтування «%(value)s»" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Додано прив’язки сертифікатів до запису користувача «%(value)s»" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Додано сертифікати до запису вузла «%(value)s»" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Додано сертифікати до запису idoverrideuser «%(value)s»" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Додано сертифікати до реєстраційного запис служби «%(value)s»" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Додано сертифікати до запису користувача етапу «%(value)s»" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Додано сертифікати до запису користувача «%(value)s»" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Додано умови до «%(value)s»" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Додано уповноваження «%(value)s»" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Додано групу «%(value)s»" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Додано вузол «%(value)s»" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Додано групу вузлів «%(value)s»" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Додано групу мережеву групу «%(value)s»" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Додано новий запис сервера DNS «%(value)s»" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Додано нові псевдоніми до запису вузла «%(value)s»" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Додано нові псевдоніми до запису користувача етапу «%(value)s»" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Додано нові псевдоніми реєстраційного запису служби «%(value)s»" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Додано нові псевдоніми до запису користувача «%(value)s»" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "До правила sudo «%(rule)s» додано параметр «%(option)s»" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Додано права доступу «%(value)s»" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Додано привілей «%(value)s»" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Додано роль «%(value)s»" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Додано сегмент «%(value)s»" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Додано самообслуговування «%(value)s»" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Додано службу «%(value)s»" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Додано правило делегування служб «%(value)s»" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Додано ціль делегування служб «%(value)s»" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Додано користувача етапу «%(value)s»" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Додано системні права доступу «%(value)s»" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Додано суфікс топології «%(value)s»" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Додано користувача «%(value)s»" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Додано сховище «%(value)s»" - -msgid "Additional instructions:" -msgstr "Додаткові настанови:" - -msgid "Address not valid, can't redirect" -msgstr "Адреса є некоректною. Переспрямування неможливе." - -msgid "Administrative account" -msgstr "Адміністративний обліковий запис" - -msgid "Administrator e-mail address" -msgstr "Адреса електронної пошти адміністратора" - -msgid "Advertised by servers" -msgstr "Повідомлено серверами" - -msgid "Affiliation Changed" -msgstr "Змінено місце роботи" - -msgid "Agreements deleted" -msgstr "Угоди вилучено" - -msgid "Algorithm" -msgstr "Алгоритм" - -msgid "All" -msgstr "Всі" - -msgid "All attributes to which the permission applies" -msgstr "Усі атрибути, яких стосуються ці права доступу" - -msgid "All commands should at least have a result" -msgstr "Виконання всіх команд має призводити до якогось результату" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" -"Не вдалося отримати відповідь на запит щодо зворотної зони DNS %(revdns)s " -"від жодного із серверів назв" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" -"Усі фільтри призначення, зокрема ті, які визначаються типом та членством" - -msgid "Allow" -msgstr "Дозволити" - -msgid "Allow PTR sync" -msgstr "Дозволити PTR-синхронізацію" - -msgid "Allow access from the trusted domain" -msgstr "Дозволити доступ з довіреного домену" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "Дозволити додавання зовнішніх учасників поза IPA з довірених доменів" - -msgid "Allow dynamic updates." -msgstr "Дозволити динамічні оновлення." - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" -"Дозволити повернення до резервного варіанта LDAP DC AD під час визначення " -"адрес довірених об’єктів AD. Лише для двобічних відносин довіри." - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "Дозволити групам вузлів створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "Дозволити групам вузлів отримувати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "Дозволити вузлам створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "Дозволити вузлам отримувати таблицю ключів «${primary_key}»" - -msgid "Allow in-line DNSSEC signing" -msgstr "Дозволити вбудоване підписування DNSSEC" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "Дозволити вбудоване підписування DNSSEC записів у зоні" - -msgid "Allow query" -msgstr "Дозволити запит" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "Дозволити синхронізацію прямих (A, AAAA) і зворотних (PTR) записів" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" -"Дозволити у зоні синхронізацію прямих (A, AAAA) і зворотних (PTR) записів" - -msgid "Allow transfer" -msgstr "Дозволити перенесення" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "Дозволити використання ресурсів IPA доменом правила довіри" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" -"Дозволити групам користувачів створювати сховище ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Дозволити групам користувачів отримувати сховище ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "Дозволити користувачам створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "Дозволити користувачам отримувати таблицю ключів «${primary_key}»" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Дозволити користувачам, групам, вузлам і групам вузлів створювати таблицю " -"ключів цього вузла." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" -"Дозволити користувачам, групам, вузлам і групам вузлів створювати таблицю " -"ключів цієї служби." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Дозволити користувачам, групам, вузлам і групам вузлів отримувати таблицю " -"ключів цього вузла." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Дозволити користувачам, групам, вузлам і групам вузлів отримувати таблицю " -"ключів цієї служби." - -msgid "Allowed Target" -msgstr "Дозволена ціль" - -msgid "Allowed to Impersonate" -msgstr "Дозволено виконувати імперсонацію" - -msgid "Allowed to create keytab" -msgstr "Дозволено створювати таблицю ключів" - -msgid "Allowed to retrieve keytab" -msgstr "Дозволено отримувати таблицю ключів" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "Уможливлює перенесення, незважаючи на використання додатка compat" - -msgid "Already registered" -msgstr "Вже зареєстровано" - -msgid "Alternative UPN suffixes" -msgstr "Альтернативні суфікси UPN" - -msgid "Altitude" -msgstr "Висота" - -msgid "Always ask" -msgstr "Завжди питати" - -msgid "Ambiguous search, user domain was not specified" -msgstr "Неоднозначні параметри пошуку: не вказано домену користувача" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Основний вузол IPA не можна вилучати або вимикати" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Сталася помилка (${error})" - -msgid "An error occurred while fetching dns zones." -msgstr "Під час спроби отримання даних щодо зон DNS сталася помилка." - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Для цього зв’язку довіри вже існує діапазон ідентифікаторів. Вам слід або " -"вилучити попередній діапазон, або виключити з команди параметри --base-id/--" -"range-size." - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "Інтервал між регулярними опитуваннями сервера назв щодо нових зон DNS" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Не вдалося визначити прив’язку «%(anchor)s»." - -msgid "Anchor to override" -msgstr "Прив’язка для перевизначення" - -msgid "Any CA" -msgstr "Будь-який CA" - -msgid "Any Command" -msgstr "Будь-яка команда" - -msgid "Any Group" -msgstr "Будь-яка група" - -msgid "Any Host" -msgstr "Будь-який вузол" - -msgid "Any Profile" -msgstr "Будь-який профіль" - -msgid "Any Service" -msgstr "Будь-яка служба" - -msgid "Anyone" -msgstr "Будь-хто" - -msgid "Applied to hosts" -msgstr "Застосовується до вузлів" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" -"Застосовує перегляд ідентифікаторів до вказаних вузлів або поточних " -"учасників вказаних груп вузлів. Якщо до вузла застосовується якийсь інший " -"перегляд ідентифікаторів, його буде перевизначено." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" -"Застосовує перегляд ідентифікаторів до вказаних вузлів або поточних " -"учасників вказаних груп вузлів. Якщо до вузла застосовується якийсь інший " -"перегляд ідентифікаторів, його буде перевизначено." - -msgid "Apply" -msgstr "Застосувати" - -msgid "Apply ACI to your own entry (self)" -msgstr "Застосувати ACI до вашого власного запису (self)" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "Застосувати ${primary_key} перегляду ідентифікаторів до вузлів" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" -"Застосувати ${primary_key} перегляду ідентифікаторів до вузлів груп вузлів" - -msgid "Apply to host groups" -msgstr "Застосувати до груп вузлів" - -msgid "Apply to hosts" -msgstr "Застосувати до вузлів" - -msgid "Arbitrary string identifying the segment" -msgstr "Довільний рядок для ідентифікації сегмента" - -msgid "Archive data into a vault." -msgstr "Архівувати дані до сховища." - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Дані архівовано до сховища «%(value)s»" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"Ви справді бажаєте виконати щодо користувача дію «${action}»?
Зміни буде " -"внесено негайно." - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Ви справді хочете активувати ${object}?" - -msgid "Are you sure you want to activate selected users?" -msgstr "Ви справді хочете активувати позначені записи користувачів?" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "Ви справді хочете додати права доступу для зони DNS ${object}?" - -msgid "Are you sure you want to change default group?" -msgstr "Ви справді хочете змінити типову групу?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Ви справді хочете вилучити ${object}?" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Ви справді бажаєте вилучити позначені записи?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Ви справді хочете вимкнути ${object}?" - -msgid "Are you sure you want to disable selected entries?" -msgstr "Ви справді хочете вимкнути позначені записи?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Ви справді хочете увімкнути ${object}?" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Ви справді бажаєте увімкнути позначені записи?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "Ви справді хочете виконати цю дію?" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Ви справді хочете перебудувати записи автоматичної участі?" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "Ви справді хочете вилучити права доступу для зони DNS ${object}?" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Ви справді хочете відновити ${object}?" - -msgid "Are you sure you want to restore selected users?" -msgstr "Ви справді хочете відновити позначені записи користувачів?" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Ви справді хочете виставити ${object}?" - -msgid "Are you sure you want to stage selected users?" -msgstr "Ви справді хочете зробити користувачами етапу позначених користувачів?" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" -"Ви справді хочете скасувати застосування перегляду ідентифікаторів до " -"позначених записів?" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Ви справді хочете розблокувати користувача ${object}?" - -msgid "Are you sure you want to unprovision this host?" -msgstr "Ви справді бажаєте скасувати передбачення цього вузла?" - -msgid "Are you sure you want to unprovision this service?" -msgstr "Ви справді бажаєте скасувати передбачення цієї служби?" - -msgid "Arguments to details function" -msgstr "Аргументи до функції details" - -msgid "As Whom" -msgstr "Від імені" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" -"Запитати невипадковий пароль, який слід використати для реєстраційного запису" - -msgid "Assigned ID View" -msgstr "Перегляд призначених ідентифікаторів" - -msgid "Assigned manager of the token (default: self)" -msgstr "Призначений керівник ключа (типове значення: self)" - -msgid "Assigned user of the token (default: self)" -msgstr "Призначений користувач ключа (типове значення: self)" - -msgid "Asymmetric" -msgstr "Асиметричний" +"AD DC не вдалося отримати доступ до жодного з контролерів домену IPA. " +"Найімовірніше, цю помилку пов’язано із проблемами з DNS або брандмауером" msgid "At least the domain or IP address should be specified" msgstr "Слід вказати принаймні домен або IP-адресу" -msgid "Attribute" -msgstr "Атрибут" - -msgid "Attribute Key" -msgstr "Ключ атрибута" - -msgid "Attribute breakdown" -msgstr "Розбиття за атрибутами" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Атрибут для фільтрування за формальним виразом. Приклад: fqdn для вузла або " -"manager для користувача" - -msgid "Attributes" -msgstr "Атрибути" - -msgid "Attributes for total update" -msgstr "Атрибути для загального оновлення" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" -"Атрибути, для яких не відбуватиметься реплікація до сервера споживання під " -"час часткового оновлення. Наприклад, `(objectclass=*) $ EXCLUDE " -"accountlockout memberof" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" -"Атрибути, для яких не відбуватиметься реплікація до сервера споживання під " -"час загального оновлення. Наприклад, (objectclass=*) $ EXCLUDE accountlockout" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "Атрибути, які буде проігноровано для записів груп у DS" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "Атрибути, які буде проігноровано для записів користувачів у DS" - -msgid "Attributes to replicate" -msgstr "Атрибути для реплікації" - -msgid "Attributes to strip" -msgstr "Атрибути, які слід прибрати" - -msgid "Attributes to which the delegation applies" -msgstr "Атрибути, до яких застосовується уповноваження" - -msgid "Attributes to which the permission applies" -msgstr "Атрибути, до яких застосовується правило доступу" - -msgid "Attributes to which the permission applies by default" -msgstr "Атрибути, до яких типово застосовується правило доступу" - -msgid "Attributes to which the permission applies." -msgstr "Атрибути, до яких застосовується правило доступу." - -msgid "Audit" -msgstr "Аудит" - -msgid "Authenticating" -msgstr "Розпізнавання" - -msgid "Authentication" -msgstr "Розпізнавання" - -msgid "Authentication Indicators" -msgstr "Індикатори розпізнавання" - -msgid "Authentication indicator" -msgstr "Індикатор розпізнавання" - -msgid "Authentication indicators" -msgstr "Індикатори розпізнавання" - -msgid "Authentication with Kerberos failed" -msgstr "Не вдалося пройти розпізнавання за допомогою Kerberos" - -msgid "Authentication with personal certificate failed" -msgstr "Не вдалося пройти розпізнавання за особистим сертифікатом" - -msgid "Authoritative nameserver" -msgstr "Основний сервер назв" - -msgid "Authoritative nameserver change" -msgstr "Зміна основного сервера назв" - -msgid "Authoritative nameserver domain name" -msgstr "Назва домену основного сервера назв" - -msgid "Authority ID" -msgstr "Ід. центру" - -msgid "Auto Membership Rule" -msgstr "Правило автоматичної участі" - -msgid "Auto Membership is not configured" -msgstr "Автоматичну участь не налаштовано" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Правило автоматичної участі: %s не знайдено!" - -msgid "Autogenerated" -msgstr "Створено автоматично" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Спроба автоматичного оновлення записів системи DNS зазнала невдачі. Будь " -"ласка, повторно запустіть оновлення записів системи вручну, щоб отримати " -"список пропущених записів." - -msgid "Automember" -msgstr "Автоматична участь" - -msgid "Automember Rule" -msgstr "Правило автоматичної участі" - -msgid "Automember rebuild membership task completed" -msgstr "Завдання з перезбирання правил автоматичної участі виконано" - -msgid "Automember rebuild membership task started" -msgstr "Виконується завдання з перебудови записів автоматичної участі" - -msgid "Automount" -msgstr "Автоматичне монтування" - -msgid "Automount Key" -msgstr "Ключ автомонтування" - -msgid "Automount Keys" -msgstr "Ключі автомонтування" - -msgid "Automount Location" -msgstr "Запис автомонтування" - -msgid "Automount Location Settings" -msgstr "Параметри запису автомонтування" - -msgid "Automount Locations" -msgstr "Записи автомонтування" - -msgid "Automount Map" -msgstr "Карта автомонтування" - -msgid "Automount Maps" -msgstr "Карти автоматичного монтування" - -msgid "Automount key name." -msgstr "Назва ключа автоматичного монтування." - -msgid "Automount key object." -msgstr "Об’єкт ключа автоматичного монтування." - -msgid "Automount location name." -msgstr "Адреса автомонтування." - -msgid "Automount map name." -msgstr "Назва карти автоматичного монтування." - -msgid "Automount master file." -msgstr "Основний файл automount." - -msgid "Available" -msgstr "Доступний" - -msgid "BIND update policy" -msgstr "Правила оновлення BIND" - -msgid "Back" -msgstr "Назад" - -msgid "Back to Top" -msgstr "Повернутися до початку" - -msgid "Bad format in credentials cache" -msgstr "Помилковий формат кешу реєстраційних даних" - -msgid "Bad or unsupported salt type.\n" -msgstr "Помилковий або непідтримуваний тип солі (salt).\n" - -msgid "Bad search filter" -msgstr "Помилковий фільтр пошуку" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Помилковий фільтр пошуку %(info)s" - -msgid "Base DN" -msgstr "Кореневий DN" - -msgid "Base DN on remote LDAP server" -msgstr "Основний DN на віддаленому сервері LDAP" - -msgid "Base ID" -msgstr "Основа ID" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "Основа для створення записів об’єктів сертифікації (OU=Test,O=Example)" - -msgid "Base-64 encoded certificate." -msgstr "Сертифікат у кодуванні Base-64." - -msgid "Base-64 encoded host certificate" -msgstr "Сертифікат вузла у кодуванні Base-64" - -msgid "Base-64 encoded server certificate" -msgstr "Сертифікат сервера у кодуванні Base-64" - -msgid "Base-64 encoded service certificate" -msgstr "Сертифікат служби у кодуванні Base-64" - -msgid "Base-64 encoded user certificate" -msgstr "Сертифікат користувача у кодуванні Base-64" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Помилка декодування Base64: %(reason)s" - -msgid "Binary data to archive" -msgstr "Двійкові дані для архівування" - -msgid "Bind DN" -msgstr "DN для прив'язки" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "Пароль до Bind вже вказано (-w).\n" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "Для використання DN bind (-w або -W) потрібен пароль до bind.\n" - -msgid "Bind rule type" -msgstr "Тип правила прив’язування" - -msgid "Brief description of this profile" -msgstr "Короткий опис профілю" - -msgid "CA" -msgstr "CA" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "Службу сертифікації «%s» вимкнено" - -msgid "CA ACL" -msgstr "CA ACL" - -msgid "CA ACLs" -msgstr "CA ACL" - -msgid "CA Compromise" -msgstr "Компрометація CA" - -msgid "CA category" -msgstr "Категорія CA" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"не можна встановлювати для категорії CA значення «all», доки є записи " -"дозволених CA" - -msgid "CA category the ACL applies to" -msgstr "Категорія CA, до якої застосовується ACL" - -msgid "CA certificate" -msgstr "Сертифікат CA" - -msgid "CA is not configured" -msgstr "CA не налаштовано" - -msgid "CAs" -msgstr "CA" - -msgid "CAs cannot be added when CA category='all'" -msgstr "Не можна додавати CA, якщо категорія CA='all'" - -msgid "CERT Algorithm" -msgstr "Алгоритм CERT" - -msgid "CERT Certificate Type" -msgstr "Тип сертифіката CERT" - -msgid "CERT Certificate/CRL" -msgstr "Сертифікат або CRL CERT" - -msgid "CERT Key Tag" -msgstr "Мітка ключа CERT" - -msgid "CERT record" -msgstr "запис CERT" - -msgid "CIFS credentials object" -msgstr "Об’єкт реєстраційних даних CIFS" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "Ваші реєстраційні дані відхилено сервером CIFS %(host)s" - #, python-format msgid "" "CIFS server communication error: code \"%(num)s\", message \"%(message)s" @@ -19840,3536 +31891,89 @@ msgstr "" "Помилка обміну даними з сервером CIFS: код «%(num)s», повідомлення " "«%(message)s» (обидва значення можуть бути «None»)" -msgid "CIFS server denied your credentials" -msgstr "Ваші реєстраційні дані відхилено сервером CIFS" +msgid "no trusted domain is configured" +msgstr "Не налаштовано жодного довіреного домену" -msgid "CLI metavar" -msgstr "Метазмінна CLI" +msgid "domain is not configured" +msgstr "домен не налаштовано" -msgid "CLI name" -msgstr "Назва CLI" +msgid "SID is not valid" +msgstr "SID не є чинним" -msgid "CNAME Hostname" -msgstr "Назва вузла CNAME" +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "SID не збігається точно з будь-яким з SID довірених доменів" -msgid "CNAME record" -msgstr "запис CNAME" +msgid "SID does not match any trusted domain" +msgstr "SID не відповідає жодному з довірених доменів" -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" -"Записом CNAME не можна користуватися разом з будь-якими іншими записами, " -"окрім PTR (RFC 1034, розділ 3.6.2)" +msgid "Trust setup" +msgstr "Налаштування довіри" -msgid "CSR" -msgstr "CSR" +msgid "Our domain is not configured" +msgstr "Наш домен не налаштовано" -msgid "Cancel" -msgstr "Скасувати" +msgid "No trusted domain is not configured" +msgstr "Не налаштовано жодного довіреного домену" + +msgid "trusted domain object" +msgstr "об’єкт довіреного домену" + +msgid "domain is not trusted" +msgstr "домен не є довіреним" + +msgid "no trusted domain matched the specified flat name" +msgstr "вказаній простій назві не відповідає жоден довірений домен" + +msgid "trusted domain object not found" +msgstr "об’єкт довіреного домену не знайдено" + +msgid "Object does not belong to a trusted domain" +msgstr "Об'єкт не належить до довіреного домену" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "SSSD не вдалося визначити за об’єктом коректний SID" + +msgid "Ambiguous search, user domain was not specified" +msgstr "Неоднозначні параметри пошуку: не вказано домену користувача" + +msgid "Trusted domain did not return a unique object" +msgstr "Довіреним доменом не повернуто унікального об’єкта" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "Довіреним доменом не повернуто коректного SID об’єкта" + +msgid "trusted domain user not found" +msgstr "не знайдено користувача довіреного домену" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "Не вдалося отримати список GC довіреного домену" + +msgid "CIFS credentials object" +msgstr "Об’єкт реєстраційних даних CIFS" #, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "Не вдалося створити зворотний запис для «%(value)s»: %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Не вдалося розшифрувати файл «%(filename)s»: %(exc)s" +msgid "CIFS server %(host)s denied your credentials" +msgstr "Ваші реєстраційні дані відхилено сервером CIFS %(host)s" #, python-format msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" msgstr "" "Не вдалося встановити LSA-з’єднання з %(host)s. Чи запущено сервер CIFS?" -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"Не можна встановлювати довіру до AD, розгорнутою у тому самому домені, що і " -"IPA. Підтримки такої можливості не передбачено." - -msgid "Cannot find specified domain or server name" -msgstr "Не вдалося знайти домену або сервера з вказаною назвою" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "Не вдалося отримати FQDN вузла!\n" - -msgid "Cannot hide CA renewal master." -msgstr "Не можна приховувати основний сервер оновлення CA." - -msgid "Cannot hide DNSSec key master." -msgstr "Не можна приховувати основний сервер ключів DNSSec." - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "Не можна приховувати останній увімкнений сервер %(name)s." - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Виконати дію з перевірки SID без встановленої підтримки Samba 4 неможливо. " -"Переконайтеся, що вами встановлено на сервері підпакунок IPA server-trust-ad." - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Виконати дію з перевірки зовнішніх учасників без встановленої підтримки " -"Samba 4 неможливо. Переконайтеся, що вами встановлено на сервері підпакунок " -"IPA server-trust-ad." - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без налаштовування власного домену не можна виконувати дію з приєднання. " -"Спочатку запустіть ipa-adtrust-install на сервері IPA." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Вибрану команду не можна виконати без екземпляра Samba 4, встановленого у " -"цій системі. Переконайтеся, що на цьому сервері було виконано ipa-adtrust-" -"install." - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Виконати вибрану команду без встановленої підтримки Samba 4 неможливо. " -"Переконайтеся, що вами встановлено підпакунок IPA server-trust-ad." - -msgid "Cannot query Directory Manager with API" -msgstr "" -"Не вдалося опитати засіб керування каталогом за допомогою програмного " -"інтерфейсу" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Не вдалося прочитати файл «%(filename)s»: %(exc)s" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Не вдалося визначити KDC для бажаної області (realm)" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "Не вдалося отримати список GC довіреного домену" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без налаштовування власного домену не можна виконувати пошук у довірених " -"доменах. Спочатку запустіть ipa-adtrust-install на сервері IPA." - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "Не можна одночасно вказувати механізм SASL і DN прив’язки.\n" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "Не можна одночасно вказувати сервер і адресу LDAP.\n" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "Не вдалося зберегти ACI прав доступу до %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "Не можна одночасно використовувати %(old_name)s і %(new_name)s" - -msgid "Car License" -msgstr "Водійська ліцензія" - -msgid "Certificate" -msgstr "Сертифікат" - -msgid "Certificate Association Data" -msgstr "Дані прив’язки сертифікатів" - -msgid "Certificate Authorities" -msgstr "Центри сертифікації" - -msgid "Certificate Authority" -msgstr "Центр сертифікації" - -msgid "Certificate Data" -msgstr "Дані сертифіката" - -msgid "Certificate For Match" -msgstr "Сертифікат для відповідності" - -msgid "Certificate Hold" -msgstr "Власник сертифіката" - -msgid "Certificate Hold Removed" -msgstr "Затримання сертифіката вилучено" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "Загальні налаштування прив’язки сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rule" -msgstr "Правило прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rule description" -msgstr "Опис правила прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rule name" -msgstr "Назва правила прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rules" -msgstr "Правила прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping configuration options" -msgstr "Параметри налаштування прив’язки сертифікатів до профілів" - -msgid "Certificate Mapping Match" -msgstr "Відповідність за прив’язкою до сертифіката" - -msgid "Certificate Profile" -msgstr "Профіль сертифікатів" - -msgid "Certificate Profile to use" -msgstr "Профіль сертифіката, яким слід скористатися" - -msgid "Certificate Profiles" -msgstr "Профілі сертифікатів" - -msgid "Certificate Profiles to add" -msgstr "Профілі сертифікатів для додавання" - -msgid "Certificate Profiles to remove" -msgstr "Профілі сертифікатів для вилучення" - -msgid "Certificate Revoked" -msgstr "Сертифікат відкликано" - -msgid "Certificate Subject base" -msgstr "Базовий об’єкт сертифікації" - -msgid "Certificate Type" -msgstr "Тип сертифіката" - -msgid "Certificate Usage" -msgstr "Використання сертифіката" - -msgid "Certificate chain" -msgstr "Ланцюжок сертифікації" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Сертифікат для ${primary_key} ${entity}" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Помилка форматування сертифіката: %(error)s" - -msgid "Certificate in base64 or PEM format" -msgstr "Сертифікат у форматі base64 або PEM" - -msgid "Certificate mapping data" -msgstr "Дані прив’язки сертифіката" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Не вдалося завершити дію з сертифікатом: %(error)s" - -msgid "Certificate profiles cannot be renamed" -msgstr "Профілі сертифікатів не можна перейменовувати" - -msgid "Certificate requested" -msgstr "Надіслано запит щодо сертифікації" - #, python-format msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" msgstr "" -"Не знайдено сертифікат із серійним номером %(serial)s, виданий CA «%(ca)s»" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Сертифікати, що зберігаються у файлі «%(file)s»" - -msgid "Certificate/CRL" -msgstr "Сертифікат/CRL" - -msgid "Certificates" -msgstr "Сертифікати" - -msgid "Cessation of Operation" -msgstr "Скасування дії" - -msgid "Change current Domain Level." -msgstr "Змінити поточний рівень домену." - -msgid "Change password" -msgstr "Змінити пароль" - -msgid "Change to POSIX group" -msgstr "Змінити на групу POSIX" - -msgid "Change to external group" -msgstr "Змінити на зовнішню групу" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Змінити пароль «%(value)s»" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Змінено стан сервера «%(value)s»." - -msgid "Character classes" -msgstr "Класи символів" - -msgid "Check DNS" -msgstr "Перевірка DNS" - -msgid "Check connection to remote IPA server." -msgstr "Перевірити з’єднання із віддаленим сервером IPA." - -msgid "Check if the password contains the username" -msgstr "Перевіряти, чи не міститься у паролі ім'я користувача" - -msgid "Check if the password is a dictionary word" -msgstr "Перевіряти, чи є пароль словом зі словника" - -msgid "Check the status of a certificate signing request." -msgstr "Перевірити стан запиту щодо підписування сертифіката." - -msgid "Checking if record exists." -msgstr "Перевірка, чи існує запис." - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу CA." - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу DNS." - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу KRA" - -msgid "City" -msgstr "Місто" - -msgid "Class" -msgstr "Клас" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" -"Клас об'єкта служби, який використовується для прив'язування правил до груп" - -msgid "Clear" -msgstr "Спорожнити" - -msgid "Clear all fields on the page." -msgstr "Спорожнити усі поля на сторінці." - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" -"Знімає перегляд ідентифікаторів із вказаних вузлів або поточних учасників " -"вказаних груп вузлів." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Натисніть, щоб ${action}" - -msgid "Client credentials may be delegated to the service" -msgstr "Реєстраційні дані клієнта може бути передано службі" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" -"Клієнтську частину не налаштовано. Віддайте команду ipa-client-install." - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Версія клієнта. Використовується для визначення, якщо сервер приймає запит." - -msgid "Clock interval" -msgstr "Інтервал годинника" - -msgid "Clock offset" -msgstr "Зсув годинника" - -msgid "Close" -msgstr "Закрити" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "Спроба закриття таблиці ключів зазнала невдачі\n" - -msgid "Collapse All" -msgstr "Згорнути всі" - -msgid "Comma separated encryption types list" -msgstr "Список типів шифрування, відокремлених комами" - -msgid "Comma-separated list of attributes" -msgstr "Список атрибутів, відокремлених комами" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" -"Список атрибутів, які буде проігноровано для записів груп у DS, " -"відокремлених комами" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" -"Список атрибутів, які буде проігноровано для записів користувачів у DS, " -"відокремлених комами" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" -"Список класів об’єктів, які буде проігноровано для записів груп у DS, " -"відокремлених комами" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" -"Список класів об’єктів, які буде проігноровано для записів користувачів у " -"DS, відокремлених комами" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" -"Список класів об’єктів, використаних для пошуку записів груп у DS, " -"відокремлених комами" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" -"Список класів об’єктів, використаних для пошуку записів користувачів у DS, " -"відокремлених комами" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" -"Права доступу, які слід надати, відокремлених комами (read, write). Типовим " -"варіантом є «write» (запис)." - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" -"Права доступу, які слід надати, відокремлених комами (read, write, add, " -"delete, all)" - -msgid "Comma-separated list of raw A records" -msgstr "Список простих записів A, відокремлених комами" - -msgid "Comma-separated list of raw A6 records" -msgstr "Список простих записів A6, відокремлених комами" - -msgid "Comma-separated list of raw AAAA records" -msgstr "Список простих записів AAAA, відокремлених комами" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "Список простих записів AFSDB, відокремлених комами" - -msgid "Comma-separated list of raw APL records" -msgstr "Список простих записів APL, відокремлених комами" - -msgid "Comma-separated list of raw CERT records" -msgstr "Список простих записів CERT, відокремлених комами" - -msgid "Comma-separated list of raw CNAME records" -msgstr "Список простих записів CNAME, відокремлених комами" - -msgid "Comma-separated list of raw DHCID records" -msgstr "Список простих записів DHCID, відокремлених комами" - -msgid "Comma-separated list of raw DLV records" -msgstr "Список простих записів DLV, відокремлених комами" - -msgid "Comma-separated list of raw DNAME records" -msgstr "Список простих записів DNAME, відокремлених комами" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "Список простих записів DNSKEY, відокремлених комами" - -msgid "Comma-separated list of raw DS records" -msgstr "Список простих записів DS, відокремлених комами" - -msgid "Comma-separated list of raw HIP records" -msgstr "Список простих записів HIP, відокремлених комами" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "Список простих записів IPSECKEY, відокремлених комами" - -msgid "Comma-separated list of raw KEY records" -msgstr "Список простих записів KEY, відокремлених комами" - -msgid "Comma-separated list of raw KX records" -msgstr "Список простих записів KX, відокремлених комами" - -msgid "Comma-separated list of raw LOC records" -msgstr "Список простих записів LOC, відокремлених комами" - -msgid "Comma-separated list of raw MX records" -msgstr "Список простих записів MX, відокремлених комами" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "Список простих записів NAPTR, відокремлених комами" - -msgid "Comma-separated list of raw NS records" -msgstr "Список простих записів NS, відокремлених комами" - -msgid "Comma-separated list of raw NSEC records" -msgstr "Список простих записів NSEC, відокремлених комами" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "Список простих записів NSEC3, відокремлених комами" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "Список простих записів NSEC3PARAM, відокремлених комами" - -msgid "Comma-separated list of raw PTR records" -msgstr "Список простих записів PTR, відокремлених комами" - -msgid "Comma-separated list of raw RP records" -msgstr "Список простих записів RP, відокремлених комами" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "Список простих записів RRSIG, відокремлених комами" - -msgid "Comma-separated list of raw SIG records" -msgstr "Список простих записів SIG, відокремлених комами" - -msgid "Comma-separated list of raw SPF records" -msgstr "Список простих записів SPF, відокремлених комами" - -msgid "Comma-separated list of raw SRV records" -msgstr "Список простих записів SRV, відокремлених комами" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "Список простих записів SSHFP, відокремлених комами" - -msgid "Comma-separated list of raw TA records" -msgstr "Список простих записів TA, відокремлених комами" - -msgid "Comma-separated list of raw TKEY records" -msgstr "Список простих записів TKEY, відокремлених комами" - -msgid "Comma-separated list of raw TSIG records" -msgstr "Список простих записів TSIG, відокремлених комами" - -msgid "Comma-separated list of raw TXT records" -msgstr "Список простих записів TXT, відокремлених комами" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "Команда «%(name)s» вважається застарілою" - -msgid "Command category" -msgstr "Категорія команд" - -msgid "Command category the rule applies to" -msgstr "Категорія команд, до якої застосовується правило" - -msgid "Command name" -msgstr "Назва команди" - -msgid "Command not implemented" -msgstr "Команду не реалізовано" - -msgid "Commands" -msgstr "Команди" - -msgid "Common Name" -msgstr "Звичайне ім'я" - -msgid "Conditions that could not be added" -msgstr "Умови, які не вдалося додати" - -msgid "Conditions that could not be removed" -msgstr "Умови, які не вдалося вилучити" - -msgid "Configuration" -msgstr "Налаштування" - -msgid "Configuration string" -msgstr "Рядок налаштування" - -msgid "Configure this server as a trust agent." -msgstr "Налаштувати цей сервер як довірений агент." - -msgid "Configure your token" -msgstr "Налаштувати ваш жетон" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" -"Налаштуйте ваш жетон скануванням QR-коду, наведеного нижче. Натисніть поле " -"QR-коду, якщо ви бачите правильні дані на пристрої, який ви хочете " -"налаштувати." - -msgid "Configured administrative server limit exceeded" -msgstr "Перевищено налаштоване обмеження адміністративного сервера" - -msgid "Configured size limit exceeded" -msgstr "Перевищено налаштоване обмеження за розміром" - -msgid "Configured time limit exceeded" -msgstr "Перевищено налаштоване обмеження за часом" - -msgid "Confirm (password)" -msgstr "Підтвердження (пароль)" - -msgid "Confirmation" -msgstr "Підтвердження" - -msgid "Connectivity" -msgstr "Можливість з’єднання" - -msgid "Consecutive failures before lockout" -msgstr "Кількість помилок для блокування" - -msgid "Consume an entitlement." -msgstr "Використати іменування." - -msgid "Contact Settings" -msgstr "Параметри контакту" - -msgid "Contact this specific KDC Server" -msgstr "Встановити зв’язок з вказаним сервером KDC" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" -"Вміст сховищ типу «стандартне» можуть переглядати користувачі із вищим " -"рівнем прав доступу (адміністратори)." - -msgid "Continue" -msgstr "Продовжити" - -msgid "Continue to next page" -msgstr "Перейти до наступної сторінки" - -msgid "Continuous mode: Don't stop on errors." -msgstr "Режим неперервної роботи: не зупинятися у разі помилок." - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" -"Режим неперервної обробки. Програма повідомляє про помилки, але продовжує " -"обробку." - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" -"Режим неперервної обробки. Програма повідомляє про помилки, але продовжує " -"обробку." - -msgid "Convert on server" -msgstr "Перетворити на сервері" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Не вдалося отримати %(name)s у інтерактивному режимі" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" -"Не вдалося прочитати фільтр походження (originfilter) UPG Definition. " -"Переконайтеся, що у вас є відповідні права доступу." - -msgid "Counter" -msgstr "Лічильник" - -msgid "Counter-based (HOTP)" -msgstr "На основі лічильника (HOTP)" - -msgid "Create Stage user in from a delete user" -msgstr "" -"Створити запис користувача етапу на основі вилученого запису користувача" - -msgid "Create a CA." -msgstr "Створити запис CA." - -msgid "Create a new CA ACL." -msgstr "Створити запис CA ACL." - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "Створити правило прив’язування сертифіката до профілів." - -msgid "Create a new HBAC rule." -msgstr "Створити правило HBAC." - -msgid "Create a new SELinux User Map." -msgstr "Створити карту користувачів SELinux." - -msgid "Create a new automount key." -msgstr "Створити ключ автоматичного монтування." - -msgid "Create a new automount location." -msgstr "Створити новий запис автоматичного монтування." - -msgid "Create a new automount map." -msgstr "Створити карту автомонтування." - -msgid "Create a new group." -msgstr "Створити нову групу." - -msgid "Create a new indirect mount point." -msgstr "Створити опосередковану точку монтування." - -msgid "Create a new service delegation rule." -msgstr "Створити правило делегування служб." - -msgid "Create a new service delegation target." -msgstr "Створити ціль делегування служб." - -msgid "Create a new vault." -msgstr "Створити сховище." - -msgid "Create as a non-POSIX group" -msgstr "Створити як групу, що не відповідає POSIX" - -msgid "Create dns record" -msgstr "Створити запис DNS" - -msgid "Create new ACI." -msgstr "Створити запис ACI." - -msgid "Create new DNS forward zone." -msgstr "Створити зону переспрямовування DNS." - -msgid "Create new DNS zone (SOA record)." -msgstr "Створити зону DNS (запис SOA)." - -msgid "Create new Sudo Command Group." -msgstr "Створити групу команд sudo." - -msgid "Create new Sudo Command." -msgstr "Створити запис команди sudo." - -msgid "Create new Sudo Rule." -msgstr "Створити правило sudo." - -msgid "Create reverse" -msgstr "Створити зворотний запис" - -msgid "Create reverse record for this IP Address" -msgstr "Створити зворотний запис для цієї IP-адреси" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Створено ACI «%(value)s»" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Створено запис CA «%(value)s»" - -msgid "Creating record." -msgstr "Створення запису." - -msgid "Credentials" -msgstr "Реєстраційні дані" - -msgid "Credentials cache permissions incorrect" -msgstr "Помилкові права доступу до кешу реєстраційних даних" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Зв’язки довіри між областями не налаштовано. Спочатку запустіть ipa-adtrust-" -"install на сервері IPA." - -msgid "Current DNS record contents:\n" -msgstr "Поточний вміст запису DNS:\n" - -msgid "Current Password" -msgstr "Поточний пароль" - -msgid "Current domain level:" -msgstr "Поточний рівень домену:" - -msgid "Current password is required" -msgstr "Слід вказати поточний пароль" - -msgid "Custom value" -msgstr "Нетипове значення" - -msgid "Customization" -msgstr "Налаштування" - -msgid "DHCID record" -msgstr "запис DHCID" - -msgid "DLV Algorithm" -msgstr "Алгоритм DLV" - -msgid "DLV Digest" -msgstr "Контрольна сума DLV" - -msgid "DLV Digest Type" -msgstr "Тип контрольної суми DLV" - -msgid "DLV Key Tag" -msgstr "Мітка ключа DLV" - -msgid "DLV record" -msgstr "Запис DLV" - -msgid "DN commonName does not match user's login" -msgstr "У commonName DN не збігається із ім’ям користувача" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" -"emailAddress DN не збігається із жодною адресою електронної пошти користувача" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "DN контейнера груп у DS відносно до основного DN" - -msgid "DN of container for users in DS relative to base DN" -msgstr "DN контейнера користувачів у DS відносно до основного DN" - -msgid "DN of the started task" -msgstr "DN запущеного завдання" - -msgid "DN to bind as if not using kerberos" -msgstr "" -"DN, до якого слід виконати прив’язку, якщо не використовується kerberos" - -msgid "DNAME Target" -msgstr "Ціль DNAME" - -msgid "DNAME record" -msgstr "Запис DNAME" - -msgid "DNS" -msgstr "DNS" - -msgid "DNS Forward Zone" -msgstr "Зона переспрямовування DNS" - -msgid "DNS Forward Zones" -msgstr "Зони переспрямовування DNS" - -msgid "DNS Global Configuration" -msgstr "Загальні налаштування DNS" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "Тип RR DNS «%s» не підтримується додатком bind-dyndb-ldap" - -msgid "DNS Resource Record" -msgstr "Запис ресурсу DNS" - -msgid "DNS Resource Records" -msgstr "Записи ресурсів DNS" - -msgid "DNS Server" -msgstr "Сервер DNS" - -msgid "DNS Server name" -msgstr "Назва сервера DNS" - -msgid "DNS Servers" -msgstr "Сервери DNS" - -msgid "DNS Zone" -msgstr "Зона DNS" - -msgid "DNS Zone Settings" -msgstr "Параметри зони DNS" - -msgid "DNS Zones" -msgstr "Зони DNS" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" -"Перевірка DNS зазнала невдачі: мало бути {%(expected)s}, отримано {%(got)s}" - -msgid "DNS class" -msgstr "Клас DNS" - -msgid "DNS configuration options" -msgstr "Параметри налаштування DNS" - -msgid "DNS forward zone" -msgstr "Зона переспрямовування DNS" - -msgid "DNS forward zones" -msgstr "Зони переспрямовування DNS" - -msgid "DNS forwarder" -msgstr "Переспрямовувач DNS" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"З виходом версії IPA 4.0 змінилася семантика засобу переспрямовування DNS.\n" -"Вам варто перейти на використання зон переспрямовування (dnsforwardzone-*).\n" -"Докладніше про це у документації." - -msgid "DNS is not configured" -msgstr "DNS не налаштовано" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "Довжина мітки DNS не повинна перевищувати 63 символів" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "Довжина мітки DNS не повинна перевищувати 63 символи" - -msgid "DNS record was deleted because it contained no data." -msgstr "Запис DNS було вилучено, оскільки у ньому не містилося жодних даних." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "Записи DNS вузла %(host)s не вдалося вилучити. (%(reason)s)" - -msgid "DNS records can be only updated one at a time" -msgstr "Записи DNS можна оновлювати лише поодинці" - -msgid "DNS resource record" -msgstr "Запис ресурсу DNS" - -msgid "DNS resource record type" -msgstr "Тип запису ресурсу DNS" - -msgid "DNS resource records" -msgstr "Записи ресурсів DNS" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" -"Зворотна зона DNS %(revzone)s для IP-адреси %(addr)s не керується цим " -"сервером" - -msgid "DNS server" -msgstr "Сервер DNS" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"На сервері DNS %(server)s не передбачено підтримки DNSSEC: %(error)s.\n" -"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"На сервері DNS %(server)s не передбачено підтримки EDNS0 (RFC 6891): " -"%(error)s.\n" -"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Сервер DNS %(server)s: %(error)s." - -msgid "DNS servers" -msgstr "Сервери DNS" - -msgid "DNS zone" -msgstr "зона DNS" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Зони DNS %(zone)s не знайдено" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"Запис зони DNS для кожного realmdomain має містити записи SOA або NS. Для %s " -"таких записів не виявлено" - -msgid "DNS zone root record cannot be renamed" -msgstr "Кореневий запис зони DNS не можна перейменовувати" - -msgid "DNS zones" -msgstr "зони DNS" - -msgid "DNSKEY record" -msgstr "Запис DNSKEY" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"Підтримка DNSSEC є експериментальною.\n" -"%(additional_info)s" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Не пройдено перевірку DNSSEC: %(error)s.\n" -"Будь ласка, перевірте, чи правильно вказано налаштування DNSSEC, або " -"вимкніть перевірку DNSSEC на усіх серверах IPA." - -msgid "DNSec key master" -msgstr "Основний сервер ключів DNSec" - -msgid "DS Algorithm" -msgstr "Алгоритм DS" - -msgid "DS Digest" -msgstr "Контрольна сума DS" - -msgid "DS Digest Type" -msgstr "Тип контрольної суми DS" - -msgid "DS Key Tag" -msgstr "Мітка ключа DS" - -msgid "DS record" -msgstr "Запис DS" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "запис DS не повинен перебувати у апексі зони (RFC 4035, розділ 2.4)" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" -"Запис DS має існувати паралельно із записом NS (RFC 4592, розділ 4.6, RFC " -"4035, розділ 2.4)" - -msgid "Data" -msgstr "Дані" - -msgid "Debugging output" -msgstr "Діагностична інформація" - -msgid "Default" -msgstr "Типовий" - -msgid "Default (fallback) Group" -msgstr "Типова (резервна) група" - -msgid "Default (fallback) group for entries to land" -msgstr "Типова (резервна) група для додавання записів" - -msgid "Default PAC types" -msgstr "Типові типи PAC" - -msgid "Default SELinux user" -msgstr "Типовий користувач SELinux" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" -"Типовий користувач SELinux, якщо не буде знайдено відповідного у правилі " -"карти SELinux" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "Типовий перегляд довіри не може бути застосовано до вузлів" - -msgid "Default Trust View cannot contain IPA users" -msgstr "Типовий перегляд довіри не може містити користувачів IPA" - -msgid "Default attributes" -msgstr "Типові атрибути" - -msgid "Default e-mail domain" -msgstr "Типовий домен ел. пошти" - -msgid "Default from" -msgstr "Типовий з" - -msgid "Default group for entries to land" -msgstr "Типова група для додавання записів" - -msgid "Default group for new users" -msgstr "Типова група для нових користувачів" - -msgid "Default group for new users is not POSIX" -msgstr "Типовою групою для нових користувачів не є група POSIX" - -msgid "Default group for new users not found" -msgstr "Типової групи для нових користувачів не знайдено" - -msgid "Default group objectclasses" -msgstr "Типові класи об’єктів групи" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Типові класи об’єктів груп (список класів, відокремлених комами)" - -msgid "Default host group" -msgstr "Типова група вузлів" - -msgid "Default location of home directories" -msgstr "Типова адреса домашніх каталогів" - -msgid "Default shell" -msgstr "Типова оболонка" - -msgid "Default shell for new users" -msgstr "Типова оболонка для нових користувачів" - -msgid "Default ticket policy could not be read" -msgstr "Не вдалося прочитати типові правила щодо квитків" - -msgid "Default time to live" -msgstr "Типовий час життя" - -msgid "Default types of PAC supported for services" -msgstr "Типові типи PAC, підтримувані для служб" - -msgid "Default types of supported user authentication" -msgstr "Типові типи підтримуваного розпізнавання користувачів" - -msgid "Default user authentication types" -msgstr "Типові типи розпізнавання користувачів" - -msgid "Default user group" -msgstr "Типова група користувачів" - -msgid "Default user objectclasses" -msgstr "Типові класи об’єктів користувачів" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" -"Типові класи об’єктів користувачів (список класів, відокремлених комами)" - -msgid "Default users group" -msgstr "Типова група користувачів" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" -"Визначає список дозволених індикаторів розпізнавання. Скористайтеся " -"значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " -"Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на основі " -"RADIUS. Скористайтеся значенням «pkinit», щоб дозволити розпізнавання 2FA на " -"основі PKINIT. Скористайтеся значенням «hardened», щоб дозволити захищене " -"від простого перебирання розпізнавання за паролем на основі SPAKE або FAST. " -"Якщо індикатор не буде вказано, буде дозволено усі механізми." - -msgid "Degrees Latitude" -msgstr "Градуси широти" - -msgid "Degrees Longitude" -msgstr "Градуси довготи" - -msgid "Delegation" -msgstr "Уповноваження" - -msgid "Delegation name" -msgstr "Назва уповноваження" - -msgid "Delegations" -msgstr "Уповноваження" - -msgid "Delete" -msgstr "Вилучити" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Вилучити значення «%(value)s» %(name)s?" - -msgid "Delete ACI." -msgstr "Вилучити ACI." - -msgid "Delete Class of Service entry" -msgstr "Вилучити запис класу служби" - -msgid "Delete DNS forward zone." -msgstr "Вилучити зону переспрямовування DNS." - -msgid "Delete DNS record entry." -msgstr "Вилучити пункт запису DNS." - -msgid "Delete DNS resource record." -msgstr "Вилучити запис ресурсу DNS." - -msgid "Delete DNS zone (SOA record)." -msgstr "Вилучити зону DNS (запис SOA)." - -msgid "Delete IPA server." -msgstr "Вилучити сервер IPA." - -msgid "Delete Key, Unprovision" -msgstr "Вилучити ключ, скасування передбачення" - -msgid "Delete Server" -msgstr "Вилучити сервер" - -msgid "Delete Sudo Command Group." -msgstr "Вилучити групу команд sudo." - -msgid "Delete Sudo Command." -msgstr "Вилучити запис команди sudo." - -msgid "Delete Sudo Rule." -msgstr "Вилучити правило sudo." - -msgid "Delete a CA (must be disabled first)." -msgstr "Вилучити службу сертифікації (її спочатку має бути вимкнено)." - -msgid "Delete a CA ACL." -msgstr "Вилучити CA ACL." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Вилучити правило прив’язування сертифікатів до профілів." - -msgid "Delete a Certificate Profile." -msgstr "Вилучити профіль сертифікатів." - -msgid "Delete a DNS server" -msgstr "Вилучити запис сервера DNS" - -msgid "Delete a RADIUS proxy server." -msgstr "Вилучити проксі-сервер RADIUS." - -msgid "Delete a SELinux User Map." -msgstr "Вилучити карту користувачів SELinux." - -msgid "Delete a delegation." -msgstr "Вилучити уповноваження." - -msgid "Delete a group password policy." -msgstr "Вилучити групу правил для паролів." - -msgid "Delete a host." -msgstr "Вилучити вузол." - -msgid "Delete a hostgroup." -msgstr "Вилучити групу вузлів." - -msgid "Delete a netgroup." -msgstr "Вилучити мережеву групу." - -msgid "Delete a permission." -msgstr "Вилучити права доступу." - -msgid "Delete a privilege." -msgstr "Вилучити привілей." - -msgid "Delete a role." -msgstr "Вилучити роль." - -msgid "Delete a segment." -msgstr "Вилучити сегмент." - -msgid "Delete a self-service permission." -msgstr "Вилучити права доступу автослужби." - -msgid "Delete a stage user." -msgstr "Вилучити запис користувача етапу." - -msgid "Delete a topology suffix." -msgstr "Вилучити суфікс топології." - -msgid "Delete a trust." -msgstr "Вилучити запис довіри." - -msgid "Delete a user" -msgstr "Вилучити користувача" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "Вилучити користувача, зберігаючи запис для наступного використання" - -msgid "Delete a user." -msgstr "Вилучити користувача." - -msgid "Delete a vault container." -msgstr "Вилучити контейнер сховищ." - -msgid "Delete a vault." -msgstr "Вилучити сховище." - -msgid "Delete all associated records" -msgstr "Вилучити всі пов’язані записи" - -msgid "Delete all?" -msgstr "Вилучити все?" - -msgid "Delete an Group ID override." -msgstr "Вилучити перевизначення ідентифікаторів групи." - -msgid "Delete an HBAC rule." -msgstr "Вилучити правило HBAC." - -msgid "Delete an HBAC service group." -msgstr "Вилучити групу служб HBAC." - -msgid "Delete an ID View." -msgstr "Вилучити перегляд ідентифікаторів." - -msgid "Delete an ID override." -msgstr "Вилучити перевизначення ідентифікаторів." - -msgid "Delete an ID range." -msgstr "Вилучити діапазон ідентифікаторів." - -msgid "Delete an IPA location." -msgstr "Вилучити місце IPA." - -msgid "Delete an IPA service." -msgstr "Вилучити службу IPA." - -msgid "Delete an OTP token." -msgstr "Вилучити жетон OTP." - -msgid "Delete an User ID override." -msgstr "Вилучити перевизначення ідентифікатора користувача." - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" -"Вилучити парну атрибут-значення. Цей параметр буде використано\n" -"останнім, після всіх встановлень і додавань." - -msgid "Delete an automember rule." -msgstr "Вилучити правило автоматичної участі." - -msgid "Delete an automount key." -msgstr "Вилучити ключ автоматичного монтування." - -msgid "Delete an automount location." -msgstr "Вилучити запис автоматичного монтування." - -msgid "Delete an automount map." -msgstr "Вилучити карту автоматичного монтування." - -msgid "Delete an existing HBAC service." -msgstr "Вилучити вже створену службу HBAC." - -msgid "Delete domain" -msgstr "Вилучити домен" - -msgid "Delete group." -msgstr "Вилучити групу." - -msgid "Delete mode" -msgstr "Режим вилучення" - -msgid "Delete service delegation target." -msgstr "Вилучити ціль делегування служб." - -msgid "Delete service delegation." -msgstr "Вилучити делегування служб." - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Вилучено ACI «%(value)s»" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Вилучено запис CA «%(value)s»" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Вилучено CA ACL «%(value)s»" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Вилучено правило прив’язування сертифікатів до профілів «%(value)s»" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Вилучено зону переспрямовування DNS «%(value)s»" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Вилучено сервер DNS «%(value)s»" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Вилучено зону DNS «%(value)s»" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Вилучено перевизначення ідентифікаторів групи «%(value)s»" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Вилучено правило HBAC «%(value)s»" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Вилучено службу HBAC «%(value)s»" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Вилучено групу служб HBAC «%(value)s»" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Вилучено перегляд ідентифікаторів «%(value)s»" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Вилучено перевизначення ідентифікатора «%(value)s»" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Вилучено діапазон ідентифікаторів «%(value)s»" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Вилучено запис місця IPA «%(value)s»" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Вилучено сервер IPA «%(value)s»" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Вилучено жетон OTP «%(value)s»" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Вилучити проксі-сервер RADIUS «%(value)s»" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Вилучено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Вилучено команду sudo «%(value)s»" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Вилучено групу команд sudo «%(value)s»" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Вилучено правило sudo «%(value)s»" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Вилучено перевизначення ідентифікатора користувача «%(value)s»" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Вилучено правило автоматичної участі «%(value)s»" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Вилучено ключ автоматичного монтування «%(value)s»" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Вилучено місце автоматичного монтування «%(value)s»" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Вилучено карту автоматичного монтування «%(value)s»" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Вилучено уповноваження «%(value)s»" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Вилучено групу «%(value)s»" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Вилучено вузол «%(value)s»" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Вилучено групу вузлів «%(value)s»" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Вилучено мережеву групу «%(value)s»" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Вилучено права доступу «%(value)s»" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Вилучено привілей «%(value)s»" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Вилучено профіль «%(value)s»" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Вилучено запис «%(value)s»" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Вилучено роль «%(value)s»" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Вилучено сегмент «%(value)s»" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Вилучено самообслуговування «%(value)s»" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Вилучено службу «%(value)s»" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Вилучено делегування служб «%(value)s»" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Вилучено ціль делегування служб «%(value)s»" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Вилучено запис користувача етапу «%(value)s»" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Вилучено суфікс топології «%(value)s»" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Вилучено запис довіри «%(value)s»" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Вилучено користувача «%(value)s»" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Вилучено сховище «%(value)s»" - -msgid "Deleted vault container" -msgstr "Вилучено контейнер сховищ" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "Вилучення керованих груп заборонено. Спочатку групу слід від’єднати." - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" -"Вилучення запису сервера призведе до його остаточного вилучення з топології. " -"Зауважте, що скасувати результати виконання цієї дії неможливо." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " -"систему без CA." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " -"систему без KRA." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" -"Вилучення цього запису сервера залишить вашу встановлену систему без DNS." - -msgid "Deny" -msgstr "Відмовити" - -msgid "Department Number" -msgstr "Номер відділу" - -msgid "Deprecated options" -msgstr "Застарілі параметри" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Застаріло; користуйтеся %s" - -msgid "Deprecated; use extratargetfilter" -msgstr "Вважається застарілою; скористайтеся extratargetfilter" - -msgid "Deprecated; use ipapermlocation" -msgstr "Вважається застарілою; скористайтеся ipapermlocation" - -msgid "Deprecated; use ipapermright" -msgstr "Вважається застарілою; скористайтеся ipapermright" - -msgid "Describe currently authenticated identity." -msgstr "Описати поточний розпізнаний профіль." - -msgid "Description" -msgstr "Опис" - -msgid "Description of the purpose of the CA" -msgstr "Опис призначення CA" - -msgid "Detach a managed group from a user." -msgstr "Від’єднати керовану групу від користувача." - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Від’єднати групу «%(value)s» від користувача «%(value)s»" - -msgid "Detect" -msgstr "Визначити" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" -"Визначити, чи налаштовано додаток сумісності схем (Schema Compatibility) на " -"обслуговування користувачів і груп довіреного домену" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "Визначити, чи було запущено ipa-adtrust-install для цієї системи" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "Визначити, чи було запущено ipa-adtrust-install з завданням sidgen" - -msgid "Dict of I18N messages" -msgstr "Словник перекладених повідомлень" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "Словник закодованих JSON команд IPA" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "Словник JSON-закодованих методів IPA" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Словник закодованих JSON об’єктів IPA" - -msgid "Dictionary check" -msgstr "Перевірка за словником" - -msgid "Dictionary mapping plugin names to bases" -msgstr "Словник для встановлення відповідності назв додатків основним" - -msgid "Dictionary mapping variable name to value" -msgstr "Відображення назви змінної на значення за словником" - -msgid "Digest" -msgstr "Контрольна сума" - -msgid "Digest Type" -msgstr "Тип контрольної суми" - -msgid "Digits" -msgstr "Цифри" - -msgid "Direct" -msgstr "Безпосередній" - -msgid "Direct Membership" -msgstr "Безпосередня участь" - -msgid "Direction Latitude" -msgstr "Півкуля широти" - -msgid "Direction Longitude" -msgstr "Півкуля довготи" - -msgid "Direction of replication between left and right replication node" -msgstr "Напрямок реплікації між лівим і правим вузлами реплікації" - -msgid "Disable" -msgstr "Вимкнути" - -msgid "Disable DNS Forward Zone." -msgstr "Вимкнути зону переспрямовування DNS." - -msgid "Disable DNS Zone." -msgstr "Вимкнути зону DNS." - -msgid "Disable a CA ACL." -msgstr "Вимкнути CA ACL." - -msgid "Disable a CA." -msgstr "Вимкнути службу сертифікації." - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Вимкнути правило прив’язування сертифікатів до профілів." - -msgid "Disable a Sudo Rule." -msgstr "Вимкнути правило sudo." - -msgid "Disable a user account." -msgstr "Вимкнути обліковий запис користувача." - -msgid "Disable an HBAC rule." -msgstr "Вимкнути правило HBAC." - -msgid "Disable an SELinux User Map rule." -msgstr "Вимкнути правило карти користувачів SELinux." - -msgid "Disable per-user override" -msgstr "Вимкнути перевизначення на рівні користувача" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Вимкнути ключ Kerberos і сертифікат SSL служби." - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "Вимкнути ключ Kerberos, сертифікат SSL і всі служби на вузлі." - -msgid "Disable token" -msgstr "Вимкнути жетон" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "Вимкнути використання ресурсів IPA доменом правила довіри" - -msgid "Disabled" -msgstr "Вимкнено" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Вимкнено службу сертифікації «%(value)s»" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Вимкнено CA ACL «%(value)s»" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Вимкнено правило прив’язування сертифікатів до профілів «%(value)s»" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Вимкнено зону переспрямовування DNS «%(value)s»" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Вимкнено зону DNS «%(value)s»" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Вимкнено правило HBAC «%(value)s»" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Вимкнено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Вимкнено правило «%s»" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Вимкнений домен «%(domain)s» не можна використовувати" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Вимкнено вузол «%(value)s»" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Вимкнено службу «%(value)s»" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Домен довіри «%(value)s» вимкнено" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Вимкнено обліковий запис користувача «%(value)s»" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "Заборонити групам вузлів створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "Заборонити групам вузлів отримувати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "Заборонити вузлам створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "Заборонити вузлам отримувати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" -"Заборонити групам користувачів створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Заборонити групам користувачів отримувати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "Заборонити користувачам створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "Заборонити користувачам отримувати таблицю ключів «${primary_key}»" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Заборонити користувачам, групам, вузлам і групам вузлів створювати таблицю " -"ключів цього вузла." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" -"Заборонити користувачам, групам, вузлам і групам вузлів створювати таблицю " -"ключів цієї служби." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"Заборонити користувачам, групам, вузлам і групам вузлів отримувати таблицю " -"ключів цього вузла." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Заборонити користувачам, групам, вузлам і групам вузлів отримувати таблицю " -"ключів цієї служби." - -msgid "Display Class of Service entry" -msgstr "Показати запис класу служби" - -msgid "Display DNS resource." -msgstr "Показати ресурс DNS." - -msgid "Display Sudo Command Group." -msgstr "Показати групу команд sudo." - -msgid "Display Sudo Command." -msgstr "Показати команду sudo." - -msgid "Display Sudo Rule." -msgstr "Показати правило sudo." - -msgid "Display a segment." -msgstr "Показати сегмент." - -msgid "Display a single ACI given an ACI name." -msgstr "Показати окремий запис ACI за вказаною назвою ACI." - -msgid "Display an automount key." -msgstr "Показати ключ автоматичного монтування." - -msgid "Display an automount location." -msgstr "Показати запис автоматичного монтування." - -msgid "Display an automount map." -msgstr "Показати карту автоматичного монтування." - -msgid "Display configuration of a DNS server." -msgstr "Показати налаштування сервера DNS." - -msgid "Display current entitlements." -msgstr "Показати поточні іменування." - -msgid "Display effective policy for a specific user" -msgstr "Показати поточні правила для певного користувача" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Вивести дані щодо правила прив’язування сертифікатів до профілів." - -msgid "Display information about a DNS forward zone." -msgstr "Показ даних щодо зони переспрямовування DNS." - -msgid "Display information about a DNS zone (SOA record)." -msgstr "Показати дані щодо зони DNS (запису SOA)." - -msgid "Display information about a RADIUS proxy server." -msgstr "Показати дані щодо проксі-сервера RADIUS." - -msgid "Display information about a class." -msgstr "Показати дані щодо класу." - -msgid "Display information about a command output." -msgstr "Показати інформацію щодо даних, які виводить команда." - -msgid "Display information about a command parameter." -msgstr "Показати інформацію щодо параметра команди." - -msgid "Display information about a command." -msgstr "Показати інформацію щодо команди." - -msgid "Display information about a delegation." -msgstr "Показати дані щодо уповноваження." - -msgid "Display information about a help topic." -msgstr "Показати дані щодо теми довідки." - -msgid "Display information about a host." -msgstr "Показати дані щодо вузла." - -msgid "Display information about a hostgroup." -msgstr "Показати дані щодо групи вузлів." - -msgid "Display information about a named group." -msgstr "Показати дані щодо іменованої групи." - -msgid "Display information about a named service delegation rule." -msgstr "Показати дані щодо іменованого правила делегування служб." - -msgid "Display information about a named service delegation target." -msgstr "Показати дані щодо іменованого призначення делегування служб." - -msgid "Display information about a netgroup." -msgstr "Показати дані щодо мережевої групи." - -msgid "Display information about a permission." -msgstr "Показати дані щодо прав доступу." - -msgid "Display information about a privilege." -msgstr "Показати дані щодо привілею." - -msgid "Display information about a range." -msgstr "Показати дані щодо діапазону." - -msgid "Display information about a role." -msgstr "Показати дані щодо ролі." - -msgid "Display information about a self-service permission." -msgstr "Показати дані щодо прав доступу автослужби." - -msgid "Display information about a stage user." -msgstr "Показати дані щодо користувача етапу." - -msgid "Display information about a trust." -msgstr "Показати дані щодо довіри." - -msgid "Display information about a user." -msgstr "Показати дані щодо користувача." - -msgid "Display information about a vault container." -msgstr "Показати дані щодо контейнера сховищ." - -msgid "Display information about a vault." -msgstr "Показати дані щодо сховища." - -msgid "Display information about an Group ID override." -msgstr "Показати дані щодо перевизначення ідентифікаторів групи." - -msgid "Display information about an HBAC service group." -msgstr "Показати дані щодо групи служб HBAC." - -msgid "Display information about an HBAC service." -msgstr "Показати дані щодо служби HBAC." - -msgid "Display information about an ID View." -msgstr "Показати дані щодо перегляду ідентифікаторів." - -msgid "Display information about an ID override." -msgstr "Показати дані щодо перевизначення ідентифікатора." - -msgid "Display information about an IPA location." -msgstr "Показати дані щодо місця IPA." - -msgid "Display information about an IPA service." -msgstr "Показати дані щодо служби IPA." - -msgid "Display information about an OTP token." -msgstr "Показати інформацію щодо жетона OTP." - -msgid "Display information about an User ID override." -msgstr "Показати дані щодо перевизначення ідентифікатора користувача." - -msgid "Display information about an automember rule." -msgstr "Показати дані щодо правила автоматичної участі." - -msgid "Display information about password policy." -msgstr "Показати дані щодо групи правил для паролів." - -msgid "Display information about the default (fallback) automember groups." -msgstr "Показати дані щодо типових (резервних) груп автоматичної участі." - -msgid "Display name" -msgstr "Екранне ім'я" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Показати права доступу цього запису (потребує --all). Докладніше про це " -"можна дізнатися зі сторінки довідника (man) ipa." - -msgid "Display the current Kerberos ticket policy." -msgstr "Показати поточні правила квитків Kerberos." - -msgid "Display the list of realm domains." -msgstr "Показати список доменів області." - -msgid "Display the properties of a CA ACL." -msgstr "Показати властивості CA ACL." - -msgid "Display the properties of a CA." -msgstr "Показати властивості CA." - -msgid "Display the properties of a Certificate Profile." -msgstr "Показати властивості профілю сертифікатів." - -msgid "Display the properties of a SELinux User Map rule." -msgstr "Показати властивості правила карти користувачів SELinux." - -msgid "Display the properties of an HBAC rule." -msgstr "Показати властивості правила HBAC." - -msgid "Display user record for current Kerberos principal" -msgstr "" -"Показати запис користувача для поточного реєстраційного запису Kerberos" - -msgid "Do not display QR code" -msgstr "Не показувати код QR" - -msgid "Do not update records only return expected records" -msgstr "Не оновлювати записи, лише повернути список очікуваних записів" - -msgid "Do you also want to perform DNS check?" -msgstr "Хочете також виконати перевірку DNS?" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "Хочете перевірити, чи є адреса нового основного сервера назв у DNS" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "Хочете вилучити дані прив’язки до сертифікатів ${data}?" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "Ви хочете вилучити псевдонім kerberos ${alias}?" - -msgid "Do you want to remove the certificate hold?" -msgstr "Хочете вилучити затримання сертифіката?" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "Хочете відкликати цей сертифікат? Виберіть причину зі спадного списку." - -msgid "Do you want to update system DNS records?" -msgstr "Хочете оновити записи DNS системи?" - -msgid "Documentation" -msgstr "Документація" - -msgid "Dogtag Authority ID" -msgstr "Ід. Dogtag центру" - -msgid "Domain" -msgstr "Домен" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "Домен «%(domain)s» не є кореневим доменом для лісу «%(forest)s»" - -msgid "Domain GUID" -msgstr "GUID домену" - -msgid "Domain Level" -msgstr "Рівень домену" - -msgid "Domain Level cannot be lowered." -msgstr "Не можна знижувати рівень домену." +"сервер IPA і віддалений домен не можуть використовувати спільно ту саму " +"назву NetBIOS: %s" #, python-brace-format msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." msgstr "" -"Рівень домену не може бути піднято до {0}, слід розв’язати наявні конфлікти " -"реплікації." - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" -"Не можна підняти рівень домену до {0}, оскільки на сервері {1} не " -"передбачено підтримки такого рівня." - -msgid "Domain NetBIOS name" -msgstr "Назва домену у NetBIOS" - -msgid "Domain SID" -msgstr "Домен SID" - -msgid "Domain SID of the trusted domain" -msgstr "SID довіреного домену" - -msgid "Domain Security Identifier" -msgstr "Ідентифікатор безпеки домену" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "Контролер домену Active Directory (необов’язковий)" - -msgid "Domain enabled" -msgstr "Домен увімкнено" - -msgid "Domain name" -msgstr "Назва домену" - -msgid "Domain resolution order" -msgstr "Порядок визначення доменів" - -msgid "Domain where the user entry will be searched" -msgstr "Домен, у якому слід шукати запис користувача" - -msgid "Don't create user private group" -msgstr "Не створювати закриту групу користувача" - -msgid "Don't wait for rebuilding membership" -msgstr "Не чекати на завершення перебудови записів участі" - -msgid "Download" -msgstr "Отримати" - -msgid "Download certificate as PEM formatted file." -msgstr "Отримати сертифікат у формі файла формату PEM." - -msgid "Drive to mount a home directory" -msgstr "Диск монтування домашнього каталогу" - -msgid "Dry run" -msgstr "Тестовий запуск" - -msgid "Duplicate keys skipped:" -msgstr "Пропущені дублікати ключів:" - -msgid "Duplicate maps skipped:" -msgstr "Пропущені дублікати карт:" - -msgid "Dynamic update" -msgstr "Динамічне оновлення" - -msgid "Edit" -msgstr "Змінити" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Змінити ${entity}" - -msgid "Effective attributes" -msgstr "Ефективні атрибути" - -msgid "Email address" -msgstr "Адреса ел. пошти" - -msgid "Employee Information" -msgstr "Відомості щодо працівника" - -msgid "Employee Number" -msgstr "Номер працівника" - -msgid "Employee Type" -msgstr "Тип працівника" - -msgid "Empty domain is not allowed" -msgstr "Не можна використовувати порожні домени" - -msgid "Enable" -msgstr "Увімкнути" - -msgid "Enable DNS Forward Zone." -msgstr "Увімкнути зону переспрямовування DNS." - -msgid "Enable DNS Zone." -msgstr "Увімкнути зону DNS." - -msgid "Enable a CA ACL." -msgstr "Увімкнути CA ACL." - -msgid "Enable a CA." -msgstr "Увімкнути службу сертифікації." - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "Увімкнути правило прив’язування сертифікатів до профілів." - -msgid "Enable a Sudo Rule." -msgstr "Увімкнути правило sudo." - -msgid "Enable a user account." -msgstr "Увімкнути обліковий запис користувача." - -msgid "Enable an HBAC rule." -msgstr "Увімкнути правило HBAC." - -msgid "Enable an SELinux User Map rule." -msgstr "Увімкнути правило карти користувачів SELinux." - -msgid "Enable migration mode" -msgstr "Увімкнути режим міграції" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "Увімкнути або вимкнути анонімний PKINIT." - -msgid "Enable support for trusted domains for old clients" -msgstr "Увімкнути підтримку довірених доменів для застарілих клієнтів" - -msgid "Enable token" -msgstr "Увімкнути жетон" - -msgid "Enabled" -msgstr "Увімкнено" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Увімкнено службу сертифікації «%(value)s»" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Увімкнено CA ACL «%(value)s»" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Увімкнено правило прив’язування сертифікатів до профілів «%(value)s»" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Увімкнено зону переспрямовування DNS «%(value)s»" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Увімкнено зону DNS «%(value)s»" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Увімкнено правило HBAC «%(value)s»" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Увімкнено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Увімкнено правило sudo «%s»" - -msgid "Enabled server roles" -msgstr "Увімкнені ролі сервера" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Увімкнено домен довіри «%(value)s»" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Увімкнено обліковий запис користувача «%(value)s»" - -msgid "Encryption types to request" -msgstr "Типи шифрування, запит щодо яких слід надсилати" - -msgid "Enctype comparison failed!\n" -msgstr "Спроба порівняння значень типу шифрування зазнала невдачі!\n" - -msgid "Enrolled" -msgstr "Зареєстровано" - -msgid "Enrollment" -msgstr "Реєстрація" - -msgid "Enrollment UUID" -msgstr "UUID надання ролей" - -msgid "Enrollment UUID (not implemented)" -msgstr "UUID надання ролі (не реалізовано)" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Помилка реєстрування. %s\n" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Введіть %(label)s ще раз для перевірки: " - -msgid "Enter LDAP password" -msgstr "Вкажіть пароль до LDAP" - -msgid "Enter trusted group name." -msgstr "Введіть назву довіреної групи." - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" -"Введіть назву запису довіреної групи або групи IPA. Зауваження: у списку " -"результатів пошуку не буде записів груп із довірених доменів." - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" -"Введіть назву облікового запису довіреного користувача або користувача IPA. " -"Зауваження: у списку результатів пошуку не буде записів користувачів із " -"довірених доменів." - -msgid "Enter trusted user login." -msgstr "Введіть назву запису довіреного користувача." - -msgid "Entry" -msgstr "Запис" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Запису %s не існує" - -#, python-format -msgid "Entry %s not found" -msgstr "Запису %s не знайдено" - -msgid "Entry RDN is not 'uid'" -msgstr "RDN запису не належить до «uid»" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "У запису немає атрибута «%(attribute)s»" - -msgid "Enumerate all the hosts the view applies to." -msgstr "Пронумерувати усі вузли, до яких застосовний перегляд." - -msgid "Error" -msgstr "Помилка" - -msgid "Error changing account status" -msgstr "Помилка під час спроби зміни стану облікового запису" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Помилка під час отримання типової області дії Kerberos: %s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Помилка під час отримання початкових реєстраційних даних: %s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Помилка під час обробки «%1$s»: %2$s.\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Помилка при визначенні адрес таблиці ключів: %s.\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Помилка під час спроби збереження реєстраційних даних у кеші: %s.\n" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "Встановлено двобічну довіру. Типово, довіра є лише однобічною вхідною." - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Встановити зовнішню довіру до домену у іншому лісі. Довіра не переходить за " -"межі домену." - -msgid "Establish using" -msgstr "Встановити за допомогою" - -msgid "Established and verified" -msgstr "Встановлено і перевірено" - -msgid "Exceeded number of tries to forward a request." -msgstr "Перевищено кількість спроб переспрямовування запиту." - -msgid "Exchanger" -msgstr "Обмінник" - -msgid "Exclude from" -msgstr "Виключити з" - -msgid "Excluded attributes" -msgstr "Атрибути виключення" - -msgid "Exclusive" -msgstr "Виключна" - -msgid "Exclusive Regex" -msgstr "Формальний вираз виключення" - -msgid "Expand All" -msgstr "Розгорнути всі" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "Не вдалося розгорнути буфер у jsonrpc_handle_response" - -msgid "Expires On" -msgstr "Строк дії" - -msgid "Export plugin meta-data for the webUI." -msgstr "Експортувати метадані додатка для webUI." - -msgid "Expression" -msgstr "Вираз" - -msgid "External" -msgstr "Зовнішній" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" -"Зовнішня група, від імені якої можна віддавати команди (лише sudorule-find)" - -msgid "External Groups of RunAs Users" -msgstr "Зовнішні групи користувачів для запуску від імені" - -msgid "External Groups of users that the command can run as" -msgstr "Зовнішні групи користувачів, від імені яких можна виконувати команду" - -msgid "External User" -msgstr "Зовнішній користувач" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" -"Зовнішній користувач, від імені якого можна віддавати команди (лише sudorule-" -"find)" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" -"Зовнішній користувач, до якого застосовуватиметься правило (лише sudorule-" -"find)" - -msgid "External host" -msgstr "Зовнішній вузол" - -msgid "External member" -msgstr "Зовнішній учасник" - -msgid "External trust" -msgstr "Зовнішня довіра" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Додаткові хеші для створення у додатку паролів" - -msgid "Extra target filter" -msgstr "Додатковий фільтр призначення" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "Не вдалося видобути дані з відповіді JSON-RPC: %s\n" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" -"Не вдалося видобути повідомлення про помилку з відповіді JSON-RPC: %s\n" - -msgid "Failed CAs" -msgstr "Помилкові CA" - -msgid "Failed RunAs" -msgstr "Помилка запуску від імені" - -msgid "Failed RunAsGroup" -msgstr "Помилка запуску від імені групи" - -msgid "Failed allowed to create keytab" -msgstr "Не вдалося дозволити створювати таблицю ключів" - -msgid "Failed allowed to retrieve keytab" -msgstr "Не вдалося дозволити отримувати таблицю ключів" - -msgid "Failed hosts/hostgroups" -msgstr "Помилка hosts/hostgroups" - -msgid "Failed logins" -msgstr "Кількість невдалих спроб увійти" - -msgid "Failed managedby" -msgstr "Помилка managedby" - -msgid "Failed member manager" -msgstr "Помилка керівника учасниками" - -msgid "Failed members" -msgstr "Помилка members" - -msgid "Failed owners" -msgstr "Записи власників із помилками" - -msgid "Failed profiles" -msgstr "Профілі із помилками" - -msgid "Failed service/service groups" -msgstr "Помилки служб/груп служб" - -msgid "Failed source hosts/hostgroups" -msgstr "Помилка hosts/hostgroups джерела" - -msgid "Failed targets" -msgstr "Помилкові цілі" - -msgid "Failed to add" -msgstr "Не вдалося додати" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Не вдалося додати ключ до таблиці ключів\n" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Не вдалося додати користувача до типової групи. Додати користувача вручну " -"можна за допомогою команди «ipa group-add-member»." - -msgid "Failed to authenticate to CA REST API" -msgstr "" -"Не вдалося пройти розпізнавання за допомогою програмного інтерфейсу CA REST" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "Не вдалося прив’язати до сервера!\n" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Не вдалося вилучити %(principal)s memberPrincipal із запису s4u2proxy " -"%(dn)s: %(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Не вдалося вилучити ключі Custodia для %(master)s: %(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Не вдалося вилучити записи назви вузла DNA для %(master)s: %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Не вдалося вилучити записи DNS %(hostname)s: %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Не вдалося вилучити реєстраційні запис або ключі сервера: %(err)s" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Не вдалося закрити таблицю ключів\n" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" -"Не вдалося встановити з’єднання із sssd за допомогою SystemBus. Докладніший " -"опис — у файлі error_log" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Не вдалося створити керування!\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Не вдалося створити вихідні дані для ключа\n" - -msgid "Failed to create key!\n" -msgstr "Не вдалося створити ключ!\n" - -msgid "Failed to create random key!\n" -msgstr "Не вдалося створити випадковий ключ!\n" - -msgid "Failed to decode control reply!\n" -msgstr "Не вдалося декодувати контрольну відповідь!\n" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Не вдалося знайти користувачів за допомогою SystemBus. Докладніший опис — у " -"файлі error_log" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "Не вдалося отримати таблицю ключів\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Не вдалося отримати таблицю ключів!\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "Не вдалося отримати результат: %s\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Не вдалося відкрити таблицю ключів\n" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "Не вдалося відкрити файл налаштувань %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Не вдалося відкрити таблицю ключів\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Не вдалося відкрити таблицю ключів «%1$s»: %2$s\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Не вдалося обробити файл налаштувань %s\n" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Не вдалося обробити розширений результат: %s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "Не вдалося обробити результат: %s\n" - -msgid "Failed to remove" -msgstr "Спроба вилучення зазнала невдачі" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" -"Не вдалося вилучити запис сервера %(master)s зі списку серверів: %(err)s" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Не вдалося визначити таблицю ключів за символічним посиланням.\n" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "Не вдалося отримати жодного ключа" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "Не вдалося отримати дані щодо типу шифрування %1$s (№%2$d)\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Не вдалося отримати дані щодо типу шифрування №%d\n" - -msgid "Failed users/groups" -msgstr "Помилка users/groups" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" -"Помилка під час декодування запиту на підписування сертифіката (CSR): %s" - -msgid "Failure reset interval" -msgstr "Проміжок скидання помилок" - -msgid "Fallback primary group" -msgstr "Резервна основна група" - -msgid "Fallback to AD DC LDAP" -msgstr "Повернення до резервного DC LDAP AD" - -msgid "False" -msgstr "Ні" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" -"False, якщо перенесення зазнає невдачі через увімкнення додатка сумісності." - -msgid "False if migration mode was disabled." -msgstr "False, якщо режим міграції було вимкнено." - -msgid "Fax Number" -msgstr "Номер факсу" - -msgid "Fetch domains" -msgstr "Отримати домени" - -msgid "Fetching DNS zones." -msgstr "Отримання даних щодо зон DNS." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"Спроба отримати список доменів із довіреного лісу зазнала невдачі. Подробиці " -"можна знайти у error_log" - -#, python-format -msgid "File %(file)s not found" -msgstr "Файла %(file)s не знайдено" - -msgid "File containing data to archive" -msgstr "Файл, що містить дані для архівування" - -msgid "File containing profile configuration" -msgstr "Файл, який містить налаштування профілів" - -msgid "File containing the new vault password" -msgstr "Файл, який містить новий пароль до сховища" - -msgid "File containing the new vault public key" -msgstr "Файл, який містить новий відкритий ключ сховища" - -msgid "File containing the old vault password" -msgstr "Файл, який містить старий пароль до сховища" - -msgid "File containing the old vault private key" -msgstr "Файл, який містить старий закритий ключ сховища" - -msgid "File containing the vault password" -msgstr "Файл, який містить пароль до сховища" - -msgid "File containing the vault private key" -msgstr "Файл, який містить закритий ключ сховища" - -msgid "File containing the vault public key" -msgstr "Файл, який містить відкритий ключ сховища" - -msgid "File to load the certificate from" -msgstr "Файл, з якого слід завантажити сертифікат" - -msgid "File to load the certificate from." -msgstr "Файл, з якого слід завантажити сертифікат." - -msgid "File to store retrieved data" -msgstr "Файл для зберігання отриманих даних" - -msgid "File to store the certificate in." -msgstr "Файл, у якому зберігатимуться дані сертифіката." - -msgid "Filename is empty" -msgstr "Порожня назва файла" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" -"Назва файла профілю з необробленими даними. Підтримки формату XML не " -"передбачено." - -msgid "Filter" -msgstr "Фільтр" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "Доступний фільтр ${other_entity}" - -msgid "Find" -msgstr "Знайти" - -msgid "Find a server role on a server(s)" -msgstr "Знайти роль сервера на серверах" - -msgid "Fingerprint" -msgstr "Відбиток" - -msgid "Fingerprint (SHA1)" -msgstr "Відбиток (SHA1)" - -msgid "Fingerprint (SHA256)" -msgstr "Відбиток (SHA256)" - -msgid "Fingerprint Type" -msgstr "Тип відбитка" - -msgid "Fingerprint of schema cached by client" -msgstr "Відбиток схеми, кешований клієнтом" - -msgid "Fingerprints" -msgstr "Відбитки" - -msgid "First" -msgstr "Перший" - -msgid "First Code" -msgstr "Перший код" - -msgid "First OTP" -msgstr "Перший OTP" - -msgid "First Posix ID of the range" -msgstr "Перший ідентифікатор POSIX діапазону" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" -"Перший ідентифікатор POSIX діапазону, зарезервованого для довіреного домену" - -msgid "First RID of the corresponding RID range" -msgstr "Перший RID відповідного діапазону RID" - -msgid "First RID of the secondary RID range" -msgstr "Перший RID вторинного діапазону RID" - -msgid "First date/time the token can be used" -msgstr "Час початку використання ключа (дата і час)" - -msgid "First name" -msgstr "Ім'я" - -msgid "Flags" -msgstr "Прапорці" - -msgid "Following segments were not deleted:" -msgstr "Вказані нижче сегменти не було вилучено:" - -msgid "Force" -msgstr "Примусово" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" -"Примусове створення зони DNS, навіть якщо вона перекриватиметься із наявною." - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" -"Примусово створити зону DNS, навіть якщо не вдається визначити адресу " -"сервера назв." - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" -"Примусове створення зони DNS, навіть якщо адресу сервера назв не вдається " -"визначити. (застаріле)" - -msgid "Force Update" -msgstr "Примусове оновлення" - -msgid "Force adding domain even if not in DNS" -msgstr "Примусове додавання домену, навіть якщо назви немає у DNS" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" -"Примусово змінити сервер назв, навіть якщо запису сервера назв немає у DNS" - -msgid "Force server removal" -msgstr "Примусове вилучення сервера" - -msgid "Force server removal even if it does not exist" -msgstr "Примусове вилучення сервера, навіть якщо його не існує" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" -"Долучити вузол у примусовому режимі. Повторне долучення виконуватиметься, " -"навіть якщо вузол вже долучено." - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "Примусово вилучаємо %(hostname)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"У лісу «%(forest)s» наявні відносини довіри з лісами %(domains)s, що не дає " -"змоги встановити довіру до «%(conflict)s»" - -msgid "Format error" -msgstr "Помилка форматування" - -msgid "Forward first" -msgstr "Спочатку переспрямувати" - -msgid "Forward only" -msgstr "Лише переспрямовувати" - -msgid "Forward policy" -msgstr "Правила переспрямовування" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"Для нього у DNS IPA визначено правила переспрямовування. Можливо, " -"переспрямовувач вказує не помилковий вузол?" - -msgid "Forward to server instead of running locally" -msgstr "Переспрямувати на сервер замість локального виконання" - -msgid "Forward zones only" -msgstr "Лише прямі зони" - -msgid "Forwarders" -msgstr "Переспрямовувачі" - -msgid "Forwarding disabled" -msgstr "Переспрямовування вимкнено" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"Правила переспрямовування конфліктують із деякими автоматично порожніми " -"зонами. Запити для зон, вказаних на основі RFC 6303, ігноруватимуть " -"переспрямовування і завжди призводитимуть до відповідей NXDOMAIN. Щоб " -"перевизначити цю поведінку, скористайтеся правилами переспрямовування «only»." - -#, python-format -msgid "Found '%(value)s'" -msgstr "Знайдено «%(value)s»" - -msgid "Full name" -msgstr "Повне ім’я" - -msgid "Fully Qualified Host Name" -msgstr "Повна назва вузла" - -msgid "Function to get details" -msgstr "Функція, подробиці щодо якої слід отримати" - -msgid "GECOS" -msgstr "GECOS" - -msgid "GECOS field" -msgstr "поле GECOS" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (за допомогою цього параметра можна встановити значення вручну)" - -msgid "GSSAPI|EXTERNAL" -msgstr "GSSAPI|EXTERNAL" - -msgid "General" -msgstr "Загальне" - -msgid "Generate OTP" -msgstr "Створити OTP" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" -"Створити випадковий пароль, який буде використано для загальної реєстрації" - -msgid "Generate a random user password" -msgstr "Створити випадковий пароль для користувача" - -msgid "Generate automount files for a specific location." -msgstr "Створити файли automount для певної адреси." - -msgid "Generated OTP" -msgstr "Створений OTP" - -msgid "Get" -msgstr "Отримати" - -msgid "Get Certificate" -msgstr "Отримати сертифікат" - -msgid "Global DNS configuration is empty" -msgstr "Загальні налаштування DNS є порожніми" - -msgid "Global Trust Configuration" -msgstr "Загальні довірені налаштування" - -msgid "Global forwarders" -msgstr "Загальні переспрямовувачі" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Переспрямовувачі загального рівня. Для кожного переспрямовувача можна " -"вказати нетиповий порт за допомогою стандартного формату: «IP_АДРЕСА port " -"ПОРТ»" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" -"Загальні правил переспрямовування. Щоб вимкнути будь-які переспрямовувачі на " -"загальному рівні, встановіть значення «none»." - -msgid "Granted rights" -msgstr "Надані права" - -msgid "Granted to Privilege" -msgstr "Надані привілеї" - -msgid "Granting privilege to roles" -msgstr "Надання привілеїв ролям" - -msgid "Group" -msgstr "Група" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Групи з назвою «%s» не існує" - -msgid "Group ID Number" -msgstr "Ід. номер групи" - -msgid "Group ID override" -msgstr "Перевизначення ідентифікатора групи" - -msgid "Group ID overrides" -msgstr "Перевизначення ідентифікатора групи" - -msgid "Group Options" -msgstr "Параметри групи" - -msgid "Group Settings" -msgstr "Параметри групи" - -msgid "Group Type" -msgstr "Тип групи" - -msgid "Group categories" -msgstr "Категорії груп" - -msgid "Group container" -msgstr "Контейнер груп" - -msgid "Group description" -msgstr "Опис групи" - -msgid "Group name" -msgstr "Назва групи" - -msgid "Group object class" -msgstr "Клас об’єктів групи" - -msgid "Group object overrides" -msgstr "Пріоритет об’єкта групи" - -msgid "Group search fields" -msgstr "Поля пошуку груп" - -msgid "Group to apply ACI to" -msgstr "Група, до якої слід застосувати ACI" - -msgid "Group to override" -msgstr "Група для перевизначення" - -msgid "Grouping Type" -msgstr "Тип групування" - -msgid "Grouping to which the rule applies" -msgstr "Групування, якого стосується правило" - -msgid "Groups" -msgstr "Групи" - -msgid "Groups allowed to create keytab" -msgstr "Групи, яким дозволено створення таблиці ключів" - -msgid "Groups allowed to retrieve keytab" -msgstr "Групи, яким дозволено отримувати таблицю ключів" - -msgid "Groups of RunAs Users" -msgstr "Групи користувачів запуску від імені" - -msgid "HBAC Rule" -msgstr "Правило HBAC" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "Правило HBAC, яке визначає користувачів, групи і групи вузлів" - -msgid "HBAC Rules" -msgstr "Правила HBAC" - -msgid "HBAC Service" -msgstr "Служба HBAC" - -msgid "HBAC Service Group" -msgstr "Група служб HBAC" - -msgid "HBAC Service Groups" -msgstr "Група служб HBAC" - -msgid "HBAC Services" -msgstr "Служби HBAC" - -msgid "HBAC Test" -msgstr "Тест HBAC" - -msgid "HBAC rule" -msgstr "Правило HBAC" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Не знайдено правила HBAC %(rule)s" - -msgid "HBAC rule and local members cannot both be set" -msgstr "Не можна одночасно вказувати правило HBAC і локальних учасників" - -msgid "HBAC rules" -msgstr "правила HBAC" - -msgid "HBAC service" -msgstr "Служба HBAC" - -msgid "HBAC service description" -msgstr "Опис служби HBAC" - -msgid "HBAC service group" -msgstr "група служб HBAC" - -msgid "HBAC service group description" -msgstr "Опис групи служб HBAC" - -msgid "HBAC service groups" -msgstr "Група служб HBAC" - -msgid "HBAC service groups to add" -msgstr "група служб HBAC для додавання" - -msgid "HBAC service groups to remove" -msgstr "групи служб HBAC для вилучення" - -msgid "HBAC services" -msgstr "Служби HBAC" - -msgid "HBAC services to add" -msgstr "служби HBAC для додавання" - -msgid "HBAC services to remove" -msgstr "служби HBAC для вилучення" - -msgid "HIP record" -msgstr "Запис HIP" - -msgid "HOTP Authentication Window" -msgstr "Вікно розпізнавання HOTP" - -msgid "HOTP Synchronization Window" -msgstr "Вікно синхронізації HOTP" - -msgid "HOTP authentication skip-ahead" -msgstr "Випереджальне пропускання розпізнавання HOTP" - -msgid "HOTP synchronization skip-ahead" -msgstr "Випереджальне пропускання синхронізації HOTP" - -msgid "HTTP Error" -msgstr "Помилка HTTP" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "Захищений пароль (за допомогою SPAKE або FAST)" - -msgid "Hardened max life" -msgstr "Макс. строк дії Hardened" - -msgid "Hardened max renew" -msgstr "Макс. вік поновлення Hardened" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка Hardened (у " -"секундах)" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка Hardened (у секундах)" - -msgid "Hardware MAC address(es) on this host" -msgstr "Апаратні MAC-адреси цього вузла" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Апаратна платформа вузла (наприклад, «Lenovo T61»)" - -msgid "Hello world" -msgstr "Привіт, світе" - -msgid "Help topic" -msgstr "Тема довідки" - -msgid "Hidden IPA CA servers" -msgstr "Приховані сервери CA IPA" - -msgid "Hidden IPA DNS servers" -msgstr "Приховані сервери DNS IPA" - -msgid "Hidden IPA KRA servers" -msgstr "Приховані сервери KRA IPA" - -msgid "Hidden IPA masters" -msgstr "Приховані основні сервери IPA" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Приховані сервери IPA, які налаштовано як служби сертифікації" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "Приховані сервери IPA, які налаштовано як сервери назв доменів" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "Приховані сервери IPA, які налаштовано як агенти відновлення ключів" - -msgid "Hide" -msgstr "Приховати" - -msgid "Hide details" -msgstr "Сховати подробиці" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" -"Приховати дані щодо того, які правила є відповідними, які не є відповідними " -"і які є некоректними" - -msgid "History size" -msgstr "Розмір журналу" - -msgid "Home directory" -msgstr "Домашній каталог" - -msgid "Home directory base" -msgstr "Адреса домашніх каталогів" - -msgid "Horizontal Precision" -msgstr "Точність за горизонталлю" - -msgid "Host" -msgstr "Вузол" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Вузла «%(host)s» не знайдено" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "На вузлі «%(hostname)s» немає відповідного запису DNS A/AAAA" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Вузол «%(hostname)s» не є активним KDC" - -msgid "Host Certificate" -msgstr "Сертифікат вузла" - -msgid "Host Group" -msgstr "Група вузлів" - -msgid "Host Group Settings" -msgstr "Параметри групи вузлів" - -msgid "Host Groups" -msgstr "Групи вузлів" - -msgid "Host Groups allowed to create keytab" -msgstr "Групи вузлів, яким дозволено створення таблиці ключів" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Групи вузлів, яким дозволено отримувати таблицю ключів" - -msgid "Host Masks" -msgstr "Маски вузлів" - -msgid "Host Name" -msgstr "Назва вузла" - -msgid "Host Settings" -msgstr "Параметри вузла" - -msgid "Host category" -msgstr "Категорія вузлів" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Категорія вузлів (семантика розташування цього атрибуту призначена для " -"локальної обробки)" - -msgid "Host category the ACL applies to" -msgstr "Категорія вузлів, до якої застосовується ACL" - -msgid "Host category the rule applies to" -msgstr "Категорія вузлів, до якої застосовується правило" - -msgid "Host group rule" -msgstr "Правило групи вузлів" - -msgid "Host group rules" -msgstr "Правила груп вузлів" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Апаратна платформа вузла (наприклад, «Lenovo T61»)" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Вузол вже приєднано.\n" - -msgid "Host is not supported" -msgstr "Підтримки вузла не передбачено" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Адреса розташування вузла (наприклад, «Київ, Україна»)" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Розташування вузла (наприклад, «Lab 2»)" - -msgid "Host name" -msgstr "Назва вузла" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Операційна система вузла і її версія (наприклад, «Fedora 9\")" - -msgid "Host unprovisioned" -msgstr "Вузол не передбачено" - -msgid "Host-Based Access Control" -msgstr "Керування доступом на основі вузлів" - -msgid "Host-based access control commands" -msgstr "Команди керування доступом на основі вузлів" - -msgid "Host-group" -msgstr "Група вузлів" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" -"Групи вузлів, до чиїх вузлів буде застосовано перегляд ідентифікаторів. Будь " -"ласка, зауважте, що перегляд не застосовується автоматично до жодних вузлів, " -"доданих до групи вузлів після виконання команди idview-apply." - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" -"Групи вузлів, для вузлів яких знято обробку переглядами ідентифікаторів. " -"Зауважте, що після запуску команди idview-unapply перегляд з будь-якого " -"вузла, доданого до групи вузлів, не зніматиметься автоматично." - -msgid "Hostname" -msgstr "Назва вузла" - -msgid "Hostname (FQDN)" -msgstr "Назва вузла (FQDN)" - -msgid "Hostname of this server" -msgstr "Назва вузла цього сервера" - -msgid "Hosts" -msgstr "Вузли" - -msgid "Hosts allowed to create keytab" -msgstr "Вузли, яким дозволено створення таблиці ключів" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Вузли, яким дозволено отримувати таблицю ключів" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" -"Вузли або групи вузлів, з яких не можна зняти перегляд ідентифікаторів." - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" -"Вузли або групи вузлів, до яких не можна застосувати цей перегляд " -"ідентифікаторів." - -msgid "Hosts that ID View was cleared from." -msgstr "Вузли, з яких знято перегляд ідентифікаторів." - -msgid "Hosts that this ID View was applied to." -msgstr "Вузли, до яких було застосовано цей перегляд ідентифікаторів." - -msgid "Hosts the view applies to" -msgstr "Вузли, до яких застосовний перегляд" - -msgid "Hosts to apply the ID View to" -msgstr "Вузли, до яких слід застосувати перегляд ідентифікаторів" - -msgid "Hosts to clear (any) ID View from." -msgstr "Вузли, з яких слід зняти (будь-який) перегляд ідентифікаторів." - -msgid "How long should negative responses be cached" -msgstr "Тривалість кешування відмов" - -msgid "ID Range" -msgstr "Діапазон ідентифікаторів" - -msgid "ID Ranges" -msgstr "Діапазони ідентифікаторів" - -msgid "ID View" -msgstr "Перегляд ідентифікаторів" - -msgid "ID View Name" -msgstr "Назва перегляду ідентифікаторів" - -msgid "ID View already applied" -msgstr "Перегляд ідентифікаторів уже застосовано" - -#, python-format -msgid "ID View applied to %i host." -msgstr "Перегляд ідентифікаторів застосовано до %i вузла." - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "Перегляд ідентифікаторів застосовано до %i вузлів." - -msgid "ID View cannot be applied to IPA master" -msgstr "" -"Перегляд ідентифікаторів не може бути застосовано до основного сервера IPA" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "Перегляд ідентифікаторів знято з %i вузла." - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "Перегляд ідентифікаторів знято з %i вузлів." - -msgid "ID Views" -msgstr "Перегляди ідентифікаторів" - -msgid "ID override" -msgstr "Перевизначення ідентифікатора" - -msgid "ID overrides cannot be renamed" -msgstr "Перевизначення ідентифікаторів не можна перейменовувати" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"Діапазон ідентифікаторів для довіреного домену вже існує, але належить до " -"іншого типу. Будь ласка, вилучіть попередній діапазон вручну або не " -"визначайте тип у примусовому порядку за допомогою параметра --range-type." - -msgid "ID range type, one of allowed values" -msgstr "Тип діапазону ідентифікаторів, одне з дозволених значень" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" -"Тип діапазону ідентифікаторів. Можливі варіанти: ipa-ad-trust-posix, ipa-ad-" -"trust, ipa-local" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Вже існує діапазон ідентифікаторів з тією самою назвою але іншим доменом " -"SID. Діапазон ідентифікаторів для нового довіреного домену має бути створено " -"вручну." - -msgid "IP Address" -msgstr "IP-адреса" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "IP-адресу %(ip)s вже призначено у домені %(domain)s." - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "IP-адреса у subjectAltName (%s) не містить запису PTR" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "IP-адреса у subjectAltName (%s) є недоступною з назв DNS" - -msgid "IP network to create reverse zone name from" -msgstr "Мережа IP для створення зворотних назв зони" - -msgid "IPA AD trust agents" -msgstr "Агенти довіри AD IPA" - -msgid "IPA AD trust controllers" -msgstr "Контролери довіри AD IPA" - -msgid "IPA CA cannot be deleted" -msgstr "CA IPA не може бути вилучено" - -msgid "IPA CA cannot be disabled" -msgstr "Службу сертифікації IPA не можна вимикати" - -msgid "IPA CA certificate" -msgstr "Сертифікат CA IPA" - -msgid "IPA CA renewal master" -msgstr "Основних вузол відновлення CA IPA" - -msgid "IPA CA servers" -msgstr "Сервери CA IPA" - -msgid "IPA DNS Server is not installed" -msgstr "Сервер DNS IPA не встановлено" - -msgid "IPA DNS records" -msgstr "Записи DNS IPA" - -msgid "IPA DNS servers" -msgstr "Сервери DNS IPA" - -msgid "IPA DNS version" -msgstr "Версія DNS IPA" - -msgid "IPA DNSSec key master" -msgstr "Основний сервер ключів DNSSec IPA" - -msgid "IPA Error" -msgstr "Помилка IPA" - -msgid "IPA KRA servers" -msgstr "Сервери KRA IPA" - -msgid "IPA Location" -msgstr "Місце IPA" - -msgid "IPA Location description" -msgstr "Опис місця IPA" - -msgid "IPA Locations" -msgstr "Місця IPA" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"Якщо вказано SID довіреного домену, типом діапазону IPA має бути ipa-ad-" -"trust або ipa-ad-trust-posix" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"Якщо не вказано SID довіреного домену, типом діапазону IPA не може бути ipa-" -"ad-trust або ipa-ad-trust-posix." - -msgid "IPA Server" -msgstr "Сервер IPA" - -msgid "IPA Server Role" -msgstr "Роль сервера IPA" - -msgid "IPA Server Roles" -msgstr "Ролі сервера IPA" - -msgid "IPA Server to use" -msgstr "Сервер IPA, який слід використовувати" - -msgid "IPA Servers" -msgstr "Сервери IPA" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA не керує зоною %(zone)s. Будь ласка, додайте запис на вашому сервері DNS " -"вручну" - -msgid "IPA location name" -msgstr "Назва місця IPA" - -msgid "IPA location records" -msgstr "Записи місць IPA" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" -"IPA керує DNS. Будь ласка, переконайтеся, що поточні налаштування DNS " -"уможливлюють визначення адрес службових записів домену «{domain}». Приклади " -"налаштовування DNS за допомогою командного інтерфейсу або вебінтерфейсу " -"наведено у документації. " - -msgid "IPA master capable of PKINIT" -msgstr "Основний IPA з можливістю PKINIT" +"Відносини довіри із {ipa_domain} вже встановлено із непідтримуваним типом " +"{trust_type}. Будь ласка, вилучте запис цих відносин вручну на боці AD DC." #, python-format msgid "" @@ -23384,1849 +31988,37 @@ msgstr "" "перевірте, чи може DNS AD визначати за записами SRV %(records)s коректний " "сервер IPA." -msgid "IPA master which can process PKINIT requests" -msgstr "Основний IPA, який може обробляти запити PKINIT" - -msgid "IPA masters" -msgstr "Основні вузли IPA" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "namingContext IPA не знайдено\n" - -msgid "IPA object" -msgstr "Об’єкт IPA" - -msgid "IPA role name" -msgstr "Назва ролі IPA" - -msgid "IPA server configured as DNSSec key master" -msgstr "Сервер IPA налаштований як основний сервер ключів DNSSec" - -msgid "IPA server domain cannot be deleted" -msgstr "Домен сервера IPA не можна вилучати" - -msgid "IPA server domain cannot be omitted" -msgstr "Домен сервера IPA не можна пропускати" - -msgid "IPA server hostname" -msgstr "Назва вузла сервера IPA" - -msgid "IPA server role name" -msgstr "Назва ролі сервера IPA" - -msgid "IPA servers configured as AD trust agents" -msgstr "Сервери IPA, які налаштовано як агенти довіри AD" - -msgid "IPA servers configured as AD trust controllers" -msgstr "Сервери IPA, які налаштовано як контролери довіри AD" - -msgid "IPA servers configured as certificate authority" -msgstr "Сервери IPA, які налаштовано як центри сертифікації" - -msgid "IPA servers configured as domain name server" -msgstr "Сервери IPA, які налаштовано як сервери назв доменів (DNS)" - -msgid "IPA servers configured as key recovery agent" -msgstr "Сервери IPA, які налаштовано як агенти відновлення ключів" - -msgid "IPA servers configured as key recovery agents" -msgstr "" -"Сервери IPA, налаштовані як агенти відновлення ключів (key recovery agents)" - -msgid "IPA trust" -msgstr "Довіра IPA" - -msgid "IPA unique ID" -msgstr "Унікальний ід. IPA" - -msgid "IPSECKEY record" -msgstr "Запис IPSECKEY" - -msgid "Identity" -msgstr "Профіль" - -msgid "Identity Settings" -msgstr "Параметри профілю" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "Якщо не вказано CA, буде дозволено запити до типового CA." - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"Якщо проблему не вдасться усунути, зверніться до адміністратора системи." - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" -"Ігнорувати перевірку на те, чи є сервер, який вилучають, останнім сервером " -"CA або DNS" - -msgid "Ignore compat plugin" -msgstr "Ігнорувати додаток compat" - -msgid "Ignore group attribute" -msgstr "Ігнорувати атрибут групи" - -msgid "Ignore group object class" -msgstr "Ігнорувати клас об’єктів групи" - -msgid "Ignore topology connectivity problems after removal" -msgstr "Ігнорувати проблеми із з’єднуваністю топології після вилучення" - -msgid "Ignore topology errors" -msgstr "Ігнорувати помилки топології" - -msgid "Ignore user attribute" -msgstr "Ігнорувати атрибут користувача" - -msgid "Ignore user object class" -msgstr "Ігнорувати клас об’єктів користувача" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "Проігноровано %(src)s до %(dst)s" - -msgid "Ignored keys:" -msgstr "Проігноровані ключі:" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "Ігноруємо ці попередження і продовжуємо процедуру вилучення" - -msgid "Ignoring topology connectivity errors." -msgstr "Ігноруємо помилки із з’єднуваністю топології." - -msgid "Import a Certificate Profile." -msgstr "Імпортувати профіль сертифікатів." - -msgid "Import an entitlement certificate." -msgstr "Імпортувати сертифікат надання імен." - -msgid "Import automount files for a specific location." -msgstr "Імпортувати файли automount для певної адреси." - -msgid "Imported keys:" -msgstr "Імпортовані ключі:" - -msgid "Imported maps:" -msgstr "Імпортовані карти:" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Імпортовано профіль «%(value)s»" - -msgid "Include Disabled" -msgstr "Включення вимкнено" - -msgid "Include Enabled" -msgstr "Включення увімкнено" - -msgid "Include IPA master entries" -msgstr "Включити основні записи IPA" - -msgid "Include all disabled IPA rules into test" -msgstr "Перевірити всі вимкнені правила IPA" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "Перевірити всі увімкнені правила IPA [типова поведінка]" - -msgid "Include certificate chain in output" -msgstr "Включити ланцюжок сертифікації до виведення" - -msgid "Include in" -msgstr "Включити до" - -msgid "Included attributes" -msgstr "Атрибути включення" - -msgid "Inclusive" -msgstr "Включна" - -msgid "Inclusive Regex" -msgstr "Формальний вираз включення" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "Вказано несумісні параметри (-r і -P)\n" - -msgid "Indirect" -msgstr "Опосередкований" - -msgid "Indirect Member HBAC service" -msgstr "Опосередкована служба HBAC учасника" - -msgid "Indirect Member HBAC service group" -msgstr "Опосередкована група служб HBAC учасника" - -msgid "Indirect Member ID user overrides" -msgstr "Перевизначення ідентифікатора опосередкованого учасника користувача" - -msgid "Indirect Member groups" -msgstr "Опосередковані групи «member»" - -msgid "Indirect Member host-groups" -msgstr "Групи вузлів з опосередкованою участю" - -msgid "Indirect Member hosts" -msgstr "Вузли з опосередкованою участю" - -msgid "Indirect Member netgroups" -msgstr "Опосередковані мережеві групи учасника" - -msgid "Indirect Member of HBAC rule" -msgstr "Опосередковане правило HBAC «member of»" - -msgid "Indirect Member of Sudo rule" -msgstr "Опосередковане правило sudo «member of»" - -msgid "Indirect Member of group" -msgstr "Опосередкована група «member of»" - -msgid "Indirect Member of host-group" -msgstr "Опосередкований учасник групи вузлів" - -msgid "Indirect Member of netgroup" -msgstr "Опосередкована група «member of»" - -msgid "Indirect Member of role" -msgstr "Опосередкована роль «member of»" - -msgid "Indirect Member of roles" -msgstr "Опосередкований учасник roles" - -msgid "Indirect Member permissions" -msgstr "Опосередковані права доступу учасника" - -msgid "Indirect Member users" -msgstr "Опосередковані користувачі «member»" - -msgid "Indirect Membership" -msgstr "Опосередкована участь" - -msgid "Inherited from server configuration" -msgstr "Успадковано з налаштувань сервера" - -msgid "Initial counter for the HOTP token" -msgstr "Початковий лічильник для ключа HOTP" - -msgid "Initialize left node" -msgstr "Ініціалізувати лівий вузол" - -msgid "Initialize right node" -msgstr "Ініціалізувати правий вузол" - -msgid "Initials" -msgstr "Ініціали" - -msgid "Input data specified multiple times" -msgstr "Вхідні дані вказано декілька разів" - -msgid "Input file" -msgstr "Вхідний файл" - -msgid "Input filename" -msgstr "Назва вхідного файла" - -msgid "Input form contains invalid or missing values." -msgstr "" -"У форму введення даних не введено деякі з даних або у формі містяться " -"некоректні записи." - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Недостатні привілеї «add» для запису «%s»." - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Недостатні привілеї «write» до атрибута «krbLastPwdChange» запису «%s»." - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "Недостатні привілеї «write» до атрибута «userCertificate» запису «%s»." - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Недостатні права для доступу: %(info)s" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" -"Недостатні привілеї для створення сертифіката з альтернативною назвою " -"призначення «%s»." - -msgid "Insufficient privilege to delete a CA." -msgstr "Недостатні права доступу для вилучення запису CA." - -msgid "Insufficient privilege to modify a CA." -msgstr "Недостатні права доступу для внесення змін до запису CA." - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "Недостатні права доступу для внесення змін до профілю сертифікації." - -msgid "Internal Error" -msgstr "Внутрішня помилка" - -msgid "Internationalization messages" -msgstr "Повідомлення перекладу" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "некоректний запит JSON-RPC: %(error)s" - -msgid "Invalid LDAP URI." -msgstr "Некоректна адреса LDAP." - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" -"Некоректне значення MCS. Значення має відповідати {mcs}, де максимальною " -"категорією є {mcs_max}" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" -"Некоректне значення MLS. Значення має відповідати {mls}, де максимальним " -"рівнем є {mls_max}" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "Некоректний механізм прив’язування SASL\n" - -msgid "Invalid SELinux user name, must match {}" -msgstr "Некоректна назва запису користувача SELinux. Назва має відповідати {}" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Некоректна назва реєстраційного запису служби\n" - -msgid "Invalid credentials" -msgstr "Реєстраційні дані вказано з помилками" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Некоректна назва домену, «%(domain)s»: %(e)s" - -msgid "Invalid format. Should be name=value" -msgstr "Некоректний формат. Правильний формат: назва=значення" - -msgid "Invalid number of parts!" -msgstr "Некоректна кількість частин!" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Некоректний або непідтримуваний тип. Дозволені значення: %s" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "Некоректний або непідтримуваний відкритий ключ сховища: %s" - -msgid "Invalid vault type" -msgstr "Некоректний тип сховища" - -msgid "Is zone active?" -msgstr "Чи є зона активною?" - -msgid "Issue" -msgstr "Створити" - -msgid "Issue new certificate" -msgstr "Видати новий сертифікат" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "Видати новий сертифікат для вузла «${primary_key}»" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "Видати новий сертифікат для служби «${primary_key}»" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "Видати новий сертифікат для користувача «${primary_key}»" - -msgid "Issued By" -msgstr "Видавець" - -msgid "Issued On" -msgstr "Видано" - -msgid "Issued To" -msgstr "Видано для" - -msgid "Issued on from" -msgstr "Видано з" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "Видано з цієї дати (РРРР-мм-дд)" - -msgid "Issued on to" -msgstr "Видано до" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "Видано до цієї дати (РРРР-мм-дд)" - -msgid "Issuer" -msgstr "Видавець" - -msgid "Issuer DN" -msgstr "DN видавця" - -msgid "Issuer Distinguished Name" -msgstr "Унікальна назва видавця" - -msgid "Issuer and subject" -msgstr "Видавець і призначення" - -msgid "Issuer of the certificate" -msgstr "Видавець сертифіката" - -msgid "Issuing CA" -msgstr "Видавничий CA" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" -"Наполегливо рекомендуємо вам встановити наступні служби одразу на декількох " -"серверах:" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "Використовується лише для встановлення атрибута MNAME SOA." - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "Виклик JSON-RPC завершився помилкою із кодом стану: %li\n" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "Помилка під час виконання запиту JSON-RPC: %s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" -"Виклик JSON-RPC не було уповноважено. Перевірте, чи правильно вказано " -"реєстраційні дані.\n" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" -"Запит JSON-RPC:\n" -"%s\n" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" -"Відповідь JSON-RPC:\n" -"%s\n" - -msgid "Job Title" -msgstr "Посада" - -msgid "Join an IPA domain" -msgstr "Долучитися до домену IPA" - -msgid "KEY Algorithm" -msgstr "Алгоритм КЛЮЧА" - -msgid "KEY Flags" -msgstr "Прапорці KEY" - -msgid "KEY Protocol" -msgstr "Протокол КЛЮЧА" - -msgid "KEY Public Key" -msgstr "Відкритий ключ KEY" - -msgid "KEY record" -msgstr "Запис KEY" - -msgid "KRA service is not enabled" -msgstr "Службу KRA не увімкнено" - -msgid "KX Exchanger" -msgstr "Обмінник KX" - -msgid "KX Preference" -msgstr "Пріоритетність KX" - -msgid "KX record" -msgstr "Запис KX" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" -"Не знайдено кешу реєстраційних даних Kerberos. Чи є у вас квиток Kerberos?\n" - -msgid "Kerberos Key" -msgstr "Ключ Kerberos" - -msgid "Kerberos Key Not Present" -msgstr "Ключа Kerberos немає" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Маємо ключ Kerberos, вузол передбачено" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Маємо ключ Kerberos, службу передбачено" - -msgid "Kerberos Principal you entered is expired" -msgstr "Строк дії введених вами реєстраційних даних Kerberos вичерпано" - -msgid "Kerberos Service Principal Name" -msgstr "Назва реєстраційного запису служби Kerberos" - -msgid "Kerberos Ticket Policy" -msgstr "Правила квитків Kerberos" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" -"Не знайдено реєстраційного запису користувача Kerberos. Ви маєте ви " -"коректний кеш реєстраційних даних?\n" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Невдала спроба ініціалізації контексту Kerberos\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Невдала спроба ініціалізації контексту Kerberos: %1$s (%2$d)\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Помилка Kerberos: %(major)s/%(minor)s" - -msgid "Kerberos keys available" -msgstr "Доступні ключі Kerberos" - -msgid "Kerberos principal" -msgstr "Реєстраційний запис Kerberos" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Реєстраційний запис Kerberos %s вже існує. Скористайтеся командою «ipa user-" -"mod», щоб встановити його параметри вручну." - -msgid "Kerberos principal expiration" -msgstr "Завершення строку дії реєстраційного запису Kerberos" - -msgid "Kerberos principal name for this host" -msgstr "Назва реєстраційного запису Kerberos для цього вузла" - -msgid "Key" -msgstr "Ключ" - -msgid "Key Compromise" -msgstr "Компрометація ключа" - -msgid "Key Tag" -msgstr "Мітка ключа" - -msgid "Keytab" -msgstr "Таблиця ключів" - -msgid "Keytab File Name" -msgstr "Назва файла таблиці ключів" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Таблицю ключів успішно отримати і збережено до: %s\n" - -msgid "LDAP DN" -msgstr "DN LDAP" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "Механізм прив’язування SASL LDAP, якщо без bindd/bindpw" - -msgid "LDAP URI" -msgstr "URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "URI LDAP сервера DS, з якого здійснюватиметься міграція" - -msgid "LDAP basedn" -msgstr "Базовий DN LDAP" - -msgid "LDAP password" -msgstr "Пароль LDAP" - -msgid "LDAP password (if not using Kerberos)" -msgstr "Пароль LDAP (якщо не використовується Kerberos)" - -msgid "LDAP schema" -msgstr "Схема LDAP" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" -"Область пошуку LDAP для користувачів і груп: base, onelevel або subtree. " -"Типове значення: onelevel" - -msgid "LDAP suffix to be managed" -msgstr "Суфікс LDAP, яким слід керувати" - -msgid "LDAP timeout" -msgstr "Час очікування LDAP" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "Адреса LDAP, з якою слід встановити з’єднання. Несумісний з --server" - -msgid "LOC Altitude" -msgstr "Висота LOC" - -msgid "LOC Degrees Latitude" -msgstr "Градуси широти LOC" - -msgid "LOC Degrees Longitude" -msgstr "Градуси довготи LOC" - -msgid "LOC Direction Latitude" -msgstr "Півкуля широти LOC" - -msgid "LOC Direction Longitude" -msgstr "Півкуля довготи LOC" - -msgid "LOC Horizontal Precision" -msgstr "Точність за горизонталлю LOC" - -msgid "LOC Minutes Latitude" -msgstr "Мінути широти LOC" - -msgid "LOC Minutes Longitude" -msgstr "Мінути довготи LOC" - -msgid "LOC Seconds Latitude" -msgstr "Секунди широти LOC" - -msgid "LOC Seconds Longitude" -msgstr "Секунди довготи LOC" - -msgid "LOC Size" -msgstr "Розмір LOC" - -msgid "LOC Vertical Precision" -msgstr "Точність за вертикаллю LOC" - -msgid "LOC record" -msgstr "Запис LOC" - -msgid "Label" -msgstr "Мітка" - -msgid "Labels" -msgstr "Мітки" - -msgid "Last" -msgstr "Останній" - -msgid "Last date/time the token can be used" -msgstr "Строк дії ключа (дата і час)" - -msgid "Last failed authentication" -msgstr "Останнє невдале розпізнавання" - -msgid "Last name" -msgstr "Прізвище" - -msgid "Last successful authentication" -msgstr "Останнє успішне розпізнавання" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Використання пробілів на початку і у кінці заборонено" - -msgid "Left node" -msgstr "Лівий вузол" - -msgid "Left replication node - an IPA server" -msgstr "Лівий вузол реплікації — сервер IPA" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Припустимий фільтр LDAP (наприклад, ou=Engineering)" - -msgid "Length of TOTP token code validity" -msgstr "Тривалість чинності коду ключа TOTP" - -msgid "Level" -msgstr "Рівень" - -msgid "List all service vaults" -msgstr "Список усіх сховищ служб" - -msgid "List all user vaults" -msgstr "Список усіх сховищ користувачів" - -msgid "List of IPA masters configured as DNS servers" -msgstr "Список основних серверів IPA, які налаштовано як сервери DNS" - -msgid "List of all IPA masters" -msgstr "Список усіх основних вузлів IPA" - -msgid "List of all hidden IPA masters" -msgstr "Список усіх прихованих основних серверів IPA" - -msgid "List of deletions that failed" -msgstr "Список вилучень, які не вдалося виконати" - -msgid "List of enabled roles" -msgstr "Список усіх увімкнених ролей" - -msgid "List of servers which advertise the given location" -msgstr "Вивести список серверів, які повідомляють про вказане місце" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Список довірених доменів успішно оновлено. Для отримання поточного списку " -"цих доменів скористайтеся командою trustdomain-find." - -msgid "Lists of objects migrated; categorized by type." -msgstr "Списки об’єктів, міграцію яких виконано; впорядкований за типами." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" -"Списки об’єктів, міграцію яких не вдалося виконати; впорядкований за типами." - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Завантажити сертифікат CA сервера LDAP з вказаного файла" - -msgid "Loading" -msgstr "Завантаження" - -msgid "Loading data" -msgstr "Завантажуємо дані" - -msgid "Local domain" -msgstr "Локальний домен" - -msgid "Locality" -msgstr "Адреса" - -msgid "Location" -msgstr "Запис" - -msgid "Location name" -msgstr "Назва місця" - -msgid "Location of the ACI" -msgstr "Розташування ACI" - -msgid "Lockout duration" -msgstr "Тривалість блокування" - -msgid "Log In Using Certificate" -msgstr "Увійти за допомогою сертифіката" - -msgid "Log in" -msgstr "Увійти" - -msgid "Log in using personal certificate" -msgstr "Увійти за допомогою персонального сертифіката" - -msgid "Log out" -msgstr "Вийти" - -msgid "Log out error" -msgstr "Помилка під час спроби вийти" - -msgid "Logged In As" -msgstr "Вхід до системи від імені" - -msgid "Login failed due to an unknown reason" -msgstr "Не вдалося увійти з невідомої причини" - -msgid "Login shell" -msgstr "Оболонка входу" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" -"Менше число — вища пріоритетність. Клієнтські частини намагатимуться " -"встановити зв’язок із тією доступною для них адресою, у якої нижче число " -"пріоритетності." - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" -"Менше число — вища пріоритетність. Клієнтські частини намагатимуться " -"встановити зв’язок із ттим доступноми для них сервером, у якого нижче число " -"пріоритетності." - -msgid "MAC address" -msgstr "MAC-адреса" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "MX Exchanger" -msgstr "Обмінник MX" - -msgid "MX Preference" -msgstr "Пріоритетність MX" - -msgid "MX record" -msgstr "Запис MX" - -msgid "Mailing Address" -msgstr "Адреса ел. пошти" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" -"Виконати декілька викликів ipa за допомогою одного віддаленого виклику " -"процедури" - -msgid "Malformed DN" -msgstr "Помилкове форматування DN" - -msgid "Malformed principal" -msgstr "Помилкове форматування реєстраційного запису" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "Помилкове форматування реєстраційного запису: %(error)s" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Помилкове форматування реєстраційного запису: «%(value)s»" - -msgid "Manage password policy for specific group" -msgstr "Керування правилами обробки паролів для певної групи" - -msgid "Manage ticket policy for specific user" -msgstr "Керування правилами обробки квитків певного користувача" - -msgid "Managed LDAP suffix DN" -msgstr "DN керованого суфікса LDAP" - -msgid "Managed by" -msgstr "Керується" - -msgid "Managed suffix" -msgstr "Керований суфікс" - -msgid "Managed suffixes" -msgstr "Керовані суфікси" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" -"Для керованої топології потрібен мінімальний рівень домену ${domainlevel}" - -msgid "Managedby permission" -msgstr "Права доступу managedby" - -msgid "Manager" -msgstr "Керівник" - -msgid "Managing" -msgstr "Керування" - -msgid "Map" -msgstr "Карта" - -msgid "Map Type" -msgstr "Тип карти" - -msgid "Mapping rule" -msgstr "Правило прив’язування" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"Набір правил прив’язки «%(ruleset)s» містить декілька правил для допоміжного " -"засобу %(helper)s" - -msgid "Mark the token as disabled (default: false)" -msgstr "Позначення ключа як вимкненого (типове значення: false)" - -msgid "Master file" -msgstr "Основний файл" - -msgid "Match" -msgstr "Відповідність" - -msgid "Match cn attribute in subject" -msgstr "Порівняти із атрибутом cn у темі" - -msgid "Match users according to certificate." -msgstr "Встановити відповідність користувачів за сертифікатом." - -msgid "Matched" -msgstr "Встановлено відповідність" - -msgid "Matched Users" -msgstr "Відповідні користувачі" - -msgid "Matched rules" -msgstr "Відповідні правила" - -msgid "Matching Type" -msgstr "Відповідний тип" - -msgid "Matching rule" -msgstr "Правило відповідності" - -msgid "Max domain level" -msgstr "Макс. рівень домену" - -msgid "Max failures" -msgstr "Макс. к-ть помилок" - -msgid "Max life" -msgstr "Макс. строк дії" - -msgid "Max lifetime (days)" -msgstr "Макс. строк дії (у днях)" - -msgid "Max renew" -msgstr "Макс. вік поновлення" - -msgid "Max repeat" -msgstr "Макс. повторення" - -msgid "Max sequence" -msgstr "Макс. послідовність" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" -"Максимальний проміжок часу (у секундах) для виконання однієї дії з пошуку " -"(-1 або 0 — без обмежень)" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" -"Максимальний проміжок часу (у секундах) для виконання однієї дії з пошуку " -"(>0, -1 — без обмежень)" - -msgid "Maximum domain level" -msgstr "Максимальний рівень домену" - -msgid "Maximum hostname length" -msgstr "Максимальна довжина назви вузла" - -msgid "Maximum number of agreements per replica" -msgstr "Максимальна кількість узгоджень на репліку" - -msgid "Maximum number of certs returned" -msgstr "Максимальна кількість сертифікатів у повернутому списку" - -msgid "Maximum number of entries returned" -msgstr "Максимальна кількість повернутих записів" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Максимальна кількість повернутих записів (0 — без обмежень)" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Максимальна кількість записів результатів пошуку (-1 — без обмежень)" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" -"Максимальна кількість записів результатів пошуку (-1 або 0 — без обмежень)" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" -"Максимальна кількість правил, які слід обробити, якщо не вказано параметра --" -"rules" - -msgid "Maximum number of same consecutive characters" -msgstr "Максимальна кількість однакових символів поспіль" - -msgid "Maximum password life must be greater than minimum." -msgstr "" -"Максимальний строк дії пароля має перевищувати мінімальний строк його дії." - -msgid "Maximum password lifetime (in days)" -msgstr "Максимальний строк дії пароля (у днях)" - -msgid "Maximum renewable age (seconds)" -msgstr "Максимальний вік, протягом якого можливе поновлення (у секундах)" - -msgid "Maximum serial number" -msgstr "Максимальний серійний номер" - -msgid "Maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка (у секундах)" - -msgid "Maximum username length" -msgstr "Максимальна довжина імені користувача" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Максимальним є значення ${value}" - -msgid "May not be empty" -msgstr "Не може бути порожнім" - -msgid "Member Group" -msgstr "Група учасника" - -msgid "Member HBAC service" -msgstr "Служба HBAC учасника" - -msgid "Member HBAC service groups" -msgstr "Групи служб HBAC учасника" - -msgid "Member Host" -msgstr "Вузол-учасник" - -msgid "Member Hostgroup" -msgstr "Група вузлів учасника" - -msgid "Member ID user overrides" -msgstr "Перевизначення ідентифікатора учасника користувача" - -msgid "Member Sudo commands" -msgstr "Команди учасника Sudo" - -msgid "Member User" -msgstr "Користувач учасника" - -msgid "Member groups" -msgstr "Групи «member»" - -msgid "Member host-groups" -msgstr "Учасник host-groups" - -msgid "Member hosts" -msgstr "Вузли-учасники" - -msgid "Member netgroups" -msgstr "Мережеві групи учасника" - -msgid "Member of" -msgstr "Учасник" - -msgid "Member of HBAC rule" -msgstr "Правило HBAC «member of»" - -msgid "Member of HBAC service groups" -msgstr "Учасник груп служб HBAC" - -msgid "Member of Sudo rule" -msgstr "Правило Sudo «member of»" - -msgid "Member of a group" -msgstr "Учасник групи" - -msgid "Member of group" -msgstr "Учасник групи" - -msgid "Member of groups" -msgstr "Групи «member of»" - -msgid "Member of host-groups" -msgstr "Учасник host-groups" - -msgid "Member of netgroups" -msgstr "Мережеві групи «member of»" - -msgid "Member principals" -msgstr "Реєстраційні записи учасників" - -msgid "Member service groups" -msgstr "Групи служб учасника" - -msgid "Member services" -msgstr "Служби учасника" - -msgid "Member user group" -msgstr "Учасник групи користувачів" - -msgid "Member users" -msgstr "Користувачі «member»" - -msgid "Members" -msgstr "Учасники" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "Учасники довіреного домену у форматі ДОМЕН\\ім’я або ім’я@домен" - -msgid "Members that could not be added" -msgstr "Учасники, записи яких не вдалося додати" - -msgid "Members that could not be removed" -msgstr "Учасники, записи яких не вдалося вилучити" - -msgid "Method name" -msgstr "Назва методу" - -msgid "Method of" -msgstr "Метод" - -msgid "Migrate" -msgstr "Перенести" - -msgid "Migrate users and groups from DS to IPA." -msgstr "Перенести дані користувачів і груп з DS до IPA." - -msgid "Migrating" -msgstr "Перенесення" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"Режим міграції вимкнено.\n" -"Скористайтеся командою «ipa config-mod--enable-migration=TRUE», щоб " -"увімкнути його." - -msgid "Migration of LDAP search reference is not supported." -msgstr "Підтримки перенесення посилання пошуку LDAP не передбачено." - -msgid "Min domain level" -msgstr "Мін. рівень домену" - -msgid "Min length" -msgstr "Мін. довжина" - -msgid "Min lifetime (hours)" -msgstr "Мін. строк дії (у годинах)" - -msgid "Minimum domain level" -msgstr "Мінімальний рівень домену" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" -"Якщо визначено maxrepeat, maxsequence, dictcheck або usercheck, мінімальною " -"довжиною має бути число >= 6" - -msgid "Minimum length of password" -msgstr "Мінімальна довжина пароля" - -msgid "Minimum number of character classes" -msgstr "Мінімальна кількість класів символів" - -msgid "Minimum password lifetime (in hours)" -msgstr "Мінімальний строк дії пароля (у годинах)" - -msgid "Minimum serial number" -msgstr "Мінімальний серійний номер" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Мінімальним є значення ${value}" - -msgid "Minutes Latitude" -msgstr "Мінути широти" - -msgid "Minutes Longitude" -msgstr "Мінути довготи" - -msgid "Misc. Information" -msgstr "Інша інформація" +msgid "Credentials" +msgstr "Реєстраційні дані" msgid "Missing credentials for cross-forest communication" msgstr "Пропущено реєстраційні дані для обміну даними між лісами" -msgid "Missing new vault public key" -msgstr "Не вказано нового відкритого ключа сховища" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Не вказано HTTP Referer або вказано помилкове значення, %(referer)s" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "Немає списку керування відповідями!\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "Немає керування відповіддю!\n" - -msgid "Missing values: " -msgstr "Пропущені значення: " - -msgid "Missing vault private key" -msgstr "Не вказано закритого ключа сховища" - -msgid "Missing vault public key" -msgstr "Не вказано відкритого ключа сховища" - -msgid "Mobile Telephone Number" -msgstr "Номер мобільного телефону" - -msgid "Model" -msgstr "Модель" - -msgid "Modified" -msgstr "Змінено" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Змінено налаштування довіри «%(value)s»" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Змінено ACI «%(value)s»" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Змінено CA «%(value)s»" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Змінено CA ACL «%(value)s»" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Змінено правило прив’язування сертифікатів до профілів «%(value)s»" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Змінено профіль сертифікатів «%(value)s»" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Змінено запис сервера DNS «%(value)s»" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Змінено правило HBAC «%(value)s»" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Змінено службу HBAC «%(value)s»" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Змінено групу служб HBAC «%(value)s»" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Змінено діапазон ідентифікаторів «%(value)s»" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Змінено запис місця IPA «%(value)s»" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Змінено запис сервера IPA «%(value)s»" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Змінено жетон OTP «%(value)s»" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Змінено запис проксі-сервера RADIUS «%(value)s»" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Змінено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Змінено команду sudo «%(value)s»" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Змінено групу команд sudo «%(value)s»" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Змінено правило sudo «%(value)s»" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Змінено перевизначення ідентифікаторів групи «%(value)s»" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Змінено перегляд ідентифікаторів «%(value)s»" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Змінено перевизначення ідентифікатора «%(value)s»" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Змінено перевизначення ідентифікатора користувача «%(value)s»" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Змінено правило автоматичної участі «%(value)s»" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Змінено ключ автоматичного монтування «%(value)s»" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Змінено карту автоматичного монтування «%(value)s»" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Змінено уповноваження «%(value)s»" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Змінено групу «%(value)s»" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Змінено вузол «%(value)s»" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Змінено групу вузлів «%(value)s»" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Змінено мережеву групу «%(value)s»" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Змінено права доступу «%(value)s»" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Змінено привілей «%(value)s»" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Змінено роль «%(value)s»" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Змінено сегмент «%(value)s»" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Змінено самообслуговування «%(value)s»" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Змінено службу «%(value)s»" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Змінено запис користувача етапу «%(value)s»" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Змінено суфікс топології «%(value)s»" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "Змінено довіру «%(value)s» (зміни набудуть чинності за 60 секунд)" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Змінено користувача «%(value)s»" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Змінено сховище «%(value)s»" - -msgid "Modified: key not set" -msgstr "Змінено: ключ не встановлено" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Змінити значення «%(value)s» %(name)s?" - -msgid "Modify ACI." -msgstr "Змінити запис ACI." - -msgid "Modify CA configuration." -msgstr "Змінити налаштування CA." - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Змінити налаштування прив’язки сертифікатів до профілів." - -msgid "Modify Certificate Profile configuration." -msgstr "Змінити налаштування профілю сертифікатів." - -msgid "Modify Class of Service entry" -msgstr "Змінити запис класу служби" - -msgid "Modify DNS forward zone." -msgstr "Змінити зону переспрямовування DNS." - -msgid "Modify DNS server configuration" -msgstr "Змінити налаштування сервера DNS" - -msgid "Modify DNS zone (SOA record)." -msgstr "Змінити зону DNS (запис SOA)." - -msgid "Modify ID range." -msgstr "Змінити діапазон ідентифікаторів." - msgid "" -"Modify ID range.\n" -"\n" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" msgstr "" -"Змінити діапазон ідентифікаторів.\n" -"\n" -msgid "Modify Kerberos ticket policy." -msgstr "Змінити правила квитків Kerberos." +msgid "Trusting forest" +msgstr "«Ліс» довіри" -msgid "Modify OTP configuration options." -msgstr "Змінити параметри налаштування OTP." +msgid "Trusted forest" +msgstr "Довірений «ліс»" -msgid "Modify Sudo Command Group." -msgstr "Змінити групу команд sudo." +msgid "Established and verified" +msgstr "Встановлено і перевірено" -msgid "Modify Sudo Command." -msgstr "Змінити команду sudo." +msgid "Waiting for confirmation by remote side" +msgstr "Очікуємо на підтвердження з віддаленого боку" -msgid "Modify Sudo Rule." -msgstr "Змінити правило sudo." - -msgid "Modify a CA ACL." -msgstr "Змінити CA ACL." - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Змінити правило прив’язування сертифікатів до профілів." - -msgid "Modify a DNS resource record." -msgstr "Змінити запис ресурсу DNS." - -msgid "Modify a OTP token." -msgstr "Змінити жетон OTP." - -msgid "Modify a RADIUS proxy server." -msgstr "Змінити запис проксі-сервера RADIUS." - -msgid "Modify a SELinux User Map." -msgstr "Змінити карту користувачів SELinux." - -msgid "Modify a delegation." -msgstr "Змінити уповноваження." - -msgid "Modify a group password policy." -msgstr "Змінити групу правил для паролів." - -msgid "Modify a group." -msgstr "Змінити групу." - -msgid "Modify a hostgroup." -msgstr "Змінити групу вузлів." - -msgid "Modify a netgroup." -msgstr "Змінити мережеву групу." - -msgid "Modify a permission." -msgstr "Змінити права доступу." - -msgid "Modify a privilege." -msgstr "Змінити привілей." - -msgid "Modify a role." -msgstr "Змінити роль." - -msgid "Modify a segment." -msgstr "Змінити сегмент." - -msgid "Modify a self-service permission." -msgstr "Змінити права доступу автослужби." - -msgid "Modify a stage user." -msgstr "Змінити запис користувача етапу." - -msgid "Modify a topology suffix." -msgstr "Змінити суфікс топології." - -msgid "Modify a user." -msgstr "Змінити параметри користувача." - -msgid "Modify a vault." -msgstr "Змінити сховище." - -msgid "Modify an Group ID override." -msgstr "Змінити перевизначення ідентифікаторів групи." - -msgid "Modify an HBAC rule." -msgstr "Змінити правило HBAC." - -msgid "Modify an HBAC service group." -msgstr "Змінити групу служб HBAC." - -msgid "Modify an HBAC service." -msgstr "Змінити службу HBAC." - -msgid "Modify an ID View." -msgstr "Змінити перегляд ідентифікаторів." - -msgid "Modify an ID override." -msgstr "Змінити перевизначення ідентифікатора." - -msgid "Modify an User ID override." -msgstr "Змінити перевизначення ідентифікатора користувача." - -msgid "Modify an automember rule." -msgstr "Змінити правило автоматичної участі." - -msgid "Modify an automount key." -msgstr "Змінити ключ автоматичного монтування." - -msgid "Modify an automount map." -msgstr "Змінити карту автоматичного монтування." - -msgid "Modify an existing IPA service." -msgstr "Змінити вже створену службу IPA." - -msgid "Modify configuration options." -msgstr "Змінити параметри налаштування." - -msgid "Modify global DNS configuration." -msgstr "Змінити загальні налаштування DNS." - -msgid "Modify global trust configuration." -msgstr "Змінити налаштування довіри на загальному рівні." - -msgid "Modify information about a host." -msgstr "Змінити дані щодо вузла." - -msgid "Modify information about an IPA location." -msgstr "Змінити дані щодо місця IPA." - -msgid "Modify information about an IPA server." -msgstr "Змінити дані щодо сервера IPA." - -msgid "Modify realm domains." -msgstr "Змінити домени області." - -msgid "Modify trustdomain of the trust" -msgstr "Змінити значення довіреного домену (trustdomain) правила довіри" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" -"Знайдено декілька записів ключів %(key)s, скористайтеся --info для вибору " -"певного запису." - -msgid "Mount information" -msgstr "Інформація щодо монтування" - -msgid "Mount point" -msgstr "Точка монтування" - -msgid "Move deleted user into staged area" -msgstr "Пересунути вилучений запис користувача до області етапу" - -msgid "Multi-value" -msgstr "Багато значень" - -msgid "Must be a decimal number" -msgstr "Має бути десятковим числом" - -msgid "Must be a positive number" -msgstr "Має бути додатним числом" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" -"Має бути значенням дати часу за Гринвічем (UTC) (наприклад, «2014-01-20 " -"17:58:01Z»)" - -msgid "Must be an integer" -msgstr "Має бути цілим числом" - -msgid "Must be disabled first" -msgstr "Слід спочатку вимкнути" - -msgid "My User Vaults" -msgstr "Сховища користувача" - -msgid "NAPTR Flags" -msgstr "Прапорці NAPTR" - -msgid "NAPTR Order" -msgstr "Порядок NAPTR" - -msgid "NAPTR Preference" -msgstr "Пріоритетність NAPTR" - -msgid "NAPTR Regular Expression" -msgstr "Формальний вираз NAPTR" - -msgid "NAPTR Replacement" -msgstr "Замінник NAPTR" - -msgid "NAPTR Service" -msgstr "Служба NAPTR" - -msgid "NAPTR record" -msgstr "Запис NAPTR" - -msgid "NIS domain name" -msgstr "Назва домену NIS" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "Значення NONE не можна поєднувати з іншими типами PAC" - -msgid "NS Hostname" -msgstr "Назва вузла NS" - -msgid "NS record" -msgstr "Запис NS" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"запис NS не можна використовувати разом з записом %(type)s, якщо їх не " -"розташовано у запису кореня зони (RFC 2181, розділ 6.1)" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "Записи NS можна редагувати у апексі зони — «@». " - -msgid "NSEC Next Domain Name" -msgstr "Наступна назва домену NSEC" - -msgid "NSEC Type Map" -msgstr "Карта типів NSEC" - -msgid "NSEC record" -msgstr "запис NSEC" - -msgid "NSEC3 record" -msgstr "Запис NSEC3" - -msgid "NSEC3PARAM record" -msgstr "Запис NSEC3PARAM" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" -"Запис NSEC3PARAM для зони у такому форматі: алгоритм_хешування прапорці " -"ітерації сіль" - -msgid "Name" -msgstr "Назва" - -msgid "Name for referencing the CA" -msgstr "Назва до посилання на CA" - -msgid "Name of command to export" -msgstr "Назва команди для експортування" - -msgid "Name of host-group" -msgstr "Назва групи вузлів" - -msgid "Name of issuing CA" -msgstr "Назва видавничого CA" - -msgid "Name of method to export" -msgstr "Назва методу, який буде експортовано" - -msgid "Name of object to export" -msgstr "Назва об’єкта, який слід експортувати" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" -"Назва батьківської карти автомонтування (типове значення: auto.master)." - -msgid "Name of the trusted domain" -msgstr "Назва довіреного домену" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "Сервер назв «%(host)s» не має відповідного запису A/AAAA" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "Не можна задавати сервер назв для зворотної зони відносно назви DNS" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Не надано ні --del-all, ні параметрів вилучення певного запису.\n" -"Всі підтримувані типи записів можна знайти у виводі команди help." - -msgid "Nested Methods to execute" -msgstr "Вкладені методи, які слід виконати" - -msgid "NetBIOS name" -msgstr "Назва NetBIOS" - -msgid "Netgroup" -msgstr "Мережева група" - -msgid "Netgroup Settings" -msgstr "Параметри мережевої групи" - -msgid "Netgroup description" -msgstr "Опис мережевої групи" - -msgid "Netgroup name" -msgstr "Назва мережевої групи" - -msgid "Netgroups" -msgstr "Мережеві групи" - -msgid "Network Services" -msgstr "Мережеві служби" - -msgid "New ACI name" -msgstr "Нова назва ACI" - -msgid "New Certificate" -msgstr "Новий сертифікат" - -msgid "New Password" -msgstr "Новий пароль" - -msgid "New Principal Password" -msgstr "Новий пароль реєстраційного запису" - -msgid "New Test" -msgstr "Новий текст" - -msgid "New kerberos principal alias" -msgstr "Новий псевдонім реєстраційного запису kerberos" - -msgid "New mount information" -msgstr "Інформація нового монтування" - -msgid "New password is required" -msgstr "Слід вказати новий пароль" - -msgid "New public key specified multiple times" -msgstr "Новий відкритий ключ вказано декілька разів" - -msgid "New vault password" -msgstr "Новий пароль до сховища" - -msgid "New: key not set" -msgstr "Новий: ключ не встановлено" - -msgid "New: key set" -msgstr "Новий: ключ встановлено" - -msgid "Next" -msgstr "Далі" - -msgid "Next Domain Name" -msgstr "Наступна назва домену" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Не знайдено записів A, AAAA, SSHFP або PTR." - -msgid "No Common Name was found in subject of request." -msgstr "У темі запиту не було знайдено загальної назви (CN)." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"Немає серверів DNS на місці IPA %(location)s. Без серверів DNS місце не " -"працюватиме як слід." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"Не встановлено основного ключа DNSSEC. Підписування у зоні DNSSEC не " -"працюватиме, доки не буде встановлено основний ключ DNSSEC." - -msgid "No Valid Certificate" -msgstr "Немає чинних сертифікатів" - -msgid "No archived data." -msgstr "Немає архівованих даних." - -msgid "No credentials cache found" -msgstr "Не знайдено кешу реєстраційних даних" - -msgid "No default (fallback) group set" -msgstr "Не встановлено типової (резервної) групи" - -msgid "No entries." -msgstr "Немає записів." - -msgid "No file to read" -msgstr "Немає файла для читання" - -msgid "No free YubiKey slot!" -msgstr "Немає вільних слотів YubiKey!" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Жоден з ключів не прийнято KDC\n" - -msgid "No matching entries found" -msgstr "Відповідних записів не знайдено" - -msgid "No option to delete specific record provided." -msgstr "Не вказано параметр вилучення певного запису." - -msgid "No option to modify specific record provided." -msgstr "Можливості внесення змін у певний запис не передбачено." - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Немає дозволу на долучення цього вузла до домену IPA.\n" - -msgid "No private group" -msgstr "Немає приватної групи" - -msgid "No response" -msgstr "Немає відповіді" - -msgid "No such attribute on this entry" -msgstr "У цього запису немає такого атрибута" - -msgid "No such virtual command" -msgstr "Такої віртуальної команди не передбачено" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "Немає основних системних типів шифрування?!\n" - -msgid "No trusted domain is not configured" -msgstr "Не налаштовано жодного довіреного домену" - -#, c-format -msgid "No values for %s" -msgstr "Немає значень %s" - -msgid "No wait" -msgstr "Не чекати" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "Немає дозволу на запис до файла таблиці ключів «%s»\n" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" -"Відповідь від програмного інтерфейсу REST CA, що не відповідає 2xx: " -"%(status)d. %(explanation)s" +msgid "Unknown" +msgstr "Невідомо" msgid "Non-Active Directory domain" msgstr "Домен не-Active Directory" -msgid "Non-POSIX" -msgstr "Не-POSIX" - -msgid "Non-existent or invalid rules" -msgstr "Некоректні правила або правила, яких не існує" +msgid "RFC4120-compliant Kerberos realm" +msgstr "Область Kerberos, сумісна з RFC4120" msgid "" "Non-transitive external trust to a domain in another Active Directory forest" @@ -25235,6377 +32027,41 @@ msgstr "Неперехідна зовнішня довіра до домену msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" msgstr "Неперехідна зовнішня довіра до сумісної із RFC4120 області Kerberos" -msgid "Nonce" -msgstr "Цей випадок" - -msgid "Not After" -msgstr "Не пізніше" - -msgid "Not Before" -msgstr "Не раніше" - -msgid "Not a managed group" -msgstr "Не є керованою групою" - -msgid "Not a valid IP address" -msgstr "Некоректна IP-адреса" - -msgid "Not a valid IPv4 address" -msgstr "Некоректна адреса IPv4" - -msgid "Not a valid IPv6 address" -msgstr "Некоректна адреса IPv6" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" -"Некоректна адреса у мережі (приклади коректних адрес: 2001:db8::/64, " -"192.0.2.0/24)" - -msgid "Not allowed on non-leaf entry" -msgstr "Заборонено для записів, які не є записами листків (leaf)" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "Вказано недостатньо аргументів для виконання налаштовування довіри" - -msgid "Not matched rules" -msgstr "Невідповідні правила" - -msgid "Not registered yet" -msgstr "Ще не зареєстровано" - -msgid "Note" -msgstr "Нотатка" - -msgid "Number of IDs in the range" -msgstr "Кількість ідентифікаторів у діапазоні" - -msgid "Number of conditions added" -msgstr "Кількість доданих умов" - -msgid "Number of conditions removed" -msgstr "Кількість вилучених умов" - -msgid "Number of days's notice of impending password expiration" -msgstr "Сповіщення про кількість днів, які залишилися до завершення дії пароля" - -msgid "Number of digits each token code will have" -msgstr "Кількість цифр у кожному з кодів ключа" - -msgid "Number of entries returned" -msgstr "Кількість повернутих записів" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "Кількість вузлів, з яких знято перегляд ідентифікаторів:" - -msgid "Number of hosts the ID View was applied to:" -msgstr "Кількість вузлів, до яких застосовано перегляд ідентифікаторів:" - -msgid "Number of members added" -msgstr "Кількість доданих учасників" - -msgid "Number of members removed" -msgstr "Кількість вилучених учасників" - -msgid "Number of owners added" -msgstr "Кількість доданих записів власників" - -msgid "Number of owners removed" -msgstr "Кількість вилучених записів власників" - -msgid "Number of permissions added" -msgstr "Кількість доданих прав доступу" - -msgid "Number of permissions removed" -msgstr "Кількість вилучених записів прав доступу" - -msgid "Number of plugins loaded" -msgstr "Кількість завантажених додатків" - -msgid "Number of privileges added" -msgstr "Кількість доданих привілеїв" - -msgid "Number of privileges removed" -msgstr "Кількість вилучених привілеїв" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" -"Кількість секунд, протягом яких відбуватиметься очікування зовнішнім LDAP на " -"відповідь під час дій від віддаленої репліки, перш ніж дію буде припинено " -"через перевищення часу очікування і буде видано повідомлення щодо помилки" - -msgid "Number of variables returned (<= total)" -msgstr "Кількість повернутих змінних (<= загальної)" - -msgid "OK" -msgstr "Гаразд" - -msgid "OTP" -msgstr "OTP" - -msgid "OTP Configuration" -msgstr "Налаштування OTP" - -msgid "OTP Token" -msgstr "Жетон OTP" - -msgid "OTP Token Settings" -msgstr "Параметри жетона OTP" - -msgid "OTP Tokens" -msgstr "Жетони OTP" - -msgid "OTP configuration options" -msgstr "Параметри налаштування OTP" - -msgid "OTP max life" -msgstr "Макс. строк дії OTP" - -msgid "OTP max renew" -msgstr "Макс. вік поновлення OTP" - -msgid "OTP set" -msgstr "Встановлено одноразовий пароль" - -msgid "OTP token" -msgstr "Жетон OTP" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка ключа OTP (у секундах)" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка ключа OTP (у " -"секундах)" - -msgid "OTP tokens" -msgstr "Жетони OTP" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" -"Немає класу об'єктів ipaNTUserAttrs. Через це запис користувача не може " -"містити атрибутів SMB." - -msgid "Object class name" -msgstr "Назва класу об’єктів" - -msgid "Object does not belong to a trusted domain" -msgstr "Об'єкт не належить до довіреного домену" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "Класи об’єктів, які буде проігноровано для записів груп у DS" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "Класи об’єктів, які буде проігноровано для записів користувачів у DS" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "Класи об’єктів, використаних для пошуку записів груп у DS" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "Класи об’єктів, використаних для пошуку записів користувачів у DS" - -msgid "Old vault password" -msgstr "Старий пароль до сховища" - -msgid "Old vault private key" -msgstr "Старий закритий ключ сховища" - -msgid "One Time Password" -msgstr "Одноразовий пароль" - -msgid "One of group, permission or self is required" -msgstr "Слід вказати одне зі значень, group, permission або self" - -msgid "One time password commands" -msgstr "Команди для одноразового пароля" - -msgid "One-Time Password" -msgstr "Одноразовий пароль" - -msgid "One-Time Password Not Present" -msgstr "Одноразового пароля немає" - -msgid "One-Time Password Present" -msgstr "Є одноразовий пароль" - -msgid "Only one value is allowed" -msgstr "Можна використовувати лише одне значення" - -msgid "Only one zone type is allowed per zone name" -msgstr "Можна використовувати лише один тип зони на одну назву зони" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" -"За допомогою вебінтерфейсу можна створювати лише стандартні сховища. " -"Скористайтеся командним інтерфейсом для створення інших типів сховищ." - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"Якщо додається зв’язок довіри AD, значенням --range-type має бути лише ipa-" -"ad-trust або ipa-ad-trust-posix." - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Операційна система вузла і її версія (наприклад, «Fedora 9»)" - -msgid "Operating system" -msgstr "Операційна система" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Невдала спроба виконання дії: %s\n" - -msgid "Operations Error" -msgstr "Помилка під час обробки" - -msgid "Option added" -msgstr "Додано параметр" - -msgid "Option group" -msgstr "Група варіантів" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" -"Параметр rid-base не слід використовувати, якщо типом діапазону IPA є ipa-ad-" -"trust-posix" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" -"Необов’язкове піддерево DN, звідки має бути пересунуто запис (має належати " -"до піддерева, але може ще не існувати)" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" -"Необов’язкове піддерево DN, куди має бути пересунуто запис (має належати до " -"піддерева, але може ще не існувати)" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" -"Необов’язковий DN, до якого застосовуватимуться дозвіл (має належати до " -"піддерева, але може ще не існувати)" - -msgid "Options" -msgstr "Параметри" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "Параметри dom-sid і dom-name не можна використовувати разом" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "Параметри dom-sid і rid-base слід використовувати разом" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "Параметри dom-sid і secondary-rid-base не можна використовувати разом" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "Параметри dom-sid/dom-name і rid-base слід використовувати разом" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Параметри dom-sid/dom-name і secondary-rid-base не можна використовувати " -"разом" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "Параметри secondary-rid-base і rid-base слід використовувати разом" - -msgid "Order" -msgstr "Порядок" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" -"Порядок у збільшенні пріоритетності користувачів SELinux, відокремлений $" - -msgid "Org. Unit" -msgstr "Підрозділ" - -msgid "Organization" -msgstr "Установа" - -msgid "Organizational Unit" -msgstr "Підрозділ установи" - -msgid "Origin DN subtree" -msgstr "Піддерево DN походження" - -msgid "Original TTL" -msgstr "Початковий TTL" - -msgid "Other Record Types" -msgstr "Інші типи записів" - -msgid "Our domain is not configured" -msgstr "Наш домен не налаштовано" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Не вистачає пам'яті!\n" - -msgid "Out of memory\n" -msgstr "Не вистачає пам'яті\n" - -#, c-format -msgid "Out of memory \n" -msgstr "Не вистачає пам'яті \n" - -#, c-format -msgid "Out of memory!" -msgstr "Не вистачає пам'яті!" - -#, c-format -msgid "Out of memory!\n" -msgstr "Не вистачає пам'яті!\n" - -msgid "Out of memory!?\n" -msgstr "Не вистачає пам'яті!?\n" - -msgid "Output file to store the transport certificate" -msgstr "Файл для зберігання сертифіката передавання даних" - -msgid "Output filename" -msgstr "Назва файла виводу" - -msgid "Output only on errors" -msgstr "Виводити лише повідомлення про помилки" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" -"Перевизначити типовий список підтримуваних типів PAC. Скористайтеся " -"значенням «NONE», щоб вимкнути підтримку PAC для цієї служби." - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" -"Перевизначити типовий список підтримуваних типів PAC. Скористайтеся " -"значенням «NONE», щоб вимкнути підтримку PAC для цієї служби. Це, наприклад, " -"може бути необхідним для служб NFS." - -msgid "Override existing password" -msgstr "Перевизначити наявний пароль" - -msgid "Override inherited settings" -msgstr "Перевизначити успадковані параметри" - -msgid "Overwrite GID" -msgstr "Перезаписати ідентифікатор групи" - -msgid "Owner" -msgstr "Власник" - #, python-format -msgid "Owner %s" -msgstr "Власник %s" - -msgid "Owner groups" -msgstr "Групи власника" - -msgid "Owner services" -msgstr "Служби власника" - -msgid "Owner users" -msgstr "Користувачі власника" - -msgid "Owners" -msgstr "Власники" - -msgid "Owners that could not be added" -msgstr "Власники, записи яких не вдалося додати" - -msgid "Owners that could not be removed" -msgstr "Власники, записи яких не вдалося вилучити" - -msgid "PAC type" -msgstr "Тип PAC" - -msgid "PAD" -msgstr "PAD" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "PKINIT max life" -msgstr "Макс. строк дії PKINIT" - -msgid "PKINIT max renew" -msgstr "Макс. вік поновлення PKINIT" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка PKINIT (у секундах)" - -msgid "PKINIT status" -msgstr "стан PKINIT" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " -"секундах)" - -msgid "POSIX" -msgstr "POSIX" - -msgid "PTR Hostname" -msgstr "Назва вузла PTR" - -msgid "PTR record" -msgstr "Запис PTR" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "PTR-запис для SAN IP (%s) не відповідає записам A/AAAA" - -msgid "Page" -msgstr "Сторінка" - -msgid "Pager Number" -msgstr "Номер пейджера" - -msgid "Pagination Size" -msgstr "Розмір сторінки" - -msgid "Parameters" -msgstr "Параметри" - -msgid "Parent map" -msgstr "Батьківська карта" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "Обробити всі записи DNS і повернути дані у структурованій формі" - -msgid "Parse error" -msgstr "Помилка обробки" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "Не вдалося обробити відповідь JSON-RPC: %s\n" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" -"Не вдалося обробити відповідь JSON-RPC: не знайдено значення «result».\n" - -msgid "Password" -msgstr "Пароль" - -msgid "Password Expiration Notification (days)" -msgstr "Сповіщення про вичерпання строку дії пароля (у днях)" - -msgid "Password Policies" -msgstr "Правила щодо паролів" - -msgid "Password Policy" -msgstr "Правила для паролів" - -msgid "Password can be specified only for symmetric vault" -msgstr "Пароль можна вказувати лише для симетричного сховища" - -msgid "Password cannot be set on enrolled host." -msgstr "Не можна визначати пароль для вузла з визначеною роллю." - -msgid "Password change complete" -msgstr "Зміну пароля завершено" - -msgid "Password expiration" -msgstr "Обмеження терміну дії пароля" - -msgid "Password history size" -msgstr "Розмір журналу паролів" - -msgid "Password is too long!\n" -msgstr "Пароль є надто довгим!\n" - -msgid "Password migration was not successful" -msgstr "Не вдалося перенести паролі" - -msgid "Password migration was successful" -msgstr "Пароль успішно перенесено" - -msgid "Password or Password+One-Time Password" -msgstr "Пароль або Пароль+Одноразовий пароль" - -msgid "Password plugin features" -msgstr "Можливості додатка паролів" - -msgid "Password reset was not successful." -msgstr "Не вдалося скинути пароль." - -msgid "Password specified multiple times" -msgstr "Пароль вказано декілька разів" - -msgid "Password used in bulk enrollment" -msgstr "Пароль для загального керування реєстраційними записами" - -msgid "Passwords do not match" -msgstr "Паролі не збігаються" - -msgid "Passwords do not match!" -msgstr "Паролі не збігаються!" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "Вказано різні паролі!\n" - msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" msgstr "" -"Міграцію записів паролів здійснено у форматі до хешування.\n" -"IPA не вдасться створити ключі Kerberos, якщо не буде\n" -"надано текстових паролів. Всім користувачам з перенесеними\n" -"записами, доведеться пройти розпізнавання на\n" -"https://your.domain/ipa/migration/ до того, як вони зможуть\n" -"скористатися обліковими записами Kerberos." - -msgid "Passwords must match" -msgstr "Паролі мають збігатися" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "Шлях до скрипту, який буде виконано у системі Windows під час входу" - -msgid "Path to a user home directory, in UNC format" -msgstr "Шлях до домашнього каталогу користувача у форматі UNC" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" -"Шлях до профілю користувача у форматі UNC \\\\сервер\\спільний_ресурс\\" - -msgid "Path to the IPA CA certificate" -msgstr "Шлях до сертифіката CA IPA" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Умовні правила переспрямування для окремого сервера. Встановіть значення " -"«none» для вимикання переспрямовувача загального рівня для цієї зони. Якщо " -"ви встановите це значення, умовні переспрямовувачі зони не братимуться до " -"уваги." - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Окремі переспрямовувачі для серверів. Нетиповий порт можна вказати для " -"кожного переспрямовувача за допомогою стандартної конструкції «IP_АДРЕСА " -"port ПОРТ»" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Умовні правила переспрямування для окремої зони. Встановіть значення «none» " -"для вимикання переспрямовувача загального рівня для цієї зони. Якщо ви " -"встановите це значення, умовні переспрямовувачі зони не братимуться до уваги." - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Переспрямовувачі для окремої зони. Можна вказати нетиповий порт для кожного " -"переспрямовувача у стандартному форматі: «IP_АДРЕСА port ПОРТ»" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" -"Проміжок часу, по завершенню якого кількість помилок буде скинуто (у " -"секундах)" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Проміжок часу, протягом якого діятиме блокування (у секундах)" - -msgid "Permission" -msgstr "Права доступу" - -msgid "Permission ACI grants access to" -msgstr "ACI прав доступу надає доступ до" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "Доступ заборонено: %(file)s" - -msgid "Permission flags" -msgstr "Прапорці прав доступу" - -msgid "Permission name" -msgstr "Назва прав доступу" - -msgid "Permission settings" -msgstr "Параметри прав доступу" - -msgid "Permission type" -msgstr "Тип прав доступу" - -msgid "Permission value" -msgstr "Значення прав доступу" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "Не можна змінювати чи вилучати права доступу з невідомим прапорцем %s" - -msgid "Permissions" -msgstr "Права доступу" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" -"Права доступу, які слід надати (read, write). Типовими є права доступу write." - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "Права доступу, які слід надати (read, write, add, delete, all)" - -msgid "Permitted Encryption Types" -msgstr "Дозволені типи шифрування" - -msgid "Permitted to have certificates issued" -msgstr "Дозволено мати випущений сертифікат" - -msgid "Ping a remote server." -msgstr "Перевірити луна-імпульсом (пінгом) віддалений сервер." - -msgid "Platform" -msgstr "Платформа" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Будь ласка, виберіть тип запису ресурсу DNS, який слід додати" - -msgid "Please specify forwarders." -msgstr "Будь ласка, вкажіть переспрямовувачі." - -msgid "Please try the following options:" -msgstr "Будь ласка, спробуйте такі параметри:" - -msgid "Policy" -msgstr "Правила" - -msgid "Port" -msgstr "Порт" - -msgid "Positional argument" -msgstr "Позиційний аргумент" - -msgid "Positional arguments" -msgstr "Обов’язкові аргументи" - -msgid "Pre-authentication is required for the service" -msgstr "Для роботи з цією службою потрібне попереднє розпізнавання" - -msgid "Pre-shared password" -msgstr "Попередньо оприлюднений пароль" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Стандартний профіль «%(profile_id)s» не може бути вилучено" - -msgid "Preference" -msgstr "Пріоритет" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" -"Пріоритет цього обмінника. Записи з меншим значенням мають вищий пріоритет." - -msgid "Preferred Language" -msgstr "Бажана мова" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Префікс, за яким визначається тип ACI (permission, delegation, selfservice, " -"none)" - -msgid "Preserved user" -msgstr "Зарезервований користувач" - -msgid "Preserved users" -msgstr "Зарезервовані користувачі" - -msgid "Prev" -msgstr "Назад" - -msgid "Primary RID base" -msgstr "Головна основа RID" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" -"Основний діапазон RID і вторинний діапазон RID не повинні перекриватися" - -msgid "Primary key only" -msgstr "Лише первинний ключ" - -msgid "Principal" -msgstr "Реєстраційний запис" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" -"Не вдалося виконати розпізнавання для реєстраційного запису %(principal)s: " -"%(message)s" +"\n" +"Топологія реплікації у суфіксі «%(suffix)s» є нез’єднаною:\n" +"%(errors)s" #, python-format msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" -"Реєстраційному запису «%(principal)s» не дозволено використовувати службу " -"сертифікації «%(ca)s» із профілем «%(profile_id)s» для видання сертифікатів." - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" -"Реєстраційний запис «%s» у альтернативній назві об’єкта не відповідає " -"запитаному реєстраційному запису" - -msgid "Principal alias" -msgstr "Псевдонім реєстраційного запису" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Реєстраційний запис для цього сертифіката (наприклад HTTP/test.example.com)" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" -"Реєстраційний запис вказано у формі, відмінній від користувач@ОБЛАСТЬ: " -"«%(principal)s»" - -msgid "Principal name" -msgstr "Назва реєстраційного запису" - -msgid "Print as little as possible" -msgstr "Виводити мінімум даних" - -msgid "Print debugging information" -msgstr "Вивести діагностичні дані" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Вивести записи у формі, у якій вони зберігаються на сервері. Стосується лише " -"формату виведення даних." - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Вивести дані XML-RPC без обробки у режимі GSSAPI" - -msgid "Priority" -msgstr "Пріоритет" - -msgid "Priority (order)" -msgstr "Пріоритетність (порядок)" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Пріоритет правил (більше число — нижчий пріоритет)" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "Пріоритет правила (більше число — нижчий пріоритет)" - -msgid "Private key specified multiple times" -msgstr "Закритий ключ вказано декілька разів" - -msgid "Privilege" -msgstr "Привілей" - -msgid "Privilege Settings" -msgstr "Параметри привілеїв" - -msgid "Privilege Withdrawn" -msgstr "Привілей відкликано" - -msgid "Privilege description" -msgstr "Опис привілею" - -msgid "Privilege name" -msgstr "Назва привілею" - -msgid "Privileges" -msgstr "Привілеї" - -msgid "Profile" -msgstr "Профіль" - -msgid "Profile ID" -msgstr "Ід. профілю" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"Ідентифікатор профілю, «%(cli_value)s», не збігається із вказаним у даних " -"профілю, «%(file_value)s»" - -msgid "Profile ID for referring to this profile" -msgstr "Ідентифікатор профілю для посилання на цей профіль" - -msgid "Profile category" -msgstr "Категорія профілів" - -msgid "Profile category the ACL applies to" -msgstr "Категорія профілів, до якої застосовується ACL" - -msgid "Profile configuration" -msgstr "Налаштування профілю" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Налаштування профілів збережено до файла «%(file)s»" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "У даних профілю profileId вказано декілька разів: %(values)s" - -msgid "Profile description" -msgstr "Опис профілю" - -msgid "Profiles" -msgstr "Профілі" - -msgid "Prompt for LDAP password" -msgstr "Запит щодо пароля LDAP" - -msgid "Prompt for the username" -msgstr "Запит щодо імені користувача" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" -"Запитувати ім’я користувача, якщо із сертифікатом пов’язано декілька профілів" - -msgid "Prompt to set the user password" -msgstr "Надіслати запит щодо встановлення пароля користувача" - -msgid "Prospective" -msgstr "Очікуваний" - -msgid "Protocol" -msgstr "Протокол" - -msgid "Provisioning" -msgstr "Передбачення" - -msgid "Public Key" -msgstr "Відкритий ключ" - -msgid "Public key" -msgstr "Відкритий ключ" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "Відкритий ключ можна вказувати лише для асиметричного сховища" - -msgid "Public key specified multiple times" -msgstr "Відкритий ключ вказано декілька разів" - -msgid "Public key:" -msgstr "Відкритий ключ:" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" -"Ширина QR-коду перевищує розмір термінала для виведення. Будь ласка, змініть " -"розміри вашого термінала." - -msgid "Quantity" -msgstr "Кількість" - -msgid "Query current Domain Level." -msgstr "Надіслати запити щодо поточного рівня домену." - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"За запитом повернуто більше за налаштоване максимальне значення результатів. " -"Показано лише перші ${counter} результатів." - -msgid "Quick Links" -msgstr "Швидкі посилання" - -msgid "Quiet mode. Only errors are displayed." -msgstr "«Мовчазний» режим. Буде показано лише повідомлення про помилки." - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "RADIUS Proxy Server Settings" -msgstr "Параметри проксі-сервера RADIUS" - -msgid "RADIUS Server" -msgstr "Сервер RADIUS" - -msgid "RADIUS Servers" -msgstr "Сервери RADIUS" - -msgid "RADIUS max life" -msgstr "Макс. строк дії RADIUS" - -msgid "RADIUS max renew" -msgstr "Макс. вік поновлення RADIUS" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка RADIUS (у секундах)" - -msgid "RADIUS proxy configuration" -msgstr "Налаштування проксі RADIUS" - -msgid "RADIUS proxy server" -msgstr "Проксі-сервер RADIUS" - -msgid "RADIUS proxy server name" -msgstr "Назва проксі-сервера RADIUS" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "Проксі-сервер RADIUS із назвою «%s» вже існує" - -msgid "RADIUS proxy servers" -msgstr "Проксі-сервери RADIUS" - -msgid "RADIUS proxy username" -msgstr "Ім’я користувача проксі-сервера RADIUS" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " -"секундах)" - -msgid "REST API is not logged in." -msgstr "Вхід до програмного інтерфейсу REST не виконано." - -msgid "REVOKED" -msgstr "ВІДКЛИКАНО" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "Область Kerberos, сумісна з RFC4120" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" -"RFC822Name не збігається зі жодною адресою електронної пошти користувача" - -msgid "RP record" -msgstr "Запис RP" - -msgid "RPC command used to log the current user out of their session." -msgstr "" -"Команда RPC, яка використовується для завершення сеансу поточного " -"користувача." - -msgid "RRSIG Algorithm" -msgstr "Алгоритм RRSIG" - -msgid "RRSIG Key Tag" -msgstr "Мітка ключа RRSIG" - -msgid "RRSIG Labels" -msgstr "Мітки RRSIG" - -msgid "RRSIG Original TTL" -msgstr "Початковий TTL RRSIG" - -msgid "RRSIG Signature" -msgstr "Підпис RRSIG" - -msgid "RRSIG Signature Expiration" -msgstr "Строк дії підпису RRSIG" - -msgid "RRSIG Signature Inception" -msgstr "Початок підпису RRSIG" - -msgid "RRSIG Signer's Name" -msgstr "Ім’я підписника RRSIG" - -msgid "RRSIG Type Covered" -msgstr "Об’єднувані типи RRSIG" - -msgid "RRSIG record" -msgstr "Запис RRSIG" - -msgid "Random password" -msgstr "Випадковий пароль" - -msgid "Range Settings" -msgstr "Параметри діапазону" - -msgid "Range name" -msgstr "Назва діапазону" - -msgid "Range size" -msgstr "Розмір діапазону" - -msgid "Range type" -msgstr "Тип діапазону" - -#, python-format -msgid "Raw %s records" -msgstr "Необроблені записи %s" - -msgid "Raw A records" -msgstr "Прості записи A" - -msgid "Raw A6 records" -msgstr "Прості записи A6" - -msgid "Raw AAAA records" -msgstr "Прості записи AAAA" - -msgid "Raw AFSDB records" -msgstr "Прості записи AFSDB" - -msgid "Raw APL records" -msgstr "Прості записи APL" - -msgid "Raw CERT records" -msgstr "Прості записи CERT" - -msgid "Raw CNAME records" -msgstr "Прості записи CNAME" - -msgid "Raw DHCID records" -msgstr "Прості записи DHCID" - -msgid "Raw DLV records" -msgstr "Прості записи DLV" - -msgid "Raw DNAME records" -msgstr "Прості записи DNAME" - -msgid "Raw DNSKEY records" -msgstr "Прості записи DNSKEY" - -msgid "Raw DS records" -msgstr "Прості записи DS" - -msgid "Raw HIP records" -msgstr "Прості записи HIP" - -msgid "Raw IPSECKEY records" -msgstr "Прості записи IPSECKEY" - -msgid "Raw KEY records" -msgstr "Прості записи KEY" - -msgid "Raw KX records" -msgstr "Прості записи KX" - -msgid "Raw LOC records" -msgstr "Прості записи LOC" - -msgid "Raw MX records" -msgstr "Прості записи MX" - -msgid "Raw NAPTR records" -msgstr "Прості записи NAPTR" - -msgid "Raw NS records" -msgstr "Прості записи NS" - -msgid "Raw NSEC records" -msgstr "Прості записи NSEC" - -msgid "Raw NSEC3 records" -msgstr "Прості записи NSEC3" - -msgid "Raw PTR records" -msgstr "Прості записи PTR" - -msgid "Raw RP records" -msgstr "Прості записи RP" - -msgid "Raw RRSIG records" -msgstr "Прості записи RRSIG" - -msgid "Raw SIG records" -msgstr "Прості записи SIG" - -msgid "Raw SPF records" -msgstr "Прості записи SPF" - -msgid "Raw SRV records" -msgstr "Прості записи SRV" - -msgid "Raw SSHFP records" -msgstr "Прості записи SSHFP" - -msgid "Raw TA records" -msgstr "Прості записи TA" - -msgid "Raw TKEY records" -msgstr "Прості записи TKEY" - -msgid "Raw TLSA records" -msgstr "Прості записи TLSA" - -msgid "Raw TSIG records" -msgstr "Прості записи TSIG" - -msgid "Raw TXT records" -msgstr "Прості записи TXT" - -msgid "Raw target filter" -msgstr "Фільтр призначення без обробки" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" -"Необроблене значення для запису DNS вже було встановлено за допомогою " -"параметра «%(name)s»" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Відновлено довіру до домену «%(value)s»" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" -"Повторно синхронізувати локальний кеш іменування із сервером іменування." - -msgid "Realm Domains" -msgstr "Домени області" - -msgid "Realm administrator password should be specified" -msgstr "Має бути вказано пароль адміністратора області" - -msgid "Realm domains" -msgstr "Домени області" - -msgid "Realm name" -msgstr "Назва області" - -msgid "Realm-domain mismatch" -msgstr "Невідповідність між областю і доменом" - -msgid "Reason" -msgstr "Підстава" - -msgid "Reason for Revocation" -msgstr "Причина відкликання" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Причина відкликання сертифіката (0-10)" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" -"Причина відкликання сертифіката (0-10). Введіть «ipa help cert», щоб " -"ознайомитися із подробицями причин відкликання. " - -msgid "Rebuild auto membership" -msgstr "Повторне збирання правил автоматичної участі" - -msgid "Rebuild auto membership." -msgstr "Повторне збирання правил автоматичної участі." - -msgid "Rebuild membership for all members of a grouping" -msgstr "Повторне збирання правил участі для усіх учасників угрупування" - -msgid "Rebuild membership for specified hosts" -msgstr "Повторне збирання правил участі для вказаних вузлів" - -msgid "Rebuild membership for specified users" -msgstr "Повторне збирання правил участі для вказаних користувачів" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "Перевищено рекомендовану максимальну кількість узгоджень на репліку" - -msgid "Record Settings" -msgstr "Параметри запису" - -msgid "Record Type" -msgstr "Тип запису" - -msgid "Record creation failed." -msgstr "Спроба створення запису зазнала невдачі." - -msgid "Record data" -msgstr "Дані запису" - -msgid "Record name" -msgstr "Назва запису" - -msgid "Record not found." -msgstr "Запис не знайдено." - -msgid "Record type" -msgstr "Тип запису" - -msgid "Records" -msgstr "Записи" - -msgid "Records for DNS Zone" -msgstr "Записи зони DNS" - -msgid "Redirection" -msgstr "Переспрямування" - -msgid "Redirection to PTR record" -msgstr "Переспрямовування на запис PTR" - -msgid "Refresh" -msgstr "Оновити" - -msgid "Refresh list of the domains associated with the trust" -msgstr "Освіжити список доменів, пов’язаних з правилом довіри" - -msgid "Refresh the page." -msgstr "Оновити сторінку." - -msgid "Register to the entitlement system." -msgstr "Зареєструватися у системі іменування." - -msgid "Registration password" -msgstr "Пароль для реєстрації" - -msgid "Regular Expression" -msgstr "Формальний вираз" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"Назва відносного запису «%(record)s» містить як суфікс назву зони " -"«%(zone)s», що дає повну назву домену «%(fqdn)s». Зазвичай, такі назви є " -"помилковими, спричиненими пропущеною крапкою наприкінці специфікації назви." - -msgid "Relative weight for entries with the same priority." -msgstr "Відносна вага для записів із однаковою пріоритетністю." - -msgid "Relative weight for server services (counts per location)" -msgstr "Відносна вага служб для сервера (обчислюється для окремого місця)" - -msgid "Reload current settings from the server." -msgstr "Перезавантажити поточні параметри з сервера." - -msgid "Reload the browser." -msgstr "Перезавантажити переглядач." - -msgid "Remote IPA server hostname" -msgstr "Назва вузла віддаленого сервера IPA" - -msgid "Remote server name" -msgstr "Назва віддаленого сервера" - -msgid "Remove" -msgstr "Вилучити" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "Вилучити записи A, AAAA, SSHFP і PTR вузлів, керованих DNS IPA" - -msgid "Remove CA ACLs" -msgstr "Вилучити ACL служб сертифікації" - -msgid "Remove CAs from a CA ACL." -msgstr "Вилучити CA з ACL CA." - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "Вилучити служби сертифікації з ACL CA «${primary_key}»" - -msgid "Remove DNS forward zones" -msgstr "Вилучити зони переспрямовування DNS" - -msgid "Remove DNS resource records" -msgstr "Вилучити записи ресурсів DNS" - -msgid "Remove DNS zones" -msgstr "Вилучити зони DNS" - -msgid "Remove HBAC rules" -msgstr "Вилучити правила HBAC" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "Вилучити службу HBAC «${primary_key}» з груп служб HBAC" - -msgid "Remove HBAC service groups" -msgstr "Вилучити групи служб HBAC" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Вилучити групи служб HBAC з правила HBAC «${primary_key}»" - -msgid "Remove HBAC services" -msgstr "Вилучити служби HBAC" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "Вилучити служби HBAC з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Вилучити служби HBAC з групи служб HBAC «${primary_key}»" - -msgid "Remove ID ranges" -msgstr "Вилучити діапазони ідентифікаторів" - -msgid "Remove ID views" -msgstr "Вилучити перегляди ідентифікаторів" - -msgid "Remove IPA locations" -msgstr "Вилучити місця IPA" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "Вилучити сервери IPA з місця IPA «${primary_key}»" - -msgid "Remove Kerberos Alias" -msgstr "Вилучити псевдонім Kerberos" - -msgid "Remove OTP tokens" -msgstr "Вилучити ключі OTP" - -msgid "Remove Permission" -msgstr "Вилучити права доступу" - -msgid "Remove RADIUS servers" -msgstr "Вилучити сервери RADIUS" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи RunAs з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи користувачів RunAs з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "Вилучити користувачів RunAs з правила sudo «${primary_key}»" - -msgid "Remove a manager to the stage user entry" -msgstr "Вилучити керування із запису користувача етапу" - -msgid "Remove a manager to the user entry" -msgstr "Вилучити керування із запису користувача" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" -"Вилучити права доступу до делегування доступу для окремих зон " -"переспрямовування." - -msgid "Remove a permission for per-zone access delegation." -msgstr "Вилучити права доступу до надання доступу до окремих зон." - -msgid "Remove all principals in this realm" -msgstr "Вилучити всі реєстраційні записи у цій області" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи дозволу команд sudo з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "Вилучити команди дозволу sudo з правила sudo «${primary_key}»" - -msgid "Remove an option from Sudo Rule." -msgstr "Вилучити пункт з правила sudo." - -msgid "Remove auto membership rules" -msgstr "Вилучити правила автоматичної участі" - -msgid "Remove automount keys" -msgstr "Вилучити ключі автоматичного монтування" - -msgid "Remove automount locations" -msgstr "Вилучити місця автоматичного монтування" - -msgid "Remove automount maps" -msgstr "Вилучити карти автоматичного монтування" - -msgid "Remove certificate authorities" -msgstr "Вилучити служби сертифікації" - -msgid "Remove certificate hold" -msgstr "Вилучити затримання сертифіката" - -msgid "Remove certificate identity mapping rules" -msgstr "Вилучити правила прив'язки профілів сертифікації" - -msgid "Remove certificate mapping data" -msgstr "Вилучити дані прив'язки сертифіката" - -msgid "Remove certificate profiles" -msgstr "Вилучити профілі сертифікації" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "Вилучити профілі сертифікації з ACL CA «${primary_key}»" - -msgid "Remove certificates from a service" -msgstr "Вилучити сертифікати із запису служби" - -msgid "Remove certificates from host entry" -msgstr "Вилучити сертифікати із запису вузла" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "Вилучити команди і групи команд sudo, яких стосується правило sudo." - -msgid "Remove conditions from an automember rule." -msgstr "Вилучити умови з правила автоматичної участі." - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "Вилучити типову (резервну) групу для невідповідних записів." - -msgid "Remove delegations" -msgstr "Вилучити уповноваження" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи заборони команд sudo з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "Вилучити команди заборони sudo з правила sudo «${primary_key}»" - -msgid "Remove domains" -msgstr "Вилучити домени" - -msgid "Remove entries from DNS" -msgstr "Вилучити записи з DNS" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "Вилучити умови виключення з правила «${primary_key}»" - -msgid "Remove from CRL" -msgstr "Вилучити з CRL" - -msgid "Remove group ID overrides" -msgstr "Вилучити перевизначення ідентифікаторів груп" - -msgid "Remove group for Sudo to execute as." -msgstr "Вилучити групу виконання з запису sudo." - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" -"Вилучити групи з керівників учасниками для групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" -"Вилучити групи з керівників учасниками для групи користувачів " -"«${primary_key}»" - -msgid "Remove hold" -msgstr "Вилучити затримання" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Вилучити вузол «${primary_key}» з правил HBAC" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "Вилучити вузол «${primary_key}» з груп вузлів" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "Вилучити вузол «${primary_key}» з мережевих груп" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "Вилучити вузол «${primary_key}» з ролей" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "Вилучити вузол «${primary_key}» з правил sudo" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Вилучити групу вузлів «${primary_key}» з правил HBAC" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "Вилучити групу вузлів «${primary_key}» з груп вузлів" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "Вилучити групу вузлів «${primary_key}» з мережевих груп" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "Вилучити групу вузлів «${primary_key}» з правил sudo" - -msgid "Remove host groups" -msgstr "Вилучити групи вузлів" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Вилучити групи вузлів з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Вилучити групи вузлів з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" -"Вилучити групи вузлів з прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "Вилучити групи вузлів з групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "Вилучити групи вузлів з мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "Вилучити групи вузлів з ролі «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи вузлів з правила sudo «${primary_key}»" - -msgid "Remove hosts" -msgstr "Вилучити вузли" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Вилучити вузли та групи вузлів, яких стосується правило sudo." - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "Вилучити вузли з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "Вилучити вузли з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "Вилучити вузли з прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "Вилучити вузли з групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "Вилучити вузли з мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "Вилучити вузли з ролі «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "Вилучити вузли з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "Вилучити вузол керування вузлами «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "Вилучити службу керування вузлами «${primary_key}»" - -msgid "Remove hosts that can manage this host." -msgstr "Вилучити записи вузлів, які можуть керувати цим вузлом." - -msgid "Remove hosts that can manage this service." -msgstr "Вилучити вузли, які можуть керувати цією службою." - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "Вилучити умови включення з правила «${primary_key}»" - -msgid "Remove information about the domain associated with the trust." -msgstr "Вилучити дані щодо домену, пов’язаного з цим правилом довіри." - -msgid "Remove member from a named service delegation rule." -msgstr "Вилучити запис учасника із іменованого правила делегування служб." - -msgid "Remove member from a named service delegation target." -msgstr "Вилучити запис учасника із іменованого призначення делегування служб." - -msgid "Remove member from a named service delegation." -msgstr "Вилучити запис із делегування іменованої служби." - -msgid "Remove members from Sudo Command Group." -msgstr "Вилучити учасників з групи команд sudo." - -msgid "Remove members from a group." -msgstr "Вилучити учасників з групи." - -msgid "Remove members from a hostgroup." -msgstr "Вилучити записи з групи вузлів." - -msgid "Remove members from a netgroup." -msgstr "Вилучити учасників з мережевої групи." - -msgid "Remove members from a permission." -msgstr "Вилучити учасників із запису права доступу." - -msgid "Remove members from a privilege" -msgstr "Вилучити учасників з запису привілеїв" - -msgid "Remove members from a role." -msgstr "Вилучити учасників з запису ролі." - -msgid "Remove members from a vault." -msgstr "Вилучити записи учасників сховища." - -msgid "Remove members from an HBAC service group." -msgstr "Вилучити учасників з групи служб HBAC." - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "Вилучити мережеву групу «${primary_key}» з мережевих груп" - -msgid "Remove netgroups" -msgstr "Вилучити мережеві групи" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "Вилучити мережеві групи з мережевої групи «${primary_key}»" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" -"Вилучити одну або декілька прив’язок сертифікатів із запису користувача " -"етапу." - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" -"Вилучити одну або декілька прив’язок сертифікатів із запису користувача." - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Вилучити один або декілька сертифікатів запису idoverrideuser" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Вилучити один або декілька сертифікатів запису користувача етапу" - -msgid "Remove one or more certificates to the user entry" -msgstr "Вилучити один або декілька сертифікатів запису користувача" - -msgid "Remove orphan automember rules" -msgstr "Вилучити осиротілі правила автоматичної участі" - -msgid "Remove owners from a vault container." -msgstr "Вилучити записи власників із контейнера сховища." - -msgid "Remove owners from a vault." -msgstr "Вилучити записи власників сховища." - -msgid "Remove password policies" -msgstr "Вилучити правила паролів" - -msgid "Remove permissions" -msgstr "Вилучити дозволи" - -msgid "Remove permissions from a privilege." -msgstr "Вилучити права доступу з привілею." - -msgid "Remove preserved users" -msgstr "Вилучити збережених користувачів" - -msgid "Remove principal alias from a host entry" -msgstr "Вилучити псевдонім реєстраційного запису із запису вузла" - -msgid "Remove principal alias from a service" -msgstr "Вилучити альтернативну назву реєстраційного запису зі служби" - -msgid "Remove principal alias from the stageuser entry" -msgstr "Вилучити псевдонім реєстраційного запису із запису користувача етапу" - -msgid "Remove principal alias from the user entry" -msgstr "Вилучити псевдонім реєстраційного запису із запису користувача" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "Вилучити привілеї «${primary_key}» з дозволів" - -msgid "Remove privileges" -msgstr "Вилучити привілеї" - -msgid "Remove privileges from a role." -msgstr "Вилучити привілеї з запису ролі." - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "Вилучити привілеї з дозволів «${primary_key}»" - -msgid "Remove profiles from a CA ACL." -msgstr "Вилучити профілі із CA ACL." - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "Вилучити роль «${primary_key}» з привілеїв" - -msgid "Remove roles" -msgstr "Вилучити ролі" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "Вилучити ролі з привілеїв «${primary_key}»" - -msgid "Remove self service permissions" -msgstr "Вилучити дозволи на самообслуговування" - -msgid "Remove selinux user maps" -msgstr "Вилучити прив'язки користувачів selinux" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "Вилучити службу «${primary_key}» з ролей" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Вилучити служби та групи служб з правила HBAC." - -msgid "Remove services" -msgstr "Вилучити служби" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "Вилучити служби з ACL CA «${primary_key}»" - -msgid "Remove services from a CA ACL." -msgstr "Вилучити служби з CA ACL." - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "Вилучити служби зі списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "Вилучити служби зі списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Вилучити служби з ролі «${primary_key}»" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Вилучити служби з групи користувачів «${primary_key}»" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "Вилучити вузли джерела та групи вузлів з правила HBAC." - -msgid "Remove stage users" -msgstr "Вилучити користувачів етапів" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "Вилучити команду sudo «${primary_key}» з груп команд sudo" - -msgid "Remove sudo command groups" -msgstr "Вилучити групи команд sudo" - -msgid "Remove sudo commands" -msgstr "Вилучити команди sudo" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "Вилучити команди sudo з групи команд sudo «${primary_key}»" - -msgid "Remove sudo options" -msgstr "Вилучити параметри sudo" - -msgid "Remove sudo rules" -msgstr "Вилучити правила sudo" - -msgid "Remove target from a named service delegation rule." -msgstr "Вилучити ціль із іменованого правила делегування служб." - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Вилучити вузли призначення та групи вузлів з CA ACL." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Вилучити вузли призначення та групи вузлів з правила HBAC." - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" -"Вилучити вузли призначення та групи вузлів з правила карти користувачів " -"SELinux." - -msgid "Remove topology segments" -msgstr "Вилучити елементи топології" - -msgid "Remove trusts" -msgstr "Вилучити записи довіри" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Вилучити користувача «${primary_key}» з правил HBAC" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "Вилучити користувача «${primary_key}» з мережевих груп" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "Вилучити користувача «${primary_key}» з ролей" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "Вилучити користувача «${primary_key}» з правил sudo" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "Вилучити користувача «${primary_key}» з груп користувачів" - -msgid "Remove user ID overrides" -msgstr "Вилучити перевизначення ідентифікаторів користувачів" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" -"Вилучити перевизначення ідентифікатора користувача з групи користувачів " -"«${primary_key}»" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Вилучити групу користувачів «${primary_key}» зі правил HBAC" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "Вилучити групу користувачів «${primary_key}» зі списку мережевих груп" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "Вилучити групу користувачів «${primary_key}» зі списку ролей" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Вилучити групу користувачів «${primary_key}» зі правил sudo" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" -"Вилучити групу користувачів «${primary_key}» зі списку груп користувачів" - -msgid "Remove user groups" -msgstr "Вилучити групи користувачів" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Вилучити групи користувачів з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Вилучити групи користувачів з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" -"Вилучити групи користувачів з прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" -"Вилучити групи користувачів зі списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Вилучити групи користувачів з мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" -"Вилучити групи користувачів зі списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Вилучити групи користувачів з ролі «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи користувачів з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "Вилучити групи користувачів з групи користувачів «${primary_key}»" - -msgid "Remove users" -msgstr "Вилучити користувачів" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Вилучити записи користувачів та груп, яких стосується правило sudo." - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" -"Вилучити користувачів та групи для виконання команд sudo від їхнього імені." - -msgid "Remove users and groups from a CA ACL." -msgstr "Вилучити користувачів або групи з CA ACL." - -msgid "Remove users and groups from an HBAC rule." -msgstr "Вилучити користувачів і групи з правила HBAC." - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "Вилучити користувачів і групи з правила карти користувачів SELinux." - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "Вилучити користувачів з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Вилучити користувачів з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" -"Вилучити користувачів з прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" -"Вилучити користувачів з керівників учасниками для групи вузлів " -"«${primary_key}»" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" -"Вилучити користувачів з керівників учасниками для групи користувачів " -"«${primary_key}»" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "Вилучити користувачів зі списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "Вилучити користувачів з мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "Вилучити користувачів зі списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "Вилучити користувачів з ролі «${primary_key}»" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "Вилучити користувачів з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "Вилучити користувачів з групи користувачів «${primary_key}»" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "Вилучити ключ керування записами користувачів OTP «${primary_key}»" - -msgid "Remove users that can manage members of this group." -msgstr "" -"Вилучити записи користувачів, які можуть керувати учасниками цієї групи." - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" -"Вилучити записи користувачів, які можуть керувати учасниками цієї групи " -"вузлів." - -msgid "Remove users that can manage this token." -msgstr "Вилучити записи користувачів, які можуть керувати цим жетоном." - -msgid "Remove vaults" -msgstr "Вилучити сховища" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Вилучити псевдоніми із запису вузла «%(value)s»" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Вилучено псевдоніми із запису користувача етапу «%(value)s»" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Вилучити псевдоніми із запису користувача «%(value)s»" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Вилучено псевдоніми реєстраційного запису служби «%(value)s»" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Вилучено прив’язки сертифікатів до запису користувача «%(value)s»" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Вилучено сертифікати із запису вузла «%(value)s»" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Вилучено сертифікати із запису idoverrideuser «%(value)s»" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Вилучено сертифікати із реєстраційного запису служби «%(value)s»" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Вилучено сертифікати із запису користувача етапу «%(value)s»" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Вилучено сертифікати із запису користувача «%(value)s»" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Вилучено умови з «%(value)s»" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Вилучити типову (резервну) групу для автоматичної участі «%(value)s»" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Дані щодо довіреного домену «%(value)s» вилучено" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "З правила sudo «%(rule)s» вилучено параметр «%(option)s»" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Вилучено системні права доступу «%(value)s»" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "Вилучаємо %(servers)s з топології реплікації, будь ласка, зачекайте…" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Вилучення реєстраційного запису %s\n" - -msgid "Rename" -msgstr "Перейменувати" - -msgid "Rename an ACI." -msgstr "Перейменувати запис ACI." - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Перейменувати об’єкт %(ldap_obj_name)s" - -msgid "Rename the DNS resource record object" -msgstr "Перейменувати об’єкт запису ресурсу DNS" - -msgid "Rename the Group ID override object" -msgstr "Перейменувати об’єкт перевизначення ідентифікатора групи" - -msgid "Rename the ID View object" -msgstr "Перейменувати об’єкт перегляду ідентифікатора" - -msgid "Rename the OTP token object" -msgstr "Перейменувати об’єкт жетона OTP" - -msgid "Rename the RADIUS proxy server object" -msgstr "Перейменувати об’єкт проксі-сервера RADIUS" - -msgid "Rename the User ID override object" -msgstr "Перейменувати об’єкт перевизначення ідентифікатора користувача" - -msgid "Rename the automount key object" -msgstr "Перейменувати об’єкт ключа автоматичного монтування" - -msgid "Rename the group object" -msgstr "Перейменувати об’єкт групи" - -msgid "Rename the permission object" -msgstr "Перейменувати об’єкт права доступу" - -msgid "Rename the privilege object" -msgstr "Перейменувати об’єкт привілеїв" - -msgid "Rename the role object" -msgstr "Перейменувати об’єкт ролі" - -msgid "Rename the stage user object" -msgstr "Перейменувати об’єкт користувача етапу" - -msgid "Rename the user object" -msgstr "Перейменувати об’єкт користувача" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI перейменовано на «%(value)s»" - -msgid "Renewal master for IPA certificate authority" -msgstr "Основний сервер відновлення для центру сертифікації IPA" - -msgid "Replacement" -msgstr "Заміна" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"Репліка є активним основним сервером ключів DNSSEC. Вилучення може зашкодити " -"вашій системі DNS. Будь ласка, спочатку вимкніть або замініть основний " -"сервер ключів DNSSEC." - -msgid "Replication agreement enabled" -msgstr "Увімкнено угоду щодо реплікації" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "Не знайдено угоди щодо реплікації для %(hostname)s" - -msgid "Replication configuration" -msgstr "Налаштування реплікації" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Оновлення реплікації для сегмента: надіслано запит щодо «%(pkey)s»." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "Топологія реплікації суфікса «%(suffix)s» містить помилки." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "Топологія реплікації суфікса «%(suffix)s» у порядку." - -msgid "Report PKINIT status on the IPA masters" -msgstr "Звіт щодо стану PKINIT на основних елементах IPA" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" -"Надіслати запит щодо повної повторної ініціалізації вузла, щоб отримує дані " -"з іншого вузла." - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "Помилка під час виконання запиту, стан %(status)s: %(reason)s" - -msgid "Request id" -msgstr "Ід. запиту" - -msgid "Request is missing \"method\"" -msgstr "У запиті не вказано метод (\"method\")" - -msgid "Request is missing \"params\"" -msgstr "У запиті не вказано параметри (\"params\")" - -msgid "Request must be a dict" -msgstr "Запит має належати до типу словника (dict)" - -msgid "Request status" -msgstr "Стан запиту" - -msgid "Required" -msgstr "Обов’язкове" - -msgid "Required field" -msgstr "Обов’язкове поле" - -msgid "Requires pre-authentication" -msgstr "Вимагає попереднього розпізнавання" - -msgid "Reset" -msgstr "Скинути" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "Відновити типові правила квитків Kerberos." - -msgid "Reset OTP" -msgstr "Скинути ОП" - -msgid "Reset One-Time Password" -msgstr "Скинути одноразовий пароль" - -msgid "Reset Password" -msgstr "Скинути пароль" - -msgid "Reset Password and Log in" -msgstr "Скинути пароль і увійти" - -msgid "Reset your password." -msgstr "Скинути ваш пароль." - -msgid "Resolve a host name in DNS." -msgstr "Визначити назву вузла у DNS." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "Визначити назву вузла у DNS. (Застаріле)" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" -"Визначати ідентифікатори безпеки користувачів та груп у довірених доменах" - -msgid "Response from CA was not valid JSON" -msgstr "Відповідь від CA не була коректним кодом JSON" - -msgid "Restore" -msgstr "Відновити" - -msgid "Result" -msgstr "Результат" - -msgid "Result of simulation" -msgstr "Результат імітації" - -msgid "Result of the command" -msgstr "Результат виконання команди" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Список результатів обрізано. Спробуйте точніше визначити критерії пошуку." - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "Результати мають містити лише атрибут основного ключа («%s»)" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "Результати мають містити лише атрибут основного ключа («anchor»)" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "Результати мають містити лише атрибут основного ключа («сертифікат»)" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "Результати мають містити лише атрибут основного ключа («cn»)" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "Результати мають містити лише атрибут основного ключа («command»)" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" -"Результати мають містити лише атрибут основного ключа («delegation-name»)" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "Результати мають містити лише атрибут основного ключа («domain»)" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "Результати мають містити лише атрибут основного ключа («group»)" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "Результати мають містити лише атрибут основного ключа («group-name»)" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" -"Результати мають містити лише атрибут основного ключа («hostgroup-name»)" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "Результати мають містити лише атрибут основного ключа («hostname»)" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "Результати мають містити лише атрибут основного ключа («id»)" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "Результати мають містити лише атрибут основного ключа («location»)" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "Результати мають містити лише атрибут основного ключа («login»)" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "Результати мають містити лише атрибут основного ключа («map»)" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "Результати мають містити лише атрибут основного ключа («name»)" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "Результати мають містити лише атрибут основного ключа («principal»)" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "Результати мають містити лише атрибут основного ключа («realm»)" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "Результати мають містити лише атрибут основного ключа («service»)" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" -"Результати мають містити лише атрибут основного ключа («suydocmdgroup-name»)" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" -"Результати мають містити лише атрибут основного ключа («sudorule-name»)" - -msgid "Retries" -msgstr "Кількість спроб" - -msgid "Retrieve a data from a vault." -msgstr "Отримати дані зі сховища." - -msgid "Retrieve an existing certificate." -msgstr "Отримати вже створений сертифікат." - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Отримати і вивести всі атрибути з сервера. Стосується лише виводу команд." - -msgid "Retrieve current keys without changing them" -msgstr "Отримувати поточні ключі без внесення до них змін" - -msgid "Retrieve data from a vault." -msgstr "Отримати дані зі сховища." - -msgid "Retrieve the entitlement certs." -msgstr "Отримати сертифікати іменування." - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Отримано дані зі сховища «%(value)s»" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Спроба отримання ланцюжка сертифікації CA зазнала невдачі: %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Спроба отримання стану CA зазнала невдачі, стан %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" -"Спроба отримання даних щодо стану служби сертифікації зазнала невдачі: %s" - -msgid "Retry" -msgstr "Повторити" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" -"Повторюємо спробу з використанням способу отримання сховища ключів, який " -"використовувався до версії 4.0…\n" - -msgid "Return command defaults" -msgstr "Повернути типові параметри команди" - -msgid "Return to the main page and retry the operation" -msgstr "Повернутися до головної сторінки і повторити спробу" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" -"Зворотний запис для IP-адреси %(ip)s вже існує у зворотній зоні %(zone)s." - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" -"Зворотна зона %(name)s потребує точно %(count)d компонентів IP-адрес, надано " -"%(user_count)d" - -msgid "Reverse zone IP network" -msgstr "Мережа IP зворотної зони" - -msgid "Revert" -msgstr "Повернути" - -msgid "Revocation reason" -msgstr "Причина відкликання" - -msgid "Revoke" -msgstr "Відкликати" - -msgid "Revoke a certificate." -msgstr "Відкликати сертифікат." - -msgid "Revoke certificate" -msgstr "Відкликати сертифікат" - -msgid "Revoked" -msgstr "Анульований" - -msgid "Revoked on from" -msgstr "Відкликано з" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "Відкликано з цієї дати (РРРР-мм-дд)" - -msgid "Revoked on to" -msgstr "Відкликано до" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "Відкликано до цієї дати (РРРР-мм-дд)" - -msgid "Right node" -msgstr "Правий вузол" - -msgid "Right replication node - an IPA server" -msgstr "Правий вузол реплікації — сервер IPA" - -msgid "Rights" -msgstr "Права" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" -"Права доступу, які слід надати (read, search, compare, write, add, delete, " -"all)" - -msgid "Role" -msgstr "Роль" - -msgid "Role Settings" -msgstr "Параметри ролей" - -msgid "Role name" -msgstr "Назва ролі" - -msgid "Role status" -msgstr "Стан ролі" - -msgid "Role-Based Access Control" -msgstr "Керування доступом на основі ролей" - -msgid "Roles" -msgstr "Ролі" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"Кореневий домен правила довіри для наявного правила довіри завжди увімкнено" - -msgid "Rule name" -msgstr "Назва правила" - -msgid "Rule status" -msgstr "Стан правила" - -msgid "Rule type" -msgstr "Тип правила" - -msgid "Rule type (allow)" -msgstr "Тип правила (allow)" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" -"Правило, яке використовується для визначення того, чи придатний сертифікат " -"для розпізнавання" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" -"Правило, яке використовується для прив’язування сертифіката до запису " -"користувача" - -msgid "Rules" -msgstr "Правила" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" -"Правила для перевірки. Якщо не вказано, вважається, що використано --enabled." - -msgid "Run Commands" -msgstr "Виконання команд" - -msgid "Run Test" -msgstr "Запустити тест" - -msgid "Run as a user" -msgstr "Запуск від користувача" - -msgid "Run as any user within a specified group" -msgstr "Запускати від імені будь-якого користувача вказаної групи" - -msgid "Run with the gid of a specified POSIX group" -msgstr "Запускати з ідентифікатором вказаної групи POSIX" - -msgid "RunAs External Group" -msgstr "Зовнішня група для RunAs" - -msgid "RunAs External User" -msgstr "Зовнішній користувач для RunAs" - -msgid "RunAs Group category" -msgstr "Категорія запуску від імені групи" - -msgid "RunAs Group category the rule applies to" -msgstr "Категорія запуску від імені групи, до якої застосовується правило" - -msgid "RunAs Groups" -msgstr "Групи запуску від імені" - -msgid "RunAs User category" -msgstr "Категорія запуску від імені користувачів" - -msgid "RunAs User category the rule applies to" -msgstr "" -"Категорія запуску від імені користувачів, до якої застосовується правило" - -msgid "RunAs Users" -msgstr "Користувачі запуску від імені" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "Назва групи «%(name)s» є неприйнятною для RunAsGroup" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "Назва групи «%(name)s» є неприйнятною для RunAsUser" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "Не можна вказувати «%(name)s» як ім’я користувача у записі RunAsUser" - -msgid "SASL Bind failed\n" -msgstr "Помилка прив'язки SASL\n" - -msgid "SELinux Options" -msgstr "Параметри SELinux" - -msgid "SELinux User" -msgstr "Користувач SELinux" - -msgid "SELinux User Map" -msgstr "Карта користувачів SELinux" - -msgid "SELinux User Map rule" -msgstr "Правило карти користувачів SELinux" - -msgid "SELinux User Map rules" -msgstr "Правила карти користувачів SELinux" - -msgid "SELinux User Maps" -msgstr "Карти користувачів SELinux" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" -"Запису користувача SELinux %(user)s не виявлено у порядковому списку (у " -"налаштуваннях)" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "Користувач SELinux «%(user)s» є некоректним: %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" -"Типового користувача типової карти користувачів SELinux немає у порядковому " -"списку" - -msgid "SELinux user map list not found in configuration" -msgstr "Списку карт користувачів SELinux у налаштуваннях не виявлено" - -msgid "SELinux user map order" -msgstr "Порядок карт користувачів SELinux" - -msgid "SHA1 Fingerprint" -msgstr "Відбиток SHA1" - -msgid "SHA256 Fingerprint" -msgstr "Відбиток SHA256" - -msgid "SID" -msgstr "SID" - -msgid "SID blacklist incoming" -msgstr "Чорний список вхідних SID" - -msgid "SID blacklist outgoing" -msgstr "Чорний список вихідних SID" - -msgid "SID blocklist incoming" -msgstr "Список блокування вхідних SID" - -msgid "SID blocklist outgoing" -msgstr "Список блокування вихідних SID" - -msgid "SID blocklists" -msgstr "Списки блокування SID" - -msgid "SID does not match any trusted domain" -msgstr "SID не відповідає жодному з довірених доменів" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "SID не збігається точно з будь-яким з SID довірених доменів" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"Не вдалося знайти SID для вказаного довіреного домену. Будь ласка, вкажіть " -"SID безпосередньо за допомогою параметра dom-sid." - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "SID не розпізнано як чинний SID для довіреного домену" - -msgid "SID is not valid" -msgstr "SID не є чинним" - -msgid "SIG Algorithm" -msgstr "Алгоритм SIG" - -msgid "SIG Key Tag" -msgstr "Мітка ключа SIG" - -msgid "SIG Labels" -msgstr "Мітки SIG" - -msgid "SIG Original TTL" -msgstr "Початковий TTL SIG" - -msgid "SIG Signature" -msgstr "Підпис SIG" - -msgid "SIG Signature Expiration" -msgstr "Строк дії підпису SIG" - -msgid "SIG Signature Inception" -msgstr "Початок підпису SIG" - -msgid "SIG Signer's Name" -msgstr "Ім’я підписника SIG" - -msgid "SIG Type Covered" -msgstr "Об’єднувані типи SIG" - -msgid "SIG record" -msgstr "Запис SIG" - -msgid "SMB Home Directory" -msgstr "Домашній каталог SMB" - -msgid "SMB Home Directory Drive" -msgstr "Диск домашнього каталогу SMB" - -msgid "SMB logon script path" -msgstr "Шлях до скрипту входу до SMB" - -msgid "SMB profile path" -msgstr "Шлях до профілю SMB" - -msgid "SMB service NetBIOS name" -msgstr "Назва NetBIOS служби SMB" - -msgid "SOA class" -msgstr "Клас SOA" - -msgid "SOA expire" -msgstr "Застарівання SOA" - -msgid "SOA minimum" -msgstr "Мінімальний SOA" - -msgid "SOA mname (authoritative server) override" -msgstr "Перевизначити mname SOA (довірений сервер)" - -msgid "SOA mname override" -msgstr "Перевизначення mname SOA" - -msgid "SOA record class" -msgstr "Клас записів SOA" - -msgid "SOA record expire time" -msgstr "Час завершення строку дії запису SOA" - -msgid "SOA record refresh time" -msgstr "Час оновлення запису SOA" - -msgid "SOA record retry time" -msgstr "Проміжок між повторними спробами для запису SOA" - -msgid "SOA record serial number" -msgstr "Серійний номер запису SOA" - -msgid "SOA record time to live" -msgstr "Строк дії запису SOA" - -msgid "SOA refresh" -msgstr "Освіження SOA" - -msgid "SOA retry" -msgstr "Повторення спроби SOA" - -msgid "SOA serial" -msgstr "Серійний номер SOA" - -msgid "SOA time to live" -msgstr "Строк дії SOA" - -msgid "SPF record" -msgstr "Запис SPF" - -msgid "SRV Port" -msgstr "Порт SRV" - -msgid "SRV Priority" -msgstr "Пріоритетність SRV" - -msgid "SRV Target" -msgstr "Ціль SRV" - -msgid "SRV Weight" -msgstr "Вага SRV" - -msgid "SRV record" -msgstr "Запис SRV" - -msgid "SSH public key" -msgstr "Відкритий ключ SSH" - -msgid "SSH public key fingerprint" -msgstr "Відбиток відкритого ключа SSH" - -msgid "SSH public key:" -msgstr "Відкритий ключ SSH:" - -msgid "SSH public keys" -msgstr "Відкриті ключі SSH" - -msgid "SSHFP Algorithm" -msgstr "Алгоритм SSHFP" - -msgid "SSHFP Fingerprint" -msgstr "Відбиток SSHFP" - -msgid "SSHFP Fingerprint Type" -msgstr "Тип відбитка SSHFP" - -msgid "SSHFP record" -msgstr "Запис SSHFP" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "SSSD не вдалося визначити за об’єктом коректний SID" - -msgid "Salt" -msgstr "Сіль" - -#, python-format -msgid "Same as --%s" -msgstr "Те саме, що і --%s" - -msgid "Save" -msgstr "Зберегти" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" -"Схема не потребує оновлення (Відбиток «%(fingerprint)s», TTL %(ttl)s с)" - -msgid "Search" -msgstr "Пошук" - -msgid "Search Options" -msgstr "Параметри пошуку" - -msgid "Search command parameters." -msgstr "Шукати параметри команди." - -msgid "Search domains of the trust" -msgstr "Шукати довірені домени" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "Шукати %(searched_object)s у цих %(relationship)s %(ldap_object)s." - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "Шукати %(searched_object)s не у цих %(relationship)s %(ldap_object)s." - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" -"Спроба пошуку %1$s у rootdse завершилася невдало з повідомленням про помилку " -"%2$d\n" - -msgid "Search for CA ACLs." -msgstr "Шукати CA ACL." - -msgid "Search for CAs." -msgstr "Шукати CA." - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Шукати правила прив’язування сертифікатів до профілів." - -msgid "Search for Certificate Profiles." -msgstr "Шукати профілі сертифікатів." - -msgid "Search for Class of Service entry" -msgstr "Шукати запис класу служби" - -msgid "Search for DNS forward zones." -msgstr "Пошук зон переспрямовування DNS." - -msgid "Search for DNS resources." -msgstr "Шукати ресурси DNS." - -msgid "Search for DNS servers." -msgstr "Шукати сервери DNS." - -msgid "Search for DNS zones (SOA records)." -msgstr "Пошук зон DNS (записів SOA)." - -msgid "Search for HBAC rules." -msgstr "Шукати правила HBAC." - -msgid "Search for HBAC services." -msgstr "Шукати служби HBAC." - -msgid "Search for IPA locations." -msgstr "Шукати місця IPA." - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "Спроба пошуку namingContext IPA завершилася помилкою %d\n" - -msgid "Search for IPA servers." -msgstr "Шукати сервери IPA." - -msgid "Search for IPA services." -msgstr "Знайти служби IPA." - -msgid "Search for OTP token." -msgstr "Шукати жетон OTP." - -msgid "Search for RADIUS proxy servers." -msgstr "Шукати проксі-сервери RADIUS." - -msgid "Search for SELinux User Maps." -msgstr "Шукати карти користувачів SELinux." - -msgid "Search for Sudo Command Groups." -msgstr "Шукати групи команд sudo." - -msgid "Search for Sudo Commands." -msgstr "Знайти команди sudo." - -msgid "Search for Sudo Rule." -msgstr "Знайти правило sudo." - -msgid "Search for a netgroup." -msgstr "Шукати мережеву групу." - -msgid "Search for a self-service permission." -msgstr "Шукати права доступу автослужби." - -msgid "Search for an Group ID override." -msgstr "Шукати перевизначення ідентифікаторів групи." - -msgid "Search for an HBAC service group." -msgstr "Шукати групу служб HBAC." - -msgid "Search for an ID View." -msgstr "Шукати перегляд ідентифікаторів." - -msgid "Search for an ID override." -msgstr "Шукати перевизначення ідентифікатора." - -msgid "Search for an User ID override." -msgstr "Шукати перевизначення ідентифікатора користувача." - -msgid "Search for an automount key." -msgstr "Виконати пошук ключа автоматичного монтування." - -msgid "Search for an automount location." -msgstr "Шукати запис автоматичного монтування." - -msgid "Search for an automount map." -msgstr "Виконати пошук карти автоматичного монтування." - -msgid "Search for automember rules." -msgstr "Шукати правила автоматичної участі." - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "Шукати сертифікати із вказаними %s власника." - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "Шукати сертифікати, власником яких не є %s." - -msgid "Search for classes." -msgstr "Шукати класи." - -msgid "Search for command outputs." -msgstr "Шукати за даними, які виводить команда." - -msgid "Search for commands." -msgstr "Шукати команди." - -msgid "Search for delegations." -msgstr "Пошук уповноважень." - -msgid "Search for entitlement accounts." -msgstr "Шукати облікові записи іменування." - -msgid "Search for existing certificates." -msgstr "Шукати наявні сертифікати." - -msgid "Search for forward zones only" -msgstr "Шукати лише прямі зони" - -msgid "Search for group password policies." -msgstr "Знайти групу правил для паролів." - -msgid "Search for groups with these member groups." -msgstr "Шукати групи із вказаними групами-учасниками." - -msgid "Search for groups with these member of HBAC rules." -msgstr "Шукати групи із цими правилами HBAC участі." - -msgid "Search for groups with these member of groups." -msgstr "Шукати групи із вказаними групами участі." - -msgid "Search for groups with these member of netgroups." -msgstr "Шукати групи із вказаними мережевими групами участі." - -msgid "Search for groups with these member of roles." -msgstr "Шукати групи із вказаними ролями участі." - -msgid "Search for groups with these member of sudo rules." -msgstr "Шукати групи із цими правилами sudo участі." - -msgid "Search for groups with these member users." -msgstr "Шукати групи із вказаними користувачами-учасниками." - -msgid "Search for groups without these member groups." -msgstr "Шукати групи без вказаних груп-учасників." - -msgid "Search for groups without these member of HBAC rules." -msgstr "Шукати групи без цих правил HBAC участі." - -msgid "Search for groups without these member of groups." -msgstr "Шукати групи без вказаних груп участі." - -msgid "Search for groups without these member of netgroups." -msgstr "Шукати групи без вказаних мережевих груп участі." - -msgid "Search for groups without these member of roles." -msgstr "Шукати групи без вказаних ролей участі." - -msgid "Search for groups without these member of sudo rules." -msgstr "Шукати групи без цих правил sudo участі." - -msgid "Search for groups without these member users." -msgstr "Шукати групи без вказаних користувачів-учасників." - -msgid "Search for groups." -msgstr "Шукати групи." - -msgid "Search for help topics." -msgstr "Шукати у темах довідки." - -msgid "Search for host groups with these member host groups." -msgstr "Шукати групи вузлів із цими групами вузлів-учасників." - -msgid "Search for host groups with these member hosts." -msgstr "Шукати групи вузлів із цими вузлами-учасниками." - -msgid "Search for host groups with these member of HBAC rules." -msgstr "Шукати групи вузлів із цими правилами HBAC участі." - -msgid "Search for host groups with these member of host groups." -msgstr "Шукати групи вузлів із цими групами вузлів участі." - -msgid "Search for host groups with these member of netgroups." -msgstr "Шукати групи вузлів із вказаними мережевими групами участі." - -msgid "Search for host groups with these member of sudo rules." -msgstr "Шукати групи вузлів із цим учасником правил sudo." - -msgid "Search for host groups without these member host groups." -msgstr "Шукати групи вузлів без цих груп вузлів-учасників." - -msgid "Search for host groups without these member hosts." -msgstr "Шукати групи вузлів без цих вузлів-учасників." - -msgid "Search for host groups without these member of HBAC rules." -msgstr "Шукати групи вузлів без цього учасника правил HBAC." - -msgid "Search for host groups without these member of host groups." -msgstr "Шукати групи вузлів без цих груп вузлів участі." - -msgid "Search for host groups without these member of netgroups." -msgstr "Шукати групи вузлів без вказаних мережевих груп учасників." - -msgid "Search for host groups without these member of sudo rules." -msgstr "Шукати групи вузлів без вказаних учасників правил sudo." - -msgid "Search for hostgroups." -msgstr "Шукати групи вузлів." - -msgid "Search for hosts with these enrolled by users." -msgstr "Шукати вузли з цими користувачами, якими надано ролі." - -msgid "Search for hosts with these managed by hosts." -msgstr "Шукати вузли із цими керованими вузлами." - -msgid "Search for hosts with these managing hosts." -msgstr "Шукати вузли із цими керівними вузлами." - -msgid "Search for hosts with these member of HBAC rules." -msgstr "Шукати вузли із цими правилами HBAC участі." - -msgid "Search for hosts with these member of host groups." -msgstr "Шукати вузли із вказаними групами вузлів участі." - -msgid "Search for hosts with these member of netgroups." -msgstr "Шукати вузли із вказаними мережевими групами участі." - -msgid "Search for hosts with these member of roles." -msgstr "Шукати вузли із вказаними ролями участі." - -msgid "Search for hosts with these member of sudo rules." -msgstr "Шукати вузли із цими правилами sudo участі." - -msgid "Search for hosts without these enrolled by users." -msgstr "Шукати вузли без цих користувачів, якими надано ролі." - -msgid "Search for hosts without these managed by hosts." -msgstr "Шукати вузли без цих керованих вузлів." - -msgid "Search for hosts without these managing hosts." -msgstr "Шукати вузли без цих керівних вузлів." - -msgid "Search for hosts without these member of HBAC rules." -msgstr "Шукати вузли без цих правил HBAC участі." - -msgid "Search for hosts without these member of host groups." -msgstr "Шукати вузли без вказаних груп вузлів участі." - -msgid "Search for hosts without these member of netgroups." -msgstr "Шукати вузли без вказаних мережевих груп участі." - -msgid "Search for hosts without these member of roles." -msgstr "Шукати вузли без вказаних ролей участі." - -msgid "Search for hosts without these member of sudo rules." -msgstr "Шукати вузли без цих правил sudo участі." - -msgid "Search for hosts." -msgstr "Шукати вузли." - -msgid "Search for netgroups with these member groups." -msgstr "Шукати мережеві групи із вказаними групами-учасниками." - -msgid "Search for netgroups with these member host groups." -msgstr "Шукати мережеві групи із вказаними групами вузлів-учасниками." - -msgid "Search for netgroups with these member hosts." -msgstr "Шукати мережеві групи з цими вузлами-учасниками." - -msgid "Search for netgroups with these member netgroups." -msgstr "Шукати мережеві групи з цими мережевими групами-учасниками." - -msgid "Search for netgroups with these member of netgroups." -msgstr "Шукати мережеві групи з цими мережевими групами участі." - -msgid "Search for netgroups with these member users." -msgstr "Шукати мережеві групи з цими користувачами-учасниками." - -msgid "Search for netgroups without these member groups." -msgstr "Шукати мережеві групи без цих груп-учасників." - -msgid "Search for netgroups without these member host groups." -msgstr "Шукати мережеві групи без цих груп вузлів-учасників." - -msgid "Search for netgroups without these member hosts." -msgstr "Шукати мережеві групи без цих вузлів-учасників." - -msgid "Search for netgroups without these member netgroups." -msgstr "Шукати мережеві групи без цих мережевих груп-учасників." - -msgid "Search for netgroups without these member of netgroups." -msgstr "Шукати мережеві групи без цих мережевих груп участі." - -msgid "Search for netgroups without these member users." -msgstr "Шукати мережеві групи без цих користувачів-учасників." - -msgid "Search for permissions." -msgstr "Знайти права доступу." - -msgid "Search for privileges." -msgstr "Знайти привілеї." - -msgid "Search for ranges." -msgstr "Шукати діапазони." - -msgid "Search for roles." -msgstr "Знайти ролі." - -msgid "Search for servers with these managed suffixes." -msgstr "Шукати сервери із цими керованими суфіксами." - -msgid "Search for servers without these managed suffixes." -msgstr "Шукати сервери без цих керованих суфіксів." - -msgid "Search for service delegation target." -msgstr "Шукати ціль делегування служб." - -msgid "Search for service delegations rule." -msgstr "Шукати правило делегування служб." - -msgid "Search for services with these managed by hosts." -msgstr "Шукати служби із цими керованими вузлами." - -msgid "Search for services without these managed by hosts." -msgstr "Шукати служби без цих керованих вузлів." - -msgid "Search for stage users with these member of HBAC rules." -msgstr "Шукати користувачів етапу із цими правилами HBAC участі." - -msgid "Search for stage users with these member of groups." -msgstr "Шукати користувачів етапу із вказаними групами участі." - -msgid "Search for stage users with these member of netgroups." -msgstr "Шукати користувачів етапу із вказаними мережевими групами участі." - -msgid "Search for stage users with these member of roles." -msgstr "Шукати користувачів етапу із вказаними ролями участі." - -msgid "Search for stage users with these member of sudo rules." -msgstr "Шукати користувачів етапу із цими правилами sudo участі." - -msgid "Search for stage users without these member of HBAC rules." -msgstr "Шукати користувачів етапу без цих правил HBAC участі." - -msgid "Search for stage users without these member of groups." -msgstr "Шукати користувачів етапу без вказаних груп участі." - -msgid "Search for stage users without these member of netgroups." -msgstr "Шукати користувачів етапу без вказаних мережевих груп участі." - -msgid "Search for stage users without these member of roles." -msgstr "Шукати користувачів етапу без вказаних ролей участі." - -msgid "Search for stage users without these member of sudo rules." -msgstr "Шукати користувачів етапу без цих правил sudo участі." - -msgid "Search for stage users." -msgstr "Шукати записи користувачів етапу." - -msgid "Search for topology segments." -msgstr "Шукати сегменти топології." - -msgid "Search for topology suffices." -msgstr "Шукати суфікси топології." - -msgid "Search for topology suffixes." -msgstr "Шукати суфікси топології." - -msgid "Search for trusts." -msgstr "Шукати записи довіри." - -msgid "Search for users with these member of HBAC rules." -msgstr "Шукати користувачів із цими правилами HBAC участі." - -msgid "Search for users with these member of groups." -msgstr "Шукати користувачів з вказаними групами участі." - -msgid "Search for users with these member of netgroups." -msgstr "Шукати користувачів із вказаними мережевими групами участі." - -msgid "Search for users with these member of roles." -msgstr "Шукати користувачів із вказаними ролями участі." - -msgid "Search for users with these member of sudo rules." -msgstr "Шукати користувачів із цими правилами sudo участі." - -msgid "Search for users without these member of HBAC rules." -msgstr "Шукати користувачів без цих правил HBAC участі." - -msgid "Search for users without these member of groups." -msgstr "Шукати користувачів без вказаних груп участі." - -msgid "Search for users without these member of netgroups." -msgstr "Шукати користувачів без вказаних мережевих груп участі." - -msgid "Search for users without these member of roles." -msgstr "Шукати користувачів без вказаних ролей участі." - -msgid "Search for users without these member of sudo rules." -msgstr "Шукати користувачів без цих правил sudo участі." - -msgid "Search for users." -msgstr "Шукати користувачів." - -msgid "Search for vaults." -msgstr "Шукати сховища." - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Результат пошуку обрізано: %(reason)s" - -msgid "Search scope" -msgstr "Область пошуку" - -msgid "Search size limit" -msgstr "Обмеження розміру пошуку" - -msgid "Search time limit" -msgstr "Обмеження часу пошуку" - -msgid "Second Code" -msgstr "Другий код" - -msgid "Second OTP" -msgstr "Другий OTP" - -msgid "Secondary RID base" -msgstr "Вторинна основа RID" - -msgid "Seconds Latitude" -msgstr "Секунди широти" - -msgid "Seconds Longitude" -msgstr "Секунди довготи" - -msgid "Secret" -msgstr "Ключ" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" -"Реєстраційні дані можна додавати до сховища або отримувати з нього лише за " -"допомогою інструментів командного рядка vault-archive і vault-retrieve." - -msgid "Security Identifier" -msgstr "Ідентифікатор безпеки" - -msgid "Security Identifiers (SIDs)" -msgstr "Ідентифікатори безпеки (SID)" - -msgid "Segment details" -msgstr "Подробиці сегмента" - -msgid "Segment name" -msgstr "Назва сегмента" - -msgid "Select All" -msgstr "Вибрати все" - -msgid "Select entries to be removed." -msgstr "Виберіть записи, які слід вилучити." - -msgid "Selector" -msgstr "Селектор" - -msgid "Self" -msgstr "Self" - -msgid "Self Service Permission" -msgstr "Права доступу автослужби" - -msgid "Self Service Permissions" -msgstr "Права доступу до самообслуговування" - -msgid "Self-service name" -msgstr "Назва самообслуговування" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Семантику %(label)s було змінено. %(current_behavior)s\n" -"%(hint)s" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" -"Список відокремлених крапкою з комою записів IP-адрес або мереж, яким надано " -"доступ до надсилання запитів" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" -"Список відокремлених крапкою з комою записів IP-адрес або мереж, яким надано " -"доступ до перенесення зони" - -msgid "Sensitive" -msgstr "З врахуванням" - -msgid "Serial" -msgstr "Серійний номер" - -msgid "Serial Number" -msgstr "Серійний номер" - -msgid "Serial Number (hex)" -msgstr "Серійний номер (шістнадцятковий)" - -msgid "Serial number" -msgstr "Серійний номер" - -msgid "Serial number (hex)" -msgstr "Серійний номер (шістнадцятковий)" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "Серійний десятковий номер або шістнадцятковий номер з префіксом 0x" - -msgid "Server" -msgstr "Сервер" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "Сервер «%(srv)s» має %(n)d узгоджень із такими серверами:" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "Сервер %(srv)s не може встановити зв’язок із серверами: %(replicas)s" - -msgid "Server Name" -msgstr "Назва сервера" - -msgid "Server Options" -msgstr "Параметри сервера" - -msgid "Server Role" -msgstr "Роль сервера" - -msgid "Server Roles" -msgstr "Ролі сервера" - -msgid "Server does not support domain level functionality" -msgstr "" -"На сервері не передбачено підтримки функціональних можливостей рівня домену" - -msgid "Server has already been deleted" -msgstr "Запис сервера вже вилучено" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "На сервері немає інформації щодо домену «%(domain)s»" - -msgid "Server location" -msgstr "Місце сервера" - -msgid "Server name" -msgstr "Назва сервера" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "Не надано назви сервера, сервер недоступний\n" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Вилучення сервера перервано: %(reason)s." - -msgid "Server state" -msgstr "Стан сервера" - -msgid "Server will check DNS forwarder(s)." -msgstr "Сервер перевірятиме засоби переспрямовування DNS." - -msgid "Servers" -msgstr "Сервери" - -msgid "Servers details:" -msgstr "Параметри сервера:" - -msgid "Servers in location" -msgstr "Сервери у місці" - -msgid "Servers that belongs to the IPA location" -msgstr "Сервери, що належать до запису місця IPA" - -msgid "Service" -msgstr "Служба" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"Для застосування змін у налаштуваннях службу %(service)s на сервері IPA " -"%(server)s слід перезапустити." - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "У базі даних Kerberos не виявлено служби «%(service)s»" - -msgid "Service Certificate" -msgstr "Сертифікат служби" - -msgid "Service Groups" -msgstr "Групи служб" - -msgid "Service Options" -msgstr "Параметри служби" - -msgid "Service Settings" -msgstr "Параметри служби" - -msgid "Service Vaults" -msgstr "Сховища служб" - -msgid "Service category" -msgstr "Категорія служб" - -msgid "Service category the ACL applies to" -msgstr "Категорія служб, до якої застосовується ACL" - -msgid "Service category the rule applies to" -msgstr "Категорія служб, до якої застосовується правило" - -msgid "Service delegation rule" -msgstr "Правило делегування служб" - -msgid "Service delegation rules" -msgstr "Правила делегування служб" - -msgid "Service delegation target" -msgstr "Ціль делегування служб" - -msgid "Service delegation targets" -msgstr "Призначення делегування служб" - -msgid "Service group name" -msgstr "Назва групи служб" - -msgid "Service name" -msgstr "Назва служби" - -msgid "Service name of the service vault" -msgstr "Назва служби сховища служби" - -msgid "Service principal" -msgstr "Реєстраційний запис служби" - -msgid "Service principal alias" -msgstr "Альтернативна назва реєстраційного запису служби" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Реєстраційний запис служби для цього сертифіката (наприклад HTTP/test." -"example.com)" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Реєстраційний запис служби вказано у формі, відмінній від: служба/повна " -"назва вузла: %(reason)s" - -msgid "Service principal is required" -msgstr "Слід вказати реєстраційний запис служби" - -msgid "Service relative weight" -msgstr "Відносна вага служб" - -msgid "Service unprovisioned" -msgstr "Службу не передбачено" - -msgid "Service weight" -msgstr "Вага служб" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" -"Параметри служби, спільного використання та користувача не можна вказувати " -"одночасно" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" -"Параметри служби, спільного використання та користувача не можна вказувати " -"одночасно" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" -"Параметри служби, спільного використання та користувача не можна вказувати " -"одночасно" - -msgid "Services" -msgstr "Служби" - -msgid "Session error" -msgstr "Помилка сеансу" - -msgid "Session key wrapped with transport certificate" -msgstr "Ключ сеансу, пов’язаний із сертифікатом передавання" - -msgid "Session timeout" -msgstr "Час очікування сеансу" - -msgid "Set" -msgstr "Встановити" - -msgid "Set Domain Level" -msgstr "Встановити рівень домену" - -msgid "Set OTP" -msgstr "Одноразовий пароль" - -msgid "Set One-Time Password" -msgstr "Встановити одноразовий пароль" - -msgid "Set SSH key" -msgstr "Встановити ключ SSH" - -msgid "Set a user's password." -msgstr "Встановити пароль користувача." - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" -"Встановити атрибут для пари назва/значення. Формат: атрибут=значення.\n" -"Для атрибутів з багатьма значенням команда замінює вже вказані значення." - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "Встановити типову (резервну) групу для невідповідних записів." - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "Встановити типову (резервну) групу для автоматичної участі «%(value)s»" - -msgid "Set enabled/hidden state of a server." -msgstr "Встановити стан увімкнено/приховано для сервера." - -msgid "Set public key" -msgstr "Встановити відкритий ключ" - -msgid "Settings" -msgstr "Параметри" - -msgid "Shared" -msgstr "Спільне" - -msgid "Shared Vaults" -msgstr "Спільні сховища" - -msgid "Shared secret for the trust" -msgstr "Оприлюднений ключ для довіри" - -msgid "Shared vault" -msgstr "Сховище спільного використання" - -msgid "Show" -msgstr "Показати" - -msgid "Show IPA server." -msgstr "Показати сервер IPA." - -msgid "Show QR code" -msgstr "Показати QR-код" - -msgid "Show Results" -msgstr "Показати результати" - -msgid "Show all loaded plugins." -msgstr "Показати список завантажених додатків." - -msgid "Show configuration uri" -msgstr "Показати адресу налаштувань" - -msgid "Show details" -msgstr "Показати подробиці" - -msgid "Show environment variables." -msgstr "Показати змінні середовища." - -msgid "Show global trust configuration." -msgstr "Показати налаштування довіри на загальному рівні." - -msgid "Show managed suffix." -msgstr "Показати керований суфікс." - -msgid "Show role status on a server" -msgstr "Показати стан ролі на сервері" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Показати поточні налаштування прив’язки сертифікатів до профілів." - -msgid "Show the current OTP configuration." -msgstr "Показати поточні налаштування OTP." - -msgid "Show the current configuration." -msgstr "Показати поточні налаштування." - -msgid "Show the current global DNS configuration." -msgstr "Показати поточні загальні налаштування DNS." - -msgid "Show the list of permitted encryption types and exit" -msgstr "Показати список дозволених типів шифрування і завершити роботу" - -msgid "Show vault configuration." -msgstr "Показати налаштування сховища." - -msgid "Show/Set key" -msgstr "Показати або встановити ключ" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Показано записи від ${start} до ${end} з ${total} записів." - -msgid "Signature" -msgstr "Підпис" - -msgid "Signature Expiration" -msgstr "Строк дії підпису" - -msgid "Signature Inception" -msgstr "Початок підпису" - -msgid "Signer's Name" -msgstr "Ім’я підписника" - -msgid "Simple bind failed\n" -msgstr "Невдала спроба простого прив’язування\n" - -msgid "Simulate use of Host-based access controls" -msgstr "Імітувати використання керування доступом на основі вузлів" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" -"Оскільки IPA не керує записами DNS, слід налаштувати DNS так, щоб система " -"визначала адресу домену «{domain}» за даними щодо вузлів IPA, і навпаки." - -msgid "Size" -msgstr "Розмір" - -msgid "Size Limit" -msgstr "Обмеження розміру" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" -"Об’єм даних перевищує обмеження. Поточне обмеження об’єму сховища — " -"%(limit)d Б" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" -"Розмір діапазону ідентифікаторів, зарезервованого для довіреного домену" - -msgid "Skip DNS check" -msgstr "Пропустити перевірку DNS" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Пропустити перевірку того, чи вилучено останній основний сервер CA або " -"сервер DNS" - -msgid "Skip host check" -msgstr "Пропустити перевірку вузла" - -msgid "Skip overlap check" -msgstr "Пропустити перевірку перекриття" - -#, python-format -msgid "Skipped %(key)s" -msgstr "Пропущено %(key)s" - -#, python-format -msgid "Skipped %(map)s" -msgstr "Пропущено %(map)s" - -msgid "Some entries were not deleted" -msgstr "Деякі з записів не вилучено" - -msgid "Some operations failed." -msgstr "Деякі з дій не вдалося виконати." - -msgid "Source Host Groups" -msgstr "Групи вузлів-джерел" - -msgid "Source Hosts" -msgstr "Вузли-джерела" - -msgid "Source host" -msgstr "Вузол джерела" - -msgid "Source host category" -msgstr "Категорія вузлів-джерел" - -msgid "Source host category the rule applies to" -msgstr "Категорія вузлів-джерел, якої має стосуватися правило" - -msgid "Specified CAs" -msgstr "Вказані CA" - -msgid "Specified Commands and Groups" -msgstr "Вказані команди і групи" - -msgid "Specified Groups" -msgstr "Вказані групи" - -msgid "Specified Hosts and Groups" -msgstr "Вказані вузли і групи" - -msgid "Specified Profiles" -msgstr "Вказані профілі" - -msgid "Specified Services and Groups" -msgstr "Вказані служби і групи" - -msgid "Specified Users and Groups" -msgstr "Вказані користувачі і групи" - -msgid "Specified trusted domain name could not be found." -msgstr "Не вдалося знайти назву вказаного довіреного домену." - -msgid "Specifies where to store keytab information." -msgstr "Визначає, де слід зберігати дані таблиці ключів." - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "Вкажіть зовнішній ${entity}" - -msgid "Split DNS record to parts" -msgstr "Поділити запис DNS на частини" - -msgid "Stage" -msgstr "Етап" - -msgid "Stage User" -msgstr "Користувач етапу" - -msgid "Stage Users" -msgstr "Користувачі етапу" - -#, python-format -msgid "Stage user %s activated" -msgstr "Активовано користувача етапу %s" - -msgid "Stage users" -msgstr "Користувачі етапу" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Обліковий запис користувача етапу «%(value)s»" - -msgid "Standard" -msgstr "Стандартне" - -msgid "Standard Record Types" -msgstr "Стандартні типи записів" - -msgid "State" -msgstr "Стан" - -msgid "State/Province" -msgstr "Область/провінція" - -msgid "Status" -msgstr "Стан" - -msgid "Status of the role" -msgstr "Стан ролі" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "Зупинити вже почате оновлення вибраних вузлів" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Зупиняємо реплікацію для сегмента: надіслано запит щодо «%(pkey)s»." - -msgid "Store and provide schema for commands and topics" -msgstr "Збереження і надання схеми для команд і тем" - -msgid "Store issued certificates" -msgstr "Зберігати видані сертифікати" - -msgid "Street address" -msgstr "Вулиця і будинок" - -msgid "Structured" -msgstr "Структурована" - -msgid "Subject" -msgstr "Об’єкт" - -msgid "Subject DN" -msgstr "DN призначення" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "DN призначення вже використано CA «%s»" - -msgid "Subject DNS name" -msgstr "Назва DNS призначення" - -msgid "Subject Distinguished Name" -msgstr "Унікальна назва призначення" - -msgid "Subject EDI Party name" -msgstr "Назва EDI Party призначення" - -msgid "Subject IP Address" -msgstr "IP-адреса призначення" - -msgid "Subject Kerberos principal name" -msgstr "Назва реєстраційного запису Kerberos призначення" - -msgid "Subject OID" -msgstr "OID призначення" - -msgid "Subject Other Name" -msgstr "Інша назва призначення" - -msgid "Subject UPN" -msgstr "UPN призначення" - -msgid "Subject URI" -msgstr "Адреса призначення" - -msgid "Subject X.400 address" -msgstr "Адреса X.400 призначення" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "Використання типу альтернативної назви об’єкта %s заборонено" - -msgid "Subject directory name" -msgstr "Назва каталогу призначення" - -msgid "Subject email address" -msgstr "Адреса електронної пошти призначення" - -msgid "Subject of the certificate" -msgstr "Призначення сертифіката" - -msgid "Submit a certificate signing request." -msgstr "Надіслати запит щодо підписування сертифіката." - -msgid "Subtree" -msgstr "Піддерево" - -msgid "Subtree to apply ACI to" -msgstr "Піддерево, до якого слід застосувати ACI" - -msgid "Subtree to apply permissions to" -msgstr "Піддерево, до якого буде застосовано права доступу" - -msgid "Subtype" -msgstr "Підтип" - -msgid "Success" -msgstr "Успіх" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Sudo Allow Command Groups" -msgstr "Групи дозволених команд sudo" - -msgid "Sudo Allow Commands" -msgstr "Дозволені команди sudo" - -msgid "Sudo Command" -msgstr "Команда sudo" - -msgid "Sudo Command Group" -msgstr "Група команд sudo" - -msgid "Sudo Command Groups" -msgstr "Групи команд sudo" - -msgid "Sudo Commands" -msgstr "Команди sudo" - -msgid "Sudo Deny Command Groups" -msgstr "Групи заборонених команд sudo" - -msgid "Sudo Deny Commands" -msgstr "Заборонені команди sudo" - -msgid "Sudo Option" -msgstr "Пункт sudo" - -msgid "Sudo Rule" -msgstr "Правило sudo" - -msgid "Sudo Rules" -msgstr "Правила Sudo" - -msgid "Sudo order" -msgstr "Порядок sudo" - -msgid "Suffix name" -msgstr "Назва суфікса" - -msgid "Superseded" -msgstr "Замінено" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Підтримувані типи шифрування:\n" - -msgid "Suppress processing of membership attributes." -msgstr "Придушити обробку атрибутів участі." - -msgid "Symmetric" -msgstr "Симетричний" - -msgid "Sync OTP Token" -msgstr "Синхронізувати жетон OTP" - -msgid "Synchronize an OTP token." -msgstr "Синхронізувати жетон OTP." - -msgid "Synchronizing" -msgstr "Синхронізація" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Синтаксична помилка: %(error)s" - -msgid "System DNS records updated" -msgstr "Оновлено записи DNS системи" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"Кодуванням системи має бути UTF-8, підтримки «%(encoding)s» не передбачено. " -"Встановіть такі значення змінних середовища: LC_ALL=\"C.UTF-8\" або LC_ALL=" -"\"\" і LC_CTYPE=\"C.UTF-8\"." - -msgid "TA record" -msgstr "Запис TA" - -msgid "TKEY record" -msgstr "Запис TKEY" - -msgid "TLSA Certificate Association Data" -msgstr "Дані прив’язки сертифікатів TLSA" - -msgid "TLSA Certificate Usage" -msgstr "Використання сертифіката TLSA" - -msgid "TLSA Matching Type" -msgstr "Відповідний тип TLSA" - -msgid "TLSA Selector" -msgstr "Селектор TLSA" - -msgid "TLSA record" -msgstr "Запис TLSA" - -msgid "TOTP Synchronization Window" -msgstr "Вікно синхронізації TOTP" - -msgid "TOTP authentication Window" -msgstr "Вікно розпізнавання TOTP" - -msgid "TOTP authentication time variance (seconds)" -msgstr "Відхилення часу розпізнавання TOTP (у секундах)" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "Відхилення часу синхронізації TOTP (у секундах)" - -msgid "TOTP token / IPA server time difference" -msgstr "Часова розбіжність між ключем TOTP і сервером IPA" - -msgid "TSIG record" -msgstr "Запис TSIG" - -msgid "TXT Text Data" -msgstr "Текстові дані TXT" - -msgid "TXT record" -msgstr "Запис TXT" - -msgid "Take a revoked certificate off hold." -msgstr "Забрати відкликаний сертифікат." - -msgid "Target" -msgstr "Ціль" - -msgid "Target DN" -msgstr "DN призначення" - -msgid "Target DN subtree" -msgstr "Піддерево DN призначення" - -msgid "Target Uniform Resource Identifier" -msgstr "Універсальний ідентифікатор ресурсу призначення" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "Універсальний ідентифікатор ресурсу призначення відповідно до RFC 3986" - -msgid "Target group" -msgstr "Цільова група" - -msgid "Target host" -msgstr "Вузол призначення" - -msgid "Target members of a group" -msgstr "Цільові учасники групи" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "Цільові учасники групи (встановлює фільтр призначення memberOf)" - -msgid "Target reverse zone not found." -msgstr "Не знайдено зворотної зони призначення." - -msgid "Target your own entry (self)" -msgstr "Виконати над власним записом (self)" - -msgid "Task DN" -msgstr "DN завдання" - -#, python-format -msgid "Task DN = '%s'" -msgstr "DN завдання = «%s»" - -msgid "Telephone Number" -msgstr "Номер телефону" - -msgid "Test the ACI syntax but don't write anything" -msgstr "Перевірити синтаксис ACI, але не виконувати запису" - -msgid "Text Data" -msgstr "Текстові дані" - -msgid "Text does not match field pattern" -msgstr "Текст не відповідає шаблону поля" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"Параметр --domain не можна використовувати разом із параметрами --add-domain " -"і --del-domain. Скористайтеся параметром --domain для визначення усього " -"списку доменів області явним чином. Щоб додати або вилучити окремі домени, " -"скористайтеся параметрами --add-domain/del-domain." - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "ACI для прав доступу %(name)s у %(dn)s не знайдено " - -msgid "The IPA realm" -msgstr "Область IPA" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"Не вдалося створити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" -"Причиною може бути те, що зона не є керованою IPA. Будь ласка, створіть " -"запис вручну так, щоб він містив таке значення: «%(realm)s»" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"Не вдалося вилучити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" -"Причиною може бути те, що зона не є керованою IPA. Будь ласка, вилучіть " -"запис вручну." - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "Ключа автоматичного монтування %(key)s з інформацією %(info)s не існує" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "Сертифікат %(ca)s на цьому сервері не доступний." - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "Не можна використовувати символ %(char)r." - -msgid "The default users group cannot be removed" -msgstr "Не можна вилучати типову групу користувачів" - -msgid "The deny type has been deprecated." -msgstr "Тип «deny» вважається застарілим." - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "Домен %s не є ні доменом IPA, ні довіреним доменом." - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" -"Доменна назва вузла призначення або '.', якщо служба є явно недоступною на " -"цьому домені" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" -"Домени «%s» не можна використовувати для застосування перевірки " -"altSecurityIdentities." - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "Вказані нижче домени не належать до цієї області: %(domains)s" - -msgid "The group doesn't exist" -msgstr "Такої групи не існує" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "Не існує вузла «%s», до якого слід було додати службу." - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" -"Запис вузла було додано, але спроба оновлення DNS зазнала невдачі: %(reason)s" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Назву вузла слід вказувати повністю: %s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Назва вузла не повинна бути такою: %s\n" - -msgid "The hostname or IP (with or without port)" -msgstr "Назва вузла або IP-адреса (з портом або без порту)" - -msgid "The hostname this reverse record points to" -msgstr "Назва вузла, на яку вказує цей зворотний запис" - -msgid "The hostname to register as" -msgstr "Назва вузла для реєстрації" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" -"Пара ключ,інформація має бути унікальною. Ключ з назвою %(key)s та " -"інформацією %(info)s вже існує." - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" -"Файл таблиці ключів, до якого слід долучати новий ключ (файл буде створено, " -"якщо його не існувало)." - -msgid "The keytab file to remove the principcal(s) from" -msgstr "Файл таблиці ключів, звідки слід вилучити реєстраційні записи" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" -"До довіреного домену Active Directory має бути застосовано правило прив'язки " -"з altSecurityIdentities, але з цим правилом не пов'язано жодного домену." - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "Максимальна довжина можливої послідовності з абетки (abcd)" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Найпоширенішими типами для цього типу зон є: %s\n" - -msgid "The number of times to retry authentication" -msgstr "Кількість спроб пройти розпізнавання" - -msgid "The password or username you entered is incorrect" -msgstr "Вами введено помилкове ім'я користувача або пароль" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"Значення primary_key (основного ключа) запису, наприклад, «iivanenko» для " -"користувача" - -msgid "The principal for this request doesn't exist." -msgstr "Реєстраційного запису для цього запиту не існує." - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Реєстраційний запис, для якого слід отримати таблицю ключів (приклад: ftp/" -"ftp.example.com@EXAMPLE.COM)" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Реєстраційні записи, які слід вилучити із таблиці ключів (приклад: ftp/ftp." -"example.com@EXAMPLE.COM)" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" -"Область дії реєстраційного запису не збігається з областю цього сервера IPA" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"Не вдалося виявити область таких доменів: %(domains)s. Якщо ці домени " -"належать до цієї області, будь ласка, створіть запис TXT _kerberos, що " -"міститиме «%(realm)s», на кожному з них." - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"Схема, використана на сервері LDAP. Підтримувані значення: RFC2307 і " -"RFC2307bis. Типове значення: RFC2307bis" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"Критерій пошуку не був достатньо точним. Мало бути вказано один критерій, " -"виявлено — %(found)d." - -msgid "The secret used to encrypt data" -msgstr "Ключ, який використовується для шифрування даних" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "Службі дозволено проходити розпізнавання від імені клієнта" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" -"Реєстраційного запису служби для альтернативної назви об’єкта %s запиту щодо " -"сертифіката не існує" - -msgid "The topic or command name." -msgstr "Назва теми або команди." - -msgid "The total timeout across all retries (in seconds)" -msgstr "Загальний час очікування за усіма спробами (у секундах)" - -msgid "The user account you entered is locked" -msgstr "Введений вами обліковий запис заблоковано" - -msgid "The username attribute on the user object" -msgstr "Атрибут імені користувача об’єкта користувача" - -msgid "The username, password or token codes are not correct" -msgstr "Ім’я користувача, пароль або коди жетона є помилковими" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" -"Відносини довіри із {ipa_domain} вже встановлено із непідтримуваним типом " -"{trust_type}. Будь ласка, вилучте запис цих відносин вручну на боці AD DC." - -msgid "There was a problem with your request. Please, try again later." -msgstr "" -"Із вашим запитом виникли проблеми. Будь ласка, повторіть спробу пізніше." - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Цією командою не можна скористатися для зміни розподілу ідентифікаторів для " -"локального домену IPA. Щоб дізнатися більше, скористайтеся командою «ipa " -"help idrange»." - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Для виконання цієї команди має існувати група «editors», але групи з такою " -"назвою не знайдено." - -msgid "This command requires root access" -msgstr "Для виконання цієї команди потрібні права доступу користувача root" - -msgid "This entry already exists" -msgstr "Цей запис вже існує" - -msgid "This entry cannot be enabled or disabled" -msgstr "Цей запис не можна вмикати або вимикати" - -msgid "This entry is already a member" -msgstr "Цей запис вже є серед учасників" - -msgid "This entry is already disabled" -msgstr "Цей запис вже вимкнено" - -msgid "This entry is already enabled" -msgstr "Цей запис вже увімкнено" - -msgid "This entry is not a member" -msgstr "Цього запису немає серед учасників" - -msgid "This group already allows external members" -msgstr "У цій групі вже дозволено зовнішніх учасників" - -msgid "This group cannot be posix because it is external" -msgstr "Ця група не може належати до груп POSIX, оскільки є зовнішньою" - -msgid "This is already a posix group" -msgstr "Вже є posix-групою" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" -"Ця група вже належить до груп POSIX, отже її не можна перетворити на зовнішню" - -msgid "This may take some time, please wait ..." -msgstr "Це доволі тривала дія. Будь ласка, зачекайте…" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" -"На цій сторінці виявлено незбережені зміни. Будь ласка, збережіть зміни або " -"скасуйте їх." - -msgid "Ticket expired" -msgstr "Сплив строк дії квитка" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "Не вдалося прочитати правила щодо квитків для %s" - -msgid "Time Limit" -msgstr "Обмеження часу" - -msgid "Time limit of search in seconds" -msgstr "Обмеження часу пошуку у секундах" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Обмеження часу пошуку у секундах (0 — без обмежень)" - -msgid "Time now" -msgstr "Поточний час" - -msgid "Time to live" -msgstr "Строк дії" - -msgid "Time to live for records at zone apex" -msgstr "Час життя записів у апексі зони" - -msgid "Time to live for records without explicit TTL definition" -msgstr "Час життя записів без явного визначення TTL" - -msgid "Time-based (TOTP)" -msgstr "На основі часу (TOTP)" - -msgid "Timeout" -msgstr "Час очікування" - -#, c-format -msgid "Timeout exceeded." -msgstr "Перевищено обмеження за часом." - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Для встановлення довіри з Active Directory назва домену і назва області " -"сервера IPA мають збігатися" - -msgid "To get command help, use:" -msgstr "Щоб отримати довідку щодо команди, скористайтеся такою командою:" - -msgid "Token ID" -msgstr "Ідентифікатор жетона" - -msgid "Token description (informational only)" -msgstr "Опис ключа (лише інформаційний)" - -msgid "Token hash algorithm" -msgstr "Алгоритм хешування ключа" - -msgid "Token model (informational only)" -msgstr "Модель ключа (лише інформація)" - -msgid "Token secret (Base32; default: random)" -msgstr "Пароль ключа (Base32; типове значення: випадковий)" - -msgid "Token serial (informational only)" -msgstr "Серійний номер ключа (лише інформація)" - -msgid "Token synchronization failed" -msgstr "Спроба синхронізації жетонів зазнала невдачі" - -msgid "Token vendor name (informational only)" -msgstr "Назва виробника ключа (лише інформація)" - -msgid "Token was synchronized" -msgstr "Жетон синхронізовано" - -msgid "Topic commands:" -msgstr "Команди теми:" - -msgid "Topic or Command" -msgstr "Тема або команда" - -msgid "Topology" -msgstr "Топологія" - -msgid "Topology Segment" -msgstr "Сегмент топології" - -msgid "Topology Segments" -msgstr "Сегменти топології" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" +"\n" +"Вилучення запису «%(hostname)s» призведе до нез’єднаної топології у суфіксу " +"«%(suffix)s»:\n" +"%(errors)s" #, python-format msgid "Topology does not allow server %(server)s to replicate with servers:" msgstr "" "Топологія не дозволяє серверу %(server)s виконувати реплікацію із серверами:" -msgid "Topology is disconnected" -msgstr "Топологію від’єднано" +msgid "Request must be a dict" +msgstr "Запит має належати до типу словника (dict)" -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "Керування топологією потребує мінімального рівня домену {0} " +msgid "Request is missing \"method\"" +msgstr "У запиті не вказано метод (\"method\")" -msgid "Topology suffix" -msgstr "Суфікс топології" - -msgid "Topology suffixes" -msgstr "Суфікси топології" - -msgid "Total number of variables env (>= count)" -msgstr "Кількість змінних env (>= count)" - -msgid "Transport Certificate" -msgstr "Сертифікат передавання" - -msgid "True" -msgstr "Так" - -msgid "True if not all results were returned" -msgstr "True, якщо повернуто було всі результати" - -msgid "True means the operation was successful" -msgstr "True означає, що дію було виконано успішно" - -msgid "Trust" -msgstr "Довіра" - -msgid "Trust Settings" -msgstr "Параметри довіри" - -msgid "Trust direction" -msgstr "Напрямок довіри" - -msgid "Trust setup" -msgstr "Налаштування довіри" - -msgid "Trust status" -msgstr "Стан довіри" - -msgid "Trust type" -msgstr "Тип довіри" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "Тип довіри (типовим для Active Directory є ad)" - -msgid "Trusted domain" -msgstr "Довірений домен" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"До доменів області IPA включено домен %(domain)s. Перш ніж встановлювати " -"довіру, це включення слід усунути. Див. команду «ipa realmdomains-mod --del-" -"domain»." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"Довіреним доменом і обліковим записом адміністратора використовуються різні " -"області" - -msgid "Trusted domain did not return a unique object" -msgstr "Довіреним доменом не повернуто унікального об’єкта" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "Довіреним доменом не повернуто коректного SID об’єкта" - -msgid "Trusted domain partner" -msgstr "Партнер довіреного домену" - -msgid "Trusted domains" -msgstr "Довірені домени" - -msgid "Trusted for delegation" -msgstr "Довірено для уповноваження" - -msgid "Trusted forest" -msgstr "Довірений «ліс»" - -msgid "Trusted to authenticate as user" -msgstr "Довіра до розпізнавання як користувача" - -msgid "Trusting forest" -msgstr "«Ліс» довіри" - -msgid "Trusts" -msgstr "Записи довіри" - -msgid "Two factor authentication (password + OTP)" -msgstr "Двофакторне розпізнавання (пароль + OTP)" - -msgid "Two-way trust" -msgstr "Двобічна довіра" - -msgid "Type" -msgstr "Тип" - -msgid "Type Covered" -msgstr "Об’єднувані типи" - -msgid "Type Map" -msgstr "Карта типів" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "Тип об’єкта IPA (встановлює фільтри призначення subtree і objectClass)" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" -"тип об’єкта IPA (user (користувач), group (група), host (вузол), hostgroup " -"(група вузлів), service (служба), netgroup (мережева група), dns)" - -msgid "Type of the token" -msgstr "Тип ключа" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" -"Тип діапазону ідентифікаторів довіреного домену, одне з дозволених значень" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" -"Тип діапазону ідентифікаторів довіреного домену, одне з таких значень: ipa-" -"ad-trust-posix, ipa-ad-trust" - -msgid "Types of supported user authentication" -msgstr "Типи підтримуваного розпізнавання користувачів" - -msgid "UID" -msgstr "UID" - -msgid "UPN suffixes" -msgstr "Суфікси UPN" - -msgid "URI" -msgstr "URI" - -msgid "URL" -msgstr "Адреса" - -msgid "UUID" -msgstr "UUID" - -msgid "Un-apply" -msgstr "Скасувати" - -msgid "Un-apply ID Views from hosts" -msgstr "Скасувати застосування переглядів ідентифікаторів до вузлів" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" -"Скасувати застосування переглядів ідентифікаторів до вузлів груп вузлів" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" -"Скасувати застосування перегляду ідентифікаторів «${primary_key}» до вузлів" - -msgid "Un-apply from host groups" -msgstr "Скасувати застосування до груп вузлів" - -msgid "Un-apply from hosts" -msgstr "Скасувати застосування до вузлів" - -msgid "Unable to communicate with CMS" -msgstr "Не вдалося обмінятися даними з CMS" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Не вдалося обмінятися даними з CMS (стан %d)" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" -"Не вдалося створити контекст TLS (не вдалося ініціалізувати OpenSSL або " -"завантажити сертифікати)\n" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "Не вдалося створити закриту групу. Група «%(group)s» вже існує." - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "Не вдалося визначити сервер IPA з %s\n" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Не вдалося визначити, чи існує вже реєстраційний запис Kerberos %s. " -"Скористайтеся командою «ipa user-mod», щоб встановити його параметри вручну." - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Не вдалося визначити кореневий DN %s\n" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" -"Неможливо показати код QR за допомогою налаштованого кодування виведення " -"результатів. Будь ласка, скористайтеся адресою ключа для налаштовування " -"вашого пристрою OTP" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Не вдалося увімкнути SSL у LDAP\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Не вдалося створити кеш реєстраційних даних Kerberos\n" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "Не вдалося ініціалізувати сеанс STARTTLS\n" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "Не вдалося ініціалізувати з'єднання із сервером ldap %1$s: %2$s\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Не вдалося ініціалізувати бібліотеку ldap!\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"Не вдалося долучити вузол: не знайдено кешу реєстраційних даних Kerberos\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"Не вдалося долучити вузол: не знайдено реєстраційного запису користувача " -"Kerberos і не вказано пароля вузла.\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"Не вдалося долучити вузол: невдала спроба ініціалізації контексту Kerberos\n" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "Не вдалося обробити параметр {item}" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Не вдалося обробити реєстраційний запис\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Не вдалося обробити назву реєстраційного запису\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Не вдалося обробити реєстраційний запис: %1$s (%2$d)\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Не вдалося вилучити запис\n" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "Не вдалося визначити контролер домену для домену {domain}. " - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "Не вдалося встановити LDAP_OPT_PROTOCOL_VERSION\n" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "Не вдалося встановити LDAP_OPT_X_SASL_NOCANON\n" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "Не вдалося встановити LDAP_OPT_X_TLS_CACERTFILE\n" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "Не вдалося встановити LDAP_OPT_X_TLS_PROTOCOL_MIN\n" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "Не вдалося встановити LDAP_OPT_X_TLS_REQUIRE_CERT\n" - -msgid "Unable to verify write permissions to the AD" -msgstr "Не вдалося перевірити права доступу на запис до AD" - -msgid "Undelete a delete user account." -msgstr "Відновити вилучений обліковий запис користувача." - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Відновлено обліковий запис користувача «%(value)s»" - -msgid "Undo" -msgstr "Скасувати" - -msgid "Undo All" -msgstr "скасувати всі дії" - -msgid "Undo all changes in this field." -msgstr "Скасувати усі зміни у цьому полі." - -msgid "Undo this change." -msgstr "Скасувати цю зміну." - -msgid "Unenroll this host from IPA server" -msgstr "Скасувати реєстрацію цього вузла на сервері IPA" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Спроба скасування реєстрації зазнала невдачі.\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Успішне скасування реєстрації.\n" - -msgid "Unique ID" -msgstr "Унікальний ід." - -msgid "Unknown" -msgstr "Невідомо" - -msgid "Unknown Error" -msgstr "Невідома помилка" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Невідомий параметр: %(option)s" - -msgid "Unlock" -msgstr "Розблокувати" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Розблоковано обліковий запис «%(value)s»" - -msgid "Unmatched" -msgstr "Невідповідний" - -msgid "Unprovision" -msgstr "Скасування передбачення" - -msgid "Unprovisioning host" -msgstr "Вузол скасовування передбачення" - -msgid "Unprovisioning service" -msgstr "Служба скасовування передбачення" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "Нерозпізнані атрибути: %(attrs)s" - -msgid "Unresolved rules in --rules" -msgstr "Непридатні до обробки правила у --rules" - -msgid "Unrevoked" -msgstr "Відкликання скасовано" - -msgid "Unsaved Changes" -msgstr "Незбережені зміни" - -msgid "Unselect All" -msgstr "Скасувати вибір всього" - -msgid "Unspecified" -msgstr "Не вказано" - -msgid "Unsupported value" -msgstr "Непідтримуване значення" - -msgid "Update" -msgstr "Оновити" - -msgid "Update DNS entries" -msgstr "Оновити записи DNS" - -msgid "Update System DNS Records" -msgstr "Оновити записи DNS системи" - -msgid "Update location and IPA server DNS records" -msgstr "Оновити записи місць та серверів DNS IPA" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"Спроба оновлення запису системи «%(record)s» зазнала невдачі. Повідомлення " -"про помилку: %(error)s" - -msgid "User" -msgstr "Користувач" - -msgid "User Group" -msgstr "Група користувачів" - -msgid "User Groups" -msgstr "Групи користувачів" - -msgid "User ID" -msgstr "Ід. користувача" - -msgid "User ID Number" -msgstr "Номер ідентифікатора користувача" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Ідентифікаційний номер користувача (система призначить його, якщо не буде " -"вказано)" - -msgid "User ID override" -msgstr "Перевизначення ідентифікатора користувача" - -msgid "User ID overrides" -msgstr "Перевизначення ідентифікатора користувача" - -msgid "User Login" -msgstr "Користувач" - -msgid "User Options" -msgstr "Параметри користувача" - -msgid "User Vaults" -msgstr "Сховища користувачів" - -msgid "User attribute" -msgstr "Атрибут користувача" - -msgid "User attributes for SMB services" -msgstr "Атрибути користувача для служб SMB" - -msgid "User authentication types" -msgstr "Типи розпізнавання користувачів" - -msgid "User categories" -msgstr "Категорії користувачів" - -msgid "User category" -msgstr "Категорія користувачів" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Категорія вузлів (семантику цього атрибуту призначено для локальної обробки)" - -msgid "User category the ACL applies to" -msgstr "Категорія користувачів, до якої застосовується ACL" - -msgid "User category the rule applies to" -msgstr "Категорія користувачів, до якої застосовується правило" - -msgid "User check" -msgstr "Перевірка на ім'я користувача" - -msgid "User container" -msgstr "Контейнер користувачів" - -msgid "User group" -msgstr "Група користувачів" - -msgid "User group ACI grants access to" -msgstr "Група користувачів, до якої надає доступ ACI" - -msgid "User group rule" -msgstr "Правило групи користувачів" - -msgid "User group rules" -msgstr "Правила груп користувачів" - -msgid "User group to apply delegation to" -msgstr "Група користувачів, до якої слід застосувати уповноваження" - -msgid "User group to apply permissions to" -msgstr "Група користувачів, до якої буде застосовано права доступу" - -msgid "User group to apply permissions to (sets target)" -msgstr "" -"Група користувачів, до якої буде застосовано права доступу (встановлює " -"target)" - -msgid "User login" -msgstr "Користувач" - -msgid "User logins" -msgstr "Користувачі" - -msgid "User name" -msgstr "Ім'я користувача" - -msgid "User object class" -msgstr "Клас об’єктів користувача" - -msgid "User object overrides" -msgstr "Пріоритет об’єкта користувача" - -msgid "User password" -msgstr "Пароль користувача" - -msgid "User password expiration" -msgstr "Вичерпання строку дії пароля користувача" - -msgid "User search fields" -msgstr "Поля пошуку користувачів" - -msgid "User to override" -msgstr "Користувач для перевизначення" - -msgid "User-friendly description of action performed" -msgstr "Зручний для користувача опис дії, що виконується" - -msgid "User-specified attributes to which the permission applies" -msgstr "Вказані користувачем атрибути, до яких застосовується правило доступу" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" -"Вказані користувачем атрибути, до яких права доступу явним чином не " -"застосовуватимуться" - -msgid "Username" -msgstr "Користувач" - -msgid "Username of the user vault" -msgstr "Ім’я користувача сховища користувача" - -msgid "Users" -msgstr "Користувачі" - -msgid "Users allowed to create keytab" -msgstr "Користувачі, яким дозволено створення таблиці ключів" - -msgid "Users allowed to retrieve keytab" -msgstr "Користувачі, яким дозволено отримувати таблицю ключів" - -msgid "Valid Certificate Present" -msgstr "Є чинний сертифікат" - -msgid "Valid from" -msgstr "Чинний з" - -msgid "Valid not after from" -msgstr "Чинний не пізніше після" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "Чинний не пізніше, ніж з цієї дати (РРРР-мм-дд)" - -msgid "Valid not after to" -msgstr "Чинний не пізніше до" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "Чинний не пізніше, ніж до цієї дати (РРРР-мм-дд)" - -msgid "Valid not before from" -msgstr "Чинний не раніше від" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "Чинний не раніше від цієї дати (РРРР-мм-дд)" - -msgid "Valid not before to" -msgstr "Чинний не раніше" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "Чинний не раніше цієї дати (РРРР-мм-дд)" - -msgid "Valid to" -msgstr "Чинний до" - -msgid "Validation error" -msgstr "Помилка під час перевірки" - -msgid "Validity" -msgstr "Коректність" - -msgid "Validity end" -msgstr "Завершення чинності" - -msgid "Validity start" -msgstr "Початок чинності" - -msgid "Vault" -msgstr "Сховище" - -msgid "Vault Container" -msgstr "Контейнер сховищ" - -msgid "Vault Containers" -msgstr "Контейнери сховищ" - -msgid "Vault Type" -msgstr "Тип сховища" - -msgid "Vault configuration" -msgstr "Налаштування сховища" - -msgid "Vault data encrypted with session key" -msgstr "Дані сховища зашифровано за допомогою ключа сеансу" - -msgid "Vault description" -msgstr "Опис сховища" - -msgid "Vault name" -msgstr "Назва сховища" - -msgid "Vault password" -msgstr "Пароль до сховища" - -msgid "Vault private key" -msgstr "Закритий ключ сховища" - -msgid "Vault public key" -msgstr "Відкритий ключ сховища" - -msgid "Vault salt" -msgstr "«Сіль» сховища" - -msgid "Vault service" -msgstr "Служба сховища" - -msgid "Vault type" -msgstr "Тип сховища" - -msgid "Vault user" -msgstr "Користувач сховища" - -msgid "Vaults" -msgstr "Сховища" - -msgid "Vaults Config" -msgstr "Налаштування сховища" - -msgid "Vendor" -msgstr "Постачальник" - -msgid "Verify Password" -msgstr "Повторіть пароль" - -msgid "Verify Principal Password" -msgstr "Перевірка пароля реєстраційного запису" - -msgid "Version" -msgstr "Версія" - -msgid "Vertical Precision" -msgstr "Точність за вертикаллю" - -msgid "Via Service" -msgstr "Проміжна служба" - -msgid "View" -msgstr "Перегляд" - -msgid "View Certificate" -msgstr "Переглянути сертифікат" - -msgid "Waiting for confirmation by remote side" -msgstr "Очікуємо на підтвердження з віддаленого боку" - -msgid "Warning" -msgstr "Попередження" - -msgid "Warning unrecognized encryption type.\n" -msgstr "Попередження: невідомий тип шифрування.\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "Попередження: невідомий тип солі (salt).\n" - -msgid "Warning: Consider service replication" -msgstr "Попередження: вам варто скористатися реплікацією служб" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Попередження: не вдалося виконати перетворення типу (№%d)\n" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Попередження: для випадкових паролів типи солі (salt) не мають значення " -"(див. параметр -P)\n" - -msgid "Weight" -msgstr "Вага" - -msgid "Weight for server services" -msgstr "Вага служб сервера" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" -"Під час перенесення групи, яку вже створено у домені IPA буде перезаписано " -"ідентифікатор групи і повідомлено про успіх" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "Визначає, увімкнено чи вимкнено PKINIT" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" -"Визначає, чи є активною угода щодо реплікації, тобто, чи відбувається " -"реплікація за цією угодою" - -msgid "Whether to store certs issued using this profile" -msgstr "" -"Визначає, чи слід зберігати сертифікати, видані за допомогою цього профілю" - -msgid "Who" -msgstr "Хто" - -msgid "Working" -msgstr "Працює" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" -"Записати сертифікат (ланцюжок сертифікації, якщо використано --chain) до " -"файла" - -msgid "Write profile configuration to file" -msgstr "Записати налаштування профілів до файла" - -msgid "X.509 certificate chain" -msgstr "Ланцюжок сертифікації X.509" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"Ви намагаєтеся послатися на магічну приватну групу, яку не можна " -"перевизначати Спробуйте краще перевизначити атрибут GID запису відповідного " -"користувача." - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" -"Ви можете скористатися FreeOTP як " -"програмою для роботи з ключами OTP." - -msgid "You may need to manually remove them from the tree" -msgstr "Ймовірно, вам доведеться вилучити їх із ієрархії вручну" - -msgid "You must enroll a host in order to create a host service" -msgstr "Щоб створити службу вузла, вам слід зареєструвати вузол" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Вам слід вказати обидва параметри, rid-base і secondary-rid-base, оскільки " -"вже запущено ipa-adtrust-install." - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "Вас буде переспрямовано за ${count} с" - -msgid "You will be redirected to DNS Zone." -msgstr "Вас буде переспрямовано до зони DNS." - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Строк дії вашого пароля буде вичерпано за ${days} днів." - -msgid "Your password has expired. Please enter a new password." -msgstr "Термін дії вашого паролю вичерпано. Будь ласка, введіть новий пароль." - -msgid "Your session has expired. Please log in again." -msgstr "" -"Строк роботи у вашому сеансі вичерпано. Будь ласка, увійдіть до системи ще " -"раз." - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Довіру до %(domain)s втрачено. Будь ласка, відновіть її за допомогою команди " -"«ipa trust-add»." - -msgid "YubiKey slot" -msgstr "Слот YubiKey" - -msgid "ZIP" -msgstr "Індекс" - -msgid "Zone forwarders" -msgstr "Переспрямовувачі зон" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "Виявлено зону: ${zone}" - -msgid "Zone name" -msgstr "Назва зони" - -msgid "Zone name (FQDN)" -msgstr "Назва зони (FQDN)" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "Запис зони «%s» не можна вилучати" - -msgid "Zone refresh interval" -msgstr "Інтервал між оновленнями даних зони" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "Невдала спроба виконання access() для %1$s: номер помилки = %2$d\n" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "запис активного користувача із іменем «%(user)s» вже існує" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "додано значення атрибута до запису %(value)s" - -msgid "algorithm value: allowed interval 0-255" -msgstr "значення алгоритму: дозволеним є інтервал від 0 до 255" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "для усіх основних серверів має бути увімкнено роль %(role)s" - -msgid "an internal error has occurred" -msgstr "сталася внутрішня помилка" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "на сервері «%(server)s» сталася внутрішня помилка" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" -"відповідь на запит «%(owner)s %(rtype)s» не містить підписів DNSSEC (немає " -"даних RRSIG)" - -msgid "any of the configured servers" -msgstr "будь-який з налаштованих серверів" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api не надає такого простору назв: «%(name)s»" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "має бути вказано принаймні один з варіантів: тип, користувачі чи вузли" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"слід вказати хоча б одне з: type, filter, subtree, targetgroup, attrs або " -"memberof" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" -"має бути надано принаймні одне значення, що є рівним канонічній назві " -"реєстраційного запису" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "не можна використовувати атрибут «%(attribute)s»" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "не можна використовувати атрибут «%s»" - -msgid "attribute is not configurable" -msgstr "атрибут не можна налаштовувати" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "не можна одразу вказувати attrs та атрибути включення" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "не можна одразу вказувати attrs та атрибути включення або виключення" - -msgid "automatically add the principal if it doesn't exist" -msgstr "автоматично додати реєстраційний запис, якщо його не існує" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" -"автоматично додати реєстраційний запис, якщо його не існує (лише " -"реєстраційні записи служб)" - -msgid "automount key" -msgstr "ключ автомонтування" - -msgid "automount keys" -msgstr "ключі автомонтування" - -msgid "automount location" -msgstr "запис автомонтування" - -msgid "automount locations" -msgstr "записи автомонтування" - -msgid "automount map" -msgstr "карта автомонтування" - -msgid "automount maps" -msgstr "карти автоматичного монтування" - -msgid "basedn" -msgstr "Базовий DN" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "Спроба виконання ber_init() зазнала невдачі. Некоректне керування?!\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "помилка ber_scanf(), не вдалося знайти kvno?!\n" - -msgid "bind password" -msgstr "пароль прив’язки" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "не повинне перевищувати %(len)d символів у довжину" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "не повинне перевищувати за розміром %(maxlength)d байтів" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "не повинне перевищувати %(maxlength)d символів у довжину" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "не може перевищувати %(maxvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "не може перевищувати %(maxvalue)s" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" -"неможливо додати права доступу «%(perm)s» з типом прив’язки «%(bindtype)s» " -"до привілею" - -msgid "cannot be empty" -msgstr "не може бути порожнім" - -msgid "cannot be longer that {} characters" -msgstr "не може бути довшим за {}" - -msgid "cannot be used when a zone is specified" -msgstr "не можна використовувати, якщо вказано зону" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "не вдалося встановити з’єднання з «%(uri)s»: %(error)s" - -msgid "cannot delete global password policy" -msgstr "неможливо вилучити загальні правила паролів" - -msgid "cannot delete managed permissions" -msgstr "неможливо вилучити керовані права доступу" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"вилучення кореневого домену правила довіри неможливе, скористайтеся trust-" -"del для вилучення самого правила довіри" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"вимикання кореневого домену правила довіри неможливе, скористайтеся trust-" -"del для вилучення самого правила довіри" - -msgid "cannot have an empty subject" -msgstr "поле призначення не може бути порожнім" - -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "не вдалося відкрити файл налаштувань %s\n" - -msgid "cannot rename managed permissions" -msgstr "неможливо перейменувати керовані права доступу" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" -"не можна встановлювати типу прив’язки для прав доступу, які пов’язано з " -"привілеєм" - -msgid "cannot specify both raw certificate and file" -msgstr "не можна одночасно вказувати код сертифіката і файл із сертифікатом" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "не можна вказувати одночасно subject/issuer і certificate" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "не можна вказувати одночасно subject/issuer і ipacertmapdata" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" -"не можна одразу вказувати повне фільтрування за призначенням та фільтрування " -"за додатковими параметрами призначення" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "не вдалося обробити функцією stat() файл налаштування %s\n" - -msgid "change collided with another change" -msgstr "зміна конфліктує з іншою внесеною зміною" - -msgid "change to a POSIX group" -msgstr "змінити на групу POSIX" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "змінити для підтримки зовнішніх учасників поза IPA з довірених доменів" - -#, c-format -msgid "child exited with %d\n" -msgstr "дочірній процес завершив роботу з повідомленням %d\n" - -msgid "cn is immutable" -msgstr "cn є незмінним" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" -"список доменів, відокремлених двокрапками, які використовуються для обробки " -"коротких назв" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "список груп служб HBAC, які слід додати, відокремлених комами" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "список груп служб HBAC, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of HBAC services to add" -msgstr "список служб HBAC, які слід додати, відокремлених комами" - -msgid "comma-separated list of HBAC services to remove" -msgstr "список служб HBAC, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of groups to add" -msgstr "список груп, які слід додати, відокремлених комами" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "список груп, які слід виключити з перенесення, відокремлених комами" - -msgid "comma-separated list of groups to remove" -msgstr "список груп, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of host groups to add" -msgstr "список груп вузлів, які слід додати, відокремлених комами" - -msgid "comma-separated list of host groups to remove" -msgstr "список груп вузлів, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of hosts to add" -msgstr "список вузлів, які слід додати, відокремлених комами" - -msgid "comma-separated list of hosts to remove" -msgstr "список вузлів, які слід вилучити, відокремлених комами" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" -"список учасників довіреного домену у форматі ДОМЕН\\ім’я або ім’я@домен, " -"відокремлених комами" - -msgid "comma-separated list of netgroups to add" -msgstr "список мережевих груп, які слід додати, відокремлених комами" - -msgid "comma-separated list of netgroups to remove" -msgstr "список мережевих груп, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of permissions" -msgstr "список прав доступу, відокремлених комами" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" -"права доступу, які слід надати, відокремлених комами (read, write, add, " -"delete, all)" - -msgid "comma-separated list of privileges" -msgstr "список привілеїв, відокремлених комами" - -msgid "comma-separated list of privileges to add" -msgstr "список привілеїв, які слід додати, відокремлених комами" - -msgid "comma-separated list of privileges to remove" -msgstr "список привілеїв, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of roles to add" -msgstr "список ролей, які слід додати, відокремлених комами" - -msgid "comma-separated list of roles to remove" -msgstr "список ролей, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of sudo command groups to add" -msgstr "список груп команд sudo, які слід додати, відокремлених комами" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "список груп команд sudo, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of sudo commands to add" -msgstr "список команд sudo, які слід додати, відокремлених комами" - -msgid "comma-separated list of sudo commands to remove" -msgstr "список команд sudo, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of users to add" -msgstr "список записів користувачів, які слід додати, відокремлених комами" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" -"список записів користувачів, які слід виключити з перенесення, відокремлених " -"комами" - -msgid "comma-separated list of users to remove" -msgstr "список записів користувачів, які слід вилучити, відокремлених комами" - -msgid "command" -msgstr "команда" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "команда «%(name)s» приймає не більше %(count)d аргументу" -msgstr[1] "команда «%(name)s» приймає не більше %(count)d аргументів" -msgstr[2] "команда «%(name)s» приймає не більше %(count)d аргументів" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "команда «%(name)s» не приймає ніяких аргументів" - -msgid "commands" -msgstr "команди" - -msgid "commands cannot be added when command category='all'" -msgstr "не можна додавати команди, якщо категорія команд=«all»" - -msgid "commands for controlling sudo configuration" -msgstr "команди керування налаштуванням sudo" - -msgid "communication with CIFS server was unsuccessful" -msgstr "спроба обмінятися даними з сервером CIFS зазнала невдачі" - -msgid "configuration options" -msgstr "параметри налаштування" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "не знайдено запис контейнера (%(container)s)" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "помилка curl_easy_init()\n" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "помилка curl_easy_setopt()\n" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "помилка curl_global_init()\n" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "помилка curl_slist_append() для значення «%s»\n" - -msgid "default CA ACL can be only disabled" -msgstr "типовий ACL CA можна лише вимкнути" - -msgid "delegation" -msgstr "уповноваження" - -msgid "delegations" -msgstr "уповноваження" - -msgid "delete" -msgstr "вилучити" - -msgid "description" -msgstr "опис" - -msgid "did not receive Kerberos credentials" -msgstr "не отримано реєстраційних даних Kerberos" - -msgid "does not match any of accepted formats: " -msgstr "не відповідає жодному з прийнятних форматів: " - -msgid "domain" -msgstr "домен" - -msgid "domain is not configured" -msgstr "домен не налаштовано" - -msgid "domain is not trusted" -msgstr "домен не є довіреним" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "назву домену «%(domain)s» слід нормалізувати до %(normalized)s" - -msgid "domain name cannot be longer than 255 characters" -msgstr "назва домену не повинна перевищувати за довжиною 255 символів" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "кожен з елементів ACL має бути відокремлено від інших крапкою з комою" - -msgid "empty DNS label" -msgstr "порожня мітка DNS" - -msgid "empty filter" -msgstr "порожній фільтр" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" -"enabledService/configuredService не перебуває у записі kdc ipaConfigString" - -msgid "entries" -msgstr "записи" - -msgid "entry" -msgstr "запис" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" -"помилка під час розміщення даних для каналу передавання XML-RPC: %(error)s" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "помилка на сервері «%(server)s»: %(error)s" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "спроба виконання ipa-getkeytab зазнала невдачі, номер помилки %d\n" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" -"очікуваний формат: <0-255> <0-255> <0-65535> " -"парна_кількість_шістнадцяткових_цифр_або_дефіс" - -msgid "file to store DNS records in nsupdate format" -msgstr "файл для зберігання записів DNS у форматі nsupdate" - -msgid "file to store certificate in" -msgstr "файл, у якому зберігатимуться дані сертифіката" - -msgid "filename" -msgstr "назва файла" - -msgid "filter and memberof are mutually exclusive" -msgstr "filter і memberof не можна використовувати разом" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" -"значенням прапорців (flags) має бути одна з літер, \"S\", \"A\", \"U\" або " -"\"P\"" - -msgid "flags value: allowed interval 0-255" -msgstr "значення прапорців: дозволеним є інтервал від 0 до 255" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" -"примусово створити запис сервера назв, навіть якщо відповідної назви вузла " -"немає у DNS" - -msgid "force delete of SYSTEM permissions" -msgstr "примусове вилучення прав доступу SYSTEM" - -msgid "force host name even if not in DNS" -msgstr "примусове значення назви вузла, навіть якщо назви немає у DNS" - -msgid "force principal name even if host not in DNS" -msgstr "" -"примусове значення назви реєстраційного запису, навіть якщо вузла немає у DNS" - -msgid "force principal name even if not in DNS" -msgstr "" -"примусове значення назви реєстраційного запису, навіть якщо назви немає у DNS" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" -"примусове створення служби, навіть якщо об'єкта вузла для керування не існує" - -#, c-format -msgid "fork() failed\n" -msgstr "невдала спроба виконання fork()\n" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" -"формат має бути таким:\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (широта у градусах)\n" -" d2: [0 .. 180] (довгота у градусах)\n" -" m1, m2: [0 .. 59] (мінути широти і довготи)\n" -" s1, s2: [0 .. 59.999] (секунди широти і довготи)\n" -" alt: [-100000.00 .. 42849672.95] крок — .01 (висота у метрах)\n" -" siz, hp, vp: [0 .. 90000000.00] (розміри, точність у метрах)\n" -" Див. RFC 1876." - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" -"формат має бути встановлено так: \"%(format)s\", відповідно до %(rfcs)s" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"зона переспрямовування «%(fwzone)s» не є ефективною, оскільки не вказано " -"належного делегування NS у основній зоні «%(authzone)s». Будь ласка, додайте " -"запис NS «%(ns_rec)s» до батьківської зони «%(authzone)s»." - -msgid "gid cannot be set for external group" -msgstr "Не можна встановлювати gid для зовнішньої групи" - -msgid "givenname is required" -msgstr "слід вказати ім’я" - -msgid "group" -msgstr "група" - -msgid "group runAs" -msgstr "група, від імені якої виконуватиметься" - -msgid "group, permission and self are mutually exclusive" -msgstr "group, permission і self не можна використовувати разом" - -msgid "groups" -msgstr "групи" - -msgid "groups to add" -msgstr "групи для додавання" - -msgid "groups to exclude from migration" -msgstr "групи, які слід виключити з перенесення" - -msgid "groups to remove" -msgstr "групи для вилучення" - -msgid "host" -msgstr "вузол" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"не можна встановлювати для категорії вузлів значення «all», доки є записи " -"дозволених вузлів" - -msgid "host group" -msgstr "група вузлів" - -msgid "host groups" -msgstr "групи вузлів" - -msgid "host groups to add" -msgstr "групи вузлів для додавання" - -msgid "host groups to remove" -msgstr "групи вузлів для вилучення" - -msgid "host masks of allowed hosts" -msgstr "маски для дозволених вузлів" - -msgid "hostgroup" -msgstr "група вузлів" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Групу вузлів з назвою «%s» вже створено. Групи вузлів і мережеві групи мають " -"спільний простір назв." - -msgid "hostgroups" -msgstr "групи вузлів" - -msgid "hostname" -msgstr "назва вузла" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "назва вузла містить лише порожню мітку (послідовні крапки)" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" -"назва вузла у предметі запиту «%(cn)s» не збігається із назвою або " -"альтернативними назвами реєстраційного запису «%(principal)s»" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" -"назва вузла у призначенні запиту, «%(cn)s», не збігається з назвою вузла " -"реєстраційного запису, «%(hostname)s»" - -msgid "hosts" -msgstr "вузли" - -msgid "hosts cannot be added when host category='all'" -msgstr "не можна додавати записи вузлів, якщо категорія вузлів=«all»" - -msgid "hosts cannot be set when type is 'group'" -msgstr "не можна вказувати вузли, якщо типом є «group»" - -msgid "hosts to add" -msgstr "вузли для додавання" - -msgid "hosts to remove" -msgstr "вузли для вилучення" - -msgid "id range" -msgstr "діапазон ідентифікаторів" - -msgid "id range type" -msgstr "тип діапазону ідентифікаторів" - -msgid "incomplete time value" -msgstr "неповне часове значення" - -msgid "incorrect type" -msgstr "помилковий тип" - -msgid "integer to order the Sudo rules" -msgstr "ціле число для впорядковування правил sudo" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "некоректне «%(name)s»: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "некоректне DN (%s)" - -msgid "invalid IP address format" -msgstr "некоректний формат запису IP-адреси" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"некоректна версія IP-адреси (маємо: %(value)d, має бути: %(required_value)d)!" - -msgid "invalid IP network format" -msgstr "некоректний формат запису мережі IP" - -msgid "invalid Profile ID" -msgstr "некоректний ідентифікатор профілю" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "некоректний SID: {SID}" - -msgid "invalid SSH public key" -msgstr "некоректний відкритий ключ SSH" - -msgid "invalid address format" -msgstr "некоректний формат адреси" - -msgid "invalid attribute name" -msgstr "некоректна назва атрибута" - -msgid "invalid domain name" -msgstr "некоректна назва домену" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "некоректна назва домену: %s" - -msgid "invalid domain-name: not fully qualified" -msgstr "некоректна назва домену: назва не є повною" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "некоректний формат адреси електронної пошти: %(email)s" - -msgid "invalid escape code in domain name" -msgstr "некоректний керівний код у назві домену" - -msgid "invalid hostmask" -msgstr "некоректна маска вузлів" - -msgid "invalid port number" -msgstr "некоректний номер порту" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "Помилкові права доступу до ipa-getkeytab?\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "Не знайдено ipa-getkeytab\n" - -msgid "is required" -msgstr "є обов’язковим" - -msgid "iterations value: allowed interval 0-65535" -msgstr "значення кількості ітерацій: дозволеним є інтервал від 0 до 65535" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "помилка json_dumps()\n" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "помилка json_pack_ex(): %s\n" - -msgid "kerberos ticket policy settings" -msgstr "параметри правил квитків kerberos" - -#, python-format -msgid "key %(key)s already exists" -msgstr "запис ключа %(key)s вже існує" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "ключ з назвою %(key)s вже існує" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" -"keytab є осиротілим символічним посиланням, яке належить іншому " -"користувачу.\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "Сертифікати krbtgt можуть використовувати лише профіль %s" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "у лівому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" - -msgid "left node and right node must not be the same" -msgstr "лівий і правий вузли повинні бути різними вузлами" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "лівий вузол не є вузлом топології: %(leftnode)s" - -msgid "left or right node has to be specified" -msgstr "слід вказати лівий або правий вузол" - -msgid "limits exceeded for this query" -msgstr "цим запитом перевищено обмеження" - -msgid "local domain range" -msgstr "локальний діапазон доменів" - -msgid "location" -msgstr "місце" - -msgid "locations" -msgstr "місця" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "керування %(manager)s не знайдено" - -#, python-format -msgid "map %(map)s already exists" -msgstr "запис карти %(map)s вже існує" - -msgid "maps not connected to /etc/auto.master:" -msgstr "карти, не з’єднані з /etc/auto.master:" - -msgid "match the common name exactly" -msgstr "повна відповідність загальній назві" - -msgid "maximum serial number" -msgstr "максимальний серійний номер" - -#, python-format -msgid "member %s" -msgstr "%s учасника" - -msgid "member Certificate Profile" -msgstr "учасник Профіль сертифікатів" - -msgid "member HBAC service" -msgstr "служба HBAC учасника" - -msgid "member HBAC service group" -msgstr "група служб учасника HBAC" - -msgid "member group" -msgstr "група учасника" - -msgid "member host" -msgstr "вузол-учасник" - -msgid "member host group" -msgstr "група вузлів учасника" - -msgid "member netgroup" -msgstr "мережева група учасника" - -msgid "member principal" -msgstr "учасник «реєстраційний запис»" - -msgid "member privilege" -msgstr "привілеї учасника" - -msgid "member role" -msgstr "роль учасника" - -msgid "member service" -msgstr "учасник служба" - -msgid "member service delegation target" -msgstr "учасник призначення делегування служб" - -msgid "member sudo command" -msgstr "команда учасника sudo" - -msgid "member sudo command group" -msgstr "учасник група команд sudo" - -msgid "member user" -msgstr "користувач учасника" - -msgid "minimum serial number" -msgstr "мінімальний серійний номер" - -msgid "missing base_id" -msgstr "не вистачає base_id" - -msgid "modifying primary key is not allowed" -msgstr "зміну основного ключа заборонено" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" -"точка монтування вказується відносно батьківської картки, її запис не може " -"починатися з «/»" - -#, python-format -msgid "must be \"%s\"" -msgstr "має бути «%s»" - -#, python-format -msgid "must be '%(value)s'" -msgstr "має бути «%(value)s»" - -msgid "must be DNS name" -msgstr "має бути назвою DNS" - -msgid "must be Kerberos principal" -msgstr "має бути реєстраційним записом Kerberos" - -msgid "must be TRUE or FALSE" -msgstr "має дорівнювати TRUE або FALSE" - -msgid "must be True or False" -msgstr "має дорівнювати True або False" - -msgid "must be Unicode text" -msgstr "має бути текстом у Unicode" - -msgid "must be a certificate" -msgstr "має бути сертифікатом" - -msgid "must be a certificate signing request" -msgstr "має бути запитом щодо підписування сертифіката" - -msgid "must be a decimal number" -msgstr "має бути десятковим числом" - -msgid "must be absolute" -msgstr "має бути абсолютною" - -msgid "must be an integer" -msgstr "має бути цілим числом" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "має бути розміром, не менше за %(minlength)d байтів" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "має бути не меншим за %(minlength)d символів довжиною" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "має бути числом, не меншим за %(minvalue)d" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "має бути принаймні %(minvalue)s" - -msgid "must be at least 1" -msgstr "має бути принаймні 1" - -msgid "must be at least 10" -msgstr "має бути принаймні 10" - -msgid "must be binary data" -msgstr "має бути бінарними даними" - -msgid "must be datetime value" -msgstr "має бути значенням дати і часу" - -msgid "must be dictionary" -msgstr "має бути словником" - -msgid "must be enabled only on a single master" -msgstr "має бути увімкнено лише на одному основному" - -msgid "must be enclosed in parentheses" -msgstr "слід брати у дужки" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "має бути розміром точно у %(length)d байтів" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "має бути точно %(length)d символів у довжину" - -#, python-format -msgid "must be one of %(values)s" -msgstr "має бути одним з таких значень: %(values)s" - -msgid "must be relative" -msgstr "має бути відносною" - -msgid "must contain a tuple (list, dict)" -msgstr "має містити кортеж (список, словник)" - -#, python-format -msgid "must equal %r" -msgstr "має дорівнювати %r" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "має бути увімкнено роль %(role)s" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "має відповідати шаблону «%(pattern)s»" - -msgid "netgroup" -msgstr "мережева група" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Мережеву групу з назвою «%s» вже створено. Групи вузлів і мережеві групи " -"мають спільний простір назв." - -msgid "netgroups" -msgstr "мережеві групи" - -msgid "netgroups to add" -msgstr "мережеві групи, які слід додати" - -msgid "netgroups to remove" -msgstr "мережеві групи для вилучення" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "не виявлено ні команди, ні запису довідки «%(topic)s»" - -msgid "no modifications to be performed" -msgstr "змін не внесено" - -msgid "no trusted domain is configured" -msgstr "Не налаштовано жодного довіреного домену" - -msgid "no trusted domain matched the specified flat name" -msgstr "вказаній простій назві не відповідає жоден довірений домен" - -msgid "not allowed to modify group entries" -msgstr "заборонено змінювати записи груп" - -msgid "not allowed to modify user entries" -msgstr "заборонено змінювати записи користувачів" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "виконувати цю дію заборонено: %s" - -msgid "not allowed to perform server connection check" -msgstr "не дозволено виконувати перевірку з’єднання сервера" - -msgid "not allowed to remotely add agent" -msgstr "заборонено віддалено додавати агентів" - -msgid "not found" -msgstr "не знайдено" - -msgid "not fully qualified" -msgstr "вказано не повністю" - -msgid "not modifiable on managed permissions" -msgstr "не можна змінювати для керованих прав доступу" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" -"числовий клас «%(cls)s» не включено до списку дозволених числових класів: " -"%(allowed)s" - -msgid "number of passwords" -msgstr "кількість паролів" - -#, python-format -msgid "objectclass %s not found" -msgstr "клас об’єктів %s не знайдено" - -msgid "one or more values to remove" -msgstr "одне або декілька значень для вилучення" - -msgid "only \"ad\" is supported" -msgstr "передбачено підтримку лише «ad»" - -msgid "only available on managed permissions" -msgstr "доступне лише для керованих прав доступу" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"можна використовувати лише літери, цифри, %(chars)s. Символ %(chars2)s не " -"повинен бути першим або останнім символом мітки DNS." - -msgid "only master zones can contain records" -msgstr "записи можуть містити лише основні зони" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" -"можна використовувати лише один запис CNAME на назву (RFC 2136, розділ 1.1.5)" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" -"можна використовувати лише один запис DNAME на назву (RFC 6672, розділ 2.4)" - -msgid "only one node can be specified" -msgstr "можна вказувати лише один вузол" - -msgid "operation not defined" -msgstr "дію не визначено" - -#, python-format -msgid "option was renamed; use %s" -msgstr "назву параметра змінено; користуйтеся новою назвою — %s" - -msgid "options are not allowed" -msgstr "не можна використовувати параметри" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" -"порядковий номер повинен мати унікальне значення (%(order)d вже використано " -"для %(rule)s)" - -#, c-format -msgid "out of memory\n" -msgstr "не вистачає пам'яті\n" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" -"дані поза зоною: назва запису має бути піддоменом зони або відносною назвою" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "перекриття аргументів і параметрів: %(names)s" - -#, python-format -msgid "owner %s" -msgstr "власник %s" - -msgid "owner group" -msgstr "група-власник" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" -"не можна використовувати шаблон назви домену у полі власника записів " -"%(types)s (RFC 4592, розділ 4)" - -msgid "owner service" -msgstr "служба-власник" - -msgid "owner user" -msgstr "користувач-власник" +msgid "Request is missing \"params\"" +msgstr "У запиті не вказано параметри (\"params\")" msgid "params must be a list" msgstr "params має бути списком (list)" @@ -31619,525 +32075,79 @@ msgstr "params[0] (або аргументи) має бути списком (li msgid "params[1] (aka options) must be a dict" msgstr "params[1] (або параметри) має належати до типу словника (dict)" -msgid "password" -msgstr "пароль" +#, python-format +msgid "must equal %r" +msgstr "має дорівнювати %r" -msgid "password policies" -msgstr "правила щодо паролів" - -msgid "password policy" -msgstr "правила для паролів" - -msgid "password to use if not using kerberos" -msgstr "пароль, який слід використати, якщо не використовується kerberos" - -msgid "permission" -msgstr "права доступу" +msgid "Hello world" +msgstr "Привіт, світе" #, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "право доступу «%(value)s» вже існує" +msgid "%s: RADIUS proxy server not found" +msgstr "%s: проксі-сервер RADIUS не знайдено" -msgid "permissions" -msgstr "права доступу" +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "Проксі-сервер RADIUS із назвою «%s» вже існує" -msgid "pkinit" -msgstr "pkinit" +msgid "must be at least 1" +msgstr "має бути принаймні 1" -msgid "preserve" -msgstr "зберегти" +msgid "Out of memory\n" +msgstr "Не вистачає пам'яті\n" -msgid "preserve and no-preserve cannot be both set" -msgstr "" -"не можна одночасно встановлювати ознаку зарезервованості та " -"незарезервованості" +msgid "Warning unrecognized encryption type.\n" +msgstr "Попередження: невідомий тип шифрування.\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "Попередження: невідомий тип солі (salt).\n" + +msgid "Out of memory!?\n" +msgstr "Не вистачає пам'яті!?\n" + +msgid "Enctype comparison failed!\n" +msgstr "Спроба порівняння значень типу шифрування зазнала невдачі!\n" + +msgid "Password is too long!\n" +msgstr "Пароль є надто довгим!\n" + +msgid "Failed to create random key!\n" +msgstr "Не вдалося створити випадковий ключ!\n" + +msgid "Failed to create key!\n" +msgstr "Не вдалося створити ключ!\n" + +msgid "Bad or unsupported salt type.\n" +msgstr "Помилковий або непідтримуваний тип солі (salt).\n" #, c-format -msgid "principal not found\n" -msgstr "реєстраційного запису не знайдено\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "Не вдалося ініціалізувати з'єднання із сервером ldap %1$s: %2$s\n" -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "реєстраційного запису не знайдено у XML-RPC відповіді\n" +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "Не вдалося встановити LDAP_OPT_PROTOCOL_VERSION\n" -msgid "principal to add" -msgstr "реєстраційний запис для додавання" +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "Не вдалося встановити LDAP_OPT_X_SASL_NOCANON\n" -msgid "principal to remove" -msgstr "реєстраційний запис для вилучення" +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "Не вдалося встановити LDAP_OPT_X_TLS_CACERTFILE\n" -msgid "priority cannot be set on global policy" -msgstr "для загальних правил не може встановлювати пріоритети" +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "Не вдалося встановити LDAP_OPT_X_TLS_REQUIRE_CERT\n" -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"пріоритет повинен мати унікальне значення (%(prio)d вже використано для " -"%(gname)s)" - -msgid "privilege" -msgstr "привілей" - -msgid "privileged group" -msgstr "привілейована група" - -msgid "privileged hostgroup" -msgstr "привілейована група вузлів" - -msgid "privileged service delegation rule" -msgstr "привілейоване правило делегування служб" - -msgid "privileged service delegation target" -msgstr "привілейована ціль делегування служб" - -msgid "privileges" -msgstr "привілеї" - -msgid "privileges to add" -msgstr "привілеї для додавання" - -msgid "privileges to remove" -msgstr "привілеї для вилучення" +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "Не вдалося встановити LDAP_OPT_X_TLS_PROTOCOL_MIN\n" msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" msgstr "" -"не можна встановлювати для категорії профілів значення «all», доки є записи " -"дозволених профілів" +"Не вдалося створити контекст TLS (не вдалося ініціалізувати OpenSSL або " +"завантажити сертифікати)\n" -msgid "profiles cannot be added when profile category='all'" -msgstr "профілі не можна додавати, якщо категорія профілів «all»" - -msgid "pyhbac is not installed." -msgstr "pyhbac не встановлено." - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "pysss_murmur на сервері не доступний, отже base-id не надано." - -msgid "python-yubico is not installed." -msgstr "python-yubico не встановлено." - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "запит «%(owner)s %(rtype)s» за допомогою EDNS0: %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "запит «%(owner)s %(rtype)s»: %(error)s" - -msgid "range exists" -msgstr "діапазон вже існує" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" -"не можна виконувати зміни діапазону, у результаті яких виникають об’єкти з " -"ідентифікаторами поза визначеним діапазоном" - -msgid "range type change" -msgstr "зміна типу діапазону" - -#, c-format -msgid "read error\n" -msgstr "помилка читання\n" - -#, c-format -msgid "realm not found\n" -msgstr "область не знайдено\n" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" -"область або суфікс UPN перекриваються із простором назв довіреного домену" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"запис «%(owner)s %(rtype)s» не пройшов перевірки DNSSEC на сервері %(ip)s" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "вилучено значення атрибутів із запису %(value)s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "помилка запиту зі станом HTTP %d" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "у відповіді XML-RPC не знайдено результату\n" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" -"отримати і вивести всі атрибути з сервера. Стосується лише виводу команд." - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "у правому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "правий вузол не є вузлом топології: %(rightnode)s" - -msgid "role" -msgstr "роль" - -msgid "roles" -msgstr "ролі" - -msgid "roles to add" -msgstr "ролі для додавання" - -msgid "roles to remove" -msgstr "ролі для вилучення" - -msgid "runAs groups" -msgstr "групи, від імені яких виконуватиметься" - -msgid "runAs user" -msgstr "користувач, від імені якого виконуватиметься" - -msgid "runAs users" -msgstr "користувачі, від імені яких виконуватиметься" - -#, python-format -msgid "salt value: %(err)s" -msgstr "значення солі: %(err)s" - -msgid "search for POSIX groups" -msgstr "шукати групи POSIX" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" -"шукати групи з підтримкою зовнішніх учасників поза IPA з довірених доменів" - -msgid "search for managed groups" -msgstr "шукати керовані групи" - -msgid "search for non-POSIX groups" -msgstr "шукати групи, які не є групами POSIX" - -msgid "search for private groups" -msgstr "шукати закриті групи" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"список результатів пошуку об’єктів міграції\n" -"було обрізано сервером; ймовірно,\n" -"процес міграції не завершено\n" - -msgid "seconds" -msgstr "секунд" - -msgid "segment" -msgstr "сегмент" - -msgid "segments" -msgstr "сегменти" - -msgid "self service permission" -msgstr "права доступу автослужби" - -msgid "self service permissions" -msgstr "права доступу до автослужби" - -msgid "server" -msgstr "сервер" - -msgid "server role" -msgstr "роль сервера" - -msgid "server roles" -msgstr "ролі сервера" - -msgid "servers" -msgstr "сервери" - -msgid "service" -msgstr "служба" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" -"не можна встановлювати для категорії служб значення «all», доки є дозволені " -"служби" - -msgid "service delegation rule" -msgstr "правило делегування служби" - -msgid "service delegation rules" -msgstr "правила делегування служб" - -msgid "service delegation target" -msgstr "ціль делегування служб" - -msgid "service delegation targets" -msgstr "призначення делегування служб" - -msgid "service delegation targets to add" -msgstr "призначення делегування служб для додавання" - -msgid "service delegation targets to remove" -msgstr "призначення делегування служб для вилучення" - -msgid "services" -msgstr "служби" - -msgid "services cannot be added when service category='all'" -msgstr "не можна додавати записи служб, якщо категорія служб=«all»" - -msgid "services to add" -msgstr "служби для додавання" - -msgid "services to remove" -msgstr "служби для вилучення" - -msgid "setting Authoritative nameserver" -msgstr "встановлення основного сервера назв" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "не можна використовувати шаблон назви домену (RFC 4592, розділ 4)" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "single label {}s are not supported" -msgstr "підтримки одинарних міток {}ів не передбачено" - -msgid "skip reverse DNS detection" -msgstr "пропустити зворотне визначення DNS" - -msgid "sn is required" -msgstr "слід вказати sn" - -msgid "stage user" -msgstr "користувач етапу" - -msgid "stage users" -msgstr "користувачі етапу" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" -"використання типу альтернативної назви об’єкта %s заборонено для " -"реєстраційних записів, які не пов’язано із користувачами" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" -"використання типу альтернативної назви об’єкта %s заборонено для " -"реєстраційних записів користувачів" - -msgid "subtree and type are mutually exclusive" -msgstr "не можна одночасно використовувати subtree і type" - -msgid "sudo command" -msgstr "команда sudo" - -msgid "sudo command group" -msgstr "група команд sudo" - -msgid "sudo command groups" -msgstr "групи команд sudo" - -msgid "sudo command groups to add" -msgstr "групи команд sudo для додавання" - -msgid "sudo command groups to remove" -msgstr "групи команд sudo для вилучення" - -msgid "sudo commands" -msgstr "команди sudo" - -msgid "sudo commands to add" -msgstr "команди sudo, які слід додати" - -msgid "sudo commands to remove" -msgstr "команди sudo для вилучення" - -msgid "sudo rule" -msgstr "правило sudo" - -msgid "sudo rules" -msgstr "правила sudo" - -msgid "suffix" -msgstr "суфікс" - -msgid "suffixes" -msgstr "суфікси" - -msgid "system ID View" -msgstr "системний перегляд ідентифікаторів" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" -"системні об’єкти IPA (наприклад системні групи, приватні групи користувачів) " -"не може бути перевизначено" - -msgid "target and targetgroup are mutually exclusive" -msgstr "не можна одночасно використовувати target і targetgroup" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" -"сервер IPA і віддалений домен не можуть використовувати спільно ту саму " -"назву NetBIOS: %s" - -msgid "the certificate with serial number " -msgstr "сертифікат із серійним номером " - -msgid "the entry was deleted while being modified" -msgstr "запис було вилучено під час внесення змін" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "значення не відповідає формату «РРРРММДДГГХХСС»" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" -"має бути вказано хоча б один специфікатор запису призначення (наприклад " -"target, targetfilter, attrs)" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "ці атрибути не можна використовувати: %(attrs)s" - -msgid "this option has been deprecated." -msgstr "цей параметр вважається застарілим." - -msgid "this option is deprecated" -msgstr "цей параметр вважається застарілим" - -msgid "too many '@' characters" -msgstr "занадто багато символів «@»" - -msgid "trust" -msgstr "довіра" - -msgid "trust configuration" -msgstr "довірені налаштування" - -msgid "trust domain" -msgstr "довірений домен" - -msgid "trust domains" -msgstr "довірені домени" - -msgid "trust type" -msgstr "тип довіри" - -msgid "trusted domain object" -msgstr "об’єкт довіреного домену" - -msgid "trusted domain object not found" -msgstr "об’єкт довіреного домену не знайдено" - -msgid "trusted domain user not found" -msgstr "не знайдено користувача довіреного домену" - -msgid "trusts" -msgstr "записи довіри" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" -"тип об’єкта IPA (user (користувач), group (група), host (вузол), hostgroup " -"(група вузлів), service (служба), netgroup (мережева група))" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "type, filter, subtree і targetgroup є взаємовиключними" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "невідома команда: «%(name)s»" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s повідомляє про невідому помилку %(code)d: %(error)s" - -msgid "unsupported functional level" -msgstr "непідтримуваний функціональний рівень" - -msgid "unsupported trust type" -msgstr "непідтримуваний тип довіри" - -msgid "url" -msgstr "адреса" - -msgid "user" -msgstr "користувач" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "користувач «%s» вже є активним" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"не можна встановлювати для категорії користувачів значення «all», доки є " -"записи дозволених користувачів" - -msgid "users" -msgstr "користувачі" - -msgid "users and hosts cannot both be set" -msgstr "не можна одночасно вказувати користувачів і вузли" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" -"не можна додавати записи користувачів, якщо категорія запуску від імені " -"користувачів або запуску від імені груп=«all»" - -msgid "users cannot be added when user category='all'" -msgstr "" -"не можна додавати записи користувачів, якщо категорія користувачів=«all»" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "не можна вказувати користувачів, якщо типом є «hostgroup»" - -msgid "users to add" -msgstr "користувачі для додавання" - -msgid "users to exclude from migration" -msgstr "записи користувачів, які слід виключити з перенесення" - -msgid "users to remove" -msgstr "користувачі, записи яких слід вилучити" - -msgid "value" -msgstr "значення" - -msgid "vault" -msgstr "сховище" - -msgid "vaultcontainer" -msgstr "контейнер сховищ" - -msgid "vaultcontainers" -msgstr "контейнери сховищ" - -msgid "vaults" -msgstr "сховища" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: немає такого атрибута" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: такої ролі не знайдено" - -msgid "{} is required by the IPA master" -msgstr "{} потрібен основному серверу IPA" +msgid "Unable to initialize STARTTLS session\n" +msgstr "Не вдалося ініціалізувати сеанс STARTTLS\n" #~ msgid "" #~ "\n" @@ -32189,18 +32199,15 @@ msgstr "{} потрібен основному серверу IPA" #~ msgid "Generated CSR was empty" #~ msgstr "Створений CSR виявився порожнім" -#, python-format #~ msgid "Generation rule \"%(rulename)s\" is missing the \"rule\" key" #~ msgstr "У правилі створення «%(rulename)s» немає ключа «rule»" #~ msgid "Name of CSR generation profile (if not the same as profile_id)" #~ msgstr "Назва профілю створення CSR (якщо не та сама, що і profile_id)" -#, python-format #~ msgid "No CSR generation rules are defined for profile %(profile_id)s" #~ msgstr "Для профілю %(profile_id)s не визначено правил створення CSR" -#, python-format #~ msgid "No generation rule %(rulename)s found." #~ msgstr "Не знайдено правила створення %(rulename)s." @@ -32220,7 +32227,6 @@ msgstr "{} потрібен основному серверу IPA" #~ msgid "Path to private key file" #~ msgstr "Шлях до файла закритого ключа" -#, python-format #~ msgid "Required CSR generation rule %(name)s is missing data" #~ msgstr "У обов’язковому правилі створення CSR, %(name)s, не вистачає даних" diff --git a/po/zh_CN.po b/po/zh_CN.po index acae38732..047da8e64 100644 --- a/po/zh_CN.po +++ b/po/zh_CN.po @@ -17,416 +17,839 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" +#, c-format +msgid "Out of memory!\n" +msgstr "内存不足！\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "没有权限将该主机加入到IPA域。\n" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "在keytab文件%s中没有写权限\n" + +#, fuzzy, c-format +#| msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "在rootdse中查找%1$s失败，错误%2$d\n" + +#, c-format +msgid "Out of memory!" +msgstr "内存不足！" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "在LDAP中不能启用SSL\n" + +#, fuzzy +#| msgid "Simple bind failed\n" +msgid "SASL Bind failed\n" +msgstr "简单绑定失败\n" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "在rootdse中查找%1$s失败，错误%2$d\n" + +#, c-format +msgid "No values for %s" +msgstr "%s没有值" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "查找IPA名称上下文失败，错误%d\n" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "IPA名称上下文没有找到\n" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "无法确定%s的根DN\n" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "注册失败。%s\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "在XML-RPC响应中找不到主体\n" + +#, c-format +msgid "Host is already joined.\n" +msgstr "主机已加入。\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_dumps() failed\n" +msgstr "fork()失败\n" + +#, fuzzy, c-format +#| msgid "Invalid JSON-RPC request: %(error)s" msgid "" -"\n" -"\n" -"EXAMPLES:\n" +"JSON-RPC request:\n" +"%s\n" +msgstr "无效的JSON-RPC请求: %(error)s" + +#, fuzzy, c-format +#| msgid "Operation failed: %s\n" +msgid "JSON-RPC call failed: %s\n" +msgstr "操作失败：%s\n" + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "No response" +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "没有响应" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "fork() failed\n" +msgid "json_pack_ex() failed: %s\n" +msgstr "fork()失败\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "取消注册成功。\n" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "取消注册失败。\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "在XML-RPC响应中找不到结果\n" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "无法从%s中确定IPA主机\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "无法加入主机：Kerberos上下文初始化失败\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "无法加入主机：找不到Kerberos凭证缓存\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "无法加入主机：找不到Kerberos用户主体并且没有提供主机密码。\n" + +#, c-format +msgid "fork() failed\n" +msgstr "fork()失败\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytab没有找到\n" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytab没有权限？\n" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "执行has bad permissions失败，错误码%d\n" + +#, c-format +msgid "child exited with %d\n" +msgstr "结果以%d退出\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "解析keytab错误：%s。\n" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "获取默认Kerberos域错误：%s。\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "解析\"%1$s\"：%2$s错误。\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "获取初始化证书错误：%s。\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "无法生成Kerberos凭证缓存\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "在凭证缓存中存储证书错误：%s。\n" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "以GSSAPI模式打印原始的XML-RPC输出" + +msgid "Quiet mode. Only errors are displayed." +msgstr "单用户模式。仅显示错误。" + +msgid "Unenroll this host from IPA server" +msgstr "从IPA服务器中取消注册该主机" + +msgid "Hostname of this server" +msgstr "该服务器的主机名" + +msgid "hostname" +msgstr "主机名" + +msgid "IPA Server to use" +msgstr "待使用的IPA服务器" + +msgid "Specifies where to store keytab information." +msgstr "指定存储keytab信息的位置。" + +msgid "filename" +msgstr "文件名" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "强制主机加入。即使已经加入了也重新加入。" + +msgid "LDAP password (if not using Kerberos)" +msgstr "LDAP密码（如果没有使用Kerberos）" + +msgid "password" +msgstr "密码" + +#, fuzzy +#| msgid "LDAP password" +msgid "LDAP basedn" +msgstr "LDAP密码" + +msgid "basedn" +msgstr "" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "主机名必须是完全限制的：%s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "主机名必须不能是：%s\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "无法解析主体名\n" + +#, fuzzy, c-format +#| msgid "Error parsing \"%1$s\": %2$s.\n" +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "解析\"%1$s\"：%2$s错误。\n" + +#, c-format +msgid "Removing principal %s\n" +msgstr "删除主体%s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "打开keytab失败\n" + +#, c-format +msgid "principal not found\n" +msgstr "主体没有找到\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "无法删除条目\n" + +#, c-format +msgid "kvno %d\n" +msgstr "" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "Failed to get result: %s\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "获取结果失败：%s\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "服务解析主体\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "realm not found\n" +msgstr "域找不到\n" + +msgid "Print debugging information" +msgstr "打印调试信息" + +msgid "Debugging output" +msgstr "调试输出" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "从keytab中待删除的主体（例如：ftp/ftp.example.com@EXAMPLE.COM）" + +msgid "Kerberos Service Principal Name" +msgstr "Kerberos服务主体名" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" + +msgid "Keytab File Name" +msgstr "Keytab文件名" + +msgid "Remove all principals in this realm" +msgstr "删除该域中的所有主体" + +msgid "Realm name" +msgstr "域名" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Kerberos文本初始化失败\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "打开keytab'%1$s'：%2$s失败\n" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "关闭keytab失败\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "不能打开配置文件%s\n" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "不能stat()配置文件%s\n" + +#, c-format +msgid "out of memory\n" +msgstr "内存不足\n" + +#, c-format +msgid "read error\n" +msgstr "读取错误\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Kerberos文本初始化失败：%1$s (%2$d)\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "不能解析主体：%1$s (%2$d)\n" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "没有KDC可接受的密钥\n" + +#, c-format +msgid "Out of memory \n" +msgstr "内存不足\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "不能初始化ldap库！\n" + +msgid "Simple bind failed\n" +msgstr "简单绑定失败\n" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "操作失败：%s\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "获取结果失败：%s\n" + +#, c-format +msgid "Timeout exceeded." +msgstr "严重超时" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "解析扩展结果失败：%s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "解析结果失败：%s\n" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "缺少应答控制列表！\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "缺少应答控制！\n" + +#, c-format +msgid "Out of Memory!\n" +msgstr "内存不足！\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "创建控制失败！\n" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "绑定服务器失败！\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "获取keytab失败！\n" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "ber_init()失败，无效的控制？！\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "ber_scanf()失败，没有找到kvno？！\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "检索加密类型#%d失败\n" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "检索加密类型%1$s (#%2$d)失败\n" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "未能检索任何密钥" + +msgid "Failed to decode control reply!\n" +msgstr "解码控制应答失败！\n" + +#, fuzzy, c-format +#| msgid "Passwords do not match!" +msgid "Passwords do not match!\n" +msgstr "密码不匹配！" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "打开配置文件%s失败\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "解析配置文件%s失败\n" + +#, fuzzy +#| msgid "Failed to open keytab\n" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "打开keytab失败\n" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" + +msgid "Print as little as possible" +msgstr "打印尽可能少" + +msgid "Output only on errors" +msgstr "仅输出错误" + +msgid "Contact this specific KDC Server" +msgstr "无法连接指定的KDC服务器" + +msgid "Server Name" +msgstr "服务器名" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "为主体获取一个keytab（例如：ftp/ftp.example.com@EXAMPLE.COM）" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" + +msgid "Encryption types to request" +msgstr "加密类型要求" + +msgid "Comma separated encryption types list" +msgstr "以逗号分隔的加密类型列表" + +msgid "Show the list of permitted encryption types and exit" +msgstr "显示允许的加密类型列表并退出" + +msgid "Permitted Encryption Types" +msgstr "允许的加密类型" + +msgid "Asks for a non-random password to use for the principal" +msgstr "要求一个非随机密码用于主体" + +#, fuzzy +#| msgid "LDAP URI" +msgid "LDAP DN" +msgstr "LDAP URI" + +msgid "DN to bind as if not using kerberos" +msgstr "DN绑定好像没有使用kerberos" + +msgid "LDAP password" +msgstr "LDAP密码" + +msgid "password to use if not using kerberos" +msgstr "如果没有使用kerberos，则使用密码" + +#, fuzzy +#| msgid "LDAP password" +msgid "Prompt for LDAP password" +msgstr "LDAP密码" + +#, fuzzy +#| msgid "CA certificate" +msgid "Path to the IPA CA certificate" +msgstr "CA证书" + +#, fuzzy +#| msgid "CA certificate" +msgid "IPA CA certificate" +msgstr "CA证书" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" + +msgid "url" +msgstr "" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "" + +msgid "GSSAPI|EXTERNAL" +msgstr "" + +msgid "Retrieve current keys without changing them" +msgstr "检索当前密钥不去改变它们" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "没有系统首选的加密类型？！\n" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "支持的加密类型：\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "警告：转换类型失败（#%d）\n" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "" + +#, fuzzy +#| msgid "LDAP password" +msgid "Enter LDAP password" +msgstr "LDAP密码" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "" + +#, fuzzy, c-format +#| msgid "" +#| "cannot specify full target filter and extra target filter simultaneously" +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "不能同时指定完整的目标滤波器和额外的目标滤波器" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "服务器名没有提供或不可用\n" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "提供了不兼容的选项（-r和-P）\n" + +msgid "New Principal Password" +msgstr "新的主体密码" + +msgid "Verify Principal Password" +msgstr "验证主体密码" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "警告：盐值类型没有授予随机密码（查看选项-P）\n" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "无效的服务主体名\n" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "没有找到Kerberos凭证缓存。你有Kerberos票据吗？\n" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "没有找到Kerberos用户主体。你有有效的凭证缓存吗？\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "打开Keytab失败\n" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "用pre-4.0 keytab检索方法重试...\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "创建密钥材料失败\n" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "获取keytab失败\n" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "向keytab中添加密钥失败\n" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "关闭keytab失败\n" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Keytab检索成功并将其存储在：%s\n" + +msgid "Failed members" +msgstr "失败的成员" + +msgid "Failed source hosts/hostgroups" +msgstr "失败的源主机/主机组" + +msgid "Failed hosts/hostgroups" +msgstr "失败的主机/主机组" + +msgid "Failed users/groups" +msgstr "失败的用户/用户组" + +msgid "Failed service/service groups" +msgstr "失败的服务/服务组" + +msgid "Failed to remove" +msgstr "移除失败" + +msgid "Failed RunAs" +msgstr "作为其他用户运行失败" + +msgid "Failed RunAsGroup" +msgstr "作为其他用户组运行失败" + +msgid "Failed profiles" +msgstr "错误的配置文件" + +#, fuzzy +#| msgid "Failed RunAs" +msgid "Failed CAs" +msgstr "作为其他用户运行失败" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed member manager" +msgstr "失败的成员" + +#, fuzzy +#| msgid "Failed members" +msgid "Failed managedby" +msgstr "失败的成员" + +msgid "Failed allowed to retrieve keytab" +msgstr "不允许检索keytab" + +msgid "Failed allowed to create keytab" +msgstr "不允许创建keytab" + +msgid "Failed targets" +msgstr "失败的目标" + +msgid "Failed owners" +msgstr "错误的所有者" + +msgid "Failed to add" +msgstr "添加失败" + +msgid "maps not connected to /etc/auto.master:" +msgstr "映射未连接到/etc/auto.master：" + +msgid "Import automount files for a specific location." +msgstr "在一特定位置导入自动挂载文件。" + +msgid "Master file" +msgstr "主文件" + +msgid "Automount master file." +msgstr "自动挂载主文件。" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "连续操作模式。报告错误但是这个过程仍在继续。" + +#, python-format +msgid "File %(file)s not found" +msgstr "没有找到文件 %(file)s " + +#, python-format +msgid "key %(key)s already exists" +msgstr "键 %(key)s 已存在" + +#, python-format +msgid "map %(map)s already exists" +msgstr "映射 %(map)s 已存在" + +msgid "Imported maps:" +msgstr "已导入的映射：" + +#, python-format +msgid "Added %(map)s" +msgstr "已添加 %(map)s" + +msgid "Imported keys:" +msgstr "已导入的键：" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "已添加 %(src)s 到 %(dst)s" + +msgid "Ignored keys:" +msgstr "已忽略的键：" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "已忽略 %(src)s 到 %(dst)s" + +msgid "Duplicate maps skipped:" +msgstr "已忽略重复的映射：" + +#, python-format +msgid "Skipped %(map)s" +msgstr "已忽略 %(map)s" + +msgid "Duplicate keys skipped:" +msgstr "已忽略重复的键：" + +#, python-format +msgid "Skipped %(key)s" +msgstr "已忽略 %(key)s" + +#, fuzzy +#| msgid "Input filename" +msgid "Input file" +msgstr "输入文件名" + +#, fuzzy +#| msgid "File to load the certificate from." +msgid "File to load the certificate from" +msgstr "从文件加载证书" + +msgid "cannot specify both raw certificate and file" +msgstr "不能同时指定原始证书和文件" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "配置储存在文件'%(file)s'中" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "证书存储在文件'%(file)s'中" + +msgid "Servers details:" +msgstr "服务器详细信息：" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"迁移模式是禁用的。\n" +"使用'ipa config-mod --enable-migration=TRUE'来启用它。" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"密码已迁移成pre-hashed格式。IPA不能生成Kerberos密钥，除非提供明文密码。所有移" +"植过的用户在能使用他们的Kerberos账号之前需要登录https://your.domain/ipa/" +"migration/。" + +msgid "python-yubico is not installed." msgstr "" -"\n" -"\n" -"例如：\n" msgid "" "\n" -" Vault Container object.\n" -" " +"YubiKey Tokens\n" msgstr "" "\n" -" 库容器对象。\n" -" " - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" 库对象。\n" -" " - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" -"\n" -" 增加一个新的令牌：\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* 权限允许访问读，写，添加，删除，读，查找或比价。\n" -"* 特权结合了相似的权限（例如所有权限需要添加一个用户）\n" -"* 角色为用户，用户组，主机或主机组授予一系列特权。\n" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" -"\n" -"* 主机必须存在\n" -"* 服务必须存在（或者你使用--add选项来自动添加它）\n" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" -"\n" -"一个证书是以一个服务主体存储，并一个服务主体需要一个主机。\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"条件是一个用于389-ds的正则表达式来用一个自动成员规则区匹配一个新添加的条目。" -"如果它匹配一个兼容规则，那么该条目被添加到合适的组或主机组中去。\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"一个默认组或主机组可以指定给不匹配任何规则的条目。万一是用户条目，则该组会是" -"一个会退组，因为在IPA配置中所有用户默认是指定组的成员。\n" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"权限由许多不同部分组成：\n" -"\n" -"1. 权限名。\n" -"2. 权限目标。\n" -"3. 权限授予的权限。\n" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"一个权限可能不包含其他权限。\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"规则是和组名直接关联的，因此你不能创建一个没有组或主机组的规则。\n" - -msgid "" -"\n" -"API Schema\n" -msgstr "" -"\n" -"API 模式\n" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"同时，有以下合适的选项。设置其中一个选项将会设置相应的属性。\n" -"1. 类型：对象（用户，用户组等）的类型；设置子树和目标过滤器。\n" -"2. 组： 适用于一个组的成员；设置目标过滤器。\n" -"3. 目标组：允许修改一个指定组（例如授予管理组成员的权限）；设置目标。\n" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" -"\n" -"所有的CAs除了'IPA' CA都可以被禁用或重新启用。禁用一个CA会阻止它发布证书，但不" -"会影响它的证书的有效性。\n" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"顺序可以添加到一个sudo规则中来控制它们评估的顺序（如果客户端支持）。该顺序是" -"一个整数并且是唯一的。\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"非对称库和标准库类似，但它在传输前会使用一个公钥来预加密密码。该密码仅能通过" -"对应的私钥来检索。\n" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"自动成员规则。\n" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"基于所有者管理有三种库类别：\n" -"* 用户/私有库\n" -"* 服务库\n" -"* 共享库\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"基于安全机制有三种库类型：\n" -"* 标准库\n" -"* 对称库\n" -"* 非对称库\n" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"基类用户\n" -"\n" -"这包含了用户/计划用户常见的定义\n" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" -"\n" -"CAs (除了'IPA' CA)都可以被删除。删除一个CA会撤销它的签名证书并删除它的私" -"钥。\n" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"证书请求以PEM格式的证书签名请求(CSR)的形式存在。\n" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" -"\n" -"证书可能通过证书主题，序列号，撤销原因，有效日期和发布日期来查询。\n" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" -"\n" -"DNS服务器配置\n" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" -"\n" -"GMT格式的日期用来匹配证书里的日期。\n" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"删除或重命名一个管理权限，同时改变它的目标是不允许的。\n" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"域名系统（DNS）\n" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"例如：\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"获取安装IPA服务器信息。\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"获取由IPA主服务器提供的角色（DNS服务器，CA等）状态。\n" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" -"\n" -"IPA证书操作\n" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"IPA位置\n" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"IPA提供了一种方法来配置Sudo的各个方面：\n" -" 用户：用户/用户组允许调用Sudo。\n" -" 主机：主机/主机组上的用户允许调用Sudo。\n" -" 允许的命令：指定命令允许通过Sudo来运行。\n" -" 阻止的命令：指定命令禁止通过Sudo来运行。\n" -" 作为用户来运行：Sudo会调用用户或用户组的权限。\n" -" 作为组来运行：Sudo会调用组的gid权限。\n" -" 选项：各种Sudoers选项可以修改Sudo的行为。\n" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"IPA服务器角色\n" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA服务器\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"IPA支持使用OTP令牌来多因素认证。这个码能管理OTP令牌。\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"IPA对于krb5 OTP认证支持使用额外的RADIUS代理服务器。这在集成第三方认证服务时提" -"供了很多方便。\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" -"\n" -"实现了一组命令来管理服务器的SSL证书。\n" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" -"\n" -"为了请求一个证书：\n" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" -"\n" -"加入一个IPA域\n" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" -"\n" -"管理证书颁发机构\n" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" -"\n" -"管理DNS区域和资源记录。\n" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"管理OTP 令牌。\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"管理RADIUS代理服务器。\n" +"YubiKey令牌\n" msgid "" "\n" @@ -435,243 +858,6 @@ msgstr "" "\n" "管理YubiKey令牌。\n" -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"管理库。\n" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"管理权限\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"设置DNS位置\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"设置DNS服务器配置\n" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" -"\n" -"Misc插件\n" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" -"\n" -"注意没有使用原因码7。查看RFC 5280以获取更多详细信息：\n" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"注意属性和条目之间的区别。权限是独立的，能添加一个用户并不代表该用户是可编辑" -"的。\n" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP令牌\n" - -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"权限\n" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" -"\n" -"通过CLI不能直接访问插件，需要使用内部命令\n" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"提供API自省能力。\n" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"RADIUS代理服务器\n" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" -"\n" -"提高IPA域级别。\n" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" -"\n" -"删除'%(hostname)s'导致在后缀'%(suffix)s'拓扑中失去连接：%(errors)s" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" -"\n" -"复制拓扑后缀'%(suffix)s'已失去连接：%(errors)s" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"权限定义了允许哪些操作，可能是下面的一个或多个：\n" -"1. 写 - 写一条或多条属性\n" -"2. 读 - 读一条或多条属性\n" -"3. 查找 - 查找一条或多条属性\n" -"4. 比较 - 比较一条或多条属性\n" -"5. 添加 - 添加一条新属性到树中\n" -"6. 删除 - 删除一条已存在的条目\n" -"7. 全部 - 授予的所有权限\n" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" -"\n" -"查找：\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"标准库使用一种安全机制来传输和存储密码。密码仅能被有权限访问该库的用户检" -"索。\n" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" -"\n" -"从属证书颁发机构（Sub-CAs）可以当作是X.509证书的发行范围。\n" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" -"\n" -"Sudo (su \"do\")允许一个系统管理员给特定用户（或用户组）授予权限使其有以root" -"或其他用户的能力来运行一些（或全部）命令，同时会对命令和命令参数提供一个审计" -"跟踪。\n" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" -"\n" -"Sudo规则\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"对称库和标准库类似，但它在传输前会使用一个密码来预加密该密码。密码仅能使用相" -"同的密码来检索。\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"automember-rebuild命令可以用来对现有条目跟踪运行自动成员规则，以此来重建它们" -"的成员组。\n" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"日期格式是YYYY-mm-dd。\n" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" -"\n" -"dogtag CA只是使用CSR的CN值，并强制主题的其他值在服务器中配置。\n" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" -"\n" -"支持下面的撤销原因：\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"有许多允许的目标：\n" -"1. 子树：一个DN；在该DN下应用权限的子树\n" -"2. 目标过滤器：一个LDAP过滤器\n" -"3. 目标：权限适用于带有可能通配符，指定条目的DN\n" - msgid "" "\n" "This code is an extension to the otptoken plugin and provides support for\n" @@ -682,166 +868,118 @@ msgstr "" msgid "" "\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" +"EXAMPLES:\n" msgstr "" "\n" -"拓扑\n" -"\n" -"域级别为1的复制拓扑的管理。\n" +"例如：\n" msgid "" "\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" msgstr "" "\n" -"用户库被特定用户拥有并使用。私有库被当前用户拥有。服务库被一个服务拥有。共享" -"库被管理员拥有但可以被其他用户或服务使用。\n" +" 增加一个新的令牌：\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "" -"\n" -"Vaults\n" +msgid "Add a new YubiKey OTP token." +msgstr "增加一个新的YubiKey OTP令牌。" + +msgid "YubiKey slot" +msgstr "YubiKey槽" + +msgid "No free YubiKey slot!" +msgstr "没有空闲的YubiKey槽！" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "从复制拓扑中移除%(servers)s，请稍后..." + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "启用Sudo规则\"%s\"" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "禁用Sudo规则\"%s\"" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "已添加\"%(option)s\"到Sudo规则\"%(rule)s\"" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "已从Sudo规则\"%(rule)s\"中移除\"%(option)s\"" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "复制拓扑的后缀\"%(suffix)s\"是按序的。" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "复制拓扑的后缀\"%(suffix)s\"包含错误。" + +msgid "Topology is disconnected" +msgstr "拓扑已断开连接" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "服务器%(srv)s不能连接服务器： %(replicas)s" + +msgid "Recommended maximum number of agreements per replica exceeded" msgstr "" -"\n" -"库\n" -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of agreements per replica" +msgstr "返回的最大条目数" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" msgstr "" -"\n" -"验证复制拓扑的后缀。\n" -"检查完成：\n" -" 1. 检查是否还有没有连接的拓扑。换句话说，是否在所有服务器之间存在复制路" -"径。\n" -" 2. 检查是否服务器没有超过推荐的副本协议数\n" -msgid "" -"\n" -"YubiKey Tokens\n" +msgid "Delete a user, keeping the entry available for future use" +msgstr "删除一个用户，让这个用户可供将来使用" + +msgid "Delete a user" +msgstr "删除一个用户" + +#, fuzzy +#| msgid "users and hosts cannot both be set" +msgid "preserve and no-preserve cannot be both set" +msgstr "用户和主机不能被同时设置" + +msgid "Write certificate (chain if --chain used) to file" msgstr "" -"\n" -"YubiKey令牌\n" + +#, fuzzy +#| msgid "System DNS records updated" +msgid "Split DNS record to parts" +msgstr "系统DNS记录已更新" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "请选择一个待添加的DNS资源记录类型" #, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "另外，下面服务器可以运行该命令：%(masters)s" +msgid "The most common types for this type of zone are: %s\n" +msgstr "这种区域的最常见类型是： %s\n" + +msgid "DNS resource record type" +msgstr "DNS资源记录类型" #, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\"不是一个有效的权限类型" +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "无效的或者不支持的类型。允许的值是：%s" + +msgid "No option to modify specific record provided." +msgstr "没有提供选项来修改具体的记录。" + +msgid "Current DNS record contents:\n" +msgstr "目前的DNS记录内容：\n" #, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\"不是一个对象类型" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "呈现${count}个证书" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} item(s)已添加" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "已删除${count}个条目" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "已禁用${count}个条目" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "已启用${count}个条目" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} item(s) 已移除" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "已删除${count}个选项" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "已激活${count}个用户" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "已恢复${count}个用户" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "已呈现${count}个用户" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "${entity} ${primary_key}设置" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "${entity} ${primary_key}已更新" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity}已添加成功" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key}适用于：" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key}是其中一个成员：" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key}受管于：" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "${primary_key}成员：" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key}覆盖：" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}，版本：${version}" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s没有包含'%(value)s'" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s：无效的语法。" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s：仅允许一个值。" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"%(container)s LDAP搜索没有返回任何结果（搜索基：%(search_base)s，对象类： " -"%(objectclass)s）" +msgid "Modify %(name)s '%(value)s'?" +msgstr "修改 %(name)s '%(value)s'？" #, python-format msgid "" @@ -852,1285 +990,1924 @@ msgid_plural "" "be modified at one time." msgstr[0] "%(count)d %(type)s记录已忽略。每个DNS记录类型一次只能修改一个值。" -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d个ACI已匹配" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "已匹配%(count)d个CA ACL" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "已匹配%(count)d个CA" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "已匹配%(count)d个DNS服务器" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "已匹配%(count)d个组ID覆盖" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "已匹配%(count)d个HBAC规则" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "已匹配%(count)d个HBAC服务组" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "已匹配%(count)d个HBAC服务" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "已匹配%(count)d个ID视图" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "已匹配%(count)d个ID覆盖" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "已匹配%(count)d个IPA位置" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "已匹配%(count)d个IPA服务器" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "已匹配%(count)d个OTP令牌" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "已匹配%(count)d个RADIUS代理服务器" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "已匹配%(count)d个SELinux用户映射" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "已匹配%(count)d个Sudo命令组" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "已匹配%(count)d个Sudo命令" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "已匹配%(count)d个Sudo规则" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "已匹配%(count)d个用户ID覆盖" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "已匹配%(count)d个自动挂载键" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "已匹配%(count)d个自动挂载位置" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "已匹配%(count)d个自动挂载映射" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "已匹配%(count)d个证书" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "已匹配%(count)d个授权" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "已匹配%(count)d个组" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "已匹配%(count)d个主机" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "已匹配%(count)d个主机组" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "已匹配%(count)d个网络组" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "已匹配%(count)d个权限" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "已加载%(count)d个插件" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "已匹配%(count)d个特权" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "已匹配%(count)d个配置文件" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "已匹配%(count)d个范围" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "已匹配%(count)d个角色" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "已匹配%(count)d个规则" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "已匹配%(count)d个段" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "已匹配%(count)d个自助服务" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "已匹配%(count)d个服务授权规则" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "已匹配%(count)d个服务授权目标" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "已匹配%(count)d个服务" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "已匹配%(count)d个拓扑后缀" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "已匹配%(count)d个信任" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "已匹配%(count)d个用户" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d个变量" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "已匹配%(count)d个库" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "已匹配%(count)s个服务器角色" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "%(cver)s客户端和在'%(server)s'的%(sver)s服务器不兼容" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s：文件没找到" - -#, python-format -msgid "%(host)s failed" -msgstr "%(host)s已失败" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "%(host)s已失败：%(error)s" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "%(key)s不能被删除因为%(label)s %(dependent)s需要它" - -#, python-format msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "%(key)s不能被删除或禁用因为它是%(label)s %(container)s的最后一个成员" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s不能被删除/修改：%(reason)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s证书无效" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "%(obj)s默认属性%(attr)s是不允许的！" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "名为\"%(pkey)s\"的%(oname)s已存在" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s不支持主体 %(principal_type)s" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\"没有找到" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s：%(oname)s没有找到" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s：%(oname)s没有找到" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s不是一个有效的端口" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "%(task)s LDAP任务超时，任务DN：'%(task_dn)s'" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "%(type)s类别不能设置为all'，虽然有允许%(objects)s" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s不是一个POSIX用户" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -#, python-format -msgid "%i CA added." -msgstr "%iCA已添加。" - -#, python-format -msgid "%i CA removed." -msgstr "%iCA已移除。" - -#, python-format -msgid "%i CAs added." -msgstr "%iCAs已添加。" - -#, python-format -msgid "%i CAs removed." -msgstr "%iCAs已移除。" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "%i主机或主机组已添加。" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "%i主机或主机组已移除。" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "%i主机或主机组已添加。" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "%i主机或主机组已移除。" - -#, python-format -msgid "%i profile added." -msgstr "%i配置文件已添加。" - -#, python-format -msgid "%i profile removed." -msgstr "%i配置文件已移除。" - -#, python-format -msgid "%i profiles added." -msgstr "%i配置文件已添加。" - -#, python-format -msgid "%i profiles removed." -msgstr "%i配置文件已移除。" - -#, python-format -msgid "%i service added." -msgstr "%i服务已添加。" - -#, python-format -msgid "%i service removed." -msgstr "%i服务已移除。" - -#, python-format -msgid "%i services added." -msgstr "%i服务已添加。" - -#, python-format -msgid "%i services removed." -msgstr "%i服务已移除。" - -#, python-format -msgid "%i user or group added." -msgstr "%i用户或组已添加。" - -#, python-format -msgid "%i user or group removed." -msgstr "%i用户或组已移除。" - -#, python-format -msgid "%i users or groups added." -msgstr "%i用户或用户组已添加。" - -#, python-format -msgid "%i users or groups removed." -msgstr "%i用户或用户组已移除。" - -#, python-format -msgid "%s Record" -msgstr "%s记录" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s不是一个有效的属性。" - -#, python-format -msgid "%s record" -msgstr "%s记录" - -#, python-format -msgid "%s to add" -msgstr "待添加的%s" - -#, python-format -msgid "%s to exclude from migration" -msgstr "不移植%s" - -#, python-format -msgid "%s to remove" -msgstr "待移除的%s" - -#, python-format -msgid "%s: group not found" -msgstr "%s：找不到组" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s：用户已保存" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "'${port}'不是一个有效的端口" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "'%(attr)s'已包含一个或多个值" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s'已被弃用。%(additional_info)s" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s'没有证书。" - -#, python-format -msgid "'%(name)s' is required" -msgstr "需要'%(name)s'" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s'选项已弃用。%(additional_info)s" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "当'%(name)s'被设置时'%(required)s'必须不能为空" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "'%s'是DNS记录的必要部分" - -msgid "'add' option" -msgstr "'add'选项" - -msgid "(deprecated)" -msgstr "（弃用）" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "（查阅RFC %s 来获取详细信息）" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "检查存在组的GID。使用--group-overwrite-gid选项来覆盖GID" - -msgid "7 is not a valid revocation reason" -msgstr "7不是一个有效的撤销原因" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." msgstr "" -"

如果没有选择方法那么就使用隐式方法（密码）。

密码+双因素LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认证方" -"法，该方法需要使用armor ccache

RADIUS和另外的类型： " -"Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证选项。" +"没有提供--del-all或者选项来删除一个特定的记录。\n" +"可以使用命令帮助来查询所有支持的记录类型。" + +msgid "No option to delete specific record provided." +msgstr "没有提供选项来删除具体的记录。" + +msgid "Delete all?" +msgstr "全部删除？" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "删除%(name)s '%(value)s'？" + +msgid "Server will check DNS forwarder(s)." +msgstr "服务器将检查DNS转发器。" + +msgid "This may take some time, please wait ..." +msgstr "这可能需要一些时间，请稍等..." + +#, fuzzy +#| msgid "DNS forward zone" +msgid "DNS forwarder" +msgstr "DNS正向区域" + +#, fuzzy +#| msgid "System DNS records updated" +msgid "file to store DNS records in nsupdate format" +msgstr "系统DNS记录已更新" msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

如果所有选项都检测了那么每个用户设置会覆盖全局设置。

密码+双" -"因素LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认" -"证方法，该方法需要使用armor ccache

RADIUS和另外的类型： Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证" -"选项。

" - -msgid "A IP Address" -msgstr "IP地址" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "系统权限可能不能被修改或删除" - -msgid "A description of this RADIUS proxy server" -msgstr "该RADIUS代理服务器的描述" - -msgid "A description of this auto member rule" -msgstr "一个自动成员规则的描述" - -msgid "A description of this command" -msgstr "该命令的一个描述" - -msgid "A description of this host" -msgstr "该主机的描述" - -msgid "A description of this host-group" -msgstr "该主机组的描述" - -msgid "A description of this role-group" -msgstr "该角色组的描述" - -msgid "A dictionary representing an LDAP entry" -msgstr "一个字典代表一个LDAP条目" - -msgid "A group may not be a member of itself" -msgstr "一个组不能是自己的成员" - -msgid "A group may not be added as a member of itself" -msgstr "一个组不能是自己的成员" - -msgid "A host willing to act as a key exchanger" -msgstr "主机愿意充当关键交换器" - -msgid "A host willing to act as a mail exchanger" -msgstr "主机愿意充当邮件交换器" - -msgid "A hostname which this alias hostname points to" -msgstr "一个别名主机名指向主机名" - -msgid "A list of ACI values" -msgstr "ACI值列表" - -msgid "A list of LDAP entries" -msgstr "LDAP条目列表" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "SELinux用户列表期望以$分隔" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "使用输出编码配置无法显示二维码。请使用令牌URI来配置你的OTP设备" msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"一个全局转发器列表。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个" -"自定义端口" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "二维码的宽度大于tty的输出。请调整你的终端。" -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"一个Per-zone转发器列表。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定" -"一个自定义端口" +msgid "Synchronize an OTP token." +msgstr "同步一个OTP令牌。" -msgid "A managed group cannot have a password policy." -msgstr "管理组不能有密码策略。" +msgid "User ID" +msgstr "用户ID" + +msgid "Password" +msgstr "密码" + +msgid "First Code" +msgstr "第一个码" + +msgid "Second Code" +msgstr "第二个码" + +msgid "Token ID" +msgstr "令牌ID" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "不能读取文件'%(filename)s': %(exc)s" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "不能解码文件'%(filename)s': %(exc)s" + +msgid "Invalid credentials" +msgstr "无效的证书" + +msgid "Create a new vault." +msgstr "创建一个新库。" + +msgid "Vault password" +msgstr "库密码" + +msgid "File containing the vault password" +msgstr "文件包含库密码" + +msgid "File containing the vault public key" +msgstr "文件包含库公钥" + +msgid "Password can be specified only for symmetric vault" +msgstr "" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" + +msgid "Password specified multiple times" +msgstr "多次指定密码" + +msgid "Public key specified multiple times" +msgstr "多次指定公钥" + +msgid "Missing vault public key" +msgstr "缺少库公钥" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "无效的或不支持的库公钥：%s" + +msgid "Modify a vault." +msgstr "修改一个库。" + +msgid "Change password" +msgstr "改变密码" + +msgid "Old vault password" +msgstr "旧的库密码" + +msgid "File containing the old vault password" +msgstr "文件包含旧的库密码" + +msgid "New vault password" +msgstr "新的库密码" + +msgid "File containing the new vault password" +msgstr "文件包含新的库密码" + +msgid "Old vault private key" +msgstr "旧的库私钥" + +msgid "File containing the old vault private key" +msgstr "文件包含旧的库私钥" + +msgid "File containing the new vault public key" +msgstr "文件包含新的库公钥" + +msgid "New public key specified multiple times" +msgstr "多次指定新公钥" + +msgid "Missing new vault public key" +msgstr "缺少新的库公钥" + +msgid "Archive data into a vault." +msgstr "数据归档到库。" + +msgid "Binary data to archive" +msgstr "" + +#, fuzzy +#| msgid "File containing the vault private key" +msgid "File containing data to archive" +msgstr "文件包含库私钥" + +msgid "Override existing password" +msgstr "覆盖已存在的密码" + +msgid "Input data specified multiple times" +msgstr "多次指定输入数据" #, python-format msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "遇到的问题是什么时候验证所有成员是%(verb)s：%(exc)s" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "数据大小超出限制。目前库数据大小限制为 %(limit)d B" -msgid "A record" -msgstr "一条记录" +msgid "Invalid vault type" +msgstr "无效的库类型" + +msgid "Retrieve a data from a vault." +msgstr "从库中检索一个数据。" + +msgid "File to store retrieved data" +msgstr "文件存储检索数据" + +msgid "Vault private key" +msgstr "库私钥" + +msgid "File containing the vault private key" +msgstr "文件包含库私钥" + +msgid "Data" +msgstr "数据" + +msgid "Private key specified multiple times" +msgstr "多次指定私钥" + +msgid "Missing vault private key" +msgstr "缺少库私钥" + +msgid "Unrevoked" +msgstr "未撤销的" + +msgid "Error" +msgstr "错误" + +msgid "Input filename" +msgstr "输入文件名" + +msgid "File to load the certificate from." +msgstr "从文件加载证书" msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "从复制更新中删除的以空格分隔的属性列表。" - -msgid "A string searched in all relevant object attributes" -msgstr "在所有相关对象中搜索字符串" - -msgid "A6 Record data" -msgstr "A6记录数据" - -msgid "A6 record" -msgstr "A6记录" - -msgid "AAAA IP Address" -msgstr "AAAA IP地址" - -msgid "AAAA record" -msgstr "AAAA记录" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" msgid "ACI name" msgstr "ACI名称" -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI权限%s没有找到" +msgid "Permission" +msgstr "权限" + +msgid "Permission ACI grants access to" +msgstr "ACI授予访问的权限" + +msgid "User group" +msgstr "用户组" + +msgid "User group ACI grants access to" +msgstr "ACI授予访问的用户组" + +msgid "Permissions" +msgstr "权限" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "授予权限（读，写，添加，删除，全部）" + +#, fuzzy +#| msgid "Attributes to which the permission applies." +msgid "Attributes to which the permission applies" +msgstr "权限应用属性。" + +msgid "Attributes" +msgstr "属性" + +msgid "Type" +msgstr "类型" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "IPA对象类型（用户，用户组，主机，主机组，服务，网络组）" + +msgid "Member of" +msgstr "隶属于" + +msgid "Member of a group" +msgstr "组成员" + +msgid "Filter" +msgstr "过滤" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "合法的LDAP过滤（例如：ou=Engineering）" + +msgid "Subtree" +msgstr "子树" + +msgid "Subtree to apply ACI to" +msgstr "" + +msgid "Target group" +msgstr "目标组" + +#, fuzzy +#| msgid "User group to apply permissions to" +msgid "Group to apply ACI to" +msgstr "待应用权限的用户组" + +msgid "Target your own entry (self)" +msgstr "设定你自己的条目" + +msgid "Apply ACI to your own entry (self)" +msgstr "应用ACI到你自己的条目" + +msgid "Create new ACI." +msgstr "创建新的ACI。" msgid "ACI prefix" msgstr "ACI前缀" -msgid "ACI prefix is required" -msgstr "需要ACI前缀" +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "前缀用来区分ACI类型（权限，授权，自助，无）" -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI名\"%s\"没有找到" - -msgid "ACIs" -msgstr "ACIs" - -msgid "ACL name" -msgstr "ACL名称" +msgid "Test the ACI syntax but don't write anything" +msgstr "测试ACI语法但不写任何东西" msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "AD DC不能连接任何IPA域控制器。最有可能是一个DNS或者防火墙事件" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "从服务器检索和打印所有属性。影响命令输出。" -msgid "AD Trust setup" -msgstr "AD信任设置" +msgid "Print entries as stored on the server. Only affects output format." +msgstr "打印存储在服务器上的条目。仅影响输出格式。" -msgid "AD domain controller" -msgstr "AD域控制器" +msgid "User-friendly description of action performed" +msgstr "方便用户的执行操作描述" -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "AD域控制器抱怨通信序列。这可能意味着双方时间不同步，例如" - -msgid "AFSDB Hostname" -msgstr "AFSDB主机名" - -msgid "AFSDB Subtype" -msgstr "AFSDB子类型" - -msgid "AFSDB record" -msgstr "AFSDB记录" - -msgid "API Browser" -msgstr "API概述" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" msgstr "" -"没有发送API版本号，不能保证向前兼容。假定服务器的API版本%(server_version)s" -msgid "APL record" -msgstr "APL记录" +msgid "Delete ACI." +msgstr "删除ACI。" -msgid "About" -msgstr "关于" +msgid "True means the operation was successful" +msgstr "正确的表示操作成功" -msgid "Access Denied" -msgstr "访问阻止" +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" -msgid "Access Granted" -msgstr "访问允许" +msgid "A string searched in all relevant object attributes" +msgstr "在所有相关对象中搜索字符串" -#, python-format -msgid "Access granted: %s" -msgstr "访问授权：%s" +msgid "Primary key only" +msgstr "主键唯一" -msgid "Access this host" -msgstr "访问该主机" +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "结果应该只包括主键属性(\"name\")" -msgid "Access time" -msgstr "访问时间" +msgid "Number of entries returned" +msgstr "返回的条目数" -msgid "Accessing" -msgstr "访问" +msgid "True if not all results were returned" +msgstr "如果不是所有结果都返回了，那么为真" -msgid "Account" -msgstr "账户" +msgid "Modify ACI." +msgstr "修改ACI。" -msgid "Account Settings" -msgstr "账户设置" +msgid "Rename an ACI." +msgstr "重命名一个ACI。" -msgid "Account Status" -msgstr "账户状态" +msgid "New ACI name" +msgstr "新的ACI名" -msgid "Account disabled" -msgstr "禁用账户" +msgid "Display a single ACI given an ACI name." +msgstr "给出一个ACI名显示一个单一的ACI。" -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "账户已禁用：%(disabled)s" +msgid "Location of the ACI" +msgstr "ACI的位置" -msgid "Actions" -msgstr "操作" +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" -msgid "Activate" -msgstr "激活" +msgid "Key" +msgstr "键" -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "激活一个计划用户\"%(value)s\"" +msgid "Automount key name." +msgstr "自动挂载键名。" -msgid "Activate a stage user." -msgstr "激活一个计划用户。" +msgid "Mount information" +msgstr "挂载信息" -msgid "Active Directory domain" -msgstr "活动目录域" +msgid "description" +msgstr "描述" -msgid "Active Directory domain administrator" -msgstr "活动目录域管理员" +msgid "Location" +msgstr "位置" -msgid "Active Directory domain administrator's password" -msgstr "活动目录域管理员密码" +msgid "Automount location name." +msgstr "自动挂载位置名。" -msgid "Active Directory domain range" -msgstr "活动目录域范围" +msgid "Map" +msgstr "映射" -msgid "Active Directory domain with POSIX attributes" -msgstr "带POSIX属性的活动目录域" +msgid "Automount map name." +msgstr "自动挂载映射名。" -msgid "Active Directory trust range with POSIX attributes" -msgstr "有POSIX属性的活动目录信任范围" +msgid "Description" +msgstr "描述" -msgid "Active directory domain administrator's password" -msgstr "活动目录域管理员密码" +msgid "Create a new automount key." +msgstr "创建一个新的自动挂载键。" -msgid "Active users" -msgstr "活跃用户" - -msgid "Active zone" -msgstr "活跃区" - -msgid "Add" -msgstr "添加" - -msgid "Add CAs to a CA ACL." -msgstr "向一个CA ACL中添加CAs。" - -msgid "Add Custom Attribute" -msgstr "添加自定义属性" - -msgid "Add Custom Authentication Indicator" -msgstr "添加自定义认证机构" - -msgid "Add Kerberos Principal Alias" -msgstr "添加Kerberos主体别名" - -msgid "Add Many" -msgstr "添加多个" - -msgid "Add a manager to the stage user entry" -msgstr "向一个计划用户条目中添加一个管理员" - -msgid "Add a manager to the user entry" -msgstr "向一个用户条目中添加一个管理员" - -msgid "Add a new DNS server." -msgstr "添加一个新的DNS服务器。" - -msgid "Add a new Group ID override." -msgstr "添加一个新的组ID覆盖。" - -msgid "Add a new HBAC service group." -msgstr "添加一个新的HBAC服务组。" - -msgid "Add a new HBAC service." -msgstr "添加一个新的HBAC服务。" - -msgid "Add a new ID View." -msgstr "添加一个新的ID视图。" - -msgid "Add a new ID override." -msgstr "添加一个新的ID覆盖。" - -msgid "Add a new IPA location." -msgstr "添加一个新的IPA位置。" - -msgid "Add a new IPA new service." -msgstr "添加一个新的IPA服务。" - -msgid "Add a new IPA service." -msgstr "添加一个新的IPA服务。" - -msgid "Add a new OTP token." -msgstr "添加一个新的OTP令牌。" - -msgid "Add a new RADIUS proxy server." -msgstr "添加一个新的RADIUS代理服务器。" - -msgid "Add a new User ID override." -msgstr "添加一个新的用户ID覆盖。" - -msgid "Add a new YubiKey OTP token." -msgstr "增加一个新的YubiKey OTP令牌。" - -msgid "Add a new delegation." -msgstr "添加一个新的授权。" - -msgid "Add a new group password policy." -msgstr "添加一个新的组密码策略。" - -msgid "Add a new host." -msgstr "添加一个新主机。" - -msgid "Add a new hostgroup." -msgstr "添加一个新的主机组。" - -msgid "Add a new netgroup." -msgstr "添加一个新的网络组。" - -msgid "Add a new permission." -msgstr "添加一个新的权限。" - -msgid "Add a new privilege." -msgstr "添加一个新的特权。" - -msgid "Add a new role." -msgstr "添加一个新角色。" - -msgid "Add a new segment." -msgstr "添加一个新段。" - -msgid "Add a new self-service permission." -msgstr "添加一个新的自助服务权限。" - -msgid "Add a new topology suffix to be managed." -msgstr "添加一个新的拓扑后缀到管理中。" - -msgid "Add a new user." -msgstr "添加一个新用户。" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "为每个正向区访问授权添加一个权限。" - -msgid "Add a permission for per-zone access delegation." -msgstr "为每个区访问授权添加一个权限。" - -msgid "Add a system permission without an ACI" -msgstr "添加一个没有ACI的系统权限" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "添加一个没有ACI的系统权限（内部命令）" +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"一个属性设置为一个名称/值对。格式是属性=值。对于多值属性，命令替换已存在的" +"值。" msgid "" "Add an attribute/value pair. Format is attr=value. The attribute\n" "must be part of the schema." msgstr "添加一个属性/值对。格式是属性=值。属性必须时模式的一部分。" -msgid "Add an automember rule." -msgstr "添加一个自动成员规则。" +msgid "Delete an automount key." +msgstr "删除一个自动挂载键。" -msgid "Add an option to the Sudo Rule." -msgstr "向Sudo规则中添加一个选项。" +msgid "Continuous mode: Don't stop on errors." +msgstr "连续模式：有错误不停止。" -msgid "Add and Add Another" -msgstr "添加并添加另一个" +msgid "List of deletions that failed" +msgstr "删除失败的列表" -msgid "Add and Close" -msgstr "添加和关闭" +msgid "Search for an automount key." +msgstr "查找一个自动挂载键。" -msgid "Add and Edit" -msgstr "添加和编辑" +msgid "Time Limit" +msgstr "时间限制" -msgid "Add certificates to host entry" -msgstr "向主机条目中添加证书" +#, fuzzy +#| msgid "Time limit of search in seconds (0 is unlimited)" +msgid "Time limit of search in seconds" +msgstr "时间限制在几秒钟内的搜索（0代表无限制）" -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "添加受Sudo规则影响的命令和sudo命令组。" +msgid "Size Limit" +msgstr "大小限制" -msgid "Add conditions to an automember rule." -msgstr "添加条件到一个自动成员规则。" +msgid "Maximum number of entries returned" +msgstr "返回的最大条目数" -msgid "Add custom value" -msgstr "添加自定义值" +msgid "Modify an automount key." +msgstr "修改一个自动挂载键。" -msgid "Add domain" -msgstr "添加域" +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" -msgid "Add forward record for nameserver located in the created zone" -msgstr "为位于创建区域的命名服务器添加正向记录" +msgid "Rights" +msgstr "权限" -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "添加受Sudo规则影响的主机和主机组。" - -msgid "Add hosts that can manage this host." -msgstr "添加可以管理该主机的主机。" - -msgid "Add hosts that can manage this service." -msgstr "添加可以管理该服务的主机。" - -msgid "Add member to a named service delegation rule." -msgstr "向一个命名服务授权规则中添加成员。" - -msgid "Add member to a named service delegation target." -msgstr "向一个命名服务授权规则中添加成员。" - -msgid "Add members to Sudo Command Group." -msgstr "向Sudo命令组中添加成员。" - -msgid "Add members to a group." -msgstr "向一个组中添加成员。" - -msgid "Add members to a hostgroup." -msgstr "向一个主机组添加成员。" - -msgid "Add members to a netgroup." -msgstr "向一个网络组添加成员。" - -msgid "Add members to a permission." -msgstr "将成员添加到权限。" - -msgid "Add members to a privilege." -msgstr "向一个特权中添加成员。" - -msgid "Add members to a role." -msgstr "向角色中添加成员。" - -msgid "Add members to a vault." -msgstr "向一个库中添加成员。" - -msgid "Add members to an HBAC service group." -msgstr "在一个HBAC服务组中添加成员。" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "添加没有组的移植用户到一个默认组（默认：正确的）" - -msgid "Add new DNS resource record." -msgstr "添加新的DNS资源记录。" - -msgid "Add new certificates to a service" -msgstr "向一个服务中添加新证书" - -msgid "Add new principal alias to a service" -msgstr "向一个服务添加新的主体别名" - -msgid "Add new principal alias to host entry" -msgstr "为主机条目添加新的主体别名" - -msgid "Add new principal alias to the user entry" -msgstr "为用户条目添加新的主体别名" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "向id覆盖用户条目中添加一个或多个证书" - -msgid "Add one or more certificates to the user entry" -msgstr "向用户条目中添加一个或多个证书" - -msgid "Add owners to a vault container." -msgstr "向一个库容器中添加所有者。" - -msgid "Add owners to a vault." -msgstr "向一个库中添加所有者。" - -msgid "Add permissions to a privilege." -msgstr "向一个特权中添加权限。" - -msgid "Add principal" -msgstr "添加主体" - -msgid "Add privileges to a role." -msgstr "向一个角色中添加特权。" - -msgid "Add profiles to a CA ACL." -msgstr "向一个CA ACL中添加配置文件。" - -msgid "Add services to a CA ACL." -msgstr "向一个CA ACL中添加服务。" - -msgid "Add services to an HBAC rule." -msgstr "在HBAC规则中添加服务" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "从一个HBAC规则中添加源主机和主机组。" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "向一个CA ACL中添加目标主机和主机组。" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "在一个HBAC规则中添加目标主机和主机组。" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "向SELinux用户映射规则中添加目标主机和主机组。" - -msgid "Add target to a named service delegation rule." -msgstr "向一个命名服务授权规则中添加目标。" - -msgid "Add target to a named service delegation." -msgstr "添加目标到一个命名服务授权。" - -msgid "Add the host to DNS with this IP address" -msgstr "用该IP地址将主机添加到DNS中" - -msgid "Add to default group" -msgstr "添加到默认组" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "添加受Sudo规则影响的用户和用户组。" - -msgid "Add users and groups to a CA ACL." -msgstr "向一个CA ACL中添加用户和用户组。" - -msgid "Add users and groups to an HBAC rule." -msgstr "在一个HBAC规则中添加用户和用户组。" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "向SELinux用户映射规则中添加用户和用户组。" - -msgid "Add users that can manage this token." -msgstr "添加可以管理该令牌的用户" - -#, python-format -msgid "Added %(map)s" -msgstr "已添加 %(map)s" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "已添加 %(src)s 到 %(dst)s" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "已添加活动目录域\"%(value)s\"" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "已添加CA ACL\"%(value)s\"" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "已添加组ID覆盖\"%(value)s\"" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "已添加HBAC规则\"%(value)s\"" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "已添加HBAC服务\"%(value)s\"" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "已添加HBAC服务组\"%(value)s\"" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "已添加ID视图\"%(value)s\"" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "已添加ID覆盖\"%(value)s\"" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "已添加ID范围\"%(value)s\"" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "已添加IPA位置\"%(value)s\"" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "已添加OTP令牌\"%(value)s\"" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "已添加RADIUS代理服务器\"%(value)s\"" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "已添加SELinux用户映射\"%(value)s\"" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "已添加Sudo命令\"%(value)s\"" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "已添加Sudo命令组\"%(value)s\"" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "已添加Sudo规则\"%(value)s\"" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "已添加用户ID覆盖\"%(value)s\"" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "已添加自动成员规则\"%(value)s\"" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "已添加自动间接映射\"%(value)s\"" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "已添加自动挂载键\"%(value)s\"" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "已添加自动挂载位置\"%(value)s\"" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "已添加自动挂载映射\"%(value)s\"" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "已向主机\"%(value)s\"中添加证书" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "已添加证书到id覆盖用户\"%(value)s\"" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "已添加证书到服务主体\"%(value)s\"" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "已在\"%(value)s\"上添加条件" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "已添加授权\"%(value)s\"" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "已添加组\"%(value)s\"" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "新增主机 \"%(value)s\"" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "已添加主机组\"%(value)s\"" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "已添加网络组\"%(value)s\"" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "已添加新的DNS服务器\"%(value)s\"" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "已为主机\"%(value)s\"添加新别名" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "已添加新的别名到服务主体\"%(value)s\"" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加新别名" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "已添加\"%(option)s\"到Sudo规则\"%(rule)s\"" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "已添加权限\"%(value)s\"" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "已添加特权\"%(value)s\"" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "已添加角色\"%(value)s\"" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "已添加段\"%(value)s\"" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "已添加自助服务\"%(value)s\"" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "已添加服务\"%(value)s\"" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "已添加服务授权规则\"%(value)s\"" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "已添加服务授权目标\"%(value)s\"" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "已添加计划用户\"%(value)s\"" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "已添加系统权限\"%(value)s\"" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "已添加拓扑后缀\"%(value)s\"" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "已添加用户\"%(value)s\"" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "已添加库\"%(value)s\"" - -msgid "Additional instructions:" -msgstr "附加指示：" - -msgid "Address not valid, can't redirect" -msgstr "地址无效，不能重定向" - -msgid "Administrative account" -msgstr "管理员账户" - -msgid "Administrator e-mail address" -msgstr "管理员电子邮件地址" - -msgid "Advertised by servers" -msgstr "由服务器公布" - -msgid "Agreements deleted" -msgstr "协议已删除" - -msgid "Algorithm" -msgstr "算法" - -msgid "All" -msgstr "全部" - -msgid "All attributes to which the permission applies" -msgstr "权限可以应用所有属性" - -msgid "All commands should at least have a result" -msgstr "所有命令至少有一个返回值" - -msgid "Allow" -msgstr "允许" +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "显示该条目的访问权限（需要--all）。更详细的信息请查看ipa帮助页。" + +msgid "New mount information" +msgstr "新的挂载信息" + +msgid "Rename" +msgstr "重命名" + +msgid "Rename the automount key object" +msgstr "重命名自动挂载键对象" + +msgid "Display an automount key." +msgstr "显示一个自动挂载键。" + +msgid "Create a new automount location." +msgstr "创建一个新的自动挂载位置。" + +msgid "Delete an automount location." +msgstr "删除一个自动挂载位置。" + +msgid "Search for an automount location." +msgstr "查找一个自动挂载位置。" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "结果应该只包括主键属性(\"location\")" + +msgid "Display an automount location." +msgstr "显示一个自动挂载位置。" + +msgid "Generate automount files for a specific location." +msgstr "在一特定位置生成自动挂载文件。" + +msgid "Create a new automount map." +msgstr "创建一个新的自动挂载映射。" + +msgid "Create a new indirect mount point." +msgstr "创建一个新的间接挂载点。" + +msgid "Mount point" +msgstr "挂载点" + +msgid "Parent map" +msgstr "父映射" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "父自动挂载映射名（默认：auto.master）。" + +msgid "Delete an automount map." +msgstr "删除一个自动挂载映射。" + +msgid "Search for an automount map." +msgstr "查找一个自动挂载映射。" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "结果应该只包括主键属性(\"map\")" + +msgid "Modify an automount map." +msgstr "修改一个自动挂载映射。" + +msgid "Display an automount map." +msgstr "显示一个自动挂载映射。" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" + +msgid "Nested Methods to execute" +msgstr "以嵌套的方法来执行" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +msgid "Maximum username length" +msgstr "最大用户名长度" + +msgid "Home directory base" +msgstr "主目录" + +msgid "Default location of home directories" +msgstr "主目录的默认位置" + +msgid "Default shell" +msgstr "默认shell" + +msgid "Default shell for new users" +msgstr "新用户默认shell" + +msgid "Default users group" +msgstr "默认用户组" + +msgid "Default group for new users" +msgstr "新用户默认组" + +msgid "Default e-mail domain" +msgstr "默认的电子邮件域" + +msgid "Search time limit" +msgstr "搜索时间限制" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "最大的时间（秒）搜索（>0，或-1表示无限制）" + +msgid "Search size limit" +msgstr "搜索大小限制" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "最大数量的搜索记录（-1表示无限制）" + +msgid "User search fields" +msgstr "用户搜索字段" + +#, fuzzy +#| msgid "" +#| "Comma-separated list of objectclasses used to search for user entries in " +#| "DS" +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "在DS中用于查找用户条目以逗号分隔的对象类" + +msgid "Group search fields" +msgstr "组搜索域" + +#, fuzzy +#| msgid "" +#| "Comma-separated list of objectclasses used to search for group entries in " +#| "DS" +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "在DS中用于查找用户组条目以逗号分隔的对象类" + +msgid "Enable migration mode" +msgstr "启用迁移模式" + +#, fuzzy +#| msgid "Certificate requested" +msgid "Certificate Subject base" +msgstr "证书请求" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "" + +msgid "Default group objectclasses" +msgstr "默认组对象类" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "默认组对象类（以逗号分割）" + +msgid "Default user objectclasses" +msgstr "默认用户对象类" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "默认用户对象类（以逗号分割）" + +msgid "Password Expiration Notification (days)" +msgstr "密码过期通知（天）" + +msgid "Number of days's notice of impending password expiration" +msgstr "密码即将过期通知天数" + +msgid "Password plugin features" +msgstr "密码插件功能" + +msgid "Extra hashes to generate in password plug-in" +msgstr "" + +msgid "SELinux user map order" +msgstr "SELinux 用户映射订单" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "按SELinux用户优先级递增顺序排列，以$分割" + +msgid "Default SELinux user" +msgstr "默认的SELinux用户" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "当在SELinux映射规则中找不到匹配项时使用默认SELinux用户" + +msgid "Default PAC types" +msgstr "默认PAC类型" + +msgid "Default types of PAC supported for services" +msgstr "默认PAC支持服务的类型" + +msgid "Default user authentication types" +msgstr "默认用户认证类型" + +msgid "Default types of supported user authentication" +msgstr "默认支持用户认证的类型" + +msgid "Modify configuration options." +msgstr "修改配置选项" + +msgid "Show the current configuration." +msgstr "显示当前配置。" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" + +msgid "Delegation name" +msgstr "授权名" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "委托权限（读，写）。默认是写。" + +#, fuzzy +#| msgid "Attributes to which the permission applies." +msgid "Attributes to which the delegation applies" +msgstr "权限应用属性。" + +#, fuzzy +#| msgid "Member service groups" +msgid "Member user group" +msgstr "成员服务组" + +#, fuzzy +#| msgid "User group to apply permissions to" +msgid "User group to apply delegation to" +msgstr "待应用权限的用户组" + +msgid "Add a new delegation." +msgstr "添加一个新的授权。" + +msgid "Delete a delegation." +msgstr "删除一个授权。" + +msgid "Search for delegations." +msgstr "查找授权。" + +msgid "Modify a delegation." +msgstr "修改一个授权。" + +msgid "Display information about a delegation." +msgstr "显示一个授权信息。" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-" +"policy=first --forwarder=203.0.113.1\n" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "Global forwarders" +msgstr "全局转发器" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"全局转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自定义端" +"口" + +msgid "Forward policy" +msgstr "转发器策略" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "全局转发器策略。通过设置\"none\"来禁用全局转发器的所有配置。" msgid "Allow PTR sync" msgstr "允许PTR同步" -msgid "Allow access from the trusted domain" -msgstr "允许访问信任域" +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "允许同步正向（A，AAAA）和反向（PTR）记录" -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "允许从信任域中添加额外的非IPA成员" +msgid "Zone refresh interval" +msgstr "区域刷新间隔" + +msgid "Zone name" +msgstr "区域名" + +msgid "Zone name (FQDN)" +msgstr "区域名（FQDN）" + +msgid "Reverse zone IP network" +msgstr "反向区域IP网络" + +msgid "IP network to create reverse zone name from" +msgstr "IP网络创建反向区域名" + +msgid "Active zone" +msgstr "活跃区" + +msgid "Is zone active?" +msgstr "区域活跃吗？" + +msgid "Zone forwarders" +msgstr "区域转发器" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Per-zone转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自定" +"义端口" + +#, fuzzy +#| msgid "" +#| "Per-server conditional forwarding policy. Set to \"none\" to disable " +#| "forwarding to global forwarder for this zone. In that case, conditional " +#| "zone forwarders are disregarded." +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Per-server有条件的转发器策略。设置为\"none\"来禁止该区域转发至全局转发器。那" +"样的话，有条件的区域转发器被忽视了。" + +msgid "Record name" +msgstr "记录名" + +msgid "Time to live" +msgstr "存活时间" + +msgid "Records" +msgstr "记录" + +msgid "Record type" +msgstr "记录类型" + +msgid "Record data" +msgstr "记录数据" + +msgid "A record" +msgstr "一条记录" + +msgid "Raw A records" +msgstr "原始的记录" + +msgid "A IP Address" +msgstr "IP地址" + +msgid "IP Address" +msgstr "IP 地址" + +#, fuzzy +#| msgid "Create reverse" +msgid "A Create reverse" +msgstr "创建反向" + +msgid "Create reverse record for this IP Address" +msgstr "为该IP地址创建反向记录" + +msgid "AAAA record" +msgstr "AAAA记录" + +msgid "Raw AAAA records" +msgstr "原始的AAAA记录" + +msgid "AAAA IP Address" +msgstr "AAAA IP地址" + +#, fuzzy +#| msgid "Create reverse" +msgid "AAAA Create reverse" +msgstr "创建反向" + +msgid "A6 record" +msgstr "A6记录" + +msgid "Raw A6 records" +msgstr "原始的A6记录" + +msgid "A6 Record data" +msgstr "A6记录数据" + +msgid "AFSDB record" +msgstr "AFSDB记录" + +msgid "Raw AFSDB records" +msgstr "原始的AFSDB记录" + +msgid "AFSDB Subtype" +msgstr "AFSDB子类型" + +msgid "Subtype" +msgstr "子类型" + +msgid "AFSDB Hostname" +msgstr "AFSDB主机名" + +msgid "Hostname" +msgstr "主机名" + +msgid "APL record" +msgstr "APL记录" + +msgid "Raw APL records" +msgstr "原始的APL记录" + +msgid "CERT record" +msgstr "CERT记录" + +msgid "Raw CERT records" +msgstr "原始的CERT记录" + +msgid "CERT Certificate Type" +msgstr "CERT证书类型" + +msgid "Certificate Type" +msgstr "证书类型" + +msgid "CERT Key Tag" +msgstr "CERT键标记" + +msgid "Key Tag" +msgstr "键标记" + +msgid "CERT Algorithm" +msgstr "CERT算法" + +msgid "Algorithm" +msgstr "算法" + +msgid "CERT Certificate/CRL" +msgstr "CERT证书/CRL" + +msgid "Certificate/CRL" +msgstr "证书/CRL" + +msgid "CNAME record" +msgstr "CNAME记录" + +msgid "Raw CNAME records" +msgstr "原始的CNAME记录" + +msgid "CNAME Hostname" +msgstr "CNAME主机名" + +msgid "A hostname which this alias hostname points to" +msgstr "一个别名主机名指向主机名" + +msgid "DHCID record" +msgstr "DHCID记录" + +msgid "Raw DHCID records" +msgstr "原始的DHCID记录" + +msgid "DLV record" +msgstr "DLV记录" + +msgid "Raw DLV records" +msgstr "原始的DLV记录" + +msgid "DLV Key Tag" +msgstr "DLV键标记" + +msgid "DLV Algorithm" +msgstr "DLV算法" + +msgid "DLV Digest Type" +msgstr "DLV摘要类型" + +msgid "Digest Type" +msgstr "摘要类型" + +msgid "DLV Digest" +msgstr "DLV摘要" + +msgid "Digest" +msgstr "摘要" + +msgid "DNAME record" +msgstr "DNAME记录" + +msgid "Raw DNAME records" +msgstr "原始的DNAME记录" + +msgid "DNAME Target" +msgstr "DNAME目标" + +msgid "Target" +msgstr "目标" + +msgid "DNSKEY record" +msgstr "DNSKEY记录" + +msgid "Raw DNSKEY records" +msgstr "原始的DNSKEY记录" + +msgid "DS record" +msgstr "DS记录" + +msgid "Raw DS records" +msgstr "原始的DS记录" + +msgid "DS Key Tag" +msgstr "DS键标记" + +msgid "DS Algorithm" +msgstr "DS算法" + +msgid "DS Digest Type" +msgstr "DS摘要类型" + +msgid "DS Digest" +msgstr "DS摘要" + +msgid "HIP record" +msgstr "HIP记录" + +msgid "Raw HIP records" +msgstr "原始的HIP记录" + +msgid "IPSECKEY record" +msgstr "IPSECKEY记录" + +msgid "Raw IPSECKEY records" +msgstr "原始的IPSECKEY记录" + +msgid "KEY record" +msgstr "KEY记录" + +msgid "Raw KEY records" +msgstr "原始的KEY记录" + +msgid "KX record" +msgstr "KX记录" + +msgid "Raw KX records" +msgstr "原始的KX记录" + +msgid "KX Preference" +msgstr "KX优先权" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "该交换器的优先级。值越低优先级越高" + +msgid "KX Exchanger" +msgstr "KX交换器" + +msgid "A host willing to act as a key exchanger" +msgstr "主机愿意充当关键交换器" + +msgid "LOC record" +msgstr "LOC记录" + +msgid "Raw LOC records" +msgstr "原始的LOC记录" + +#, fuzzy +#| msgid "LOC Direction Latitude" +msgid "LOC Degrees Latitude" +msgstr "LOC纬度方向" + +#, fuzzy +#| msgid "Direction Latitude" +msgid "Degrees Latitude" +msgstr "纬度方向" + +msgid "LOC Minutes Latitude" +msgstr "LOC分钟纬度" + +msgid "Minutes Latitude" +msgstr "分钟纬度" + +msgid "LOC Seconds Latitude" +msgstr "LOC秒纬度" + +msgid "Seconds Latitude" +msgstr "秒纬度" + +msgid "LOC Direction Latitude" +msgstr "LOC纬度方向" + +msgid "Direction Latitude" +msgstr "纬度方向" + +#, fuzzy +#| msgid "LOC Direction Longitude" +msgid "LOC Degrees Longitude" +msgstr "LOC经度方向" + +#, fuzzy +#| msgid "Direction Longitude" +msgid "Degrees Longitude" +msgstr "经度方向" + +msgid "LOC Minutes Longitude" +msgstr "LOC分钟经度" + +msgid "Minutes Longitude" +msgstr "分钟经度" + +msgid "LOC Seconds Longitude" +msgstr "LOC秒经度" + +msgid "Seconds Longitude" +msgstr "秒经度" + +msgid "LOC Direction Longitude" +msgstr "LOC经度方向" + +msgid "Direction Longitude" +msgstr "经度方向" + +msgid "LOC Altitude" +msgstr "LOC高度" + +msgid "Altitude" +msgstr "高度" + +msgid "LOC Size" +msgstr "LOC大小" + +msgid "Size" +msgstr "大小" + +msgid "LOC Horizontal Precision" +msgstr "LOC水平精度" + +msgid "Horizontal Precision" +msgstr "水平精度" + +msgid "LOC Vertical Precision" +msgstr "LOC垂直精度" + +msgid "Vertical Precision" +msgstr "垂直精度" + +msgid "MX record" +msgstr "MX记录" + +msgid "Raw MX records" +msgstr "原始的MX记录" + +msgid "MX Preference" +msgstr "MX优先权" + +msgid "MX Exchanger" +msgstr "MX交换器" + +msgid "A host willing to act as a mail exchanger" +msgstr "主机愿意充当邮件交换器" + +msgid "NAPTR record" +msgstr "NAPTR记录" + +msgid "Raw NAPTR records" +msgstr "原始的NAPTR记录" + +msgid "NAPTR Order" +msgstr "NAPTR规则" + +msgid "Order" +msgstr "规则" + +msgid "NAPTR Preference" +msgstr "NAPTR优先权" + +msgid "Preference" +msgstr "优先权" + +msgid "NAPTR Flags" +msgstr "NAPTR标记" + +msgid "Flags" +msgstr "标记" + +msgid "NAPTR Service" +msgstr "NAPTR服务" + +msgid "Service" +msgstr "服务" + +msgid "NAPTR Regular Expression" +msgstr "NAPTR正则表达式" + +msgid "Regular Expression" +msgstr "正则表达式" + +msgid "NAPTR Replacement" +msgstr "NAPTR替换" + +msgid "Replacement" +msgstr "替换" + +msgid "NS record" +msgstr "NS记录" + +msgid "Raw NS records" +msgstr "原始的NS记录" + +msgid "NS Hostname" +msgstr "NS主机名" + +msgid "NSEC record" +msgstr "NSEC记录" + +msgid "Raw NSEC records" +msgstr "原始的NSEC记录" + +msgid "NSEC3 record" +msgstr "NSEC3记录" + +msgid "Raw NSEC3 records" +msgstr "原始的NSEC3记录" + +msgid "PTR record" +msgstr "PTR记录" + +msgid "Raw PTR records" +msgstr "原始的PTR记录" + +msgid "PTR Hostname" +msgstr "PTR主机名" + +msgid "The hostname this reverse record points to" +msgstr "反向记录指向的主机名" + +msgid "RRSIG record" +msgstr "RRSIG记录" + +msgid "Raw RRSIG records" +msgstr "原始的RRSIG记录" + +msgid "RP record" +msgstr "RP记录" + +msgid "Raw RP records" +msgstr "原始的RP记录" + +msgid "SIG record" +msgstr "SIG记录" + +msgid "Raw SIG records" +msgstr "原始的SIG记录" + +msgid "SPF record" +msgstr "SPF记录" + +msgid "Raw SPF records" +msgstr "原始的SPF记录" + +msgid "SRV record" +msgstr "SRV记录" + +msgid "Raw SRV records" +msgstr "原始的SRV记录" + +msgid "SRV Priority" +msgstr "SRV优先级" + +msgid "Priority" +msgstr "优先级" + +msgid "SRV Weight" +msgstr "SRV重量" + +msgid "Weight" +msgstr "重量" + +msgid "SRV Port" +msgstr "SRV端口" + +msgid "Port" +msgstr "端口" + +msgid "SRV Target" +msgstr "SRV目标" + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "目标主机的域名或是'.'如果服务在该域中明显不存在" + +msgid "SSHFP record" +msgstr "SSHFP记录" + +msgid "Raw SSHFP records" +msgstr "原始的SSHFP记录" + +msgid "SSHFP Algorithm" +msgstr "SSHFP算法" + +msgid "SSHFP Fingerprint Type" +msgstr "SSHFP指纹类型" + +msgid "Fingerprint Type" +msgstr "指纹类型" + +msgid "SSHFP Fingerprint" +msgstr "SSHFP指纹" + +msgid "Fingerprint" +msgstr "指纹" + +msgid "TA record" +msgstr "TA记录" + +msgid "Raw TA records" +msgstr "原始的TA记录" + +msgid "TLSA record" +msgstr "TLSA记录" + +msgid "Raw TLSA records" +msgstr "原始的TLSA记录" + +msgid "TLSA Certificate Usage" +msgstr "TLSA证书用途" + +msgid "Certificate Usage" +msgstr "证书用途" + +msgid "TLSA Selector" +msgstr "TLSA选择器" + +msgid "Selector" +msgstr "选择器" + +msgid "TLSA Matching Type" +msgstr "TLSA匹配类型" + +msgid "Matching Type" +msgstr "匹配类型" + +msgid "TLSA Certificate Association Data" +msgstr "TLSA证书关联数据" + +msgid "Certificate Association Data" +msgstr "证书关联数据" + +msgid "TKEY record" +msgstr "TKEY记录" + +msgid "Raw TKEY records" +msgstr "原始的TKEY记录" + +msgid "TSIG record" +msgstr "TSIG记录" + +msgid "Raw TSIG records" +msgstr "原始的TSIG记录" + +msgid "TXT record" +msgstr "TXT记录" + +msgid "Raw TXT records" +msgstr "原始的TXT记录" + +msgid "TXT Text Data" +msgstr "TXT文本数据" + +msgid "Text Data" +msgstr "文本数据" + +msgid "Authoritative nameserver" +msgstr "权威的命名服务器" + +msgid "Authoritative nameserver domain name" +msgstr "权威的命名服务器域名" + +msgid "Administrator e-mail address" +msgstr "管理员电子邮件地址" + +msgid "SOA serial" +msgstr "SOA序列" + +msgid "SOA record serial number" +msgstr "SOA记录编号" + +msgid "SOA refresh" +msgstr "SOA刷新" + +msgid "SOA record refresh time" +msgstr "SOA记录刷新时间" + +msgid "SOA retry" +msgstr "SOA重试" + +msgid "SOA record retry time" +msgstr "SOA记录重试时间" + +msgid "SOA expire" +msgstr "SOA到期" + +msgid "SOA record expire time" +msgstr "SOA记录到期时间" + +msgid "SOA minimum" +msgstr "SOA最低值" + +msgid "How long should negative responses be cached" +msgstr "负面响应应该被缓存多久" + +msgid "Time to live for records at zone apex" +msgstr "区域定点记录的生成时间" + +msgid "BIND update policy" +msgstr "BIND更新策略" + +msgid "Dynamic update" +msgstr "动态更新" msgid "Allow dynamic updates." msgstr "允许动态更新" +msgid "Allow query" +msgstr "允许查询" + msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "当解析AD信任对象时允许回退到AD DC LDAP。仅供双向信任。" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "分号分割的IP地址或网络列表允许被查询" + +msgid "Allow transfer" +msgstr "允许传输" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "分号分割的IP地址或网络列表允许被传输" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "允许在区域中同步正向（A，AAAA）和反向（PTR）记录" msgid "Allow in-line DNSSEC signing" msgstr "允许嵌套DNSSEC签名" @@ -2138,124 +2915,992 @@ msgstr "允许嵌套DNSSEC签名" msgid "Allow inline DNSSEC signing of records in the zone" msgstr "允许在区域中嵌套DNSSEC记录签名" -msgid "Allow query" -msgstr "允许查询" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "允许同步正向（A，AAAA）和反向（PTR）记录" +msgid "NSEC3PARAM record" +msgstr "NSEC3PARAM记录" msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "允许在区域中同步正向（A，AAAA）和反向（PTR）记录" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "NSEC3PARAM区记录格式：散列算法 标记 迭代 盐值" -msgid "Allow transfer" -msgstr "允许传输" +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "检查是否有任何服务器启用了DNS服务。" -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "允许使用信任域中的IPA资源" +msgid "Resolve a host name in DNS." +msgstr "在DNS中解析主机名。" + +msgid "Modify global DNS configuration." +msgstr "修改全局DNS配置。" + +msgid "Show the current global DNS configuration." +msgstr "显示当前全局DNS配置。" + +msgid "Create new DNS forward zone." +msgstr "创建新的DNS正向区。" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "为每个正向区访问授权添加一个权限。" + +msgid "Permission value" +msgstr "权限值" + +msgid "Delete DNS forward zone." +msgstr "删除DNS正向区。" + +msgid "Disable DNS Forward Zone." +msgstr "禁用DNS正向区。" + +msgid "Enable DNS Forward Zone." +msgstr "启用DNS正向区。" + +msgid "Search for DNS forward zones." +msgstr "查找DNS正向区。" + +msgid "Modify DNS forward zone." +msgstr "修改DNS正向区。" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "为每个正向区访问授权移除一个权限。" + +msgid "Display information about a DNS forward zone." +msgstr "显示DNS正向区信息。" + +msgid "Add new DNS resource record." +msgstr "添加新的DNS资源记录。" + +msgid "Force" +msgstr "强制" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "即使NS记录不在DNS中，也强制创建它。" + +msgid "Structured" +msgstr "有条理的" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "解析所有的原始DNS记录并以有条理的方式返回它们" + +msgid "Delete DNS resource record." +msgstr "删除DNS资源记录。" + +msgid "Delete all associated records" +msgstr "删除所有相关记录" + +msgid "Delete DNS record entry." +msgstr "删除DNS记录条目。" + +msgid "Search for DNS resources." +msgstr "查找DNS资源。" + +msgid "Modify a DNS resource record." +msgstr "修改DNS资源记录。" + +msgid "Rename the DNS resource record object" +msgstr "重命名DNS资源记录对象" + +msgid "Display DNS resource." +msgstr "显示DNS资源。" + +msgid "Create new DNS zone (SOA record)." +msgstr "创建新的DNS区域（SOA记录）。" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "即使命名服务器无法解析，也强制创建DNS区域。" + +msgid "Add a permission for per-zone access delegation." +msgstr "为每个区访问授权添加一个权限。" + +msgid "Delete DNS zone (SOA record)." +msgstr "删除DNS区域（SOA记录）。" + +msgid "Disable DNS Zone." +msgstr "禁用DNS区域。" + +msgid "Enable DNS Zone." +msgstr "启用DNS区域。" + +msgid "Search for DNS zones (SOA records)." +msgstr "查找DNS区域（SOA记录）。" + +msgid "Forward zones only" +msgstr "仅正向区域" + +msgid "Search for forward zones only" +msgstr "仅查找正向区域" + +msgid "Modify DNS zone (SOA record)." +msgstr "修改DNS区域（SOA记录）。" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "即使命名服务器不在DNS中，也强制改变它" + +msgid "Remove a permission for per-zone access delegation." +msgstr "为每个区访问授权移除一个权限。" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "显示DNS区域（SOA记录）信息。" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" + +msgid "Rule name" +msgstr "规则名" + +msgid "Rule type" +msgstr "规则类型" + +msgid "Rule type (allow)" +msgstr "规则类型（允许）" + +msgid "User category" +msgstr "用户类别" + +msgid "User category the rule applies to" +msgstr "规则应用的用户类别" + +msgid "Host category" +msgstr "主机类别" + +msgid "Host category the rule applies to" +msgstr "规则应用的主机类别" + +msgid "Service category" +msgstr "服务类别" + +msgid "Service category the rule applies to" +msgstr "规则应用的服务类别" + +msgid "Enabled" +msgstr "启用" + +msgid "Users" +msgstr "用户" + +msgid "User Groups" +msgstr "用户组" + +msgid "Hosts" +msgstr "主机" + +msgid "Host Groups" +msgstr "主机组" + +msgid "Services" +msgstr "服务" + +msgid "Service Groups" +msgstr "服务组" + +msgid "External host" +msgstr "外部主机" + +msgid "Create a new HBAC rule." +msgstr "创建一个新HBAC规则。" + +msgid "Suppress processing of membership attributes." +msgstr "抑制成员属性的处理。" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "在一个HBAC规则中添加目标主机和主机组。" + +msgid "member host" +msgstr "成员主机" + +msgid "hosts to add" +msgstr "待添加主机" + +msgid "member host group" +msgstr "成员主机组" + +msgid "host groups to add" +msgstr "待添加主机组" + +msgid "Members that could not be added" +msgstr "不能被添加的成员" + +msgid "Number of members added" +msgstr "已添加的成员数" + +msgid "Add services to an HBAC rule." +msgstr "在HBAC规则中添加服务" + +msgid "member HBAC service" +msgstr "成员HBAC服务" + +msgid "HBAC services to add" +msgstr "待添加的HBAC服务" + +msgid "member HBAC service group" +msgstr "成员HBAC服务组" + +msgid "HBAC service groups to add" +msgstr "待添加的HBAC服务组" + +msgid "Add users and groups to an HBAC rule." +msgstr "在一个HBAC规则中添加用户和用户组。" + +msgid "member user" +msgstr "成员用户" + +msgid "users to add" +msgstr "待添加用户" + +msgid "member group" +msgstr "成员组" + +msgid "groups to add" +msgstr "待添加用户组" + +msgid "Delete an HBAC rule." +msgstr "删除一个HBAC规则。" + +msgid "Disable an HBAC rule." +msgstr "禁用一个HBAC规则。" + +msgid "Enable an HBAC rule." +msgstr "启用一个HBAC规则。" + +msgid "Search for HBAC rules." +msgstr "查找HBAC规则。" + +msgid "Modify an HBAC rule." +msgstr "修改一个HBAC规则。" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "从一个HBAC规则中移除目标主机和主机组。" + +msgid "hosts to remove" +msgstr "待移除的主机" + +msgid "host groups to remove" +msgstr "待移除的主机组" + +msgid "Members that could not be removed" +msgstr "不能被移除的成员" + +msgid "Number of members removed" +msgstr "已移除成员数" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "从一个HBAC规则中移除服务和服务组。" + +msgid "HBAC services to remove" +msgstr "待移除的HBAC服务" + +msgid "HBAC service groups to remove" +msgstr "待移除的HBAC服务组" + +msgid "Remove users and groups from an HBAC rule." +msgstr "从一个HBAC规则中移除用户和用户组。" + +msgid "users to remove" +msgstr "待移除的用户" + +msgid "groups to remove" +msgstr "待移除的用户组" + +msgid "Display the properties of an HBAC rule." +msgstr "显示一个HBAC规则的属性。" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" + +msgid "Service name" +msgstr "服务名" + +msgid "HBAC service" +msgstr "HBAC服务" + +msgid "HBAC service description" +msgstr "HBAC服务描述" + +msgid "Member of HBAC service groups" +msgstr "HBAC服务组成员" + +msgid "Add a new HBAC service." +msgstr "添加一个新的HBAC服务。" + +msgid "Delete an existing HBAC service." +msgstr "删除一个存在的HBAC服务。" + +msgid "Search for HBAC services." +msgstr "查找HBAC服务。" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "结果应该只包括主键属性(\"service\")" + +msgid "Modify an HBAC service." +msgstr "修改一个HBAC服务。" + +msgid "Display information about an HBAC service." +msgstr "显示一个HBAC服务信息。" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "Service group name" +msgstr "服务组名称" + +msgid "HBAC service group description" +msgstr "HBAC服务组描述" + +msgid "Member HBAC service" +msgstr "成员HBAC服务" + +msgid "Add a new HBAC service group." +msgstr "添加一个新的HBAC服务组。" + +msgid "Add members to an HBAC service group." +msgstr "在一个HBAC服务组中添加成员。" + +msgid "Delete an HBAC service group." +msgstr "删除一个HBAC服务组。" + +msgid "Search for an HBAC service group." +msgstr "查找一个HBAC服务组。" + +msgid "Modify an HBAC service group." +msgstr "修改一个HBAC服务组。" + +msgid "Remove members from an HBAC service group." +msgstr "从一个HBAC服务组中移除成员。" + +msgid "Display information about an HBAC service group." +msgstr "显示一个HBAC服务组信息。" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Host name" +msgstr "主机名" + +msgid "A description of this host" +msgstr "该主机的描述" + +msgid "Locality" +msgstr "位置" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "主机地点(如\"Baltimore, MD\")" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "主机位置(如\"Lab 2\")" + +msgid "Platform" +msgstr "平台" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "主机硬件平台 (e.g. \"Lenovo T61\")" + +msgid "Operating system" +msgstr "操作系统" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "主机操作系统及版本(e.g. \"Fedora 9\")" + +msgid "User password" +msgstr "用户密码" + +msgid "Password used in bulk enrollment" +msgstr "密码用于批量注册" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "生成一个随机密码用于批量注册" + +msgid "Random password" +msgstr "随机密码" + +msgid "Certificate" +msgstr "证书" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64 编码格式的服务器证书" + +msgid "Principal name" +msgstr "主机名" + +msgid "MAC address" +msgstr "MAC地址" + +msgid "Hardware MAC address(es) on this host" +msgstr "主机硬件MAC地址" + +msgid "SSH public key" +msgstr "SSH公钥" + +msgid "Class" +msgstr "类" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "主机类别（该属性的语义是就近解读）" + +msgid "Assigned ID View" +msgstr "已分配的ID视图" + +msgid "Requires pre-authentication" +msgstr "需要预认证" + +msgid "Pre-authentication is required for the service" +msgstr "服务需要预认证" + +msgid "Trusted for delegation" +msgstr "允许授权" + +msgid "Client credentials may be delegated to the service" +msgstr "客户端证书可以授权给服务" + +msgid "Member of host-groups" +msgstr "主机组成员" + +msgid "Roles" +msgstr "角色" + +msgid "Member of netgroups" +msgstr "网络组成员" + +msgid "Member of Sudo rule" +msgstr "Sudo规则的成员" + +msgid "Member of HBAC rule" +msgstr "HBAC规则的成员" + +msgid "Indirect Member of netgroup" +msgstr "间接网络组成员" + +msgid "Indirect Member of host-group" +msgstr "间接主机组成员" + +msgid "Indirect Member of role" +msgstr "间接角色成员" + +msgid "Indirect Member of Sudo rule" +msgstr "间接Sudo规则成员" + +msgid "Indirect Member of HBAC rule" +msgstr "间接HBAC规则成员" + +msgid "Keytab" +msgstr "" + +#, fuzzy +#| msgid "Manager" +msgid "Managed by" +msgstr "管理者" + +msgid "Managing" +msgstr "管理" + +msgid "Users allowed to retrieve keytab" +msgstr "允许检索keytab的用户" + +msgid "Groups allowed to retrieve keytab" +msgstr "允许检索keytab的用户组" + +msgid "Hosts allowed to retrieve keytab" +msgstr "允许检索keytab的主机" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "允许检索keytab的主机组" + +msgid "Users allowed to create keytab" +msgstr "允许创建keytab的用户" + +msgid "Groups allowed to create keytab" +msgstr "允许创建keytab的用户组" + +msgid "Hosts allowed to create keytab" +msgstr "允许创建keytab的主机" + +msgid "Host Groups allowed to create keytab" +msgstr "允许创建keytab的主机组" + +msgid "Add a new host." +msgstr "添加一个新主机。" + +#, fuzzy +#| msgid "force principal name even if not in DNS" +msgid "force host name even if not in DNS" +msgstr "即使主体名在DNS中不存在，也强制添加它" + +msgid "skip reverse DNS detection" +msgstr "忽略反向DNS检测" + +msgid "Add the host to DNS with this IP address" +msgstr "用该IP地址将主机添加到DNS中" + +msgid "Add hosts that can manage this host." +msgstr "添加可以管理该主机的主机。" msgid "" "Allow users, groups, hosts or host groups to create a keytab of this host." msgstr "允许用户，用户组，主机或主机组来创建该主机的keytab。" -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "允许用户，用户组，主机或主机组来创建一个该服务的keytab。" - msgid "" "Allow users, groups, hosts or host groups to retrieve a keytab of this host." msgstr "允许用户，用户组，主机或主机组来检索该主机的keytab。" -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "允许用户，用户组，主机或主机组来检索一个该服务的keytab。" +msgid "Delete a host." +msgstr "删除一个主机。" -msgid "Allowed Target" -msgstr "允许的目标" +msgid "Remove entries from DNS" +msgstr "从DNS中移除条目" -msgid "Allowed to Impersonate" -msgstr "允许模仿" - -msgid "Allowed to create keytab" -msgstr "允许创建keytab" - -msgid "Allowed to retrieve keytab" -msgstr "允许检索keytab" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "即使使用兼容插件也允许迁移" - -msgid "Already registered" -msgstr "已注册" - -msgid "Alternative UPN suffixes" -msgstr "可供选择的UPN后缀" - -msgid "Altitude" -msgstr "高度" - -msgid "Always ask" -msgstr "总是询问" - -msgid "Ambiguous search, user domain was not specified" -msgstr "模糊查找，用户域没有指定" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "IPA主主机不能被删除或禁用" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "出现一个错误(${error})" - -msgid "An error occurred while fetching dns zones." -msgstr "在抓取dns区域时发生错误。" +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "禁用该主机的Kerberos密钥，SSL证书和所有的服务。" msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "不允许用户，用户组，主机或主机组来创建该主机的keytab。" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "不允许用户，用户组，主机或主机组来检索该主机的keytab。" + +msgid "Search for hosts." +msgstr "查找主机。" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "结果应该只包括主键属性(\"hostname\")" + +msgid "host group" +msgstr "主机组" + +msgid "Search for hosts with these member of host groups." +msgstr "查找包含这些主机组成员的主机。" + +msgid "Search for hosts without these member of host groups." +msgstr "查找不包含这些主机组成员的主机。" + +msgid "netgroup" +msgstr "网络组" + +msgid "Search for hosts with these member of netgroups." +msgstr "查找包含这些网络组成员的主机。" + +msgid "Search for hosts without these member of netgroups." +msgstr "查找不包含这些网络组成员的主机。" + +msgid "role" +msgstr "角色" + +msgid "Search for hosts with these member of roles." +msgstr "查找包含这些角色成员的主机。" + +msgid "Search for hosts without these member of roles." +msgstr "查找不包含这些角色成员的主机。" + +msgid "HBAC rule" +msgstr "HBAC规则" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的主机。" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的主机。" + +msgid "sudo rule" +msgstr "sudo规则" + +msgid "Search for hosts with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的主机。" + +msgid "Search for hosts without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的主机。" + +msgid "user" +msgstr "用户" + +msgid "Search for hosts with these enrolled by users." +msgstr "查找包含用户注册的主机。" + +msgid "Search for hosts without these enrolled by users." +msgstr "查找不包含用户注册的主机。" + +msgid "host" +msgstr "主机" + +msgid "Search for hosts with these managed by hosts." +msgstr "查找由该主机管理的主机。" + +msgid "Search for hosts without these managed by hosts." +msgstr "查找不由该主机管理的主机。" + +msgid "Search for hosts with these managing hosts." +msgstr "查找管理该主机的主机。" + +msgid "Search for hosts without these managing hosts." +msgstr "查找不管理该主机的主机。" + +msgid "Modify information about a host." +msgstr "修改主机信息" + +msgid "Kerberos principal name for this host" +msgstr "该主机的Kerberos主体名" + +msgid "Update DNS entries" +msgstr "更新DNS条目" + +msgid "Remove hosts that can manage this host." +msgstr "移除可以管理该主机的主机。" + +msgid "Display information about a host." +msgstr "显示一个主机信息。" + +msgid "file to store certificate in" +msgstr "存储证书文件" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" msgstr "" -"id范围已在该域中存在。你要么删除旧的范围，要么从命令中排除--base-id/--range-" -"size选项。" -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "命名服务器新的DNS区域定期调查的间隔" +msgid "Host-group" +msgstr "主机组" -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "锚'%(anchor)s'不能被解析。" +msgid "Name of host-group" +msgstr "主机组名称" -msgid "Any CA" -msgstr "任何CA" +msgid "A description of this host-group" +msgstr "该主机组的描述" -msgid "Any Command" -msgstr "任何命令" +msgid "Member hosts" +msgstr "成员主机" -msgid "Any Group" -msgstr "任何组" +msgid "Member host-groups" +msgstr "主机组成员" -msgid "Any Host" -msgstr "任何主机" +msgid "Indirect Member hosts" +msgstr "间接成员主机" -msgid "Any Profile" -msgstr "任何配置文件" +msgid "Indirect Member host-groups" +msgstr "间接成员主机组" -msgid "Any Service" -msgstr "任何服务" +msgid "Add a new hostgroup." +msgstr "添加一个新的主机组。" -msgid "Anyone" -msgstr "任何人" +msgid "Add members to a hostgroup." +msgstr "向一个主机组添加成员。" -msgid "Applied to hosts" -msgstr "适用的主机" +msgid "Delete a hostgroup." +msgstr "删除一个主机组。" + +msgid "Search for hostgroups." +msgstr "查找主机组。" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "结果应该只包括主键属性(\"hostgroup-name\")" + +msgid "Search for host groups with these member hosts." +msgstr "查找包含这些成员主机的主机组。" + +msgid "Search for host groups without these member hosts." +msgstr "查找不包含这些成员主机的主机组。" + +msgid "Search for host groups with these member host groups." +msgstr "查找包含这些成员主机组的主机组。" + +msgid "Search for host groups without these member host groups." +msgstr "查找不包含这些成员主机组的主机组。" + +msgid "Search for host groups with these member of host groups." +msgstr "查找包含这些主机组成员的主机组。" + +msgid "Search for host groups without these member of host groups." +msgstr "查找不包含这些主机组成员的主机组。" + +msgid "Search for host groups with these member of netgroups." +msgstr "查找包含这些网络组成员的主机组。" + +msgid "Search for host groups without these member of netgroups." +msgstr "查找不包含这些网络组成员的主机组。" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的主机组。" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的主机组。" + +msgid "Search for host groups with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的主机组。" + +msgid "Search for host groups without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的主机组。" + +msgid "Modify a hostgroup." +msgstr "修改一个主机组。" + +msgid "Remove members from a hostgroup." +msgstr "从一个主机组中移除成员。" + +msgid "Display information about a hostgroup." +msgstr "显示一个主机组信息。" msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" msgstr "" -"ID视图适用于指定的主机或指定主机组的当前成员。如果该主机已有其他ID视图，则覆" -"盖它。" + +#, fuzzy +#| msgid "User to override" +msgid "Anchor to override" +msgstr "待覆盖用户" + +msgid "Group name" +msgstr "组名" + +msgid "GID" +msgstr "GID" + +msgid "Group ID Number" +msgstr "组ID号码" + +msgid "User login" +msgstr "用户登录名" + +msgid "UID" +msgstr "UID" + +msgid "User ID Number" +msgstr "用户ID号码" + +#, fuzzy +#| msgid "GECOS field" +msgid "GECOS" +msgstr "GECOS字段" + +msgid "Home directory" +msgstr "主目录" + +msgid "Login shell" +msgstr "登录shell" + +msgid "ID View Name" +msgstr "ID视图名称" + +msgid "Add a new Group ID override." +msgstr "添加一个新的组ID覆盖。" + +msgid "Delete an Group ID override." +msgstr "删除一个组ID覆盖。" + +msgid "Search for an Group ID override." +msgstr "查找一个组ID覆盖。" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "结果应该只包括主键属性(\"anchor\")" + +msgid "Modify an Group ID override." +msgstr "修改一个组ID覆盖。" + +msgid "Rename the Group ID override object" +msgstr "重命名组ID覆盖对象" + +msgid "Display information about an Group ID override." +msgstr "显示一个组ID覆盖信息。" + +msgid "Add a new User ID override." +msgstr "添加一个新的用户ID覆盖。" + +msgid "Delete an User ID override." +msgstr "删除一个用户ID覆盖。" + +msgid "Search for an User ID override." +msgstr "查找一个用户ID覆盖。" + +msgid "Modify an User ID override." +msgstr "修改一个用户ID覆盖。" + +msgid "Rename the User ID override object" +msgstr "重命名用户ID覆盖对象" + +msgid "Display information about an User ID override." +msgstr "显示一个用户ID覆盖信息。" + +msgid "Add a new ID View." +msgstr "添加一个新的ID视图。" msgid "" "Applies ID View to specified hosts or current members of specified " @@ -2264,268 +3909,387 @@ msgstr "" "应用ID视图到指定的主机或指定主机组的当前成员。如果该主机已有其他ID视图，则覆" "盖它。" -msgid "Apply" -msgstr "应用" +msgid "hosts" +msgstr "主机" -msgid "Apply ACI to your own entry (self)" -msgstr "应用ACI到你自己的条目" +msgid "Hosts to apply the ID View to" +msgstr "主机应用ID视图" -msgid "Apply to host groups" -msgstr "适用的主机组" - -msgid "Apply to hosts" -msgstr "适用的主机" - -msgid "Archive data into a vault." -msgstr "数据归档到库。" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "数据归档到库\"%(value)s\"" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "你确定要${action}用户？
改变会立即生效。" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "你确定要激活${object}？" - -msgid "Are you sure you want to activate selected users?" -msgstr "你确定要激活被选用户？" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "你确定要为DNS区域${object}添加权限吗？" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "你确定要删除${object}？" - -msgid "Are you sure you want to delete selected entries?" -msgstr "你确定要删除被选条目？" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "你确定要禁用${object}？" - -msgid "Are you sure you want to disable selected entries?" -msgstr "你确定要禁用被选条目？" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "你确定要启用${object}？" - -msgid "Are you sure you want to enable selected entries?" -msgstr "你确定要启用被选条目？" - -msgid "Are you sure you want to proceed with the action?" -msgstr "你确定要执行该操作吗？" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "你确定要重建自动成员吗？" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "你确定要为DNS区域${object}删除权限吗？" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "你确定要恢复${object}？" - -msgid "Are you sure you want to restore selected users?" -msgstr "你确定要恢复被选用户？" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "你确定要呈现${object}？" - -msgid "Are you sure you want to stage selected users?" -msgstr "你确定要呈现被选用户？" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "你确定要在选择的条目中不应用ID视图？" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "你确定要解锁用户${object}？" - -msgid "As Whom" -msgstr "作为谁" - -msgid "Asks for a non-random password to use for the principal" -msgstr "要求一个非随机密码用于主体" - -msgid "Assigned ID View" -msgstr "已分配的ID视图" - -msgid "Assigned manager of the token (default: self)" -msgstr "分配管理者令牌（默认：自己）" - -msgid "Assigned user of the token (default: self)" -msgstr "分配用户令牌（默认：自己）" - -msgid "At least the domain or IP address should be specified" -msgstr "至少应该指定域或IP地址" - -msgid "Attribute" -msgstr "属性" - -msgid "Attribute Key" -msgstr "性键值" - -msgid "Attribute breakdown" -msgstr "属性分类" +msgid "hostgroups" +msgstr "主机组" msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." msgstr "" -"通过正则表达式来过滤属性。例如：一个主机的fqdn属性，或者一个用户的manager属性" +"主机组的主机应用ID视图。请注意运行命令idview-apply后，视图并不会自动应用到主" +"机组中的主机中去。" -msgid "Attributes" -msgstr "属性" +msgid "Hosts that this ID View was applied to." +msgstr "应用过该ID视图的主机。" -msgid "Attributes for total update" -msgstr "所有更新的属性" +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "不能应用该ID视图的主机或主机组。" -msgid "Attributes to be ignored for group entries in DS" -msgstr "在DS中被用户组条目所忽略的属性" +msgid "Number of hosts the ID View was applied to:" +msgstr "应用过该ID视图的主机数量：" + +msgid "Delete an ID View." +msgstr "删除一个ID视图。" + +msgid "Search for an ID View." +msgstr "查找一个ID视图。" + +msgid "Modify an ID View." +msgstr "修改一个ID视图。" + +msgid "Rename the ID View object" +msgstr "重命名ID视图对象" + +msgid "Display information about an ID View." +msgstr "显示一个ID视图信息。" + +msgid "Enumerate all the hosts the view applies to." +msgstr "列举应用视图的所有主机。" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "从指定主机或指定主机组的当前成员中清除ID视图。" + +#, fuzzy +#| msgid "Hosts to apply the ID View to" +msgid "Hosts to clear (any) ID View from." +msgstr "主机应用ID视图" + +#, fuzzy +#| msgid "" +#| "Hostgroups to whose hosts apply the ID View to. Please note that view is " +#| "not applied automatically to any hosts added to the hostgroup after " +#| "running the idview-apply command." +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" +"主机组的主机应用ID视图。请注意运行命令idview-apply后，视图并不会自动应用到主" +"机组中的主机中去。" + +#, fuzzy +#| msgid "Hosts that this ID View was applied to." +msgid "Hosts that ID View was cleared from." +msgstr "应用过该ID视图的主机。" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "ID视图不能被清除的主机或主机组。" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "有ID视图未被设置的主机数量：" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" +"\n" +"通过CLI不能直接访问插件，需要使用内部命令\n" + +msgid "Dict of I18N messages" +msgstr "国际化消息字典" + +msgid "Export plugin meta-data for the webUI." +msgstr "webUI中导出插件元数据。" + +msgid "Name of object to export" +msgstr "导出对象的名称" + +msgid "Name of method to export" +msgstr "导出方法的名称" + +msgid "Name of command to export" +msgstr "导出命令的名称" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "JSON编码IPA对象字典" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "JSON编码IPA方法字典" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "JSON编码IPA命令字典" + +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" +"\n" +"加入一个IPA域\n" + +msgid "Join an IPA domain" +msgstr "加入一个IPA域" + +#, fuzzy +#| msgid "The hostname must not be: %s\n" +msgid "The hostname to register as" +msgstr "主机名必须不能是：%s\n" + +msgid "The IPA realm" +msgstr "IPA域" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "主机硬件平台（例如：联想T61）" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "主机操作系统版本（例如：Fedora 9）" + +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" + +msgid "User name" +msgstr "用户名" + +msgid "Manage ticket policy for specific user" +msgstr "管理指定用户的票据策略" + +msgid "Max life" +msgstr "最长存活期" + +msgid "Maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +msgid "Max renew" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Maximum renewable age (seconds)" +msgstr "票据最长存活期（秒）" + +msgid "Modify Kerberos ticket policy." +msgstr "修改Kerberos票据策略。" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "重置Kerberos票据策略为默认值。" + +msgid "Display the current Kerberos ticket policy." +msgstr "显示当前Kerberos票据策略。" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," +"cn=accounts' --group-container='cn=groups,cn=accounts' " +"ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" +"container='cn=groups,cn=accounts' --user-ignore-" +"objectclass=radiusprofile --user-ignore-" +"attribute=radiusgroupname ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +msgid "Migrate users and groups from DS to IPA." +msgstr "将DS中的用户和用户组移植到IPA。" + +msgid "LDAP URI" +msgstr "LDAP URI" + +msgid "LDAP URI of DS server to migrate from" +msgstr "" + +msgid "bind password" +msgstr "绑定密码" + +msgid "Bind DN" +msgstr "绑定DN" + +msgid "User container" +msgstr "用户容器" + +msgid "DN of container for users in DS relative to base DN" +msgstr "在DS中与基类DN相关的用户容器DN" + +msgid "Group container" +msgstr "组容器" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "在DS中与基类DN相关的用户组容器DN" + +msgid "User object class" +msgstr "用户对象类" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "在DS中用于查找用户条目的对象类" + +msgid "Group object class" +msgstr "组对象类" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "在DS中用户查找用户组条目的对象类" + +msgid "Ignore user object class" +msgstr "忽略用户对象类" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "在DS中被用户条目所忽略的对象类" + +msgid "Ignore user attribute" +msgstr "忽略用户属性" msgid "Attributes to be ignored for user entries in DS" msgstr "在DS中被用户条目所忽略的属性" -msgid "Attributes to replicate" -msgstr "待复制属性" +msgid "Ignore group object class" +msgstr "忽略组对象类" -msgid "Attributes to which the permission applies by default" -msgstr "权限默认应用的属性" +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "在DS中被用户组条目所忽略的对象类" -msgid "Attributes to which the permission applies." -msgstr "权限应用属性。" +msgid "Ignore group attribute" +msgstr "忽略组属性" -msgid "Audit" -msgstr "审计" +msgid "Attributes to be ignored for group entries in DS" +msgstr "在DS中被用户组条目所忽略的属性" -msgid "Authentication" -msgstr "身份验证" - -msgid "Authentication Indicators" -msgstr "认证指标" - -msgid "Authentication indicator" -msgstr "认证指标" - -msgid "Authentication indicators" -msgstr "认证指标" - -msgid "Authoritative nameserver" -msgstr "权威的命名服务器" - -msgid "Authoritative nameserver change" -msgstr "权威命名服务器改变" - -msgid "Authoritative nameserver domain name" -msgstr "权威的命名服务器域名" - -msgid "Authority ID" -msgstr "授权ID" - -msgid "Auto Membership Rule" -msgstr "自动成员规则" - -msgid "Auto Membership is not configured" -msgstr "自动成员没有配置" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "自动成员规则：%s没有找到！" - -msgid "Autogenerated" -msgstr "自动生成" +msgid "Overwrite GID" +msgstr "覆盖GID" msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "自动更新DNS系统记录失败。请手动重新运行更新系统记录来获取缺少的记录。" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "当移植一个在IPA域中已存在的组时覆盖组GID并报告成功" -msgid "Automember" -msgstr "自动成员" +msgid "LDAP schema" +msgstr "LDAP模式" -msgid "Automember Rule" -msgstr "自动成员规则" +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"用在LDAP服务器上的模式。支持值是RFC2307和RFC2307bis。默认值时RFC2307bis" -msgid "Automember rebuild membership task completed" -msgstr "自动成员重建成员关系任务已完成" +msgid "Continue" +msgstr "连续" -msgid "Automember rebuild membership task started" -msgstr "自动成员重建成员关系任务已开始" - -msgid "Automount" -msgstr "自动挂载" - -msgid "Automount Key" -msgstr "自动挂载键" - -msgid "Automount Keys" -msgstr "自动挂载键" - -msgid "Automount Location" -msgstr "自动挂载位置" - -msgid "Automount Location Settings" -msgstr "自动挂载位置设置" - -msgid "Automount Locations" -msgstr "自动挂载位置" - -msgid "Automount Map" -msgstr "自动挂载映射" - -msgid "Automount Maps" -msgstr "自动挂载映射" - -msgid "Automount key name." -msgstr "自动挂载键名。" - -msgid "Automount key object." -msgstr "自动挂载键对象。" - -msgid "Automount location name." -msgstr "自动挂载位置名。" - -msgid "Automount map name." -msgstr "自动挂载映射名。" - -msgid "Automount master file." -msgstr "自动挂载主文件。" - -msgid "Available" -msgstr "可用的" - -msgid "BIND update policy" -msgstr "BIND更新策略" - -msgid "Back" -msgstr "返回" - -msgid "Back to Top" -msgstr "回到顶部" - -msgid "Bad format in credentials cache" -msgstr "凭证缓存格式错误" - -msgid "Bad or unsupported salt type.\n" -msgstr "错误的或不支持的盐值类型。\n" - -msgid "Bad search filter" -msgstr "无效的搜索过滤器" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "不正确的查询筛选器%(info)s" +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "连续操作模式。报告错误但这个过程仍在继续" msgid "Base DN" msgstr "基DN" @@ -2533,389 +4297,6139 @@ msgstr "基DN" msgid "Base DN on remote LDAP server" msgstr "远程LDAP服务器上的基DN" -msgid "Base ID" -msgstr "基ID" +msgid "Ignore compat plugin" +msgstr "忽略兼容插件" -msgid "Base-64 encoded certificate." -msgstr "Base-64编码的证书。" - -msgid "Base-64 encoded host certificate" -msgstr "Base-64编码的主机证书" - -msgid "Base-64 encoded server certificate" -msgstr "Base-64 编码格式的服务器证书" - -msgid "Base-64 encoded service certificate" -msgstr "Base-64编码的服务证书" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64编码的用户证书" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64解码失败: %(reason)s" - -msgid "Bind DN" -msgstr "绑定DN" - -msgid "Bind rule type" -msgstr "绑定规则类型" - -msgid "Brief description of this profile" -msgstr "该配置文件的简要描述" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "CA'%s'被禁用" - -msgid "CA category" -msgstr "CA类别" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "CA类别不能设置为all'，虽然有允许CAs" - -msgid "CA category the ACL applies to" -msgstr "ACL应用的CA类别" +msgid "Allows migration despite the usage of compat plugin" +msgstr "即使使用兼容插件也允许迁移" msgid "CA certificate" msgstr "CA证书" -msgid "CA is not configured" -msgstr "CA没有配置" +msgid "Load CA certificate of LDAP server from FILE" +msgstr "从文件加载LDAP服务器的CA证书" -msgid "CAs cannot be added when CA category='all'" -msgstr "当CA类别='all'时CAs不能被添加" +#, fuzzy +#| msgid "%s to exclude from migration" +msgid "groups to exclude from migration" +msgstr "不移植%s" -msgid "CERT Algorithm" -msgstr "CERT算法" +#, fuzzy +#| msgid "%s to exclude from migration" +msgid "users to exclude from migration" +msgstr "不移植%s" -msgid "CERT Certificate Type" -msgstr "CERT证书类型" +msgid "Lists of objects migrated; categorized by type." +msgstr "对象移植列表；按类型分类。" -msgid "CERT Certificate/CRL" -msgstr "CERT证书/CRL" +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "不能移植的对象列表；按类型分类。" -msgid "CERT Key Tag" -msgstr "CERT键标记" +msgid "False if migration mode was disabled." +msgstr "如果移植模式是禁用的，则错误" -msgid "CERT record" -msgstr "CERT记录" +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "如果移植失败是因为启用了兼容插件，则错误" -msgid "CIFS credentials object" -msgstr "CIFS凭证对象" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "CIFS服务器%(host)s阻止你的凭证" - -#, python-format msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" +"\n" +"Misc plug-ins\n" msgstr "" -"CIFS服务器通信错误：代码\"%(num)s\"，消息\"%(message)s\"（两者都有可能没有任" -"何信息）" +"\n" +"Misc插件\n" -msgid "CIFS server denied your credentials" -msgstr "CIFS服务器阻止你的凭证" +msgid "Show environment variables." +msgstr "显示环境变量。" -msgid "CLI name" -msgstr "CLI名称" - -msgid "CNAME Hostname" -msgstr "CNAME主机名" - -msgid "CNAME record" -msgstr "CNAME记录" +msgid "Forward to server instead of running locally" +msgstr "转发到服务器而不是在本地运行" msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "CNAME记录不允许与任何其他记录共存（RFC 1034，第3.6.2节）" +"retrieve and print all attributes from the server. Affects command output." +msgstr "从服务器检索和打印所有属性。影响命令输出。" -msgid "Cancel" -msgstr "取消" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "不能创建反向记录\"%(value)s\"：%(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "不能解码文件'%(filename)s': %(exc)s" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "不能和%(host)s建立LSA连接。CIFS服务器是否在运行？" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "不能建立一个信任到部署在IPA同一域中的AD。这样的设置不支持。" - -msgid "Cannot find specified domain or server name" -msgstr "找不到指定的域或服务器名称" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" +msgid "Dictionary mapping variable name to value" msgstr "" -"没有安装Samba 4不能执行SID验证。确认你已经在IPA服务器上安装了server-trust-ad" -"子包" -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgid "Total number of variables env (>= count)" +msgstr "env变量总数（>= count）" + +msgid "Number of variables returned (<= total)" +msgstr "返回变量数（<= total）" + +msgid "Show all loaded plugins." +msgstr "显示所有加载的插件。" + +msgid "Dictionary mapping plugin names to bases" msgstr "" -"没有安装Samba 4不能执行外部成员验证。确认你已经在IPA服务器上安装了server-" -"trust-ad子包" + +msgid "Number of plugins loaded" +msgstr "已加载插件数" msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" msgstr "" -"没有自己的域配置不能执行加入操作。首先确认你已经在IPA服务器上运行了ipa-" -"adtrust-install命令" + +msgid "Netgroup name" +msgstr "网络组名称" + +msgid "Netgroup description" +msgstr "网络组描述" + +msgid "NIS domain name" +msgstr "NIS域名" + +msgid "IPA unique ID" +msgstr "IPA唯一ID" + +msgid "Member netgroups" +msgstr "成员网络组" + +msgid "Indirect Member netgroups" +msgstr "间接成员网络组" + +msgid "Member User" +msgstr "成员用户" + +msgid "Member Group" +msgstr "成员组" + +msgid "Member Host" +msgstr "成员主机" + +msgid "Member Hostgroup" +msgstr "成员主机组" + +msgid "Add a new netgroup." +msgstr "添加一个新的网络组。" + +msgid "Add members to a netgroup." +msgstr "向一个网络组添加成员。" + +msgid "member netgroup" +msgstr "成员网络组" + +msgid "netgroups to add" +msgstr "待添加的网络组" + +msgid "Delete a netgroup." +msgstr "删除一个网络组。" + +msgid "Search for a netgroup." +msgstr "查找一个网络组。" + +msgid "search for managed groups" +msgstr "查找管理组" + +msgid "Search for netgroups with these member netgroups." +msgstr "查找包含这些成员网络组的网络组。" + +msgid "Search for netgroups without these member netgroups." +msgstr "查找不包含这些成员网络组的网络组。" + +msgid "Search for netgroups with these member users." +msgstr "查找包含这些成员用户的网络组。" + +msgid "Search for netgroups without these member users." +msgstr "查找不包含这些成员用户的网络组。" + +msgid "group" +msgstr "组" + +msgid "Search for netgroups with these member groups." +msgstr "查找包含这些成员用户组的网络组。" + +msgid "Search for netgroups without these member groups." +msgstr "查找不包含这些成员用户组的网络组。" + +msgid "Search for netgroups with these member hosts." +msgstr "查找包含这些成员主机的网络组。" + +msgid "Search for netgroups without these member hosts." +msgstr "查找不包含这些成员主机的网络组。" + +msgid "Search for netgroups with these member host groups." +msgstr "查找包含这些成员主机组的网络组。" + +msgid "Search for netgroups without these member host groups." +msgstr "查找不包含这些成员主机组的网络组。" + +msgid "Search for netgroups with these member of netgroups." +msgstr "查找包含这些网络组成员的网络组。" + +msgid "Search for netgroups without these member of netgroups." +msgstr "查找不包含这些网络组成员的网络组。" + +msgid "Modify a netgroup." +msgstr "修改一个网络组。" + +msgid "Remove members from a netgroup." +msgstr "从一个网络组中移除成员。" + +msgid "netgroups to remove" +msgstr "待移除的网络组" + +msgid "Display information about a netgroup." +msgstr "显示一个网络组信息。" msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" msgstr "" -"没有在该机器上进行Samba 4实例配置不能执行被选命令。确认你已经在该服务器上运行" -"ipa-adtrust-install。" +msgid "TOTP authentication Window" +msgstr "TOTP认证窗口" + +msgid "TOTP authentication time variance (seconds)" +msgstr "TOTP认证时间差异（秒）" + +msgid "TOTP Synchronization Window" +msgstr "TOTP同步窗口" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "TOTP同步时间差异（秒）" + +msgid "HOTP Authentication Window" +msgstr "HOTP认证窗口" + +#, fuzzy +#| msgid "TOTP authentication Window" +msgid "HOTP authentication skip-ahead" +msgstr "TOTP认证窗口" + +msgid "HOTP Synchronization Window" +msgstr "HOTP同步窗口" + +#, fuzzy +#| msgid "HOTP Synchronization Window" +msgid "HOTP synchronization skip-ahead" +msgstr "HOTP同步窗口" + +msgid "Modify OTP configuration options." +msgstr "修改OTP配置选项。" + +msgid "Show the current OTP configuration." +msgstr "显示当前OTP配置。" + +#, fuzzy +#| msgid "" +#| "\n" +#| "This code is an extension to the otptoken plugin and provides support " +#| "for\n" +#| "reading/writing YubiKey tokens directly.\n" msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." +"\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" msgstr "" -"没有安装Samba 4不能执行被选命令。确认你已经在IPA上安装了server-trust-ad子包。" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "不能读取文件'%(filename)s': %(exc)s" - -msgid "Cannot resolve KDC for requested realm" -msgstr "请求域中不能解析KDC" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "不能检索信任域GC列表" +"\n" +"这段代码是otp令牌插件的一个扩展，并对读/写YubiKey令牌提供直接的支持。\n" msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" +"\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" msgstr "" -"没有自己的域配置不能在信任域中查找。首先确认你已经在IPA服务器上运行了ipa-" -"adtrust-install命令" -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "不能存储权限ACI到%s" +msgid "Set a user's password." +msgstr "设置一个用户的密码。" -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "不能使用%(old_name)s和%(new_name)s" +msgid "New Password" +msgstr "新密码" -msgid "Car License" -msgstr "汽车执照" +msgid "Current Password" +msgstr "当前密码" -msgid "Certificate" -msgstr "证书" +msgid "OTP" +msgstr "OTP" -msgid "Certificate Association Data" -msgstr "证书关联数据" +msgid "One Time Password" +msgstr "一次性密码" -msgid "Certificate Authorities" -msgstr "证书颁发机构" - -msgid "Certificate Authority" -msgstr "证书颁发机构" - -msgid "Certificate Hold Removed" -msgstr "证书持有已删除" - -msgid "Certificate Profile" -msgstr "证书配置文件" - -msgid "Certificate Profile to use" -msgstr "待使用的证书配置文件" - -msgid "Certificate Profiles" -msgstr "证书配置文件" - -msgid "Certificate Profiles to add" -msgstr "待添加的证书配置文件" - -msgid "Certificate Profiles to remove" -msgstr "待移除的证书配置文件" - -msgid "Certificate Revoked" -msgstr "证书已撤销" - -msgid "Certificate Type" -msgstr "证书类型" - -msgid "Certificate Usage" -msgstr "证书用途" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "${entity} ${primary_key}证书" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "证书格式错误：%(error)s" - -msgid "Certificate in base64 or PEM format" -msgstr "base64或PEM格式的证书" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "证书操作没有完成：%(error)s" - -msgid "Certificate profiles cannot be renamed" -msgstr "证书配置文件不能被重命名" - -msgid "Certificate requested" -msgstr "证书请求" - -#, python-format msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "由CA'%(ca)s'发布序列号为%(serial)s的证书没有找到" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +"\n" +"Managed permissions\n" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "证书存储在文件'%(file)s'中" +msgid "Permission name" +msgstr "权限名称" -msgid "Certificate/CRL" -msgstr "证书/CRL" +msgid "Granted rights" +msgstr "授予权限" -msgid "Certificates" -msgstr "证书" +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "授予权限（读，查找，比较，写，添加，删除，全部）" -msgid "Change current Domain Level." -msgstr "改变当前域级别。" +msgid "Effective attributes" +msgstr "有效属性" -msgid "Change password" -msgstr "改变密码" +msgid "All attributes to which the permission applies" +msgstr "权限可以应用所有属性" -msgid "Change to POSIX group" -msgstr "更改为POSIX组" +msgid "Included attributes" +msgstr "包含的属性" -msgid "Change to external group" -msgstr "更改为外部组" +msgid "User-specified attributes to which the permission applies" +msgstr "权限可以应用用户指定属性" -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "已改变\"%(value)s\"的密码" +msgid "Excluded attributes" +msgstr "排除的属性" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "权限明确不能应用到用户指定的属性" + +msgid "Default attributes" +msgstr "默认属性" + +msgid "Attributes to which the permission applies by default" +msgstr "权限默认应用的属性" + +msgid "Bind rule type" +msgstr "绑定规则类型" + +#, fuzzy +#| msgid "User group to apply permissions to" +msgid "Subtree to apply permissions to" +msgstr "待应用权限的用户组" + +msgid "Extra target filter" +msgstr "额外的目标过滤器" + +msgid "Raw target filter" +msgstr "原始的目标过滤器" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" + +msgid "Target DN" +msgstr "目标DN" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" + +msgid "Member of group" +msgstr "组成员" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "组目标成员（设置隶属于目标过滤器）" + +#, fuzzy +#| msgid "User group to apply permissions to" +msgid "User group to apply permissions to (sets target)" +msgstr "待应用权限的用户组" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "IPA目标类型（设置子树和对象类目标过滤器）" + +msgid "Deprecated; use extratargetfilter" +msgstr "过时的；使用额外的目标过滤器" + +#, fuzzy +#| msgid "Deprecated; use extratargetfilter" +msgid "Deprecated; use ipapermlocation" +msgstr "过时的；使用额外的目标过滤器" + +#, fuzzy +#| msgid "Deprecated; use %s" +msgid "Deprecated; use ipapermright" +msgstr "已弃用；使用%s" + +msgid "Granted to Privilege" +msgstr "授于特权" + +msgid "Indirect Member of roles" +msgstr "间接角色成员" + +msgid "Add a new permission." +msgstr "添加一个新的权限。" + +msgid "Add members to a permission." +msgstr "将成员添加到权限。" + +msgid "member privilege" +msgstr "成员特权" + +msgid "privileges to add" +msgstr "待添加的特权" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "添加一个没有ACI的系统权限（内部命令）" + +msgid "Permission flags" +msgstr "权限标记" + +msgid "Delete a permission." +msgstr "删除一个权限。" + +msgid "force delete of SYSTEM permissions" +msgstr "强制删除系统权限" + +msgid "Search for permissions." +msgstr "查找权限。" + +msgid "Modify a permission." +msgstr "修改一个权限。" + +msgid "Rename the permission object" +msgstr "重命名权限对象" + +msgid "Remove members from a permission." +msgstr "从一个权限中移除成员。" + +msgid "privileges to remove" +msgstr "待移除的特权" + +msgid "Display information about a permission." +msgstr "显示一个权限信息。" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "Ping a remote server." +msgstr "Ping一台远程服务器。" + +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "启用或禁用匿名PKINIT。" + +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" + +msgid "Privilege name" +msgstr "特权名" + +msgid "Privilege description" +msgstr "特权描述" + +msgid "Granting privilege to roles" +msgstr "给角色授予特权" + +msgid "Add a new privilege." +msgstr "添加一个新的特权。" + +msgid "Add members to a privilege." +msgstr "向一个特权中添加成员。" + +msgid "member role" +msgstr "成员角色" + +msgid "roles to add" +msgstr "待添加角色" + +msgid "Add permissions to a privilege." +msgstr "向一个特权中添加权限。" + +msgid "permission" +msgstr "权限" + +msgid "permissions" +msgstr "权限" + +msgid "Number of permissions added" +msgstr "已添加权限数" + +msgid "Delete a privilege." +msgstr "删除一个特权。" + +msgid "Search for privileges." +msgstr "查找特权。" + +msgid "Modify a privilege." +msgstr "修改一个特权。" + +msgid "Rename the privilege object" +msgstr "重命名特权对象" + +msgid "Remove members from a privilege" +msgstr "从特权中移除成员" + +msgid "roles to remove" +msgstr "待移除角色" + +msgid "Remove permissions from a privilege." +msgstr "从特权中移除权限。" + +msgid "Number of permissions removed" +msgstr "已移除权限数" + +msgid "Display information about a privilege." +msgstr "显示一个特权信息。" + +msgid "" +"\n" +"Password policy\n" +"\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" +"\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" +msgstr "" + +msgid "Group" +msgstr "组" + +msgid "Manage password policy for specific group" +msgstr "管理指定组的密码策略" + +msgid "Max lifetime (days)" +msgstr "最大生存期（天）" + +msgid "Maximum password lifetime (in days)" +msgstr "最大密码生存期（天）" + +msgid "Min lifetime (hours)" +msgstr "最小生存期（小时）" + +msgid "Minimum password lifetime (in hours)" +msgstr "最小密码生存期（小时）" + +msgid "History size" +msgstr "历史大小" + +msgid "Password history size" +msgstr "密码历史大小" msgid "Character classes" msgstr "字符类" -msgid "Check DNS" -msgstr "检测DNS" +msgid "Minimum number of character classes" +msgstr "最小字符类数量" -msgid "Check connection to remote IPA server." -msgstr "检测和远程IPA服务器的连接。" +msgid "Min length" +msgstr "最小长度" -msgid "Check the status of a certificate signing request." -msgstr "检查证书签名请求的状态。" +msgid "Minimum length of password" +msgstr "最短密码长度" -msgid "Checking if record exists." -msgstr "检查记录是否存在。" +msgid "Priority of the policy (higher number means lower priority" +msgstr "策略优先级（数字越大意味着优先级越低" -msgid "Checks if any of the servers has the CA service enabled." -msgstr "检查是否有任何服务器启用了CA服务。" +msgid "Max failures" +msgstr "最大失败次数" -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "检查是否有任何服务器启用了DNS服务。" +msgid "Consecutive failures before lockout" +msgstr "连续失败后锁定" + +msgid "Failure reset interval" +msgstr "失败重置时间间隔" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "一段时间后失败次数将被重置（秒）" + +msgid "Lockout duration" +msgstr "锁定时间" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "锁定持续时间（秒）" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "结果应该只包括主键属性(\"cn\")" + +msgid "Add a new group password policy." +msgstr "添加一个新的组密码策略。" + +msgid "Delete a group password policy." +msgstr "删除一个组密码策略。" + +msgid "Search for group password policies." +msgstr "查找组密码策略。" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "结果应该只包括主键属性(\"group\")" + +msgid "Modify a group password policy." +msgstr "修改一个组密码策略。" + +msgid "Display information about password policy." +msgstr "显示密码策略信息。" + +msgid "User" +msgstr "用户" + +msgid "Display effective policy for a specific user" +msgstr "显示一个指定用户的有效策略" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "RADIUS proxy server name" +msgstr "RADIUS代理服务器名称" + +msgid "A description of this RADIUS proxy server" +msgstr "该RADIUS代理服务器的描述" + +msgid "Server" +msgstr "服务器" + +msgid "The hostname or IP (with or without port)" +msgstr "主机名或IP（有或没有端口）" + +msgid "Secret" +msgstr "密码" + +msgid "The secret used to encrypt data" +msgstr "密码用于数据加密" + +msgid "Timeout" +msgstr "超时" + +msgid "The total timeout across all retries (in seconds)" +msgstr "所有重试总超时（秒）" + +msgid "Retries" +msgstr "重试" + +msgid "The number of times to retry authentication" +msgstr "重试认证的次数" + +msgid "User attribute" +msgstr "用户属性" + +msgid "The username attribute on the user object" +msgstr "用户对象的用户名属性" + +msgid "Add a new RADIUS proxy server." +msgstr "添加一个新的RADIUS代理服务器。" + +msgid "Delete a RADIUS proxy server." +msgstr "删除一个RADIUS代理服务器。" + +msgid "Search for RADIUS proxy servers." +msgstr "查找RADIUS代理服务器。" + +msgid "Modify a RADIUS proxy server." +msgstr "修改一个RADIUS代理服务器。" + +msgid "Rename the RADIUS proxy server object" +msgstr "重命名RADIUS代理服务器对象" + +msgid "Display information about a RADIUS proxy server." +msgstr "显示一个RADIUS代理服务器信息。" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Domain" +msgstr "域" + +msgid "Add domain" +msgstr "添加域" + +msgid "Delete domain" +msgstr "删除域" + +msgid "Modify realm domains." +msgstr "修改realm域。" + +msgid "Force adding domain even if not in DNS" +msgstr "即使域在DNS中不存在，也强制添加它" + +msgid "Display the list of realm domains." +msgstr "显示realm域列表。" + +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" + +msgid "Role name" +msgstr "角色名" + +msgid "A description of this role-group" +msgstr "该角色组的描述" + +msgid "Member users" +msgstr "成员用户" + +msgid "Member groups" +msgstr "成员组" + +msgid "Privileges" +msgstr "特权" + +msgid "Member services" +msgstr "成员服务" + +msgid "Add a new role." +msgstr "添加一个新角色。" + +msgid "Add members to a role." +msgstr "向角色中添加成员。" + +msgid "member service" +msgstr "成员服务" + +msgid "services to add" +msgstr "待添加服务" + +msgid "Add privileges to a role." +msgstr "向一个角色中添加特权。" + +msgid "privilege" +msgstr "特权" + +msgid "privileges" +msgstr "特权" + +msgid "Number of privileges added" +msgstr "已添加特权数" + +msgid "Delete a role." +msgstr "删除一个角色。" + +msgid "Search for roles." +msgstr "查找角色。" + +msgid "Modify a role." +msgstr "修改一个角色。" + +msgid "Rename the role object" +msgstr "重命名角色对象" + +msgid "Remove members from a role." +msgstr "从一个角色中移除成员。" + +msgid "services to remove" +msgstr "待移除服务" + +msgid "Remove privileges from a role." +msgstr "从一个角色中移除权限。" + +msgid "Number of privileges removed" +msgstr "已移除权限数" + +msgid "Display information about a role." +msgstr "显示一个角色信息。" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "Self-service name" +msgstr "自助服务名" + +msgid "Attributes to which the permission applies." +msgstr "权限应用属性。" + +msgid "Add a new self-service permission." +msgstr "添加一个新的自助服务权限。" + +msgid "Delete a self-service permission." +msgstr "删除一个自助服务权限。" + +msgid "Search for a self-service permission." +msgstr "查找一个自助服务权限。" + +msgid "Modify a self-service permission." +msgstr "修改一个自助服务权限。" + +msgid "Display information about a self-service permission." +msgstr "显示一个自助服务权限信息。" + +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" + +msgid "SELinux User" +msgstr "SELinux用户" + +msgid "HBAC Rule" +msgstr "HBAC规则" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "HBAC规则定义了用户，用户组和主机组" + +msgid "Create a new SELinux User Map." +msgstr "创建一个新的SELinux用户映射。" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "向SELinux用户映射规则中添加目标主机和主机组。" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "向SELinux用户映射规则中添加用户和用户组。" + +msgid "Delete a SELinux User Map." +msgstr "删除一个SELinux用户映射。" + +msgid "Disable an SELinux User Map rule." +msgstr "禁用一个SELinux用户映射规则。" + +msgid "Enable an SELinux User Map rule." +msgstr "启用一个SELinux用户映射规则。" + +msgid "Search for SELinux User Maps." +msgstr "查找SELinux用户映射。" + +msgid "Modify a SELinux User Map." +msgstr "修改一个SELinux用户映射。" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "从一个SELinux用户映射规则中移除目标主机和主机组。" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "向SELinux用户映射规则中移除用户和用户组。" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "显示一个SELinux用户映射规则的属性。" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "Principal" +msgstr "主体" + +msgid "Service principal" +msgstr "服务主体" + +msgid "PAC type" +msgstr "PAC类型" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" +"覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持，例如，这可能是NFS" +"服务的必要条件。" + +msgid "Add a new IPA new service." +msgstr "添加一个新的IPA服务。" + +msgid "force principal name even if not in DNS" +msgstr "即使主体名在DNS中不存在，也强制添加它" + +msgid "Add hosts that can manage this service." +msgstr "添加可以管理该服务的主机。" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "允许用户，用户组，主机或主机组来创建一个该服务的keytab。" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "允许用户，用户组，主机或主机组来检索一个该服务的keytab。" + +msgid "Delete an IPA service." +msgstr "删除一个IPA服务。" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "禁用一个服务的Kerberos密钥和SSL证书。" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "不允许用户，用户组，主机或主机组来创建该服务的keytab。" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "不允许用户，用户组，主机或主机组来检索该服务的keytab。" + +msgid "Search for IPA services." +msgstr "查找IPA服务。" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "结果应该只包括主键属性(\"principal\")" + +msgid "Search for services with these managed by hosts." +msgstr "查找那些由主机管理的服务。" + +msgid "Search for services without these managed by hosts." +msgstr "查找那些不由主机管理的服务。" + +msgid "Modify an existing IPA service." +msgstr "修改一个已存在的IPA服务。" + +msgid "Remove hosts that can manage this service." +msgstr "移除可以管理该服务的主机。" + +msgid "Display information about an IPA service." +msgstr "显示一个IPA服务信息。" + +msgid "" +"\n" +"Session Support for IPA\n" +"John Dennis \n" +"\n" +"Goals\n" +"=====\n" +"\n" +"Provide per-user session data caching which persists between\n" +"requests. Desired features are:\n" +"\n" +"* Integrates cleanly with minimum impact on existing infrastructure.\n" +"\n" +"* Provides maximum security balanced against real-world performance\n" +" demands.\n" +"\n" +"* Sessions must be able to be revoked (flushed).\n" +"\n" +"* Should be flexible and easy to use for developers.\n" +"\n" +"* Should leverage existing technology and code to the maximum extent\n" +" possible to avoid re-invention, excessive implementation time and to\n" +" benefit from robustness in field proven components commonly shared\n" +" in the open source community.\n" +"\n" +"* Must support multiple independent processes which share session\n" +" data.\n" +"\n" +"* System must function correctly if session data is available or not.\n" +"\n" +"* Must be high performance.\n" +"\n" +"* Should not be tied to specific web servers or browsers. Should\n" +" integrate with our chosen WSGI model.\n" +"\n" +"Issues\n" +"======\n" +"\n" +"Cookies\n" +"-------\n" +"\n" +"Most session implementations are based on the use of cookies. Cookies\n" +"have some inherent problems.\n" +"\n" +"* User has the option to disable cookies.\n" +"\n" +"* User stored cookie data is not secure. Can be mitigated by setting\n" +" flags indicating the cookie is only to be used with SSL secured HTTP\n" +" connections to specific web resources and setting the cookie to\n" +" expire at session termination. Most modern browsers enforce these.\n" +"\n" +"Where to store session data?\n" +"----------------------------\n" +"\n" +"Session data may be stored on either on the client or on the\n" +"server. Storing session data on the client addresses the problem of\n" +"session data availability when requests are serviced by independent web\n" +"servers because the session data travels with the request. However\n" +"there are data size limitations. Storing session data on the client\n" +"also exposes sensitive data but this can be mitigated by encrypting\n" +"the session data such that only the server can decrypt it.\n" +"\n" +"The more conventional approach is to bind session data to a unique\n" +"name, the session ID. The session ID is transmitted to the client and\n" +"the session data is paired with the session ID on the server in a\n" +"associative data store. The session data is retrieved by the server\n" +"using the session ID when the receiving the request. This eliminates\n" +"exposing sensitive session data on the client along with limitations\n" +"on data size. It however introduces the issue of session data\n" +"availability when requests are serviced by more than one server\n" +"process.\n" +"\n" +"Multi-process session data availability\n" +"---------------------------------------\n" +"\n" +"Apache (and other web servers) fork child processes to handle requests\n" +"in parallel. Also web servers may be deployed in a farm where requests\n" +"are load balanced in round robin fashion across different nodes. In\n" +"both cases session data cannot be stored in the memory of a server\n" +"process because it is not available to other processes, either sibling\n" +"children of a master server process or server processes on distinct\n" +"nodes.\n" +"\n" +"Typically this is addressed by storing session data in a SQL\n" +"database. When a request is received by a server process containing a\n" +"session ID in it's cookie data the session ID is used to perform a SQL\n" +"query and the resulting data is then attached to the request as it\n" +"proceeds through the request processing pipeline. This of course\n" +"introduces coherency issues.\n" +"\n" +"For IPA the introduction of a SQL database dependency is undesired and\n" +"should be avoided.\n" +"\n" +"Session data may also be shared by independent processes by storing\n" +"the session data in files.\n" +"\n" +"An alternative solution which has gained considerable popularity\n" +"recently is the use of a fast memory based caching server. Data is\n" +"stored in a single process memory and may be queried and set via a\n" +"light weight protocol using standard socket mechanisms, memcached is\n" +"one example. A typical use is to optimize SQL queries by storing a SQL\n" +"result in shared memory cache avoiding the more expensive SQL\n" +"operation. But the memory cache has distinct advantages in non-SQL\n" +"situations as well.\n" +"\n" +"Possible implementations for use by IPA\n" +"=======================================\n" +"\n" +"Apache Sessions\n" +"---------------\n" +"\n" +"Apache has 2.3 has implemented session support via these modules:\n" +"\n" +" mod_session\n" +" Overarching session support based on cookies.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" +"\n" +" mod_session_cookie\n" +" Stores session data in the client.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" +"\n" +" mod_session_crypto\n" +" Encrypts session data for security. Encryption key is shared\n" +" configuration parameter visible to all Apache processes and is\n" +" stored in a configuration file.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" +"\n" +" mod_session_dbd\n" +" Stores session data in a SQL database permitting multiple\n" +" processes to access and share the same session data.\n" +"\n" +" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" +"\n" +"Issues with Apache sessions\n" +"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" +"\n" +"Although Apache has implemented generic session support and Apache is\n" +"our web server of preference it nonetheless introduces issues for IPA.\n" +"\n" +" * Session support is only available in httpd >= 2.3 which at the\n" +" time of this writing is currently only available as a Beta release\n" +" from upstream. We currently only ship httpd 2.2, the same is true\n" +" for other distributions.\n" +"\n" +" * We could package and ship the sessions modules as a temporary\n" +" package in httpd 2.2 environments. But this has the following\n" +" consequences:\n" +"\n" +" - The code has to be backported. the module API has changed\n" +" slightly between httpd 2.2 and 2.3. The backporting is not\n" +" terribly difficult and a proof of concept has been\n" +" implemented.\n" +"\n" +" - We would then be on the hook to package and maintain a special\n" +" case Apache package. This is maintenance burden as well as a\n" +" distribution packaging burden. Both of which would be best\n" +" avoided if possible.\n" +"\n" +" * The design of the Apache session modules is such that they can\n" +" only be manipulated by other Apache modules. The ability of\n" +" consumers of the session data to control the session data is\n" +" simplistic, constrained and static during the period the request\n" +" is processed. Request handlers which are not native Apache modules\n" +" (e.g. IPA via WSGI) can only examine the session data\n" +" via request headers and reset it in response headers.\n" +"\n" +" * Shared session data is available exclusively via SQL.\n" +"\n" +"However using the 2.3 Apache session modules would give us robust\n" +"session support implemented in C based on standardized Apache\n" +"interfaces which are widely used.\n" +"\n" +"Python Web Frameworks\n" +"---------------------\n" +"\n" +"Virtually every Python web framework supports cookie based sessions,\n" +"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" +"to avoid the use of these frameworks. Trying to pull in just one part\n" +"of these frameworks just to get session support would be problematic\n" +"because the code does not function outside it's framework.\n" +"\n" +"IPA implemented sessions\n" +"------------------------\n" +"\n" +"Originally it was believed the path of least effort was to utilize\n" +"existing session support, most likely what would be provided by\n" +"Apache. However there are enough basic modular components available in\n" +"native Python and other standard packages it should be possible to\n" +"provide session support meeting the aforementioned goals with a modest\n" +"implementation effort. Because we're leveraging existing components\n" +"the implementation difficulties are subsumed by other components which\n" +"have already been field proven and have community support. This is a\n" +"smart strategy.\n" +"\n" +"Proposed Solution\n" +"=================\n" +"\n" +"Our interface to the web server is via WSGI which invokes a callback\n" +"per request passing us an environmental context for the request. For\n" +"this discussion we'll name the WSGI callback \"application()\", a\n" +"conventional name in WSGI parlance.\n" +"\n" +"Shared session data will be handled by memcached. We will create one\n" +"instance of memcached on each server node dedicated to IPA\n" +"exclusively. Communication with memcached will be via a UNIX socket\n" +"located in the file system under /var/run/ipa_memcached. It will be\n" +"protected by file permissions and optionally SELinux policy.\n" +"\n" +"In application() we examine the request cookies and if there is an IPA\n" +"session cookie with a session ID we retrieve the session data from our\n" +"memcached instance.\n" +"\n" +"The session data will be a Python dict. IPA components will read or\n" +"write their session information by using a pre-agreed upon name\n" +"(e.g. key) in the dict. This is a very flexible system and consistent\n" +"with how we pass data in most parts of IPA.\n" +"\n" +"If the session data is not available an empty session data dict will\n" +"be created.\n" +"\n" +"How does this session data travel with the request in the IPA\n" +"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" +"application() we convert the request into a procedure call passing it\n" +"arguments derived from the HTTP request. The passed parameters are\n" +"specific to the RPC method being invoked. The context the RPC call is\n" +"executing in is not passed as an RPC parameter.\n" +"\n" +"How would the contextual information such as session data be bound to\n" +"the request and hence the RPC call?\n" +"\n" +"In IPA when a RPC invocation is being prepared from a request we\n" +"recognize this will only ever be processed serially by one Python\n" +"thread. A thread local dict called \"context\" is allocated for each\n" +"thread. The context dict is cleared in between requests (e.g. RPC method\n" +"invocations). The per-thread context dict is populated during the\n" +"lifetime of the request and is used as a global data structure unique to\n" +"the request that various IPA component can read from and write to with\n" +"the assurance the data is unique to the current request and/or method\n" +"call.\n" +"\n" +"The session data dict will be written into the context dict under the\n" +"session key before the RPC method begins execution. Thus session data\n" +"can be read and written by any IPA component by accessing\n" +"``context.session``.\n" +"\n" +"When the RPC method finishes execution the session data bound to the\n" +"request/method is retrieved from the context and written back to the\n" +"memcached instance. The session ID is set in the response sent back to\n" +"the client in the ``Set-Cookie`` header along with the flags\n" +"controlling it's usage.\n" +"\n" +"Issues and details\n" +"------------------\n" +"\n" +"IPA code cannot depend on session data being present, however it\n" +"should always update session data with the hope it will be available\n" +"in the future. Session data may not be available because:\n" +"\n" +" * This is the first request from the user and no session data has\n" +" been created yet.\n" +"\n" +" * The user may have cookies disabled.\n" +"\n" +" * The session data may have been flushed. memcached operates with\n" +" a fixed memory allocation and will flush entries on a LRU basis,\n" +" like with any cache there is no guarantee of persistence.\n" +"\n" +" Also we may have have deliberately expired or deleted session\n" +" data, see below.\n" +"\n" +"Cookie manipulation is done via the standard Python Cookie module.\n" +"\n" +"Session cookies will be set to only persist as long as the browser has\n" +"the session open. They will be tagged so the browser only returns\n" +"the session ID on SSL secured HTTP requests. They will not be visible\n" +"to Javascript in the browser.\n" +"\n" +"Session ID's will be created by using 48 bits of random data and\n" +"converted to 12 hexadecimal digits. Newly generated session ID's will\n" +"be checked for prior existence to handle the unlikely case the random\n" +"number repeats.\n" +"\n" +"memcached will have significantly higher performance than a SQL or file\n" +"based storage solution. Communication is effectively though a pipe\n" +"(UNIX socket) using a very simple protocol and the data is held\n" +"entirely in process memory. memcached also scales easily, it is easy\n" +"to add more memcached processes and distribute the load across them.\n" +"At this point in time we don't anticipate the need for this.\n" +"\n" +"A very nice feature of the Python memcached module is that when a data\n" +"item is written to the cache it is done with standard Python pickling\n" +"(pickling is a standard Python mechanism to marshal and unmarshal\n" +"Python objects). We adopt the convention the object written to cache\n" +"will be a dict to meet our internal data handling conventions. The\n" +"pickling code will recursively handle nested objects in the dict. Thus\n" +"we gain a lot of flexibility using standard Python data structures to\n" +"store and retrieve our session data without having to author and debug\n" +"code to marshal and unmarshal the data if some other storage mechanism\n" +"had been used. This is a significant implementation win. Of course\n" +"some common sense limitations need to observed when deciding on what\n" +"is written to the session cache keeping in mind the data is shared\n" +"between processes and it should not be excessively large (a\n" +"configurable option)\n" +"\n" +"We can set an expiration on memcached entries. We may elect to do that\n" +"to force session data to be refreshed periodically. For example we may\n" +"wish the client to present fresh credentials on a periodic basis even\n" +"if the cached credentials are otherwise within their validity period.\n" +"\n" +"We can explicitly delete session data if for some reason we believe it\n" +"is stale, invalid or compromised.\n" +"\n" +"memcached also gives us certain facilities to prevent race conditions\n" +"between different processes utilizing the cache. For example you can\n" +"check of the entry has been modified since you last read it or use CAS\n" +"(Check And Set) semantics. What has to be protected in terms of cache\n" +"coherency will likely have to be determined as the session support is\n" +"utilized and different data items are added to the cache. This is very\n" +"much data and context specific. Fortunately memcached operations are\n" +"atomic.\n" +"\n" +"Controlling the memcached process\n" +"---------------------------------\n" +"\n" +"We need a mechanism to start the memcached process and secure it so\n" +"that only IPA components can access it.\n" +"\n" +"Although memcached ships with both an initscript and systemd unit\n" +"files those are for generic instances. We want a memcached instance\n" +"dedicated exclusively to IPA usage. To accomplish this we would install\n" +"a systemd unit file or an SysV initscript to control the IPA specific\n" +"memcached service. ipactl would be extended to know about this\n" +"additional service. systemd's cgroup facility would give us additional\n" +"mechanisms to integrate the IPA memcached service within a larger IPA\n" +"process group.\n" +"\n" +"Protecting the memcached data would be done via file permissions (and\n" +"optionally SELinux policy) on the UNIX domain socket. Although recent\n" +"implementations of memcached support authentication via SASL this\n" +"introduces a performance and complexity burden not warranted when\n" +"cached is dedicated to our exclusive use and access controlled by OS\n" +"mechanisms.\n" +"\n" +"Conventionally daemons are protected by assigning a system uid and/or\n" +"gid to the daemon. A daemon launched by root will drop it's privileges\n" +"by assuming the effective uid:gid assigned to it. File system access\n" +"is controlled by the OS via the effective identity and SELinux policy\n" +"can be crafted based on the identity. Thus the memcached UNIX socket\n" +"would be protected by having it owned by a specific system user and/or\n" +"membership in a restricted system group (discounting for the moment\n" +"SELinux).\n" +"\n" +"Unfortunately we currently do not have an IPA system uid whose\n" +"identity our processes operate under nor do we have an IPA system\n" +"group. IPA does manage a collection of related processes (daemons) and\n" +"historically each has been assigned their own uid. When these\n" +"unrelated processes communicate they mutually authenticate via other\n" +"mechanisms. We do not have much of a history of using shared file\n" +"system objects across identities. When file objects are created they\n" +"are typically assigned the identity of daemon needing to access the\n" +"object and are not accessed by other daemons, or they carry root\n" +"identity.\n" +"\n" +"When our WSGI application runs in Apache it is run as a WSGI\n" +"daemon. This means when Apache starts up it forks off WSGI processes\n" +"for us and we are independent of other Apache processes. When WSGI is\n" +"run in this mode there is the ability to set the uid:gid of the WSGI\n" +"process hosting us, however we currently do not take advantage of this\n" +"option. WSGI can be run in other modes as well, only in daemon mode\n" +"can the uid:gid be independently set from the rest of Apache. All\n" +"processes started by Apache can be set to a common uid:gid specified\n" +"in the global Apache configuration, by default it's\n" +"apache:apache. Thus when our IPA code executes it is running as\n" +"apache:apache.\n" +"\n" +"To protect our memcached UNIX socket we can do one of two things:\n" +"\n" +"1. Assign it's uid:gid as apache:apache. This would limit access to\n" +" our cache only to processes running under httpd. It's somewhat\n" +" restricted but far from ideal. Any code running in the web server\n" +" could potentially access our cache. It's difficult to control what the\n" +" web server runs and admins may not understand the consequences of\n" +" configuring httpd to serve other things besides IPA.\n" +"\n" +"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" +" our WSGI application to run as the ipa:ipa user and group. We also\n" +" configure our memcached instance to run as the ipa:ipa user and\n" +" group. In this configuration we are now fully protected, only our WSGI\n" +" code can read & write to our memcached UNIX socket.\n" +"\n" +"However there may be unforeseen issues by converting our code to run as\n" +"something other than apache:apache. This would require some\n" +"investigation and testing.\n" +"\n" +"IPA is dependent on other system daemons, specifically Directory\n" +"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" +"run under the dirsrv:dirsrv user and group, an identity of our\n" +"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" +"group. Should these other cooperating daemons also run under the\n" +"common ipa:ipa user and group identities? At first blush there would\n" +"seem to be an advantage to coalescing all process identities under a\n" +"common IPA user and group identity. However these other processes do\n" +"not depend on user and group permissions when working with external\n" +"agents, processes, etc. Rather they are designed to be stand-alone\n" +"network services which authenticate their clients via other\n" +"mechanisms. They do depend on user and group permission to manage\n" +"their own file system objects. If somehow the ipa user and/or group\n" +"were compromised or malicious code somehow executed under the ipa\n" +"identity there would be an advantage in having the cooperating\n" +"processes cordoned off under their own identities providing one extra\n" +"layer of protection. (Note, these cooperating daemons may not even be\n" +"co-located on the same node in which case the issue is moot)\n" +"\n" +"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" +"\n" +" * The socket ownership is: root:root\n" +"\n" +" * The socket permissions are: 0666\n" +"\n" +" * When connecting via ldapi you must authenticate as you would\n" +" normally with a TCP socket, except ...\n" +"\n" +" * If autobind is enabled and the uid:gid is available via\n" +" SO_PEERCRED and the uid:gid can be found in the set of users known\n" +" to the Directory Server then that connection will be bound as that\n" +" user.\n" +"\n" +" * Otherwise an anonymous bind will occur.\n" +"\n" +"memcached UNIX socket behavior is as follows:\n" +"\n" +" * memcached can be invoked with a user argument, no group may be\n" +" specified. The effective uid is the uid of the user argument and\n" +" the effective gid is the primary group of the user, let's call\n" +" this euid:egid\n" +"\n" +" * The socket ownership is: euid:egid\n" +"\n" +" * The socket permissions are 0700 by default, but this can be\n" +" modified by the -a mask command line arg which sets the umask\n" +" (defaults to 0700).\n" +"\n" +"Overview of authentication in IPA\n" +"=================================\n" +"\n" +"This describes how we currently authenticate and how we plan to\n" +"improve authentication performance. First some definitions.\n" +"\n" +"There are 4 major players:\n" +"\n" +" 1. client\n" +" 2. mod_auth_kerb (in Apache process)\n" +" 3. wsgi handler (in IPA wsgi python process)\n" +" 4. ds (directory server)\n" +"\n" +"There are several resources:\n" +"\n" +" 1. /ipa/ui (unprotected, web UI static resources)\n" +" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" +" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" +" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" +"\n" +"Current Model\n" +"-------------\n" +"\n" +"This describes how things work in our current system for the web UI.\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected, is static and\n" +" contains no sensitive information. Apache replies with html and\n" +" javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json.\n" +"\n" +" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" +" authenticate negotiate.\n" +"\n" +" 4. Client resends with credentials\n" +"\n" +" 5. mod_auth_kerb validates credentials\n" +"\n" +" a. if invalid replies 403 access denied (stops here)\n" +"\n" +" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" +" headers\n" +"\n" +" 6. Request passed to wsgi handler\n" +"\n" +" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" +"\n" +" b. ccache saved and used to bind to ds\n" +"\n" +" c. routes to specified RPC handler.\n" +"\n" +" 7. wsgi handler replies to client\n" +"\n" +"Proposed new session based optimization\n" +"---------------------------------------\n" +"\n" +"The round trip negotiate and credential validation in steps 3,4,5 is\n" +"expensive. This can be avoided if we can cache the client\n" +"credentials. With client sessions we can store the client credentials\n" +"in the session bound to the client.\n" +"\n" +"A few notes about the session implementation.\n" +"\n" +" * based on session cookies, cookies must be enabled\n" +"\n" +" * session cookie is secure, only passed on secure connections, only\n" +" passed to our URL resource, never visible to client javascript\n" +" etc.\n" +"\n" +" * session cookie has a session id which is used by wsgi handler to\n" +" retrieve client session data from shared multi-process cache.\n" +"\n" +"Changes to Apache's resource protection\n" +"---------------------------------------\n" +"\n" +" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" +" necessary to avoid the negotiate expense in steps 3,4,5\n" +" above. Instead the /ipa/json resource will be protected in our wsgi\n" +" handler via the session cookie.\n" +"\n" +" * A new protected URI is introduced, /ipa/login. This resource\n" +" does no serve any data, it is used exclusively for authentication.\n" +"\n" +"The new sequence is:\n" +"\n" +" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" +" html and javascript. The javascript requests /ipa/json.\n" +"\n" +" 2. Client sends post to /ipa/json, which is unprotected.\n" +"\n" +" 3. wsgi handler obtains session data from session cookie.\n" +"\n" +" a. if ccache is present in session data and is valid\n" +"\n" +" - request is further validated\n" +"\n" +" - ccache is established for bind to ds\n" +"\n" +" - request is routed to RPC handler\n" +"\n" +" - wsgi handler eventually replies to client\n" +"\n" +" b. if ccache is not present or not valid processing continues ...\n" +"\n" +" 4. wsgi handler replies with 401 Unauthorized\n" +"\n" +" 5. client sends request to /ipa/login to obtain session credentials\n" +"\n" +" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" +"\n" +" 7. client sends credentials to /ipa/login\n" +"\n" +" 8. mod_auth_kerb validates credentials\n" +"\n" +" a. if valid\n" +"\n" +" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" +" invoked and does the following:\n" +"\n" +" * establishes session for client\n" +"\n" +" * retrieves the ccache from KRB5CCNAME and stores it\n" +"\n" +" a. if invalid\n" +"\n" +" - mod_auth_kerb sends 403 access denied (processing stops)\n" +"\n" +" 9. client now posts the same data again to /ipa/json including\n" +" session cookie. Processing repeats starting at step 2 and since\n" +" the session data now contains a valid ccache step 3a executes, a\n" +" successful reply is sent to client.\n" +"\n" +"Command line client using xmlrpc\n" +"--------------------------------\n" +"\n" +"The above describes the web UI utilizing the json RPC mechanism. The\n" +"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" +"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" +"and xmlrpc API's are the same, they differ only on how their procedure\n" +"calls are marshalled and unmarshalled.\n" +"\n" +"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" +"at all times. Apache's mod_auth_kerb will continue to require the\n" +"client provides valid Kerberos credentials.\n" +"\n" +"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" +"be extracted from the KRB5CCNAME environment variable as provided by\n" +"mod_auth_kerb. Everything else remains the same.\n" +msgstr "" + +msgid "RPC command used to log the current user out of their session." +msgstr "RPC命令用于记录当前用户的会话。" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +msgstr "" + +msgid "Sudo Command" +msgstr "Sudo命令" + +msgid "A description of this command" +msgstr "该命令的一个描述" + +msgid "Sudo Command Groups" +msgstr "Sudo命令组" + +msgid "Create new Sudo Command." +msgstr "创建新的Sudo命令。" + +msgid "Delete Sudo Command." +msgstr "删除Sudo命令。" + +msgid "Search for Sudo Commands." +msgstr "查找Sudo命令。" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "结果应该只包括主键属性(\"command\")" + +msgid "Modify Sudo Command." +msgstr "修改Sudo命令。" + +msgid "Display Sudo Command." +msgstr "显示Sudo命令。" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "Sudo Command Group" +msgstr "Sudo命令组" + +msgid "Group description" +msgstr "组描述" + +msgid "Commands" +msgstr "命令" + +msgid "Member Sudo commands" +msgstr "成员Sudo命令" + +msgid "Create new Sudo Command Group." +msgstr "创建新的Sudo命令组。" + +msgid "Add members to Sudo Command Group." +msgstr "向Sudo命令组中添加成员。" + +msgid "member sudo command" +msgstr "成员sudo命令" + +msgid "sudo commands to add" +msgstr "待添加的sudo命令" + +msgid "Delete Sudo Command Group." +msgstr "删除Sudo命令组。" + +msgid "Search for Sudo Command Groups." +msgstr "查找Sudo命令组。" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "结果应该只包括主键属性(\"sudocmdgroup-name\")" + +msgid "Modify Sudo Command Group." +msgstr "修改Sudo命令组。" + +msgid "Remove members from Sudo Command Group." +msgstr "从Sudo命令组中移除成员。" + +msgid "sudo commands to remove" +msgstr "待移除的sudo命令" + +msgid "Display Sudo Command Group." +msgstr "显示Sudo命令组。" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" + +msgid "First name" +msgstr "名" + +msgid "Last name" +msgstr "姓" + +msgid "Full name" +msgstr "全名" + +msgid "Display name" +msgstr "显示名称" + +msgid "Initials" +msgstr "名字的首字母" + +msgid "Kerberos principal" +msgstr "Kerberos主体" + +msgid "Kerberos principal expiration" +msgstr "Kerberos主体过期" + +msgid "Email address" +msgstr "邮件地址" + +msgid "Prompt to set the user password" +msgstr "提示设置用户密码" + +msgid "Generate a random user password" +msgstr "生成一个随机用户密码" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "用户ID号码（如果没有提供系统会分配一个）" + +msgid "Street address" +msgstr "街道地址" msgid "City" msgstr "城市" -msgid "Class" -msgstr "类" +msgid "State/Province" +msgstr "州/省" + +msgid "ZIP" +msgstr "" + +msgid "Telephone Number" +msgstr "电话号码" + +msgid "Mobile Telephone Number" +msgstr "移动电话号码" + +msgid "Pager Number" +msgstr "传真号码" + +msgid "Fax Number" +msgstr "传真号码" + +msgid "Org. Unit" +msgstr "组织单位" + +msgid "Job Title" +msgstr "职称" + +msgid "Manager" +msgstr "管理者" + +msgid "Car License" +msgstr "汽车执照" + +msgid "Account disabled" +msgstr "禁用账户" + +msgid "User authentication types" +msgstr "用户认证类型" + +msgid "Types of supported user authentication" +msgstr "支持的用户认证类型" msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "从指定主机或指定主机组的当前成员中清除ID视图。" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "用户类别（该属性的语义是就近解读）" -#, python-brace-format -msgid "Click to ${action}" -msgstr "点击${action}" +msgid "RADIUS proxy configuration" +msgstr "RADIUS代理配置" -msgid "Client credentials may be delegated to the service" -msgstr "客户端证书可以授权给服务" +msgid "RADIUS proxy username" +msgstr "RADIUS代理名称" -msgid "Client is not configured. Run ipa-client-install." -msgstr "客户端没有配置。运行ipa-client-install。" +msgid "Department Number" +msgstr "部门编号" -msgid "Client version. Used to determine if server will accept request." -msgstr "客户端版本。用来确定是否服务器接受请求。" +msgid "Employee Number" +msgstr "员工编号" -msgid "Clock interval" -msgstr "时间间隔" +msgid "Employee Type" +msgstr "员工类型" + +msgid "Preferred Language" +msgstr "首选语言" + +msgid "Member of groups" +msgstr "组成员" + +msgid "Indirect Member of group" +msgstr "间接组成员" + +msgid "Kerberos keys available" +msgstr "Kerberos密码可用" + +msgid "Add a new user." +msgstr "添加一个新用户。" + +msgid "Don't create user private group" +msgstr "不创建用户私有组" + +msgid "Delete a user." +msgstr "删除一个用户。" + +msgid "Disable a user account." +msgstr "禁用一个用户账户。" + +msgid "Enable a user account." +msgstr "启用一个用户账户。" + +msgid "Search for users." +msgstr "查找用户。" + +msgid "Self" +msgstr "自己" + +msgid "Display user record for current Kerberos principal" +msgstr "显示当前Kerberos主体的用户记录" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "结果应该只包括主键属性(\"login\")" + +msgid "Search for users with these member of groups." +msgstr "查找包含这些组成员的用户。" + +msgid "Search for users without these member of groups." +msgstr "查找不包含这些组成员的用户。" + +msgid "Search for users with these member of netgroups." +msgstr "查找包含这些网络组成员的用户。" + +msgid "Search for users without these member of netgroups." +msgstr "查找不包含这些网络组成员的用户。" + +msgid "Search for users with these member of roles." +msgstr "查找包含这些角色成员的用户。" + +msgid "Search for users without these member of roles." +msgstr "查找不包含这些角色成员的用户。" + +msgid "Search for users with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的用户。" + +msgid "Search for users without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的用户。" + +msgid "Search for users with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的用户。" + +msgid "Search for users without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的用户。" + +msgid "Modify a user." +msgstr "修改一个用户。" + +msgid "Rename the user object" +msgstr "重命名用户对象" + +msgid "Display information about a user." +msgstr "显示一个用户信息。" + +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "A description of this auto member rule" +msgstr "一个自动成员规则的描述" + +msgid "Default (fallback) Group" +msgstr "默认（回退）组" + +#, fuzzy +#| msgid "Default group for new users not found" +msgid "Default group for entries to land" +msgstr "新用户的默认组没有找到" + +msgid "Add an automember rule." +msgstr "添加一个自动成员规则。" + +msgid "Automember Rule" +msgstr "自动成员规则" + +msgid "Grouping Type" +msgstr "组类型" + +msgid "Grouping to which the rule applies" +msgstr "组应用于哪种规则" + +msgid "Add conditions to an automember rule." +msgstr "添加条件到一个自动成员规则。" + +msgid "Inclusive Regex" +msgstr "兼容的正则表达式" + +msgid "Exclusive Regex" +msgstr "独占的正则表达式" + +msgid "Attribute Key" +msgstr "性键值" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"通过正则表达式来过滤属性。例如：一个主机的fqdn属性，或者一个用户的manager属性" + +msgid "Conditions that could not be added" +msgstr "不能被添加的条件" + +msgid "Number of conditions added" +msgstr "已添加的条件数" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "对所有不匹配的条目移除默认（回退）组。" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "对所有不匹配的条目设置默认（回退）组。" + +#, fuzzy +#| msgid "Set default (fallback) group for all unmatched entries." +msgid "Default (fallback) group for entries to land" +msgstr "对所有不匹配的条目设置默认（回退）组。" + +msgid "Display information about the default (fallback) automember groups." +msgstr "显示默认（回退）自动成员组的信息。" + +msgid "Delete an automember rule." +msgstr "删除一个自动成员规则。" + +msgid "Search for automember rules." +msgstr "查找自动成员规则。" + +msgid "Modify an automember rule." +msgstr "修改一个自动成员规则。" + +#, fuzzy +#| msgid "Rebuild auto membership" +msgid "Rebuild auto membership." +msgstr "重建自动成员" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" + +msgid "Rebuild membership for specified users" +msgstr "" + +msgid "Rebuild membership for specified hosts" +msgstr "" + +msgid "No wait" +msgstr "无需等待" + +#, fuzzy +#| msgid "Are you sure you want to rebuild auto membership?" +msgid "Don't wait for rebuilding membership" +msgstr "你确定要重建自动成员吗？" + +msgid "Remove conditions from an automember rule." +msgstr "从一个自动成员规则中移除条件。" + +msgid "Conditions that could not be removed" +msgstr "不能被移除的条件" + +msgid "Number of conditions removed" +msgstr "已移除的条件数" + +msgid "Display information about an automember rule." +msgstr "显示一个自动成员规则信息。" + +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "检查是否有任何服务器启用了CA服务。" + +msgid "Search for existing certificates." +msgstr "查找已存在的证书。" + +#, fuzzy +#| msgid "The username attribute on the user object" +msgid "Match cn attribute in subject" +msgstr "用户对象的用户名属性" + +msgid "Reason" +msgstr "原因" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "撤消证书的原因(0-10)" + +msgid "minimum serial number" +msgstr "最小序列号" + +msgid "maximum serial number" +msgstr "最大序列号" + +msgid "match the common name exactly" +msgstr "完全匹配常用名" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "" + +msgid "Maximum number of certs returned" +msgstr "返回的最大证书数" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Take a revoked certificate off hold." +msgstr "撤销证书。" + +msgid "Serial number" +msgstr "序列号" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "十进制序列号或者以0x为前缀的十六进制序列号" + +msgid "Submit a certificate signing request." +msgstr "提交一个证书签名请求。" + +msgid "CSR" +msgstr "" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "该证书服务主体（例如：HTTP/test.example.com）" + +msgid "automatically add the principal if it doesn't exist" +msgstr "若主体不存在，则自动添加" + +msgid "Revoke a certificate." +msgstr "撤销证书。" + +msgid "Retrieve an existing certificate." +msgstr "检索一个已存在的证书。" + +msgid "Output filename" +msgstr "输出文件名" + +msgid "File to store the certificate in." +msgstr "存储证书文件。" + +msgid "Check the status of a certificate signing request." +msgstr "检查证书签名请求的状态。" + +msgid "Request id" +msgstr "请求号" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "GID (use this option to set it manually)" +msgstr "GID（使用该选项来手动设置它）" + +msgid "Indirect Member users" +msgstr "间接成员用户" + +msgid "Indirect Member groups" +msgstr "间接成员组" + +msgid "Create a new group." +msgstr "创建一个新组。" + +msgid "Create as a non-POSIX group" +msgstr "创建一个非POSIX组" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "允许从信任域中添加额外的非IPA成员" + +msgid "Add members to a group." +msgstr "向一个组中添加成员。" + +msgid "External member" +msgstr "额外的成员" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "信任域的成员是“DOM\\名称”或“名称@域名”格式" + +msgid "Delete group." +msgstr "删除组。" + +#, fuzzy +#| msgid "search for managed groups" +msgid "Detach a managed group from a user." +msgstr "查找管理组" + +msgid "Search for groups." +msgstr "查找组。" + +msgid "search for private groups" +msgstr "查找私有组" + +msgid "search for POSIX groups" +msgstr "查找POSIX组" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "查找组，该组在信任域中支持额外的非IPA成员" + +msgid "search for non-POSIX groups" +msgstr "查找非POSIX组" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "结果应该只包括主键属性(\"group-name\")" + +msgid "Search for groups with these member users." +msgstr "查找包含这些成员用户的组。" + +msgid "Search for groups without these member users." +msgstr "查找不包含这些成员用户的组。" + +msgid "Search for groups with these member groups." +msgstr "查找包含这些成员用户组的组。" + +msgid "Search for groups without these member groups." +msgstr "查找不包含这些成员用户组的组。" + +msgid "Search for groups with these member of groups." +msgstr "查找包含这些组成员的组。" + +msgid "Search for groups without these member of groups." +msgstr "查找不包含这些组成员的组。" + +msgid "Search for groups with these member of netgroups." +msgstr "查找包含这些网络组成员的组。" + +msgid "Search for groups without these member of netgroups." +msgstr "查找不包含这些网络组成员的组。" + +msgid "Search for groups with these member of roles." +msgstr "查找包含这些角色成员的组。" + +msgid "Search for groups without these member of roles." +msgstr "查找不包含这些角色成员的组。" + +msgid "Search for groups with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的组。" + +msgid "Search for groups without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的组。" + +msgid "Search for groups with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的组。" + +msgid "Search for groups without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的组。" + +msgid "Modify a group." +msgstr "修改一个组。" + +msgid "change to a POSIX group" +msgstr "改变一个POSIX组" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "改变以便从信任域中支持额外的非IPA成员" + +msgid "Rename the group object" +msgstr "重命名组对象" + +msgid "Remove members from a group." +msgstr "从一个组中移除成员。" + +msgid "Display information about a named group." +msgstr "显示指定组信息。" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Simulate use of Host-based access controls" +msgstr "模拟使用基于主机访问控制" + +msgid "Target host" +msgstr "目标主机" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "带测试规则。如果没有指定，--enable是假定的" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "隐藏规则匹配，不匹配或无效的细节" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "在测试中包含所有启用的IPA规则【默认】" + +msgid "Include all disabled IPA rules into test" +msgstr "在测试中包含所有禁用的IPA规则" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "当没有使用--rules来指定规则时，能处理的最大规则数" + +msgid "Warning" +msgstr "警告" + +msgid "Matched rules" +msgstr "已匹配规则" + +msgid "Not matched rules" +msgstr "不匹配规则" + +msgid "Non-existent or invalid rules" +msgstr "不存在或无效的规则" + +msgid "Result of simulation" +msgstr "模拟结果" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +msgid "Domain NetBIOS name" +msgstr "域NetBIOS名" + +msgid "Domain Security Identifier" +msgstr "域安全标识符" + +msgid "SID blacklist incoming" +msgstr "进来的SID黑名单" + +msgid "SID blacklist outgoing" +msgstr "出去的SID黑名单" + +msgid "Security Identifier" +msgstr "安全标识符" + +msgid "NetBIOS name" +msgstr "NetBIOS名称" + +msgid "Domain GUID" +msgstr "域GUID" + +msgid "Fallback primary group" +msgstr "回退主要的组" + +msgid "Domain name" +msgstr "域名" + +msgid "Trusted domain partner" +msgstr "信任域合作伙伴" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "确定是否在该系统上运行ipa-adtrust-install" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "确定是否将模式兼容插件配置成服务器信任域用户和用户组" + +#, fuzzy +#| msgid "Determine whether ipa-adtrust-install has been run on this system" +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "确定是否在该系统上运行ipa-adtrust-install" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "信任类型（活动目录，默认）" + +msgid "Active Directory domain administrator" +msgstr "活动目录域管理员" + +msgid "Active Directory domain administrator's password" +msgstr "活动目录域管理员密码" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "活动目录域的域控制器（可选的）" + +#, fuzzy +#| msgid "Search domains of the trust" +msgid "Shared secret for the trust" +msgstr "查找信任域" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "信任域范围的第一个Posix ID" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "信任域ID范围的大小" + +msgid "Range type" +msgstr "范围类型" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" + +msgid "Delete a trust." +msgstr "删除一个信任。" + +msgid "Refresh list of the domains associated with the trust" +msgstr "刷新与信任相关的域列表" + +msgid "Search for trusts." +msgstr "查找信任。" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "结果应该只包括主键属性(\"realm\")" + +msgid "" +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "在信任域中重新解析用户和用户组的安全标识符" + +msgid "Security Identifiers (SIDs)" +msgstr "安全标识符（SIDs）" + +msgid "Display information about a trust." +msgstr "显示信任信息。" + +msgid "Modify global trust configuration." +msgstr "修改全局信任配置。" + +msgid "Show global trust configuration." +msgstr "显示全局信任配置。" + +msgid "Allow access from the trusted domain" +msgstr "允许访问信任域" + +msgid "Remove information about the domain associated with the trust." +msgstr "移除与信任相关的域信息。" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "禁止使用信任域中的IPA资源" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "允许使用信任域中的IPA资源" + +msgid "Search domains of the trust" +msgstr "查找信任域" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "结果应该只包括主键属性(\"domain\")" + +msgid "Modify trustdomain of the trust" +msgstr "修改信任的信任域" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "Range name" +msgstr "范围名称" + +msgid "First Posix ID of the range" +msgstr "该范围的第一个Posix ID" + +msgid "Number of IDs in the range" +msgstr "该范围的ID数" + +msgid "First RID of the corresponding RID range" +msgstr "匹配RID范围的第一个RID" + +msgid "First RID of the secondary RID range" +msgstr "次要RID范围的第一个RID" + +msgid "Domain SID of the trusted domain" +msgstr "信任域的域SID" + +msgid "Name of the trusted domain" +msgstr "信任域的名称" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "ID范围类型，是ipa-ad-trust-posix，ipa-ad-trust，ipa-local中的一个" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "Delete an ID range." +msgstr "删除一个ID范围。" + +msgid "Search for ranges." +msgstr "查找范围。" + +msgid "Modify ID range." +msgstr "修改ID范围。" + +msgid "Display information about a range." +msgstr "显示范围信息。" + +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "Unique ID" +msgstr "唯一ID" + +msgid "Type of the token" +msgstr "令牌类型" + +msgid "Token description (informational only)" +msgstr "令牌描述（只是信息）" + +msgid "Owner" +msgstr "所有者" + +msgid "Assigned user of the token (default: self)" +msgstr "分配用户令牌（默认：自己）" + +msgid "Assigned manager of the token (default: self)" +msgstr "分配管理者令牌（默认：自己）" + +msgid "Disabled" +msgstr "禁用" + +msgid "Mark the token as disabled (default: false)" +msgstr "令牌标记为禁用（默认：错误的）" + +msgid "Validity start" +msgstr "有效期开始于" + +msgid "First date/time the token can be used" +msgstr "令牌被第一次使用" + +msgid "Validity end" +msgstr "有效期结束于" + +msgid "Last date/time the token can be used" +msgstr "令牌被最后一次使用" + +msgid "Vendor" +msgstr "供应商" + +msgid "Token vendor name (informational only)" +msgstr "令牌供应商名称（只是信息）" + +msgid "Model" +msgstr "模式" + +msgid "Token model (informational only)" +msgstr "令牌模式（只是信息）" + +msgid "Serial" +msgstr "序列号" + +msgid "Token serial (informational only)" +msgstr "令牌序列号（只是信息）" + +msgid "Token secret (Base32; default: random)" +msgstr "令牌密码（Base32；默认：随机）" + +msgid "Token hash algorithm" +msgstr "令牌散列算法" + +msgid "Digits" +msgstr "数字" + +msgid "Number of digits each token code will have" +msgstr "每个令牌码拥有的数字个数" msgid "Clock offset" msgstr "时钟偏移量" -msgid "Close" -msgstr "关闭" +msgid "TOTP token / IPA server time difference" +msgstr "TOTP令牌/IPA服务器时差" -#, c-format -msgid "Closing keytab failed\n" -msgstr "关闭keytab失败\n" +msgid "Clock interval" +msgstr "时间间隔" -msgid "Collapse All" -msgstr "全部折叠" +msgid "Length of TOTP token code validity" +msgstr "TOTP令牌码有效长度" -msgid "Comma separated encryption types list" -msgstr "以逗号分隔的加密类型列表" +msgid "Counter" +msgstr "计数器" + +msgid "Initial counter for the HOTP token" +msgstr "HOTP令牌初始计数器" + +msgid "Add a new OTP token." +msgstr "添加一个新的OTP令牌。" + +msgid "(deprecated)" +msgstr "（弃用）" + +msgid "Do not display QR code" +msgstr "不显示二维码" + +msgid "Add users that can manage this token." +msgstr "添加可以管理该令牌的用户" + +msgid "Delete an OTP token." +msgstr "删除一个OTP令牌。" + +msgid "Search for OTP token." +msgstr "查找OTP令牌。" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "结果应该只包括主键属性(\"id\")" + +msgid "Modify a OTP token." +msgstr "修改一个OTP令牌。" + +msgid "Rename the OTP token object" +msgstr "重命名OTP令牌对象" + +msgid "Display information about an OTP token." +msgstr "显示一个OTP令牌信息。" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "Command category" +msgstr "命令类别" + +msgid "Command category the rule applies to" +msgstr "规则适用的命令类别" + +msgid "RunAs User category" +msgstr "作为用户类别来运行" + +msgid "RunAs User category the rule applies to" +msgstr "作为规则适用的用户类别来运行" + +msgid "RunAs Group category" +msgstr "作为用户组类别来运行" + +msgid "RunAs Group category the rule applies to" +msgstr "作为规则适用的用户组类别来运行" + +msgid "Sudo order" +msgstr "Sudo命令" + +#, fuzzy +#| msgid "Add an option to the Sudo Rule." +msgid "integer to order the Sudo rules" +msgstr "向Sudo规则中添加一个选项。" + +msgid "External User" +msgstr "外部用户" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "规则适用的外部用户（只是sudorule-find）" + +#, fuzzy +#| msgid "Hosts" +msgid "Host Masks" +msgstr "主机" + +msgid "Sudo Allow Commands" +msgstr "Sudo允许命令" + +msgid "Sudo Deny Commands" +msgstr "Sudo阻止命令" + +msgid "Sudo Allow Command Groups" +msgstr "Sudo运行命令组" + +msgid "Sudo Deny Command Groups" +msgstr "Sudo阻止命令组" + +msgid "RunAs Users" +msgstr "作为用户来运行" + +msgid "Run as a user" +msgstr "作为一个用户来运行" + +msgid "Groups of RunAs Users" +msgstr "作为用户来运行的用户组" + +msgid "Run as any user within a specified group" +msgstr "作为任何一个有指定组用户来运行" + +msgid "RunAs External User" +msgstr "作为外部用户来运行" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "外部用户可以运行的命令（只是sudorule-find）" + +msgid "External Groups of RunAs Users" +msgstr "作为用户来运行的外部用户组" + +msgid "External Groups of users that the command can run as" +msgstr "外部用户组可以运行的命令" + +msgid "RunAs Groups" +msgstr "作为用户组来运行" + +msgid "Run with the gid of a specified POSIX group" +msgstr "以一个指定POSIX组的gid来运行" + +msgid "RunAs External Group" +msgstr "作为外部用户组来运行" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "外部用户组可以运行的命令（只是sudorule-find）" + +msgid "Sudo Option" +msgstr "Sudo选项" + +msgid "Create new Sudo Rule." +msgstr "创建新的Sudo规则。" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "添加受Sudo规则影响的命令和sudo命令组。" + +msgid "member sudo command group" +msgstr "成员sudo命令组" + +msgid "sudo command groups to add" +msgstr "待添加的sudo命令组" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "添加受Sudo规则影响的主机和主机组。" + +msgid "host masks of allowed hosts" +msgstr "" + +msgid "Add an option to the Sudo Rule." +msgstr "向Sudo规则中添加一个选项。" + +msgid "Add group for Sudo to execute as." +msgstr "" + +#, fuzzy +#| msgid "Add users and groups affected by Sudo Rule." +msgid "Add users and groups for Sudo to execute as." +msgstr "添加受Sudo规则影响的用户和用户组。" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "添加受Sudo规则影响的用户和用户组。" + +msgid "Delete Sudo Rule." +msgstr "删除Sudo规则。" + +msgid "Disable a Sudo Rule." +msgstr "禁用一个Sudo规则。" + +msgid "Enable a Sudo Rule." +msgstr "启用一个Sudo规则。" + +msgid "Search for Sudo Rule." +msgstr "查找Sudo规则。" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "结果应该只包括主键属性(\"sudorule-name\")" + +msgid "Modify Sudo Rule." +msgstr "修改Sudo规则。" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "移除受Sudo规则影响的命令和命令组。" + +msgid "sudo command groups to remove" +msgstr "待移除的sudo命令组" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "移除受Sudo规则影响的主机和主机组。" + +msgid "Remove an option from Sudo Rule." +msgstr "从Sudo规则中移除一个选项。" + +#, fuzzy +#| msgid "Remove an option from Sudo Rule." +msgid "Remove group for Sudo to execute as." +msgstr "从Sudo规则中移除一个选项。" + +#, fuzzy +#| msgid "Remove users and groups affected by Sudo Rule." +msgid "Remove users and groups for Sudo to execute as." +msgstr "移除受Sudo规则影响的用户和用户组。" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "移除受Sudo规则影响的用户和用户组。" + +msgid "Display Sudo Rule." +msgstr "显示Sudo规则。" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "时间限制在几秒钟内的搜索（0代表无限制）" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "返回的最大条目数（0代表无限制）" + +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "ACL name" +msgstr "ACL名称" + +msgid "Profile category" +msgstr "配置文件类别" + +msgid "Profile category the ACL applies to" +msgstr "ACL适用于配置文件类别" + +msgid "User category the ACL applies to" +msgstr "ACL适用于用户类别" + +msgid "Host category the ACL applies to" +msgstr "ACL适用于主机类别" + +msgid "Service category the ACL applies to" +msgstr "ACL适用于服务类别" + +msgid "Profiles" +msgstr "配置文件" + +msgid "Create a new CA ACL." +msgstr "创建一个新的CA ACL。" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "向一个CA ACL中添加目标主机和主机组。" + +msgid "Add profiles to a CA ACL." +msgstr "向一个CA ACL中添加配置文件。" + +msgid "member Certificate Profile" +msgstr "成员证书配置文件" + +msgid "Certificate Profiles to add" +msgstr "待添加的证书配置文件" + +msgid "Add services to a CA ACL." +msgstr "向一个CA ACL中添加服务。" + +msgid "Add users and groups to a CA ACL." +msgstr "向一个CA ACL中添加用户和用户组。" + +msgid "Delete a CA ACL." +msgstr "删除一个CA ACL。" + +msgid "Disable a CA ACL." +msgstr "禁用一个CA ACL。" + +msgid "Enable a CA ACL." +msgstr "启用一个CA ACL。" + +msgid "Search for CA ACLs." +msgstr "查找CA ACLs。" + +msgid "Modify a CA ACL." +msgstr "修改一个CA ACL。" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "从一个CA ACL中移除目标主机和主机组。" + +msgid "Remove profiles from a CA ACL." +msgstr "从一个CA ACL中移除配置文件。" + +msgid "Certificate Profiles to remove" +msgstr "待移除的证书配置文件" + +msgid "Remove services from a CA ACL." +msgstr "从一个CA ACL中移除服务。" + +msgid "Remove users and groups from a CA ACL." +msgstr "从一个CA ACL中移除用户和用户组。" + +msgid "Display the properties of a CA ACL." +msgstr "显示一个CA ACL的属性。" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "最大的时间（秒）搜索（-1或0表示无限制）" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "最大数量的搜索记录（-1或0表示无限制）" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" +"\n" +"提高IPA域级别。\n" + +msgid "Query current Domain Level." +msgstr "查询当前域级别。" + +msgid "Current domain level:" +msgstr "当前域级别：" + +msgid "Change current Domain Level." +msgstr "改变当前域级别。" + +msgid "Domain Level" +msgstr "域级别" + +msgid "Add certificates to host entry" +msgstr "向主机条目中添加证书" + +msgid "Remove certificates from host entry" +msgstr "从主机条目中移除证书" + +msgid "Fallback to AD DC LDAP" +msgstr "回退到AD DC LDAP" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "当解析AD信任对象时允许回退到AD DC LDAP。仅供双向信任。" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" +"ID视图适用于指定的主机或指定主机组的当前成员。如果该主机已有其他ID视图，则覆" +"盖它。" + +msgid "Add to default group" +msgstr "添加到默认组" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "添加没有组的移植用户到一个默认组（默认：正确的）" + +msgid "Search scope" +msgstr "范围查找" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "用户和用户组的LDAP范围查找：基，一级，或子树。默认是一级" + +msgid "Target DN subtree" +msgstr "目标DN子树" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" + +msgid "Origin DN subtree" +msgstr "原始DN子树" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "Server name" +msgstr "服务名称" + +msgid "IPA server hostname" +msgstr "IPA服务主机名" + +msgid "Managed suffix" +msgstr "管理的后缀" + +msgid "Min domain level" +msgstr "最低域级别" + +msgid "Minimum domain level" +msgstr "最低域级别" + +msgid "Max domain level" +msgstr "最高域级别" + +msgid "Maximum domain level" +msgstr "最高域级别" + +msgid "Delete IPA server." +msgstr "删除IPA服务器。" + +msgid "Search for IPA servers." +msgstr "查找IPA服务器。" + +msgid "Show IPA server." +msgstr "显示IPA服务器。" + +msgid "Add new certificates to a service" +msgstr "向一个服务中添加新证书" + +msgid "Remove certificates from a service" +msgstr "从一个服务中移除证书" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed Target" +msgstr "允许的目标" + +msgid "Create a new service delegation rule." +msgstr "创建一个新的服务授权规则。" + +msgid "Add member to a named service delegation rule." +msgstr "向一个命名服务授权规则中添加成员。" + +msgid "member principal" +msgstr "成员主体" + +msgid "principal to add" +msgstr "待添加主体" + +msgid "Add target to a named service delegation rule." +msgstr "向一个命名服务授权规则中添加目标。" + +msgid "member service delegation target" +msgstr "成员服务授权目标" + +msgid "service delegation targets to add" +msgstr "待添加的服务授权目标" + +msgid "Delete service delegation." +msgstr "删除服务授权。" + +msgid "Search for service delegations rule." +msgstr "查找服务授权规则。" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "结果应该只包括主键属性(\"delegation-name\")" + +msgid "Remove member from a named service delegation rule." +msgstr "从一个命名服务授权规则中移除成员。" + +msgid "principal to remove" +msgstr "待移除的主体" + +msgid "Remove target from a named service delegation rule." +msgstr "从一个命名服务授权规则中移除目标。" + +msgid "service delegation targets to remove" +msgstr "待移除的服务授权目标" + +msgid "Display information about a named service delegation rule." +msgstr "显示一个命名服务授权规则信息。" + +msgid "Create a new service delegation target." +msgstr "创建一个新的服务授权目标。" + +msgid "Add member to a named service delegation target." +msgstr "向一个命名服务授权规则中添加成员。" + +msgid "Delete service delegation target." +msgstr "删除服务授权目标。" + +msgid "Search for service delegation target." +msgstr "查找服务授权目标。" + +msgid "Remove member from a named service delegation target." +msgstr "从一个命名服务授权目标中移除成员。" + +msgid "Display information about a named service delegation target." +msgstr "显示一个命名服务授权目标信息。" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" +"\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" +"\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" +"\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +msgstr "" + +msgid "Activate a stage user." +msgstr "激活一个计划用户。" + +#, fuzzy +#| msgid "Add a new user." +msgid "Add a new stage user." +msgstr "添加一个新用户。" + +msgid "Create Stage user in from a delete user" +msgstr "从一个删除用户中创建计划用户" + +msgid "Delete a stage user." +msgstr "删除一个计划用户。" + +msgid "Search for stage users." +msgstr "查找计划用户。" + +msgid "Search for stage users with these member of groups." +msgstr "查找包含这些组成员的计划用户。" + +msgid "Search for stage users without these member of groups." +msgstr "查找不包含这些组成员的计划用户。" + +msgid "Search for stage users with these member of netgroups." +msgstr "查找包含这些网络组成员的计划用户。" + +msgid "Search for stage users without these member of netgroups." +msgstr "查找不包含这些网络组成员的计划用户。" + +msgid "Search for stage users with these member of roles." +msgstr "查找包含这些角色成员的计划用户。" + +msgid "Search for stage users without these member of roles." +msgstr "查找不包含这些角色成员的计划用户。" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的计划用户。" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的计划用户。" + +msgid "Search for stage users with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的计划用户。" + +msgid "Search for stage users without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的计划用户。" + +msgid "Modify a stage user." +msgstr "修改一个计划用户。" + +msgid "Rename the stage user object" +msgstr "重命名计划用户对象" + +msgid "Display information about a stage user." +msgstr "显示一个计划用户信息。" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Topology\n" +#| "\n" +#| "Management of a replication topology at domain level 1.\n" +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" +"\n" +"拓扑\n" +"\n" +"域级别为1的复制拓扑的管理。\n" + +msgid "Segment name" +msgstr "段名称" + +msgid "Arbitrary string identifying the segment" +msgstr "" + +msgid "Left node" +msgstr "左节点" + +msgid "Left replication node - an IPA server" +msgstr "左复制节点-IPA服务器" + +msgid "Right node" +msgstr "右节点" + +msgid "Right replication node - an IPA server" +msgstr "右复制节点-IPA服务器" + +msgid "Connectivity" +msgstr "连接" + +msgid "Direction of replication between left and right replication node" +msgstr "" + +#, fuzzy +#| msgid "Attributes to replicate" +msgid "Attributes to strip" +msgstr "待复制属性" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "从复制更新中删除的以空格分隔的属性列表。" + +msgid "Attributes to replicate" +msgstr "待复制属性" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" + +msgid "Attributes for total update" +msgstr "所有更新的属性" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" + +msgid "Session timeout" +msgstr "会话超时" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "在超时和失败前LDAP操作从远程复制服务器等待回应的用去的秒数" + +msgid "Replication agreement enabled" +msgstr "启用复制协议" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" + +msgid "Suffix name" +msgstr "后缀名称" + +msgid "LDAP suffix to be managed" +msgstr "待管理的LDAP后缀" + +msgid "Add a new segment." +msgstr "添加一个新段。" + +msgid "Delete a segment." +msgstr "删除一个段。" + +msgid "Search for topology segments." +msgstr "查找拓扑段。" + +msgid "Modify a segment." +msgstr "修改一个段。" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "请求一个完整的从另一个节点检索数据的节点重初始化。" + +msgid "Initialize left node" +msgstr "左节点初始化" + +msgid "Initialize right node" +msgstr "右节点初始化" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "" + +msgid "Display a segment." +msgstr "显示一个段。" + +msgid "Add a new topology suffix to be managed." +msgstr "添加一个新的拓扑后缀到管理中。" + +msgid "Delete a topology suffix." +msgstr "删除一个拓扑后缀。" + +#, fuzzy +#| msgid "Search for topology suffixes." +msgid "Search for topology suffices." +msgstr "查找拓扑后缀。" + +msgid "Modify a topology suffix." +msgstr "修改一个拓扑后缀。" + +msgid "Show managed suffix." +msgstr "显示已管理的后缀。" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Verify replication topology for suffix.\n" +#| "\n" +#| "Checks done:\n" +#| " 1. check if a topology is not disconnected. In other words if there " +#| "are\n" +#| " replication paths between all servers.\n" +#| " 2. check if servers don't have more than the recommended number of\n" +#| " replication agreements\n" +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" +"\n" +"验证复制拓扑的后缀。\n" +"检查完成：\n" +" 1. 检查是否还有没有连接的拓扑。换句话说，是否在所有服务器之间存在复制路" +"径。\n" +" 2. 检查是否服务器没有超过推荐的副本协议数\n" + +msgid "Preserved user" +msgstr "备用用户" + +msgid "Add one or more certificates to the user entry" +msgstr "向用户条目中添加一个或多个证书" + +msgid "Remove one or more certificates to the user entry" +msgstr "向用户条目中移除一个或多个证书" + +msgid "Move deleted user into staged area" +msgstr "将已删除用户移植到计划区域" + +msgid "Undelete a delete user account." +msgstr "恢复删除用户账户。" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "Vault name" +msgstr "库名称" + +msgid "Vault description" +msgstr "库描述" + +msgid "Vault type" +msgstr "库类型" + +msgid "Salt" +msgstr "盐值" + +msgid "Vault salt" +msgstr "库盐值" + +msgid "Public key" +msgstr "公钥" + +msgid "Vault public key" +msgstr "库公钥" + +msgid "Owner users" +msgstr "所有者用户" + +msgid "Owner groups" +msgstr "所有者用户组" + +msgid "Owner services" +msgstr "所有者服务" + +msgid "Vault service" +msgstr "库服务" + +msgid "Shared vault" +msgstr "共享库" + +msgid "Vault user" +msgstr "共享用户" + +#, fuzzy +#| msgid "Host Certificate" +msgid "Transport Certificate" +msgstr "主机证书" + +msgid "Service name of the service vault" +msgstr "服务库的服务名" + +msgid "Username of the user vault" +msgstr "用户库的用户名" + +msgid "Add members to a vault." +msgstr "向一个库中添加成员。" + +msgid "Add owners to a vault." +msgstr "向一个库中添加所有者。" + +msgid "owner user" +msgstr "所有者用户" + +msgid "owner group" +msgstr "所有者用户组" + +msgid "owner service" +msgstr "所有者服务" + +msgid "Owners that could not be added" +msgstr "不能被添加的所有者" + +msgid "Number of owners added" +msgstr "已添加的所有者数" + +msgid "Session key wrapped with transport certificate" +msgstr "" + +msgid "Vault data encrypted with session key" +msgstr "库数据用会话密钥加密" + +msgid "Nonce" +msgstr "临时的" + +msgid "Delete a vault." +msgstr "删除一个库。" + +msgid "Search for vaults." +msgstr "查找库。" + +msgid "List all service vaults" +msgstr "所有服务库列表" + +msgid "List all user vaults" +msgstr "所有用户库列表" + +msgid "Remove members from a vault." +msgstr "从一个库中移除成员。" + +msgid "Remove owners from a vault." +msgstr "从一个库中移除所有者。" + +msgid "Owners that could not be removed" +msgstr "不能被移除的所有者" + +msgid "Number of owners removed" +msgstr "待移除的所有者数" + +msgid "Display information about a vault." +msgstr "显示一个库信息。" + +msgid "Show vault configuration." +msgstr "显示库配置。" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Output file to store the transport certificate" +msgstr "存储证书文件。" + +msgid "Add owners to a vault container." +msgstr "向一个库容器中添加所有者。" + +msgid "Delete a vault container." +msgstr "删除一个库容器。" + +msgid "Remove owners from a vault container." +msgstr "从一个库容器中移除所有者。" + +msgid "Display information about a vault container." +msgstr "显示一个库容器信息。" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "该证书的主体（例如：HTTP/test.example.com）" + +msgid "Profile ID" +msgstr "配置文件ID" + +msgid "Certificate Profile to use" +msgstr "待使用的证书配置文件" + +msgid "Two-way trust" +msgstr "双向信任" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "建立双向信任。默认信任仅是单项的。" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" + +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" + +msgid "Profile ID for referring to this profile" +msgstr "指向该配置文件的配置文件ID" + +msgid "Profile description" +msgstr "配置文件描述" + +msgid "Brief description of this profile" +msgstr "该配置文件的简要描述" + +msgid "Store issued certificates" +msgstr "存储已发布证书" + +msgid "Whether to store certs issued using this profile" +msgstr "是否存储使用该配置文件的证书发布" + +msgid "Delete a Certificate Profile." +msgstr "删除一个证书配置文件。" + +msgid "Search for Certificate Profiles." +msgstr "查找证书配置文件。" + +msgid "Import a Certificate Profile." +msgstr "导入一个证书配置文件。" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "原始配置文件的文件名。不支持XML格式。" + +msgid "Modify Certificate Profile configuration." +msgstr "修改证书配置文件配置。" + +msgid "File containing profile configuration" +msgstr "文件包含配置文件配置" + +msgid "Display the properties of a Certificate Profile." +msgstr "显示一个证书配置文件的属性。" + +msgid "Write profile configuration to file" +msgstr "将配置文件配置写进文件" + +msgid "Remove users that can manage this token." +msgstr "移除可以管理该令牌的用户。" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "在DNS中解析主机名。（不赞成）" + +msgid "Hostname (FQDN)" +msgstr "主机名（FQDN）" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "强制创建DNS区域，即使它会覆盖一个已有区域。" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "即使命名服务器无法解析，也强制创建DNS区域。（不赞成）" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --" +"rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user " +"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " +"--service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +msgstr "" + +msgid "Managed suffixes" +msgstr "已管理的后缀" + +msgid "Check connection to remote IPA server." +msgstr "检测和远程IPA服务器的连接。" + +msgid "Remote server name" +msgstr "远程服务器名称" + +msgid "Remote IPA server hostname" +msgstr "远程IPA服务器主机名" + +msgid "suffix" +msgstr "后缀" + +msgid "Search for servers with these managed suffixes." +msgstr "查找包含这些管理后缀的服务器。" + +msgid "Search for servers without these managed suffixes." +msgstr "查找不包含这些管理后缀的服务器。" + +msgid "Add a manager to the stage user entry" +msgstr "向一个计划用户条目中添加一个管理员" + +msgid "Remove a manager to the stage user entry" +msgstr "从一个计划用户条目中移除一个管理员" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +msgid "Managed LDAP suffix DN" +msgstr "已管理的LDAP后缀DN" + +msgid "Search for topology suffixes." +msgstr "查找拓扑后缀。" + +msgid "Add a manager to the user entry" +msgstr "向一个用户条目中添加一个管理员" + +msgid "Remove a manager to the user entry" +msgstr "向一个用户条目中移除一个管理员" + +msgid "" +"\n" +"Directory Server Access Control Instructions (ACIs)\n" +"\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" +"\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" +"\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" +"\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" +"\n" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" +"\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" +"\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" +"\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" +"\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" +"\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"EXAMPLES:\n" +"\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" +"\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" +"\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" +"\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" +"\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of editors" +"\"\n" +"\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" +"\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" +"\n" +"\n" +"The show command shows the raw 389-ds ACI.\n" +"\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "以逗号分隔的授权列表（读，写，添加，删除，全部）" msgid "Comma-separated list of attributes" msgstr "以逗号分隔的属性列表" msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "在DS中被组条目所忽略以逗号分隔的属性" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "在DS中被用户条目所忽略以逗号分隔的属性" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "在DS中被组条目所忽略以逗号分隔的对象类" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "在DS中被用户条目所忽略以逗号分隔的对象类" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "在DS中用于查找用户组条目以逗号分隔的对象类" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "在DS中用于查找用户条目以逗号分隔的对象类" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" msgid "" "Comma-separated list of permissions to grant (read, write). Default is write." msgstr "以逗号分隔的授权列表（读，写）。默认是写。" msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "以逗号分隔的授权列表（读，写，添加，删除，全部）" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" +"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " +"EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" +msgstr "" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"一个全局转发器列表。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个" +"自定义端口" + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "命名服务器新的DNS区域定期调查的间隔" + +msgid "DNS class" +msgstr "DNS类" msgid "Comma-separated list of raw A records" msgstr "以逗号分隔的原始A记录列表" -msgid "Comma-separated list of raw A6 records" -msgstr "以逗号分隔的原始A6记录列表" - msgid "Comma-separated list of raw AAAA records" msgstr "以逗号分隔的原始AAAA记录列表" +msgid "Comma-separated list of raw A6 records" +msgstr "以逗号分隔的原始A6记录列表" + msgid "Comma-separated list of raw AFSDB records" msgstr "以逗号分隔的原始AFSDB记录列表" @@ -2952,6 +10466,24 @@ msgstr "以逗号分隔的原始IPSECKEY记录列表" msgid "Comma-separated list of raw KEY records" msgstr "以逗号分隔的原始KEY记录列表" +msgid "KEY Flags" +msgstr "KEY标记" + +msgid "KEY Protocol" +msgstr "KEY协议" + +msgid "Protocol" +msgstr "协议" + +msgid "KEY Algorithm" +msgstr "KEY算法" + +msgid "KEY Public Key" +msgstr "KEY公钥" + +msgid "Public Key" +msgstr "公钥" + msgid "Comma-separated list of raw KX records" msgstr "以逗号分隔的原始KX记录列表" @@ -2970,6 +10502,18 @@ msgstr "以逗号分隔的原始NS记录列表" msgid "Comma-separated list of raw NSEC records" msgstr "以逗号分隔的原始NSEC记录列表" +msgid "NSEC Next Domain Name" +msgstr "NSEC下一个域名" + +msgid "Next Domain Name" +msgstr "下一个域名" + +msgid "NSEC Type Map" +msgstr "NSEC类型映射" + +msgid "Type Map" +msgstr "类型映射" + msgid "Comma-separated list of raw NSEC3 records" msgstr "以逗号分隔的原始NSEC3记录列表" @@ -2979,15 +10523,90 @@ msgstr "以逗号分隔的原始NSEC3PARAM记录列表" msgid "Comma-separated list of raw PTR records" msgstr "以逗号分隔的原始PTR记录列表" -msgid "Comma-separated list of raw RP records" -msgstr "以逗号分隔的原始RP记录列表" - msgid "Comma-separated list of raw RRSIG records" msgstr "以逗号分隔的原始RRSIG记录列表" +msgid "RRSIG Type Covered" +msgstr "RRSIG类型覆盖" + +msgid "Type Covered" +msgstr "类型覆盖" + +msgid "RRSIG Algorithm" +msgstr "RRSIG算法" + +msgid "RRSIG Labels" +msgstr "RRSIG分类" + +msgid "Labels" +msgstr "分类" + +msgid "RRSIG Original TTL" +msgstr "RRSIG原始TTL" + +msgid "Original TTL" +msgstr "原始TTL" + +msgid "RRSIG Signature Expiration" +msgstr "RRSIG签名过期" + +msgid "Signature Expiration" +msgstr "签名过期" + +msgid "RRSIG Signature Inception" +msgstr "RRSIG签名开端" + +msgid "Signature Inception" +msgstr "签名开端" + +msgid "RRSIG Key Tag" +msgstr "RRSIG密钥标记" + +msgid "RRSIG Signer's Name" +msgstr "RRSIG签名者的名字" + +msgid "Signer's Name" +msgstr "签名者的名字" + +msgid "RRSIG Signature" +msgstr "RRSIG签名" + +msgid "Signature" +msgstr "签名" + +msgid "Comma-separated list of raw RP records" +msgstr "以逗号分隔的原始RP记录列表" + msgid "Comma-separated list of raw SIG records" msgstr "以逗号分隔的原始SIG记录列表" +msgid "SIG Type Covered" +msgstr "SIG类型覆盖" + +msgid "SIG Algorithm" +msgstr "SIG算法" + +msgid "SIG Labels" +msgstr "SIG分类" + +msgid "SIG Original TTL" +msgstr "SIG原始TTL" + +msgid "SIG Signature Expiration" +msgstr "SIG签名过期" + +msgid "SIG Signature Inception" +msgstr "SIG签名开端" + +msgid "SIG Key Tag" +msgstr "SIG密钥标记" + +msgid "SIG Signer's Name" +msgstr "SIG签名者的名字" + +msgid "SIG Signature" +msgstr "SIG签名" + msgid "Comma-separated list of raw SPF records" msgstr "以逗号分隔的原始SPF记录列表" @@ -3009,305 +10628,1090 @@ msgstr "以逗号分隔的原始TSIG记录列表" msgid "Comma-separated list of raw TXT records" msgstr "以逗号分隔的原始TXT记录列表" -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "命令'%(name)s'已被弃用" +msgid "SOA time to live" +msgstr "SOA存活时间" -msgid "Command category" -msgstr "命令类别" +msgid "SOA record time to live" +msgstr "SOA记录存活时间" -msgid "Command category the rule applies to" -msgstr "规则适用的命令类别" +msgid "SOA class" +msgstr "SOA类" -msgid "Command name" -msgstr "命令名" - -msgid "Command not implemented" -msgstr "命令没有实现" - -msgid "Commands" -msgstr "命令" - -msgid "Common Name" -msgstr "通用名" - -msgid "Conditions that could not be added" -msgstr "不能被添加的条件" - -msgid "Conditions that could not be removed" -msgstr "不能被移除的条件" - -msgid "Configuration" -msgstr "配置" - -msgid "Configure your token" -msgstr "配置你的令牌" +msgid "SOA record class" +msgstr "SOA记录类" msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" msgstr "" -"通过浏览下面的二维码来配置你的令牌。如果你想在你配置的设备上看到该二维码，请" -"点击它。" +"一个Per-zone转发器列表。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定" +"一个自定义端口" -msgid "Configured administrative server limit exceeded" -msgstr "配置管理服务器超出限制" - -msgid "Configured size limit exceeded" -msgstr "配置大小超出限制" - -msgid "Configured time limit exceeded" -msgstr "配置时间超出限制" - -msgid "Confirm (password)" -msgstr "确认（密码）" - -msgid "Confirmation" -msgstr "确认" - -msgid "Connectivity" -msgstr "连接" - -msgid "Consecutive failures before lockout" -msgstr "连续失败后锁定" - -msgid "Contact Settings" -msgstr "联系方式设置" - -msgid "Contact this specific KDC Server" -msgstr "无法连接指定的KDC服务器" - -msgid "Continue" -msgstr "连续" - -msgid "Continuous mode: Don't stop on errors." -msgstr "连续模式：有错误不停止。" +msgid "Add forward record for nameserver located in the created zone" +msgstr "为位于创建区域的命名服务器添加正向记录" msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "连续操作模式。报告错误但这个过程仍在继续" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "连续操作模式。报告错误但是这个过程仍在继续。" - -msgid "Convert on server" -msgstr "在服务器上转换" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "不能交互式地获取%(name)s" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "不能读UPG原过滤器定义。检查你的权限。" - -msgid "Counter" -msgstr "计数器" - -msgid "Counter-based (HOTP)" -msgstr "计数型（HOTP）" - -msgid "Create Stage user in from a delete user" -msgstr "从一个删除用户中创建计划用户" - -msgid "Create a CA." -msgstr "创建一个CA。" - -msgid "Create a new CA ACL." -msgstr "创建一个新的CA ACL。" - -msgid "Create a new HBAC rule." -msgstr "创建一个新HBAC规则。" - -msgid "Create a new SELinux User Map." -msgstr "创建一个新的SELinux用户映射。" - -msgid "Create a new automount key." -msgstr "创建一个新的自动挂载键。" - -msgid "Create a new automount location." -msgstr "创建一个新的自动挂载位置。" - -msgid "Create a new automount map." -msgstr "创建一个新的自动挂载映射。" - -msgid "Create a new group." -msgstr "创建一个新组。" - -msgid "Create a new indirect mount point." -msgstr "创建一个新的间接挂载点。" - -msgid "Create a new service delegation rule." -msgstr "创建一个新的服务授权规则。" - -msgid "Create a new service delegation target." -msgstr "创建一个新的服务授权目标。" - -msgid "Create a new vault." -msgstr "创建一个新库。" - -msgid "Create as a non-POSIX group" -msgstr "创建一个非POSIX组" - -msgid "Create dns record" -msgstr "创建dns记录" - -msgid "Create new ACI." -msgstr "创建新的ACI。" - -msgid "Create new DNS forward zone." -msgstr "创建新的DNS正向区。" - -msgid "Create new DNS zone (SOA record)." -msgstr "创建新的DNS区域（SOA记录）。" - -msgid "Create new Sudo Command Group." -msgstr "创建新的Sudo命令组。" - -msgid "Create new Sudo Command." -msgstr "创建新的Sudo命令。" - -msgid "Create new Sudo Rule." -msgstr "创建新的Sudo规则。" - -msgid "Create reverse" -msgstr "创建反向" - -msgid "Create reverse record for this IP Address" -msgstr "为该IP地址创建反向记录" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "已创建ACI\"%(value)s\"" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "已创建CA\"%(value)s\"" - -msgid "Creating record." -msgstr "创建记录。" - -msgid "Credentials cache permissions incorrect" -msgstr "凭证缓存权限不正确" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" msgstr "" -"跨域信任没有配置。首先确认你已经在IPA服务器上运行了ipa-adtrust-install命令" -msgid "Current DNS record contents:\n" -msgstr "目前的DNS记录内容：\n" +#, fuzzy +#| msgid "Display current entitlements." +msgid "Consume an entitlement." +msgstr "显示当前权利。" -msgid "Current Password" -msgstr "当前密码" +msgid "Quantity" +msgstr "数量" -msgid "Current domain level:" -msgstr "当前域级别：" +msgid "Search for entitlement accounts." +msgstr "查找权利账户。" -msgid "Current password is required" -msgstr "需要当前密码" +msgid "Retrieve the entitlement certs." +msgstr "检索权利证书。" -msgid "Custom value" -msgstr "自定义值" +msgid "Import an entitlement certificate." +msgstr "导入一个权利证书。" -msgid "DHCID record" -msgstr "DHCID记录" +msgid "UUID" +msgstr "" -msgid "DLV Algorithm" -msgstr "DLV算法" +msgid "Enrollment UUID" +msgstr "注册UUID" -msgid "DLV Digest" -msgstr "DLV摘要" +#, fuzzy +#| msgid "Retrieve the entitlement certs." +msgid "Register to the entitlement system." +msgstr "检索权利证书。" -msgid "DLV Digest Type" -msgstr "DLV摘要类型" +msgid "Username" +msgstr "用户名" -msgid "DLV Key Tag" -msgstr "DLV键标记" +msgid "Enrollment UUID (not implemented)" +msgstr "注册UUID（没有实现）" -msgid "DLV record" -msgstr "DLV记录" +msgid "Registration password" +msgstr "注册密码" -msgid "DN commonName does not match user's login" -msgstr "DN通用名与用户登录名不匹配" +msgid "Display current entitlements." +msgstr "显示当前权利。" -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "DN电子邮件地址不匹配任何用户的电子邮件地址" +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "重新同步在权利服务器上的本地权利缓存。" -msgid "DN of container for groups in DS relative to base DN" -msgstr "在DS中与基类DN相关的用户组容器DN" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" -msgid "DN of container for users in DS relative to base DN" -msgstr "在DS中与基类DN相关的用户容器DN" +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "以逗号分隔的信任域成员列表是“DOM\\名称”或“名称@域名”格式" -msgid "DN of the started task" -msgstr "已开始任务的DN" +msgid "comma-separated list of users to add" +msgstr "待添加的以逗号分隔的用户列表" -msgid "DN to bind as if not using kerberos" -msgstr "DN绑定好像没有使用kerberos" +msgid "comma-separated list of groups to add" +msgstr "待添加的以逗号分隔的用户组列表" -msgid "DNAME Target" -msgstr "DNAME目标" +msgid "comma-separated list of users to remove" +msgstr "待移除的以逗号分隔的用户列表" -msgid "DNAME record" -msgstr "DNAME记录" +msgid "comma-separated list of groups to remove" +msgstr "待移除的以逗号分隔的用户组列表" -msgid "DNS" -msgstr "DNS" +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host \"server" +"\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" -msgid "DNS Forward Zone" -msgstr "DNS正向区域" +msgid "Source host category" +msgstr "源主机类别" -msgid "DNS Forward Zones" -msgstr "DNS正向区域" +msgid "Source host category the rule applies to" +msgstr "规则应用的源主机类别" -msgid "DNS Global Configuration" -msgstr "DNS全局配置" +msgid "Source Hosts" +msgstr "源主机" + +msgid "Source Host Groups" +msgstr "源主机组" + +msgid "comma-separated list of hosts to add" +msgstr "待添加的以逗号分隔的主机列表" + +msgid "comma-separated list of host groups to add" +msgstr "待添加的以逗号分隔的主机组列表" + +msgid "comma-separated list of HBAC services to add" +msgstr "待添加的以逗号分隔的HBAC服务列表" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "待添加的以逗号分隔的HBAC服务组列表" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "从一个HBAC规则中添加源主机和主机组。" + +msgid "comma-separated list of hosts to remove" +msgstr "待移除的以逗号分隔的主机列表" + +msgid "comma-separated list of host groups to remove" +msgstr "待移除的以逗号分隔的主机组列表" + +msgid "comma-separated list of HBAC services to remove" +msgstr "待移除的以逗号分隔的HBAC服务列表" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "待移除的以逗号分隔的HBAC服务组列表" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "从一个HBAC规则中移除源主机和主机组。" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" + +msgid "" +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +msgstr "" + +msgid "Source host" +msgstr "源主机" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "在DS中用于查找用户条目以逗号分隔的对象类" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "在DS中用于查找用户组条目以逗号分隔的对象类" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "在DS中被用户条目所忽略以逗号分隔的对象类" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "在DS中被用户条目所忽略以逗号分隔的属性" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "在DS中被组条目所忽略以逗号分隔的对象类" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "在DS中被组条目所忽略以逗号分隔的属性" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "允许迁移的以逗号分隔的用户组列表" + +msgid "comma-separated list of users to exclude from migration" +msgstr "允许迁移的以逗号分隔的用户列表" + +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" + +msgid "comma-separated list of netgroups to add" +msgstr "待添加的以逗号分隔的网络组列表" + +msgid "comma-separated list of netgroups to remove" +msgstr "待移除的以逗号分隔的网络组列表" + +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "以逗号分隔的授权列表（读，写，添加，删除，全部）" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "IPA对象类型（用户，用户组，主机，主机组，服务，网络组，dns）" + +msgid "Target members of a group" +msgstr "一个组的目标成员" + +msgid "User group to apply permissions to" +msgstr "待应用权限的用户组" + +msgid "comma-separated list of privileges to add" +msgstr "待添加的以逗号分隔的权限列表" + +msgid "Add a system permission without an ACI" +msgstr "添加一个没有ACI的系统权限" + +msgid "Permission type" +msgstr "权限类型" + +msgid "comma-separated list of privileges to remove" +msgstr "待移除的以逗号分隔的权限列表" + +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" +msgstr "" + +msgid "comma-separated list of roles to add" +msgstr "待添加的以逗号分隔的角色列表" + +msgid "comma-separated list of permissions" +msgstr "以逗号分隔的权限列表" + +msgid "comma-separated list of roles to remove" +msgstr "待移除的以逗号分隔的角色列表" + +msgid "comma-separated list of privileges" +msgstr "以逗号分隔的权限列表" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" + +msgid "comma-separated list of sudo commands to add" +msgstr "待添加的以逗号分隔的sudo命令列表" + +msgid "comma-separated list of sudo commands to remove" +msgstr "待移除的以逗号分隔的sudo命令列表" + +msgid "Active directory domain administrator's password" +msgstr "活动目录域管理员密码" + +msgid "GECOS field" +msgstr "GECOS字段" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +msgstr "" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" + +msgid "" +"\n" +"Sudo Rules\n" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" +msgstr "" + +msgid "comma-separated list of sudo command groups to add" +msgstr "待添加的以逗号分隔的sudo命令组列表" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "待移除的以逗号分隔的sudo命令组列表" + +msgid "Additional instructions:" +msgstr "附加指示：" #, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "DNS RR类型\"%s\"在bind-dyndb-ldap插件中不被支持" - -msgid "DNS Resource Record" -msgstr "DNS资源记录" - -msgid "DNS Resource Records" -msgstr "DNS资源记录" - -msgid "DNS Server" -msgstr "DNS服务器" - -msgid "DNS Server name" -msgstr "DNS服务器名" - -msgid "DNS Servers" -msgstr "DNS服务器" - -msgid "DNS Zone" -msgstr "DNS区域" - -msgid "DNS Zone Settings" -msgstr "DNS区域设置" - -msgid "DNS Zones" -msgstr "DNS区域" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "DNS检测失败：预期的{%(expected)s}，得到的{%(got)s}" - -msgid "DNS class" -msgstr "DNS类" - -msgid "DNS configuration options" -msgstr "DNS配置选项" - -msgid "DNS forward zone" -msgstr "DNS正向区域" - -msgid "DNS forward zones" -msgstr "DNS正向区域" +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"没有发送API版本号，不能保证向前兼容。假定服务器的API版本%(server_version)s" msgid "" "DNS forwarder semantics changed since IPA 4.0.\n" @@ -3317,42 +11721,25 @@ msgstr "" "自从IPA 4.0后DNS转发器语义改变了。你可以使用正向区域（dnsforwardzone-*）来替" "代。查看帮助文档获取更多详细信息。" -msgid "DNS is not configured" -msgstr "DNS没有配置" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS标签不能长于63个字符" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS标签不能长于63个字符" - -msgid "DNS record was deleted because it contained no data." -msgstr "DNS记录已删除因为它没有数据。" +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "DNSSEC支持是实验性的。%(additional_info)s" #, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "主机%(host)s的DNS记录不能被移除。(%(reason)s)" - -msgid "DNS records can be only updated one at a time" -msgstr "一次只能更新一条DNS记录" - -msgid "DNS resource record" -msgstr "DNS资源记录" - -msgid "DNS resource record type" -msgstr "DNS资源记录类型" - -msgid "DNS resource records" -msgstr "DNS资源记录" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s'选项已弃用。%(additional_info)s" #, python-format msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "IP地址为%(addr)s的DNS反向区域%(revzone)s没有被该服务器管理" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "%(label)s语义已改变了。%(current_behavior)s %(hint)s" -msgid "DNS server" -msgstr "DNS服务器" +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS服务器%(server)s：%(error)s。" #, python-format msgid "" @@ -3362,6 +11749,15 @@ msgstr "" "DNS服务器%(server)s不支持DNSSEC：%(error)s。如果DNSSEC认证在IPA服务器上启用" "了，请禁用它。" +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"正向\"%(fwzone)s\"无效因为在认证区域\"%(authzone)s\"缺少合适的NS记录。请添加" +"NS记录\"%(ns_rec)s\"到父区域\"%(authzone)s\"。" + #, python-format msgid "" "DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" @@ -3370,41 +11766,6 @@ msgstr "" "DNS服务器%(server)s不支持EDNS0 (RFC 6891)：%(error)s。如果DNSSEC认证在IPA服务" "器上启用了，请禁用它。" -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS服务器%(server)s：%(error)s。" - -msgid "DNS servers" -msgstr "DNS服务器" - -msgid "DNS zone" -msgstr "DNS区域" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "DNS区域%(zone)s没有找到" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "DNS区域的每个realm域必须包括SOA或NS记录。没有找到记录：%s" - -msgid "DNS zone root record cannot be renamed" -msgstr "DNS根区域记录不能被重命名" - -msgid "DNS zones" -msgstr "DNS区域" - -msgid "DNSKEY record" -msgstr "DNSKEY记录" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "DNSSEC支持是实验性的。%(additional_info)s" - #, python-format msgid "" "DNSSEC validation failed: %(error)s.\n" @@ -3414,6556 +11775,6 @@ msgstr "" "DNSSEC认证失败：%(error)s。请确认你的DNSSEC配置或者在所有IPA服务器中禁用" "DNSSEC认证。" -msgid "DS Algorithm" -msgstr "DS算法" - -msgid "DS Digest" -msgstr "DS摘要" - -msgid "DS Digest Type" -msgstr "DS摘要类型" - -msgid "DS Key Tag" -msgstr "DS键标记" - -msgid "DS record" -msgstr "DS记录" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "DS记录不得在区域顶点（RFC 4035第2.4节）" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "DS记录需要与一个NS记录共存（RFC 4592第4.6节，RFC 4035第2.4节）" - -msgid "Data" -msgstr "数据" - -msgid "Debugging output" -msgstr "调试输出" - -msgid "Default" -msgstr "默认" - -msgid "Default (fallback) Group" -msgstr "默认（回退）组" - -msgid "Default PAC types" -msgstr "默认PAC类型" - -msgid "Default SELinux user" -msgstr "默认的SELinux用户" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "当在SELinux映射规则中找不到匹配项时使用默认SELinux用户" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "默认信任视图不能应用于主机上" - -msgid "Default Trust View cannot contain IPA users" -msgstr "默认信任视图不能包含IPA用户" - -msgid "Default attributes" -msgstr "默认属性" - -msgid "Default e-mail domain" -msgstr "默认的电子邮件域" - -msgid "Default from" -msgstr "默认的" - -msgid "Default group for new users" -msgstr "新用户默认组" - -msgid "Default group for new users is not POSIX" -msgstr "新用户的默认组不是POSIX" - -msgid "Default group for new users not found" -msgstr "新用户的默认组没有找到" - -msgid "Default group objectclasses" -msgstr "默认组对象类" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "默认组对象类（以逗号分割）" - -msgid "Default host group" -msgstr "默认主机组" - -msgid "Default location of home directories" -msgstr "主目录的默认位置" - -msgid "Default shell" -msgstr "默认shell" - -msgid "Default shell for new users" -msgstr "新用户默认shell" - -msgid "Default ticket policy could not be read" -msgstr "默认票据策略不可读" - -msgid "Default time to live" -msgstr "默认存活时间" - -msgid "Default types of PAC supported for services" -msgstr "默认PAC支持服务的类型" - -msgid "Default types of supported user authentication" -msgstr "默认支持用户认证的类型" - -msgid "Default user authentication types" -msgstr "默认用户认证类型" - -msgid "Default user group" -msgstr "默认用户组" - -msgid "Default user objectclasses" -msgstr "默认用户对象类" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "默认用户对象类（以逗号分割）" - -msgid "Default users group" -msgstr "默认用户组" - -msgid "Delegation" -msgstr "授权" - -msgid "Delegation name" -msgstr "授权名" - -msgid "Delegations" -msgstr "授权" - -msgid "Delete" -msgstr "删除" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "删除%(name)s '%(value)s'？" - -msgid "Delete ACI." -msgstr "删除ACI。" - -msgid "Delete DNS forward zone." -msgstr "删除DNS正向区。" - -msgid "Delete DNS record entry." -msgstr "删除DNS记录条目。" - -msgid "Delete DNS resource record." -msgstr "删除DNS资源记录。" - -msgid "Delete DNS zone (SOA record)." -msgstr "删除DNS区域（SOA记录）。" - -msgid "Delete IPA server." -msgstr "删除IPA服务器。" - -msgid "Delete Key, Unprovision" -msgstr "删除密钥，取消供应" - -msgid "Delete Server" -msgstr "删除服务器" - -msgid "Delete Sudo Command Group." -msgstr "删除Sudo命令组。" - -msgid "Delete Sudo Command." -msgstr "删除Sudo命令。" - -msgid "Delete Sudo Rule." -msgstr "删除Sudo规则。" - -msgid "Delete a CA ACL." -msgstr "删除一个CA ACL。" - -msgid "Delete a Certificate Profile." -msgstr "删除一个证书配置文件。" - -msgid "Delete a DNS server" -msgstr "删除一个DNS服务器" - -msgid "Delete a RADIUS proxy server." -msgstr "删除一个RADIUS代理服务器。" - -msgid "Delete a SELinux User Map." -msgstr "删除一个SELinux用户映射。" - -msgid "Delete a delegation." -msgstr "删除一个授权。" - -msgid "Delete a group password policy." -msgstr "删除一个组密码策略。" - -msgid "Delete a host." -msgstr "删除一个主机。" - -msgid "Delete a hostgroup." -msgstr "删除一个主机组。" - -msgid "Delete a netgroup." -msgstr "删除一个网络组。" - -msgid "Delete a permission." -msgstr "删除一个权限。" - -msgid "Delete a privilege." -msgstr "删除一个特权。" - -msgid "Delete a role." -msgstr "删除一个角色。" - -msgid "Delete a segment." -msgstr "删除一个段。" - -msgid "Delete a self-service permission." -msgstr "删除一个自助服务权限。" - -msgid "Delete a stage user." -msgstr "删除一个计划用户。" - -msgid "Delete a topology suffix." -msgstr "删除一个拓扑后缀。" - -msgid "Delete a trust." -msgstr "删除一个信任。" - -msgid "Delete a user" -msgstr "删除一个用户" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "删除一个用户，让这个用户可供将来使用" - -msgid "Delete a user." -msgstr "删除一个用户。" - -msgid "Delete a vault container." -msgstr "删除一个库容器。" - -msgid "Delete a vault." -msgstr "删除一个库。" - -msgid "Delete all associated records" -msgstr "删除所有相关记录" - -msgid "Delete all?" -msgstr "全部删除？" - -msgid "Delete an Group ID override." -msgstr "删除一个组ID覆盖。" - -msgid "Delete an HBAC rule." -msgstr "删除一个HBAC规则。" - -msgid "Delete an HBAC service group." -msgstr "删除一个HBAC服务组。" - -msgid "Delete an ID View." -msgstr "删除一个ID视图。" - -msgid "Delete an ID override." -msgstr "删除一个ID覆盖。" - -msgid "Delete an ID range." -msgstr "删除一个ID范围。" - -msgid "Delete an IPA location." -msgstr "删除一个IPA位置。" - -msgid "Delete an IPA service." -msgstr "删除一个IPA服务。" - -msgid "Delete an OTP token." -msgstr "删除一个OTP令牌。" - -msgid "Delete an User ID override." -msgstr "删除一个用户ID覆盖。" - -msgid "Delete an automember rule." -msgstr "删除一个自动成员规则。" - -msgid "Delete an automount key." -msgstr "删除一个自动挂载键。" - -msgid "Delete an automount location." -msgstr "删除一个自动挂载位置。" - -msgid "Delete an automount map." -msgstr "删除一个自动挂载映射。" - -msgid "Delete an existing HBAC service." -msgstr "删除一个存在的HBAC服务。" - -msgid "Delete domain" -msgstr "删除域" - -msgid "Delete group." -msgstr "删除组。" - -msgid "Delete mode" -msgstr "删除模式" - -msgid "Delete service delegation target." -msgstr "删除服务授权目标。" - -msgid "Delete service delegation." -msgstr "删除服务授权。" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "已删除ACI\"%(value)s\"" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "已删除CA\"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "已删除CA ACL\"%(value)s\"" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "已删除DNS正向区域\"%(value)s\"" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "已删除DNS服务器\"%(value)s\"" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "已删除DNS区域\"%(value)s\"" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "已删除组ID覆盖\"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "已删除HBAC规则\"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "已删除HBAC服务\"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "已删除HBAC服务组\"%(value)s\"" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "已删除ID视图\"%(value)s\"" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "已删除ID覆盖\"%(value)s\"" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "已删除ID范围\"%(value)s\"" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "已删除IPA位置\"%(value)s\"" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "已删除IPA服务器\"%(value)s\"" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "已删除OTP令牌\"%(value)s\"" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "已删除RADIUS代理服务器\"%(value)s\"" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "已删除SELinux用户映射\"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "已删除Sudo命令\"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "已删除Sudo命令组\"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "已删除Sudo规则\"%(value)s\"" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "已删除用户ID覆盖\"%(value)s\"" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "已删除自动成员规则\"%(value)s\"" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "已删除自动挂载键\"%(value)s\"" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "已删除自动挂载位置\"%(value)s\"" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "已删除自动挂载映射\"%(value)s\"" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "已删除授权\"%(value)s\"" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "已删除组\"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "已删除主机 \"%(value)s\"" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "已删除主机组\"%(value)s\"" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "已删除网络组\"%(value)s\"" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "已删除权限\"%(value)s\"" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "已删除特权\"%(value)s\"" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "已删除配置文件\"%(value)s\"" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "已删除记录\"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "已删除角色\"%(value)s\"" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "已删除段\"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "已删除自助服务\"%(value)s\"" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "已删除服务\"%(value)s\"" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "已删除服务授权规则\"%(value)s\"" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "已删除服务授权目标\"%(value)s\"" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "已删除计划用户\"%(value)s\"" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "已删除拓扑后缀\"%(value)s\"" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "已删除信任\"%(value)s\"" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "已删除用户\"%(value)s\"" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "已删除库\"%(value)s\"" - -msgid "Deleted vault container" -msgstr "已删除库容器" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "删除一个管理组时不允许的。它必须先分离出来。" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "从拓扑中永久地删除一台服务器。注意这是一个不可逆的操作。" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "删除这台服务器将使得你的安装过程没有DNS。" - -msgid "Deny" -msgstr "阻止" - -msgid "Department Number" -msgstr "部门编号" - -msgid "Deprecated options" -msgstr "已弃用的选项" - -#, python-format -msgid "Deprecated; use %s" -msgstr "已弃用；使用%s" - -msgid "Deprecated; use extratargetfilter" -msgstr "过时的；使用额外的目标过滤器" - -msgid "Description" -msgstr "描述" - -msgid "Description of the purpose of the CA" -msgstr "CA描述的目的" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "从用户\"%(value)s\"中分离组\"%(value)s\"" - -msgid "Detect" -msgstr "检测" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "确定是否将模式兼容插件配置成服务器信任域用户和用户组" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "确定是否在该系统上运行ipa-adtrust-install" - -msgid "Dict of I18N messages" -msgstr "国际化消息字典" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "JSON编码IPA命令字典" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "JSON编码IPA方法字典" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "JSON编码IPA对象字典" - -msgid "Digest" -msgstr "摘要" - -msgid "Digest Type" -msgstr "摘要类型" - -msgid "Digits" -msgstr "数字" - -msgid "Direct" -msgstr "直接的" - -msgid "Direct Membership" -msgstr "直接成员" - -msgid "Direction Latitude" -msgstr "纬度方向" - -msgid "Direction Longitude" -msgstr "经度方向" - -msgid "Disable" -msgstr "禁用" - -msgid "Disable DNS Forward Zone." -msgstr "禁用DNS正向区。" - -msgid "Disable DNS Zone." -msgstr "禁用DNS区域。" - -msgid "Disable a CA ACL." -msgstr "禁用一个CA ACL。" - -msgid "Disable a CA." -msgstr "禁用一个CA。" - -msgid "Disable a Sudo Rule." -msgstr "禁用一个Sudo规则。" - -msgid "Disable a user account." -msgstr "禁用一个用户账户。" - -msgid "Disable an HBAC rule." -msgstr "禁用一个HBAC规则。" - -msgid "Disable an SELinux User Map rule." -msgstr "禁用一个SELinux用户映射规则。" - -msgid "Disable per-user override" -msgstr "禁用每个用户覆盖" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "禁用一个服务的Kerberos密钥和SSL证书。" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "禁用该主机的Kerberos密钥，SSL证书和所有的服务。" - -msgid "Disable token" -msgstr "禁用令牌" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "禁止使用信任域中的IPA资源" - -msgid "Disabled" -msgstr "禁用" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "已禁用CA\"%(value)s\"" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "已禁用CA ACL\"%(value)s\"" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "已禁用DNS正向区域\"%(value)s\"" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "已禁用DNS区域\"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "已禁用HBAC规则\"%(value)s\"" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "已禁用SELinux用户映射\"%(value)s\"" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "禁用Sudo规则\"%s\"" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "已禁用主机\"%(value)s\"" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "已禁用服务\"%(value)s\"" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "已禁用信任域\"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "已禁用用户账户\"%(value)s\"" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "不允许用户，用户组，主机或主机组来创建该主机的keytab。" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "不允许用户，用户组，主机或主机组来创建该服务的keytab。" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "不允许用户，用户组，主机或主机组来检索该主机的keytab。" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "不允许用户，用户组，主机或主机组来检索该服务的keytab。" - -msgid "Display DNS resource." -msgstr "显示DNS资源。" - -msgid "Display Sudo Command Group." -msgstr "显示Sudo命令组。" - -msgid "Display Sudo Command." -msgstr "显示Sudo命令。" - -msgid "Display Sudo Rule." -msgstr "显示Sudo规则。" - -msgid "Display a segment." -msgstr "显示一个段。" - -msgid "Display a single ACI given an ACI name." -msgstr "给出一个ACI名显示一个单一的ACI。" - -msgid "Display an automount key." -msgstr "显示一个自动挂载键。" - -msgid "Display an automount location." -msgstr "显示一个自动挂载位置。" - -msgid "Display an automount map." -msgstr "显示一个自动挂载映射。" - -msgid "Display configuration of a DNS server." -msgstr "显示一个DNS服务器配置。" - -msgid "Display current entitlements." -msgstr "显示当前权利。" - -msgid "Display effective policy for a specific user" -msgstr "显示一个指定用户的有效策略" - -msgid "Display information about a DNS forward zone." -msgstr "显示DNS正向区信息。" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "显示DNS区域（SOA记录）信息。" - -msgid "Display information about a RADIUS proxy server." -msgstr "显示一个RADIUS代理服务器信息。" - -msgid "Display information about a class." -msgstr "显示一个类信息。" - -msgid "Display information about a command output." -msgstr "显示一个命令输出信息。" - -msgid "Display information about a command parameter." -msgstr "显示一个命令参数信息。" - -msgid "Display information about a command." -msgstr "显示一个命令信息。" - -msgid "Display information about a delegation." -msgstr "显示一个授权信息。" - -msgid "Display information about a help topic." -msgstr "显示一个帮助主题信息。" - -msgid "Display information about a host." -msgstr "显示一个主机信息。" - -msgid "Display information about a hostgroup." -msgstr "显示一个主机组信息。" - -msgid "Display information about a named group." -msgstr "显示指定组信息。" - -msgid "Display information about a named service delegation rule." -msgstr "显示一个命名服务授权规则信息。" - -msgid "Display information about a named service delegation target." -msgstr "显示一个命名服务授权目标信息。" - -msgid "Display information about a netgroup." -msgstr "显示一个网络组信息。" - -msgid "Display information about a permission." -msgstr "显示一个权限信息。" - -msgid "Display information about a privilege." -msgstr "显示一个特权信息。" - -msgid "Display information about a range." -msgstr "显示范围信息。" - -msgid "Display information about a role." -msgstr "显示一个角色信息。" - -msgid "Display information about a self-service permission." -msgstr "显示一个自助服务权限信息。" - -msgid "Display information about a stage user." -msgstr "显示一个计划用户信息。" - -msgid "Display information about a trust." -msgstr "显示信任信息。" - -msgid "Display information about a user." -msgstr "显示一个用户信息。" - -msgid "Display information about a vault container." -msgstr "显示一个库容器信息。" - -msgid "Display information about a vault." -msgstr "显示一个库信息。" - -msgid "Display information about an Group ID override." -msgstr "显示一个组ID覆盖信息。" - -msgid "Display information about an HBAC service group." -msgstr "显示一个HBAC服务组信息。" - -msgid "Display information about an HBAC service." -msgstr "显示一个HBAC服务信息。" - -msgid "Display information about an ID View." -msgstr "显示一个ID视图信息。" - -msgid "Display information about an ID override." -msgstr "显示一个ID覆盖信息。" - -msgid "Display information about an IPA location." -msgstr "显示一个IPA位置信息。" - -msgid "Display information about an IPA service." -msgstr "显示一个IPA服务信息。" - -msgid "Display information about an OTP token." -msgstr "显示一个OTP令牌信息。" - -msgid "Display information about an User ID override." -msgstr "显示一个用户ID覆盖信息。" - -msgid "Display information about an automember rule." -msgstr "显示一个自动成员规则信息。" - -msgid "Display information about password policy." -msgstr "显示密码策略信息。" - -msgid "Display information about the default (fallback) automember groups." -msgstr "显示默认（回退）自动成员组的信息。" - -msgid "Display name" -msgstr "显示名称" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "显示该条目的访问权限（需要--all）。更详细的信息请查看ipa帮助页。" - -msgid "Display the current Kerberos ticket policy." -msgstr "显示当前Kerberos票据策略。" - -msgid "Display the list of realm domains." -msgstr "显示realm域列表。" - -msgid "Display the properties of a CA ACL." -msgstr "显示一个CA ACL的属性。" - -msgid "Display the properties of a CA." -msgstr "显示一个CA属性。" - -msgid "Display the properties of a Certificate Profile." -msgstr "显示一个证书配置文件的属性。" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "显示一个SELinux用户映射规则的属性。" - -msgid "Display the properties of an HBAC rule." -msgstr "显示一个HBAC规则的属性。" - -msgid "Display user record for current Kerberos principal" -msgstr "显示当前Kerberos主体的用户记录" - -msgid "Do not display QR code" -msgstr "不显示二维码" - -msgid "Do not update records only return expected records" -msgstr "不更新记录只返回预期的记录" - -msgid "Do you also want to perform DNS check?" -msgstr "你还想执行DNS检查吗？" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "你想要检查在DNS中是否有新的权威命名服务器地址" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "你要删除kerberos别名${alias}吗？" - -msgid "Do you want to remove the certificate hold?" -msgstr "你要删除证书持有吗？" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "你要撤销该证书吗？从下拉列表中选择一个理由。" - -msgid "Do you want to update system DNS records?" -msgstr "你要更新系统DNS记录吗？" - -msgid "Documentation" -msgstr "文档" - -msgid "Dogtag Authority ID" -msgstr "Dogtag授权ID" - -msgid "Domain" -msgstr "域" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "域'%(domain)s'不是一个森林'%(forest)s'的根域" - -msgid "Domain GUID" -msgstr "域GUID" - -msgid "Domain Level" -msgstr "域级别" - -msgid "Domain Level cannot be lowered." -msgstr "域级别不能降低了。" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "域级别不能提高到{0}，服务器{1}不支持它。" - -msgid "Domain NetBIOS name" -msgstr "域NetBIOS名" - -msgid "Domain SID" -msgstr "域SID" - -msgid "Domain SID of the trusted domain" -msgstr "信任域的域SID" - -msgid "Domain Security Identifier" -msgstr "域安全标识符" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "活动目录域的域控制器（可选的）" - -msgid "Domain enabled" -msgstr "域已启用" - -msgid "Domain name" -msgstr "域名" - -msgid "Don't create user private group" -msgstr "不创建用户私有组" - -msgid "Download" -msgstr "下载" - -msgid "Download certificate as PEM formatted file." -msgstr "下载证书为PEM格式文件。" - -msgid "Duplicate keys skipped:" -msgstr "已忽略重复的键：" - -msgid "Duplicate maps skipped:" -msgstr "已忽略重复的映射：" - -msgid "Dynamic update" -msgstr "动态更新" - -msgid "Edit" -msgstr "编辑" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "编辑${entity}" - -msgid "Effective attributes" -msgstr "有效属性" - -msgid "Email address" -msgstr "邮件地址" - -msgid "Employee Information" -msgstr "员工信息" - -msgid "Employee Number" -msgstr "员工编号" - -msgid "Employee Type" -msgstr "员工类型" - -msgid "Enable" -msgstr "启用" - -msgid "Enable DNS Forward Zone." -msgstr "启用DNS正向区。" - -msgid "Enable DNS Zone." -msgstr "启用DNS区域。" - -msgid "Enable a CA ACL." -msgstr "启用一个CA ACL。" - -msgid "Enable a CA." -msgstr "启用一个CA。" - -msgid "Enable a Sudo Rule." -msgstr "启用一个Sudo规则。" - -msgid "Enable a user account." -msgstr "启用一个用户账户。" - -msgid "Enable an HBAC rule." -msgstr "启用一个HBAC规则。" - -msgid "Enable an SELinux User Map rule." -msgstr "启用一个SELinux用户映射规则。" - -msgid "Enable migration mode" -msgstr "启用迁移模式" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "启用或禁用匿名PKINIT。" - -msgid "Enable token" -msgstr "启用令牌" - -msgid "Enabled" -msgstr "启用" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "已启用CA\"%(value)s\"" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "已启用CA ACL\"%(value)s\"" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "已启用DNS正向区域\"%(value)s\"" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "已启用DNS区域\"%(value)s\"" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "已启用HBAC规则\"%(value)s\"" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "已启用SELinux用户映射\"%(value)s\"" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "启用Sudo规则\"%s\"" - -msgid "Enabled server roles" -msgstr "已启用服务器角色" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "已启用信任域\"%(value)s\"" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "已启用用户账户\"%(value)s\"" - -msgid "Encryption types to request" -msgstr "加密类型要求" - -msgid "Enctype comparison failed!\n" -msgstr "加密类型比较失败！\n" - -msgid "Enrolled" -msgstr "已注册" - -msgid "Enrollment" -msgstr "注册" - -msgid "Enrollment UUID" -msgstr "注册UUID" - -msgid "Enrollment UUID (not implemented)" -msgstr "注册UUID（没有实现）" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "注册失败。%s\n" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "再次输入 %(label)s进行校验: " - -msgid "Enter trusted group name." -msgstr "键入受信任的组名称。" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "键入受信任的组或IPA组登录。注意：查找不列举信任域中的组。" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "键入受信任的用户或IPA用户登录。注意：查找不列举信任域中的用户。" - -msgid "Enter trusted user login." -msgstr "键入受信任的用户登录。" - -msgid "Entry" -msgstr "条目" - -#, python-format -msgid "Entry %s does not exist" -msgstr "条目%s不存在" - -#, python-format -msgid "Entry %s not found" -msgstr "条目%s没有找到" - -msgid "Entry RDN is not 'uid'" -msgstr "条目RDN不是'uid'" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "条目没有'%(attribute)s'" - -msgid "Enumerate all the hosts the view applies to." -msgstr "列举应用视图的所有主机。" - -msgid "Error" -msgstr "错误" - -msgid "Error changing account status" -msgstr "错误更改帐户状态" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "获取默认Kerberos域错误：%s。\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "获取初始化证书错误：%s。\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "解析\"%1$s\"：%2$s错误。\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "解析keytab错误：%s。\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "在凭证缓存中存储证书错误：%s。\n" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "建立双向信任。默认信任仅是单项的。" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "建立外部信任到另一个森林域中。信任不会在域外传递。" - -msgid "Establish using" -msgstr "建立使用" - -msgid "Established and verified" -msgstr "已建立和验证" - -msgid "Exchanger" -msgstr "交换器" - -msgid "Exclude from" -msgstr "排斥" - -msgid "Excluded attributes" -msgstr "排除的属性" - -msgid "Exclusive" -msgstr "独占的" - -msgid "Exclusive Regex" -msgstr "独占的正则表达式" - -msgid "Expand All" -msgstr "全部展开" - -msgid "Expires On" -msgstr "有效期限" - -msgid "Export plugin meta-data for the webUI." -msgstr "webUI中导出插件元数据。" - -msgid "Expression" -msgstr "表达式" - -msgid "External" -msgstr "外部的" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "外部用户组可以运行的命令（只是sudorule-find）" - -msgid "External Groups of RunAs Users" -msgstr "作为用户来运行的外部用户组" - -msgid "External Groups of users that the command can run as" -msgstr "外部用户组可以运行的命令" - -msgid "External User" -msgstr "外部用户" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "外部用户可以运行的命令（只是sudorule-find）" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "规则适用的外部用户（只是sudorule-find）" - -msgid "External host" -msgstr "外部主机" - -msgid "External member" -msgstr "额外的成员" - -msgid "External trust" -msgstr "外部的信任" - -msgid "Extra target filter" -msgstr "额外的目标过滤器" - -msgid "Failed RunAs" -msgstr "作为其他用户运行失败" - -msgid "Failed RunAsGroup" -msgstr "作为其他用户组运行失败" - -msgid "Failed allowed to create keytab" -msgstr "不允许创建keytab" - -msgid "Failed allowed to retrieve keytab" -msgstr "不允许检索keytab" - -msgid "Failed hosts/hostgroups" -msgstr "失败的主机/主机组" - -msgid "Failed logins" -msgstr "登录失败" - -msgid "Failed members" -msgstr "失败的成员" - -msgid "Failed owners" -msgstr "错误的所有者" - -msgid "Failed profiles" -msgstr "错误的配置文件" - -msgid "Failed service/service groups" -msgstr "失败的服务/服务组" - -msgid "Failed source hosts/hostgroups" -msgstr "失败的源主机/主机组" - -msgid "Failed targets" -msgstr "失败的目标" - -msgid "Failed to add" -msgstr "添加失败" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "向keytab中添加密钥失败\n" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "添加用户到默认组失败。使用'ipa group-add-member'来手动添加。" - -msgid "Failed to authenticate to CA REST API" -msgstr "CA REST API认证失败" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "绑定服务器失败！\n" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "从s4u2proxy条目%(dn)s中清除成员主体%(principal)s失败：%(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "为%(master)s清除Custodia密钥失败：%(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "为%(master)s清除DNA主机名条目失败：%(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "清除%(hostname)s DNS条目失败：%(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "清除服务器主体/密钥失败：%(err)s" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "关闭keytab失败\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "创建控制失败！\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "创建密钥材料失败\n" - -msgid "Failed to create key!\n" -msgstr "创建密钥失败！\n" - -msgid "Failed to create random key!\n" -msgstr "创建随机密钥失败！\n" - -msgid "Failed to decode control reply!\n" -msgstr "解码控制应答失败！\n" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "获取keytab失败\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "获取keytab失败！\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "获取结果失败：%s\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "打开Keytab失败\n" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "打开配置文件%s失败\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "打开keytab失败\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "打开keytab'%1$s'：%2$s失败\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "解析配置文件%s失败\n" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "解析扩展结果失败：%s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "解析结果失败：%s\n" - -msgid "Failed to remove" -msgstr "移除失败" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "从服务器列表中删除服务器%(master)s失败：%(err)s" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "未能检索任何密钥" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "检索加密类型%1$s (#%2$d)失败\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "检索加密类型#%d失败\n" - -msgid "Failed users/groups" -msgstr "失败的用户/用户组" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "解码证书签名请求失败：%s" - -msgid "Failure reset interval" -msgstr "失败重置时间间隔" - -msgid "Fallback primary group" -msgstr "回退主要的组" - -msgid "Fallback to AD DC LDAP" -msgstr "回退到AD DC LDAP" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "如果移植失败是因为启用了兼容插件，则错误" - -msgid "False if migration mode was disabled." -msgstr "如果移植模式是禁用的，则错误" - -msgid "Fax Number" -msgstr "传真号码" - -msgid "Fetch domains" -msgstr "获取域名" - -msgid "Fetching DNS zones." -msgstr "抓取DNS区域。" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "从信任森林中获取域失败。在error_log中查看详细信息" - -#, python-format -msgid "File %(file)s not found" -msgstr "没有找到文件 %(file)s " - -msgid "File containing profile configuration" -msgstr "文件包含配置文件配置" - -msgid "File containing the new vault password" -msgstr "文件包含新的库密码" - -msgid "File containing the new vault public key" -msgstr "文件包含新的库公钥" - -msgid "File containing the old vault password" -msgstr "文件包含旧的库密码" - -msgid "File containing the old vault private key" -msgstr "文件包含旧的库私钥" - -msgid "File containing the vault password" -msgstr "文件包含库密码" - -msgid "File containing the vault private key" -msgstr "文件包含库私钥" - -msgid "File containing the vault public key" -msgstr "文件包含库公钥" - -msgid "File to load the certificate from." -msgstr "从文件加载证书" - -msgid "File to store retrieved data" -msgstr "文件存储检索数据" - -msgid "File to store the certificate in." -msgstr "存储证书文件。" - -msgid "Filename is empty" -msgstr "文件名为空" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "原始配置文件的文件名。不支持XML格式。" - -msgid "Filter" -msgstr "过滤" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "${other_entity}过滤器可用" - -msgid "Find" -msgstr "查找" - -msgid "Find a server role on a server(s)" -msgstr "在服务器上找到一个服务器角色" - -msgid "Fingerprint" -msgstr "指纹" - -msgid "Fingerprint (SHA1)" -msgstr "指纹（SHA1）" - -msgid "Fingerprint Type" -msgstr "指纹类型" - -msgid "Fingerprint of schema cached by client" -msgstr "客户端缓存的模式指纹" - -msgid "Fingerprints" -msgstr "指纹" - -msgid "First" -msgstr "第一" - -msgid "First Code" -msgstr "第一个码" - -msgid "First OTP" -msgstr "第一个OTP" - -msgid "First Posix ID of the range" -msgstr "该范围的第一个Posix ID" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "信任域范围的第一个Posix ID" - -msgid "First RID of the corresponding RID range" -msgstr "匹配RID范围的第一个RID" - -msgid "First RID of the secondary RID range" -msgstr "次要RID范围的第一个RID" - -msgid "First date/time the token can be used" -msgstr "令牌被第一次使用" - -msgid "First name" -msgstr "名" - -msgid "Flags" -msgstr "标记" - -msgid "Following segments were not deleted:" -msgstr "下面部分没有被删除：" - -msgid "Force" -msgstr "强制" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "强制创建DNS区域，即使它会覆盖一个已有区域。" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "即使命名服务器无法解析，也强制创建DNS区域。" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "即使命名服务器无法解析，也强制创建DNS区域。（不赞成）" - -msgid "Force Update" -msgstr "强制更新" - -msgid "Force adding domain even if not in DNS" -msgstr "即使域在DNS中不存在，也强制添加它" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "即使命名服务器不在DNS中，也强制改变它" - -msgid "Force server removal" -msgstr "强制服务器删除" - -msgid "Force server removal even if it does not exist" -msgstr "强制服务器删除即使它不存在" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "强制主机加入。即使已经加入了也重新加入。" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "强制删除%(hostname)s" - -msgid "Format error" -msgstr "格式错误" - -msgid "Forward policy" -msgstr "转发器策略" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "在IPA DNS中转发器策略阻止了它，也许是转发器指向了不正确的主机？" - -msgid "Forward to server instead of running locally" -msgstr "转发到服务器而不是在本地运行" - -msgid "Forward zones only" -msgstr "仅正向区域" - -msgid "Forwarders" -msgstr "转发器" - -msgid "Forwarding disabled" -msgstr "禁止转发" - -#, python-format -msgid "Found '%(value)s'" -msgstr "找到'%(value)s'" - -msgid "Full name" -msgstr "全名" - -msgid "Fully Qualified Host Name" -msgstr "完全限定的主机名" - -msgid "GECOS field" -msgstr "GECOS字段" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID（使用该选项来手动设置它）" - -msgid "General" -msgstr "普通的" - -msgid "Generate OTP" -msgstr "生成OTP" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "生成一个随机密码用于批量注册" - -msgid "Generate a random user password" -msgstr "生成一个随机用户密码" - -msgid "Generate automount files for a specific location." -msgstr "在一特定位置生成自动挂载文件。" - -msgid "Generated OTP" -msgstr "生成OTP" - -msgid "Get" -msgstr "获得" - -msgid "Get Certificate" -msgstr "获取证书" - -msgid "Global DNS configuration is empty" -msgstr "全局DNS配置是空的" - -msgid "Global Trust Configuration" -msgstr "全局信任配置" - -msgid "Global forwarders" -msgstr "全局转发器" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"全局转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自定义端" -"口" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "全局转发器策略。通过设置\"none\"来禁用全局转发器的所有配置。" - -msgid "Granted rights" -msgstr "授予权限" - -msgid "Granted to Privilege" -msgstr "授于特权" - -msgid "Granting privilege to roles" -msgstr "给角色授予特权" - -msgid "Group" -msgstr "组" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "组 '%s' 不存在" - -msgid "Group ID Number" -msgstr "组ID号码" - -msgid "Group ID override" -msgstr "组ID覆盖" - -msgid "Group ID overrides" -msgstr "组ID覆盖" - -msgid "Group Options" -msgstr "组选项" - -msgid "Group Settings" -msgstr "组设置" - -msgid "Group Type" -msgstr "组类型" - -msgid "Group container" -msgstr "组容器" - -msgid "Group description" -msgstr "组描述" - -msgid "Group name" -msgstr "组名" - -msgid "Group object class" -msgstr "组对象类" - -msgid "Group object overrides" -msgstr "组对象覆盖" - -msgid "Group search fields" -msgstr "组搜索域" - -msgid "Group to override" -msgstr "待覆盖的组" - -msgid "Grouping Type" -msgstr "组类型" - -msgid "Grouping to which the rule applies" -msgstr "组应用于哪种规则" - -msgid "Groups" -msgstr "用户组" - -msgid "Groups allowed to create keytab" -msgstr "允许创建keytab的用户组" - -msgid "Groups allowed to retrieve keytab" -msgstr "允许检索keytab的用户组" - -msgid "Groups of RunAs Users" -msgstr "作为用户来运行的用户组" - -msgid "HBAC Rule" -msgstr "HBAC规则" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "HBAC规则定义了用户，用户组和主机组" - -msgid "HBAC Rules" -msgstr "HBAC规则" - -msgid "HBAC Service" -msgstr "HBAC服务" - -msgid "HBAC Service Group" -msgstr "HBAC服务组" - -msgid "HBAC Service Groups" -msgstr "HBAC服务组" - -msgid "HBAC Services" -msgstr "HBAC服务" - -msgid "HBAC Test" -msgstr "HBAC测试" - -msgid "HBAC rule" -msgstr "HBAC规则" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "HBAC规则%(rule)s没有找到" - -msgid "HBAC rule and local members cannot both be set" -msgstr "HBAC规则和本地成员不能被同时设置" - -msgid "HBAC rules" -msgstr "HBAC规则" - -msgid "HBAC service" -msgstr "HBAC服务" - -msgid "HBAC service description" -msgstr "HBAC服务描述" - -msgid "HBAC service group" -msgstr "HBAC服务组" - -msgid "HBAC service group description" -msgstr "HBAC服务组描述" - -msgid "HBAC service groups" -msgstr "HBAC服务组" - -msgid "HBAC service groups to add" -msgstr "待添加的HBAC服务组" - -msgid "HBAC service groups to remove" -msgstr "待移除的HBAC服务组" - -msgid "HBAC services" -msgstr "HBAC服务" - -msgid "HBAC services to add" -msgstr "待添加的HBAC服务" - -msgid "HBAC services to remove" -msgstr "待移除的HBAC服务" - -msgid "HIP record" -msgstr "HIP记录" - -msgid "HOTP Authentication Window" -msgstr "HOTP认证窗口" - -msgid "HOTP Synchronization Window" -msgstr "HOTP同步窗口" - -msgid "HTTP Error" -msgstr "HTTP错误" - -msgid "Hardware MAC address(es) on this host" -msgstr "主机硬件MAC地址" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "主机硬件平台（例如：联想T61）" - -msgid "Help topic" -msgstr "帮助主题" - -msgid "Hide" -msgstr "隐藏" - -msgid "Hide details" -msgstr "隐藏细节" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "隐藏规则匹配，不匹配或无效的细节" - -msgid "History size" -msgstr "历史大小" - -msgid "Home directory" -msgstr "主目录" - -msgid "Home directory base" -msgstr "主目录" - -msgid "Horizontal Precision" -msgstr "水平精度" - -msgid "Host" -msgstr "主机" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "主机'%(host)s'没有找到" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "主机'%(hostname)s'没有相配的DNS A/AAAA记录" - -msgid "Host Certificate" -msgstr "主机证书" - -msgid "Host Group" -msgstr "主机组" - -msgid "Host Group Settings" -msgstr "主机组设置" - -msgid "Host Groups" -msgstr "主机组" - -msgid "Host Groups allowed to create keytab" -msgstr "允许创建keytab的主机组" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "允许检索keytab的主机组" - -msgid "Host Name" -msgstr "主机名" - -msgid "Host Settings" -msgstr "主机设置" - -msgid "Host category" -msgstr "主机类别" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "主机类别（该属性的语义是就近解读）" - -msgid "Host category the ACL applies to" -msgstr "ACL适用于主机类别" - -msgid "Host category the rule applies to" -msgstr "规则应用的主机类别" - -msgid "Host group rule" -msgstr "主机组规则" - -msgid "Host group rules" -msgstr "主机组规则" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "主机硬件平台 (e.g. \"Lenovo T61\")" - -#, c-format -msgid "Host is already joined.\n" -msgstr "主机已加入。\n" - -msgid "Host is not supported" -msgstr "主机不被支持" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "主机地点(如\"Baltimore, MD\")" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "主机位置(如\"Lab 2\")" - -msgid "Host name" -msgstr "主机名" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "主机操作系统及版本(e.g. \"Fedora 9\")" - -msgid "Host unprovisioned" -msgstr "主机未分配" - -msgid "Host-based access control commands" -msgstr "基于主机访问控制命令" - -msgid "Host-group" -msgstr "主机组" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" -"主机组的主机应用ID视图。请注意运行命令idview-apply后，视图并不会自动应用到主" -"机组中的主机中去。" - -msgid "Hostname" -msgstr "主机名" - -msgid "Hostname (FQDN)" -msgstr "主机名（FQDN）" - -msgid "Hostname of this server" -msgstr "该服务器的主机名" - -msgid "Hosts" -msgstr "主机" - -msgid "Hosts allowed to create keytab" -msgstr "允许创建keytab的主机" - -msgid "Hosts allowed to retrieve keytab" -msgstr "允许检索keytab的主机" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "ID视图不能被清除的主机或主机组。" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "不能应用该ID视图的主机或主机组。" - -msgid "Hosts that this ID View was applied to." -msgstr "应用过该ID视图的主机。" - -msgid "Hosts the view applies to" -msgstr "适用于主机的视图" - -msgid "Hosts to apply the ID View to" -msgstr "主机应用ID视图" - -msgid "How long should negative responses be cached" -msgstr "负面响应应该被缓存多久" - -msgid "ID Range" -msgstr "ID范围" - -msgid "ID Ranges" -msgstr "ID范围" - -msgid "ID View" -msgstr "ID视图" - -msgid "ID View Name" -msgstr "ID视图名称" - -msgid "ID View already applied" -msgstr "ID视图已应用" - -#, python-format -msgid "ID View applied to %i host." -msgstr "ID视图应用于%i主机。" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "ID视图应用于%i主机。" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "从%i主机中清除ID视图。" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "从%i主机中清除ID视图。" - -msgid "ID Views" -msgstr "ID视图" - -msgid "ID override" -msgstr "ID覆盖" - -msgid "ID overrides cannot be renamed" -msgstr "ID覆盖不能被重命名" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"信任域的ID范围已存在，但它有一个不同类型。请手动删除旧的范围，或者通过--" -"range-type选项不强制类型。" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "ID范围类型，是ipa-ad-trust-posix，ipa-ad-trust，ipa-local中的一个" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "同名但不同域SID的ID范围已存在。新信任域的ID范围必须手动创建。" - -msgid "IP Address" -msgstr "IP 地址" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "IP地址%(ip)s在域%(domain)s中已分配。" - -msgid "IP network to create reverse zone name from" -msgstr "IP网络创建反向区域名" - -msgid "IPA AD trust agents" -msgstr "IPA AD信任代理" - -msgid "IPA AD trust controllers" -msgstr "IPA AD信任控制器" - -msgid "IPA CA cannot be deleted" -msgstr "IPA CA不能被删除" - -msgid "IPA CA cannot be disabled" -msgstr "IPA CA不能被禁用" - -msgid "IPA CA renewal master" -msgstr "IPA CA更新主服务器" - -msgid "IPA CA servers" -msgstr "IPA CA服务器" - -msgid "IPA DNS records" -msgstr "IPA DNS记录" - -msgid "IPA DNS servers" -msgstr "IPA DNS服务器" - -msgid "IPA DNS version" -msgstr "IPA DNS版本" - -msgid "IPA DNSSec key master" -msgstr "IPA DNSSec密钥主机" - -msgid "IPA Error" -msgstr "IPA错误" - -msgid "IPA KRA servers" -msgstr "IPA KRA服务器" - -msgid "IPA Location" -msgstr "IPA位置" - -msgid "IPA Location description" -msgstr "IPA本地描述" - -msgid "IPA Locations" -msgstr "IPA位置" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"当信任域的SID被指定时，IPA范围类型必须是ipa-ad-trust或ipa-ad-trust-posix中的" -"一个" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"当信任域的SID没有被指定时，IPA范围类型必不能是ipa-ad-trust或ipa-ad-trust-" -"posix。" - -msgid "IPA Server" -msgstr "IPA服务器" - -msgid "IPA Server Role" -msgstr "IPA服务器角色" - -msgid "IPA Server Roles" -msgstr "IPA服务器角色" - -msgid "IPA Server to use" -msgstr "待使用的IPA服务器" - -msgid "IPA Servers" -msgstr "IPA服务器" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "IPA没有管理区域%(zone)s，请手动在你的DNS服务器上添加记录" - -msgid "IPA location name" -msgstr "IPA位置名" - -msgid "IPA location records" -msgstr "IPA位置记录" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" -"IPA主服务器%(count)d次阻止来自AD DC的信任有效请求。最有可能是AD DC联系了一个" -"没有信任信息副本的副本。同时，请检查AD DNS能将%(records)s SRV记录解析到正确的" -"IPA服务器上。" - -msgid "IPA masters" -msgstr "IPA主服务器" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "IPA名称上下文没有找到\n" - -msgid "IPA object" -msgstr "IPA对象" - -msgid "IPA role name" -msgstr "IPA角色名" - -msgid "IPA server configured as DNSSec key master" -msgstr "IPA服务器配置为DNSSec密钥主机" - -msgid "IPA server domain cannot be deleted" -msgstr "IPA服务器域不能被删除" - -msgid "IPA server domain cannot be omitted" -msgstr "IPA服务器域不能被省略" - -msgid "IPA server hostname" -msgstr "IPA服务主机名" - -msgid "IPA server role name" -msgstr "IPA服务器角色名" - -msgid "IPA servers configured as AD trust agents" -msgstr "IPA服务器配置为AD信任代理" - -msgid "IPA servers configured as AD trust controllers" -msgstr "IPA服务器配置为AD信任控制器" - -msgid "IPA servers configured as certificate authority" -msgstr "IPA服务器配置为证书认证机构" - -msgid "IPA servers configured as key recovery agents" -msgstr "IPA服务器配置为密钥恢复代理" - -msgid "IPA trust" -msgstr "IPA信任" - -msgid "IPA unique ID" -msgstr "IPA唯一ID" - -msgid "IPSECKEY record" -msgstr "IPSECKEY记录" - -msgid "Identity" -msgstr "身份" - -msgid "Identity Settings" -msgstr "身份设置" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "如果没有指定CAs，那么允许请求默认CA。" - -msgid "If the problem persists please contact the system administrator." -msgstr "如果问题仍然存在,请联系系统管理员。" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "不检查最后的CA或DNS服务器" - -msgid "Ignore compat plugin" -msgstr "忽略兼容插件" - -msgid "Ignore group attribute" -msgstr "忽略组属性" - -msgid "Ignore group object class" -msgstr "忽略组对象类" - -msgid "Ignore topology connectivity problems after removal" -msgstr "删除后忽略拓扑连通性问题" - -msgid "Ignore topology errors" -msgstr "忽略拓扑错误" - -msgid "Ignore user attribute" -msgstr "忽略用户属性" - -msgid "Ignore user object class" -msgstr "忽略用户对象类" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "已忽略 %(src)s 到 %(dst)s" - -msgid "Ignored keys:" -msgstr "已忽略的键：" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "忽略这些警告并给予清除" - -msgid "Ignoring topology connectivity errors." -msgstr "忽略拓扑连通性错误。" - -msgid "Import a Certificate Profile." -msgstr "导入一个证书配置文件。" - -msgid "Import an entitlement certificate." -msgstr "导入一个权利证书。" - -msgid "Import automount files for a specific location." -msgstr "在一特定位置导入自动挂载文件。" - -msgid "Imported keys:" -msgstr "已导入的键：" - -msgid "Imported maps:" -msgstr "已导入的映射：" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "已导入配置文件\"%(value)s\"" - -msgid "Include Disabled" -msgstr "包含禁用的" - -msgid "Include Enabled" -msgstr "包含启用的" - -msgid "Include all disabled IPA rules into test" -msgstr "在测试中包含所有禁用的IPA规则" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "在测试中包含所有启用的IPA规则【默认】" - -msgid "Include in" -msgstr "包含" - -msgid "Included attributes" -msgstr "包含的属性" - -msgid "Inclusive" -msgstr "兼容的" - -msgid "Inclusive Regex" -msgstr "兼容的正则表达式" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "提供了不兼容的选项（-r和-P）\n" - -msgid "Indirect" -msgstr "间接的" - -msgid "Indirect Member HBAC service" -msgstr "间接成员HBAC服务" - -msgid "Indirect Member HBAC service group" -msgstr "间接成员HBAC服务组" - -msgid "Indirect Member groups" -msgstr "间接成员组" - -msgid "Indirect Member host-groups" -msgstr "间接成员主机组" - -msgid "Indirect Member hosts" -msgstr "间接成员主机" - -msgid "Indirect Member netgroups" -msgstr "间接成员网络组" - -msgid "Indirect Member of HBAC rule" -msgstr "间接HBAC规则成员" - -msgid "Indirect Member of Sudo rule" -msgstr "间接Sudo规则成员" - -msgid "Indirect Member of group" -msgstr "间接组成员" - -msgid "Indirect Member of host-group" -msgstr "间接主机组成员" - -msgid "Indirect Member of netgroup" -msgstr "间接网络组成员" - -msgid "Indirect Member of role" -msgstr "间接角色成员" - -msgid "Indirect Member of roles" -msgstr "间接角色成员" - -msgid "Indirect Member permissions" -msgstr "间接成员权限" - -msgid "Indirect Member users" -msgstr "间接成员用户" - -msgid "Indirect Membership" -msgstr "间接成员" - -msgid "Inherited from server configuration" -msgstr "继承了服务器配置" - -msgid "Initial counter for the HOTP token" -msgstr "HOTP令牌初始计数器" - -msgid "Initialize left node" -msgstr "左节点初始化" - -msgid "Initialize right node" -msgstr "右节点初始化" - -msgid "Initials" -msgstr "名字的首字母" - -msgid "Input data specified multiple times" -msgstr "多次指定输入数据" - -msgid "Input filename" -msgstr "输入文件名" - -msgid "Input form contains invalid or missing values." -msgstr "输入包含无效的或缺失的值。" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "对条目'%s'没有'add'权限。" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "对条目'%s'的'krbLastPwdChange'属性没有'write'权限。" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "对条目'%s'的'userCertificate'属性没有'write'权限。" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "访问受限：%(info)s" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "没有权限创建主题alt名为'%s'的证书。" - -msgid "Internal Error" -msgstr "内部错误" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "无效的JSON-RPC请求: %(error)s" - -msgid "Invalid LDAP URI." -msgstr "无效的LDAP URI。" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "无效的服务主体名\n" - -msgid "Invalid credentials" -msgstr "无效的证书" - -msgid "Invalid format. Should be name=value" -msgstr "无效的格式。应该是“名称=值”" - -msgid "Invalid number of parts!" -msgstr "无效的部分！" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "无效的或者不支持的类型。允许的值是：%s" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "无效的或不支持的库公钥：%s" - -msgid "Invalid vault type" -msgstr "无效的库类型" - -msgid "Is zone active?" -msgstr "区域活跃吗？" - -msgid "Issue" -msgstr "发布" - -msgid "Issued By" -msgstr "发布方" - -msgid "Issued On" -msgstr "签发日期" - -msgid "Issued To" -msgstr "颁发给" - -msgid "Issued on from" -msgstr "发布于" - -msgid "Issued on to" -msgstr "发布到" - -msgid "Issuer" -msgstr "发行人" - -msgid "Issuer DN" -msgstr "证书颁发机构名字" - -msgid "Issuer Distinguished Name" -msgstr "发行人专有名称" - -msgid "Issuing CA" -msgstr "发行CA" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "它仅被用来设置SOA MNAME属性。" - -msgid "Job Title" -msgstr "职称" - -msgid "Join an IPA domain" -msgstr "加入一个IPA域" - -msgid "KEY Algorithm" -msgstr "KEY算法" - -msgid "KEY Flags" -msgstr "KEY标记" - -msgid "KEY Protocol" -msgstr "KEY协议" - -msgid "KEY Public Key" -msgstr "KEY公钥" - -msgid "KEY record" -msgstr "KEY记录" - -msgid "KRA service is not enabled" -msgstr "KRA服务没有启用" - -msgid "KX Exchanger" -msgstr "KX交换器" - -msgid "KX Preference" -msgstr "KX优先权" - -msgid "KX record" -msgstr "KX记录" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "没有找到Kerberos凭证缓存。你有Kerberos票据吗？\n" - -msgid "Kerberos Key" -msgstr "Kerberos密钥" - -msgid "Kerberos Key Not Present" -msgstr "没有找到Kerberos密钥" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "找到Kerberos密钥，主机分配" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "找到Kerberos密钥，服务分配" - -msgid "Kerberos Service Principal Name" -msgstr "Kerberos服务主体名" - -msgid "Kerberos Ticket Policy" -msgstr "Kerberos票据策略" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "没有找到Kerberos用户主体。你有有效的凭证缓存吗？\n" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Kerberos文本初始化失败\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Kerberos文本初始化失败：%1$s (%2$d)\n" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos 错误： %(major)s/%(minor)s" - -msgid "Kerberos keys available" -msgstr "Kerberos密码可用" - -msgid "Kerberos principal" -msgstr "Kerberos主体" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "Kerberos主体%s已存在。使用'ipa user-mod'来手动设置它。" - -msgid "Kerberos principal expiration" -msgstr "Kerberos主体过期" - -msgid "Kerberos principal name for this host" -msgstr "该主机的Kerberos主体名" - -msgid "Key" -msgstr "键" - -msgid "Key Compromise" -msgstr "密钥泄露" - -msgid "Key Tag" -msgstr "键标记" - -msgid "Keytab File Name" -msgstr "Keytab文件名" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Keytab检索成功并将其存储在：%s\n" - -msgid "LDAP URI" -msgstr "LDAP URI" - -msgid "LDAP password" -msgstr "LDAP密码" - -msgid "LDAP password (if not using Kerberos)" -msgstr "LDAP密码（如果没有使用Kerberos）" - -msgid "LDAP schema" -msgstr "LDAP模式" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "用户和用户组的LDAP范围查找：基，一级，或子树。默认是一级" - -msgid "LDAP suffix to be managed" -msgstr "待管理的LDAP后缀" - -msgid "LDAP timeout" -msgstr "LDAP超时" - -msgid "LOC Altitude" -msgstr "LOC高度" - -msgid "LOC Direction Latitude" -msgstr "LOC纬度方向" - -msgid "LOC Direction Longitude" -msgstr "LOC经度方向" - -msgid "LOC Horizontal Precision" -msgstr "LOC水平精度" - -msgid "LOC Minutes Latitude" -msgstr "LOC分钟纬度" - -msgid "LOC Minutes Longitude" -msgstr "LOC分钟经度" - -msgid "LOC Seconds Latitude" -msgstr "LOC秒纬度" - -msgid "LOC Seconds Longitude" -msgstr "LOC秒经度" - -msgid "LOC Size" -msgstr "LOC大小" - -msgid "LOC Vertical Precision" -msgstr "LOC垂直精度" - -msgid "LOC record" -msgstr "LOC记录" - -msgid "Label" -msgstr "级别" - -msgid "Labels" -msgstr "分类" - -msgid "Last" -msgstr "最后" - -msgid "Last date/time the token can be used" -msgstr "令牌被最后一次使用" - -msgid "Last failed authentication" -msgstr "上一次认证失败" - -msgid "Last name" -msgstr "姓" - -msgid "Last successful authentication" -msgstr "上一次认证成功" - -msgid "Leading and trailing spaces are not allowed" -msgstr "开头和结尾空格是不允许的" - -msgid "Left node" -msgstr "左节点" - -msgid "Left replication node - an IPA server" -msgstr "左复制节点-IPA服务器" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "合法的LDAP过滤（例如：ou=Engineering）" - -msgid "Length of TOTP token code validity" -msgstr "TOTP令牌码有效长度" - -msgid "Level" -msgstr "级别" - -msgid "List all service vaults" -msgstr "所有服务库列表" - -msgid "List all user vaults" -msgstr "所有用户库列表" - -msgid "List of IPA masters configured as DNS servers" -msgstr "IPA主服务器配置为DNS服务器列表" - -msgid "List of all IPA masters" -msgstr "所有IPA主服务器列表" - -msgid "List of deletions that failed" -msgstr "删除失败的列表" - -msgid "List of enabled roles" -msgstr "已启用角色列表" - -msgid "List of servers which advertise the given location" -msgstr "公布给出位置的服务器列表" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "信任域列表更新成功。使用trustdomain-find命令来列举它们。" - -msgid "Lists of objects migrated; categorized by type." -msgstr "对象移植列表；按类型分类。" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "不能移植的对象列表；按类型分类。" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "从文件加载LDAP服务器的CA证书" - -msgid "Local domain" -msgstr "本地域" - -msgid "Locality" -msgstr "位置" - -msgid "Location" -msgstr "位置" - -msgid "Location name" -msgstr "位置名" - -msgid "Location of the ACI" -msgstr "ACI的位置" - -msgid "Lockout duration" -msgstr "锁定时间" - -msgid "Logged In As" -msgstr "登录" - -msgid "Login shell" -msgstr "登录shell" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" -"数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问URI。" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" -"数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问服务" -"器。" - -msgid "MAC address" -msgstr "MAC地址" - -msgid "MX Exchanger" -msgstr "MX交换器" - -msgid "MX Preference" -msgstr "MX优先权" - -msgid "MX record" -msgstr "MX记录" - -msgid "Mailing Address" -msgstr "邮件地址" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "有缺陷的主体：'%(value)s'" - -msgid "Manage password policy for specific group" -msgstr "管理指定组的密码策略" - -msgid "Manage ticket policy for specific user" -msgstr "管理指定用户的票据策略" - -msgid "Managed LDAP suffix DN" -msgstr "已管理的LDAP后缀DN" - -msgid "Managed suffix" -msgstr "管理的后缀" - -msgid "Managed suffixes" -msgstr "已管理的后缀" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "管理拓扑需要最小的域级别${domainlevel}" - -msgid "Manager" -msgstr "管理者" - -msgid "Managing" -msgstr "管理" - -msgid "Map" -msgstr "映射" - -msgid "Map Type" -msgstr "映射类型" - -msgid "Mark the token as disabled (default: false)" -msgstr "令牌标记为禁用（默认：错误的）" - -msgid "Master file" -msgstr "主文件" - -msgid "Matched" -msgstr "匹配" - -msgid "Matched rules" -msgstr "已匹配规则" - -msgid "Matching Type" -msgstr "匹配类型" - -msgid "Max domain level" -msgstr "最高域级别" - -msgid "Max failures" -msgstr "最大失败次数" - -msgid "Max life" -msgstr "最长存活期" - -msgid "Max lifetime (days)" -msgstr "最大生存期（天）" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "最大的时间（秒）搜索（-1或0表示无限制）" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "最大的时间（秒）搜索（>0，或-1表示无限制）" - -msgid "Maximum domain level" -msgstr "最高域级别" - -msgid "Maximum number of certs returned" -msgstr "返回的最大证书数" - -msgid "Maximum number of entries returned" -msgstr "返回的最大条目数" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "返回的最大条目数（0代表无限制）" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "最大数量的搜索记录（-1表示无限制）" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "最大数量的搜索记录（-1或0表示无限制）" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "当没有使用--rules来指定规则时，能处理的最大规则数" - -msgid "Maximum password life must be greater than minimum." -msgstr "最小密码生存周期必须比最小值大。" - -msgid "Maximum password lifetime (in days)" -msgstr "最大密码生存期（天）" - -msgid "Maximum serial number" -msgstr "最大序列号" - -msgid "Maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -msgid "Maximum username length" -msgstr "最大用户名长度" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "最大值是${value}" - -msgid "May not be empty" -msgstr "可能不是闲置的" - -msgid "Member Group" -msgstr "成员组" - -msgid "Member HBAC service" -msgstr "成员HBAC服务" - -msgid "Member HBAC service groups" -msgstr "成员HBAC服务组" - -msgid "Member Host" -msgstr "成员主机" - -msgid "Member Hostgroup" -msgstr "成员主机组" - -msgid "Member Sudo commands" -msgstr "成员Sudo命令" - -msgid "Member User" -msgstr "成员用户" - -msgid "Member groups" -msgstr "成员组" - -msgid "Member host-groups" -msgstr "主机组成员" - -msgid "Member hosts" -msgstr "成员主机" - -msgid "Member netgroups" -msgstr "成员网络组" - -msgid "Member of" -msgstr "隶属于" - -msgid "Member of HBAC rule" -msgstr "HBAC规则的成员" - -msgid "Member of HBAC service groups" -msgstr "HBAC服务组成员" - -msgid "Member of Sudo rule" -msgstr "Sudo规则的成员" - -msgid "Member of a group" -msgstr "组成员" - -msgid "Member of group" -msgstr "组成员" - -msgid "Member of groups" -msgstr "组成员" - -msgid "Member of host-groups" -msgstr "主机组成员" - -msgid "Member of netgroups" -msgstr "网络组成员" - -msgid "Member principals" -msgstr "成员主体" - -msgid "Member service groups" -msgstr "成员服务组" - -msgid "Member services" -msgstr "成员服务" - -msgid "Member users" -msgstr "成员用户" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "信任域的成员是“DOM\\名称”或“名称@域名”格式" - -msgid "Members that could not be added" -msgstr "不能被添加的成员" - -msgid "Members that could not be removed" -msgstr "不能被移除的成员" - -msgid "Method name" -msgstr "方法名" - -msgid "Method of" -msgstr "方法" - -msgid "Migrate users and groups from DS to IPA." -msgstr "将DS中的用户和用户组移植到IPA。" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"迁移模式是禁用的。\n" -"使用'ipa config-mod --enable-migration=TRUE'来启用它。" - -msgid "Migration of LDAP search reference is not supported." -msgstr "LDAP搜索帮助移植不支持。" - -msgid "Min domain level" -msgstr "最低域级别" - -msgid "Min length" -msgstr "最小长度" - -msgid "Min lifetime (hours)" -msgstr "最小生存期（小时）" - -msgid "Minimum domain level" -msgstr "最低域级别" - -msgid "Minimum length of password" -msgstr "最短密码长度" - -msgid "Minimum number of character classes" -msgstr "最小字符类数量" - -msgid "Minimum password lifetime (in hours)" -msgstr "最小密码生存期（小时）" - -msgid "Minimum serial number" -msgstr "最小序列号" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "最小值是${value}" - -msgid "Minutes Latitude" -msgstr "分钟纬度" - -msgid "Minutes Longitude" -msgstr "分钟经度" - -msgid "Misc. Information" -msgstr "杂项信息" - -msgid "Missing new vault public key" -msgstr "缺少新的库公钥" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "丢失或者无效的 HTTP Referer, %(referer)s" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "缺少应答控制列表！\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "缺少应答控制！\n" - -msgid "Missing values: " -msgstr "缺失值：" - -msgid "Missing vault private key" -msgstr "缺少库私钥" - -msgid "Missing vault public key" -msgstr "缺少库公钥" - -msgid "Mobile Telephone Number" -msgstr "移动电话号码" - -msgid "Model" -msgstr "模式" - -msgid "Modified" -msgstr "已修改" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "已修改\"%(value)s\"信任配置" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "已修改ACI\"%(value)s\"" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "已修改CA\"%(value)s\"" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "已修改CA ACL\"%(value)s\"" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "已修改配置文件\"%(value)s\"" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "已修改DNS服务器\"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "已修改HBAC规则\"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "已修改HBAC服务\"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "已修改HBAC服务组\"%(value)s\"" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "已修改ID范围\"%(value)s\"" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "已修改IPA位置\"%(value)s\"" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "已修改IPA服务器\"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "已修改OTP令牌\"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "已修改RADIUS代理服务器\"%(value)s\"" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "已修改SELinux用户映射\"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "已修改Sudo命令\"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "已修改Sudo命令组\"%(value)s\"" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "已修改Sudo规则\"%(value)s\"" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "已修改一个组ID覆盖\"%(value)s\"" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "已修改一个ID视图\"%(value)s\"" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "已修改一个ID覆盖\"%(value)s\"" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "已修改一个用户ID覆盖\"%(value)s\"" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "已修改自动成员规则\"%(value)s\"" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "已修改自动挂载键\"%(value)s\"" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "已修改自动挂载映射\"%(value)s\"" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "已修改授权\"%(value)s\"" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "已修改组\"%(value)s\"" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "已修改主机 \"%(value)s\"" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "已修改主机组\"%(value)s\"" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "已修改网络组\"%(value)s\"" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "已修改权限\"%(value)s\"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "已修改特权\"%(value)s\"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "已修改角色\"%(value)s\"" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "已修改段\"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "已修改自助服务\"%(value)s\"" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "已修改服务\"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "已修改计划用户\"%(value)s\"" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "已修改拓扑后缀\"%(value)s\"" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "已修改信任\"%(value)s\"（改变将在60s内生效）" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "已修改用户\"%(value)s\"" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "已修改库\"%(value)s\"" - -msgid "Modified: key not set" -msgstr "已修改：密钥没有设置" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "修改 %(name)s '%(value)s'？" - -msgid "Modify ACI." -msgstr "修改ACI。" - -msgid "Modify CA configuration." -msgstr "修改CA配置。" - -msgid "Modify Certificate Profile configuration." -msgstr "修改证书配置文件配置。" - -msgid "Modify DNS forward zone." -msgstr "修改DNS正向区。" - -msgid "Modify DNS server configuration" -msgstr "修改DNS服务器配置" - -msgid "Modify DNS zone (SOA record)." -msgstr "修改DNS区域（SOA记录）。" - -msgid "Modify ID range." -msgstr "修改ID范围。" - -msgid "Modify Kerberos ticket policy." -msgstr "修改Kerberos票据策略。" - -msgid "Modify OTP configuration options." -msgstr "修改OTP配置选项。" - -msgid "Modify Sudo Command Group." -msgstr "修改Sudo命令组。" - -msgid "Modify Sudo Command." -msgstr "修改Sudo命令。" - -msgid "Modify Sudo Rule." -msgstr "修改Sudo规则。" - -msgid "Modify a CA ACL." -msgstr "修改一个CA ACL。" - -msgid "Modify a DNS resource record." -msgstr "修改DNS资源记录。" - -msgid "Modify a OTP token." -msgstr "修改一个OTP令牌。" - -msgid "Modify a RADIUS proxy server." -msgstr "修改一个RADIUS代理服务器。" - -msgid "Modify a SELinux User Map." -msgstr "修改一个SELinux用户映射。" - -msgid "Modify a delegation." -msgstr "修改一个授权。" - -msgid "Modify a group password policy." -msgstr "修改一个组密码策略。" - -msgid "Modify a group." -msgstr "修改一个组。" - -msgid "Modify a hostgroup." -msgstr "修改一个主机组。" - -msgid "Modify a netgroup." -msgstr "修改一个网络组。" - -msgid "Modify a permission." -msgstr "修改一个权限。" - -msgid "Modify a privilege." -msgstr "修改一个特权。" - -msgid "Modify a role." -msgstr "修改一个角色。" - -msgid "Modify a segment." -msgstr "修改一个段。" - -msgid "Modify a self-service permission." -msgstr "修改一个自助服务权限。" - -msgid "Modify a stage user." -msgstr "修改一个计划用户。" - -msgid "Modify a topology suffix." -msgstr "修改一个拓扑后缀。" - -msgid "Modify a user." -msgstr "修改一个用户。" - -msgid "Modify a vault." -msgstr "修改一个库。" - -msgid "Modify an Group ID override." -msgstr "修改一个组ID覆盖。" - -msgid "Modify an HBAC rule." -msgstr "修改一个HBAC规则。" - -msgid "Modify an HBAC service group." -msgstr "修改一个HBAC服务组。" - -msgid "Modify an HBAC service." -msgstr "修改一个HBAC服务。" - -msgid "Modify an ID View." -msgstr "修改一个ID视图。" - -msgid "Modify an ID override." -msgstr "修改一个ID覆盖。" - -msgid "Modify an User ID override." -msgstr "修改一个用户ID覆盖。" - -msgid "Modify an automember rule." -msgstr "修改一个自动成员规则。" - -msgid "Modify an automount key." -msgstr "修改一个自动挂载键。" - -msgid "Modify an automount map." -msgstr "修改一个自动挂载映射。" - -msgid "Modify an existing IPA service." -msgstr "修改一个已存在的IPA服务。" - -msgid "Modify configuration options." -msgstr "修改配置选项" - -msgid "Modify global DNS configuration." -msgstr "修改全局DNS配置。" - -msgid "Modify global trust configuration." -msgstr "修改全局信任配置。" - -msgid "Modify information about a host." -msgstr "修改主机信息" - -msgid "Modify information about an IPA location." -msgstr "修改一个IPA位置信息。" - -msgid "Modify information about an IPA server." -msgstr "修改一个IPA服务器信息。" - -msgid "Modify realm domains." -msgstr "修改realm域。" - -msgid "Modify trustdomain of the trust" -msgstr "修改信任的信任域" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "找到不止一个拥有键%(key)s的条目，使用--info来选择指定条目。" - -msgid "Mount information" -msgstr "挂载信息" - -msgid "Mount point" -msgstr "挂载点" - -msgid "Move deleted user into staged area" -msgstr "将已删除用户移植到计划区域" - -msgid "Multi-value" -msgstr "多值" - -msgid "Must be a decimal number" -msgstr "必须是一个小数" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "必须是一个UTC时间值（例如：\"2014-01-20 17:58:01Z\"）" - -msgid "Must be an integer" -msgstr "必须是一个整数" - -msgid "NAPTR Flags" -msgstr "NAPTR标记" - -msgid "NAPTR Order" -msgstr "NAPTR规则" - -msgid "NAPTR Preference" -msgstr "NAPTR优先权" - -msgid "NAPTR Regular Expression" -msgstr "NAPTR正则表达式" - -msgid "NAPTR Replacement" -msgstr "NAPTR替换" - -msgid "NAPTR Service" -msgstr "NAPTR服务" - -msgid "NAPTR record" -msgstr "NAPTR记录" - -msgid "NIS domain name" -msgstr "NIS域名" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "NONE值不能与其他PAC类型相结合" - -msgid "NS Hostname" -msgstr "NS主机名" - -msgid "NS record" -msgstr "NS记录" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"NS记录是不能和一个%(type)s记录共存的，除非它位于根区域记录（RFC 2181，第6." -"节）" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "NS记录可以在带'@'的区域被编辑。" - -msgid "NSEC Next Domain Name" -msgstr "NSEC下一个域名" - -msgid "NSEC Type Map" -msgstr "NSEC类型映射" - -msgid "NSEC record" -msgstr "NSEC记录" - -msgid "NSEC3 record" -msgstr "NSEC3记录" - -msgid "NSEC3PARAM record" -msgstr "NSEC3PARAM记录" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "NSEC3PARAM区记录格式：散列算法 标记 迭代 盐值" - -msgid "Name" -msgstr "名称" - -msgid "Name of command to export" -msgstr "导出命令的名称" - -msgid "Name of host-group" -msgstr "主机组名称" - -msgid "Name of issuing CA" -msgstr "签发的CA名称" - -msgid "Name of method to export" -msgstr "导出方法的名称" - -msgid "Name of object to export" -msgstr "导出对象的名称" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "父自动挂载映射名（默认：auto.master）。" - -msgid "Name of the trusted domain" -msgstr "信任域的名称" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "命名服务器'%(host)s'没有相配的DNS A/AAAA记录" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "命名服务器的反向区域不能是一个相对的DNS名" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"没有提供--del-all或者选项来删除一个特定的记录。\n" -"可以使用命令帮助来查询所有支持的记录类型。" - -msgid "Nested Methods to execute" -msgstr "以嵌套的方法来执行" - -msgid "NetBIOS name" -msgstr "NetBIOS名称" - -msgid "Netgroup" -msgstr "网络组" - -msgid "Netgroup Settings" -msgstr "网络组设置" - -msgid "Netgroup description" -msgstr "网络组描述" - -msgid "Netgroup name" -msgstr "网络组名称" - -msgid "Netgroups" -msgstr "网络组" - -msgid "Network Services" -msgstr "网络服务" - -msgid "New ACI name" -msgstr "新的ACI名" - -msgid "New Certificate" -msgstr "新证书" - -msgid "New Password" -msgstr "新密码" - -msgid "New Principal Password" -msgstr "新的主体密码" - -msgid "New Test" -msgstr "新测试" - -msgid "New kerberos principal alias" -msgstr "新的kerberos主体别名" - -msgid "New mount information" -msgstr "新的挂载信息" - -msgid "New password is required" -msgstr "需要新密码" - -msgid "New public key specified multiple times" -msgstr "多次指定新公钥" - -msgid "New vault password" -msgstr "新的库密码" - -msgid "New: key not set" -msgstr "新的：密钥没有设置" - -msgid "New: key set" -msgstr "新的：密钥已设置" - -msgid "Next" -msgstr "下一个" - -msgid "Next Domain Name" -msgstr "下一个域名" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "没有找到A，AAAA，SSHFP和PTR记录。" - -msgid "No Common Name was found in subject of request." -msgstr "在请求的主题中找不到通用名。" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"在IPA位置%(location)s没有DNS服务器。没有DNS服务器位置是不会按预期工作的。" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "没有安装DNSSEC密钥主机。DNSSEC区域签名不会工作直到安装DNSSEC密钥主机。" - -msgid "No Valid Certificate" -msgstr "无效的证书" - -msgid "No archived data." -msgstr "没有归档数据。" - -msgid "No credentials cache found" -msgstr "没有找到凭证缓存" - -msgid "No default (fallback) group set" -msgstr "没有设置（回滚）组" - -msgid "No entries." -msgstr "没有条目。" - -msgid "No file to read" -msgstr "无文件可读" - -msgid "No free YubiKey slot!" -msgstr "没有空闲的YubiKey槽！" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "没有KDC可接受的密钥\n" - -msgid "No matching entries found" -msgstr "发现了不匹配的条目" - -msgid "No option to delete specific record provided." -msgstr "没有提供选项来删除具体的记录。" - -msgid "No option to modify specific record provided." -msgstr "没有提供选项来修改具体的记录。" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "没有权限将该主机加入到IPA域。\n" - -msgid "No private group" -msgstr "没有私有组" - -msgid "No response" -msgstr "没有响应" - -msgid "No such attribute on this entry" -msgstr "该条目没有这样的属性" - -msgid "No such virtual command" -msgstr "没有这样的虚拟命令" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "没有系统首选的加密类型？！\n" - -msgid "No trusted domain is not configured" -msgstr "信任域已配置" - -#, c-format -msgid "No values for %s" -msgstr "%s没有值" - -msgid "No wait" -msgstr "无需等待" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "在keytab文件%s中没有写权限\n" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "从CA REST API的Non-2xx响应：%(status)d. %(explanation)s" - -msgid "Non-Active Directory domain" -msgstr "非活动目录域" - -msgid "Non-POSIX" -msgstr "非POSIX" - -msgid "Non-existent or invalid rules" -msgstr "不存在或无效的规则" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "不传递外部信任到另一个活动目录森林的域中" - -msgid "Nonce" -msgstr "临时的" - -msgid "Not After" -msgstr "不晚于" - -msgid "Not Before" -msgstr "不早于" - -msgid "Not a managed group" -msgstr "不是一个管理组" - -msgid "Not a valid IP address" -msgstr "不是一个有效的IP地址" - -msgid "Not a valid IPv4 address" -msgstr "不是一个有效的IPv4地址" - -msgid "Not a valid IPv6 address" -msgstr "不是一个有效的IPv6地址" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "不是一个有效的网络地址（例如：2001:db8::/64, 192.0.2.0/24）" - -msgid "Not allowed on non-leaf entry" -msgstr "在非叶子条目上是不允许的" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "执行信任设置时没有指定足够的参数" - -msgid "Not matched rules" -msgstr "不匹配规则" - -msgid "Not registered yet" -msgstr "尚未注册" - -msgid "Note" -msgstr "概述" - -msgid "Number of IDs in the range" -msgstr "该范围的ID数" - -msgid "Number of conditions added" -msgstr "已添加的条件数" - -msgid "Number of conditions removed" -msgstr "已移除的条件数" - -msgid "Number of days's notice of impending password expiration" -msgstr "密码即将过期通知天数" - -msgid "Number of digits each token code will have" -msgstr "每个令牌码拥有的数字个数" - -msgid "Number of entries returned" -msgstr "返回的条目数" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "有ID视图未被设置的主机数量：" - -msgid "Number of hosts the ID View was applied to:" -msgstr "应用过该ID视图的主机数量：" - -msgid "Number of members added" -msgstr "已添加的成员数" - -msgid "Number of members removed" -msgstr "已移除成员数" - -msgid "Number of owners added" -msgstr "已添加的所有者数" - -msgid "Number of owners removed" -msgstr "待移除的所有者数" - -msgid "Number of permissions added" -msgstr "已添加权限数" - -msgid "Number of permissions removed" -msgstr "已移除权限数" - -msgid "Number of plugins loaded" -msgstr "已加载插件数" - -msgid "Number of privileges added" -msgstr "已添加特权数" - -msgid "Number of privileges removed" -msgstr "已移除权限数" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "在超时和失败前LDAP操作从远程复制服务器等待回应的用去的秒数" - -msgid "Number of variables returned (<= total)" -msgstr "返回变量数（<= total）" - -msgid "OTP" -msgstr "OTP" - -msgid "OTP Configuration" -msgstr "OTP配置" - -msgid "OTP Token" -msgstr "OTP令牌" - -msgid "OTP Token Settings" -msgstr "OTP令牌设置" - -msgid "OTP Tokens" -msgstr "OTP令牌" - -msgid "OTP configuration options" -msgstr "OTP配置选项" - -msgid "OTP set" -msgstr "OTP设置" - -msgid "OTP token" -msgstr "OTP令牌" - -msgid "OTP tokens" -msgstr "OTP令牌" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "在DS中被用户组条目所忽略的对象类" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "在DS中被用户条目所忽略的对象类" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "在DS中用户查找用户组条目的对象类" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "在DS中用于查找用户条目的对象类" - -msgid "Old vault password" -msgstr "旧的库密码" - -msgid "Old vault private key" -msgstr "旧的库私钥" - -msgid "One Time Password" -msgstr "一次性密码" - -msgid "One of group, permission or self is required" -msgstr "需要组，权限或它们自己中的一个" - -msgid "One time password commands" -msgstr "一次性密码命令" - -msgid "Only one value is allowed" -msgstr "只允许一个值" - -msgid "Only one zone type is allowed per zone name" -msgstr "每个区域名只允许一种区域类型" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"当添加一个AD信任时仅有ipa-ad-trust和ipa-ad-trust-posix允许--range-type值。" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "主机操作系统版本（例如：Fedora 9）" - -msgid "Operating system" -msgstr "操作系统" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "操作失败：%s\n" - -msgid "Operations Error" -msgstr "操作错误" - -msgid "Option added" -msgstr "已添加选项" - -msgid "Option group" -msgstr "选项组" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "当IPA范围类型是ipa-ad-trust-posix时，选项rid-base不能使用" - -msgid "Options" -msgstr "选项" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "选项dom-sid和dom-name不能被同时使用" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "选项dom-sid和rid-base必须同时使用" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "选项dom-sid和secondary-rid-base不能同时使用" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "选项dom-sid/dom-name和rid-base必须同时使用" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "选项dom-sid/dom-name和secondary-rid-base不能同时使用" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "选项secondary-rid-base和rid-base必须同时使用" - -msgid "Order" -msgstr "规则" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "按SELinux用户优先级递增顺序排列，以$分割" - -msgid "Org. Unit" -msgstr "组织单位" - -msgid "Organization" -msgstr "组织" - -msgid "Organizational Unit" -msgstr "组织单位" - -msgid "Origin DN subtree" -msgstr "原始DN子树" - -msgid "Original TTL" -msgstr "原始TTL" - -msgid "Other Record Types" -msgstr "其他记录类型" - -msgid "Our domain is not configured" -msgstr "我们的域没有配置" - -#, c-format -msgid "Out of Memory!\n" -msgstr "内存不足！\n" - -msgid "Out of memory\n" -msgstr "内存不足\n" - -#, c-format -msgid "Out of memory \n" -msgstr "内存不足\n" - -#, c-format -msgid "Out of memory!" -msgstr "内存不足！" - -#, c-format -msgid "Out of memory!\n" -msgstr "内存不足！\n" - -msgid "Out of memory!?\n" -msgstr "内存不足！？\n" - -msgid "Output filename" -msgstr "输出文件名" - -msgid "Output only on errors" -msgstr "仅输出错误" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" -"覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持，例如，这可能是NFS" -"服务的必要条件。" - -msgid "Override existing password" -msgstr "覆盖已存在的密码" - -msgid "Override inherited settings" -msgstr "覆盖继承设置" - -msgid "Overwrite GID" -msgstr "覆盖GID" - -msgid "Owner" -msgstr "所有者" - -#, python-format -msgid "Owner %s" -msgstr "所有者%s" - -msgid "Owner groups" -msgstr "所有者用户组" - -msgid "Owner services" -msgstr "所有者服务" - -msgid "Owner users" -msgstr "所有者用户" - -msgid "Owners that could not be added" -msgstr "不能被添加的所有者" - -msgid "Owners that could not be removed" -msgstr "不能被移除的所有者" - -msgid "PAC type" -msgstr "PAC类型" - -msgid "PTR Hostname" -msgstr "PTR主机名" - -msgid "PTR record" -msgstr "PTR记录" - -msgid "Page" -msgstr "页" - -msgid "Pager Number" -msgstr "传真号码" - -msgid "Parameters" -msgstr "参数" - -msgid "Parent map" -msgstr "父映射" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "解析所有的原始DNS记录并以有条理的方式返回它们" - -msgid "Parse error" -msgstr "解析错误" - -msgid "Password" -msgstr "密码" - -msgid "Password Expiration Notification (days)" -msgstr "密码过期通知（天）" - -msgid "Password Policies" -msgstr "密码策略" - -msgid "Password Policy" -msgstr "密码策略" - -msgid "Password cannot be set on enrolled host." -msgstr "密码不能在注册主机上设置。" - -msgid "Password change complete" -msgstr "完成密码更改" - -msgid "Password expiration" -msgstr "密码过期" - -msgid "Password history size" -msgstr "密码历史大小" - -msgid "Password plugin features" -msgstr "密码插件功能" - -msgid "Password reset was not successful." -msgstr "密码重置失败。" - -msgid "Password specified multiple times" -msgstr "多次指定密码" - -msgid "Password used in bulk enrollment" -msgstr "密码用于批量注册" - -msgid "Passwords do not match" -msgstr "密码不匹配" - -msgid "Passwords do not match!" -msgstr "密码不匹配！" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"密码已迁移成pre-hashed格式。IPA不能生成Kerberos密钥，除非提供明文密码。所有移" -"植过的用户在能使用他们的Kerberos账号之前需要登录https://your.domain/ipa/" -"migration/。" - -msgid "Passwords must match" -msgstr "密码必须匹配" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Per-server有条件的转发器策略。设置为\"none\"来禁止该区域转发至全局转发器。那" -"样的话，有条件的区域转发器被忽视了。" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Per-server转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自" -"定义端口" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Per-zone转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自定" -"义端口" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "一段时间后失败次数将被重置（秒）" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "锁定持续时间（秒）" - -msgid "Permission" -msgstr "权限" - -msgid "Permission ACI grants access to" -msgstr "ACI授予访问的权限" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "权限阻止：%(file)s" - -msgid "Permission flags" -msgstr "权限标记" - -msgid "Permission name" -msgstr "权限名称" - -msgid "Permission settings" -msgstr "权限设置" - -msgid "Permission type" -msgstr "权限类型" - -msgid "Permission value" -msgstr "权限值" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "带有标记%s的权限可能不能被修改或删除" - -msgid "Permissions" -msgstr "权限" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "委托权限（读，写）。默认是写。" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "授予权限（读，写，添加，删除，全部）" - -msgid "Permitted Encryption Types" -msgstr "允许的加密类型" - -msgid "Permitted to have certificates issued" -msgstr "允许颁发证书" - -msgid "Ping a remote server." -msgstr "Ping一台远程服务器。" - -msgid "Platform" -msgstr "平台" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "请选择一个待添加的DNS资源记录类型" - -msgid "Please specify forwarders." -msgstr "请指定转发器。" - -msgid "Please try the following options:" -msgstr "请尝试下面选项：" - -msgid "Policy" -msgstr "策略" - -msgid "Port" -msgstr "端口" - -msgid "Positional argument" -msgstr "位置参数" - -msgid "Positional arguments" -msgstr "位置参数" - -msgid "Pre-authentication is required for the service" -msgstr "服务需要预认证" - -msgid "Pre-shared password" -msgstr "预先共享的密码" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "预定义的配置文件'%(profile_id)s'不能被删除" - -msgid "Preference" -msgstr "优先权" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "该交换器的优先级。值越低优先级越高" - -msgid "Preferred Language" -msgstr "首选语言" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "前缀用来区分ACI类型（权限，授权，自助，无）" - -msgid "Preserved user" -msgstr "备用用户" - -msgid "Preserved users" -msgstr "备用用户" - -msgid "Prev" -msgstr "上一个" - -msgid "Primary RID base" -msgstr "主要的RID基" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "主要RID范围和次要RID范围不能覆盖" - -msgid "Primary key only" -msgstr "主键唯一" - -msgid "Principal" -msgstr "主体" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "不能认证主体%(principal)s：%(message)s" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" -"主体'%(principal)s'不允许使用含配置文件'%(profile_id)s'的CA '%(ca)s'来发布证" -"书。" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "在主题alt名中的主体'%s'与请求的主体不匹配" - -msgid "Principal alias" -msgstr "主体别名" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "该证书的主体（例如：HTTP/test.example.com）" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "主体不是这种格式user@REALM：'%(principal)s'" - -msgid "Principal name" -msgstr "主机名" - -msgid "Print as little as possible" -msgstr "打印尽可能少" - -msgid "Print debugging information" -msgstr "打印调试信息" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "打印存储在服务器上的条目。仅影响输出格式。" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "以GSSAPI模式打印原始的XML-RPC输出" - -msgid "Priority" -msgstr "优先级" - -msgid "Priority (order)" -msgstr "优先级（顺序）" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "策略优先级（数字越大意味着优先级越低" - -msgid "Private key specified multiple times" -msgstr "多次指定私钥" - -msgid "Privilege" -msgstr "特权" - -msgid "Privilege Settings" -msgstr "特权设置" - -msgid "Privilege Withdrawn" -msgstr "特权撤销" - -msgid "Privilege description" -msgstr "特权描述" - -msgid "Privilege name" -msgstr "特权名" - -msgid "Privileges" -msgstr "特权" - -msgid "Profile ID" -msgstr "配置文件ID" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "配置文件ID '%(cli_value)s'与配置文件数据'%(file_value)s'不匹配" - -msgid "Profile ID for referring to this profile" -msgstr "指向该配置文件的配置文件ID" - -msgid "Profile category" -msgstr "配置文件类别" - -msgid "Profile category the ACL applies to" -msgstr "ACL适用于配置文件类别" - -msgid "Profile configuration" -msgstr "配置文件配置" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "配置储存在文件'%(file)s'中" - -msgid "Profile description" -msgstr "配置文件描述" - -msgid "Profiles" -msgstr "配置文件" - -msgid "Prompt to set the user password" -msgstr "提示设置用户密码" - -msgid "Prospective" -msgstr "预期的" - -msgid "Protocol" -msgstr "协议" - -msgid "Public Key" -msgstr "公钥" - -msgid "Public key" -msgstr "公钥" - -msgid "Public key specified multiple times" -msgstr "多次指定公钥" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "二维码的宽度大于tty的输出。请调整你的终端。" - -msgid "Quantity" -msgstr "数量" - -msgid "Query current Domain Level." -msgstr "查询当前域级别。" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "返回比配置大小限制更多的结果。显示第一个${counter}结果。" - -msgid "Quick Links" -msgstr "快速链接" - -msgid "Quiet mode. Only errors are displayed." -msgstr "单用户模式。仅显示错误。" - -msgid "RADIUS Proxy Server Settings" -msgstr "RADIUS代理服务器设置" - -msgid "RADIUS Server" -msgstr "RADIUS代理服务器" - -msgid "RADIUS Servers" -msgstr "RADIUS代理服务器" - -msgid "RADIUS proxy configuration" -msgstr "RADIUS代理配置" - -msgid "RADIUS proxy server" -msgstr "RADIUS代理服务器" - -msgid "RADIUS proxy server name" -msgstr "RADIUS代理服务器名称" - -msgid "RADIUS proxy servers" -msgstr "RADIUS代理服务器" - -msgid "RADIUS proxy username" -msgstr "RADIUS代理名称" - -msgid "REST API is not logged in." -msgstr "REST API没有登录。" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "RFC4120-兼容的Kerberos域" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "RFC822名称与任何用户的电子邮件地址都不匹配" - -msgid "RP record" -msgstr "RP记录" - -msgid "RPC command used to log the current user out of their session." -msgstr "RPC命令用于记录当前用户的会话。" - -msgid "RRSIG Algorithm" -msgstr "RRSIG算法" - -msgid "RRSIG Key Tag" -msgstr "RRSIG密钥标记" - -msgid "RRSIG Labels" -msgstr "RRSIG分类" - -msgid "RRSIG Original TTL" -msgstr "RRSIG原始TTL" - -msgid "RRSIG Signature" -msgstr "RRSIG签名" - -msgid "RRSIG Signature Expiration" -msgstr "RRSIG签名过期" - -msgid "RRSIG Signature Inception" -msgstr "RRSIG签名开端" - -msgid "RRSIG Signer's Name" -msgstr "RRSIG签名者的名字" - -msgid "RRSIG Type Covered" -msgstr "RRSIG类型覆盖" - -msgid "RRSIG record" -msgstr "RRSIG记录" - -msgid "Random password" -msgstr "随机密码" - -msgid "Range Settings" -msgstr "范围设置" - -msgid "Range name" -msgstr "范围名称" - -msgid "Range size" -msgstr "范围大小" - -msgid "Range type" -msgstr "范围类型" - -#, python-format -msgid "Raw %s records" -msgstr "原始的%s记录" - -msgid "Raw A records" -msgstr "原始的记录" - -msgid "Raw A6 records" -msgstr "原始的A6记录" - -msgid "Raw AAAA records" -msgstr "原始的AAAA记录" - -msgid "Raw AFSDB records" -msgstr "原始的AFSDB记录" - -msgid "Raw APL records" -msgstr "原始的APL记录" - -msgid "Raw CERT records" -msgstr "原始的CERT记录" - -msgid "Raw CNAME records" -msgstr "原始的CNAME记录" - -msgid "Raw DHCID records" -msgstr "原始的DHCID记录" - -msgid "Raw DLV records" -msgstr "原始的DLV记录" - -msgid "Raw DNAME records" -msgstr "原始的DNAME记录" - -msgid "Raw DNSKEY records" -msgstr "原始的DNSKEY记录" - -msgid "Raw DS records" -msgstr "原始的DS记录" - -msgid "Raw HIP records" -msgstr "原始的HIP记录" - -msgid "Raw IPSECKEY records" -msgstr "原始的IPSECKEY记录" - -msgid "Raw KEY records" -msgstr "原始的KEY记录" - -msgid "Raw KX records" -msgstr "原始的KX记录" - -msgid "Raw LOC records" -msgstr "原始的LOC记录" - -msgid "Raw MX records" -msgstr "原始的MX记录" - -msgid "Raw NAPTR records" -msgstr "原始的NAPTR记录" - -msgid "Raw NS records" -msgstr "原始的NS记录" - -msgid "Raw NSEC records" -msgstr "原始的NSEC记录" - -msgid "Raw NSEC3 records" -msgstr "原始的NSEC3记录" - -msgid "Raw PTR records" -msgstr "原始的PTR记录" - -msgid "Raw RP records" -msgstr "原始的RP记录" - -msgid "Raw RRSIG records" -msgstr "原始的RRSIG记录" - -msgid "Raw SIG records" -msgstr "原始的SIG记录" - -msgid "Raw SPF records" -msgstr "原始的SPF记录" - -msgid "Raw SRV records" -msgstr "原始的SRV记录" - -msgid "Raw SSHFP records" -msgstr "原始的SSHFP记录" - -msgid "Raw TA records" -msgstr "原始的TA记录" - -msgid "Raw TKEY records" -msgstr "原始的TKEY记录" - -msgid "Raw TLSA records" -msgstr "原始的TLSA记录" - -msgid "Raw TSIG records" -msgstr "原始的TSIG记录" - -msgid "Raw TXT records" -msgstr "原始的TXT记录" - -msgid "Raw target filter" -msgstr "原始的目标过滤器" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "DNS记录的原始值已被设定为\"%(name)s\"选项" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "重建信任域\"%(value)s\"" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "重新同步在权利服务器上的本地权利缓存。" - -msgid "Realm Domains" -msgstr "Realm域" - -msgid "Realm administrator password should be specified" -msgstr "域管理员密码应该被指定" - -msgid "Realm domains" -msgstr "Realm域" - -msgid "Realm name" -msgstr "域名" - -msgid "Realm-domain mismatch" -msgstr "Realm-domain不匹配" - -msgid "Reason" -msgstr "原因" - -msgid "Reason for Revocation" -msgstr "撤销理由" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "撤消证书的原因(0-10)" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" - -msgid "Rebuild auto membership" -msgstr "重建自动成员" - -msgid "Record Type" -msgstr "记录类型" - -msgid "Record creation failed." -msgstr "记录创建失败。" - -msgid "Record data" -msgstr "记录数据" - -msgid "Record name" -msgstr "记录名" - -msgid "Record not found." -msgstr "记录没有找到。" - -msgid "Record type" -msgstr "记录类型" - -msgid "Records" -msgstr "记录" - -msgid "Records for DNS Zone" -msgstr "DNS区域记录" - -msgid "Redirection" -msgstr "重定向" - -msgid "Redirection to PTR record" -msgstr "重定向到PTR记录" - -msgid "Refresh" -msgstr "更新" - -msgid "Refresh list of the domains associated with the trust" -msgstr "刷新与信任相关的域列表" - -msgid "Refresh the page." -msgstr "刷新页面。" - -msgid "Registration password" -msgstr "注册密码" - -msgid "Regular Expression" -msgstr "正则表达式" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"相对记录名'%(record)s'将区域名'%(zone)s'当作一个后缀，导致FQDN '%(fqdn)s'。这" -"通常是由于在名称规范后缺少一个点号引起的错误。" - -msgid "Relative weight for entries with the same priority." -msgstr "拥有相同优先级条目的相对权重。" - -msgid "Reload current settings from the server." -msgstr "从服务器重新加载当前设置。" - -msgid "Reload the browser." -msgstr "重新加载浏览器。" - -msgid "Remote IPA server hostname" -msgstr "远程IPA服务器主机名" - -msgid "Remote server name" -msgstr "远程服务器名称" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "移除被IPA DNS管理的主机的A，AAAA，SSHFP和PTR记录" - -msgid "Remove CAs from a CA ACL." -msgstr "从一个CA ACL中移除CAs。" - -msgid "Remove Kerberos Alias" -msgstr "删除Kerberos别名" - -msgid "Remove Permission" -msgstr "删除权限" - -msgid "Remove a manager to the stage user entry" -msgstr "从一个计划用户条目中移除一个管理员" - -msgid "Remove a manager to the user entry" -msgstr "向一个用户条目中移除一个管理员" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "为每个正向区访问授权移除一个权限。" - -msgid "Remove a permission for per-zone access delegation." -msgstr "为每个区访问授权移除一个权限。" - -msgid "Remove all principals in this realm" -msgstr "删除该域中的所有主体" - -msgid "Remove an option from Sudo Rule." -msgstr "从Sudo规则中移除一个选项。" - -msgid "Remove certificates from a service" -msgstr "从一个服务中移除证书" - -msgid "Remove certificates from host entry" -msgstr "从主机条目中移除证书" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "移除受Sudo规则影响的命令和命令组。" - -msgid "Remove conditions from an automember rule." -msgstr "从一个自动成员规则中移除条件。" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "对所有不匹配的条目移除默认（回退）组。" - -msgid "Remove entries from DNS" -msgstr "从DNS中移除条目" - -msgid "Remove from CRL" -msgstr "从CRL中删除" - -msgid "Remove hold" -msgstr "删除持有" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "移除受Sudo规则影响的主机和主机组。" - -msgid "Remove hosts that can manage this host." -msgstr "移除可以管理该主机的主机。" - -msgid "Remove hosts that can manage this service." -msgstr "移除可以管理该服务的主机。" - -msgid "Remove information about the domain associated with the trust." -msgstr "移除与信任相关的域信息。" - -msgid "Remove member from a named service delegation rule." -msgstr "从一个命名服务授权规则中移除成员。" - -msgid "Remove member from a named service delegation target." -msgstr "从一个命名服务授权目标中移除成员。" - -msgid "Remove member from a named service delegation." -msgstr "从一个命名服务授权中删除成员。" - -msgid "Remove members from Sudo Command Group." -msgstr "从Sudo命令组中移除成员。" - -msgid "Remove members from a group." -msgstr "从一个组中移除成员。" - -msgid "Remove members from a hostgroup." -msgstr "从一个主机组中移除成员。" - -msgid "Remove members from a netgroup." -msgstr "从一个网络组中移除成员。" - -msgid "Remove members from a permission." -msgstr "从一个权限中移除成员。" - -msgid "Remove members from a privilege" -msgstr "从特权中移除成员" - -msgid "Remove members from a role." -msgstr "从一个角色中移除成员。" - -msgid "Remove members from a vault." -msgstr "从一个库中移除成员。" - -msgid "Remove members from an HBAC service group." -msgstr "从一个HBAC服务组中移除成员。" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "从id覆盖用户条目中移除一个或多个证书" - -msgid "Remove one or more certificates to the user entry" -msgstr "向用户条目中移除一个或多个证书" - -msgid "Remove owners from a vault container." -msgstr "从一个库容器中移除所有者。" - -msgid "Remove owners from a vault." -msgstr "从一个库中移除所有者。" - -msgid "Remove permissions from a privilege." -msgstr "从特权中移除权限。" - -msgid "Remove principal alias from a host entry" -msgstr "从一个主机条目中移除主体别名" - -msgid "Remove principal alias from a service" -msgstr "从一个服务中删除主体别名" - -msgid "Remove principal alias from the user entry" -msgstr "从用户条目中删除主体别名" - -msgid "Remove privileges from a role." -msgstr "从一个角色中移除权限。" - -msgid "Remove profiles from a CA ACL." -msgstr "从一个CA ACL中移除配置文件。" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "从一个HBAC规则中移除服务和服务组。" - -msgid "Remove services from a CA ACL." -msgstr "从一个CA ACL中移除服务。" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "从一个HBAC规则中移除源主机和主机组。" - -msgid "Remove target from a named service delegation rule." -msgstr "从一个命名服务授权规则中移除目标。" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "从一个CA ACL中移除目标主机和主机组。" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "从一个HBAC规则中移除目标主机和主机组。" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "从一个SELinux用户映射规则中移除目标主机和主机组。" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "移除受Sudo规则影响的用户和用户组。" - -msgid "Remove users and groups from a CA ACL." -msgstr "从一个CA ACL中移除用户和用户组。" - -msgid "Remove users and groups from an HBAC rule." -msgstr "从一个HBAC规则中移除用户和用户组。" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "向SELinux用户映射规则中移除用户和用户组。" - -msgid "Remove users that can manage this token." -msgstr "移除可以管理该令牌的用户。" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "已从主机\"%(value)s\"中移除别名" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "已从用户\"%(value)s\"中删除别名" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "已从服务主体\"%(value)s\"中删除别名" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "已从主机\"%(value)s\"中移除证书" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "已从id覆盖用户\"%(value)s\"中移除证书" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "已从服务主体\"%(value)s\"中删除证书" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"删除证书" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "已从\"%(value)s\"中移除条件" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "已为自动成员\"%(value)s\"移除默认（回滚）组" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "删除信任域\"%(value)s\"的信息" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "已从Sudo规则\"%(rule)s\"中移除\"%(option)s\"" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "已移除系统权限\"%(value)s\"" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "从复制拓扑中移除%(servers)s，请稍后..." - -#, c-format -msgid "Removing principal %s\n" -msgstr "删除主体%s\n" - -msgid "Rename" -msgstr "重命名" - -msgid "Rename an ACI." -msgstr "重命名一个ACI。" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "重命名%(ldap_obj_name)s对象" - -msgid "Rename the DNS resource record object" -msgstr "重命名DNS资源记录对象" - -msgid "Rename the Group ID override object" -msgstr "重命名组ID覆盖对象" - -msgid "Rename the ID View object" -msgstr "重命名ID视图对象" - -msgid "Rename the OTP token object" -msgstr "重命名OTP令牌对象" - -msgid "Rename the RADIUS proxy server object" -msgstr "重命名RADIUS代理服务器对象" - -msgid "Rename the User ID override object" -msgstr "重命名用户ID覆盖对象" - -msgid "Rename the automount key object" -msgstr "重命名自动挂载键对象" - -msgid "Rename the group object" -msgstr "重命名组对象" - -msgid "Rename the permission object" -msgstr "重命名权限对象" - -msgid "Rename the privilege object" -msgstr "重命名特权对象" - -msgid "Rename the role object" -msgstr "重命名角色对象" - -msgid "Rename the stage user object" -msgstr "重命名计划用户对象" - -msgid "Rename the user object" -msgstr "重命名用户对象" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "已重命名ACI为\"%(value)s\"" - -msgid "Renewal master for IPA certificate authority" -msgstr "为IPA证书认证机构更新主服务器" - -msgid "Replacement" -msgstr "替换" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"副本是活跃的DNSSEC密钥主机。卸载会导致你DNS系统崩溃。首先请禁用或替代DNSSEC密" -"钥主机。" - -msgid "Replication agreement enabled" -msgstr "启用复制协议" - -msgid "Replication configuration" -msgstr "复制配置" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "副本更新段：要求\"%(pkey)s\"。" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "复制拓扑的后缀\"%(suffix)s\"包含错误。" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "复制拓扑的后缀\"%(suffix)s\"是按序的。" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "请求一个完整的从另一个节点检索数据的节点重初始化。" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "请求失败状态%(status)s：%(reason)s" - -msgid "Request id" -msgstr "请求号" - -msgid "Request is missing \"method\"" -msgstr "请求缺少\"method\"" - -msgid "Request is missing \"params\"" -msgstr "请求缺少\"params\"" - -msgid "Request must be a dict" -msgstr "请求必须是一个字典" - -msgid "Request status" -msgstr "请求状态" - -msgid "Required" -msgstr "必需的" - -msgid "Required field" -msgstr "必需字段" - -msgid "Requires pre-authentication" -msgstr "需要预认证" - -msgid "Reset" -msgstr "重置" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "重置Kerberos票据策略为默认值。" - -msgid "Reset OTP" -msgstr "重置OTP" - -msgid "Reset Password" -msgstr "重置密码" - -msgid "Reset your password." -msgstr "重置你的密码。" - -msgid "Resolve a host name in DNS." -msgstr "在DNS中解析主机名。" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "在DNS中解析主机名。（不赞成）" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "在信任域中重新解析用户和用户组的安全标识符" - -msgid "Response from CA was not valid JSON" -msgstr "CA响应是无效的JSON" - -msgid "Restore" -msgstr "恢复" - -msgid "Result" -msgstr "结果" - -msgid "Result of simulation" -msgstr "模拟结果" - -msgid "Result of the command" -msgstr "命令返回值" - -msgid "Results are truncated, try a more specific search" -msgstr "结果被截断，请尝试更明确的搜索" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "结果应该只包括主键属性(\"%s\")" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "结果应该只包括主键属性(\"anchor\")" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "结果应该只包括主键属性(\"certificate\")" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "结果应该只包括主键属性(\"cn\")" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "结果应该只包括主键属性(\"command\")" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "结果应该只包括主键属性(\"delegation-name\")" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "结果应该只包括主键属性(\"domain\")" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "结果应该只包括主键属性(\"group\")" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "结果应该只包括主键属性(\"group-name\")" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "结果应该只包括主键属性(\"hostgroup-name\")" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "结果应该只包括主键属性(\"hostname\")" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "结果应该只包括主键属性(\"id\")" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "结果应该只包括主键属性(\"location\")" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "结果应该只包括主键属性(\"login\")" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "结果应该只包括主键属性(\"map\")" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "结果应该只包括主键属性(\"name\")" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "结果应该只包括主键属性(\"principal\")" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "结果应该只包括主键属性(\"realm\")" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "结果应该只包括主键属性(\"service\")" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "结果应该只包括主键属性(\"sudocmdgroup-name\")" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "结果应该只包括主键属性(\"sudorule-name\")" - -msgid "Retries" -msgstr "重试" - -msgid "Retrieve a data from a vault." -msgstr "从库中检索一个数据。" - -msgid "Retrieve an existing certificate." -msgstr "检索一个已存在的证书。" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "从服务器检索和打印所有属性。影响命令输出。" - -msgid "Retrieve current keys without changing them" -msgstr "检索当前密钥不去改变它们" - -msgid "Retrieve the entitlement certs." -msgstr "检索权利证书。" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "从库\"%(value)s\"中检索数据" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "检索CA证书链失败：%s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "检索CA状态失败%d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "检索CA状态失败：%s" - -msgid "Retry" -msgstr "重试" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "用pre-4.0 keytab检索方法重试...\n" - -msgid "Return to the main page and retry the operation" -msgstr "返回到主页面并重试操作" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "在反向区域%(zone)s中IP地址为%(ip)s的反向记录已存在。" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "反向区域%(name)s恰好需要%(count)d个IP地址组件，已给出%(user_count)d" - -msgid "Reverse zone IP network" -msgstr "反向区域IP网络" - -msgid "Revert" -msgstr "返回" - -msgid "Revocation reason" -msgstr "撤消原因" - -msgid "Revoke" -msgstr "撤回" - -msgid "Revoke a certificate." -msgstr "撤销证书。" - -msgid "Revoked" -msgstr "撤销" - -msgid "Revoked on from" -msgstr "撤销于" - -msgid "Revoked on to" -msgstr "撤销到" - -msgid "Right node" -msgstr "右节点" - -msgid "Right replication node - an IPA server" -msgstr "右复制节点-IPA服务器" - -msgid "Rights" -msgstr "权限" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "授予权限（读，查找，比较，写，添加，删除，全部）" - -msgid "Role" -msgstr "角色" - -msgid "Role Settings" -msgstr "角色设置" - -msgid "Role name" -msgstr "角色名" - -msgid "Role status" -msgstr "角色状态" - -msgid "Roles" -msgstr "角色" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "信任的根域总是支持现有的信任" - -msgid "Rule name" -msgstr "规则名" - -msgid "Rule status" -msgstr "规则状态" - -msgid "Rule type" -msgstr "规则类型" - -msgid "Rule type (allow)" -msgstr "规则类型（允许）" - -msgid "Rules" -msgstr "规则" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "带测试规则。如果没有指定，--enable是假定的" - -msgid "Run Commands" -msgstr "允许命令" - -msgid "Run Test" -msgstr "允许测试" - -msgid "Run as a user" -msgstr "作为一个用户来运行" - -msgid "Run as any user within a specified group" -msgstr "作为任何一个有指定组用户来运行" - -msgid "Run with the gid of a specified POSIX group" -msgstr "以一个指定POSIX组的gid来运行" - -msgid "RunAs External Group" -msgstr "作为外部用户组来运行" - -msgid "RunAs External User" -msgstr "作为外部用户来运行" - -msgid "RunAs Group category" -msgstr "作为用户组类别来运行" - -msgid "RunAs Group category the rule applies to" -msgstr "作为规则适用的用户组类别来运行" - -msgid "RunAs Groups" -msgstr "作为用户组来运行" - -msgid "RunAs User category" -msgstr "作为用户类别来运行" - -msgid "RunAs User category the rule applies to" -msgstr "作为规则适用的用户类别来运行" - -msgid "RunAs Users" -msgstr "作为用户来运行" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "作为组来运行不能接受'%(name)s'来作为一个组名" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "作为用户来运行不能接受'%(name)s'来作为一个组名" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "作为用户来运行不能接受'%(name)s'来作为一个用户名" - -msgid "SELinux Options" -msgstr "SELinux选项" - -msgid "SELinux User" -msgstr "SELinux用户" - -msgid "SELinux User Map" -msgstr "SELinux用户映射规则" - -msgid "SELinux User Map rule" -msgstr "SELinux用户映射规则" - -msgid "SELinux User Map rules" -msgstr "SELinux用户映射规则" - -msgid "SELinux User Maps" -msgstr "SELinux用户映射规则" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "SELinux用户%(user)s在顺序列表中（配置）没有找到" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "SELinux用户'%(user)s'是无效的：%(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "SELinux用户映射默认用户没有在列表中" - -msgid "SELinux user map list not found in configuration" -msgstr "SELinux用户映射列表在配置中没有找到" - -msgid "SELinux user map order" -msgstr "SELinux 用户映射订单" - -msgid "SHA1 Fingerprint" -msgstr "SHA1指纹" - -msgid "SHA256 Fingerprint" -msgstr "SHA256指纹" - -msgid "SID blacklist incoming" -msgstr "进来的SID黑名单" - -msgid "SID blacklist outgoing" -msgstr "出去的SID黑名单" - -msgid "SID does not match any trusted domain" -msgstr "SID不能匹配任何信任域" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "SID不能完全匹配任何信任域的SID" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "指定信任域名的SID没有找到。请使用dom-sid选项直接指定SID。" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "对于一个信任域来说，SID不被认为是一个有效的SID" - -msgid "SID is not valid" -msgstr "SID是无效的" - -msgid "SIG Algorithm" -msgstr "SIG算法" - -msgid "SIG Key Tag" -msgstr "SIG密钥标记" - -msgid "SIG Labels" -msgstr "SIG分类" - -msgid "SIG Original TTL" -msgstr "SIG原始TTL" - -msgid "SIG Signature" -msgstr "SIG签名" - -msgid "SIG Signature Expiration" -msgstr "SIG签名过期" - -msgid "SIG Signature Inception" -msgstr "SIG签名开端" - -msgid "SIG Signer's Name" -msgstr "SIG签名者的名字" - -msgid "SIG Type Covered" -msgstr "SIG类型覆盖" - -msgid "SIG record" -msgstr "SIG记录" - -msgid "SOA class" -msgstr "SOA类" - -msgid "SOA expire" -msgstr "SOA到期" - -msgid "SOA minimum" -msgstr "SOA最低值" - -msgid "SOA mname (authoritative server) override" -msgstr "SOA mname（权威服务器）覆盖" - -msgid "SOA mname override" -msgstr "SOA mname覆盖" - -msgid "SOA record class" -msgstr "SOA记录类" - -msgid "SOA record expire time" -msgstr "SOA记录到期时间" - -msgid "SOA record refresh time" -msgstr "SOA记录刷新时间" - -msgid "SOA record retry time" -msgstr "SOA记录重试时间" - -msgid "SOA record serial number" -msgstr "SOA记录编号" - -msgid "SOA record time to live" -msgstr "SOA记录存活时间" - -msgid "SOA refresh" -msgstr "SOA刷新" - -msgid "SOA retry" -msgstr "SOA重试" - -msgid "SOA serial" -msgstr "SOA序列" - -msgid "SOA time to live" -msgstr "SOA存活时间" - -msgid "SPF record" -msgstr "SPF记录" - -msgid "SRV Port" -msgstr "SRV端口" - -msgid "SRV Priority" -msgstr "SRV优先级" - -msgid "SRV Target" -msgstr "SRV目标" - -msgid "SRV Weight" -msgstr "SRV重量" - -msgid "SRV record" -msgstr "SRV记录" - -msgid "SSH public key" -msgstr "SSH公钥" - -msgid "SSH public key fingerprint" -msgstr "SSH公钥指纹" - -msgid "SSH public key:" -msgstr "SSH公钥：" - -msgid "SSH public keys" -msgstr "SSH公钥" - -msgid "SSHFP Algorithm" -msgstr "SSHFP算法" - -msgid "SSHFP Fingerprint" -msgstr "SSHFP指纹" - -msgid "SSHFP Fingerprint Type" -msgstr "SSHFP指纹类型" - -msgid "SSHFP record" -msgstr "SSHFP记录" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "SSSD不能将对象解析成一个有效的SID" - -msgid "Salt" -msgstr "盐值" - -#, python-format -msgid "Same as --%s" -msgstr "相同于 --%s" - -msgid "Save" -msgstr "保存" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "模式是最新的（FP '%(fingerprint)s', TTL %(ttl)s s）" - -msgid "Search" -msgstr "查找" - -msgid "Search Options" -msgstr "查找选项" - -msgid "Search command parameters." -msgstr "查找命令参数。" - -msgid "Search domains of the trust" -msgstr "查找信任域" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "查找有这些%(relationship)s %(ldap_object)s的%(searched_object)s。" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "查找没有%(relationship)s %(ldap_object)s的%(searched_object)s。" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "在rootdse中查找%1$s失败，错误%2$d\n" - -msgid "Search for CA ACLs." -msgstr "查找CA ACLs。" - -msgid "Search for CAs." -msgstr "查找CAs。" - -msgid "Search for Certificate Profiles." -msgstr "查找证书配置文件。" - -msgid "Search for DNS forward zones." -msgstr "查找DNS正向区。" - -msgid "Search for DNS resources." -msgstr "查找DNS资源。" - -msgid "Search for DNS servers." -msgstr "查找DNS服务器。" - -msgid "Search for DNS zones (SOA records)." -msgstr "查找DNS区域（SOA记录）。" - -msgid "Search for HBAC rules." -msgstr "查找HBAC规则。" - -msgid "Search for HBAC services." -msgstr "查找HBAC服务。" - -msgid "Search for IPA locations." -msgstr "查找IPA位置。" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "查找IPA名称上下文失败，错误%d\n" - -msgid "Search for IPA servers." -msgstr "查找IPA服务器。" - -msgid "Search for IPA services." -msgstr "查找IPA服务。" - -msgid "Search for OTP token." -msgstr "查找OTP令牌。" - -msgid "Search for RADIUS proxy servers." -msgstr "查找RADIUS代理服务器。" - -msgid "Search for SELinux User Maps." -msgstr "查找SELinux用户映射。" - -msgid "Search for Sudo Command Groups." -msgstr "查找Sudo命令组。" - -msgid "Search for Sudo Commands." -msgstr "查找Sudo命令。" - -msgid "Search for Sudo Rule." -msgstr "查找Sudo规则。" - -msgid "Search for a netgroup." -msgstr "查找一个网络组。" - -msgid "Search for a self-service permission." -msgstr "查找一个自助服务权限。" - -msgid "Search for an Group ID override." -msgstr "查找一个组ID覆盖。" - -msgid "Search for an HBAC service group." -msgstr "查找一个HBAC服务组。" - -msgid "Search for an ID View." -msgstr "查找一个ID视图。" - -msgid "Search for an ID override." -msgstr "查找一个ID覆盖。" - -msgid "Search for an User ID override." -msgstr "查找一个用户ID覆盖。" - -msgid "Search for an automount key." -msgstr "查找一个自动挂载键。" - -msgid "Search for an automount location." -msgstr "查找一个自动挂载位置。" - -msgid "Search for an automount map." -msgstr "查找一个自动挂载映射。" - -msgid "Search for automember rules." -msgstr "查找自动成员规则。" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "查找含这些所有者%s的证书。" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "查找不含这些所有者%s的证书。" - -msgid "Search for classes." -msgstr "查找类。" - -msgid "Search for command outputs." -msgstr "查找命令输出。" - -msgid "Search for commands." -msgstr "查找命令。" - -msgid "Search for delegations." -msgstr "查找授权。" - -msgid "Search for entitlement accounts." -msgstr "查找权利账户。" - -msgid "Search for existing certificates." -msgstr "查找已存在的证书。" - -msgid "Search for forward zones only" -msgstr "仅查找正向区域" - -msgid "Search for group password policies." -msgstr "查找组密码策略。" - -msgid "Search for groups with these member groups." -msgstr "查找包含这些成员用户组的组。" - -msgid "Search for groups with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的组。" - -msgid "Search for groups with these member of groups." -msgstr "查找包含这些组成员的组。" - -msgid "Search for groups with these member of netgroups." -msgstr "查找包含这些网络组成员的组。" - -msgid "Search for groups with these member of roles." -msgstr "查找包含这些角色成员的组。" - -msgid "Search for groups with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的组。" - -msgid "Search for groups with these member users." -msgstr "查找包含这些成员用户的组。" - -msgid "Search for groups without these member groups." -msgstr "查找不包含这些成员用户组的组。" - -msgid "Search for groups without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的组。" - -msgid "Search for groups without these member of groups." -msgstr "查找不包含这些组成员的组。" - -msgid "Search for groups without these member of netgroups." -msgstr "查找不包含这些网络组成员的组。" - -msgid "Search for groups without these member of roles." -msgstr "查找不包含这些角色成员的组。" - -msgid "Search for groups without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的组。" - -msgid "Search for groups without these member users." -msgstr "查找不包含这些成员用户的组。" - -msgid "Search for groups." -msgstr "查找组。" - -msgid "Search for help topics." -msgstr "查找帮助主题。" - -msgid "Search for host groups with these member host groups." -msgstr "查找包含这些成员主机组的主机组。" - -msgid "Search for host groups with these member hosts." -msgstr "查找包含这些成员主机的主机组。" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的主机组。" - -msgid "Search for host groups with these member of host groups." -msgstr "查找包含这些主机组成员的主机组。" - -msgid "Search for host groups with these member of netgroups." -msgstr "查找包含这些网络组成员的主机组。" - -msgid "Search for host groups with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的主机组。" - -msgid "Search for host groups without these member host groups." -msgstr "查找不包含这些成员主机组的主机组。" - -msgid "Search for host groups without these member hosts." -msgstr "查找不包含这些成员主机的主机组。" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的主机组。" - -msgid "Search for host groups without these member of host groups." -msgstr "查找不包含这些主机组成员的主机组。" - -msgid "Search for host groups without these member of netgroups." -msgstr "查找不包含这些网络组成员的主机组。" - -msgid "Search for host groups without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的主机组。" - -msgid "Search for hostgroups." -msgstr "查找主机组。" - -msgid "Search for hosts with these enrolled by users." -msgstr "查找包含用户注册的主机。" - -msgid "Search for hosts with these managed by hosts." -msgstr "查找由该主机管理的主机。" - -msgid "Search for hosts with these managing hosts." -msgstr "查找管理该主机的主机。" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的主机。" - -msgid "Search for hosts with these member of host groups." -msgstr "查找包含这些主机组成员的主机。" - -msgid "Search for hosts with these member of netgroups." -msgstr "查找包含这些网络组成员的主机。" - -msgid "Search for hosts with these member of roles." -msgstr "查找包含这些角色成员的主机。" - -msgid "Search for hosts with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的主机。" - -msgid "Search for hosts without these enrolled by users." -msgstr "查找不包含用户注册的主机。" - -msgid "Search for hosts without these managed by hosts." -msgstr "查找不由该主机管理的主机。" - -msgid "Search for hosts without these managing hosts." -msgstr "查找不管理该主机的主机。" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的主机。" - -msgid "Search for hosts without these member of host groups." -msgstr "查找不包含这些主机组成员的主机。" - -msgid "Search for hosts without these member of netgroups." -msgstr "查找不包含这些网络组成员的主机。" - -msgid "Search for hosts without these member of roles." -msgstr "查找不包含这些角色成员的主机。" - -msgid "Search for hosts without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的主机。" - -msgid "Search for hosts." -msgstr "查找主机。" - -msgid "Search for netgroups with these member groups." -msgstr "查找包含这些成员用户组的网络组。" - -msgid "Search for netgroups with these member host groups." -msgstr "查找包含这些成员主机组的网络组。" - -msgid "Search for netgroups with these member hosts." -msgstr "查找包含这些成员主机的网络组。" - -msgid "Search for netgroups with these member netgroups." -msgstr "查找包含这些成员网络组的网络组。" - -msgid "Search for netgroups with these member of netgroups." -msgstr "查找包含这些网络组成员的网络组。" - -msgid "Search for netgroups with these member users." -msgstr "查找包含这些成员用户的网络组。" - -msgid "Search for netgroups without these member groups." -msgstr "查找不包含这些成员用户组的网络组。" - -msgid "Search for netgroups without these member host groups." -msgstr "查找不包含这些成员主机组的网络组。" - -msgid "Search for netgroups without these member hosts." -msgstr "查找不包含这些成员主机的网络组。" - -msgid "Search for netgroups without these member netgroups." -msgstr "查找不包含这些成员网络组的网络组。" - -msgid "Search for netgroups without these member of netgroups." -msgstr "查找不包含这些网络组成员的网络组。" - -msgid "Search for netgroups without these member users." -msgstr "查找不包含这些成员用户的网络组。" - -msgid "Search for permissions." -msgstr "查找权限。" - -msgid "Search for privileges." -msgstr "查找特权。" - -msgid "Search for ranges." -msgstr "查找范围。" - -msgid "Search for roles." -msgstr "查找角色。" - -msgid "Search for servers with these managed suffixes." -msgstr "查找包含这些管理后缀的服务器。" - -msgid "Search for servers without these managed suffixes." -msgstr "查找不包含这些管理后缀的服务器。" - -msgid "Search for service delegation target." -msgstr "查找服务授权目标。" - -msgid "Search for service delegations rule." -msgstr "查找服务授权规则。" - -msgid "Search for services with these managed by hosts." -msgstr "查找那些由主机管理的服务。" - -msgid "Search for services without these managed by hosts." -msgstr "查找那些不由主机管理的服务。" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的计划用户。" - -msgid "Search for stage users with these member of groups." -msgstr "查找包含这些组成员的计划用户。" - -msgid "Search for stage users with these member of netgroups." -msgstr "查找包含这些网络组成员的计划用户。" - -msgid "Search for stage users with these member of roles." -msgstr "查找包含这些角色成员的计划用户。" - -msgid "Search for stage users with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的计划用户。" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的计划用户。" - -msgid "Search for stage users without these member of groups." -msgstr "查找不包含这些组成员的计划用户。" - -msgid "Search for stage users without these member of netgroups." -msgstr "查找不包含这些网络组成员的计划用户。" - -msgid "Search for stage users without these member of roles." -msgstr "查找不包含这些角色成员的计划用户。" - -msgid "Search for stage users without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的计划用户。" - -msgid "Search for stage users." -msgstr "查找计划用户。" - -msgid "Search for topology segments." -msgstr "查找拓扑段。" - -msgid "Search for topology suffixes." -msgstr "查找拓扑后缀。" - -msgid "Search for trusts." -msgstr "查找信任。" - -msgid "Search for users with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的用户。" - -msgid "Search for users with these member of groups." -msgstr "查找包含这些组成员的用户。" - -msgid "Search for users with these member of netgroups." -msgstr "查找包含这些网络组成员的用户。" - -msgid "Search for users with these member of roles." -msgstr "查找包含这些角色成员的用户。" - -msgid "Search for users with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的用户。" - -msgid "Search for users without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的用户。" - -msgid "Search for users without these member of groups." -msgstr "查找不包含这些组成员的用户。" - -msgid "Search for users without these member of netgroups." -msgstr "查找不包含这些网络组成员的用户。" - -msgid "Search for users without these member of roles." -msgstr "查找不包含这些角色成员的用户。" - -msgid "Search for users without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的用户。" - -msgid "Search for users." -msgstr "查找用户。" - -msgid "Search for vaults." -msgstr "查找库。" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "查找结果被截断：%(reason)s" - -msgid "Search scope" -msgstr "范围查找" - -msgid "Search size limit" -msgstr "搜索大小限制" - -msgid "Search time limit" -msgstr "搜索时间限制" - -msgid "Second Code" -msgstr "第二个码" - -msgid "Second OTP" -msgstr "第二个OTP" - -msgid "Secondary RID base" -msgstr "次要的RID基" - -msgid "Seconds Latitude" -msgstr "秒纬度" - -msgid "Seconds Longitude" -msgstr "秒经度" - -msgid "Secret" -msgstr "密码" - -msgid "Security Identifier" -msgstr "安全标识符" - -msgid "Security Identifiers (SIDs)" -msgstr "安全标识符（SIDs）" - -msgid "Segment details" -msgstr "部分细节" - -msgid "Segment name" -msgstr "段名称" - -msgid "Select All" -msgstr "选择全部" - -msgid "Select entries to be removed." -msgstr "选择要删除的条目。" - -msgid "Selector" -msgstr "选择器" - -msgid "Self" -msgstr "自己" - -msgid "Self Service Permission" -msgstr "自助服务权限" - -msgid "Self Service Permissions" -msgstr "自助服务权限" - -msgid "Self-service name" -msgstr "自助服务名" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "%(label)s语义已改变了。%(current_behavior)s %(hint)s" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "分号分割的IP地址或网络列表允许被查询" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "分号分割的IP地址或网络列表允许被传输" - -msgid "Sensitive" -msgstr "敏感的" - -msgid "Serial" -msgstr "序列号" - -msgid "Serial Number" -msgstr "序列号" - -msgid "Serial Number (hex)" -msgstr "序列号（十六进制）" - -msgid "Serial number" -msgstr "序列号" - -msgid "Serial number (hex)" -msgstr "序列号（十六进制）" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "十进制序列号或者以0x为前缀的十六进制序列号" - -msgid "Server" -msgstr "服务器" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "服务器%(srv)s不能连接服务器： %(replicas)s" - -msgid "Server Name" -msgstr "服务器名" - -msgid "Server Role" -msgstr "服务器角色" - -msgid "Server Roles" -msgstr "服务器角色" - -msgid "Server has already been deleted" -msgstr "服务器已被删除" - -msgid "Server location" -msgstr "服务器位置" - -msgid "Server name" -msgstr "服务名称" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "服务器名没有提供或不可用\n" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "服务器删除失败：%(reason)s。" - -msgid "Server will check DNS forwarder(s)." -msgstr "服务器将检查DNS转发器。" - -msgid "Servers" -msgstr "服务器" - -msgid "Servers details:" -msgstr "服务器详细信息：" - -msgid "Servers in location" -msgstr "本地服务器" - -msgid "Servers that belongs to the IPA location" -msgstr "属于IPA位置的服务器" - -msgid "Service" -msgstr "服务" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "应用改变的配置需要在IPA服务器%(server)s上重启服务%(service)s。" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "在Kerberos数据库中没有找到服务'%(service)s'" - -msgid "Service Certificate" -msgstr "服务证书" - -msgid "Service Groups" -msgstr "服务组" - -msgid "Service Options" -msgstr "服务选项" - -msgid "Service Settings" -msgstr "服务设置" - -msgid "Service category" -msgstr "服务类别" - -msgid "Service category the ACL applies to" -msgstr "ACL适用于服务类别" - -msgid "Service category the rule applies to" -msgstr "规则应用的服务类别" - -msgid "Service delegation rule" -msgstr "服务授权规则" - -msgid "Service delegation rules" -msgstr "服务授权规则" - -msgid "Service delegation target" -msgstr "服务授权目标" - -msgid "Service delegation targets" -msgstr "服务授权目标" - -msgid "Service group name" -msgstr "服务组名称" - -msgid "Service name" -msgstr "服务名" - -msgid "Service name of the service vault" -msgstr "服务库的服务名" - -msgid "Service principal" -msgstr "服务主体" - -msgid "Service principal alias" -msgstr "服务主体别名" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "该证书服务主体（例如：HTTP/test.example.com）" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "服务主体不是这种格式：服务名/完全限定的主机名：%(reason)s" - -msgid "Service principal is required" -msgstr "需要服务主体" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "服务，共享的和用户选项不能被同时指定" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "服务，共享的和用户选项不能被同时指定" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "服务，共享的和用户选项不能被同时指定" - -msgid "Services" -msgstr "服务" - -msgid "Session error" -msgstr "会话错误" - -msgid "Session timeout" -msgstr "会话超时" - -msgid "Set" -msgstr "设置" - -msgid "Set Domain Level" -msgstr "设置域级别" - -msgid "Set OTP" -msgstr "设置OTP" - -msgid "Set SSH key" -msgstr "设置SSH公钥" - -msgid "Set a user's password." -msgstr "设置一个用户的密码。" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" -"一个属性设置为一个名称/值对。格式是属性=值。对于多值属性，命令替换已存在的" -"值。" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "对所有不匹配的条目设置默认（回退）组。" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "已为自动成员\"%(value)s\"设置默认（回滚）组" - -msgid "Settings" -msgstr "设置" - -msgid "Shared vault" -msgstr "共享库" - -msgid "Show" -msgstr "显示" - -msgid "Show IPA server." -msgstr "显示IPA服务器。" - -msgid "Show QR code" -msgstr "显示二维码" - -msgid "Show Results" -msgstr "显示结果" - -msgid "Show all loaded plugins." -msgstr "显示所有加载的插件。" - -msgid "Show configuration uri" -msgstr "显示配置uri" - -msgid "Show details" -msgstr "显示细节" - -msgid "Show environment variables." -msgstr "显示环境变量。" - -msgid "Show global trust configuration." -msgstr "显示全局信任配置。" - -msgid "Show managed suffix." -msgstr "显示已管理的后缀。" - -msgid "Show role status on a server" -msgstr "显示服务器角色状态" - -msgid "Show the current OTP configuration." -msgstr "显示当前OTP配置。" - -msgid "Show the current configuration." -msgstr "显示当前配置。" - -msgid "Show the current global DNS configuration." -msgstr "显示当前全局DNS配置。" - -msgid "Show the list of permitted encryption types and exit" -msgstr "显示允许的加密类型列表并退出" - -msgid "Show vault configuration." -msgstr "显示库配置。" - -msgid "Show/Set key" -msgstr "显示/设置密钥" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "从${start}到${end}显示${total}条目。" - -msgid "Signature" -msgstr "签名" - -msgid "Signature Expiration" -msgstr "签名过期" - -msgid "Signature Inception" -msgstr "签名开端" - -msgid "Signer's Name" -msgstr "签名者的名字" - -msgid "Simple bind failed\n" -msgstr "简单绑定失败\n" - -msgid "Simulate use of Host-based access controls" -msgstr "模拟使用基于主机访问控制" - -msgid "Size" -msgstr "大小" - -msgid "Size Limit" -msgstr "大小限制" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "数据大小超出限制。目前库数据大小限制为 %(limit)d B" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "信任域ID范围的大小" - -msgid "Skip DNS check" -msgstr "忽略DNS检查" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "不检查最后一个CA主服务器或DNS服务器是否被删除了" - -msgid "Skip overlap check" -msgstr "忽略覆盖检查" - -#, python-format -msgid "Skipped %(key)s" -msgstr "已忽略 %(key)s" - -#, python-format -msgid "Skipped %(map)s" -msgstr "已忽略 %(map)s" - -msgid "Some entries were not deleted" -msgstr "一些条目没有被删除" - -msgid "Some operations failed." -msgstr "一些操作失败。" - -msgid "Source Host Groups" -msgstr "源主机组" - -msgid "Source Hosts" -msgstr "源主机" - -msgid "Source host" -msgstr "源主机" - -msgid "Source host category" -msgstr "源主机类别" - -msgid "Source host category the rule applies to" -msgstr "规则应用的源主机类别" - -msgid "Specified CAs" -msgstr "指定的CAs" - -msgid "Specified Commands and Groups" -msgstr "指定的命令和命令组" - -msgid "Specified Groups" -msgstr "指定的组" - -msgid "Specified Hosts and Groups" -msgstr "指定的主机和主机组" - -msgid "Specified Profiles" -msgstr "指定的配置文件" - -msgid "Specified Services and Groups" -msgstr "指定的服务和服务组" - -msgid "Specified Users and Groups" -msgstr "指定的用户和用户组" - -msgid "Specifies where to store keytab information." -msgstr "指定存储keytab信息的位置。" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "指定外部的${entity}" - -msgid "Stage" -msgstr "呈现" - -msgid "Stage User" -msgstr "计划用户" - -msgid "Stage Users" -msgstr "计划用户" - -#, python-format -msgid "Stage user %s activated" -msgstr "计划用户%s已激活" - -msgid "Stage users" -msgstr "计划用户" - -msgid "Standard Record Types" -msgstr "标准记录类型" - -msgid "State/Province" -msgstr "州/省" - -msgid "Status" -msgstr "状态" - -msgid "Status of the role" -msgstr "角色状态" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "停止副本更新段：要求\"%(pkey)s\"。" - -msgid "Store issued certificates" -msgstr "存储已发布证书" - -msgid "Street address" -msgstr "街道地址" - -msgid "Structured" -msgstr "有条理的" - -msgid "Subject" -msgstr "主题" - -msgid "Subject DN" -msgstr "证书持有者名字" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "主题DN已被CA'%s'使用" - -msgid "Subject DNS name" -msgstr "主题DNS名" - -msgid "Subject Distinguished Name" -msgstr "主题的专有名称" - -msgid "Subject EDI Party name" -msgstr "主题EDI参与方名称" - -msgid "Subject IP Address" -msgstr "主题IP地址" - -msgid "Subject Kerberos principal name" -msgstr "主题Kerberos主体名" - -msgid "Subject OID" -msgstr "主题OID" - -msgid "Subject Other Name" -msgstr "主题别名" - -msgid "Subject UPN" -msgstr "主题UPN" - -msgid "Subject URI" -msgstr "主题URI" - -msgid "Subject X.400 address" -msgstr "主题X.400地址" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "主题alt名称类型%s被禁止" - -msgid "Subject directory name" -msgstr "主题目录名" - -msgid "Subject email address" -msgstr "主题电子邮件地址" - -msgid "Submit a certificate signing request." -msgstr "提交一个证书签名请求。" - -msgid "Subtree" -msgstr "子树" - -msgid "Subtype" -msgstr "子类型" - -msgid "Success" -msgstr "成功" - -msgid "Sudo Allow Command Groups" -msgstr "Sudo运行命令组" - -msgid "Sudo Allow Commands" -msgstr "Sudo允许命令" - -msgid "Sudo Command" -msgstr "Sudo命令" - -msgid "Sudo Command Group" -msgstr "Sudo命令组" - -msgid "Sudo Command Groups" -msgstr "Sudo命令组" - -msgid "Sudo Commands" -msgstr "Sudo命令" - -msgid "Sudo Deny Command Groups" -msgstr "Sudo阻止命令组" - -msgid "Sudo Deny Commands" -msgstr "Sudo阻止命令" - -msgid "Sudo Option" -msgstr "Sudo选项" - -msgid "Sudo Rule" -msgstr "Sudo规则" - -msgid "Sudo Rules" -msgstr "Sudo规则" - -msgid "Sudo order" -msgstr "Sudo命令" - -msgid "Suffix name" -msgstr "后缀名称" - -msgid "Superseded" -msgstr "作废的" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "支持的加密类型：\n" - -msgid "Suppress processing of membership attributes." -msgstr "抑制成员属性的处理。" - -msgid "Sync OTP Token" -msgstr "同步OTP令牌" - -msgid "Synchronize an OTP token." -msgstr "同步一个OTP令牌。" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "语法错误：%(error)s" - -msgid "System DNS records updated" -msgstr "系统DNS记录已更新" - -msgid "TA record" -msgstr "TA记录" - -msgid "TKEY record" -msgstr "TKEY记录" - -msgid "TLSA Certificate Association Data" -msgstr "TLSA证书关联数据" - -msgid "TLSA Certificate Usage" -msgstr "TLSA证书用途" - -msgid "TLSA Matching Type" -msgstr "TLSA匹配类型" - -msgid "TLSA Selector" -msgstr "TLSA选择器" - -msgid "TLSA record" -msgstr "TLSA记录" - -msgid "TOTP Synchronization Window" -msgstr "TOTP同步窗口" - -msgid "TOTP authentication Window" -msgstr "TOTP认证窗口" - -msgid "TOTP authentication time variance (seconds)" -msgstr "TOTP认证时间差异（秒）" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "TOTP同步时间差异（秒）" - -msgid "TOTP token / IPA server time difference" -msgstr "TOTP令牌/IPA服务器时差" - -msgid "TSIG record" -msgstr "TSIG记录" - -msgid "TXT Text Data" -msgstr "TXT文本数据" - -msgid "TXT record" -msgstr "TXT记录" - -msgid "Target" -msgstr "目标" - -msgid "Target DN" -msgstr "目标DN" - -msgid "Target DN subtree" -msgstr "目标DN子树" - -msgid "Target Uniform Resource Identifier" -msgstr "目标统一资源标识符" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "目标统一资源标识符依据RFC 3986" - -msgid "Target group" -msgstr "目标组" - -msgid "Target host" -msgstr "目标主机" - -msgid "Target members of a group" -msgstr "一个组的目标成员" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "组目标成员（设置隶属于目标过滤器）" - -msgid "Target reverse zone not found." -msgstr "目标反向区域没有找到。" - -msgid "Target your own entry (self)" -msgstr "设定你自己的条目" - -msgid "Task DN" -msgstr "任务DN" - -#, python-format -msgid "Task DN = '%s'" -msgstr "任务DN = '%s'" - -msgid "Telephone Number" -msgstr "电话号码" - -msgid "Test the ACI syntax but don't write anything" -msgstr "测试ACI语法但不写任何东西" - -msgid "Text Data" -msgstr "文本数据" - -msgid "Text does not match field pattern" -msgstr "文本不匹配字段模式" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"--domain选项不能和--add-domain或--del-domain选项一起使用。使用--domain来显示" -"地指定整个realm域列表，添加/删除个别域，使用--add-domain/--del-domain。" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "ACI权限%(name)s在%(dn)s中没有找到" - -msgid "The IPA realm" -msgstr "IPA域" - #, python-format msgid "" "The _kerberos TXT record from domain %(domain)s could not be created " @@ -9984,45 +11795,870 @@ msgstr "" "不能移除域%(domain)s中的_kerberos TXT记录(%(error)s)。可能是因为该区域没有被" "IPA管理。请手动移除该记录。" +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "没有安装DNSSEC密钥主机。DNSSEC区域签名不会工作直到安装DNSSEC密钥主机。" + #, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "信息为%(info)s的自动挂载键%(key)s不存在" +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"相对记录名'%(record)s'将区域名'%(zone)s'当作一个后缀，导致FQDN '%(fqdn)s'。这" +"通常是由于在名称规范后缺少一个点号引起的错误。" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s'已被弃用。%(additional_info)s" + +#, python-format +msgid "%(line)s" +msgstr "" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "查找结果被截断：%(reason)s" + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "你对域%(domain)s的信任已中断。请再次运行'ipa trust-add'来重新创建它。" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "主机%(host)s的DNS记录不能被移除。(%(reason)s)" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "更新系统记录'%(record)s'失败：%(error)s" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "IPA没有管理区域%(zone)s，请手动在你的DNS服务器上添加记录" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "自动更新DNS系统记录失败。请手动重新运行更新系统记录来获取缺少的记录。" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "应用改变的配置需要在IPA服务器%(server)s上重启服务%(service)s。" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"在IPA位置%(location)s没有DNS服务器。没有DNS服务器位置是不会按预期工作的。" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" + +#, fuzzy, python-format +#| msgid "The character %(char)r is not allowed." +msgid "The certificate for %(ca)s is not available on this server." +msgstr "字符%(char)r是不允许的。" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d个变量" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "已加载%(count)d个插件" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "再次输入 %(label)s进行校验: " + +msgid "Passwords do not match!" +msgstr "密码不匹配！" + +msgid "No matching entries found" +msgstr "发现了不匹配的条目" + +msgid "Topic or Command" +msgstr "主题或命令" + +msgid "The topic or command name." +msgstr "主题或命令名。" + +msgid "Topic commands:" +msgstr "主题命令：" + +msgid "To get command help, use:" +msgstr "获取命令帮助，使用：" + +msgid " ipa --help" +msgstr "" + +msgid "Command name" +msgstr "命令名" + +msgid "Positional arguments" +msgstr "位置参数" + +#, python-format +msgid "Same as --%s" +msgstr "相同于 --%s" + +msgid "Deprecated options" +msgstr "已弃用的选项" + +msgid "No file to read" +msgstr "无文件可读" + +msgid "A dictionary representing an LDAP entry" +msgstr "一个字典代表一个LDAP条目" + +msgid "A list of LDAP entries" +msgstr "LDAP条目列表" + +msgid "All commands should at least have a result" +msgstr "所有命令至少有一个返回值" + +msgid "Results are truncated, try a more specific search" +msgstr "结果被截断，请尝试更明确的搜索" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "未知的选项：%(option)s" + +msgid "Client version. Used to determine if server will accept request." +msgstr "客户端版本。用来确定是否服务器接受请求。" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "%(cver)s客户端和在'%(server)s'的%(sver)s服务器不兼容" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s上未知的错误%(code)d：%(error)s" + +msgid "an internal error has occurred" +msgstr "发生了内部错误" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "服务器 '%(server)s' 已经发生了一次内部错误" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "未知的命令'%(name)s'" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "服务器'%(server)s'错误：%(error)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "不能连接到'%(uri)s'：%(error)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "无效的JSON-RPC请求: %(error)s" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "XML-RPC传输数据整理错误：%(error)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "丢失或者无效的 HTTP Referer, %(referer)s" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" +"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos 错误： %(major)s/%(minor)s" + +msgid "did not receive Kerberos credentials" +msgstr "没有收到Kerberos凭证" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "在Kerberos数据库中没有找到服务'%(service)s'" + +msgid "No credentials cache found" +msgstr "没有找到凭证缓存" + +msgid "Ticket expired" +msgstr "票据过期" + +msgid "Credentials cache permissions incorrect" +msgstr "凭证缓存权限不正确" + +msgid "Bad format in credentials cache" +msgstr "凭证缓存格式错误" + +msgid "Cannot resolve KDC for requested realm" +msgstr "请求域中不能解析KDC" + +msgid "Session error" +msgstr "会话错误" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "不能认证主体%(principal)s：%(message)s" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "访问受限：%(info)s" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "命令'%(name)s'没有参数" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "命令'%(name)s'最多能带%(count)d个参数" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "覆盖参数和选项：%(names)s" + +#, python-format +msgid "'%(name)s' is required" +msgstr "需要'%(name)s'" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "无效的'%(name)s'：%(error)s" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "api没有这样的命名空间：'%(name)s'" + +msgid "Passwords do not match" +msgstr "密码不匹配" + +msgid "Command not implemented" +msgstr "命令没有实现" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "客户端没有配置。运行ipa-client-install。" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "不能交互式地获取%(name)s" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "命令'%(name)s'已被弃用" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "域'%(domain)s'不是一个森林'%(forest)s'的根域" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +msgid "This entry already exists" +msgstr "条目已经存在" + +msgid "You must enroll a host in order to create a host service" +msgstr "要创建一个主机服务，你必须注册一个主机" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "服务主体不是这种格式：服务名/完全限定的主机名：%(reason)s" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "主体域在该IPA服务器域中不匹配" + +msgid "This command requires root access" +msgstr "该命令需要root访问权限" + +msgid "This is already a posix group" +msgstr "这已经是一个posix组" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "主体不是这种格式user@REALM：'%(principal)s'" + +msgid "This entry is already enabled" +msgstr "条目已启用" + +msgid "This entry is already disabled" +msgstr "条目已禁用" + +msgid "This entry cannot be enabled or disabled" +msgstr "条目不能被启用或禁用" + +msgid "This entry is not a member" +msgstr "条目不是一个成员" + +msgid "A group may not be a member of itself" +msgstr "一个组不能是自己的成员" + +msgid "This entry is already a member" +msgstr "条目已经时一个成员" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64解码失败: %(reason)s" + +msgid "A group may not be added as a member of itself" +msgstr "一个组不能是自己的成员" + +msgid "The default users group cannot be removed" +msgstr "默认的用户组不成被删除" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "删除一个管理组时不允许的。它必须先分离出来。" + +msgid "A managed group cannot have a password policy." +msgstr "管理组不能有密码策略。" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s'没有证书。" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "不能创建私有组。组'%(group)s'已存在。" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "遇到的问题是什么时候验证所有成员是%(verb)s：%(exc)s" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s没有包含'%(value)s'" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "查找条件不够具体。预期1和找到%(found)d。" + +msgid "This group already allows external members" +msgstr "该组已允许外部成员" + +msgid "This group cannot be posix because it is external" +msgstr "该组不是posix因为它是外部的" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "这已经是一个posix组了，并且不能转换为外部的" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "服务器删除失败：%(reason)s。" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s不支持主体 %(principal_type)s" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "请求失败状态%(status)s：%(reason)s" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "'%(attr)s'已包含一个或多个值" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "没有命令也没有帮助主题'%(topic)s'" + +msgid "change collided with another change" +msgstr "修改冲突" + +msgid "no modifications to be performed" +msgstr "没有修改" + +#, fuzzy, python-format +#| msgid "%(info)s" +msgid "%(desc)s: %(info)s" +msgstr "%(info)s" + +msgid "limits exceeded for this query" +msgstr "超出该查询的限制" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +msgid "modifying primary key is not allowed" +msgstr "修改主键是不允许的" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s：仅允许一个值。" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s：无效的语法。" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "不正确的查询筛选器%(info)s" + +msgid "Not allowed on non-leaf entry" +msgstr "在非叶子条目上是不允许的" + +msgid "LDAP timeout" +msgstr "LDAP超时" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "%(task)s LDAP任务超时，任务DN：'%(task_dn)s'" + +msgid "Configured time limit exceeded" +msgstr "配置时间超出限制" + +msgid "Configured size limit exceeded" +msgstr "配置大小超出限制" + +msgid "Configured administrative server limit exceeded" +msgstr "配置管理服务器超出限制" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "证书操作没有完成：%(error)s" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "证书格式错误：%(error)s" + +msgid "Already registered" +msgstr "已注册" + +msgid "Not registered yet" +msgstr "尚未注册" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "%(key)s不能被删除因为%(label)s %(dependent)s需要它" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "%(key)s不能被删除或禁用因为它是%(label)s %(container)s的最后一个成员" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s不能被删除/修改：%(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "%(name)s证书无效" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "模式是最新的（FP '%(fingerprint)s', TTL %(ttl)s s）" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "主机'%(hostname)s'没有相配的DNS A/AAAA记录" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "DNS检测失败：预期的{%(expected)s}，得到的{%(got)s}" + +#, fuzzy, python-format +#| msgid "Service Options" +msgid "%(exception)s" +msgstr "服务选项" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" + +msgid "incorrect type" +msgstr "不正确的类型" + +msgid "Only one value is allowed" +msgstr "只允许一个值" + +msgid "this option is deprecated" +msgstr "该选项已被弃用" + +msgid "must be True or False" +msgstr "必须是True或False" + +msgid "must be an integer" +msgstr "必须是一个整数" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "必须至少%(minvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "最多%(maxvalue)d" + +msgid "must be a decimal number" +msgstr "必须是一个十进制数" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "必须至少%(minvalue)s" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "最多%(maxvalue)s" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "数字类'%(cls)s'不在允许的数字类列表中：%(allowed)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "必须匹配模式\"%(pattern)s\"" + +msgid "must be binary data" +msgstr "必须是二进制数据" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "必须至少%(minlength)d字节" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "最多%(maxlength)d字节" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "必须恰好是%(length)d字节" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "must be a certificate" +msgstr "撤销证书。" + +#, fuzzy +#| msgid "Submit a certificate signing request." +msgid "must be a certificate signing request" +msgstr "提交一个证书签名请求。" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "解码证书签名请求失败：%s" + +msgid "must be Unicode text" +msgstr "必须是Unicode文本" + +msgid "Leading and trailing spaces are not allowed" +msgstr "开头和结尾空格是不允许的" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "必须至少%(minlength)d字符" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "最多%(maxlength)d字符" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "必须恰好是%(length)d字符" #, python-format msgid "The character %(char)r is not allowed." msgstr "字符%(char)r是不允许的。" -msgid "The default users group cannot be removed" -msgstr "默认的用户组不成被删除" - -msgid "The deny type has been deprecated." -msgstr "阻止类型已被弃用。" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "目标主机的域名或是'.'如果服务在该域中明显不存在" +#, python-format +msgid "must be '%(value)s'" +msgstr "必须是'%(value)s'" #, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "下面的域不属于该realm：%(domains)s" +msgid "must be one of %(values)s" +msgstr "必须是%(values)s中的一个" -msgid "The group doesn't exist" -msgstr "组不存在" +msgid "must be datetime value" +msgstr "必须是时间值" -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "主机名必须是完全限制的：%s\n" +msgid "does not match any of accepted formats: " +msgstr "不匹配任何可接受的格式：" -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "主机名必须不能是：%s\n" +msgid "incomplete time value" +msgstr "不完整的时间值" -msgid "The hostname or IP (with or without port)" -msgstr "主机名或IP（有或没有端口）" +msgid "must be DNS name" +msgstr "必须是DNS名" -msgid "The hostname this reverse record points to" -msgstr "反向记录指向的主机名" +msgid "must be absolute" +msgstr "必须是绝对的" + +msgid "must be relative" +msgstr "必须是相对的" + +msgid "must be dictionary" +msgstr "必须是字典" + +msgid "must be Kerberos principal" +msgstr "必须是Kerberos主体" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "有缺陷的主体：'%(value)s'" + +msgid "Service principal is required" +msgstr "需要服务主体" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s：文件没找到" + +#, fuzzy, python-brace-format +#| msgid "Unable to parse principal\n" +msgid "Unable to parse option {item}" +msgstr "服务解析主体\n" + +msgid "any of the configured servers" +msgstr "任何已配置的服务器" + +#, fuzzy +#| msgid "The number of times to retry authentication" +msgid "Exceeded number of tries to forward a request." +msgstr "重试认证的次数" + +msgid "Filename is empty" +msgstr "文件名为空" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "权限阻止：%(file)s" + +msgid "empty DNS label" +msgstr "空的DNS标签" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS标签不能长于63个字符" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "只允许字母，数字和%(chars)s。DNS标签不能以%(chars2)s开始或结束" + +#, fuzzy +#| msgid "Host is not supported" +msgid "single label {}s are not supported" +msgstr "主机不被支持" + +msgid "too many '@' characters" +msgstr "太多'@'字符" + +#, fuzzy +#| msgid "DNS label cannot be longer that 63 characters" +msgid "cannot be longer that {} characters" +msgstr "DNS标签不能长于63个字符" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "主机名包含空的标签（连续的点）" + +msgid "not fully qualified" +msgstr "没有完全限制" + +msgid "invalid SSH public key" +msgstr "无效的SSH公钥" + +msgid "options are not allowed" +msgstr "选项是不允许的" + +msgid "invalid hostmask" +msgstr "无效的hostmask" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "查询'%(owner)s %(rtype)s'：%(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "用EDNS0查询'%(owner)s %(rtype)s'：%(error)s" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "查询答案'%(owner)s %(rtype)s'缺少DNSSEC签名（没有RRSIG数据）" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "记录'%(owner)s %(rtype)s'DNSSEC验证服务器 %(ip)s失败" + +msgid "invalid escape code in domain name" +msgstr "无效的域名转换代码" + +msgid "domain name cannot be longer than 255 characters" +msgstr "域名不能长于255个字符" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS标签不能长于63个字符" + +msgid "invalid domain name" +msgstr "无效的域名" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "域名'%(domain)s'应该规范化：%(normalized)s" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "无效的域名：%s" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "无效的IP地址版本(是%(value)d，必须是%(required_value)d)!" + +msgid "invalid IP address format" +msgstr "无效的IP地址格式" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s不是一个有效的端口" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "必须存在至少一个值等同规范主体名称" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "域或UPN后缀覆盖信任域命名空间" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "检索CA证书链失败：%s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "请求失败HTTP状态%d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "检索CA状态失败：%s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "检索CA状态失败%d" + +#, python-format +msgid "objectclass %s not found" +msgstr "对象类%s没找到" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "不能与CMS通信（状态%d）" + +#, fuzzy, python-format +#| msgid "Replication agreement enabled" +msgid "Replication agreement for %(hostname)s not found" +msgstr "启用复制协议" + +msgid "Failed to authenticate to CA REST API" +msgstr "CA REST API认证失败" + +msgid "automount location" +msgstr "自动挂载位置" + +msgid "automount locations" +msgstr "自动挂载位置" + +msgid "Automount Locations" +msgstr "自动挂载位置" + +msgid "Automount Location" +msgstr "自动挂载位置" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "已添加自动挂载位置\"%(value)s\"" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "已删除自动挂载位置\"%(value)s\"" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "已匹配%(count)d个自动挂载位置" + +msgid "automount map" +msgstr "自动挂载映射" + +msgid "automount maps" +msgstr "自动挂载映射" + +msgid "Automount Maps" +msgstr "自动挂载映射" + +msgid "Automount Map" +msgstr "自动挂载映射" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "已添加自动挂载映射\"%(value)s\"" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "已删除自动挂载映射\"%(value)s\"" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "已修改自动挂载映射\"%(value)s\"" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "已匹配%(count)d个自动挂载映射" + +msgid "Automount key object." +msgstr "自动挂载键对象。" + +msgid "automount key" +msgstr "自动挂载键" + +msgid "automount keys" +msgstr "自动挂载键" + +msgid "Automount Keys" +msgstr "自动挂载键" + +msgid "Automount Key" +msgstr "自动挂载键" #, python-format msgid "" @@ -10031,25 +12667,3564 @@ msgid "" msgstr "“键，信息”对必须是唯一的。信息为%(info)s的键名%(key)s已存在" #, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "这种区域的最常见类型是： %s\n" +msgid "key named %(key)s already exists" +msgstr "键名%(key)s已存在" -msgid "The number of times to retry authentication" -msgstr "重试认证的次数" +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "信息为%(info)s的自动挂载键%(key)s不存在" -msgid "The principal for this request doesn't exist." -msgstr "该请求的主题不存在。" +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "找到不止一个拥有键%(key)s的条目，使用--info来选择指定条目。" -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "为主体获取一个keytab（例如：ftp/ftp.example.com@EXAMPLE.COM）" +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "已添加自动挂载键\"%(value)s\"" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "已添加自动间接映射\"%(value)s\"" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "挂载点是相对于父映射的，不能以/开始" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "已删除自动挂载键\"%(value)s\"" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "已修改自动挂载键\"%(value)s\"" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "已匹配%(count)d个自动挂载键" msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "从keytab中待删除的主体（例如：ftp/ftp.example.com@EXAMPLE.COM）" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" + +msgid "CA is not configured" +msgstr "CA没有配置" + +msgid "invalid Profile ID" +msgstr "无效的配置文件ID" + +msgid "Certificate Profile" +msgstr "证书配置文件" + +msgid "Certificate Profiles" +msgstr "证书配置文件" + +msgid "Profile configuration" +msgstr "配置文件配置" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "已匹配%(count)d个配置文件" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "已导入配置文件\"%(value)s\"" + +#, fuzzy, python-format +#| msgid "Input data specified multiple times" +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "多次指定输入数据" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "配置文件ID '%(cli_value)s'与配置文件数据'%(file_value)s'不匹配" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "已删除配置文件\"%(value)s\"" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "预定义的配置文件'%(profile_id)s'不能被删除" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "已修改配置文件\"%(value)s\"" + +msgid "Certificate profiles cannot be renamed" +msgstr "证书配置文件不能被重命名" + +#, fuzzy +#| msgid "" +#| "Insufficient privilege to create a certificate with subject alt name '%s'." +msgid "Insufficient privilege to modify a certificate profile." +msgstr "没有权限创建主题alt名为'%s'的证书。" msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "主体域在该IPA服务器域中不匹配" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" +"\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" + +msgid "CA ACL" +msgstr "" + +msgid "CA ACLs" +msgstr "" + +msgid "CA category" +msgstr "CA类别" + +msgid "CA category the ACL applies to" +msgstr "ACL应用的CA类别" + +msgid "CAs" +msgstr "" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "已添加CA ACL\"%(value)s\"" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "已删除CA ACL\"%(value)s\"" + +msgid "default CA ACL can be only disabled" +msgstr "默认的CA ACL只可以被禁用" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "已修改CA ACL\"%(value)s\"" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "CA类别不能设置为all'，虽然有允许CAs" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "配置文件类别不能设置为all'，虽然有允许配置文件" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "用户类别不能设置为all'，虽然有允许用户" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "主机类别不能设置为all'，虽然有允许主机" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "服务类别不能设置为all'，虽然有允许服务" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "已匹配%(count)d个CA ACL" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "已启用CA ACL\"%(value)s\"" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "已禁用CA ACL\"%(value)s\"" + +#, python-format +msgid "%i user or group added." +msgstr "%i用户或组已添加。" + +#, python-format +msgid "%i users or groups added." +msgstr "%i用户或用户组已添加。" + +msgid "users cannot be added when user category='all'" +msgstr "当用户类别='all'时用户不能被添加" + +#, python-format +msgid "%i user or group removed." +msgstr "%i用户或组已移除。" + +#, python-format +msgid "%i users or groups removed." +msgstr "%i用户或用户组已移除。" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "%i主机或主机组已添加。" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "%i主机或主机组已添加。" + +msgid "hosts cannot be added when host category='all'" +msgstr "当主机类别='all'时主机不能被添加" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "%i主机或主机组已移除。" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "%i主机或主机组已移除。" + +#, python-format +msgid "%i service added." +msgstr "%i服务已添加。" + +#, python-format +msgid "%i services added." +msgstr "%i服务已添加。" + +msgid "services cannot be added when service category='all'" +msgstr "当服务类别='all'时服务不能被添加" + +#, python-format +msgid "%i service removed." +msgstr "%i服务已移除。" + +#, python-format +msgid "%i services removed." +msgstr "%i服务已移除。" + +#, python-format +msgid "%i profile added." +msgstr "%i配置文件已添加。" + +#, python-format +msgid "%i profiles added." +msgstr "%i配置文件已添加。" + +msgid "profiles cannot be added when profile category='all'" +msgstr "当配置文件类别='all'时配置文件不能被添加" + +#, python-format +msgid "%i profile removed." +msgstr "%i配置文件已移除。" + +#, python-format +msgid "%i profiles removed." +msgstr "%i配置文件已移除。" + +msgid "Add CAs to a CA ACL." +msgstr "向一个CA ACL中添加CAs。" + +#, python-format +msgid "%i CA added." +msgstr "%iCA已添加。" + +#, python-format +msgid "%i CAs added." +msgstr "%iCAs已添加。" + +msgid "CAs cannot be added when CA category='all'" +msgstr "当CA类别='all'时CAs不能被添加" + +msgid "Remove CAs from a CA ACL." +msgstr "从一个CA ACL中移除CAs。" + +#, python-format +msgid "%i CA removed." +msgstr "%iCA已移除。" + +#, python-format +msgid "%i CAs removed." +msgstr "%iCAs已移除。" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Domain Level cannot be raised to {0}, server {1} does not support it." +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "域级别不能提高到{0}，服务器{1}不支持它。" + +msgid "Server does not support domain level functionality" +msgstr "" + +msgid "Domain Level cannot be lowered." +msgstr "域级别不能降低了。" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "域级别不能提高到{0}，服务器{1}不支持它。" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"域名系统（DNS）\n" + +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" +"\n" +"管理DNS区域和资源记录。\n" + +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" + +msgid "" +"\n" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"\n" +"例如：\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" + +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" + +msgid "invalid IP network format" +msgstr "无效的IP网络格式" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "每个ACL元素必须以分好结束" + +msgid "invalid address format" +msgstr "无效的地址格式" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "期望的格式： <0-255> <0-255> <0-65535> 每个长度是十六进制数字或连字符" + +msgid "algorithm value: allowed interval 0-255" +msgstr "算法值：允许间隔0-255" + +msgid "flags value: allowed interval 0-255" +msgstr "标记值：允许间隔0-255" + +msgid "iterations value: allowed interval 0-65535" +msgstr "迭代值：允许间隔0-65535" + +#, python-format +msgid "salt value: %(err)s" +msgstr "盐值：%(err)s" + +msgid "invalid domain-name: not fully qualified" +msgstr "无效的域名：没有完全限制" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "不应该是一个通配符域名（RFC 4592 第四节）" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "IP地址为%(addr)s的DNS反向区域%(revzone)s没有被该服务器管理" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "DNS区域%(zone)s没有找到" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "IP地址%(ip)s在域%(domain)s中已分配。" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "在反向区域%(zone)s中IP地址为%(ip)s的反向记录已存在。" + +#, python-format +msgid "%s record" +msgstr "%s记录" + +#, python-format +msgid "Raw %s records" +msgstr "原始的%s记录" + +#, python-format +msgid "%s Record" +msgstr "%s记录" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "（查阅RFC %s 来获取详细信息）" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "'%s'是DNS记录的必要部分" + +msgid "Invalid number of parts!" +msgstr "无效的部分！" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "DNS RR类型\"%s\"在bind-dyndb-ldap插件中不被支持" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "格式必须被指定为\"%(format)s\" %(rfcs)s" + +msgid "Create reverse" +msgstr "创建反向" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "不能创建反向记录\"%(value)s\"：%(exc)s" + +msgid "Exchanger" +msgstr "交换器" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "当'%(name)s'被设置时'%(required)s'必须不能为空" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "标记必须是\"S\"，\"A\"，\"U\"或\"P\"中的一个" + +msgid "Priority (order)" +msgstr "优先级（顺序）" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" +"数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问服务" +"器。" + +msgid "Relative weight for entries with the same priority." +msgstr "拥有相同优先级条目的相对权重。" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "值不是\"YYYYMMDDHHMMSS\"时间格式" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" +"数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问URI。" + +msgid "Target Uniform Resource Identifier" +msgstr "目标统一资源标识符" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "目标统一资源标识符依据RFC 3986" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "命名服务器'%(host)s'没有相配的DNS A/AAAA记录" + +#, fuzzy +#| msgid "" +#| "\n" +#| "Managed permissions\n" +msgid "Managedby permission" +msgstr "" +"\n" +"管理权限\n" + +msgid "DNS is not configured" +msgstr "DNS没有配置" + +#, fuzzy +#| msgid "hosts cannot be set when type is 'group'" +msgid "cannot be used when a zone is specified" +msgstr "当类型是'group'是主机不能被设置" + +msgid "Only one zone type is allowed per zone name" +msgstr "每个区域名只允许一种区域类型" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "已添加系统权限\"%(value)s\"" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "权限\"%(value)s\"已存在" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "已移除系统权限\"%(value)s\"" + +msgid "DNS zone" +msgstr "DNS区域" + +msgid "DNS zones" +msgstr "DNS区域" + +msgid "DNS Zones" +msgstr "DNS区域" + +msgid "DNS Zone" +msgstr "DNS区域" + +msgid "Default time to live" +msgstr "默认存活时间" + +msgid "Time to live for records without explicit TTL definition" +msgstr "没有明确TTL定义的记录存活时间" + +msgid "setting Authoritative nameserver" +msgstr "设置权威命名服务器" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "它仅被用来设置SOA MNAME属性。" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "NS记录可以在带'@'的区域被编辑。" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "" +msgstr "IPA DNS服务器" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "命名服务器的反向区域不能是一个相对的DNS名" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "已删除DNS区域\"%(value)s\"" + +msgid "is required" +msgstr "是需要的" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "已禁用DNS区域\"%(value)s\"" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "已启用DNS区域\"%(value)s\"" + +msgid "DNS resource record" +msgstr "DNS资源记录" + +msgid "DNS resource records" +msgstr "DNS资源记录" + +msgid "DNS Resource Records" +msgstr "DNS资源记录" + +msgid "DNS Resource Record" +msgstr "DNS资源记录" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "DS记录不得在区域顶点（RFC 4035第2.4节）" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "区域外数据：记录名必须是区域或相对名的一个子域" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "%(types)s记录的所有者不应该是一个通配符域名（RFC 4592 第四节）" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "反向区域%(name)s恰好需要%(count)d个IP地址组件，已给出%(user_count)d" + +msgid "only master zones can contain records" +msgstr "仅有主区域才可以包含记录" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "每个名称仅允许有一个CNAME记录（RFC 2136，第1.1.5节）" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "CNAME记录不允许与任何其他记录共存（RFC 1034，第3.6.2节）" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "每个名称仅允许有一个DNAME记录（RFC 6672，第2.4节）" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"NS记录是不能和一个%(type)s记录共存的，除非它位于根区域记录（RFC 2181，第6." +"节）" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "DS记录需要与一个NS记录共存（RFC 4592第4.6节，RFC 4035第2.4节）" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "DNS记录的原始值已被设定为\"%(name)s\"选项" + +msgid "DNS zone root record cannot be renamed" +msgstr "DNS根区域记录不能被重命名" + +msgid "DNS records can be only updated one at a time" +msgstr "一次只能更新一条DNS记录" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "已删除记录\"%(value)s\"" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "区域记录'%s'不能被删除" + +#, python-format +msgid "Found '%(value)s'" +msgstr "找到'%(value)s'" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "主机'%(host)s'没有找到" + +msgid "DNS configuration options" +msgstr "DNS配置选项" + +msgid "DNS Global Configuration" +msgstr "DNS全局配置" + +msgid "IPA DNS version" +msgstr "IPA DNS版本" + +msgid "IPA DNS servers" +msgstr "IPA DNS服务器" + +msgid "List of IPA masters configured as DNS servers" +msgstr "IPA主服务器配置为DNS服务器列表" + +msgid "IPA DNSSec key master" +msgstr "IPA DNSSec密钥主机" + +msgid "IPA server configured as DNSSec key master" +msgstr "IPA服务器配置为DNSSec密钥主机" + +msgid "Global DNS configuration is empty" +msgstr "全局DNS配置是空的" + +msgid "DNS forward zone" +msgstr "DNS正向区域" + +msgid "DNS forward zones" +msgstr "DNS正向区域" + +msgid "DNS Forward Zones" +msgstr "DNS正向区域" + +msgid "DNS Forward Zone" +msgstr "DNS正向区域" + +msgid "Please specify forwarders." +msgstr "请指定转发器。" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "已删除DNS正向区域\"%(value)s\"" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "已禁用DNS正向区域\"%(value)s\"" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "已启用DNS正向区域\"%(value)s\"" + +msgid "IPA DNS records" +msgstr "IPA DNS记录" + +msgid "IPA location records" +msgstr "IPA位置记录" + +msgid "Update location and IPA server DNS records" +msgstr "更新位置和IPA服务器DNS记录" + +msgid "Result of the command" +msgstr "命令返回值" + +msgid "Dry run" +msgstr "" + +msgid "Do not update records only return expected records" +msgstr "不更新记录只返回预期的记录" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"DNS服务器配置\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"设置DNS服务器配置\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" + +msgid "DNS server" +msgstr "DNS服务器" + +msgid "DNS servers" +msgstr "DNS服务器" + +msgid "DNS Servers" +msgstr "DNS服务器" + +msgid "DNS Server" +msgstr "DNS服务器" + +msgid "DNS Server name" +msgstr "DNS服务器名" + +msgid "SOA mname override" +msgstr "SOA mname覆盖" + +msgid "SOA mname (authoritative server) override" +msgstr "SOA mname（权威服务器）覆盖" + +msgid "Forwarders" +msgstr "转发器" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Per-server转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自" +"定义端口" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Per-server有条件的转发器策略。设置为\"none\"来禁止该区域转发至全局转发器。那" +"样的话，有条件的区域转发器被忽视了。" + +msgid "Modify DNS server configuration" +msgstr "修改DNS服务器配置" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "已修改DNS服务器\"%(value)s\"" + +msgid "Search for DNS servers." +msgstr "查找DNS服务器。" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "已匹配%(count)d个DNS服务器" + +#, fuzzy +#| msgid "KRA service is not enabled" +msgid "IPA DNS Server is not installed" +msgstr "KRA服务没有启用" + +msgid "Display configuration of a DNS server." +msgstr "显示一个DNS服务器配置。" + +msgid "Add a new DNS server." +msgstr "添加一个新的DNS服务器。" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "已添加新的DNS服务器\"%(value)s\"" + +msgid "Delete a DNS server" +msgstr "删除一个DNS服务器" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "已删除DNS服务器\"%(value)s\"" + +msgid "REST API is not logged in." +msgstr "REST API没有登录。" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "从CA REST API的Non-2xx响应：%(status)d. %(explanation)s" + +msgid "Unable to communicate with CMS" +msgstr "不能与CMS通信" + +msgid "Response from CA was not valid JSON" +msgstr "CA响应是无效的JSON" + +msgid "Host-based access control commands" +msgstr "基于主机访问控制命令" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" + +msgid "HBAC services" +msgstr "HBAC服务" + +msgid "HBAC Services" +msgstr "HBAC服务" + +msgid "HBAC Service" +msgstr "HBAC服务" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "已添加HBAC服务\"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "已删除HBAC服务\"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "已修改HBAC服务\"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "已匹配%(count)d个HBAC服务" + +msgid "HBAC service group" +msgstr "HBAC服务组" + +msgid "HBAC service groups" +msgstr "HBAC服务组" + +msgid "HBAC Service Groups" +msgstr "HBAC服务组" + +msgid "HBAC Service Group" +msgstr "HBAC服务组" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "已添加HBAC服务组\"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "已删除HBAC服务组\"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "已修改HBAC服务组\"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "已匹配%(count)d个HBAC服务组" + +msgid "" +"\n" +"Stageusers\n" +"\n" +"Manage stage user entries.\n" +"\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries (even if the entries\n" +"contain credentials). Those entries are only candidate to become Active " +"entries.\n" +"\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"Users can authenticate with Active entries, at the condition they have\n" +"credentials.\n" +"\n" +"Deleted user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Users can not authenticate with those entries, even if the entries contain " +"credentials.\n" +"\n" +"The stage user container contains entries:\n" +" - created by 'stageuser-add' commands that are Posix users,\n" +" - created by external provisioning system.\n" +"\n" +"A valid stage user entry MUST have:\n" +" - entry RDN is 'uid',\n" +" - ipaUniqueID is 'autogenerate'.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" +"\n" +" Add a stageuser from the deleted users container:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"\n" +msgstr "" + +msgid "Stage Users" +msgstr "计划用户" + +msgid "Stage User" +msgstr "计划用户" + +msgid "stage user" +msgstr "计划用户" + +msgid "stage users" +msgstr "计划用户" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "已添加计划用户\"%(value)s\"" + +msgid "givenname is required" +msgstr "需要名字" + +msgid "sn is required" +msgstr "需要sn" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "最多%(len)d个字符" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "已删除计划用户\"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "已修改计划用户\"%(value)s\"" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "已匹配%(count)d个用户" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "激活一个计划用户\"%(value)s\"" + +msgid "Entry RDN is not 'uid'" +msgstr "条目RDN不是'uid'" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "条目没有'%(attribute)s'" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "活跃用户名\"%(user)s\"已存在" + +#, python-format +msgid "Stage user %s activated" +msgstr "计划用户%s已激活" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificates to the stageuser entry" +msgstr "向用户条目中添加一个或多个证书" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificates to the stageuser entry" +msgstr "向用户条目中移除一个或多个证书" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "已为用户\"%(value)s\"删除证书" + +#, fuzzy +#| msgid "Add new principal alias to the user entry" +msgid "Add new principal alias to the stageuser entry" +msgstr "为用户条目添加新的主体别名" + +#, fuzzy, python-format +#| msgid "Added new aliases to user \"%(value)s\"" +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加新别名" + +#, fuzzy +#| msgid "Remove principal alias from the user entry" +msgid "Remove principal alias from the stageuser entry" +msgstr "从用户条目中删除主体别名" + +#, fuzzy, python-format +#| msgid "Removed aliases from user \"%(value)s\"" +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "已从用户\"%(value)s\"中删除别名" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "向用户条目中添加一个或多个证书" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "向用户条目中移除一个或多个证书" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" +"\n" +"拓扑\n" +"\n" +"域级别为1的复制拓扑的管理。\n" + +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" + +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "拓扑管理需要最小域级别{0}" + +msgid "segment" +msgstr "段" + +msgid "segments" +msgstr "段" + +msgid "Topology Segments" +msgstr "拓扑段" + +msgid "Topology Segment" +msgstr "拓扑段" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "左节点不是一个拓扑节点：%(leftnode)s" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "右节点不是一个拓扑节点：%(rightnode)s" + +msgid "left node and right node must not be the same" +msgstr "左节点和右节点必须不同" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "左节点({host})不支持后缀'{suff}'" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "右节点({host})不支持后缀'{suff}'" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "已匹配%(count)d个段" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "已添加段\"%(value)s\"" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "已删除段\"%(value)s\"" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "已修改段\"%(value)s\"" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +msgid "left or right node has to be specified" +msgstr "左或右节点没有被指定" + +msgid "only one node can be specified" +msgstr "仅有一个节点可以被指定" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "副本更新段：要求\"%(pkey)s\"。" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "停止副本更新段：要求\"%(pkey)s\"。" + +msgid "suffixes" +msgstr "后缀" + +msgid "Topology suffixes" +msgstr "拓扑后缀" + +msgid "Topology suffix" +msgstr "拓扑后缀" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "已匹配%(count)d个拓扑后缀" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "已删除拓扑后缀\"%(value)s\"" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "已添加拓扑后缀\"%(value)s\"" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "已修改拓扑后缀\"%(value)s\"" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"验证复制拓扑的后缀。\n" +"检查完成：\n" +" 1. 检查是否还有没有连接的拓扑。换句话说，是否在所有服务器之间存在复制路" +"径。\n" +" 2. 检查是否服务器没有超过推荐的副本协议数\n" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "对条目'%s'的'krbLastPwdChange'属性没有'write'权限。" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" + +msgid "host groups" +msgstr "主机组" + +msgid "Host Group" +msgstr "主机组" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "已添加主机组\"%(value)s\"" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "网络组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "已删除主机组\"%(value)s\"" + +msgid "hostgroup" +msgstr "主机组" + +msgid "privileged hostgroup" +msgstr "特权主机组" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "已修改主机组\"%(value)s\"" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "已匹配%(count)d个主机组" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this hostgroup." +msgstr "添加可以管理该令牌的用户" + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this hostgroup." +msgstr "移除可以管理该令牌的用户。" + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"库\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"管理库。\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"基于所有者管理有三种库类别：\n" +"* 用户/私有库\n" +"* 服务库\n" +"* 共享库\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"用户库被特定用户拥有并使用。私有库被当前用户拥有。服务库被一个服务拥有。共享" +"库被管理员拥有但可以被其他用户或服务使用。\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"基于安全机制有三种库类型：\n" +"* 标准库\n" +"* 对称库\n" +"* 非对称库\n" + +msgid "" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +msgstr "" +"\n" +"标准库使用一种安全机制来传输和存储密码。密码仅能被有权限访问该库的用户检" +"索。\n" + +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"对称库和标准库类似，但它在传输前会使用一个密码来预加密该密码。密码仅能使用相" +"同的密码来检索。\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"非对称库和标准库类似，但它在传输前会使用一个公钥来预加密密码。该密码仅能通过" +"对应的私钥来检索。\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" + +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" 库容器对象。\n" +" " + +msgid "vaultcontainer" +msgstr "库容器" + +msgid "vaultcontainers" +msgstr "库容器" + +msgid "Vault Containers" +msgstr "库容器" + +msgid "Vault Container" +msgstr "库容器" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "服务，共享的和用户选项不能被同时指定" + +msgid "Host is not supported" +msgstr "主机不被支持" + +msgid "KRA service is not enabled" +msgstr "KRA服务没有启用" + +msgid "Deleted vault container" +msgstr "已删除库容器" + +#, python-format +msgid "owner %s" +msgstr "所有者%s" + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" 库对象。\n" +" " + +msgid "vault" +msgstr "库" + +msgid "vaults" +msgstr "库" + +msgid "Vaults" +msgstr "库" + +msgid "Vault" +msgstr "库" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "服务，共享的和用户选项不能被同时指定" + +#, fuzzy +#| msgid "Modify a vault." +msgid "Add a vault." +msgstr "修改一个库。" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "已添加库\"%(value)s\"" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "已删除库\"%(value)s\"" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "已匹配%(count)d个库" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "服务，共享的和用户选项不能被同时指定" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "已修改库\"%(value)s\"" + +msgid "Vault configuration" +msgstr "库配置" + +msgid "IPA KRA servers" +msgstr "IPA KRA服务器" + +msgid "IPA servers configured as key recovery agents" +msgstr "IPA服务器配置为密钥恢复代理" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "数据归档到库\"%(value)s\"" + +#, fuzzy +#| msgid "Retrieve a data from a vault." +msgid "Retrieve data from a vault." +msgstr "从库中检索一个数据。" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "从库\"%(value)s\"中检索数据" + +msgid "No archived data." +msgstr "没有归档数据。" + +#, fuzzy +#| msgid "Checks if any of the servers has the CA service enabled." +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "检查是否有任何服务器启用了CA服务。" + +msgid "netgroups" +msgstr "网络组" + +msgid "Netgroups" +msgstr "网络组" + +msgid "Netgroup" +msgstr "网络组" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "已添加网络组\"%(value)s\"" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "主机组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "已删除网络组\"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "已修改网络组\"%(value)s\"" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "已匹配%(count)d个网络组" + +msgid "One time password commands" +msgstr "一次性密码命令" + +msgid "OTP configuration options" +msgstr "OTP配置选项" + +msgid "OTP Configuration" +msgstr "OTP配置" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "已改变\"%(value)s\"的密码" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" + +msgid "pkinit" +msgstr "" + +msgid "PKINIT" +msgstr "" + +#, fuzzy +#| msgid "Trust status" +msgid "PKINIT status" +msgstr "信任状态" + +#, fuzzy +#| msgid "This entry cannot be enabled or disabled" +msgid "Whether PKINIT is enabled or disabled" +msgstr "条目不能被启用或禁用" + +msgid "Report PKINIT status on the IPA masters" +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)s server role matched" +#| msgid_plural "%(count)s server roles matched" +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "已匹配%(count)s个服务器角色" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"RADIUS代理服务器\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"管理RADIUS代理服务器。\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA对于krb5 OTP认证支持使用额外的RADIUS代理服务器。这在集成第三方认证服务时提" +"供了很多方便。\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" + +msgid "invalid attribute name" +msgstr "无效的属性名" + +msgid "invalid port number" +msgstr "无效的端口号" + +msgid "RADIUS proxy server" +msgstr "RADIUS代理服务器" + +msgid "RADIUS proxy servers" +msgstr "RADIUS代理服务器" + +msgid "RADIUS Servers" +msgstr "RADIUS代理服务器" + +msgid "RADIUS Server" +msgstr "RADIUS代理服务器" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "已添加RADIUS代理服务器\"%(value)s\"" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "已删除RADIUS代理服务器\"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "已修改RADIUS代理服务器\"%(value)s\"" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "已匹配%(count)d个RADIUS代理服务器" + +msgid "A list of ACI values" +msgstr "ACI值列表" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "类型，过滤器，子树和目标组是互斥的" + +msgid "ACI prefix is required" +msgstr "需要ACI前缀" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "至少需要其中一个：类型，过滤器，子树，目标组，属性或它的成员" + +msgid "filter and memberof are mutually exclusive" +msgstr "过滤器和它的成员是互斥的" + +msgid "group, permission and self are mutually exclusive" +msgstr "组，权限和它们自己是互斥的" + +msgid "One of group, permission or self is required" +msgstr "需要组，权限或它们自己中的一个" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "组 '%s' 不存在" + +msgid "empty filter" +msgstr "空的过滤器" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "语法错误：%(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "无效的DN（%s）" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI名\"%s\"没有找到" + +#, fuzzy +#| msgid "IPA object" +msgid "ACI object." +msgstr "IPA对象" + +msgid "ACIs" +msgstr "ACIs" + +#, fuzzy +#| msgid "ACIs" +msgid "ACI" +msgstr "ACIs" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "已创建ACI\"%(value)s\"" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "已删除ACI\"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "已修改ACI\"%(value)s\"" + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d个ACI已匹配" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "已重命名ACI为\"%(value)s\"" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" + +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 10" +msgstr "必须至少%(minvalue)d" + +msgid "configuration options" +msgstr "配置选项" + +msgid "Configuration" +msgstr "配置" + +#, fuzzy +#| msgid "Maximum username length" +msgid "Maximum hostname length" +msgstr "最大用户名长度" + +msgid "IPA masters" +msgstr "IPA主服务器" + +msgid "List of all IPA masters" +msgstr "所有IPA主服务器列表" + +#, fuzzy +#| msgid "IPA masters" +msgid "Hidden IPA masters" +msgstr "IPA主服务器" + +#, fuzzy +#| msgid "List of all IPA masters" +msgid "List of all hidden IPA masters" +msgstr "所有IPA主服务器列表" + +msgid "IPA master capable of PKINIT" +msgstr "" + +msgid "IPA master which can process PKINIT requests" +msgstr "" + +msgid "IPA CA servers" +msgstr "IPA CA服务器" + +msgid "IPA servers configured as certificate authority" +msgstr "IPA服务器配置为证书认证机构" + +#, fuzzy +#| msgid "IPA CA servers" +msgid "Hidden IPA CA servers" +msgstr "IPA CA服务器" + +#, fuzzy +#| msgid "IPA servers configured as certificate authority" +msgid "Hidden IPA servers configured as certificate authority" +msgstr "IPA服务器配置为证书认证机构" + +msgid "IPA CA renewal master" +msgstr "IPA CA更新主服务器" + +msgid "Renewal master for IPA certificate authority" +msgstr "为IPA证书认证机构更新主服务器" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "IPA servers configured as key recovery agent" +msgstr "IPA服务器配置为密钥恢复代理" + +#, fuzzy +#| msgid "IPA KRA servers" +msgid "Hidden IPA KRA servers" +msgstr "IPA KRA服务器" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "IPA服务器配置为密钥恢复代理" + +msgid "Domain resolution order" +msgstr "" + +#, fuzzy +#| msgid "comma-separated list of groups to exclude from migration" +msgid "colon-separated list of domains used for short name qualification" +msgstr "允许迁移的以逗号分隔的用户组列表" + +#, fuzzy +#| msgid "IPA server configured as DNSSec key master" +msgid "IPA servers configured as domain name server" +msgstr "IPA服务器配置为DNSSec密钥主机" + +#, fuzzy +#| msgid "IPA DNS servers" +msgid "Hidden IPA DNS servers" +msgstr "IPA DNS服务器" + +#, fuzzy +#| msgid "IPA servers configured as key recovery agents" +msgid "Hidden IPA servers configured as domain name server" +msgstr "IPA服务器配置为密钥恢复代理" + +#, fuzzy +#| msgid "IPA DNSSec key master" +msgid "DNSec key master" +msgstr "IPA DNSSec密钥主机" + +#, fuzzy +#| msgid "options are not allowed" +msgid "Empty domain is not allowed" +msgstr "选项是不允许的" + +#, fuzzy, python-format +#| msgid "invalid domain-name: %s" +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "无效的域名：%s" + +#, fuzzy, python-format +#| msgid "Removed information about the trusted domain \"%(value)s\"" +msgid "Server has no information about domain '%(domain)s'" +msgstr "删除信任域\"%(value)s\"的信息" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "" + +msgid "The group doesn't exist" +msgstr "组不存在" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "不允许属性\"%s\"" + +msgid "May not be empty" +msgstr "可能不是闲置的" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "%(obj)s默认属性%(attr)s是不允许的！" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "SELinux用户列表期望以$分隔" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "SELinux用户'%(user)s'是无效的：%(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "SELinux用户映射默认用户没有在列表中" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from \"localadmins" +"\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" + +msgid "groups" +msgstr "用户组" + +msgid "User Group" +msgstr "用户组" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "已添加组\"%(value)s\"" + +msgid "gid cannot be set for external group" +msgstr "gid不能被设置为外部组" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "已删除组\"%(value)s\"" + +msgid "privileged group" +msgstr "特权组" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "已修改组\"%(value)s\"" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "已匹配%(count)d个组" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"没有安装Samba 4不能执行外部成员验证。确认你已经在IPA服务器上安装了server-" +"trust-ad子包" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"没有自己的域配置不能执行加入操作。首先确认你已经在IPA服务器上运行了ipa-" +"adtrust-install命令" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "从用户\"%(value)s\"中分离组\"%(value)s\"" + +msgid "not allowed to modify user entries" +msgstr "不允许修改用户条目" + +msgid "not allowed to modify group entries" +msgstr "不允许修改组条目" + +msgid "Not a managed group" +msgstr "不是一个管理组" + +#, fuzzy +#| msgid "Add users that can manage this token." +msgid "Add users that can manage members of this group." +msgstr "添加可以管理该令牌的用户" + +#, fuzzy +#| msgid "Remove users that can manage this token." +msgid "Remove users that can manage members of this group." +msgstr "移除可以管理该令牌的用户。" + +msgid "" +"\n" +"Permissions\n" +msgstr "" +"\n" +"权限\n" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"一个权限可能不包含其他权限。\n" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* 权限允许访问读，写，添加，删除，读，查找或比价。\n" +"* 特权结合了相似的权限（例如所有权限需要添加一个用户）\n" +"* 角色为用户，用户组，主机或主机组授予一系列特权。\n" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" +"\n" +"权限由许多不同部分组成：\n" +"\n" +"1. 权限名。\n" +"2. 权限目标。\n" +"3. 权限授予的权限。\n" + +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"权限定义了允许哪些操作，可能是下面的一个或多个：\n" +"1. 写 - 写一条或多条属性\n" +"2. 读 - 读一条或多条属性\n" +"3. 查找 - 查找一条或多条属性\n" +"4. 比较 - 比较一条或多条属性\n" +"5. 添加 - 添加一条新属性到树中\n" +"6. 删除 - 删除一条已存在的条目\n" +"7. 全部 - 授予的所有权限\n" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" +"\n" +"注意属性和条目之间的区别。权限是独立的，能添加一个用户并不代表该用户是可编辑" +"的。\n" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" +"\n" +"有许多允许的目标：\n" +"1. 子树：一个DN；在该DN下应用权限的子树\n" +"2. 目标过滤器：一个LDAP过滤器\n" +"3. 目标：权限适用于带有可能通配符，指定条目的DN\n" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" +"\n" +"同时，有以下合适的选项。设置其中一个选项将会设置相应的属性。\n" +"1. 类型：对象（用户，用户组等）的类型；设置子树和目标过滤器。\n" +"2. 组： 适用于一个组的成员；设置目标过滤器。\n" +"3. 目标组：允许修改一个指定组（例如授予管理组成员的权限）；设置目标。\n" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" +"\n" +"管理权限\n" + +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"删除或重命名一个管理权限，同时改变它的目标是不允许的。\n" + +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" + +msgid "" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" + +msgid "must be enclosed in parentheses" +msgstr "必须括在括号里" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "\"%s\"不是一个对象类型" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\"不是一个有效的权限类型" + +#, python-format +msgid "Deprecated; use %s" +msgstr "已弃用；使用%s" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "带有标记%s的权限可能不能被修改或删除" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "系统权限可能不能被修改或删除" + +#, python-format +msgid "Entry %s not found" +msgstr "条目%s没有找到" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "ACI权限%(name)s在%(dn)s中没有找到" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "不能同时指定完整的目标滤波器和额外的目标滤波器" + +#, python-format +msgid "option was renamed; use %s" +msgstr "选项已被重命名；使用%s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "不能使用%(old_name)s和%(new_name)s" + +#, python-format +msgid "%s: group not found" +msgstr "%s：找不到组" + +msgid "target and targetgroup are mutually exclusive" +msgstr "目标和目标组是互斥的" + +msgid "subtree and type are mutually exclusive" +msgstr "子树和类型是互斥的" + +msgid "Bad search filter" +msgstr "无效的搜索过滤器" + +#, python-format +msgid "Entry %s does not exist" +msgstr "条目%s不存在" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "必须有至少一个目标条目说明符（例如：目标，目标过滤器，属性）" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "已添加权限\"%(value)s\"" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "属性和包含的属性是互斥的" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "不能存储权限ACI到%s" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "已删除权限\"%(value)s\"" + +msgid "cannot delete managed permissions" +msgstr "不能删除管理权限" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI权限%s没有找到" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "已修改权限\"%(value)s\"" + +msgid "cannot rename managed permissions" +msgstr "不能重命名管理权限" + +msgid "not modifiable on managed permissions" +msgstr "管理权限没有修改" + +msgid "only available on managed permissions" +msgstr "仅在管理权限中可用" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "属性和包含/排除属性是互斥的" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "不能为已分配一个特权的权限设置绑定类型" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "已匹配%(count)d个权限" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP令牌\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"管理OTP 令牌。\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"IPA支持使用OTP令牌来多因素认证。这个码能管理OTP令牌。\n" + +#, fuzzy +#| msgid "" +#| "\n" +#| " Add a new token:\n" +#| " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" 增加一个新的令牌：\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" +"\"\n" +msgstr "" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" + +msgid "OTP token" +msgstr "OTP令牌" + +msgid "OTP tokens" +msgstr "OTP令牌" + +msgid "OTP Tokens" +msgstr "OTP令牌" + +msgid "OTP Token" +msgstr "OTP令牌" + +#, fuzzy +#| msgid "UID" +msgid "URI" +msgstr "UID" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "已添加OTP令牌\"%(value)s\"" + +msgid "cannot be empty" +msgstr "不能为空" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "已删除OTP令牌\"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "已修改OTP令牌\"%(value)s\"" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "已匹配%(count)d个OTP令牌" + +msgid "" +"\n" +"Sudo Rules\n" +msgstr "" +"\n" +"Sudo规则\n" + +msgid "" +"\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +msgstr "" +"\n" +"Sudo (su \"do\")允许一个系统管理员给特定用户（或用户组）授予权限使其有以root" +"或其他用户的能力来运行一些（或全部）命令，同时会对命令和命令参数提供一个审计" +"跟踪。\n" + +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"IPA提供了一种方法来配置Sudo的各个方面：\n" +" 用户：用户/用户组允许调用Sudo。\n" +" 主机：主机/主机组上的用户允许调用Sudo。\n" +" 允许的命令：指定命令允许通过Sudo来运行。\n" +" 阻止的命令：指定命令禁止通过Sudo来运行。\n" +" 作为用户来运行：Sudo会调用用户或用户组的权限。\n" +" 作为组来运行：Sudo会调用组的gid权限。\n" +" 选项：各种Sudoers选项可以修改Sudo的行为。\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"顺序可以添加到一个sudo规则中来控制它们评估的顺序（如果客户端支持）。该顺序是" +"一个整数并且是唯一的。\n" + +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" +"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," +"dc=com\n" +msgstr "" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" + +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" + +msgid "this option has been deprecated." +msgstr "该选项已被弃用。" + +msgid "sudo rules" +msgstr "sudo规则" + +msgid "Sudo Rules" +msgstr "Sudo规则" + +msgid "Sudo Rule" +msgstr "Sudo规则" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "序号必须是唯一值（%(order)d已被%(rule)s使用）" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "已添加Sudo规则\"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "已删除Sudo规则\"%(value)s\"" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "已修改Sudo规则\"%(value)s\"" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "%(type)s类别不能设置为all'，虽然有允许%(objects)s" + +msgid "users" +msgstr "用户" + +msgid "command" +msgstr "命令" + +msgid "commands" +msgstr "命令" + +msgid "runAs user" +msgstr "作为用户来运行" + +msgid "runAs users" +msgstr "作为用户来运行" + +msgid "group runAs" +msgstr "作为组来运行" + +msgid "runAs groups" +msgstr "作为组来运行" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "已匹配%(count)d个Sudo规则" + +msgid "commands cannot be added when command category='all'" +msgstr "当命令类别='all'时命令不能被添加" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "当作为用户来运行或作为组来运行类别='all'时用户不能被添加" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "作为用户来运行不能接受'%(name)s'来作为一个用户名" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "作为用户来运行不能接受'%(name)s'来作为一个组名" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "作为组来运行不能接受'%(name)s'来作为一个组名" + +msgid "commands for controlling sudo configuration" +msgstr "控制sudo配置的命令" + +msgid "" +"\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" +msgstr "" + +msgid "sudo command" +msgstr "sudo命令" + +msgid "sudo commands" +msgstr "sudo命令" + +msgid "Sudo Commands" +msgstr "Sudo命令" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "已添加Sudo命令\"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "已删除Sudo命令\"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "已修改Sudo命令\"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "已匹配%(count)d个Sudo命令" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" + +msgid "sudo command group" +msgstr "sudo命令组" + +msgid "sudo command groups" +msgstr "sudo命令组" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "已添加Sudo命令组\"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "已删除Sudo命令组\"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "已修改Sudo命令组\"%(value)s\"" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "已匹配%(count)d个Sudo命令组" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" + +msgid "Realm domains" +msgstr "Realm域" + +msgid "Realm Domains" +msgstr "Realm域" + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "DNS区域的每个realm域必须包括SOA或NS记录。没有找到记录：%s" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "下面的域不属于该realm：%(domains)s" #, python-format msgid "" @@ -10061,39 +16236,720 @@ msgstr "" "个包含\"%(realm)s\"的_kerberos TXT记录。" msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"--domain选项不能和--add-domain或--del-domain选项一起使用。使用--domain来显示" +"地指定整个realm域列表，添加/删除个别域，使用--add-domain/--del-domain。" + +msgid "IPA server domain cannot be omitted" +msgstr "IPA服务器域不能被省略" + +msgid "IPA server domain cannot be deleted" +msgstr "IPA服务器域不能被删除" + +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" + +msgid "Describe currently authenticated identity." +msgstr "" + +#, fuzzy +#| msgid "Subject DNS name" +msgid "Object class name" +msgstr "主题DNS名" + +msgid "Function to get details" +msgstr "" + +msgid "Arguments to details function" +msgstr "" + +msgid "Cannot query Directory Manager with API" +msgstr "" + +msgid "kerberos ticket policy settings" +msgstr "kerberos票据策略设置" + +msgid "Kerberos Ticket Policy" +msgstr "Kerberos票据策略" + +#, fuzzy +#| msgid "Max life" +msgid "OTP max life" +msgstr "最长存活期" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "OTP token maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +msgid "OTP max renew" +msgstr "" + +#, fuzzy +#| msgid "TOTP authentication time variance (seconds)" +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "TOTP认证时间差异（秒）" + +#, fuzzy +#| msgid "Max life" +msgid "RADIUS max life" +msgstr "最长存活期" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "RADIUS maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +#, fuzzy +#| msgid "RADIUS proxy server name" +msgid "RADIUS max renew" +msgstr "RADIUS代理服务器名称" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" + +#, fuzzy +#| msgid "Max life" +msgid "PKINIT max life" +msgstr "最长存活期" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "PKINIT maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +msgid "PKINIT max renew" +msgstr "" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" + +msgid "Hardened max life" +msgstr "" + +#, fuzzy +#| msgid "Maximum ticket life (seconds)" +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +msgid "Hardened max renew" +msgstr "" + +msgid "Hardened ticket maximum renewable age (seconds)" msgstr "" -"用在LDAP服务器上的模式。支持值是RFC2307和RFC2307bis。默认值时RFC2307bis" #, python-format +msgid "Ticket policy for %s could not be read" +msgstr "票据策略%s不可读" + +msgid "Default ticket policy could not be read" +msgstr "默认票据策略不可读" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "不能读UPG原过滤器定义。检查你的权限。" + msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "查找条件不够具体。预期1和找到%(found)d。" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"IPA位置\n" -msgid "The secret used to encrypt data" -msgstr "密码用于数据加密" +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"设置DNS位置\n" -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "服务可以代表一个客户端进行认证" +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" + +msgid "location" +msgstr "位置" + +msgid "locations" +msgstr "位置" + +msgid "IPA Locations" +msgstr "IPA位置" + +msgid "IPA Location" +msgstr "IPA位置" + +msgid "Location name" +msgstr "位置名" + +msgid "IPA location name" +msgstr "IPA位置名" + +msgid "IPA Location description" +msgstr "IPA本地描述" + +msgid "Servers" +msgstr "服务器" + +msgid "Servers that belongs to the IPA location" +msgstr "属于IPA位置的服务器" + +msgid "Advertised by servers" +msgstr "由服务器公布" + +msgid "List of servers which advertise the given location" +msgstr "公布给出位置的服务器列表" + +msgid "Add a new IPA location." +msgstr "添加一个新的IPA位置。" #, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "已添加IPA位置\"%(value)s\"" + +msgid "Delete an IPA location." +msgstr "删除一个IPA位置。" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "已删除IPA位置\"%(value)s\"" + +msgid "IPA Server" +msgstr "IPA服务器" + +msgid "Modify information about an IPA location." +msgstr "修改一个IPA位置信息。" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "已修改IPA位置\"%(value)s\"" + +msgid "Search for IPA locations." +msgstr "查找IPA位置。" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "已匹配%(count)d个IPA位置" + +msgid "Display information about an IPA location." +msgstr "显示一个IPA位置信息。" + +msgid "Servers in location" +msgstr "本地服务器" + msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "在证书请求中主题alt名为%s的服务主体不存在" +"\n" +"API Schema\n" +msgstr "" +"\n" +"API 模式\n" -msgid "The topic or command name." -msgstr "主题或命令名。" +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"提供API自省能力。\n" -msgid "The total timeout across all retries (in seconds)" -msgstr "所有重试总超时（秒）" +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" -msgid "The username attribute on the user object" -msgstr "用户对象的用户名属性" +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" -msgid "The username, password or token codes are not correct" -msgstr "用户名，密码或令牌码不争取" +msgid "Name" +msgstr "名称" + +msgid "Documentation" +msgstr "文档" + +msgid "Exclude from" +msgstr "排斥" + +msgid "Include in" +msgstr "包含" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "结果应该只包括主键属性(\"%s\")" + +msgid "Help topic" +msgstr "帮助主题" + +msgid "Version" +msgstr "版本" + +msgid "Parameters" +msgstr "参数" + +msgid "Method of" +msgstr "方法" + +msgid "Method name" +msgstr "方法名" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s：%(oname)s没有找到" + +msgid "Display information about a command." +msgstr "显示一个命令信息。" + +msgid "Search for commands." +msgstr "查找命令。" + +#, fuzzy +#| msgid "Run Commands" +msgid "Return command defaults" +msgstr "允许命令" + +msgid "Display information about a class." +msgstr "显示一个类信息。" + +msgid "Search for classes." +msgstr "查找类。" + +msgid "Display information about a help topic." +msgstr "显示一个帮助主题信息。" + +msgid "Search for help topics." +msgstr "查找帮助主题。" + +msgid "Required" +msgstr "必需的" + +msgid "Multi-value" +msgstr "多值" + +msgid "Always ask" +msgstr "总是询问" + +#, fuzzy +#| msgid "CLI name" +msgid "CLI metavar" +msgstr "CLI名称" + +msgid "CLI name" +msgstr "CLI名称" + +msgid "Confirm (password)" +msgstr "确认（密码）" + +msgid "Default" +msgstr "默认" + +msgid "Default from" +msgstr "默认的" + +msgid "Label" +msgstr "级别" + +msgid "Convert on server" +msgstr "在服务器上转换" + +msgid "Option group" +msgstr "选项组" + +msgid "Sensitive" +msgstr "敏感的" + +msgid "Positional argument" +msgstr "位置参数" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(parent)s：%(oname)s没有找到" + +msgid "Display information about a command parameter." +msgstr "显示一个命令参数信息。" + +msgid "Search command parameters." +msgstr "查找命令参数。" + +#, fuzzy, python-format +#| msgid "%(parent)s: %(oname)s not found" +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(parent)s：%(oname)s没有找到" + +msgid "Display information about a command output." +msgstr "显示一个命令输出信息。" + +msgid "Search for command outputs." +msgstr "查找命令输出。" + +msgid "Store and provide schema for commands and topics" +msgstr "" + +msgid "Fingerprint of schema cached by client" +msgstr "客户端缓存的模式指纹" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" + +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +msgstr "" + +msgid "ID Ranges" +msgstr "ID范围" + +msgid "ID Range" +msgstr "ID范围" + +msgid "local domain range" +msgstr "本地域范围" + +msgid "Active Directory domain range" +msgstr "活动目录域范围" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "有POSIX属性的活动目录信任范围" + +msgid "ID range type, one of allowed values" +msgstr "" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "对象ID范围修改超出定义范围是不允许的" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"没有安装Samba 4不能执行SID验证。确认你已经在IPA服务器上安装了server-trust-ad" +"子包" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"跨域信任没有配置。首先确认你已经在IPA服务器上运行了ipa-adtrust-install命令" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "对于一个信任域来说，SID不被认为是一个有效的SID" + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "已添加ID范围\"%(value)s\"" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "选项dom-sid和dom-name不能被同时使用" + +#, fuzzy +#| msgid "trusted domain object not found" +msgid "Specified trusted domain name could not be found." +msgstr "信任域对象没有找到" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "选项dom-sid/dom-name和rid-base必须同时使用" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "当IPA范围类型是ipa-ad-trust-posix时，选项rid-base不能使用" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"当信任域的SID被指定时，IPA范围类型必须是ipa-ad-trust或ipa-ad-trust-posix中的" +"一个" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "选项dom-sid/dom-name和secondary-rid-base不能同时使用" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"当信任域的SID没有被指定时，IPA范围类型必不能是ipa-ad-trust或ipa-ad-trust-" +"posix。" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "选项secondary-rid-base和rid-base必须同时使用" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "主要RID范围和次要RID范围不能覆盖" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"你必须同时指定 rid-base和secondary-rid-base选项，因为ipa-adtrust-install已经" +"运行了。" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "已删除ID范围\"%(value)s\"" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "已匹配%(count)d个范围" + +#, fuzzy +#| msgid "Modify ID range." +msgid "" +"Modify ID range.\n" +"\n" +msgstr "修改ID范围。" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "已修改ID范围\"%(value)s\"" msgid "" "This command can not be used to change ID allocation for local IPA domain. " @@ -10102,166 +16958,4253 @@ msgstr "" "这个命令在本地IPA域中不能用来改变ID分配。运行`ipa help idrange`查看更多信息" msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "该命令依赖于\"editors\"组的存在，但是该组没有找到。" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "指定信任域名的SID没有找到。请使用dom-sid选项直接指定SID。" -msgid "This command requires root access" -msgstr "该命令需要root访问权限" +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "选项dom-sid和secondary-rid-base不能同时使用" -msgid "This entry already exists" -msgstr "条目已经存在" +msgid "Options dom-sid and rid-base must be used together" +msgstr "选项dom-sid和rid-base必须同时使用" -msgid "This entry cannot be enabled or disabled" -msgstr "条目不能被启用或禁用" +msgid "self service permission" +msgstr "自助服务权限" -msgid "This entry is already a member" -msgstr "条目已经时一个成员" +msgid "self service permissions" +msgstr "自助服务权限" -msgid "This entry is already disabled" -msgstr "条目已禁用" +msgid "Self Service Permissions" +msgstr "自助服务权限" -msgid "This entry is already enabled" -msgstr "条目已启用" +msgid "Self Service Permission" +msgstr "自助服务权限" -msgid "This entry is not a member" -msgstr "条目不是一个成员" +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "已添加自助服务\"%(value)s\"" -msgid "This group already allows external members" -msgstr "该组已允许外部成员" +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "已删除自助服务\"%(value)s\"" -msgid "This group cannot be posix because it is external" -msgstr "该组不是posix因为它是外部的" +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "已修改自助服务\"%(value)s\"" -msgid "This is already a posix group" -msgstr "这已经是一个posix组" +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "已匹配%(count)d个自助服务" -msgid "This is already a posix group and cannot be converted to external one" -msgstr "这已经是一个posix组了，并且不能转换为外部的" +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"IPA服务器角色\n" -msgid "This may take some time, please wait ..." -msgstr "这可能需要一些时间，请稍等..." +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"获取由IPA主服务器提供的角色（DNS服务器，CA等）状态。\n" + +msgid "" +"\n" +"The status of a role is either enabled, configured, or absent.\n" +msgstr "" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" + +msgid "server role" +msgstr "服务器角色" + +msgid "server roles" +msgstr "服务器角色" + +msgid "IPA Server Roles" +msgstr "IPA服务器角色" + +msgid "IPA Server Role" +msgstr "IPA服务器角色" + +msgid "IPA server role name" +msgstr "IPA服务器角色名" + +msgid "Role status" +msgstr "角色状态" + +msgid "Status of the role" +msgstr "角色状态" + +msgid "Show role status on a server" +msgstr "显示服务器角色状态" + +msgid "Find a server role on a server(s)" +msgstr "在服务器上找到一个服务器角色" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "已匹配%(count)s个服务器角色" + +#, fuzzy +#| msgid "Included attributes" +msgid "Include IPA master entries" +msgstr "包含的属性" + +msgid "roles" +msgstr "角色" + +msgid "IPA role name" +msgstr "IPA角色名" + +msgid "HBAC rule and local members cannot both be set" +msgstr "HBAC规则和本地成员不能被同时设置" + +msgid "Invalid SELinux user name, must match {}" +msgstr "" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" + +msgid "SELinux user map list not found in configuration" +msgstr "SELinux用户映射列表在配置中没有找到" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "SELinux用户%(user)s在顺序列表中（配置）没有找到" + +msgid "SELinux User Map rule" +msgstr "SELinux用户映射规则" + +msgid "SELinux User Map rules" +msgstr "SELinux用户映射规则" + +msgid "SELinux User Maps" +msgstr "SELinux用户映射规则" + +msgid "SELinux User Map" +msgstr "SELinux用户映射规则" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "HBAC规则%(rule)s没有找到" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "已添加SELinux用户映射\"%(value)s\"" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "已删除SELinux用户映射\"%(value)s\"" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "已修改SELinux用户映射\"%(value)s\"" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "已匹配%(count)d个SELinux用户映射" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "已启用SELinux用户映射\"%(value)s\"" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "已禁用SELinux用户映射\"%(value)s\"" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}：角色没有找到" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}：没有这样的属性" + +msgid "pyhbac is not installed." +msgstr "" + +msgid "" +"\n" +"IPA certificate operations\n" +msgstr "" +"\n" +"IPA证书操作\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"实现了一组命令来管理服务器的SSL证书。\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"证书请求以PEM格式的证书签名请求(CSR)的形式存在。\n" + +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" +"\n" +"dogtag CA只是使用CSR的CN值，并强制主题的其他值在服务器中配置。\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"一个证书是以一个服务主体存储，并一个服务主体需要一个主机。\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"为了请求一个证书：\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* 主机必须存在\n" +"* 服务必须存在（或者你使用--add选项来自动添加它）\n" + +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" +"\n" +"查找：\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"证书可能通过证书主题，序列号，撤销原因，有效日期和发布日期来查询。\n" + +msgid "" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +msgstr "" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"GMT格式的日期用来匹配证书里的日期。\n" + +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" +"\n" +"日期格式是YYYY-mm-dd。\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" + +#, fuzzy +#| msgid "Retrieve an existing certificate." +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "检索一个已存在的证书。" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" + +#, fuzzy +#| msgid "Check the status of a certificate signing request." +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "检查证书签名请求的状态。" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +#| "revocation reason details. " +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" + +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" + +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" +"\n" +"支持下面的撤销原因：\n" + +#, fuzzy +#| msgid "Unspecified" +msgid " * 0 - unspecified\n" +msgstr "未指定的" + +#, fuzzy +#| msgid "Key Compromise" +msgid " * 1 - keyCompromise\n" +msgstr "密钥泄露" + +msgid " * 2 - cACompromise\n" +msgstr "" + +msgid " * 3 - affiliationChanged\n" +msgstr "" + +msgid " * 4 - superseded\n" +msgstr "" + +msgid " * 5 - cessationOfOperation\n" +msgstr "" + +#, fuzzy +#| msgid "CA certificate" +msgid " * 6 - certificateHold\n" +msgstr "CA证书" + +msgid " * 8 - removeFromCRL\n" +msgstr "" + +#, fuzzy +#| msgid "Privilege Withdrawn" +msgid " * 9 - privilegeWithdrawn\n" +msgstr "特权撤销" + +msgid " * 10 - aACompromise\n" +msgstr "" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" +"\n" +"注意没有使用原因码7。查看RFC 5280以获取更多详细信息：\n" + +msgid "" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" +msgstr "" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"主体'%(principal)s'不允许使用含配置文件'%(profile_id)s'的CA '%(ca)s'来发布证" +"书。" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" + +#, fuzzy, python-format +#| msgid "Host '%(host)s' not found" +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "主机'%(host)s'没有找到" + +msgid "Issuing CA" +msgstr "发行CA" + +msgid "Name of issuing CA" +msgstr "签发的CA名称" + +msgid "Base-64 encoded certificate." +msgstr "Base-64编码的证书。" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate chain" +msgstr "证书" + +#, fuzzy +#| msgid "CA certificate" +msgid "X.509 certificate chain" +msgstr "CA证书" + +msgid "Subject" +msgstr "主题" + +msgid "Subject email address" +msgstr "主题电子邮件地址" + +msgid "Subject DNS name" +msgstr "主题DNS名" + +msgid "Subject X.400 address" +msgstr "主题X.400地址" + +msgid "Subject directory name" +msgstr "主题目录名" + +msgid "Subject EDI Party name" +msgstr "主题EDI参与方名称" + +msgid "Subject URI" +msgstr "主题URI" + +msgid "Subject IP Address" +msgstr "主题IP地址" + +msgid "Subject OID" +msgstr "主题OID" + +msgid "Subject UPN" +msgstr "主题UPN" + +msgid "Subject Kerberos principal name" +msgstr "主题Kerberos主体名" + +msgid "Subject Other Name" +msgstr "主题别名" + +msgid "Issuer" +msgstr "发行人" + +msgid "Issuer DN" +msgstr "证书颁发机构名字" + +msgid "Not Before" +msgstr "不早于" + +msgid "Not After" +msgstr "不晚于" + +msgid "Fingerprint (SHA1)" +msgstr "指纹（SHA1）" + +#, fuzzy +#| msgid "Fingerprint (SHA1)" +msgid "Fingerprint (SHA256)" +msgstr "指纹（SHA1）" + +msgid "Serial number (hex)" +msgstr "序列号（十六进制）" + +msgid "Request status" +msgstr "请求状态" + +msgid "Include certificate chain in output" +msgstr "" + +msgid "" +"automatically add the principal if it doesn't exist (service principals only)" +msgstr "如果主体不存在则自动添加它（仅对服务主体）" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "" + +msgid "No Common Name was found in subject of request." +msgstr "在请求的主题中找不到通用名。" + +#, fuzzy, python-format +#| msgid "" +#| "hostname in subject of request '%(cn)s' does not match principal hostname " +#| "'%(hostname)s'" +msgid "" +"hostname in subject of request '%(cn)s' does not match name or aliases of " +"principal '%(principal)s'" +msgstr "请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配" + +msgid "DN commonName does not match user's login" +msgstr "DN通用名与用户登录名不匹配" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "DN电子邮件地址不匹配任何用户的电子邮件地址" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "对条目'%s'的'userCertificate'属性没有'write'权限。" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "主题alt名称类型%s禁止用户主体" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "在证书请求中主题alt名为%s的服务主体不存在" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "没有权限创建主题alt名为'%s'的证书。" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "在主题alt名中的主体'%s'与请求的主体不匹配" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "RFC822名称与任何用户的电子邮件地址都不匹配" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "主题alt名称类型%s禁止非用户主体" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "主题alt名称类型%s被禁止" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "CA'%s'被禁用" + +msgid "'add' option" +msgstr "'add'选项" + +msgid "The principal for this request doesn't exist." +msgstr "该请求的主题不存在。" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "" + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "" + +msgid "Status" +msgstr "状态" + +msgid "Revoked" +msgstr "撤销" + +msgid "Revocation reason" +msgstr "撤消原因" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" + +#, python-format +msgid "Owner %s" +msgstr "所有者%s" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "由CA'%(ca)s'发布序列号为%(serial)s的证书没有找到" + +msgid "7 is not a valid revocation reason" +msgstr "7不是一个有效的撤销原因" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "结果应该只包括主键属性(\"certificate\")" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "已匹配%(count)d个证书" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "查找含这些所有者%s的证书。" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "查找不含这些所有者%s的证书。" + +msgid "ID View" +msgstr "ID视图" + +msgid "system ID View" +msgstr "系统ID视图" + +msgid "ID Views" +msgstr "ID视图" + +msgid "User object overrides" +msgstr "用户对象覆盖" + +msgid "Group object overrides" +msgstr "组对象覆盖" + +msgid "Hosts the view applies to" +msgstr "适用于主机的视图" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "已添加ID视图\"%(value)s\"" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "已删除ID视图\"%(value)s\"" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "已修改一个ID视图\"%(value)s\"" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "已匹配%(count)d个ID视图" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "默认信任视图不能应用于主机上" + +msgid "not found" +msgstr "没有找到" + +#, fuzzy +#| msgid "Default Trust View cannot be applied on hosts" +msgid "ID View cannot be applied to IPA master" +msgstr "默认信任视图不能应用于主机上" + +msgid "ID View already applied" +msgstr "ID视图已应用" + +msgid "value" +msgstr "值" + +#, python-format +msgid "ID View applied to %i host." +msgstr "ID视图应用于%i主机。" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "ID视图应用于%i主机。" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "从%i主机中清除ID视图。" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "从%i主机中清除ID视图。" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" +"你正尝试引用一个不允许覆盖的神奇私有组。而不是尝试覆盖对应用户的GID属性。" + +msgid "IPA object" +msgstr "IPA对象" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "锚'%(anchor)s'不能被解析。" + +msgid "Default Trust View cannot contain IPA users" +msgstr "默认信任视图不能包含IPA用户" + +msgid "Add a new ID override." +msgstr "添加一个新的ID覆盖。" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "已添加ID覆盖\"%(value)s\"" + +msgid "Delete an ID override." +msgstr "删除一个ID覆盖。" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "已删除ID覆盖\"%(value)s\"" + +msgid "Modify an ID override." +msgstr "修改一个ID覆盖。" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "已修改一个ID覆盖\"%(value)s\"" + +msgid "ID override" +msgstr "ID覆盖" + +msgid "ID overrides cannot be renamed" +msgstr "ID覆盖不能被重命名" + +msgid "Search for an ID override." +msgstr "查找一个ID覆盖。" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "已匹配%(count)d个ID覆盖" + +msgid "Display information about an ID override." +msgstr "显示一个ID覆盖信息。" + +msgid "User ID override" +msgstr "用户ID覆盖" + +msgid "User ID overrides" +msgstr "用户ID覆盖" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64编码的用户证书" + +msgid "Group ID override" +msgstr "组ID覆盖" + +msgid "Group ID overrides" +msgstr "组ID覆盖" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "向id覆盖用户条目中添加一个或多个证书" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "已添加证书到id覆盖用户\"%(value)s\"" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "从id覆盖用户条目中移除一个或多个证书" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "已从id覆盖用户\"%(value)s\"中移除证书" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "已添加用户ID覆盖\"%(value)s\"" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "已删除用户ID覆盖\"%(value)s\"" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "已修改一个用户ID覆盖\"%(value)s\"" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "已匹配%(count)d个用户ID覆盖" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "已添加组ID覆盖\"%(value)s\"" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "已删除组ID覆盖\"%(value)s\"" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "已修改一个组ID覆盖\"%(value)s\"" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "已匹配%(count)d个组ID覆盖" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"自动成员规则。\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"规则是和组名直接关联的，因此你不能创建一个没有组或主机组的规则。\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"条件是一个用于389-ds的正则表达式来用一个自动成员规则区匹配一个新添加的条目。" +"如果它匹配一个兼容规则，那么该条目被添加到合适的组或主机组中去。\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"一个默认组或主机组可以指定给不匹配任何规则的条目。万一是用户条目，则该组会是" +"一个会退组，因为在IPA配置中所有用户默认是指定组的成员。\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"automember-rebuild命令可以用来对现有条目跟踪运行自动成员规则，以此来重建它们" +"的成员组。\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" + +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" + +msgid "Auto Membership Rule" +msgstr "自动成员规则" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\"没有找到" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s不是一个有效的属性。" + +#, fuzzy +#| msgid "Add an automember rule." +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "添加一个自动成员规则。" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "已添加自动成员规则\"%(value)s\"" + +msgid "Auto Membership is not configured" +msgstr "自动成员没有配置" + +#, fuzzy +#| msgid "Add conditions to an automember rule." +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "添加条件到一个自动成员规则。" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "已在\"%(value)s\"上添加条件" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "自动成员规则：%s没有找到！" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Remove conditions from an automember rule." +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "从一个自动成员规则中移除条件。" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "已从\"%(value)s\"中移除条件" + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Modify an automember rule." +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "修改一个自动成员规则。" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "已修改自动成员规则\"%(value)s\"" + +#, fuzzy +#| msgid "Delete an automember rule." +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "删除一个自动成员规则。" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "已删除自动成员规则\"%(value)s\"" + +#, fuzzy +#| msgid "Search for automember rules." +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "查找自动成员规则。" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "已匹配%(count)d个规则" + +#, fuzzy +#| msgid "Display information about an automember rule." +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "显示一个自动成员规则信息。" + +#, fuzzy +#| msgid "Set default (fallback) group for all unmatched entries." +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "对所有不匹配的条目设置默认（回退）组。" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "已为自动成员\"%(value)s\"设置默认（回滚）组" + +#, fuzzy +#| msgid "Remove default (fallback) group for all unmatched entries." +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "对所有不匹配的条目移除默认（回退）组。" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "已为自动成员\"%(value)s\"移除默认（回滚）组" + +msgid "No default (fallback) group set" +msgstr "没有设置（回滚）组" + +#, fuzzy +#| msgid "Display information about the default (fallback) automember groups." +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "显示默认（回退）自动成员组的信息。" + +msgid "Task DN" +msgstr "任务DN" + +msgid "DN of the started task" +msgstr "已开始任务的DN" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "至少指定其中一个选项：类型，用户，主机" + +msgid "users and hosts cannot both be set" +msgstr "用户和主机不能被同时设置" + +msgid "hosts cannot be set when type is 'group'" +msgstr "当类型是'group'是主机不能被设置" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "当类型是'hostgroup'是用户不能被设置" + +msgid "Automember rebuild membership task started" +msgstr "自动成员重建成员关系任务已开始" + +msgid "Automember rebuild membership task completed" +msgstr "自动成员重建成员关系任务已完成" + +#, python-format +msgid "Task DN = '%s'" +msgstr "任务DN = '%s'" + +msgid "Automember" +msgstr "自动成员" + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "Remove conditions from an automember rule." +msgid "Remove orphan automember rules" +msgstr "从一个自动成员规则中移除条件。" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" +"\n" +"管理证书颁发机构\n" + +msgid "" +"\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" +msgstr "" +"\n" +"从属证书颁发机构（Sub-CAs）可以当作是X.509证书的发行范围。\n" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" +"\n" +"所有的CAs除了'IPA' CA都可以被禁用或重新启用。禁用一个CA会阻止它发布证书，但不" +"会影响它的证书的有效性。\n" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" +"\n" +"CAs (除了'IPA' CA)都可以被删除。删除一个CA会撤销它的签名证书并删除它的私" +"钥。\n" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" + +msgid "Certificate Authority" +msgstr "证书颁发机构" + +msgid "Certificate Authorities" +msgstr "证书颁发机构" + +msgid "Name for referencing the CA" +msgstr "" + +msgid "Description of the purpose of the CA" +msgstr "CA描述的目的" + +msgid "Authority ID" +msgstr "授权ID" + +msgid "Dogtag Authority ID" +msgstr "Dogtag授权ID" + +msgid "Subject DN" +msgstr "证书持有者名字" + +msgid "Subject Distinguished Name" +msgstr "主题的专有名称" + +msgid "Issuer Distinguished Name" +msgstr "发行人专有名称" + +msgid "Search for CAs." +msgstr "查找CAs。" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "已匹配%(count)d个CA" + +msgid "Display the properties of a CA." +msgstr "显示一个CA属性。" + +msgid "Create a CA." +msgstr "创建一个CA。" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "已创建CA\"%(value)s\"" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "对条目'%s'没有'add'权限。" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "主题DN已被CA'%s'使用" + +msgid "Delete a CA (must be disabled first)." +msgstr "" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "已删除CA\"%(value)s\"" + +#, fuzzy +#| msgid "Insufficient 'add' privilege for entry '%s'." +msgid "Insufficient privilege to delete a CA." +msgstr "对条目'%s'没有'add'权限。" + +msgid "CA" +msgstr "" + +msgid "IPA CA cannot be deleted" +msgstr "IPA CA不能被删除" + +#, fuzzy +#| msgid "Must be a decimal number" +msgid "Must be disabled first" +msgstr "必须是一个小数" + +msgid "Modify CA configuration." +msgstr "修改CA配置。" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "已修改CA\"%(value)s\"" + +#, fuzzy +#| msgid "Insufficient 'add' privilege for entry '%s'." +msgid "Insufficient privilege to modify a CA." +msgstr "对条目'%s'没有'add'权限。" + +msgid "Disable a CA." +msgstr "禁用一个CA。" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "已禁用CA\"%(value)s\"" + +msgid "IPA CA cannot be disabled" +msgstr "IPA CA不能被禁用" + +msgid "Enable a CA." +msgstr "启用一个CA。" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "已启用CA\"%(value)s\"" + +msgid "Internationalization messages" +msgstr "" + +msgid "Your session has expired. Please log in again." +msgstr "" + +msgid "Apply" +msgstr "应用" + +msgid "Rebuild auto membership" +msgstr "重建自动成员" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "你确定要重建自动成员吗？" + +msgid "Are you sure you want to proceed with the action?" +msgstr "你确定要执行该操作吗？" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "你确定要删除${object}？" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "你确定要禁用${object}？" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "你确定要启用${object}？" + +msgid "Actions" +msgstr "操作" + +msgid "Add" +msgstr "添加" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "${count} item(s)已添加" + +msgid "Direct Membership" +msgstr "直接成员" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "${other_entity}过滤器可用" + +msgid "Indirect Membership" +msgstr "间接成员" + +msgid "No entries." +msgstr "没有条目。" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "从${start}到${end}显示${total}条目。" + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove" +msgstr "删除持有" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} item(s) 已移除" + +msgid "Show Results" +msgstr "显示结果" + +msgid "Authentication indicators" +msgstr "认证指标" + +msgid "Authentication indicator" +msgstr "认证指标" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

如果没有选择方法那么就使用隐式方法（密码）。

密码+双因素LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认证方" +"法，该方法需要使用armor ccache

RADIUS和另外的类型： " +"Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证选项。" + +msgid "Add Custom Authentication Indicator" +msgstr "添加自定义认证机构" + +msgid "Two factor authentication (password + OTP)" +msgstr "双因素认证（密码+OTP）" + +#, fuzzy +#| msgid "RADIUS Server" +msgid "RADIUS" +msgstr "RADIUS代理服务器" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "" + +msgid "Disable per-user override" +msgstr "禁用每个用户覆盖" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

如果所有选项都检测了那么每个用户设置会覆盖全局设置。

密码+双" +"因素LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认" +"证方法，该方法需要使用armor ccache

RADIUS和另外的类型： Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证" +"选项。

" + +msgid "About" +msgstr "关于" + +msgid "Activate" +msgstr "激活" + +msgid "Add and Add Another" +msgstr "添加并添加另一个" + +msgid "Add and Close" +msgstr "添加和关闭" + +msgid "Add and Edit" +msgstr "添加和编辑" + +msgid "Add Many" +msgstr "添加多个" + +msgid "Back" +msgstr "返回" + +msgid "Cancel" +msgstr "取消" + +msgid "Clear" +msgstr "" + +#, fuzzy +#| msgid "Refresh the page." +msgid "Clear all fields on the page." +msgstr "刷新页面。" + +msgid "Close" +msgstr "关闭" + +msgid "Disable" +msgstr "禁用" + +msgid "Download" +msgstr "下载" + +msgid "Download certificate as PEM formatted file." +msgstr "下载证书为PEM格式文件。" + +msgid "Edit" +msgstr "编辑" + +msgid "Enable" +msgstr "启用" + +msgid "Find" +msgstr "查找" + +msgid "Get" +msgstr "获得" + +msgid "Hide" +msgstr "隐藏" + +msgid "Issue" +msgstr "发布" + +#, fuzzy +#| msgid "Matched" +msgid "Match" +msgstr "匹配" + +#, fuzzy +#| msgid "Search for existing certificates." +msgid "Match users according to certificate." +msgstr "查找已存在的证书。" + +msgid "Migrate" +msgstr "" + +msgid "OK" +msgstr "" + +msgid "Refresh" +msgstr "更新" + +msgid "Reload current settings from the server." +msgstr "从服务器重新加载当前设置。" + +msgid "Delete" +msgstr "删除" + +msgid "Remove hold" +msgstr "删除持有" + +msgid "Reset" +msgstr "重置" + +msgid "Reset Password" +msgstr "重置密码" + +#, fuzzy +#| msgid "Reset Password" +msgid "Reset Password and Log in" +msgstr "重置密码" + +msgid "Restore" +msgstr "恢复" + +msgid "Retry" +msgstr "重试" + +msgid "Revert" +msgstr "返回" + +msgid "Revoke" +msgstr "撤回" + +msgid "Save" +msgstr "保存" + +msgid "Set" +msgstr "设置" + +msgid "Show" +msgstr "显示" + +msgid "Stage" +msgstr "呈现" + +msgid "Update" +msgstr "更新" + +msgid "View" +msgstr "查看" + +#, fuzzy +#| msgid "Confirmation" +msgid "Customization" +msgstr "确认" + +msgid "Pagination Size" +msgstr "" + +msgid "Collapse All" +msgstr "全部折叠" + +msgid "Expand All" +msgstr "全部展开" + +msgid "General" +msgstr "普通的" + +msgid "Identity Settings" +msgstr "身份设置" + +#, fuzzy +#| msgid "Role Settings" +msgid "Record Settings" +msgstr "角色设置" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "${entity} ${primary_key}设置" + +msgid "Back to Top" +msgstr "回到顶部" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "${entity} ${primary_key}已更新" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity}已添加成功" + +msgid "Add custom value" +msgstr "添加自定义值" + +msgid "Available" +msgstr "可用的" + +msgid "Some operations failed." +msgstr "一些操作失败。" + +msgid "Operations Error" +msgstr "操作错误" + +msgid "Confirmation" +msgstr "确认" + +msgid "Custom value" +msgstr "自定义值" msgid "This page has unsaved changes. Please save or revert." msgstr "这个页面有未保存的更改。请保存或恢复。" -msgid "Ticket expired" -msgstr "票据过期" +msgid "Unsaved Changes" +msgstr "未保存的更改" -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "票据策略%s不可读" +#, python-brace-format +msgid "Edit ${entity}" +msgstr "编辑${entity}" -msgid "Time Limit" -msgstr "时间限制" +msgid "Hide details" +msgstr "隐藏细节" -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "时间限制在几秒钟内的搜索（0代表无限制）" +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}，版本：${version}" -msgid "Time now" -msgstr "当前时间" +msgid "Prospective" +msgstr "预期的" -msgid "Time to live" -msgstr "存活时间" +msgid "Redirection" +msgstr "重定向" -msgid "Time to live for records at zone apex" -msgstr "区域定点记录的生成时间" +msgid "Select entries to be removed." +msgstr "选择要删除的条目。" -msgid "Time to live for records without explicit TTL definition" -msgstr "没有明确TTL定义的记录存活时间" +msgid "Result" +msgstr "结果" + +msgid "Show details" +msgstr "显示细节" + +msgid "Success" +msgstr "成功" + +msgid "Validation error" +msgstr "验证错误" + +msgid "Input form contains invalid or missing values." +msgstr "输入包含无效的或缺失的值。" + +msgid "Please try the following options:" +msgstr "请尝试下面选项：" + +msgid "If the problem persists please contact the system administrator." +msgstr "如果问题仍然存在,请联系系统管理员。" + +msgid "Refresh the page." +msgstr "刷新页面。" + +msgid "Reload the browser." +msgstr "重新加载浏览器。" + +msgid "Return to the main page and retry the operation" +msgstr "返回到主页面并重试操作" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "出现一个错误(${error})" + +msgid "HTTP Error" +msgstr "HTTP错误" + +msgid "Internal Error" +msgstr "内部错误" + +msgid "IPA Error" +msgstr "IPA错误" + +msgid "No response" +msgstr "没有响应" + +msgid "Unknown Error" +msgstr "未知的错误" + +msgid "URL" +msgstr "" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key}受管于：" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "${primary_key}成员：" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key}是其中一个成员：" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} members:" +msgid "${primary_key} member managers:" +msgstr "${primary_key}成员：" + +msgid "Settings" +msgstr "设置" + +msgid "Search" +msgstr "查找" + +msgid "False" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to create a keytab of this " +#| "service." +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "允许用户，用户组，主机或主机组来创建一个该服务的keytab。" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to retrieve a keytab of this " +#| "service." +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "允许用户，用户组，主机或主机组来检索一个该服务的keytab。" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to create a keytab of this " +#| "service." +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "允许用户，用户组，主机或主机组来创建一个该服务的keytab。" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Allow users, groups, hosts or host groups to retrieve a keytab of this " +#| "service." +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "允许用户，用户组，主机或主机组来检索一个该服务的keytab。" + +#, fuzzy, python-brace-format +#| msgid "Allowed to create keytab" +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "允许创建keytab" + +#, fuzzy, python-brace-format +#| msgid "Allowed to retrieve keytab" +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "允许检索keytab" + +#, fuzzy, python-brace-format +#| msgid "Allowed to create keytab" +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "允许创建keytab" + +#, fuzzy, python-brace-format +#| msgid "Allowed to retrieve keytab" +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "允许检索keytab" + +msgid "Allowed to create keytab" +msgstr "允许创建keytab" + +msgid "Allowed to retrieve keytab" +msgstr "允许检索keytab" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to create a keytab of this " +#| "service." +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "不允许用户，用户组，主机或主机组来创建该服务的keytab。" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to retrieve a keytab of this " +#| "service." +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "不允许用户，用户组，主机或主机组来检索该服务的keytab。" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to create a keytab of this " +#| "service." +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "不允许用户，用户组，主机或主机组来创建该服务的keytab。" + +#, fuzzy, python-brace-format +#| msgid "" +#| "Disallow users, groups, hosts or host groups to retrieve a keytab of this " +#| "service." +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "不允许用户，用户组，主机或主机组来检索该服务的keytab。" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Users allowed to retrieve keytab" +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "允许检索keytab的用户" + +msgid "Add Kerberos Principal Alias" +msgstr "添加Kerberos主体别名" + +msgid "New kerberos principal alias" +msgstr "新的kerberos主体别名" + +msgid "Remove Kerberos Alias" +msgstr "删除Kerberos别名" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "你要删除kerberos别名${alias}吗？" + +msgid "Inherited from server configuration" +msgstr "继承了服务器配置" + +msgid "MS-PAC" +msgstr "" + +msgid "Override inherited settings" +msgstr "覆盖继承设置" + +msgid "PAD" +msgstr "" + +#, fuzzy +#| msgid "Authentication" +msgid "Authenticating" +msgstr "身份验证" + +msgid "Authentication with personal certificate failed" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" + +msgid "Continue to next page" +msgstr "" + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" + +msgid "Login failed due to an unknown reason" +msgstr "" + +msgid "Logged In As" +msgstr "登录" + +#, fuzzy +#| msgid "Authentication Indicators" +msgid "Authentication with Kerberos failed" +msgstr "认证指标" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" + +msgid "Loading" +msgstr "" + +#, fuzzy +#| msgid "Kerberos principal expiration" +msgid "Kerberos Principal you entered is expired" +msgstr "Kerberos主体过期" + +#, fuzzy +#| msgid "Record data" +msgid "Loading data" +msgstr "记录数据" + +msgid "Log in" +msgstr "" + +#, fuzzy +#| msgid "Host Certificate" +msgid "Log In Using Certificate" +msgstr "主机证书" + +msgid "Log in using personal certificate" +msgstr "" + +msgid "Log out" +msgstr "" + +#, fuzzy +#| msgid "Format error" +msgid "Log out error" +msgstr "格式错误" + +msgid "Password or Password+One-Time Password" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "You will be redirected to DNS Zone." +msgid "You will be redirected in ${count}s" +msgstr "你将会被重定向到DNS区域。" + +msgid "Sync OTP Token" +msgstr "同步OTP令牌" + +#, fuzzy +#| msgid "HOTP Synchronization Window" +msgid "Synchronizing" +msgstr "HOTP同步窗口" + +msgid "The user account you entered is locked" +msgstr "" + +msgid "number of passwords" +msgstr "密码数" + +msgid "seconds" +msgstr "秒" + +#, fuzzy +#| msgid "Configuration" +msgid "Migrating" +msgstr "配置" + +msgid "There was a problem with your request. Please, try again later." +msgstr "" + +#, fuzzy +#| msgid "Password reset was not successful." +msgid "Password migration was not successful" +msgstr "密码重置失败。" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" + +#, fuzzy +#| msgid "The username, password or token codes are not correct" +msgid "The password or username you entered is incorrect" +msgstr "用户名，密码或令牌码不争取" + +#, fuzzy +#| msgid "Password reset was not successful." +msgid "Password migration was successful" +msgstr "密码重置失败。" + +msgid "Attribute" +msgstr "属性" + +#, fuzzy +#| msgid "delegation" +msgid "Add delegation" +msgstr "授权" + +#, fuzzy +#| msgid "delegations" +msgid "Remove delegations" +msgstr "授权" + +#, fuzzy +#| msgid "permission" +msgid "Add permission" +msgstr "权限" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove permissions" +msgstr "删除权限" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove privileges from permission '${primary_key}'" +msgstr "从一个角色中移除权限。" + +#, fuzzy +#| msgid "privilege" +msgid "Add privilege" +msgstr "特权" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "member privilege" +msgid "Remove privileges" +msgstr "成员特权" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a permission." +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "从一个权限中移除成员。" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a privilege" +msgid "Remove roles from privilege '${primary_key}'" +msgstr "从特权中移除成员" + +msgid "Role Settings" +msgstr "角色设置" + +#, fuzzy +#| msgid "Add a new role." +msgid "Add role" +msgstr "添加一个新角色。" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "host groups to remove" +msgid "Add host groups into role '${primary_key}'" +msgstr "待移除的主机组" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} overrides:" +msgid "Add role '${primary_key}' into privileges" +msgstr "${primary_key}覆盖：" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add services into role '${primary_key}'" +msgstr "${entity} ${primary_key}证书" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove roles" +msgstr "删除持有" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a privilege" +msgid "Remove role '${primary_key}' from privileges" +msgstr "从特权中移除成员" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from role '${primary_key}'" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove services from a CA ACL." +msgid "Remove services from role '${primary_key}'" +msgstr "从一个CA ACL中移除服务。" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a role." +msgid "Remove users from role '${primary_key}'" +msgstr "从一个角色中移除成员。" + +#, fuzzy +#| msgid "self service permission" +msgid "Add self service permission" +msgstr "自助服务权限" + +#, fuzzy +#| msgid "self service permissions" +msgid "Remove self service permissions" +msgstr "自助服务权限" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Add rule" +msgstr "HBAC规则" + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Are you sure you want to stage selected users?" +msgid "Are you sure you want to change default group?" +msgstr "你确定要呈现被选用户？" + +msgid "Default host group" +msgstr "默认主机组" + +msgid "Default user group" +msgstr "默认用户组" + +msgid "Exclusive" +msgstr "独占的" + +msgid "Expression" +msgstr "表达式" + +msgid "Host group rule" +msgstr "主机组规则" + +msgid "Host group rules" +msgstr "主机组规则" + +msgid "Inclusive" +msgstr "兼容的" + +#, fuzzy +#| msgid "Auto Membership Rule" +msgid "Remove auto membership rules" +msgstr "自动成员规则" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "" + +msgid "User group rule" +msgstr "用户组规则" + +msgid "User group rules" +msgstr "用户组规则" + +#, fuzzy +#| msgid "automount key" +msgid "Add automount key" +msgstr "自动挂载键" + +#, fuzzy +#| msgid "automount keys" +msgid "Remove automount keys" +msgstr "自动挂载键" + +#, fuzzy +#| msgid "automount location" +msgid "Add automount location" +msgstr "自动挂载位置" + +msgid "Automount Location Settings" +msgstr "自动挂载位置设置" + +#, fuzzy +#| msgid "automount locations" +msgid "Remove automount locations" +msgstr "自动挂载位置" + +#, fuzzy +#| msgid "automount map" +msgid "Add automount map" +msgstr "自动挂载映射" + +msgid "Map Type" +msgstr "映射类型" + +msgid "Direct" +msgstr "直接的" + +msgid "Indirect" +msgstr "间接的" + +#, fuzzy +#| msgid "automount maps" +msgid "Remove automount maps" +msgstr "自动挂载映射" + +#, fuzzy +#| msgid "Certificate Authority" +msgid "Add certificate authority" +msgstr "证书颁发机构" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Remove certificate authorities" +msgstr "证书颁发机构" + +#, fuzzy +#| msgid "Add CAs to a CA ACL." +msgid "Add CA ACL" +msgstr "向一个CA ACL中添加CAs。" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "${entity} ${primary_key}证书" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to a CA ACL." +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "向一个CA ACL中添加用户和用户组。" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "${entity} ${primary_key}证书" + +#, fuzzy, python-brace-format +#| msgid "Add services to a CA ACL." +msgid "Add services into CA ACL '${primary_key}'" +msgstr "向一个CA ACL中添加服务。" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "" + +msgid "All" +msgstr "全部" + +msgid "Any CA" +msgstr "任何CA" + +msgid "Any Host" +msgstr "任何主机" + +msgid "Any Service" +msgstr "任何服务" + +msgid "Any Profile" +msgstr "任何配置文件" + +msgid "Anyone" +msgstr "任何人" + +msgid "Rule status" +msgstr "规则状态" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "如果没有指定CAs，那么允许请求默认CA。" + +#, fuzzy +#| msgid "Remove from CRL" +msgid "Remove CA ACLs" +msgstr "从CRL中删除" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "${entity} ${primary_key}证书" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from a CA ACL." +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "从一个CA ACL中移除用户和用户组。" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from a CA ACL." +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "从一个CA ACL中移除用户和用户组。" + +#, fuzzy, python-brace-format +#| msgid "Remove CAs from a CA ACL." +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "从一个CA ACL中移除CAs。" + +#, fuzzy, python-brace-format +#| msgid "Remove certificates from a service" +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "从一个服务中移除证书" + +#, fuzzy, python-brace-format +#| msgid "Remove services from a CA ACL." +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "从一个CA ACL中移除服务。" + +#, fuzzy, python-brace-format +#| msgid "Remove services from a CA ACL." +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "从一个CA ACL中移除服务。" + +msgid "Specified CAs" +msgstr "指定的CAs" + +msgid "Specified Hosts and Groups" +msgstr "指定的主机和主机组" + +msgid "Specified Profiles" +msgstr "指定的配置文件" + +msgid "Specified Services and Groups" +msgstr "指定的服务和服务组" + +msgid "Specified Users and Groups" +msgstr "指定的用户和用户组" + +msgid "Permitted to have certificates issued" +msgstr "允许颁发证书" + +#, fuzzy +#| msgid "member Certificate Profile" +msgid "Remove certificate profiles" +msgstr "成员证书配置文件" + +#, fuzzy +#| msgid "Key Compromise" +msgid "AA Compromise" +msgstr "密钥泄露" + +msgid "Add principal" +msgstr "添加主体" + +msgid "Affiliation Changed" +msgstr "" + +#, fuzzy +#| msgid "Key Compromise" +msgid "CA Compromise" +msgstr "密钥泄露" + +msgid "Certificates" +msgstr "证书" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Hold" +msgstr "证书" + +#, fuzzy +#| msgid "Replication configuration" +msgid "Cessation of Operation" +msgstr "复制配置" + +msgid "Common Name" +msgstr "通用名" + +msgid "the certificate with serial number " +msgstr "证书编号" + +msgid "Expires On" +msgstr "有效期限" + +msgid "Issued on from" +msgstr "发布于" + +msgid "Issued on to" +msgstr "发布到" + +msgid "Maximum serial number" +msgstr "最大序列号" + +msgid "Minimum serial number" +msgstr "最小序列号" + +msgid "Revoked on from" +msgstr "撤销于" + +msgid "Revoked on to" +msgstr "撤销到" + +#, fuzzy +#| msgid "Valid from" +msgid "Valid not after from" +msgstr "有效起始日期" + +#, fuzzy +#| msgid "Valid from" +msgid "Valid not after to" +msgstr "有效起始日期" + +#, fuzzy +#| msgid "Valid from" +msgid "Valid not before from" +msgstr "有效起始日期" + +#, fuzzy +#| msgid "Valid from" +msgid "Valid not before to" +msgstr "有效起始日期" + +msgid "Fingerprints" +msgstr "指纹" + +msgid "Get Certificate" +msgstr "获取证书" + +msgid "Certificate Hold Removed" +msgstr "证书持有已删除" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for host '${primary_key}'" +msgstr "${entity} ${primary_key}证书" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for service '${primary_key}'" +msgstr "${entity} ${primary_key}证书" + +#, fuzzy, python-brace-format +#| msgid "Certificate for ${entity} ${primary_key}" +msgid "Issue new certificate for user '${primary_key}'" +msgstr "${entity} ${primary_key}证书" + +#, fuzzy +#| msgid "New Certificate" +msgid "Issue new certificate" +msgstr "新证书" + +msgid "Issued By" +msgstr "发布方" + +msgid "Issued On" +msgstr "签发日期" + +msgid "Issued To" +msgstr "颁发给" + +msgid "Key Compromise" +msgstr "密钥泄露" + +msgid "No Valid Certificate" +msgstr "无效的证书" + +msgid "New Certificate" +msgstr "新证书" + +msgid "Certificate in base64 or PEM format" +msgstr "base64或PEM格式的证书" + +msgid "Note" +msgstr "概述" + +msgid "Organization" +msgstr "组织" + +msgid "Organizational Unit" +msgstr "组织单位" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "呈现${count}个证书" + +msgid "Privilege Withdrawn" +msgstr "特权撤销" + +msgid "Reason for Revocation" +msgstr "撤销理由" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Remove certificate hold" +msgstr "撤销证书。" + +msgid "Do you want to remove the certificate hold?" +msgstr "你要删除证书持有吗？" + +msgid "Remove from CRL" +msgstr "从CRL中删除" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr "" + +msgid "Certificate requested" +msgstr "证书请求" + +#, fuzzy +#| msgid "Revoke a certificate." +msgid "Revoke certificate" +msgstr "撤销证书。" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "你要撤销该证书吗？从下拉列表中选择一个理由。" + +msgid "Certificate Revoked" +msgstr "证书已撤销" + +msgid "REVOKED" +msgstr "" + +msgid "Serial Number" +msgstr "序列号" + +msgid "Serial Number (hex)" +msgstr "序列号（十六进制）" + +msgid "SHA1 Fingerprint" +msgstr "SHA1指纹" + +msgid "SHA256 Fingerprint" +msgstr "SHA256指纹" + +msgid "Superseded" +msgstr "作废的" + +msgid "Unspecified" +msgstr "未指定的" + +msgid "Valid Certificate Present" +msgstr "有效证书展示" + +msgid "Valid from" +msgstr "有效起始日期" + +msgid "Valid to" +msgstr "有效终止日期" + +msgid "Validity" +msgstr "有效性" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "${entity} ${primary_key}证书" + +msgid "View Certificate" +msgstr "新证书" + +#, fuzzy +#| msgid "Certificate" +msgid "Certificate Data" +msgstr "证书" + +#, fuzzy +#| msgid "Certificate Authority" +msgid "Certificate For Match" +msgstr "证书颁发机构" + +#, fuzzy +#| msgid "Certificate Association Data" +msgid "Certificate Mapping Match" +msgstr "证书关联数据" + +#, fuzzy +#| msgid "Matched rules" +msgid "Matched Users" +msgstr "已匹配规则" + +#, fuzzy +#| msgid "User login" +msgid "User Login" +msgstr "用户登录名" + +#, fuzzy +#| msgid "Add new certificates to a service" +msgid "Add certificate identity mapping rule" +msgstr "向一个服务中添加新证书" + +#, fuzzy +#| msgid "TLSA Certificate Association Data" +msgid "Add certificate mapping data" +msgstr "TLSA证书关联数据" + +#, fuzzy +#| msgid "Certificate Association Data" +msgid "Certificate mapping data" +msgstr "证书关联数据" + +#, fuzzy +#| msgid "Configuration" +msgid "Configuration string" +msgstr "配置" + +#, fuzzy, python-brace-format +#| msgid "Do you want to remove the certificate hold?" +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "你要删除证书持有吗？" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove certificate mapping data" +msgstr "从一个服务中移除证书" + +#, fuzzy +#| msgid "Issued on to" +msgid "Issuer and subject" +msgstr "发布到" + +#, fuzzy +#| msgid "Remove certificates from a service" +msgid "Remove certificate identity mapping rules" +msgstr "从一个服务中移除证书" + +msgid "Group Options" +msgstr "组选项" + +msgid "Search Options" +msgstr "查找选项" + +msgid "SELinux Options" +msgstr "SELinux选项" + +#, fuzzy +#| msgid "Service Options" +msgid "Server Options" +msgstr "服务选项" + +msgid "Service Options" +msgstr "服务选项" + +msgid "User Options" +msgstr "用户选项" + +#, fuzzy +#| msgid "Forwarders" +msgid "Forward first" +msgstr "转发器" + +msgid "Forwarding disabled" +msgstr "禁止转发" + +#, fuzzy +#| msgid "Forward policy" +msgid "Forward only" +msgstr "转发器策略" + +msgid "Options" +msgstr "选项" + +msgid "Update System DNS Records" +msgstr "更新系统DNS记录" + +msgid "Do you want to update system DNS records?" +msgstr "你要更新系统DNS记录吗？" + +msgid "System DNS records updated" +msgstr "系统DNS记录已更新" + +#, fuzzy +#| msgid "DNS forward zone" +msgid "Add DNS forward zone" +msgstr "DNS正向区域" + +#, fuzzy +#| msgid "DNS forward zones" +msgid "Remove DNS forward zones" +msgstr "DNS正向区域" + +#, fuzzy +#| msgid "DNS resource record" +msgid "Add DNS resource record" +msgstr "DNS资源记录" + +msgid "DNS record was deleted because it contained no data." +msgstr "DNS记录已删除因为它没有数据。" + +msgid "Other Record Types" +msgstr "其他记录类型" + +msgid "Address not valid, can't redirect" +msgstr "地址无效，不能重定向" + +msgid "Create dns record" +msgstr "创建dns记录" + +msgid "Creating record." +msgstr "创建记录。" + +msgid "Record creation failed." +msgstr "记录创建失败。" + +msgid "Checking if record exists." +msgstr "检查记录是否存在。" + +msgid "Record not found." +msgstr "记录没有找到。" + +msgid "Redirection to PTR record" +msgstr "重定向到PTR记录" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "找到区域：${zone}" + +msgid "Target reverse zone not found." +msgstr "目标反向区域没有找到。" + +msgid "Fetching DNS zones." +msgstr "抓取DNS区域。" + +msgid "An error occurred while fetching dns zones." +msgstr "在抓取dns区域时发生错误。" + +msgid "You will be redirected to DNS Zone." +msgstr "你将会被重定向到DNS区域。" + +#, fuzzy +#| msgid "DNS resource records" +msgid "Remove DNS resource records" +msgstr "DNS资源记录" + +msgid "Standard Record Types" +msgstr "标准记录类型" + +msgid "Records for DNS Zone" +msgstr "DNS区域记录" + +msgid "Record Type" +msgstr "记录类型" + +#, fuzzy +#| msgid "DNS zone" +msgid "Add DNS zone" +msgstr "DNS区域" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "你确定要为DNS区域${object}添加权限吗？" + +msgid "DNS Zone Settings" +msgstr "DNS区域设置" + +#, fuzzy +#| msgid "DNS zones" +msgid "Remove DNS zones" +msgstr "DNS区域" + +msgid "Remove Permission" +msgstr "删除权限" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "你确定要为DNS区域${object}删除权限吗？" + +msgid "Skip DNS check" +msgstr "忽略DNS检查" + +msgid "Skip overlap check" +msgstr "忽略覆盖检查" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "你想要检查在DNS中是否有新的权威命名服务器地址" + +msgid "Authoritative nameserver change" +msgstr "权威命名服务器改变" + +msgid "Level" +msgstr "级别" + +msgid "Set Domain Level" +msgstr "设置域级别" + +#, fuzzy +#| msgid "User group" +msgid "Add user group" +msgstr "用户组" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "在一个HBAC规则中添加用户和用户组。" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" + +msgid "Group Settings" +msgstr "组设置" + +msgid "External" +msgstr "外部的" + +msgid "Groups" +msgstr "用户组" + +#, fuzzy +#| msgid "User categories" +msgid "Group categories" +msgstr "用户类别" + +msgid "Change to external group" +msgstr "更改为外部组" + +msgid "Change to POSIX group" +msgstr "更改为POSIX组" + +msgid "Non-POSIX" +msgstr "非POSIX" + +#, fuzzy +#| msgid "Non-POSIX" +msgid "POSIX" +msgstr "非POSIX" + +#, fuzzy +#| msgid "Member service groups" +msgid "Remove user groups" +msgstr "成员服务组" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "从一个网络组中移除成员。" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove user groups from user group '${primary_key}'" +msgstr "向SELinux用户映射规则中移除用户和用户组。" + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove services from user group '${primary_key}'" +msgstr "从一个HBAC规则中移除服务和服务组。" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a group." +msgid "Remove users from user group '${primary_key}'" +msgstr "从一个组中移除成员。" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" + +msgid "Group Type" +msgstr "组类型" + +#, fuzzy +#| msgid "HBAC rule" +msgid "Add HBAC rule" +msgstr "HBAC规则" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an HBAC rule." +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "在一个HBAC规则中添加用户和用户组。" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "HBAC service groups to remove" +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "待移除的HBAC服务组" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "在HBAC规则中添加服务" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "在HBAC规则中添加服务" + +msgid "Accessing" +msgstr "访问" + +#, fuzzy +#| msgid "HBAC rules" +msgid "Remove HBAC rules" +msgstr "HBAC规则" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove service and service groups from an HBAC rule." +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "从一个HBAC规则中移除服务和服务组。" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "从一个HBAC规则中移除用户和用户组。" + +msgid "Via Service" +msgstr "通过服务" + +msgid "Who" +msgstr "谁" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add HBAC service" +msgstr "HBAC服务" + +#, fuzzy, python-brace-format +#| msgid "Add members to an HBAC service group." +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "在一个HBAC服务组中添加成员。" + +#, fuzzy +#| msgid "Member HBAC service" +msgid "Remove HBAC services" +msgstr "成员HBAC服务" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "从一个HBAC服务组中移除成员。" + +#, fuzzy +#| msgid "HBAC service group" +msgid "Add HBAC service group" +msgstr "HBAC服务组" + +#, fuzzy, python-brace-format +#| msgid "Add members to an HBAC service group." +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "在一个HBAC服务组中添加成员。" + +#, fuzzy +#| msgid "Member HBAC service groups" +msgid "Remove HBAC service groups" +msgstr "成员HBAC服务组" + +#, fuzzy, python-brace-format +#| msgid "Remove members from an HBAC service group." +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "从一个HBAC服务组中移除成员。" + +msgid "Access Denied" +msgstr "访问阻止" + +msgid "Access Granted" +msgstr "访问允许" + +msgid "Include Disabled" +msgstr "包含禁用的" + +msgid "Include Enabled" +msgstr "包含启用的" + +msgid "HBAC Test" +msgstr "HBAC测试" + +msgid "Matched" +msgstr "匹配" + +msgid "Missing values: " +msgstr "缺失值：" + +msgid "New Test" +msgstr "新测试" + +msgid "Rules" +msgstr "规则" + +msgid "Run Test" +msgstr "允许测试" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "指定外部的${entity}" + +msgid "Unmatched" +msgstr "不匹配" + +#, fuzzy +#| msgid "Add a new host." +msgid "Add host" +msgstr "添加一个新主机。" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "在HBAC规则中添加服务" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} overrides:" +msgid "Add host '${primary_key}' into roles" +msgstr "${primary_key}覆盖：" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "" + +msgid "Host Certificate" +msgstr "主机证书" + +msgid "Host Name" +msgstr "主机名" + +msgid "Delete Key, Unprovision" +msgstr "删除密钥，取消供应" + +msgid "Host Settings" +msgstr "主机设置" + +msgid "Enrolled" +msgstr "已注册" + +msgid "Enrollment" +msgstr "注册" + +msgid "Fully Qualified Host Name" +msgstr "完全限定的主机名" + +msgid "Generate OTP" +msgstr "生成OTP" + +msgid "Generated OTP" +msgstr "生成OTP" + +msgid "Kerberos Key" +msgstr "Kerberos密钥" + +msgid "Kerberos Key Not Present" +msgstr "没有找到Kerberos密钥" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "找到Kerberos密钥，主机分配" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password" +msgstr "一次性密码" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Not Present" +msgstr "一次性密码" + +#, fuzzy +#| msgid "One Time Password" +msgid "One-Time Password Present" +msgstr "一次性密码" + +msgid "Reset OTP" +msgstr "重置OTP" + +#, fuzzy +#| msgid "One Time Password" +msgid "Reset One-Time Password" +msgstr "一次性密码" + +msgid "Set OTP" +msgstr "设置OTP" + +msgid "OTP set" +msgstr "OTP设置" + +#, fuzzy +#| msgid "One Time Password" +msgid "Set One-Time Password" +msgstr "一次性密码" + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove hosts" +msgstr "删除持有" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a hostgroup." +msgid "Remove host '${primary_key}' from host groups" +msgstr "从一个主机组中移除成员。" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove host '${primary_key}' from netgroups" +msgstr "从一个网络组中移除成员。" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove host '${primary_key}' from roles" +msgstr "从一个角色中移除权限。" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, fuzzy, python-brace-format +#| msgid "Remove an option from Sudo Rule." +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "从Sudo规则中移除一个选项。" + +msgid "Unprovision" +msgstr "取消供应" + +#, fuzzy +#| msgid "Are you sure you want to proceed with the action?" +msgid "Are you sure you want to unprovision this host?" +msgstr "你确定要执行该操作吗？" + +#, fuzzy +#| msgid "Unprovision" +msgid "Unprovisioning host" +msgstr "取消供应" + +msgid "Host unprovisioned" +msgstr "主机未分配" + +#, fuzzy +#| msgid "host group" +msgid "Add host group" +msgstr "主机组" + +#, fuzzy, python-brace-format +#| msgid "%i hosts or hostgroups removed." +msgid "Add hosts into host group '${primary_key}'" +msgstr "%i主机或主机组已移除。" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "" + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" + +msgid "Host Group Settings" +msgstr "主机组设置" + +#, fuzzy +#| msgid "member host group" +msgid "Remove host groups" +msgstr "成员主机组" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "" + +msgid "User to override" +msgstr "待覆盖用户" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "键入受信任的用户或IPA用户登录。注意：查找不列举信任域中的用户。" + +msgid "Enter trusted user login." +msgstr "键入受信任的用户登录。" + +#, fuzzy +#| msgid "Profiles" +msgid "Profile" +msgstr "配置文件" + +msgid "Group to override" +msgstr "待覆盖的组" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "键入受信任的组或IPA组登录。注意：查找不列举信任域中的组。" + +msgid "Enter trusted group name." +msgstr "键入受信任的组名称。" + +#, fuzzy +#| msgid "Add a new ID View." +msgid "Add ID view" +msgstr "添加一个新的ID视图。" + +#, fuzzy +#| msgid "Group ID override" +msgid "Add group ID override" +msgstr "组ID覆盖" + +#, fuzzy +#| msgid "User ID override" +msgid "Add user ID override" +msgstr "用户ID覆盖" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key}适用于：" + +msgid "Applied to hosts" +msgstr "适用的主机" + +msgid "Apply to host groups" +msgstr "适用的主机组" + +#, fuzzy, python-brace-format +#| msgid "Un-apply ID Views from hosts of hostgroups" +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "不将ID视图应用到主机组中的主机" + +msgid "Apply to hosts" +msgstr "适用的主机" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "${primary_key}覆盖：" + +#, fuzzy +#| msgid "system ID View" +msgid "Remove ID views" +msgstr "系统ID视图" + +#, fuzzy +#| msgid "User ID overrides" +msgid "Remove user ID overrides" +msgstr "用户ID覆盖" + +#, fuzzy +#| msgid "Group ID overrides" +msgid "Remove group ID overrides" +msgstr "组ID覆盖" + +msgid "Un-apply from host groups" +msgstr "不适用的主机组" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "不将ID视图应用到主机组中的主机" + +msgid "Un-apply" +msgstr "不适用的" + +msgid "Un-apply from hosts" +msgstr "不适用的主机" + +msgid "Un-apply ID Views from hosts" +msgstr "不将ID视图应用到主机" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "你确定要在选择的条目中不应用ID视图？" + +#, fuzzy, python-brace-format +#| msgid "Un-apply ID Views from hosts" +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "不将ID视图应用到主机" + +#, fuzzy +#| msgid "netgroup" +msgid "Add netgroup" +msgstr "网络组" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "" + +msgid "Host" +msgstr "主机" + +msgid "Netgroup Settings" +msgstr "网络组设置" + +#, fuzzy +#| msgid "Member netgroups" +msgid "Remove netgroups" +msgstr "成员网络组" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "从一个网络组中移除成员。" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "从一个网络组中移除成员。" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove users from netgroup '${primary_key}'" +msgstr "从一个网络组中移除成员。" + +#, fuzzy +#| msgid "OTP token" +msgid "Add OTP token" +msgstr "OTP令牌" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"你可以使用FreeOTP 来充当OTP令牌的一" +"个应用软件。" + +msgid "Configure your token" +msgstr "配置你的令牌" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" +"通过浏览下面的二维码来配置你的令牌。如果你想在你配置的设备上看到该二维码，请" +"点击它。" + +msgid "OTP Token Settings" +msgstr "OTP令牌设置" + +msgid "Disable token" +msgstr "禁用令牌" + +msgid "Enable token" +msgstr "启用令牌" + +#, fuzzy +#| msgid "OTP tokens" +msgid "Remove OTP tokens" +msgstr "OTP令牌" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "" + +msgid "Show QR code" +msgstr "显示二维码" + +msgid "Show configuration uri" +msgstr "显示配置uri" + +msgid "Counter-based (HOTP)" +msgstr "计数型（HOTP）" msgid "Time-based (TOTP)" msgstr "计时型（TOTP）" -msgid "Timeout" -msgstr "超时" +msgid "Add Custom Attribute" +msgstr "添加自定义属性" -#, c-format -msgid "Timeout exceeded." -msgstr "严重超时" +msgid "Permission settings" +msgstr "权限设置" -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "为了建立信任活动目录，IPA服务器的域名和realm名必须匹配" +msgid "Attribute breakdown" +msgstr "属性分类" -msgid "To get command help, use:" -msgstr "获取命令帮助，使用：" +msgid "Privilege Settings" +msgstr "特权设置" -msgid "Token ID" -msgstr "令牌ID" +#, fuzzy +#| msgid "Public key" +msgid "Public key:" +msgstr "公钥" -msgid "Token description (informational only)" -msgstr "令牌描述（只是信息）" +#, fuzzy +#| msgid "SSH public key" +msgid "Set public key" +msgstr "SSH公钥" -msgid "Token hash algorithm" -msgstr "令牌散列算法" +msgid "Show/Set key" +msgstr "显示/设置密钥" -msgid "Token model (informational only)" -msgstr "令牌模式（只是信息）" +msgid "Modified: key not set" +msgstr "已修改：密钥没有设置" -msgid "Token secret (Base32; default: random)" -msgstr "令牌密码（Base32；默认：随机）" +msgid "Modified" +msgstr "已修改" -msgid "Token serial (informational only)" -msgstr "令牌序列号（只是信息）" +msgid "New: key not set" +msgstr "新的：密钥没有设置" -msgid "Token synchronization failed" -msgstr "令牌同步失败" +msgid "New: key set" +msgstr "新的：密钥已设置" -msgid "Token vendor name (informational only)" -msgstr "令牌供应商名称（只是信息）" +#, fuzzy +#| msgid "password policy" +msgid "Add password policy" +msgstr "密码策略" -msgid "Token was synchronized" -msgstr "令牌已同步" +msgid "Password Policy" +msgstr "密码策略" -msgid "Topic commands:" -msgstr "主题命令：" +#, fuzzy +#| msgid "password policies" +msgid "Remove password policies" +msgstr "密码策略" -msgid "Topic or Command" -msgstr "主题或命令" +#, fuzzy +#| msgid "Modify ID range." +msgid "Add ID range" +msgstr "修改ID范围。" -msgid "Topology" -msgstr "拓扑" +msgid "Range Settings" +msgstr "范围设置" -msgid "Topology Segment" -msgstr "拓扑段" +msgid "Base ID" +msgstr "基ID" -msgid "Topology Segments" -msgstr "拓扑段" +msgid "Primary RID base" +msgstr "主要的RID基" -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "拓扑不允许服务器%(server)s复制服务器：" +msgid "Range size" +msgstr "范围大小" -msgid "Topology is disconnected" -msgstr "拓扑已断开连接" +msgid "Domain SID" +msgstr "域SID" + +msgid "Secondary RID base" +msgstr "次要的RID基" + +#, fuzzy +#| msgid "ID Ranges" +msgid "Remove ID ranges" +msgstr "ID范围" + +msgid "Active Directory domain" +msgstr "活动目录域" + +msgid "Active Directory domain with POSIX attributes" +msgstr "带POSIX属性的活动目录域" + +msgid "Detect" +msgstr "检测" + +msgid "Local domain" +msgstr "本地域" + +msgid "IPA trust" +msgstr "IPA信任" + +#, fuzzy +#| msgid "Active Directory domain" +msgid "Active Directory winsync" +msgstr "活动目录域" + +#, fuzzy +#| msgid "RADIUS Server" +msgid "Add RADIUS server" +msgstr "RADIUS代理服务器" + +msgid "RADIUS Proxy Server Settings" +msgstr "RADIUS代理服务器设置" + +#, fuzzy +#| msgid "RADIUS Servers" +msgid "Remove RADIUS servers" +msgstr "RADIUS代理服务器" + +msgid "Check DNS" +msgstr "检测DNS" + +msgid "Do you also want to perform DNS check?" +msgstr "你还想执行DNS检查吗？" + +msgid "Force Update" +msgstr "强制更新" + +#, fuzzy +#| msgid "SELinux User Map" +msgid "Add SELinux user map" +msgstr "SELinux用户映射规则" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an SELinux User Map rule." +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "向SELinux用户映射规则中添加用户和用户组。" + +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an SELinux User Map rule." +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "向SELinux用户映射规则中添加用户和用户组。" #, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "拓扑管理需要最小域级别{0}" +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "" -msgid "Topology suffix" -msgstr "拓扑后缀" +#, fuzzy, python-brace-format +#| msgid "Add users and groups to an SELinux User Map rule." +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "向SELinux用户映射规则中添加用户和用户组。" -msgid "Topology suffixes" -msgstr "拓扑后缀" +msgid "Remove selinux user maps" +msgstr "" -msgid "Total number of variables env (>= count)" -msgstr "env变量总数（>= count）" +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "向SELinux用户映射规则中移除用户和用户组。" -msgid "True if not all results were returned" -msgstr "如果不是所有结果都返回了，那么为真" +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "向SELinux用户映射规则中移除用户和用户组。" -msgid "True means the operation was successful" -msgstr "正确的表示操作成功" +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "向SELinux用户映射规则中移除用户和用户组。" -msgid "Trust" -msgstr "信任" +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an SELinux User Map rule." +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "向SELinux用户映射规则中移除用户和用户组。" + +msgid "Server Roles" +msgstr "服务器角色" + +msgid "Server Role" +msgstr "服务器角色" + +msgid "Warning: Consider service replication" +msgstr "" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" + +msgid "Delete Server" +msgstr "删除服务器" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "从拓扑中永久地删除一台服务器。注意这是一个不可逆的操作。" + +#, fuzzy +#| msgid "HBAC service" +msgid "Add service" +msgstr "HBAC服务" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "" + +msgid "Service Certificate" +msgstr "服务证书" + +msgid "Service Settings" +msgstr "服务设置" + +#, fuzzy +#| msgid "Unprovision" +msgid "Provisioning" +msgstr "取消供应" + +#, fuzzy +#| msgid "Member services" +msgid "Remove services" +msgstr "成员服务" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove service '${primary_key}' from roles" +msgstr "从一个角色中移除权限。" + +#, fuzzy, python-brace-format +#| msgid "Remove hosts that can manage this service." +msgid "Remove hosts managing service '${primary_key}'" +msgstr "移除可以管理该服务的主机。" + +#, fuzzy +#| msgid "Are you sure you want to restore selected users?" +msgid "Are you sure you want to unprovision this service?" +msgstr "你确定要恢复被选用户？" + +#, fuzzy +#| msgid "Unprovision" +msgid "Unprovisioning service" +msgstr "取消供应" + +#, fuzzy +#| msgid "Host unprovisioned" +msgid "Service unprovisioned" +msgstr "主机未分配" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "找到Kerberos密钥，服务分配" + +msgid "SSH public keys" +msgstr "SSH公钥" + +msgid "SSH public key:" +msgstr "SSH公钥：" + +msgid "Set SSH key" +msgstr "设置SSH公钥" + +msgid "Are you sure you want to activate selected users?" +msgstr "你确定要激活被选用户？" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "你确定要激活${object}？" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "已激活${count}个用户" + +#, fuzzy +#| msgid "stage user" +msgid "Add stage user" +msgstr "计划用户" + +msgid "Stage users" +msgstr "计划用户" + +msgid "Preserved users" +msgstr "备用用户" + +#, fuzzy +#| msgid "Preserved users" +msgid "Remove preserved users" +msgstr "备用用户" + +#, fuzzy +#| msgid "stage users" +msgid "Remove stage users" +msgstr "计划用户" + +msgid "Are you sure you want to stage selected users?" +msgstr "你确定要呈现被选用户？" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "已呈现${count}个用户" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "你确定要呈现${object}？" + +msgid "Are you sure you want to restore selected users?" +msgstr "你确定要恢复被选用户？" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "你确定要恢复${object}？" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "已恢复${count}个用户" + +msgid "User categories" +msgstr "用户类别" + +#, fuzzy +#| msgid "sudo command" +msgid "Add sudo command" +msgstr "sudo命令" + +#, fuzzy, python-brace-format +#| msgid "comma-separated list of sudo command groups to add" +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "待添加的以逗号分隔的sudo命令组列表" + +#, fuzzy +#| msgid "member sudo command" +msgid "Remove sudo commands" +msgstr "成员sudo命令" + +#, fuzzy, python-brace-format +#| msgid "Remove members from Sudo Command Group." +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "从Sudo命令组中移除成员。" + +#, fuzzy +#| msgid "sudo command group" +msgid "Add sudo command group" +msgstr "sudo命令组" + +#, fuzzy, python-brace-format +#| msgid "Add commands and sudo command groups affected by Sudo Rule." +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "添加受Sudo规则影响的命令和sudo命令组。" + +#, fuzzy +#| msgid "member sudo command group" +msgid "Remove sudo command groups" +msgstr "成员sudo命令组" + +#, fuzzy, python-brace-format +#| msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "移除受Sudo规则影响的命令和命令组。" + +#, fuzzy +#| msgid "sudo rule" +msgid "Add sudo rule" +msgstr "sudo规则" + +#, fuzzy +#| msgid "Sudo Option" +msgid "Add sudo option" +msgstr "Sudo选项" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "sudo command groups to remove" +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "待移除的sudo命令组" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "sudo command groups to remove" +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "待移除的sudo命令组" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "" + +msgid "Allow" +msgstr "允许" + +msgid "Any Command" +msgstr "任何命令" + +msgid "Any Group" +msgstr "任何组" + +msgid "Run Commands" +msgstr "允许命令" + +msgid "Deny" +msgstr "阻止" + +msgid "Access this host" +msgstr "访问该主机" + +msgid "Option added" +msgstr "已添加选项" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "已删除${count}个选项" + +#, fuzzy +#| msgid "sudo rules" +msgid "Remove sudo rules" +msgstr "sudo规则" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "移除受Sudo规则影响的命令和命令组。" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "移除受Sudo规则影响的命令和命令组。" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "" + +msgid "As Whom" +msgstr "作为谁" + +msgid "Specified Commands and Groups" +msgstr "指定的命令和命令组" + +msgid "Specified Groups" +msgstr "指定的组" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove sudo options" +msgstr "删除权限" + +msgid "Autogenerated" +msgstr "自动生成" + +msgid "Segment details" +msgstr "部分细节" + +msgid "Replication configuration" +msgstr "复制配置" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "管理拓扑需要最小的域级别${domainlevel}" + +#, fuzzy +#| msgid "Add a new IPA location." +msgid "Add IPA location" +msgstr "添加一个新的IPA位置。" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "" +#| "\n" +#| "IPA locations\n" +msgid "Remove IPA locations" +msgstr "" +"\n" +"IPA位置\n" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Topology Segment" +msgid "Add topology segment" +msgstr "拓扑段" + +#, fuzzy +#| msgid "Search for topology segments." +msgid "Remove topology segments" +msgstr "查找拓扑段。" + +msgid "Account" +msgstr "账户" + +#, fuzzy +#| msgid "IPA trust" +msgid "Add trust" +msgstr "IPA信任" + +msgid "Administrative account" +msgstr "管理员账户" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklists" +msgstr "进来的SID黑名单" msgid "Trust Settings" msgstr "信任设置" +msgid "Establish using" +msgstr "建立使用" + +msgid "Fetch domains" +msgstr "获取域名" + +msgid "Pre-shared password" +msgstr "预先共享的密码" + +#, fuzzy +#| msgid "Remove Permission" +msgid "Remove trusts" +msgstr "删除权限" + +#, fuzzy +#| msgid "Realm domains" +msgid "Remove domains" +msgstr "Realm域" + msgid "Trust direction" msgstr "信任方向" @@ -10271,11 +21214,1702 @@ msgstr "信任状态" msgid "Trust type" msgstr "信任类型" -msgid "Trust type (ad for Active Directory, default)" -msgstr "信任类型（活动目录，默认）" +msgid "Alternative UPN suffixes" +msgstr "可供选择的UPN后缀" -msgid "Trusted domain" -msgstr "已信任的域" +#, fuzzy +#| msgid "Search for HBAC services." +msgid "User attributes for SMB services" +msgstr "查找HBAC服务。" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" + +msgid "Path to a user home directory, in UNC format" +msgstr "" + +#, fuzzy +#| msgid "Default location of home directories" +msgid "Drive to mount a home directory" +msgstr "主目录的默认位置" + +msgid "Account Settings" +msgstr "账户设置" + +msgid "Account Status" +msgstr "账户状态" + +msgid "Active users" +msgstr "活跃用户" + +#, fuzzy +#| msgid "Add a new user." +msgid "Add user" +msgstr "添加一个新用户。" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Add services to an HBAC rule." +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "在HBAC规则中添加服务" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "${primary_key} overrides:" +msgid "Add user '${primary_key}' into roles" +msgstr "${primary_key}覆盖：" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "" + +msgid "Contact Settings" +msgstr "联系方式设置" + +msgid "Delete mode" +msgstr "删除模式" + +msgid "Employee Information" +msgstr "员工信息" + +msgid "Error changing account status" +msgstr "错误更改帐户状态" + +msgid "Password expiration" +msgstr "密码过期" + +msgid "Mailing Address" +msgstr "邮件地址" + +msgid "Misc. Information" +msgstr "杂项信息" + +msgid "delete" +msgstr "删除" + +msgid "preserve" +msgstr "保存" + +msgid "No private group" +msgstr "没有私有组" + +#, fuzzy +#| msgid "Member users" +msgid "Remove users" +msgstr "成员用户" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a group." +msgid "Remove user '${primary_key}' from user groups" +msgstr "从一个组中移除成员。" + +#, fuzzy, python-brace-format +#| msgid "Remove members from a netgroup." +msgid "Remove user '${primary_key}' from netgroups" +msgstr "从一个网络组中移除成员。" + +#, fuzzy, python-brace-format +#| msgid "Remove privileges from a role." +msgid "Remove user '${primary_key}' from roles" +msgstr "从一个角色中移除权限。" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, fuzzy, python-brace-format +#| msgid "Remove an option from Sudo Rule." +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "从Sudo规则中移除一个选项。" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "你确定要${action}用户？
改变会立即生效。" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "点击${action}" + +msgid "Unlock" +msgstr "解锁" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "你确定要解锁用户${object}？" + +#, fuzzy +#| msgid "vault" +msgid "Add vault" +msgstr "库" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" + +msgid "Asymmetric" +msgstr "" + +#, fuzzy +#| msgid "Vault Container" +msgid "Vaults Config" +msgstr "库容器" + +#, fuzzy +#| msgid "Member Host" +msgid "Members" +msgstr "成员主机" + +#, fuzzy +#| msgid "Vaults" +msgid "My User Vaults" +msgstr "库" + +#, fuzzy +#| msgid "Owner" +msgid "Owners" +msgstr "所有者" + +#, fuzzy +#| msgid "Remove hold" +msgid "Remove vaults" +msgstr "删除持有" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "" + +#, fuzzy, python-brace-format +#| msgid "Remove users and groups from an HBAC rule." +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "从一个HBAC规则中移除用户和用户组。" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "" + +#, fuzzy +#| msgid "Services" +msgid "Service Vaults" +msgstr "服务" + +#, fuzzy +#| msgid "Shared vault" +msgid "Shared" +msgstr "共享库" + +#, fuzzy +#| msgid "Shared vault" +msgid "Shared Vaults" +msgstr "共享库" + +msgid "Standard" +msgstr "" + +msgid "Symmetric" +msgstr "" + +#, fuzzy +#| msgid "Vault type" +msgid "Vault Type" +msgstr "库类型" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" + +#, fuzzy +#| msgid "Vaults" +msgid "User Vaults" +msgstr "库" + +msgid "Current password is required" +msgstr "需要当前密码" + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "你的密码将在${days}天到期。" + +msgid "First OTP" +msgstr "第一个OTP" + +msgid "New password is required" +msgstr "需要新密码" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" + +msgid "Token synchronization failed" +msgstr "令牌同步失败" + +msgid "The username, password or token codes are not correct" +msgstr "用户名，密码或令牌码不争取" + +msgid "Token was synchronized" +msgstr "令牌已同步" + +msgid "Password change complete" +msgstr "完成密码更改" + +#, fuzzy +#| msgid "Your password expires in ${days} days." +msgid "Your password has expired. Please enter a new password." +msgstr "你的密码将在${days}天到期。" + +msgid "Passwords must match" +msgstr "密码必须匹配" + +msgid "Password reset was not successful." +msgstr "密码重置失败。" + +msgid "Reset your password." +msgstr "重置你的密码。" + +msgid "Second OTP" +msgstr "第二个OTP" + +msgid "Verify Password" +msgstr "验证密码" + +msgid "Are you sure you want to delete selected entries?" +msgstr "你确定要删除被选条目？" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "已删除${count}个条目" + +msgid "Are you sure you want to disable selected entries?" +msgstr "你确定要禁用被选条目？" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "已禁用${count}个条目" + +msgid "Are you sure you want to enable selected entries?" +msgstr "你确定要启用被选条目？" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "已启用${count}个条目" + +msgid "Some entries were not deleted" +msgstr "一些条目没有被删除" + +msgid "Quick Links" +msgstr "快速链接" + +msgid "Select All" +msgstr "选择全部" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "返回比配置大小限制更多的结果。显示第一个${counter}结果。" + +msgid "Unselect All" +msgstr "取消选择全部" + +msgid "" +"

Browser Kerberos Setup

\n" +"\n" +msgstr "" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" + +msgid "Working" +msgstr "工作中" + +msgid "Audit" +msgstr "审计" + +msgid "Authentication" +msgstr "身份验证" + +msgid "Automount" +msgstr "自动挂载" + +msgid "DNS" +msgstr "DNS" + +#, fuzzy +#| msgid "Host-based access control commands" +msgid "Host-Based Access Control" +msgstr "基于主机访问控制命令" + +msgid "Identity" +msgstr "身份" + +msgid "Network Services" +msgstr "网络服务" + +msgid "Policy" +msgstr "策略" + +#, fuzzy +#| msgid "Host-based access control commands" +msgid "Role-Based Access Control" +msgstr "基于主机访问控制命令" + +#, fuzzy +#| msgid "Sudo Rule" +msgid "Sudo" +msgstr "Sudo规则" + +msgid "Topology" +msgstr "拓扑" + +msgid "Trusts" +msgstr "信任" + +msgid "True" +msgstr "" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" +"\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" + +msgid "API Browser" +msgstr "API概述" + +msgid "First" +msgstr "第一" + +msgid "Last" +msgstr "最后" + +msgid "Next" +msgstr "下一个" + +msgid "Page" +msgstr "页" + +msgid "Prev" +msgstr "上一个" + +msgid "Undo" +msgstr "取消" + +msgid "Undo this change." +msgstr "取消这个更改。" + +msgid "Undo All" +msgstr "取消全部" + +msgid "Undo all changes in this field." +msgstr "取消在这个字段做的所有更改。" + +msgid "Text does not match field pattern" +msgstr "文本不匹配字段模式" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "必须是一个UTC时间值（例如：\"2014-01-20 17:58:01Z\"）" + +msgid "Must be a decimal number" +msgstr "必须是一个小数" + +msgid "Format error" +msgstr "格式错误" + +msgid "Must be an integer" +msgstr "必须是一个整数" + +msgid "Not a valid IP address" +msgstr "不是一个有效的IP地址" + +msgid "Not a valid IPv4 address" +msgstr "不是一个有效的IPv4地址" + +msgid "Not a valid IPv6 address" +msgstr "不是一个有效的IPv6地址" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "最大值是${value}" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "最小值是${value}" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "不是一个有效的网络地址（例如：2001:db8::/64, 192.0.2.0/24）" + +msgid "Parse error" +msgstr "解析错误" + +#, fuzzy +#| msgid "Must be a decimal number" +msgid "Must be a positive number" +msgstr "必须是一个小数" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "'${port}'不是一个有效的端口" + +msgid "Required field" +msgstr "必需字段" + +msgid "Unsupported value" +msgstr "不支持的值" + +msgid "Role" +msgstr "角色" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "已添加角色\"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "已删除角色\"%(value)s\"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "已修改角色\"%(value)s\"" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "已匹配%(count)d个角色" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"IPA服务器\n" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"获取安装IPA服务器信息。\n" + +#, fuzzy +#| msgid "Find a server role on a server(s)" +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "在服务器上找到一个服务器角色" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" + +msgid "server" +msgstr "服务器" + +msgid "servers" +msgstr "服务器" + +msgid "IPA Servers" +msgstr "IPA服务器" + +msgid "Server location" +msgstr "服务器位置" + +#, fuzzy +#| msgid "Service Settings" +msgid "Service weight" +msgstr "服务设置" + +msgid "Weight for server services" +msgstr "服务器服务权重" + +#, fuzzy +#| msgid "Service delegation target" +msgid "Service relative weight" +msgstr "服务授权目标" + +#, fuzzy +#| msgid "Relative weight for entries with the same priority." +msgid "Relative weight for server services (counts per location)" +msgstr "拥有相同优先级条目的相对权重。" + +msgid "Enabled server roles" +msgstr "已启用服务器角色" + +msgid "List of enabled roles" +msgstr "已启用角色列表" + +msgid "Modify information about an IPA server." +msgstr "修改一个IPA服务器信息。" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "已修改IPA服务器\"%(value)s\"" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "已匹配%(count)d个IPA服务器" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "已删除IPA服务器\"%(value)s\"" + +msgid "Ignore topology errors" +msgstr "忽略拓扑错误" + +msgid "Ignore topology connectivity problems after removal" +msgstr "删除后忽略拓扑连通性问题" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "不检查最后的CA或DNS服务器" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "不检查最后一个CA主服务器或DNS服务器是否被删除了" + +msgid "Force server removal" +msgstr "强制服务器删除" + +msgid "Force server removal even if it does not exist" +msgstr "强制服务器删除即使它不存在" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"副本是活跃的DNSSEC密钥主机。卸载会导致你DNS系统崩溃。首先请禁用或替代DNSSEC密" +"钥主机。" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "删除这台服务器将使得你的安装过程没有DNS。" + +#, fuzzy +#| msgid "" +#| "Deleting this server is not allowed as it would leave your installation " +#| "without a CA." +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "忽略这些警告并给予清除" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "从s4u2proxy条目%(dn)s中清除成员主体%(principal)s失败：%(err)s" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "为%(master)s清除DNA主机名条目失败：%(err)s" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "从服务器列表中删除服务器%(master)s失败：%(err)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "为%(master)s清除Custodia密钥失败：%(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "清除服务器主体/密钥失败：%(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "清除%(hostname)s DNS条目失败：%(err)s" + +msgid "You may need to manually remove them from the tree" +msgstr "你可能需要从树中手动删除它们" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "强制删除%(hostname)s" + +msgid "Ignoring topology connectivity errors." +msgstr "忽略拓扑连通性错误。" + +msgid "Server has already been deleted" +msgstr "服务器已被删除" + +msgid "Agreements deleted" +msgstr "协议已删除" + +msgid "Following segments were not deleted:" +msgstr "下面部分没有被删除：" + +#, python-format +msgid "must be \"%s\"" +msgstr "必须是\"%s\"" + +msgid "not allowed to perform server connection check" +msgstr "不允许执行服务器连接检查" + +#, fuzzy +#| msgid "Show role status on a server" +msgid "Set enabled/hidden state of a server." +msgstr "显示服务器角色状态" + +#, fuzzy +#| msgid "Status" +msgid "State" +msgstr "状态" + +#, fuzzy +#| msgid "Server Name" +msgid "Server state" +msgstr "服务器名" + +#, fuzzy, python-format +#| msgid "Changed password for \"%(value)s\"" +msgid "Changed server state of \"%(value)s\"." +msgstr "已改变\"%(value)s\"的密码" + +#, fuzzy +#| msgid "IPA CA renewal master" +msgid "Cannot hide CA renewal master." +msgstr "IPA CA更新主服务器" + +#, fuzzy +#| msgid "IPA DNSSec key master" +msgid "Cannot hide DNSSec key master." +msgstr "IPA DNSSec密钥主机" + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" + +msgid "Allowed to Impersonate" +msgstr "允许模仿" + +msgid "Member principals" +msgstr "成员主体" + +#, fuzzy, python-format +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal: %(error)s" +msgstr "有缺陷的主体：'%(value)s'" + +msgid "Add target to a named service delegation." +msgstr "添加目标到一个命名服务授权。" + +#, python-format +msgid "member %s" +msgstr "成员%s" + +msgid "Remove member from a named service delegation." +msgstr "从一个命名服务授权中删除成员。" + +msgid "service delegation rule" +msgstr "服务授权规则" + +msgid "service delegation rules" +msgstr "服务授权规则" + +msgid "Service delegation rules" +msgstr "服务授权规则" + +msgid "Service delegation rule" +msgstr "服务授权规则" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "已添加服务授权规则\"%(value)s\"" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "已删除服务授权规则\"%(value)s\"" + +msgid "privileged service delegation rule" +msgstr "特权服务授权规则" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "已匹配%(count)d个服务授权规则" + +msgid "service delegation target" +msgstr "服务授权目标" + +msgid "service delegation targets" +msgstr "服务授权目标" + +msgid "Service delegation targets" +msgstr "服务授权目标" + +msgid "Service delegation target" +msgstr "服务授权目标" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "已添加服务授权目标\"%(value)s\"" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "已删除服务授权目标\"%(value)s\"" + +msgid "privileged service delegation target" +msgstr "特权服务授权目标" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "已匹配%(count)d个服务授权目标" + +msgid "" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" +msgstr "" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "Kerberos主体%s已存在。使用'ipa user-mod'来手动设置它。" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "不能确定Kerberos主体%s是否存在。使用'ipa user-mod'来手动设置它。" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "添加用户到默认组失败。使用'ipa group-add-member'来手动添加。" + +msgid "Migration of LDAP search reference is not supported." +msgstr "LDAP搜索帮助移植不支持。" + +msgid "Malformed DN" +msgstr "" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s不是一个POSIX用户" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "检查存在组的GID。使用--group-overwrite-gid选项来覆盖GID" + +msgid "Invalid LDAP URI." +msgstr "无效的LDAP URI。" + +#, python-format +msgid "%s to exclude from migration" +msgstr "不移植%s" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "查询待移植对象的结果被服务器拦截；移植过程可能没有完成\n" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"%(container)s LDAP搜索没有返回任何结果（搜索基：%(search_base)s，对象类： " +"%(objectclass)s）" + +msgid "Default group for new users not found" +msgstr "新用户的默认组没有找到" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" + +#, fuzzy +#| msgid "" +#| "Disable the Kerberos key, SSL certificate and all services of a host." +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "禁用该主机的Kerberos密钥，SSL证书和所有的服务。" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" + +msgid "Base-64 encoded host certificate" +msgstr "Base-64编码的主机证书" + +msgid "Principal alias" +msgstr "主体别名" + +msgid "SSH public key fingerprint" +msgstr "SSH公钥指纹" + +msgid "Authentication Indicators" +msgstr "认证指标" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "新增主机 \"%(value)s\"" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "已删除主机 \"%(value)s\"" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "移除被IPA DNS管理的主机的A，AAAA，SSHFP和PTR记录" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "没有找到A，AAAA，SSHFP和PTR记录。" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "已修改主机 \"%(value)s\"" + +msgid "Password cannot be set on enrolled host." +msgstr "密码不能在注册主机上设置。" + +msgid "cn is immutable" +msgstr "cn是不变的" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "已匹配%(count)d个主机" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "已禁用主机\"%(value)s\"" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "已向主机\"%(value)s\"中添加证书" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "已从主机\"%(value)s\"中移除证书" + +msgid "Add new principal alias to host entry" +msgstr "为主机条目添加新的主体别名" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "已为主机\"%(value)s\"添加新别名" + +msgid "Remove principal alias from a host entry" +msgstr "从一个主机条目中移除主体别名" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "已从主机\"%(value)s\"中移除别名" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "优先权必须是一个唯一值（(%(prio)d已被%(gname)s使用）" + +msgid "Add Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Delete an IPA service." +msgid "Delete Class of Service entry" +msgstr "删除一个IPA服务。" + +#, fuzzy +#| msgid "Modify an HBAC service group." +msgid "Modify Class of Service entry" +msgstr "修改一个HBAC服务组。" + +msgid "Display Class of Service entry" +msgstr "" + +#, fuzzy +#| msgid "Search for an HBAC service group." +msgid "Search for Class of Service entry" +msgstr "查找一个HBAC服务组。" + +msgid "password policy" +msgstr "密码策略" + +msgid "password policies" +msgstr "密码策略" + +msgid "Password Policies" +msgstr "密码策略" + +msgid "Max repeat" +msgstr "" + +#, fuzzy +#| msgid "Maximum number of entries returned" +msgid "Maximum number of same consecutive characters" +msgstr "返回的最大条目数" + +msgid "Max sequence" +msgstr "" + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "" + +msgid "Dictionary check" +msgstr "" + +msgid "Check if the password is a dictionary word" +msgstr "" + +#, fuzzy +#| msgid "User name" +msgid "User check" +msgstr "用户名" + +msgid "Check if the password contains the username" +msgstr "" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" + +msgid "Maximum password life must be greater than minimum." +msgstr "最小密码生存周期必须比最小值大。" + +msgid "cannot delete global password policy" +msgstr "不能删除全局密码策略" + +msgid "priority cannot be set on global policy" +msgstr "优先权布不能在本地策略上设置" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" +"\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" +"\"\n" +msgstr "" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "另外，下面服务器可以运行该命令：%(masters)s" + +msgid "AD Trust setup" +msgstr "AD信任设置" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"没有安装Samba 4不能执行被选命令。确认你已经在IPA上安装了server-trust-ad子包。" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"没有在该机器上进行Samba 4实例配置不能执行被选命令。确认你已经在该服务器上运行" +"ipa-adtrust-install。" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"没有自己的域配置不能在信任域中查找。首先确认你已经在IPA服务器上运行了ipa-" +"adtrust-install命令" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "从信任森林中获取域失败。在error_log中查看详细信息" + +msgid "trust" +msgstr "信任" + +msgid "trusts" +msgstr "信任" + +msgid "Trust" +msgstr "信任" + +#, fuzzy +#| msgid "SID blacklist incoming" +msgid "SID blocklist incoming" +msgstr "进来的SID黑名单" + +#, fuzzy +#| msgid "SID blacklist outgoing" +msgid "SID blocklist outgoing" +msgstr "出去的SID黑名单" + +msgid "UPN suffixes" +msgstr "UPN后缀" + +#, fuzzy, python-brace-format +#| msgid "invalid Profile ID" +msgid "invalid SID: {SID}" +msgstr "无效的配置文件ID" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" + +#, fuzzy +#| msgid "" +#| "Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" + +msgid "External trust" +msgstr "外部的信任" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "建立外部信任到另一个森林域中。信任不会在域外传递。" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "已添加活动目录域\"%(value)s\"" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "重建信任域\"%(value)s\"" + +msgid "missing base_id" +msgstr "缺少base_id" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "pysss_murmur在服务器上不可用并没有提供base-id。" + +msgid "trust type" +msgstr "信任类型" + +msgid "only \"ad\" is supported" +msgstr "仅支持\"ad\"" + +msgid "domain" +msgstr "域" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "不能建立一个信任到部署在IPA同一域中的AD。这样的设置不支持。" + +msgid "Realm-domain mismatch" +msgstr "Realm-domain不匹配" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "为了建立信任活动目录，IPA服务器的域名和realm名必须匹配" #, python-format msgid "" @@ -10289,871 +22923,663 @@ msgstr "" msgid "Trusted domain and administrator account use different realms" msgstr "信任域和管理员账户使用不同域" -msgid "Trusted domain did not return a unique object" -msgstr "信任域没有返回一个唯一的对象" +msgid "Realm administrator password should be specified" +msgstr "域管理员密码应该被指定" -msgid "Trusted domain did not return a valid SID for the object" -msgstr "信任域没有为对象返回一个有效的SID" - -msgid "Trusted domain partner" -msgstr "信任域合作伙伴" - -msgid "Trusted domains" -msgstr "已信任的域" - -msgid "Trusted for delegation" -msgstr "允许授权" - -msgid "Trusted forest" -msgstr "信任森林" - -msgid "Trusted to authenticate as user" -msgstr "信任用户认证" - -msgid "Trusting forest" -msgstr "信任森林" - -msgid "Trusts" -msgstr "信任" - -msgid "Two factor authentication (password + OTP)" -msgstr "双因素认证（密码+OTP）" - -msgid "Two-way trust" -msgstr "双向信任" - -msgid "Type" -msgstr "类型" - -msgid "Type Covered" -msgstr "类型覆盖" - -msgid "Type Map" -msgstr "类型映射" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "IPA目标类型（设置子树和对象类目标过滤器）" +msgid "id range type" +msgstr "id范围类型" msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "IPA对象类型（用户，用户组，主机，主机组，服务，网络组，dns）" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"当添加一个AD信任时仅有ipa-ad-trust和ipa-ad-trust-posix允许--range-type值。" -msgid "Type of the token" -msgstr "令牌类型" +msgid "id range" +msgstr "id范围" msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"id范围已在该域中存在。你要么删除旧的范围，要么从命令中排除--base-id/--range-" +"size选项。" -msgid "Types of supported user authentication" -msgstr "支持的用户认证类型" - -msgid "UID" -msgstr "UID" - -msgid "UPN suffixes" -msgstr "UPN后缀" - -msgid "Un-apply" -msgstr "不适用的" - -msgid "Un-apply ID Views from hosts" -msgstr "不将ID视图应用到主机" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "不将ID视图应用到主机组中的主机" - -msgid "Un-apply from host groups" -msgstr "不适用的主机组" - -msgid "Un-apply from hosts" -msgstr "不适用的主机" - -msgid "Unable to communicate with CMS" -msgstr "不能与CMS通信" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "不能与CMS通信（状态%d）" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "不能创建私有组。组'%(group)s'已存在。" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "无法从%s中确定IPA主机\n" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "不能确定Kerberos主体%s是否存在。使用'ipa user-mod'来手动设置它。" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "无法确定%s的根DN\n" +msgid "range exists" +msgstr "范围内存在" msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "使用输出编码配置无法显示二维码。请使用令牌URI来配置你的OTP设备" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "同名但不同域SID的ID范围已存在。新信任域的ID范围必须手动创建。" -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "在LDAP中不能启用SSL\n" +msgid "range type change" +msgstr "范围类型改变" -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "无法生成Kerberos凭证缓存\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "不能初始化ldap库！\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "无法加入主机：找不到Kerberos凭证缓存\n" - -#, c-format msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "无法加入主机：找不到Kerberos用户主体并且没有提供主机密码。\n" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"信任域的ID范围已存在，但它有一个不同类型。请手动删除旧的范围，或者通过--" +"range-type选项不强制类型。" -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "无法加入主机：Kerberos上下文初始化失败\n" +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" -#, c-format -msgid "Unable to parse principal\n" -msgstr "服务解析主体\n" +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "在IPA DNS中转发器策略阻止了它，也许是转发器指向了不正确的主机？" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "无法解析主体名\n" +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "不能解析主体：%1$s (%2$d)\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "无法删除条目\n" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "不能设置LDAP_OPT_PROTOCOL_VERSION\n" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "不能设置LDAP_OPT_X_SASL_NOCANON\n" +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" msgid "Unable to verify write permissions to the AD" msgstr "不能在AD中验证写权限" -msgid "Undelete a delete user account." -msgstr "恢复删除用户账户。" +msgid "Not enough arguments specified to perform trust setup" +msgstr "执行信任设置时没有指定足够的参数" #, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "已恢复用户账户\"%(value)s\"" - -msgid "Undo" -msgstr "取消" - -msgid "Undo All" -msgstr "取消全部" - -msgid "Undo all changes in this field." -msgstr "取消在这个字段做的所有更改。" - -msgid "Undo this change." -msgstr "取消这个更改。" - -msgid "Unenroll this host from IPA server" -msgstr "从IPA服务器中取消注册该主机" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "取消注册失败。\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "取消注册成功。\n" - -msgid "Unique ID" -msgstr "唯一ID" - -msgid "Unknown" -msgstr "未知的" - -msgid "Unknown Error" -msgstr "未知的错误" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "未知的选项：%(option)s" - -msgid "Unlock" -msgstr "解锁" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "已解锁账户\"%(value)s\"" - -msgid "Unmatched" -msgstr "不匹配" - -msgid "Unprovision" -msgstr "取消供应" - -msgid "Unresolved rules in --rules" -msgstr "在--rules中不能解析的规则" - -msgid "Unrevoked" -msgstr "未撤销的" - -msgid "Unsaved Changes" -msgstr "未保存的更改" - -msgid "Unselect All" -msgstr "取消选择全部" - -msgid "Unspecified" -msgstr "未指定的" - -msgid "Unsupported value" -msgstr "不支持的值" - -msgid "Update" -msgstr "更新" - -msgid "Update DNS entries" -msgstr "更新DNS条目" - -msgid "Update System DNS Records" -msgstr "更新系统DNS记录" - -msgid "Update location and IPA server DNS records" -msgstr "更新位置和IPA服务器DNS记录" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "更新系统记录'%(record)s'失败：%(error)s" - -msgid "User" -msgstr "用户" - -msgid "User Group" -msgstr "用户组" - -msgid "User Groups" -msgstr "用户组" - -msgid "User ID" -msgstr "用户ID" - -msgid "User ID Number" -msgstr "用户ID号码" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "用户ID号码（如果没有提供系统会分配一个）" - -msgid "User ID override" -msgstr "用户ID覆盖" - -msgid "User ID overrides" -msgstr "用户ID覆盖" - -msgid "User Options" -msgstr "用户选项" - -msgid "User attribute" -msgstr "用户属性" - -msgid "User authentication types" -msgstr "用户认证类型" - -msgid "User categories" -msgstr "用户类别" - -msgid "User category" -msgstr "用户类别" +msgid "Deleted trust \"%(value)s\"" +msgstr "已删除信任\"%(value)s\"" msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "用户类别（该属性的语义是就近解读）" - -msgid "User category the ACL applies to" -msgstr "ACL适用于用户类别" - -msgid "User category the rule applies to" -msgstr "规则应用的用户类别" - -msgid "User container" -msgstr "用户容器" - -msgid "User group" -msgstr "用户组" - -msgid "User group ACI grants access to" -msgstr "ACI授予访问的用户组" - -msgid "User group rule" -msgstr "用户组规则" - -msgid "User group rules" -msgstr "用户组规则" - -msgid "User group to apply permissions to" -msgstr "待应用权限的用户组" - -msgid "User login" -msgstr "用户登录名" - -msgid "User name" -msgstr "用户名" - -msgid "User object class" -msgstr "用户对象类" - -msgid "User object overrides" -msgstr "用户对象覆盖" - -msgid "User password" -msgstr "用户密码" - -msgid "User search fields" -msgstr "用户搜索字段" - -msgid "User to override" -msgstr "待覆盖用户" - -msgid "User-friendly description of action performed" -msgstr "方便用户的执行操作描述" - -msgid "User-specified attributes to which the permission applies" -msgstr "权限可以应用用户指定属性" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "权限明确不能应用到用户指定的属性" - -msgid "Username" -msgstr "用户名" - -msgid "Username of the user vault" -msgstr "用户库的用户名" - -msgid "Users" -msgstr "用户" - -msgid "Users allowed to create keytab" -msgstr "允许创建keytab的用户" - -msgid "Users allowed to retrieve keytab" -msgstr "允许检索keytab的用户" - -msgid "Valid Certificate Present" -msgstr "有效证书展示" - -msgid "Valid from" -msgstr "有效起始日期" - -msgid "Valid to" -msgstr "有效终止日期" - -msgid "Validation error" -msgstr "验证错误" - -msgid "Validity" -msgstr "有效性" - -msgid "Validity end" -msgstr "有效期结束于" - -msgid "Validity start" -msgstr "有效期开始于" - -msgid "Vault" -msgstr "库" - -msgid "Vault Container" -msgstr "库容器" - -msgid "Vault Containers" -msgstr "库容器" - -msgid "Vault configuration" -msgstr "库配置" - -msgid "Vault data encrypted with session key" -msgstr "库数据用会话密钥加密" - -msgid "Vault description" -msgstr "库描述" - -msgid "Vault name" -msgstr "库名称" - -msgid "Vault password" -msgstr "库密码" - -msgid "Vault private key" -msgstr "库私钥" - -msgid "Vault public key" -msgstr "库公钥" - -msgid "Vault salt" -msgstr "库盐值" - -msgid "Vault service" -msgstr "库服务" - -msgid "Vault type" -msgstr "库类型" - -msgid "Vault user" -msgstr "共享用户" - -msgid "Vaults" -msgstr "库" - -msgid "Vendor" -msgstr "供应商" - -msgid "Verify Password" -msgstr "验证密码" - -msgid "Verify Principal Password" -msgstr "验证主体密码" - -msgid "Version" -msgstr "版本" - -msgid "Vertical Precision" -msgstr "垂直精度" - -msgid "Via Service" -msgstr "通过服务" - -msgid "View" -msgstr "查看" - -msgid "View Certificate" -msgstr "新证书" - -msgid "Waiting for confirmation by remote side" -msgstr "等待远程端的确认" - -msgid "Warning" -msgstr "警告" - -msgid "Warning unrecognized encryption type.\n" -msgstr "警告无法识别加密类型。\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "警告无法识别盐值类型。\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "警告：转换类型失败（#%d）\n" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "警告：盐值类型没有授予随机密码（查看选项-P）\n" - -msgid "Weight" -msgstr "重量" - -msgid "Weight for server services" -msgstr "服务器服务权重" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "当移植一个在IPA域中已存在的组时覆盖组GID并报告成功" - -msgid "Whether to store certs issued using this profile" -msgstr "是否存储使用该配置文件的证书发布" - -msgid "Who" -msgstr "谁" - -msgid "Working" -msgstr "工作中" - -msgid "Write profile configuration to file" -msgstr "将配置文件配置写进文件" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " msgstr "" -"你正尝试引用一个不允许覆盖的神奇私有组。而不是尝试覆盖对应用户的GID属性。" -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "已修改信任\"%(value)s\"（改变将在60s内生效）" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "已匹配%(count)d个信任" + +msgid "trust configuration" +msgstr "信任配置" + +msgid "Global Trust Configuration" +msgstr "全局信任配置" + +msgid "IPA AD trust agents" +msgstr "IPA AD信任代理" + +msgid "IPA servers configured as AD trust agents" +msgstr "IPA服务器配置为AD信任代理" + +msgid "IPA AD trust controllers" +msgstr "IPA AD信任控制器" + +msgid "IPA servers configured as AD trust controllers" +msgstr "IPA服务器配置为AD信任控制器" + +msgid "unsupported trust type" +msgstr "不支持的信任类型" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "已修改\"%(value)s\"信任配置" + +#, fuzzy +#| msgid "GID" +msgid "SID" +msgstr "GID" + +msgid "sidgen_was_run" msgstr "" -"你可以使用FreeOTP 来充当OTP令牌的一" -"个应用软件。" - -msgid "You may need to manually remove them from the tree" -msgstr "你可能需要从树中手动删除它们" - -msgid "You must enroll a host in order to create a host service" -msgstr "要创建一个主机服务，你必须注册一个主机" msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"你必须同时指定 rid-base和secondary-rid-base选项，因为ipa-adtrust-install已经" -"运行了。" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "该命令依赖于\"editors\"组的存在，但是该组没有找到。" -msgid "You will be redirected to DNS Zone." -msgstr "你将会被重定向到DNS区域。" +msgid "trust domain" +msgstr "信任域" -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "你的密码将在${days}天到期。" +msgid "trust domains" +msgstr "信任域" + +msgid "Trusted domains" +msgstr "已信任的域" + +msgid "Trusted domain" +msgstr "已信任的域" + +msgid "Domain enabled" +msgstr "域已启用" #, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "你对域%(domain)s的信任已中断。请再次运行'ipa trust-add'来重新创建它。" - -msgid "YubiKey slot" -msgstr "YubiKey槽" - -msgid "Zone forwarders" -msgstr "区域转发器" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "找到区域：${zone}" - -msgid "Zone name" -msgstr "区域名" - -msgid "Zone name (FQDN)" -msgstr "区域名（FQDN）" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "区域记录'%s'不能被删除" - -msgid "Zone refresh interval" -msgstr "区域刷新间隔" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "活跃用户名\"%(user)s\"已存在" - -msgid "algorithm value: allowed interval 0-255" -msgstr "算法值：允许间隔0-255" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "所有的主服务器必须已启用角色%(role)s" - -msgid "an internal error has occurred" -msgstr "发生了内部错误" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "服务器 '%(server)s' 已经发生了一次内部错误" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "查询答案'%(owner)s %(rtype)s'缺少DNSSEC签名（没有RRSIG数据）" - -msgid "any of the configured servers" -msgstr "任何已配置的服务器" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api没有这样的命名空间：'%(name)s'" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "至少指定其中一个选项：类型，用户，主机" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "至少需要其中一个：类型，过滤器，子树，目标组，属性或它的成员" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "必须存在至少一个值等同规范主体名称" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "不支持属性\"%(attribute)s\"" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "不允许属性\"%s\"" - -msgid "attribute is not configurable" -msgstr "属性没有配置" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "属性和包含的属性是互斥的" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "属性和包含/排除属性是互斥的" - -msgid "automatically add the principal if it doesn't exist" -msgstr "若主体不存在，则自动添加" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "如果主体不存在则自动添加它（仅对服务主体）" - -msgid "automount key" -msgstr "自动挂载键" - -msgid "automount keys" -msgstr "自动挂载键" - -msgid "automount location" -msgstr "自动挂载位置" - -msgid "automount locations" -msgstr "自动挂载位置" - -msgid "automount map" -msgstr "自动挂载映射" - -msgid "automount maps" -msgstr "自动挂载映射" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "ber_init()失败，无效的控制？！\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "ber_scanf()失败，没有找到kvno？！\n" - -msgid "bind password" -msgstr "绑定密码" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "最多%(len)d个字符" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "最多%(maxlength)d字节" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "最多%(maxlength)d字符" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "最多%(maxvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "最多%(maxvalue)s" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "不能给一个特权添加带有绑定类型\"%(bindtype)s\"的权限\"%(perm)s\"" - -msgid "cannot be empty" -msgstr "不能为空" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "不能连接到'%(uri)s'：%(error)s" - -msgid "cannot delete global password policy" -msgstr "不能删除全局密码策略" - -msgid "cannot delete managed permissions" -msgstr "不能删除管理权限" +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "删除信任域\"%(value)s\"的信息" msgid "" "cannot delete root domain of the trust, use trust-del to delete the trust " "itself" msgstr "不能删除信任的根域，使用trust-del来删除它自己的信任" +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "信任域列表更新成功。使用trustdomain-find命令来列举它们。" + +#, fuzzy +#| msgid "IPA servers configured as AD trust agents" +msgid "Configure this server as a trust agent." +msgstr "IPA服务器配置为AD信任代理" + +msgid "Enable support for trusted domains for old clients" +msgstr "" + +#, fuzzy +#| msgid "not allowed to modify user entries" +msgid "not allowed to remotely add agent" +msgstr "不允许修改用户条目" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "已启用信任域\"%(value)s\"" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "信任的根域总是支持现有的信任" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "已禁用信任域\"%(value)s\"" + msgid "" "cannot disable root domain of the trust, use trust-del to delete the trust " "itself" msgstr "不能禁用信任的根域，使用trust-del来删除它自己的信任" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "不能打开配置文件%s\n" - -msgid "cannot rename managed permissions" -msgstr "不能重命名管理权限" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "不能为已分配一个特权的权限设置绑定类型" - -msgid "cannot specify both raw certificate and file" -msgstr "不能同时指定原始证书和文件" +#, fuzzy +#| msgid "Certificate Authority" +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "证书颁发机构" msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "不能同时指定完整的目标滤波器和额外的目标滤波器" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "不能stat()配置文件%s\n" - -msgid "change collided with another change" -msgstr "修改冲突" - -msgid "change to a POSIX group" -msgstr "改变一个POSIX组" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "改变以便从信任域中支持额外的非IPA成员" - -#, c-format -msgid "child exited with %d\n" -msgstr "结果以%d退出\n" - -msgid "cn is immutable" -msgstr "cn是不变的" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "待添加的以逗号分隔的HBAC服务组列表" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "待移除的以逗号分隔的HBAC服务组列表" - -msgid "comma-separated list of HBAC services to add" -msgstr "待添加的以逗号分隔的HBAC服务列表" - -msgid "comma-separated list of HBAC services to remove" -msgstr "待移除的以逗号分隔的HBAC服务列表" - -msgid "comma-separated list of groups to add" -msgstr "待添加的以逗号分隔的用户组列表" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "允许迁移的以逗号分隔的用户组列表" - -msgid "comma-separated list of groups to remove" -msgstr "待移除的以逗号分隔的用户组列表" - -msgid "comma-separated list of host groups to add" -msgstr "待添加的以逗号分隔的主机组列表" - -msgid "comma-separated list of host groups to remove" -msgstr "待移除的以逗号分隔的主机组列表" - -msgid "comma-separated list of hosts to add" -msgstr "待添加的以逗号分隔的主机列表" - -msgid "comma-separated list of hosts to remove" -msgstr "待移除的以逗号分隔的主机列表" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "以逗号分隔的信任域成员列表是“DOM\\名称”或“名称@域名”格式" - -msgid "comma-separated list of netgroups to add" -msgstr "待添加的以逗号分隔的网络组列表" - -msgid "comma-separated list of netgroups to remove" -msgstr "待移除的以逗号分隔的网络组列表" - -msgid "comma-separated list of permissions" -msgstr "以逗号分隔的权限列表" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "以逗号分隔的授权列表（读，写，添加，删除，全部）" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" -msgid "comma-separated list of privileges" -msgstr "以逗号分隔的权限列表" +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" -msgid "comma-separated list of privileges to add" -msgstr "待添加的以逗号分隔的权限列表" +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" -msgid "comma-separated list of privileges to remove" -msgstr "待移除的以逗号分隔的权限列表" +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" -msgid "comma-separated list of roles to add" -msgstr "待添加的以逗号分隔的角色列表" +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" -msgid "comma-separated list of roles to remove" -msgstr "待移除的以逗号分隔的角色列表" +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" -msgid "comma-separated list of sudo command groups to add" -msgstr "待添加的以逗号分隔的sudo命令组列表" +#, fuzzy +#| msgid "Display information about a named service delegation rule." +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "显示一个命名服务授权规则信息。" -msgid "comma-separated list of sudo command groups to remove" -msgstr "待移除的以逗号分隔的sudo命令组列表" +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" -msgid "comma-separated list of sudo commands to add" -msgstr "待添加的以逗号分隔的sudo命令列表" - -msgid "comma-separated list of sudo commands to remove" -msgstr "待移除的以逗号分隔的sudo命令列表" - -msgid "comma-separated list of users to add" -msgstr "待添加的以逗号分隔的用户列表" - -msgid "comma-separated list of users to exclude from migration" -msgstr "允许迁移的以逗号分隔的用户列表" - -msgid "comma-separated list of users to remove" -msgstr "待移除的以逗号分隔的用户列表" - -msgid "command" -msgstr "命令" +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" #, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "命令'%(name)s'最多能带%(count)d个参数" +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" #, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "命令'%(name)s'没有参数" +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "" -msgid "commands" -msgstr "命令" +#, fuzzy +#| msgid "Modify configuration options." +msgid "Certificate Identity Mapping configuration options" +msgstr "修改配置选项" -msgid "commands cannot be added when command category='all'" -msgstr "当命令类别='all'时命令不能被添加" +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Certificate Identity Mapping Global Configuration" +msgstr "修改证书配置文件配置。" -msgid "commands for controlling sudo configuration" -msgstr "控制sudo配置的命令" +#, fuzzy +#| msgid "Prompt to set the user password" +msgid "Prompt for the username" +msgstr "提示设置用户密码" -msgid "communication with CIFS server was unsuccessful" -msgstr "域CIFS服务器通信失败" +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" -msgid "configuration options" -msgstr "配置选项" +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Modify Certificate Identity Mapping configuration." +msgstr "修改证书配置文件配置。" + +#, fuzzy +#| msgid "Show the current configuration." +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "显示当前配置。" + +#, fuzzy +#| msgid "Certificate Authorities" +msgid "Certificate Identity Mapping Rules" +msgstr "证书颁发机构" + +#, fuzzy +#| msgid "Certificate Type" +msgid "Certificate Identity Mapping Rule" +msgstr "证书类型" + +#, fuzzy +#| msgid "Certificate profiles cannot be renamed" +msgid "Certificate Identity Mapping Rule name" +msgstr "证书配置文件不能被重命名" + +msgid "Certificate Identity Mapping Rule description" +msgstr "" + +msgid "Mapping rule" +msgstr "" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Rule used to map the certificate with a user entry" +msgstr "向用户条目中移除一个或多个证书" + +#, fuzzy +#| msgid "Matching Type" +msgid "Matching rule" +msgstr "匹配类型" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" + +msgid "Domain where the user entry will be searched" +msgstr "" + +#, fuzzy +#| msgid "Priority of the policy (higher number means lower priority" +msgid "Priority of the rule (higher number means lower priority" +msgstr "策略优先级（数字越大意味着优先级越低" + +#, fuzzy +#| msgid "Create a new service delegation rule." +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "创建一个新的服务授权规则。" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, fuzzy +#| msgid "Modify Certificate Profile configuration." +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "修改证书配置文件配置。" + +#, fuzzy, python-format +#| msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已修改配置文件\"%(value)s\"" + +#, fuzzy +#| msgid "Search for Certificate Profiles." +msgid "Search for Certificate Identity Mapping Rules." +msgstr "查找证书配置文件。" + +#, fuzzy, python-format +#| msgid "%(count)d service delegation rule matched" +#| msgid_plural "%(count)d service delegation rules matched" +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "已匹配%(count)d个服务授权规则" + +#, fuzzy +#| msgid "Display information about a named service delegation rule." +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "显示一个命名服务授权规则信息。" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "删除一个证书配置文件。" + +#, fuzzy, python-format +#| msgid "Deleted service delegation target \"%(value)s\"" +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已删除服务授权目标\"%(value)s\"" + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, fuzzy +#| msgid "Delete a Certificate Profile." +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "删除一个证书配置文件。" + +#, fuzzy, python-format +#| msgid "Modified Certificate Profile \"%(value)s\"" +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "已修改配置文件\"%(value)s\"" + +#, fuzzy +#| msgid "" +#| "Fetching domains from trusted forest failed. See details in the error_log" +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "从信任森林中获取域失败。在error_log中查看详细信息" + +#, fuzzy +#| msgid "" +#| "Fetching domains from trusted forest failed. See details in the error_log" +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "从信任森林中获取域失败。在error_log中查看详细信息" + +#, fuzzy +#| msgid "User login" +msgid "User logins" +msgstr "用户登录名" + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" + +#, fuzzy, python-format +#| msgid "%(count)d user matched" +#| msgid_plural "%(count)d users matched" +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "已匹配%(count)d个用户" #, python-format -msgid "container entry (%(container)s) not found" -msgstr "容器条目(%(container)s)没有找到" +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "不能给一个特权添加带有绑定类型\"%(bindtype)s\"的权限\"%(perm)s\"" -msgid "default CA ACL can be only disabled" -msgstr "默认的CA ACL只可以被禁用" +msgid "Privilege" +msgstr "特权" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "已添加特权\"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "已删除特权\"%(value)s\"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "已修改特权\"%(value)s\"" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "已匹配%(count)d个特权" + +msgid "" +"\n" +"Session Support for IPA\n" +msgstr "" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" + +msgid "Trusted to authenticate as user" +msgstr "信任用户认证" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "服务可以代表一个客户端进行认证" + +#, fuzzy +#| msgid "Malformed principal: '%(value)s'" +msgid "Malformed principal" +msgstr "有缺陷的主体：'%(value)s'" + +msgid "{} is required by the IPA master" +msgstr "" + +msgid "service" +msgstr "服务" + +msgid "services" +msgstr "服务" + +msgid "Service principal alias" +msgstr "服务主体别名" + +msgid "Base-64 encoded service certificate" +msgstr "Base-64编码的服务证书" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "NONE值不能与其他PAC类型相结合" + +msgid "Add a new IPA service." +msgstr "添加一个新的IPA服务。" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "已添加服务\"%(value)s\"" + +#, fuzzy +#| msgid "force principal name even if not in DNS" +msgid "force principal name even if host not in DNS" +msgstr "即使主体名在DNS中不存在，也强制添加它" + +#, fuzzy +#| msgid "Skip DNS check" +msgid "Skip host check" +msgstr "忽略DNS检查" + +#, fuzzy +#| msgid "Force server removal even if it does not exist" +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "强制服务器删除即使它不存在" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "" + +#, fuzzy +#| msgid "Add a new HBAC service." +msgid "Add a new SMB service." +msgstr "添加一个新的HBAC服务。" + +#, fuzzy +#| msgid "NetBIOS name" +msgid "SMB service NetBIOS name" +msgstr "NetBIOS名称" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "已删除服务\"%(value)s\"" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "已修改服务\"%(value)s\"" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "已匹配%(count)d个服务" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "已禁用服务\"%(value)s\"" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "已添加证书到服务主体\"%(value)s\"" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "已从服务主体\"%(value)s\"中删除证书" + +msgid "Add new principal alias to a service" +msgstr "向一个服务添加新的主体别名" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "已添加新的别名到服务主体\"%(value)s\"" + +msgid "Remove principal alias from a service" +msgstr "从一个服务中删除主体别名" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "已从服务主体\"%(value)s\"中删除别名" msgid "delegation" msgstr "授权" @@ -11161,606 +23587,885 @@ msgstr "授权" msgid "delegations" msgstr "授权" -msgid "delete" -msgstr "删除" +msgid "Delegations" +msgstr "授权" -msgid "description" -msgstr "描述" - -msgid "did not receive Kerberos credentials" -msgstr "没有收到Kerberos凭证" - -msgid "does not match any of accepted formats: " -msgstr "不匹配任何可接受的格式：" - -msgid "domain" -msgstr "域" - -msgid "domain is not configured" -msgstr "域没有配置" - -msgid "domain is not trusted" -msgstr "域是不受信任的" +msgid "Delegation" +msgstr "授权" #, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "域名'%(domain)s'应该规范化：%(normalized)s" - -msgid "domain name cannot be longer than 255 characters" -msgstr "域名不能长于255个字符" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "每个ACL元素必须以分好结束" - -msgid "empty DNS label" -msgstr "空的DNS标签" - -msgid "empty filter" -msgstr "空的过滤器" - -msgid "entries" -msgstr "条目" - -msgid "entry" -msgstr "条目" +msgid "Added delegation \"%(value)s\"" +msgstr "已添加授权\"%(value)s\"" #, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "XML-RPC传输数据整理错误：%(error)s" +msgid "Deleted delegation \"%(value)s\"" +msgstr "已删除授权\"%(value)s\"" #, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "服务器'%(server)s'错误：%(error)s" +msgid "Modified delegation \"%(value)s\"" +msgstr "已修改授权\"%(value)s\"" -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "执行has bad permissions失败，错误码%d\n" +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "已匹配%(count)d个授权" + +msgid "The deny type has been deprecated." +msgstr "阻止类型已被弃用。" + +msgid "HBAC rules" +msgstr "HBAC规则" + +msgid "HBAC Rules" +msgstr "HBAC规则" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "已添加HBAC规则\"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "已删除HBAC规则\"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "已修改HBAC规则\"%(value)s\"" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "已匹配%(count)d个HBAC规则" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "已启用HBAC规则\"%(value)s\"" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "已禁用HBAC规则\"%(value)s\"" + +msgid "Access time" +msgstr "访问时间" + +#, fuzzy +#| msgid "Add source hosts and hostgroups from a HBAC rule." +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "从一个HBAC规则中添加源主机和主机组。" msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "期望的格式： <0-255> <0-255> <0-65535> 每个长度是十六进制数字或连字符" - -msgid "file to store certificate in" -msgstr "存储证书文件" - -msgid "filename" -msgstr "文件名" - -msgid "filter and memberof are mutually exclusive" -msgstr "过滤器和它的成员是互斥的" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "标记必须是\"S\"，\"A\"，\"U\"或\"P\"中的一个" - -msgid "flags value: allowed interval 0-255" -msgstr "标记值：允许间隔0-255" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "即使NS记录不在DNS中，也强制创建它。" - -msgid "force delete of SYSTEM permissions" -msgstr "强制删除系统权限" - -msgid "force principal name even if not in DNS" -msgstr "即使主体名在DNS中不存在，也强制添加它" - -#, c-format -msgid "fork() failed\n" -msgstr "fork()失败\n" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "格式必须被指定为\"%(format)s\" %(rfcs)s" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +"\n" +"Simulate use of Host-based access controls\n" +"\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" +"\\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" -"正向\"%(fwzone)s\"无效因为在认证区域\"%(authzone)s\"缺少合适的NS记录。请添加" -"NS记录\"%(ns_rec)s\"到父区域\"%(authzone)s\"。" -msgid "gid cannot be set for external group" -msgstr "gid不能被设置为外部组" - -msgid "givenname is required" -msgstr "需要名字" - -msgid "group" -msgstr "组" - -msgid "group runAs" -msgstr "作为组来运行" - -msgid "group, permission and self are mutually exclusive" -msgstr "组，权限和它们自己是互斥的" - -msgid "groups" -msgstr "用户组" - -msgid "groups to add" -msgstr "待添加用户组" - -msgid "groups to remove" -msgstr "待移除的用户组" - -msgid "host" -msgstr "主机" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "主机类别不能设置为all'，虽然有允许主机" - -msgid "host group" -msgstr "主机组" - -msgid "host groups" -msgstr "主机组" - -msgid "host groups to add" -msgstr "待添加主机组" - -msgid "host groups to remove" -msgstr "待移除的主机组" - -msgid "hostgroup" -msgstr "主机组" +msgid "Unresolved rules in --rules" +msgstr "在--rules中不能解析的规则" #, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "主机组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" - -msgid "hostgroups" -msgstr "主机组" - -msgid "hostname" -msgstr "主机名" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "主机名包含空的标签（连续的点）" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配" - -msgid "hosts" -msgstr "主机" - -msgid "hosts cannot be added when host category='all'" -msgstr "当主机类别='all'时主机不能被添加" - -msgid "hosts cannot be set when type is 'group'" -msgstr "当类型是'group'是主机不能被设置" - -msgid "hosts to add" -msgstr "待添加主机" - -msgid "hosts to remove" -msgstr "待移除的主机" - -msgid "id range" -msgstr "id范围" - -msgid "id range type" -msgstr "id范围类型" - -msgid "incomplete time value" -msgstr "不完整的时间值" - -msgid "incorrect type" -msgstr "不正确的类型" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "无效的'%(name)s'：%(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "无效的DN（%s）" - -msgid "invalid IP address format" -msgstr "无效的IP地址格式" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "无效的IP地址版本(是%(value)d，必须是%(required_value)d)!" - -msgid "invalid IP network format" -msgstr "无效的IP网络格式" - -msgid "invalid Profile ID" -msgstr "无效的配置文件ID" - -msgid "invalid SSH public key" -msgstr "无效的SSH公钥" - -msgid "invalid address format" -msgstr "无效的地址格式" - -msgid "invalid attribute name" -msgstr "无效的属性名" - -msgid "invalid domain name" -msgstr "无效的域名" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "无效的域名：%s" - -msgid "invalid domain-name: not fully qualified" -msgstr "无效的域名：没有完全限制" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "无效的电子邮件格式：%(email)s" - -msgid "invalid escape code in domain name" -msgstr "无效的域名转换代码" - -msgid "invalid hostmask" -msgstr "无效的hostmask" - -msgid "invalid port number" -msgstr "无效的端口号" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab没有权限？\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytab没有找到\n" - -msgid "is required" -msgstr "是需要的" - -msgid "iterations value: allowed interval 0-65535" -msgstr "迭代值：允许间隔0-65535" - -msgid "kerberos ticket policy settings" -msgstr "kerberos票据策略设置" - -#, python-format -msgid "key %(key)s already exists" -msgstr "键 %(key)s 已存在" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "键名%(key)s已存在" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "左节点({host})不支持后缀'{suff}'" - -msgid "left node and right node must not be the same" -msgstr "左节点和右节点必须不同" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "左节点不是一个拓扑节点：%(leftnode)s" - -msgid "left or right node has to be specified" -msgstr "左或右节点没有被指定" - -msgid "limits exceeded for this query" -msgstr "超出该查询的限制" - -msgid "local domain range" -msgstr "本地域范围" - -msgid "location" -msgstr "位置" - -msgid "locations" -msgstr "位置" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "管理员%(manager)s没有找到" - -#, python-format -msgid "map %(map)s already exists" -msgstr "映射 %(map)s 已存在" - -msgid "maps not connected to /etc/auto.master:" -msgstr "映射未连接到/etc/auto.master：" - -msgid "match the common name exactly" -msgstr "完全匹配常用名" - -msgid "maximum serial number" -msgstr "最大序列号" - -#, python-format -msgid "member %s" -msgstr "成员%s" - -msgid "member Certificate Profile" -msgstr "成员证书配置文件" - -msgid "member HBAC service" -msgstr "成员HBAC服务" - -msgid "member HBAC service group" -msgstr "成员HBAC服务组" - -msgid "member group" -msgstr "成员组" - -msgid "member host" -msgstr "成员主机" - -msgid "member host group" -msgstr "成员主机组" - -msgid "member netgroup" -msgstr "成员网络组" - -msgid "member principal" -msgstr "成员主体" - -msgid "member privilege" -msgstr "成员特权" - -msgid "member role" -msgstr "成员角色" - -msgid "member service" -msgstr "成员服务" - -msgid "member service delegation target" -msgstr "成员服务授权目标" - -msgid "member sudo command" -msgstr "成员sudo命令" - -msgid "member sudo command group" -msgstr "成员sudo命令组" - -msgid "member user" -msgstr "成员用户" - -msgid "minimum serial number" -msgstr "最小序列号" - -msgid "missing base_id" -msgstr "缺少base_id" - -msgid "modifying primary key is not allowed" -msgstr "修改主键是不允许的" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "挂载点是相对于父映射的，不能以/开始" - -#, python-format -msgid "must be \"%s\"" -msgstr "必须是\"%s\"" - -#, python-format -msgid "must be '%(value)s'" -msgstr "必须是'%(value)s'" - -msgid "must be DNS name" -msgstr "必须是DNS名" - -msgid "must be Kerberos principal" -msgstr "必须是Kerberos主体" - -msgid "must be TRUE or FALSE" -msgstr "必须是TRUE或FALSE" - -msgid "must be True or False" -msgstr "必须是True或False" - -msgid "must be Unicode text" -msgstr "必须是Unicode文本" - -msgid "must be a decimal number" -msgstr "必须是一个十进制数" - -msgid "must be absolute" -msgstr "必须是绝对的" - -msgid "must be an integer" -msgstr "必须是一个整数" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "必须至少%(minlength)d字节" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "必须至少%(minlength)d字符" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "必须至少%(minvalue)d" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "必须至少%(minvalue)s" - -msgid "must be binary data" -msgstr "必须是二进制数据" - -msgid "must be datetime value" -msgstr "必须是时间值" - -msgid "must be dictionary" -msgstr "必须是字典" - -msgid "must be enclosed in parentheses" -msgstr "必须括在括号里" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "必须恰好是%(length)d字节" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "必须恰好是%(length)d字符" - -#, python-format -msgid "must be one of %(values)s" -msgstr "必须是%(values)s中的一个" - -msgid "must be relative" -msgstr "必须是相对的" - -msgid "must contain a tuple (list, dict)" -msgstr "必须包含一个元组（列表，字典）" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "必须已启用角色%(role)s" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "必须匹配模式\"%(pattern)s\"" - -msgid "netgroup" -msgstr "网络组" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "网络组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" - -msgid "netgroups" -msgstr "网络组" - -msgid "netgroups to add" -msgstr "待添加的网络组" - -msgid "netgroups to remove" -msgstr "待移除的网络组" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "没有命令也没有帮助主题'%(topic)s'" - -msgid "no modifications to be performed" -msgstr "没有修改" - -msgid "no trusted domain is configured" -msgstr "没有信任域配置" - -msgid "no trusted domain matched the specified flat name" -msgstr "没有信任域匹配指定的固定名" - -msgid "not allowed to modify group entries" -msgstr "不允许修改组条目" - -msgid "not allowed to modify user entries" -msgstr "不允许修改用户条目" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "不允许执行操作：%s" - -msgid "not allowed to perform server connection check" -msgstr "不允许执行服务器连接检查" - -msgid "not found" -msgstr "没有找到" - -msgid "not fully qualified" -msgstr "没有完全限制" - -msgid "not modifiable on managed permissions" -msgstr "管理权限没有修改" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "数字类'%(cls)s'不在允许的数字类列表中：%(allowed)s" - -msgid "number of passwords" -msgstr "密码数" - -#, python-format -msgid "objectclass %s not found" -msgstr "对象类%s没找到" - -msgid "one or more values to remove" -msgstr "待移除的一个或多个值" - -msgid "only \"ad\" is supported" -msgstr "仅支持\"ad\"" - -msgid "only available on managed permissions" -msgstr "仅在管理权限中可用" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "只允许字母，数字和%(chars)s。DNS标签不能以%(chars2)s开始或结束" - -msgid "only master zones can contain records" -msgstr "仅有主区域才可以包含记录" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "每个名称仅允许有一个CNAME记录（RFC 2136，第1.1.5节）" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "每个名称仅允许有一个DNAME记录（RFC 6672，第2.4节）" - -msgid "only one node can be specified" -msgstr "仅有一个节点可以被指定" +msgid "Access granted: %s" +msgstr "访问授权：%s" msgid "operation not defined" msgstr "操作没有定义" #, python-format -msgid "option was renamed; use %s" -msgstr "选项已被重命名；使用%s" +msgid "not allowed to perform operation: %s" +msgstr "不允许执行操作：%s" -msgid "options are not allowed" -msgstr "选项是不允许的" +msgid "No such virtual command" +msgstr "没有这样的虚拟命令" + +msgid "Member service groups" +msgstr "成员服务组" + +msgid "Member HBAC service groups" +msgstr "成员HBAC服务组" + +#, fuzzy +#| msgid "User ID overrides" +msgid "Member ID user overrides" +msgstr "用户ID覆盖" + +#, fuzzy +#| msgid "Indirect Member users" +msgid "Indirect Member ID user overrides" +msgstr "间接成员用户" + +msgid "Indirect Member permissions" +msgstr "间接成员权限" + +msgid "Indirect Member HBAC service" +msgstr "间接成员HBAC服务" + +msgid "Indirect Member HBAC service group" +msgstr "间接成员HBAC服务组" + +msgid "Invalid format. Should be name=value" +msgstr "无效的格式。应该是“名称=值”" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "IPA主主机不能被删除或禁用" + +msgid "entry" +msgstr "条目" + +msgid "entries" +msgstr "条目" + +msgid "Entry" +msgstr "条目" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "序号必须是唯一值（%(order)d已被%(rule)s使用）" - -#, c-format -msgid "out of memory\n" -msgstr "内存不足\n" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "区域外数据：记录名必须是区域或相对名的一个子域" +msgid "container entry (%(container)s) not found" +msgstr "容器条目(%(container)s)没有找到" #, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "覆盖参数和选项：%(names)s" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s：%(oname)s没有找到" #, python-format -msgid "owner %s" -msgstr "所有者%s" +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "名为\"%(pkey)s\"的%(oname)s已存在" -msgid "owner group" -msgstr "所有者用户组" +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "不支持属性\"%(attribute)s\"" + +#, fuzzy, python-format +#| msgid "attribute \"%s\" not allowed" +msgid "these attributes are not allowed: %(attrs)s" +msgstr "不允许属性\"%s\"" + +msgid "attribute is not configurable" +msgstr "属性没有配置" + +msgid "No such attribute on this entry" +msgstr "该条目没有这样的属性" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "重命名%(ldap_obj_name)s对象" + +msgid "the entry was deleted while being modified" +msgstr "正被修改的条目已被删除" + +#, python-format +msgid "%s" +msgstr "" + +#, python-format +msgid "%s to add" +msgstr "待添加的%s" + +#, python-format +msgid "%s to remove" +msgstr "待移除的%s" #, python-format msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "%(types)s记录的所有者不应该是一个通配符域名（RFC 4592 第四节）" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "查找有这些%(relationship)s %(ldap_object)s的%(searched_object)s。" -msgid "owner service" -msgstr "所有者服务" +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "查找没有%(relationship)s %(ldap_object)s的%(searched_object)s。" -msgid "owner user" -msgstr "所有者用户" +#, fuzzy, python-format +#| msgid "Added new aliases to user \"%(value)s\"" +msgid "added attribute value to entry %(value)s" +msgstr "已为用户\"%(value)s\"添加新别名" + +#, fuzzy, python-format +#| msgid "Removed aliases from user \"%(value)s\"" +msgid "removed attribute values from entry %(value)s" +msgstr "已从用户\"%(value)s\"中删除别名" + +msgid "one or more values to remove" +msgstr "待移除的一个或多个值" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"基类用户\n" +"\n" +"这包含了用户/计划用户常见的定义\n" + +msgid "must be TRUE or FALSE" +msgstr "必须是TRUE或FALSE" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" + +#, fuzzy +#| msgid "Password expiration" +msgid "User password expiration" +msgstr "密码过期" + +msgid "SMB logon script path" +msgstr "" + +#, fuzzy +#| msgid "%i profile added." +msgid "SMB profile path" +msgstr "%i配置文件已添加。" + +#, fuzzy +#| msgid "Home directory" +msgid "SMB Home Directory" +msgstr "主目录" + +#, fuzzy +#| msgid "Home directory base" +msgid "SMB Home Directory Drive" +msgstr "主目录" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "无效的电子邮件格式：%(email)s" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "管理员%(manager)s没有找到" + +#, fuzzy +#| msgid "file to store certificate in" +msgid "Issuer of the certificate" +msgstr "存储证书文件" + +#, fuzzy +#| msgid "File to store the certificate in." +msgid "Subject of the certificate" +msgstr "存储证书文件。" + +#, fuzzy +#| msgid "cannot be empty" +msgid "cannot have an empty subject" +msgstr "不能为空" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and certificate" +msgstr "不能同时指定原始证书和文件" + +#, fuzzy +#| msgid "cannot specify both raw certificate and file" +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "不能同时指定原始证书和文件" + +#, fuzzy +#| msgid "Add one or more certificates to the user entry" +msgid "Add one or more certificate mappings to the user entry." +msgstr "向用户条目中添加一个或多个证书" + +#, fuzzy, python-format +#| msgid "Added certificates to user \"%(value)s\"" +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, fuzzy +#| msgid "Remove one or more certificates to the user entry" +msgid "Remove one or more certificate mappings from the user entry." +msgstr "向用户条目中移除一个或多个证书" + +#, fuzzy, python-format +#| msgid "Removed certificates from user \"%(value)s\"" +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"删除证书" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" +"\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" + +msgid "must contain a tuple (list, dict)" +msgstr "必须包含一个元组（列表，字典）" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "已添加用户\"%(value)s\"" + +msgid "Default group for new users is not POSIX" +msgstr "新用户的默认组不是POSIX" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "已删除用户\"%(value)s\"" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s：用户已保存" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "已修改用户\"%(value)s\"" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "已恢复用户账户\"%(value)s\"" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "用户%s已是活跃的" + +#, fuzzy, python-format +#| msgid "Enabled user account \"%(value)s\"" +msgid "Staged user account \"%(value)s\"" +msgstr "已启用用户账户\"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "已禁用用户账户\"%(value)s\"" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "已启用用户账户\"%(value)s\"" + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "已解锁账户\"%(value)s\"" + +msgid "Failed logins" +msgstr "登录失败" + +msgid "Last successful authentication" +msgstr "上一次认证成功" + +msgid "Last failed authentication" +msgstr "上一次认证失败" + +msgid "Time now" +msgstr "当前时间" + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "%(host)s已失败：%(error)s" + +#, python-format +msgid "%(host)s failed" +msgstr "%(host)s已失败" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "账户已禁用：%(disabled)s" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"删除证书" + +msgid "Add new principal alias to the user entry" +msgstr "为用户条目添加新的主体别名" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加新别名" + +msgid "Remove principal alias from the user entry" +msgstr "从用户条目中删除主体别名" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "已从用户\"%(value)s\"中删除别名" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "所有的主服务器必须已启用角色%(role)s" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "必须已启用角色%(role)s" + +#, fuzzy +#| msgid "must be enclosed in parentheses" +msgid "must be enabled only on a single master" +msgstr "必须括在括号里" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" + +msgid "CIFS server denied your credentials" +msgstr "CIFS服务器阻止你的凭证" + +msgid "communication with CIFS server was unsuccessful" +msgstr "域CIFS服务器通信失败" + +msgid "AD domain controller" +msgstr "AD域控制器" + +msgid "unsupported functional level" +msgstr "不支持的功能级" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "AD域控制器抱怨通信序列。这可能意味着双方时间不同步，例如" + +msgid "Cannot find specified domain or server name" +msgstr "找不到指定的域或服务器名称" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "AD DC不能连接任何IPA域控制器。最有可能是一个DNS或者防火墙事件" + +msgid "At least the domain or IP address should be specified" +msgstr "至少应该指定域或IP地址" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message \"%(message)s" +"\" (both may be \"None\")" +msgstr "" +"CIFS服务器通信错误：代码\"%(num)s\"，消息\"%(message)s\"（两者都有可能没有任" +"何信息）" + +msgid "no trusted domain is configured" +msgstr "没有信任域配置" + +msgid "domain is not configured" +msgstr "域没有配置" + +msgid "SID is not valid" +msgstr "SID是无效的" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "SID不能完全匹配任何信任域的SID" + +msgid "SID does not match any trusted domain" +msgstr "SID不能匹配任何信任域" + +#, fuzzy +#| msgid "AD Trust setup" +msgid "Trust setup" +msgstr "AD信任设置" + +msgid "Our domain is not configured" +msgstr "我们的域没有配置" + +msgid "No trusted domain is not configured" +msgstr "信任域已配置" + +msgid "trusted domain object" +msgstr "信任域对象" + +msgid "domain is not trusted" +msgstr "域是不受信任的" + +msgid "no trusted domain matched the specified flat name" +msgstr "没有信任域匹配指定的固定名" + +msgid "trusted domain object not found" +msgstr "信任域对象没有找到" + +#, fuzzy +#| msgid "SID does not match any trusted domain" +msgid "Object does not belong to a trusted domain" +msgstr "SID不能匹配任何信任域" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "SSSD不能将对象解析成一个有效的SID" + +msgid "Ambiguous search, user domain was not specified" +msgstr "模糊查找，用户域没有指定" + +msgid "Trusted domain did not return a unique object" +msgstr "信任域没有返回一个唯一的对象" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "信任域没有为对象返回一个有效的SID" + +msgid "trusted domain user not found" +msgstr "信任域用户没有找到" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "不能检索信任域GC列表" + +msgid "CIFS credentials object" +msgstr "CIFS凭证对象" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "CIFS服务器%(host)s阻止你的凭证" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "不能和%(host)s建立LSA连接。CIFS服务器是否在运行？" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "IPA服务器和远程域不能共享相同的NetBIOS名：%s" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" +"IPA主服务器%(count)d次阻止来自AD DC的信任有效请求。最有可能是AD DC联系了一个" +"没有信任信息副本的副本。同时，请检查AD DNS能将%(records)s SRV记录解析到正确的" +"IPA服务器上。" + +#, fuzzy +#| msgid "Invalid credentials" +msgid "Credentials" +msgstr "无效的证书" + +msgid "Missing credentials for cross-forest communication" +msgstr "" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" + +msgid "Trusting forest" +msgstr "信任森林" + +msgid "Trusted forest" +msgstr "信任森林" + +msgid "Established and verified" +msgstr "已建立和验证" + +msgid "Waiting for confirmation by remote side" +msgstr "等待远程端的确认" + +msgid "Unknown" +msgstr "未知的" + +msgid "Non-Active Directory domain" +msgstr "非活动目录域" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "RFC4120-兼容的Kerberos域" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "不传递外部信任到另一个活动目录森林的域中" + +#, fuzzy +#| msgid "" +#| "Non-transitive external trust to a domain in another Active Directory " +#| "forest" +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "不传递外部信任到另一个活动目录森林的域中" + +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" +"\n" +"复制拓扑后缀'%(suffix)s'已失去连接：%(errors)s" + +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" +"\n" +"删除'%(hostname)s'导致在后缀'%(suffix)s'拓扑中失去连接：%(errors)s" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "拓扑不允许服务器%(server)s复制服务器：" + +msgid "Request must be a dict" +msgstr "请求必须是一个字典" + +msgid "Request is missing \"method\"" +msgstr "请求缺少\"method\"" + +msgid "Request is missing \"params\"" +msgstr "请求缺少\"params\"" msgid "params must be a list" msgstr "参数必须是一个列表" @@ -11774,451 +24479,93 @@ msgstr "params[0] (aka args)必须是一个列表" msgid "params[1] (aka options) must be a dict" msgstr "params[1] (aka options)必须是一个字典" -msgid "password" -msgstr "密码" +#, fuzzy, python-format +#| msgid "must be \"%s\"" +msgid "must equal %r" +msgstr "必须是\"%s\"" -msgid "password policies" -msgstr "密码策略" +msgid "Hello world" +msgstr "" -msgid "password policy" -msgstr "密码策略" +#, fuzzy, python-format +#| msgid "RADIUS proxy server name" +msgid "%s: RADIUS proxy server not found" +msgstr "RADIUS代理服务器名称" -msgid "password to use if not using kerberos" -msgstr "如果没有使用kerberos，则使用密码" +#, fuzzy, python-format +#| msgid "active user with name \"%(user)s\" already exists" +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "活跃用户名\"%(user)s\"已存在" -msgid "permission" -msgstr "权限" +#, fuzzy +#| msgid "must be at least %(minvalue)d" +msgid "must be at least 1" +msgstr "必须至少%(minvalue)d" -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "权限\"%(value)s\"已存在" +msgid "Out of memory\n" +msgstr "内存不足\n" -msgid "permissions" -msgstr "权限" +msgid "Warning unrecognized encryption type.\n" +msgstr "警告无法识别加密类型。\n" -msgid "preserve" -msgstr "保存" +msgid "Warning unrecognized salt type.\n" +msgstr "警告无法识别盐值类型。\n" -#, c-format -msgid "principal not found\n" -msgstr "主体没有找到\n" +msgid "Out of memory!?\n" +msgstr "内存不足！？\n" -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "在XML-RPC响应中找不到主体\n" +msgid "Enctype comparison failed!\n" +msgstr "加密类型比较失败！\n" -msgid "principal to add" -msgstr "待添加主体" +#, fuzzy +#| msgid "Password history size" +msgid "Password is too long!\n" +msgstr "密码历史大小" -msgid "principal to remove" -msgstr "待移除的主体" +msgid "Failed to create random key!\n" +msgstr "创建随机密钥失败！\n" -msgid "priority cannot be set on global policy" -msgstr "优先权布不能在本地策略上设置" +msgid "Failed to create key!\n" +msgstr "创建密钥失败！\n" -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "优先权必须是一个唯一值（(%(prio)d已被%(gname)s使用）" +msgid "Bad or unsupported salt type.\n" +msgstr "错误的或不支持的盐值类型。\n" -msgid "privilege" -msgstr "特权" +#, fuzzy, c-format +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "不能初始化ldap库！\n" -msgid "privileged group" -msgstr "特权组" +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "不能设置LDAP_OPT_PROTOCOL_VERSION\n" -msgid "privileged hostgroup" -msgstr "特权主机组" +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "不能设置LDAP_OPT_X_SASL_NOCANON\n" -msgid "privileged service delegation rule" -msgstr "特权服务授权规则" +#, fuzzy +#| msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "不能设置LDAP_OPT_X_SASL_NOCANON\n" -msgid "privileged service delegation target" -msgstr "特权服务授权目标" +#, fuzzy +#| msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "不能设置LDAP_OPT_X_SASL_NOCANON\n" -msgid "privileges" -msgstr "特权" - -msgid "privileges to add" -msgstr "待添加的特权" - -msgid "privileges to remove" -msgstr "待移除的特权" +#, fuzzy +#| msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "不能设置LDAP_OPT_PROTOCOL_VERSION\n" msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "配置文件类别不能设置为all'，虽然有允许配置文件" - -msgid "profiles cannot be added when profile category='all'" -msgstr "当配置文件类别='all'时配置文件不能被添加" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "pysss_murmur在服务器上不可用并没有提供base-id。" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "用EDNS0查询'%(owner)s %(rtype)s'：%(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "查询'%(owner)s %(rtype)s'：%(error)s" - -msgid "range exists" -msgstr "范围内存在" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "对象ID范围修改超出定义范围是不允许的" - -msgid "range type change" -msgstr "范围类型改变" - -#, c-format -msgid "read error\n" -msgstr "读取错误\n" - -#, c-format -msgid "realm not found\n" -msgstr "域找不到\n" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "域或UPN后缀覆盖信任域命名空间" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "记录'%(owner)s %(rtype)s'DNSSEC验证服务器 %(ip)s失败" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "请求失败HTTP状态%d" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "在XML-RPC响应中找不到结果\n" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "从服务器检索和打印所有属性。影响命令输出。" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "右节点({host})不支持后缀'{suff}'" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "右节点不是一个拓扑节点：%(rightnode)s" - -msgid "role" -msgstr "角色" - -msgid "roles" -msgstr "角色" - -msgid "roles to add" -msgstr "待添加角色" - -msgid "roles to remove" -msgstr "待移除角色" - -msgid "runAs groups" -msgstr "作为组来运行" - -msgid "runAs user" -msgstr "作为用户来运行" - -msgid "runAs users" -msgstr "作为用户来运行" - -#, python-format -msgid "salt value: %(err)s" -msgstr "盐值：%(err)s" - -msgid "search for POSIX groups" -msgstr "查找POSIX组" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "查找组，该组在信任域中支持额外的非IPA成员" - -msgid "search for managed groups" -msgstr "查找管理组" - -msgid "search for non-POSIX groups" -msgstr "查找非POSIX组" - -msgid "search for private groups" -msgstr "查找私有组" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "查询待移植对象的结果被服务器拦截；移植过程可能没有完成\n" - -msgid "seconds" -msgstr "秒" - -msgid "segment" -msgstr "段" - -msgid "segments" -msgstr "段" - -msgid "self service permission" -msgstr "自助服务权限" - -msgid "self service permissions" -msgstr "自助服务权限" - -msgid "server" -msgstr "服务器" - -msgid "server role" -msgstr "服务器角色" - -msgid "server roles" -msgstr "服务器角色" - -msgid "servers" -msgstr "服务器" - -msgid "service" -msgstr "服务" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "服务类别不能设置为all'，虽然有允许服务" - -msgid "service delegation rule" -msgstr "服务授权规则" - -msgid "service delegation rules" -msgstr "服务授权规则" - -msgid "service delegation target" -msgstr "服务授权目标" - -msgid "service delegation targets" -msgstr "服务授权目标" - -msgid "service delegation targets to add" -msgstr "待添加的服务授权目标" - -msgid "service delegation targets to remove" -msgstr "待移除的服务授权目标" - -msgid "services" -msgstr "服务" - -msgid "services cannot be added when service category='all'" -msgstr "当服务类别='all'时服务不能被添加" - -msgid "services to add" -msgstr "待添加服务" - -msgid "services to remove" -msgstr "待移除服务" - -msgid "setting Authoritative nameserver" -msgstr "设置权威命名服务器" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "不应该是一个通配符域名（RFC 4592 第四节）" - -msgid "skip reverse DNS detection" -msgstr "忽略反向DNS检测" - -msgid "sn is required" -msgstr "需要sn" - -msgid "stage user" -msgstr "计划用户" - -msgid "stage users" -msgstr "计划用户" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "主题alt名称类型%s禁止非用户主体" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "主题alt名称类型%s禁止用户主体" - -msgid "subtree and type are mutually exclusive" -msgstr "子树和类型是互斥的" - -msgid "sudo command" -msgstr "sudo命令" - -msgid "sudo command group" -msgstr "sudo命令组" - -msgid "sudo command groups" -msgstr "sudo命令组" - -msgid "sudo command groups to add" -msgstr "待添加的sudo命令组" - -msgid "sudo command groups to remove" -msgstr "待移除的sudo命令组" - -msgid "sudo commands" -msgstr "sudo命令" - -msgid "sudo commands to add" -msgstr "待添加的sudo命令" - -msgid "sudo commands to remove" -msgstr "待移除的sudo命令" - -msgid "sudo rule" -msgstr "sudo规则" - -msgid "sudo rules" -msgstr "sudo规则" - -msgid "suffix" -msgstr "后缀" - -msgid "suffixes" -msgstr "后缀" - -msgid "system ID View" -msgstr "系统ID视图" - -msgid "target and targetgroup are mutually exclusive" -msgstr "目标和目标组是互斥的" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "IPA服务器和远程域不能共享相同的NetBIOS名：%s" - -msgid "the certificate with serial number " -msgstr "证书编号" - -msgid "the entry was deleted while being modified" -msgstr "正被修改的条目已被删除" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "值不是\"YYYYMMDDHHMMSS\"时间格式" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "必须有至少一个目标条目说明符（例如：目标，目标过滤器，属性）" - -msgid "this option has been deprecated." -msgstr "该选项已被弃用。" - -msgid "this option is deprecated" -msgstr "该选项已被弃用" - -msgid "too many '@' characters" -msgstr "太多'@'字符" - -msgid "trust" -msgstr "信任" - -msgid "trust configuration" -msgstr "信任配置" - -msgid "trust domain" -msgstr "信任域" - -msgid "trust domains" -msgstr "信任域" - -msgid "trust type" -msgstr "信任类型" - -msgid "trusted domain object" -msgstr "信任域对象" - -msgid "trusted domain object not found" -msgstr "信任域对象没有找到" - -msgid "trusted domain user not found" -msgstr "信任域用户没有找到" - -msgid "trusts" -msgstr "信任" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "IPA对象类型（用户，用户组，主机，主机组，服务，网络组）" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "类型，过滤器，子树和目标组是互斥的" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "未知的命令'%(name)s'" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s上未知的错误%(code)d：%(error)s" - -msgid "unsupported functional level" -msgstr "不支持的功能级" - -msgid "unsupported trust type" -msgstr "不支持的信任类型" - -msgid "user" -msgstr "用户" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "用户%s已是活跃的" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "用户类别不能设置为all'，虽然有允许用户" - -msgid "users" -msgstr "用户" - -msgid "users and hosts cannot both be set" -msgstr "用户和主机不能被同时设置" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "当作为用户来运行或作为组来运行类别='all'时用户不能被添加" - -msgid "users cannot be added when user category='all'" -msgstr "当用户类别='all'时用户不能被添加" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "当类型是'hostgroup'是用户不能被设置" - -msgid "users to add" -msgstr "待添加用户" - -msgid "users to remove" -msgstr "待移除的用户" - -msgid "value" -msgstr "值" - -msgid "vault" -msgstr "库" - -msgid "vaultcontainer" -msgstr "库容器" - -msgid "vaultcontainers" -msgstr "库容器" - -msgid "vaults" -msgstr "库" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}：没有这样的属性" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}：角色没有找到" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" + +#, fuzzy +#| msgid "Unable to initialize ldap library!\n" +msgid "Unable to initialize STARTTLS session\n" +msgstr "不能初始化ldap库！\n" #~ msgid "Delete a CA." #~ msgstr "删除一个CA。"